<?xml version="1.0" encoding="UTF-8"?>
<otherdata xmlns="http://linux.duke.edu/metadata/other" packages="3710">
<package pkgid="c6ed76b67809c944c936ad5ff962104cca00602f70f7c623f1d7abd71b6895c4" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="99950f17b95f8db5c099a51bd0f75115c7dd4dec1594f4ae46d366d12b5dcda6" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="37f0000507f499646c66b46fd58d43e3a03099af548d3452a233dbbcfec74f71" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="2f7ded7d0993faa584576aa2c4c2cfac2ddbba497722897ee12ed05630d94ebe" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="b3fb685d6bcecdc1241b66f6cc11a3bc9e226b9b078ce54f9a5f5827131c286c" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="4ccf0d1f535bacb73bde2278b5ee99575d8693822b67326b53e2407442d7dd1a" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="e3560e8473a0e1d8555710ff9613f58c8265b36388aebabc67913785e8e94955" name="GraphicsMagick" arch="src">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="5bcc2ecf0dd4aca3c4abb7381954a9c1692b16b939cd856cb3cdf5c0fcecfa48" name="GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="60d00ec1cfd720e4c7d99dc0d5756eca5b1bf26e0b6f7ae2a79e7110a4719dca" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="3c8c97fddd1674819955ec6d3015a35203b1b04c200e0f97633d699dfd03b6fe" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="23c806e6fda185e9a42324e80b9c281aa5f81928d90a83abefc8278c61d6472d" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="3cd0294ee798c1f387d4ae51810132edfa3f8457fb827809c320b1136eb7a168" name="GraphicsMagick-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="115c1304cd3dbaf006f0006b0c4d64ecbadf57b0927baea9efe74d0e48a7a691" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="66a592933984874374716eaa397cf20770180b33a2eef266d366f82cfc889c13" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="c765f34dd57d37dc99d3b8b6b2e27eacf95808dd0a93b90a681f36981013069d" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="5b2e527bf7bd1623187fdfe985c3dcc96b83f1941d14c03003f36e4bc2b8354b" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="4c49c25e54741618064a9d5ba5225704bcedcddeae32489c053feb838aba3bee" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="83fbf9f5f139876d1fb2d47d5816202f3463cb611264cfb3677b47e662f4fc47" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="ec7c7a49b1390e43581e88d23f1025236b0ac012f18376f09b377072c39bfa92" name="ImageMagick" arch="src">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="db8fd1fbc395e12395ec1233995bffcd5d8b84dc32e2dcace572a14c500025c0" name="ImageMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="916af31aa3545dc5cb993cd538b8b45199c0efcdcf1ab25749c98cd87a26708e" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="e5d75b560237016bd3398f307843e0a3a653bb160226cd8b43687039e9ac45da" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="df5b23dfdd6165f1912f5ec09893d43bc01ca10f5dd673a58b71f1d572eff935" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="18b5fc06d2377bdbe62dd92ca6ac6b8ee4a2c9b7ec11e82a5f85eda8076e805c" name="ImageMagick-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="b15616391c79330d76f20908f983e045a291c3e0fc18ebf3d58668c300e5864b" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="09b028d6af35a95994c7c95633f5c121e13d66045d1b8a7dae5146ca66ee3e96" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="e2471ca198b11ce98c99d0fb8324cf079a937b278bed71ec8248af89f8a76069" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="9a518e787fa9e4a7e54690237f3b0815222d18106fa25c59b51d17a9c011813d" name="ImageMagick-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="e3658048366c0afb6e9f10c05e80e5fd3e7417c19366e227bb20f84f51299e22" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="5a8063c3de7ed15627b1c3f4b2768cc7d3b1f108e1def9157cda6c4b99581b91" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="a9250be90c255c506f95af8299489a0be36a3104d1f1f8d2a490acfd9e3761ee" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="a656d0281c6ce6517322398b85dfd23be2e6ac2db840e9edbcc9019faf3e101e" name="ImageMagick-doc" arch="noarch">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="3ebb6f0182fb740bf9a298020cf5c1b4ca059f060618d14834ff17e9b2a5653a" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="15447586d5d6e249e5bc8ee4989734663fb8da1035def6bea9ae7b8fbe428941" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="ba95ab8649ca07ed373c3e61743e22f6e3d634bdbb220a30389bd7f8cc79ccb8" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="5b795b321dfe8a5bc6ae8d4524dcd56bdc92fb1f8566e77b5aa84a678da11de0" name="ImageMagick-extra" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="2dbbbd7559697488ab3ac6541d2b6e59bc7881d0ef1e25b0538e5db3886945e5" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="19788e9d9bebf45ba319c928ae6f1c67944727e24db062ed83e3abc8e1c46704" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="aded07a84e650a0ac32b75c595cd66eda051c98b2f774125e96dedf7a0bee14c" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="510fc3916ecb186429ad0d4f6eea1b975ef45a688d6d43ea4f54dbdaff82d105" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="7a41baf89f4b312a77e67600d77c9fa84b5f73e785de303e96c8e4636b762401" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="8a358c3c9b7fb2e92f4a7758bb29db843400d7713bcc179b5b3dfe37e9beedbc" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="97a534ac92f30ff584d7d197f8e24d497497cb318d155f00a06efc80157fe47a" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="48472c2ad5cafd4918cb71f844b5e8d979ab0088c07a0fd56b137a3018ec7bf6" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="8c5258c63ce05622e9de8b4d4c69683ef429a7581870dba26f075455b09bc818" name="MozillaFirefox" arch="src">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="12d407090b12787a4f3877c17cd0bbf57d80fefb88dedd0e919f624a3c435bc2" name="MozillaFirefox" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="59c3b548738955733a63d0425911def09d1c4e1c4dcba4d9c700089dbe76de76" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="ba3719c1b3179a7cb1c857eda239d4ee00d121f82082799dfc92f2d4a5d7bfe6" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="2c43a21c10f849f3c0567dacefc1b2a037ae8f825c9c4c13d68e43d8651aa940" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="d460697d6accfa786b318c8d613e97376af35ce2d481dcffaccbf4d288266a41" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="2d15665545f7c65ad78fca227a6b7e4f9bed01a28414305f7d3a2a5ccf1a83d4" name="MozillaFirefox-branding-upstream" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="337df21d31ffadc26c0e84ce8fe73bdd8ee35514e448fd954499def1c12c1393" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="c0def2f6dbb68e33cd01abb0354980f439de8542a60c20256b20c745b1b001f1" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="dc67e9baaed65ab66f1ac8b098e3129d2d74971953d6af58aa0ddc3b4fe3cd85" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="0bf687c219c7ea9e58053851484e6aec70d67b5e3036d8f3c685bee20e9d1244" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="824d1963bdbaec1b2a5b1cdb03357252531ff77aae244ffcf9c6d2d28ad71b74" name="MozillaFirefox-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="26642300a624b4fa3427db5e0f2a6f54d506b369fc90480e858fe96c71b21411" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="d3832526e4ce9a46a83c125da0a30ef4b0192e69b530bfaa28926a9612f52086" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="fd48455cc4e3e911920526d28e8a32cc65cff1b312b0bbb26465ca2c6440852d" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="78dc7b400191dd99fa93594baee2718d70464b465aa42c68cc60721e1a70ad15" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="7d8a728a467c5cbdb1b6d8855b38001fe6460de193817b4685cdc82dff8f6d55" name="MozillaFirefox-devel" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="e5f6c69a497ecfdfb0adb33a7ef4f4c06c07b63f2381874e90602a1d19e6e1c9" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="cc95dab4b31abd350a4d0b7acd75a38e8db97bc1e76f513a97f95620ed769389" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="f0440d67c697941ade04f1de140b88767ab2e83cd731bbc6626eeca9a79d812e" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="b1b4b76b8274e1b430e3205dc0e86bb5f97e0ac93d330ae4fd0bf7cbc0fe6ee2" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="41f6d8545202260bb8c710597898f21236c4cd1f9917b4f0314622cfd3a037bf" name="MozillaFirefox-translations-common" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="127a2f83e48ecf12d9146acf51d1de5e5b93e07e0b91ad8f707d1d9fee2fa912" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0.1" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1516708800">- update to Firefox 58.0 (bsc#1077291)
  * Added Nepali (ne-NP) locale
  * Added support for form autofill for credit card
  * Optimize page load by caching JavaScript internal representation
  MFSA 2018-02
  * CVE-2018-5091 (bmo#1423086)
    Use-after-free with DTMF timers
  * CVE-2018-5092 (bmo#1418074)
    Use-after-free in Web Workers
  * CVE-2018-5093 (bmo#1415291)
    Buffer overflow in WebAssembly during Memory/Table resizing
  * CVE-2018-5094 (bmo#1415883)
    Buffer overflow in WebAssembly with garbage collection on
    uninitialized memory
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5100 (bmo#1417405)
    Use-after-free when IsPotentiallyScrollable arguments are freed
    from memory
  * CVE-2018-5101 (bmo#1417661)
    Use-after-free with floating first-letter style elements
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5105 (bmo#1390882)
    WebExtensions can save and execute files on local file system
    without user prompts
  * CVE-2018-5106 (bmo#1408708)
    Developer Tools can expose style editor information cross-origin
    through service worker
  * CVE-2018-5107 (bmo#1379276)
    Printing process will follow symlinks for local file access
  * CVE-2018-5108 (bmo#1421099)
    Manually entered blob URL can be accessed by subsequent private browsing tabs
  * CVE-2018-5109 (bmo#1405599)
    Audio capture prompts and starts with incorrect origin attribution
  * CVE-2018-5110 (bmo#1423275) (affects only OS X)
    Cursor can be made invisible on OS X
  * CVE-2018-5111 (bmo#1321619)
    URL spoofing in addressbar through drag and drop
  * CVE-2018-5112 (bmo#1425224)
    Extension development tools panel can open a non-relative URL in the panel
  * CVE-2018-5113 (bmo#1425267)
    WebExtensions can load non-HTTPS pages with browser.identity.launchWebAuthFlow
  * CVE-2018-5114 (bmo#1421324)
    The old value of a cookie changed to HttpOnly remains accessible to scripts
  * CVE-2018-5115 (bmo#1409449)
    Background network requests can open HTTP authentication in unrelated foreground tabs
  * CVE-2018-5116 (bmo#1396399)
    WebExtension ActiveTab permission allows cross-origin frame content access
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5118 (bmo#1420049)
    Activity Stream images can attempt to load local content through file:
  * CVE-2018-5119 (bmo#1420507)
    Reader view will load cross-origin content in violation of CORS headers
  * CVE-2018-5121 (bmo#1402368) (affects only OS X)
    OS X Tibetan characters render incompletely in the addressbar
  * CVE-2018-5122 (bmo#1413841)
    Potential integer overflow in DoCrypt
  * CVE-2018-5090
    Memory safety bugs fixed in Firefox 58
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- requires NSS 3.34.1
- requires rust 1.21
- removed obsolete patches:
  mozilla-bindgen-systemlibs.patch
  mozilla-bmo1360278.patch
  mozilla-bmo1399611-csd.patch
  mozilla-rust-1.23.patch
- rebased patches
- updated man-page</changelog>
  <changelog author="wr@rosenauer.org" date="1517227200">- update to Firefox 58.0.1
  MFSA 2018-05
  * Arbitrary code execution through unsanitized browser UI (bmo#1432966)
- use correct language packs
- readd mozilla-enable-csd.patch as it only lands for FF59 upstream
- allow larger number of nested elements (mozilla-bmo256180.patch)</changelog>
  <changelog author="fstrba@suse.com" date="1517918400">- Added patch:
  * mozilla-alsa-sandbox.patch: Fix bmo#1430274, ALSA sound (still
    or again?) not working in Firefox 58 due to sandboxing.</changelog>
  <changelog author="wr@rosenauer.org" date="1518177600">- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="astieger@suse.com" date="1518177601">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
</package>
<package pkgid="7ecd0d4e51104ac572ec5c8b1c12ea606f2ce6f95e515461d9bd74528a667ab0" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0.2" rel="lp150.3.6.1"/>
  <changelog author="astieger@suse.com" date="1518177600">- Mozilla Firefox 58.0.2:
  * Blocklisted graphics drivers related to off main thread painting
    crashes
  * Fix tab crash during printing
  * Fix clicking links and scrolling emails on Microsoft Hotmail
    and Outlook (OWA) webmail</changelog>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
</package>
<package pkgid="68d371eb4e2bc2a3e8ae6a76d5bf1788412f795996dab0c1d1e55daa55dd2cf5" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.1.0" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1520769600">- update to Firefox 59.0
  * Performance enhancements
  * Drag-and-drop to rearrange Top Sites on the Firefox Home page
  * added features for Firefox Screenshots
  * Enhanced WebExtensions API
  * Improved RTC capabilities
  MFSA 2018-06 (bsc#1085130)
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5128 (bmo#1431336)
    Use-after-free manipulating editor selection ranges
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5130 (bmo#1433005)
    Mismatched RTP payload type can trigger memory corruption
  * CVE-2018-5131 (bmo#1440775)
    Fetch API improperly returns cached copies of no-store/no-cache resources
  * CVE-2018-5132 (bmo#1408194)
    WebExtension Find API can search privileged pages
  * CVE-2018-5133 (bmo#1430511, bmo#1430974)
    Value of the app.support.baseURL preference is not properly sanitized
  * CVE-2018-5134 (bmo#1429379)
    WebExtensions may use view-source: URLs to bypass content restrictions
  * CVE-2018-5135 (bmo#1431371)
    WebExtension browserAction can inject scripts into unintended contexts
  * CVE-2018-5136 (bmo#1419166)
    Same-origin policy violation with data: URL shared workers
  * CVE-2018-5137 (bmo#1432870)
    Script content can access legacy extension non-contentaccessible resources
  * CVE-2018-5138 (bmo#1432624) (Android only)
    Android Custom Tab address spoofing through long domain names
  * CVE-2018-5140 (bmo#1424261)
    Moz-icon images accessible to web content through moz-icon: protocol
  * CVE-2018-5141 (bmo#1429093)
    DOS attack through notifications Push API
  * CVE-2018-5142 (bmo#1366357)
    Media Capture and Streams API permissions display incorrect origin
    with data: and blob: URLs
  * CVE-2018-5143 (bmo#1422643)
    Self-XSS pasting javascript: URL with embedded tab into addressbar
  * CVE-2018-5126
    Memory safety bugs fixed in Firefox 59
  * CVE-2018-5125
    Memory safety bugs fixed in Firefox 59 and Firefox ESR 52.7
- requires NSPR 4.18 and NSS 3.35
- requires rust &gt;= 1.22.1
- removed obsolete patches:
  mozilla-alsa-sandbox.patch
  mozilla-enable-csd.patch
  firefox-no-default-ualocale.patch
- removed l10n_changesets.txt since same information is now in
  Firefox source tree (updated create-tar.sh now requires jq)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
</package>
<package pkgid="b7ad3a3d953ce7217efe6867004d7182166e39ad5221247c36b7681550197748" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.0" rel="lp150.3.14.1"/>
  <changelog author="cgrobertson@suse.com" date="1521028800">- Added patch:
  * mozilla-bmo1005535.patch:
    Enable skia_gpu on big endian platforms.</changelog>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
</package>
<package pkgid="b2910406ae14db208e3f38c8518492eba57eec9c1fcf29ccd33e8b8f966ca90a" name="MozillaFirefox-translations-other" arch="x86_64">
  <version epoch="0" ver="60.2.1" rel="lp150.3.17.1"/>
  <changelog author="wr@rosenauer.org" date="1521201600">- update to Firefox 59.0.1 (bsc#1085671)
  MFSA 2018-08
  * CVE-2018-5146 (bmo#1446062)
    Vorbis audio processing out of bounds write
  * CVE-2018-5147 (bmo#1446365)
    Out of bounds memory write in libtremor
    (mozilla-bmo1446062.patch)</changelog>
  <changelog author="cgrobertson@suse.com" date="1521633600">- Added patches:
  * mozilla-i586-DecoderDoctorLogger.patch - bmo#1447070
    fixes non-unified build error
  * mozilla-i586-domPrefs.patch - DOMPrefs.h
    fixes 32bit build error</changelog>
  <changelog author="wr@rosenauer.org" date="1522152000">- update to Firefox 59.0.2
  * Invalid page rendering with hardware acceleration enabled (bmo#1435472)
  * Browser keyboard shortcuts (eg copy Ctrl+C) don't work on sites
    that use those keys with resistFingerprinting enabled (bmo#1433592)
  * High CPU / memory churn caused by third-party software on some
    computers (bmo#1446280)
  * Users who have configured an "automatic proxy configuration URL"
    and want to reload their proxy settings from the URL will find
    the Reload button disabled in the Connection Settings dialog when
    they select Preferences/Options&gt;Network Proxy&gt;Settings... (bmo#1445991)
  * URL Fragment Identifiers Break Service Worker Responses (bmo#1443850)
  * User's trying to cancel a print around the time it completes will
    continue to get intermittent crashes (bmo#1441598)
  MFSA 2018-10 (bsc#1087059)
  * CVE-2018-5148 (bmo#1440717)
    Use-after-free in compositor
- removed obsolete patch mozilla-bmo1446062.patch</changelog>
  <changelog author="schwab@suse.de" date="1522152001">- Reduce constraints on aarch64</changelog>
  <changelog author="badshah400@gmail.com" date="1522670400">- Add back mozilla-enable-csd.patch: New rebased version from
  Fedora for version 59.0.x.</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add 0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  in order to fix boo#1090362.</changelog>
  <changelog author="astieger@suse.com" date="1525176000">- Mozilla Firefox 59.0.3:
  * fixes for platforms other than GNU/Linux</changelog>
  <changelog author="wr@rosenauer.org" date="1525262400">- do not try CSD on kwin (boo#1091592)
- fix build in openSUSE:Leap:42.3:Update, use gcc7</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525348800">- Fix armv7 build by:
  * adding RUSTFLAGS="-Cdebuginfo=0"
  * updating _constraints for %arm</changelog>
  <changelog author="wr@rosenauer.org" date="1525694400">- update to Firefox 60.0esr
  * Added a policy engine that allows customized Firefox deployments
    in enterprise environments, using Windows Group Policy or a
    cross-platform JSON file
  * Applied Quantum CSS to render browser UI
  * Added support for Web Authentication, allowing the use of USB
    tokens for authentication to web sites
  * Locale added: Occitan (oc)
  MFSA 2018-11 (bsc#1092548)
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5157 (bmo#1449898)
    Same-origin bypass of PDF Viewer to view protected PDF files
  * CVE-2018-5158 (bmo#1452075)
    Malicious PDF can inject JavaScript into PDF Viewer
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5160 (bmo#1436117)
    Uninitialized memory use by WebRTC encoder
  * CVE-2018-5152 (bmo#1415644, bmo#1427289)
    WebExtensions information leak through webRequest API
  * CVE-2018-5153 (bmo#1436809)
    Out-of-bounds read in mixed content websocket messages
  * CVE-2018-5163 (bmo#1426353)
    Replacing cached data in JavaScript Start-up Bytecode Cache
  * CVE-2018-5164 (bmo#1416045)
    CSP not applied to all multipart content sent with
    multipart/x-mixed-replace
  * CVE-2018-5166 (bmo#1437325)
    WebExtension host permission bypass through filterReponseData
  * CVE-2018-5167 (bmo#1447969)
    Improper linkification of chrome: and javascript: content in
    web console and JavaScript debugger
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5169 (bmo#1319157)
    Dragging and dropping link text onto home button can set home page
    to include chrome pages
  * CVE-2018-5172 (bmo#1436482)
    Pasted script from clipboard can run in the Live Bookmarks page
    or PDF viewer
  * CVE-2018-5173 (bmo#1438025)
    File name spoofing of Downloads panel with Unicode characters
  * CVE-2018-5174 (bmo#1447080) (Windows-only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5175 (bmo#1432358)
    Universal CSP bypass on sites using strict-dynamic in their policies
  * CVE-2018-5176 (bmo#1442840)
    JSON Viewer script injection
  * CVE-2018-5177 (bmo#1451908)
    Buffer overflow in XSLT during number formatting
  * CVE-2018-5165 (bmo#1451452)
    Checkbox for enabling Flash protected mode is inverted in 32-bit
    Firefox
  * CVE-2018-5180 (bmo#1444086)
    heap-use-after-free in mozilla::WebGLContext::DrawElementsInstanced
  * CVE-2018-5181 (bmo#1424107)
    Local file can be displayed in noopener tab through drag and
    drop of hyperlink
  * CVE-2018-5182 (bmo#1435908)
    Local file can be displayed from hyperlink dragged and dropped
    on addressbar
  * CVE-2018-5151
    Memory safety bugs fixed in Firefox 60
  * CVE-2018-5150
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 52.8
- removed obsolete patches
  0001-Bug-1435695-WebRTC-fails-to-build-with-GCC-8-r-dmino.patch
  mozilla-bmo1005535.patch
- requires NSPR 4.19 and NSS 3.36.1
- requires rust 1.24 or higher
- use upstream source archive and detached signature for
  source verification</changelog>
  <changelog author="wr@rosenauer.org" date="1526040000">- correct buildconfig (source-stamp.txt) and update channel
  definition</changelog>
  <changelog author="pcerny@suse.com" date="1526299200">- parellelise locales building</changelog>
  <changelog author="wr@rosenauer.org" date="1526558400">- update to Firefox 60.0.1esr (bsc#1093767)
  * Avoid overly long cycle collector pauses with some add-ons installed
    (bmo#1449033)
  * After unckecking the "Sponsored Stories" option, the New Tab page
    now immediately stops displaying "Sponsored content" cards (bmo#1458906)
  * On touchscreen devices, fixed momentum scrolling on non-zoomable pages
    (bmo#1457743)
  * Use the right default background when opening tabs or windows in
    high contrast mode (bmo#1458956)
  * Restored translations of the Preferences panels when using a
    language pack (bmo#1461590)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1527076800">- Disable webrtc for aarch64 due to bmo#1434589
- Add patch to fix skia build on AArch64:
  * mozilla-fix-skia-aarch64.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1527336000">- fixed "open with" option under KDE (boo#1094747)
- workaround crash on startup on aarch64 (boo#1093059)
  (contributed by guillaume.gardet@arm.com)</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1528286400">- Add upstream patch to fix boo#1093059 instead of '-ffixed-x28'
  workaround:
  * mozilla-bmo1375074.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to Firefox 60.0.2esr
  * requires NSS 3.36.4
  MFSA 2018-14 (bsc#1096449)
  * CVE-2018-6126 (bmo#1462682)
    Heap buffer overflow rasterizing paths in SVG with Skia</changelog>
  <changelog author="wr@rosenauer.org" date="1529755200">- update to Firefox 60.1.0esr
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-12369 (bmo#1454909)
    WebExtension security permission checks bypassed by embedded experiments
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 60 and Firefox ESR 60.1
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- remove obsolete patches
  mozilla-enable-csd.patch
  mozilla-fix-skia-aarch64.patch
- do not disable system installed unsigned langpacks
  (mozilla-bmo1464766.patch)</changelog>
  <changelog author="security@suse.com" date="1536148800">- Mozilla Firefox 60.2.0esr:
  MFSA 2018-21 (bsc#1107343)
  * CVE-2018-12377 (bmo#1470260)
    Use-after-free in refresh driver timers
  * CVE-2018-12378 (bmo#1459383)
    Use-after-free in IndexedDB
  * CVE-2017-16541 (bsc#1066489, bmo#1412081)
    Proxy bypass using automount and autofs
  * CVE-2018-12376 (bmo#69309,bmo#69914,bmo#50989,bmo#80092,
    bmo#80517,bmo#81093,bmo#78575,bmo#71953,bmo#73161,bmo#66991,
    bmo#68738,bmo#83120,bmo#67363,bmo#72925,bmo#66577,bmo#67889,
    bmo#80521)
    Memory safety bugs fixed in Firefox 62 and Firefox ESR 60.2
- unfuzz mozilla-kde.patch</changelog>
  <changelog author="astieger@suse.com" date="1537531200">- Mozilla Firefox 60.2.1esr:
  MFSA 2018-23
  * CVE-2018-12385 (boo#1109363, bmo#1490585)
    Crash in TransportSecurityInfo due to cached data
  * CVE-2018-12383 (boo#1107343, bmo#1475775)
    Setting a master password did not delete unencrypted
    previously stored passwords
  * Fixed a startup crash affecting users migrating from older ESR
    releases
  * Clean up old NSS DB files after upgrading</changelog>
</package>
<package pkgid="278b797f74cce0933f447de5fdce6e2507ce92fb9a33d214ec71ee6e7d57d655" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="e95e4371ccad689bb04d7059c67a0d520d62516af467d0cc479d5222e74a7514" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="4f89c61ce6e0c920e9ddc73aca1e294d82bf46cc62de29b9ab59ff1f4b705e39" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="c2a5cf9e4e2d8bd6afe7297bcb1480707896270b53637df45be5cae342a0248e" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="60328c43d43a1c759228ff350cf419f78967dbe01e8c3cb50b71e5484104dd45" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="a3006d76c12428bdb9b4018cf05f6ea6f3a90bb74b04fc631ed81e13f2f5f3d3" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="44133180ec08259886c288c55bebd49eba5307ceb25c9817bbff4f4f62c16af8" name="MozillaThunderbird" arch="src">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="dbacbe11d06641c69cc304497178cd41e57abc3768a9a2f9b3d11869defbc49a" name="MozillaThunderbird" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="7e3e0ed32126a5b9a92ec317edd561c44dd3f27b643d1ed317af89355d407d66" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="aadbadeb323437e06da578b5fcbbf49fb064d3e7bbbc59ed87dcd4caf7060f8a" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="f6fdfc364699874f695c4a66e4fc59d655b9aedbce4745b3590ccfc3a57440e7" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="d082935e4395e298e0b3856e06551fb91ea9cc741c5e87261e31e8da90741fe3" name="MozillaThunderbird-buildsymbols" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="eb0ae6db16045cde92b66bf3780214b1c9a080bc79274a85c91fa3fecf947ddb" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="55f6eed609fc3f4bdaf313cd6a988562614dd0fac26de46e7e542ff4ae53657d" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="9e813b3f6f758aa5b917bb4db8372a2746cbb968ba2c84ae66a252427403bbc5" name="MozillaThunderbird-devel" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="6e31247f1982b4bf56c8ed6f26122880777493045bfe40b9f142edb0711d065b" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="62cac9bd5dd0b86636283bafd563d44a549c95b5da09c52b32488ecb087ca995" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="24741df7fcf32f3859e6e2c96c30bdeeda08154922191cfe126d9c92946d1aae" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="07040fb934a367b6f7d16620c18746e0ad3c6ae9649303b0103dcd0627d2b695" name="MozillaThunderbird-translations-common" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="3cb5b9fcfae39f53f374ae439b239d45bed8b6d6969c4ced94aed10043735728" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.8" rel="lp150.3.3.2"/>
  <changelog author="wr@rosenauer.org" date="1493640000">- update to Thunderbird 52.1.0
  * Background images not working and other issues related to
    embedded images when composing email have been fixed
  * Google Oauth setup can sometimes not progress to the next step
  * requires NSS &gt;= 3.28.4
- security fixes (boo#1035082), MFSA 2017-13
  * CVE-2017-5443 (bmo#1342661)
    Out-of-bounds write during BinHex decoding
  * CVE-2017-5429 (bmo#1341096, bmo#1342823, bmo#1343261, bmo#1348894,
    bmo#1348941, bmo#1349340, bmo#1350844, bmo#1352926, bmo#1353088)
    Memory safety bugs fixed in Firefox 53, Firefox ESR 45.9, and
    Firefox ESR 52.1
  * CVE-2017-5464 (bmo#1347075)
    Memory corruption with accessibility and DOM manipulation
  * CVE-2017-5465 (bmo#1347617)
    Out-of-bounds read in ConvolvePixel
  * CVE-2017-5466 (bmo#1353975)
    Origin confusion when reloading isolated data:text/html URL
  * CVE-2017-5467 (bmo#1347262)
    Memory corruption when drawing Skia content
  * CVE-2017-5460 (bmo#1343642)
    Use-after-free in frame selection
  * CVE-2017-5461 (bmo#1344380)
    Out-of-bounds write in Base64 encoding in NSS
  * CVE-2017-5449 (bmo#1340127)
    Crash during bidirectional unicode manipulation with animation
  * CVE-2017-5446 (bmo#1343505)
    Out-of-bounds read when HTTP/2 DATA frames are sent with incorrect data
  * CVE-2017-5447 (bmo#1343552)
    Out-of-bounds read during glyph processing
  * CVE-2017-5444 (bmo#1344461)
    Buffer overflow while parsing application/http-index-format content
  * CVE-2017-5445 (bmo#1344467)
    Uninitialized values used while parsing application/http-index-format
    content
  * CVE-2017-5442 (bmo#1347979)
    Use-after-free during style changes
  * CVE-2017-5469 (bmo#1292534)
    Potential Buffer overflow in flex-generated code
  * CVE-2017-5440 (bmo#1336832)
    Use-after-free in txExecutionState destructor during XSLT processing
  * CVE-2017-5441 (bmo#1343795)
    Use-after-free with selection during scroll events
  * CVE-2017-5439 (bmo#1336830)
    Use-after-free in nsTArray Length() during XSLT processing
  * CVE-2017-5438 (bmo#1336828)
    Use-after-free in nsAutoPtr during XSLT processing
  * CVE-2017-5437 (bmo#1343453)
    Vulnerabilities in Libevent library
  * CVE-2017-5436 (bmo#1345461)
    Out-of-bounds write with malicious font in Graphite 2
  * CVE-2017-5435 (bmo#1350683)
    Use-after-free during transaction processing in the editor
  * CVE-2017-5434 (bmo#1349946)
    Use-after-free during focus handling
  * CVE-2017-5433 (bmo#1347168)
    Use-after-free in SMIL animation functions
  * CVE-2017-5432 (bmo#1346654)
    Use-after-free in text input selection
  * CVE-2017-5430 (bmo#1329796, bmo#1337418, bmo#1339722, bmo#1340482,
    bmo#1342101, bmo#1344081, bmo#1344305, bmo#1344686, bmo#1346140,
    bmo#1346419, bmo#1348143, bmo#1349621, bmo#1349719, bmo#1353476)
    Memory safety bugs fixed in Firefox 53 and Firefox ESR 52.1
  * CVE-2017-5459 (bmo#1333858)
    Buffer overflow in WebGL
  * CVE-2017-5462 (bmo#1345089)
    DRBG flaw in NSS
  * CVE-2017-5454 (bmo#1349276)
    Sandbox escape allowing file system read access through file
    picker
  * CVE-2017-5451 (bmo#1273537)
    Addressbar spoofing with onblur event</changelog>
  <changelog author="wr@rosenauer.org" date="1494504000">- update to Thunderbird 52.1.1
  * fixed crash when compacting IMAP folder (boo#1038753)
  * Some attachments could not be opened or saved if the message
    body is empty
  * Unable to load full message via POP if message was downloaded
    partially (or only headers) before
  * Large attachments may not be shown or saved correctly if the
    message is stored in an IMAP folder which is not synchronized
    for offline use</changelog>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
</package>
<package pkgid="009a51702bee2c8a81cd6c816dca2be31f2dcfa18721bce3a4ea9b8b562d4870" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.9.0" rel="lp150.3.8.1"/>
  <changelog author="wr@rosenauer.org" date="1496318400">- explicitely optimize with -O2 for openSUSE &gt; 13.2/Leap 42 to work
  with gcc7 (boo#1040105, boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
</package>
<package pkgid="c8e98242dadf611327abf0e2a20d2c647cd482e4646b5156c086ba3380de0526" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="52.9.1" rel="lp150.3.11.1"/>
  <changelog author="wr@rosenauer.org" date="1496577600">- remove legacy -Os optimization breaking gcc7/i586 (boo#1042090)</changelog>
  <changelog author="wr@rosenauer.org" date="1497441600">- update to Thunderbird 52.2 (boo#1043960)
  * Embedded images not shown in email received from Hotmail/Outlook
    webmailer
  * Detection of non-ASCII font names in font selector
  * Attachment not forwarded correctly under certain circumstances
  * Multiple requests for master password when GMail OAuth2 is enabled
  * Large number of blank pages being printed under certain
    circumstances when invalid preferences were present
  * Messages sent via the Simple MAPI interface are forced to HTML
  * Calendar: Invitations can't be printed
  * Mailing list (group) not accessible from macOS or Outlook address book
  * Clicking on links with references/anchors where target doesn't
    exist in the message not opening in external browser
  MFSA 2017-17
  * CVE-2017-5472 (bmo#1365602)
    Use-after-free using destroyed node when regenerating trees
  * CVE-2017-7749 (bmo#1355039)
    Use-after-free during docshell reloading
  * CVE-2017-7750 (bmo#1356558)
    Use-after-free with track elements
  * CVE-2017-7751 (bmo#1363396)
    Use-after-free with content viewer listeners
  * CVE-2017-7752 (bmo#1359547)
    Use-after-free with IME input
  * CVE-2017-7754 (bmo#1357090)
    Out-of-bounds read in WebGL with ImageInfo object
  * CVE-2017-7756 (bmo#1366595)
    Use-after-free and use-after-scope logging XHR header errors
  * CVE-2017-7757 (bmo#1356824)
    Use-after-free in IndexedDB
  * CVE-2017-7778, CVE-2017-7778, CVE-2017-7771, CVE-2017-7772,
    CVE-2017-7773, CVE-2017-7774, CVE-2017-7775, CVE-2017-7776,
    CVE-2017-7777
    Vulnerabilities in the Graphite 2 library
  * CVE-2017-7758 (bmo#1368490)
    Out-of-bounds read in Opus encoder
  * CVE-2017-7763 (bmo#1360309)
    Mac fonts render some unicode characters as spaces (MacOS only)
  * CVE-2017-7764 (bmo#1364283)
    Domain spoofing with combination of Canadian Syllabics and other
    unicode blocks
  * CVE-2017-7765 (bmo#1273265)
    Mark of the Web bypass when saving executable files (Windows only)
  * CVE-2017-5470
    Memory safety bugs fixed in Firefox 54 and Firefox ESR 52.2
- requires NSS 3.28.5</changelog>
  <changelog author="wr@rosenauer.org" date="1498392000">- update to Thunderbird 52.2.1
  * Problems with Gmail fixed (folders not showing, repeated email
    download, etc.) introduced in version 52.2.0. (boo#1045895)</changelog>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
</package>
<package pkgid="821e54ad150aff2373133ff5e9bbea5889ee1dc620ed36143c82c9711a4d943a" name="MozillaThunderbird-translations-other" arch="x86_64">
  <version epoch="0" ver="60.0" rel="lp150.3.14.1"/>
  <changelog author="guillaume@opensuse.org" date="1498651200">- mozilla-disable-neon-option.patch has been dropped silently, so
  remove the --disable-neon option as it is not available anymore.</changelog>
  <changelog author="schwab@suse.de" date="1502280000">- mozilla-ucontext.patch: use ucontext_t instead of struct ucontext</changelog>
  <changelog author="wr@rosenauer.org" date="1502798400">- update to Thunderbird 52.3 (boo#1052829)
  Fixed issues:
  * Unwanted inline images shown in rogue SPAM messages
  * Deleting message from the POP3 server not working when maildir
    storage was used
  * Message disposition flag (replied / forwarded) lost when reply or
    forwarded message was stored as draft and draft was sent later
  * Inline images not scaled to fit when printing
  * Selected text from another message sometimes included in a reply
  * No authorisation prompt displayed when inserting image into email
    body although image URL requires authentication
  * Large attachments taking a long time to open under some circumstances
  security
  Security fixes from Gecko 52.3esr
  * CVE-2017-7798 (bmo#1371586, bmo#1372112)
    XUL injection in the style editor in devtools
  * CVE-2017-7800 (bmo#1374047)
    Use-after-free in WebSockets during disconnection
  * CVE-2017-7801 (bmo#1371259)
    Use-after-free with marquee during window resizing
  * CVE-2017-7784 (bmo#1376087)
    Use-after-free with image observers
  * CVE-2017-7802 (bmo#1378147)
    Use-after-free resizing image elements
  * CVE-2017-7785 (bmo#1356985)
    Buffer overflow manipulating ARIA attributes in DOM
  * CVE-2017-7786 (bmo#1365189)
    Buffer overflow while painting non-displayable SVG
  * CVE-2017-7753 (bmo#1353312)
    Out-of-bounds read with cached style data and pseudo-elements#
  * CVE-2017-7787 (bmo#1322896)
    Same-origin policy bypass with iframes through page reloads
  * CVE-2017-7807 (bmo#1376459)
    Domain hijacking through AppCache fallback
  * CVE-2017-7792 (bmo#1368652)
    Buffer overflow viewing certificates with an extremely long OID
  * CVE-2017-7804 (bmo#1372849)
    Memory protection bypass through WindowsDllDetourPatcher
  * CVE-2017-7791 (bmo#1365875)
    Spoofing following page navigation with data: protocol and modal alerts
  * CVE-2017-7782 (bmo#1344034)
    WindowsDllDetourPatcher allocates memory without DEP protections
  * CVE-2017-7803 (bmo#1377426)
    CSP containing 'sandbox' improperly applied
  * CVE-2017-7779
    Memory safety bugs fixed in Firefox 55 and Firefox ESR 52.3</changelog>
  <changelog author="dimstar@opensuse.org" date="1506600000">- Add alsa-devel BuildRequires: we care for ALSA support to be
  built and thus need to ensure we get the dependencies in place.
  In the past, alsa-devel was pulled in by accident: we
  buildrequire libgnome-devel. This required esound-devel and that
  in turn pulled in alsa-devel for us. libgnome is being fixed to
  no longer require esound-devel.</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- Mozilla Thunderbird 52.4.0 (bsc#1060445)
  * new behavior was introduced for replies to mailing list posts:
    "When replying to a mailing list, reply will be sent to address
    in From header ignoring Reply-to header". A new preference
    mail.override_list_reply_to allows to restore the previous behavior.
  * Under certain circumstances (image attachment and non-image
    attachment), attached images were shown truncated in messages
    stored in IMAP folders not synchronised for offline use.
  * IMAP UIDs &gt; 0x7FFFFFFF now handled properly
  Security fixes from Gecko 52.4esr
  * CVE-2017-7793 (bmo#1371889)
    Use-after-free with Fetch API
  * CVE-2017-7818 (bmo#1363723)
    Use-after-free during ARIA array manipulation
  * CVE-2017-7819 (bmo#1380292)
    Use-after-free while resizing images in design mode
  * CVE-2017-7824 (bmo#1398381)
    Buffer overflow when drawing and validating elements with ANGLE
  * CVE-2017-7805 (bmo#1377618) (fixed via NSS requirement)
    Use-after-free in TLS 1.2 generating handshake hashes
  * CVE-2017-7814 (bmo#1376036)
    Blob and data URLs bypass phishing and malware protection warnings
  * CVE-2017-7825 (bmo#1393624, bmo#1390980) (OSX-only)
    OS X fonts render some Tibetan and Arabic unicode characters as spaces
  * CVE-2017-7823 (bmo#1396320)
    CSP sandbox directive did not create a unique origin
  * CVE-2017-7810
    Memory safety bugs fixed in Firefox 56 and Firefox ESR 52.4</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Add explicit pkgconfig(gconf-2.0), pkgconfig(gobject-2.0),
  pkgconfig(gtk+-2.0), pkgconfig(gtk+-unix-print-2.0),
  pkgconfig(glib-2.0), pkgconfig(gobject-2.0) and
  pkgconfig(gdk-x11-2.0) BuildRequires: Previously pulled in by
  libgnomeui-devel, and is what configure really checks for.</changelog>
  <changelog author="wr@rosenauer.org" date="1511352000">- update to Thunderbird 52.5.0 (bsc#1068101)
  * Better support for Charter/Spectrum IMAP: Thunderbird will now
    detect Charter's IMAP service and send an additional IMAP select
    command to the server. Check the various preferences ending in
    "force_select" to see whether auto-detection has discovered this case.
  * In search folders spanning multiple base folders clicking on a
    message sometimes marked another message as read
  * IMAP alerts have been corrected and now show the correct server
    name in case of connection problems
  * POP alerts have been corrected and now indicate connection problems
    in case the configured POP server cannot be found
  MFSA 2017-26
  * CVE-2017-7828 (bmo#1406750. bmo#1412252)
    Use-after-free of PressShell while restyling layout
  * CVE-2017-7830 (bmo#1408990)
    Cross-origin URL information leak through Resource Timing API
  * CVE-2017-7826
    Memory safety bugs fixed in Firefox 57 and Firefox ESR 52.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512734400">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.</changelog>
  <changelog author="wr@rosenauer.org" date="1514030400">- update to Thunderbird 52.5.2
  * This releases fixes the "Mailsploit" vulnerability and other
    vulnerabilities detected by the "Cure53" audit
  MFSA 2017-30
  * CVE-2017-7845 (bmo#1402372)
    Buffer overflow when drawing and validating elements with ANGLE
    library using Direct 3D 9
  * CVE-2017-7846 (bmo#1411716, bsc#1074043)
    JavaScript Execution via RSS in mailbox:// origin
  * CVE-2017-7847 (bmo#1411708, bsc#1074044)
    Local path string can be leaked from RSS feed
  * CVE-2017-7848 (bmo#1411699, bsc#1074045)
    RSS Feed vulnerable to new line Injection
  * CVE-2017-7829 (bmo#1423432, bsc#1074046)
    Mailsploit part 1: From address with encoded null character is
    cut off in message header display</changelog>
  <changelog author="wr@rosenauer.org" date="1516795200">- update to Thunderbird 52.6 (bsc#1077291)
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, not working reliably: Content
    not found in base64-encode message parts, non-ASCII text not found
    and false positives found.
  * Defective messages (without at least one expected header) not shown
    in IMAP folders but shown on mobile devices
  * Calendar: Unintended task deletion if numlock is enabled
  * Mozilla platform security fixes
  MFSA 2018-04
  * CVE-2018-5095 (bmo#1418447)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-5096 (bmo#1418922)
    Use-after-free while editing form elements
  * CVE-2018-5097 (bmo#1387427)
    Use-after-free when source document is manipulated during XSLT
  * CVE-2018-5098 (bmo#1399400)
    Use-after-free while manipulating form input elements
  * CVE-2018-5099 (bmo#1416878)
    Use-after-free with widget listener
  * CVE-2018-5102 (bmo#1419363)
    Use-after-free in HTML media elements
  * CVE-2018-5103 (bmo#1423159)
    Use-after-free during mouse event handling
  * CVE-2018-5104 (bmo#1425000)
    Use-after-free during font face manipulation
  * CVE-2018-5117 (bmo#1395508)
    URL spoofing with right-to-left text aligned left-to-right
  * CVE-2018-5089
    Memory safety bugs fixed in Firefox 58 and Firefox ESR 52.6
- dropped obsolete mozilla-ucontext.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1521806400">- update to Thunderbird 52.7
  * Searching message bodies of messages in local folders, including
    filter and quick filter operations, did not find content in
    message attachments
  * Better error handling for Yahoo accounts
- The following security fixes are included as part of the mozilla
  platform. In general, these flaws cannot be exploited through
  email in the Thunderbird product because scripting is disabled
  when reading mail, but are potentially risks in browser or
  browser-like contexts (MFSA 2018-09, bsc#1085130, bsc#1085671):
  * CVE-2018-5127 (bmo#1430557)
    Buffer overflow manipulating SVG animatedPathSegList
  * CVE-2018-5129 (bmo#1428947)
    Out-of-bounds write with malformed IPC messages
  * CVE-2018-5144 (bmo#1440926)
    Integer overflow during Unicode conversion
  * CVE-2018-5146 (bmo#1446062)
    Out of bounds memory write in libvorbis
  * CVE-2018-5125 (bmo1416529,bmo#1434580,bmo#1434384,bmo#1437450,
    bmo#1437507,bmo#1426988,bmo#1438425,bmo#1324042,bmo#1437087,
    bmo#1443865,bmo#1425520)
    Memory safety bugs fixed in Firefox 59, Firefox ESR 52.7, and
    Thunderbird 52.7
  * CVE-2018-5145 (bmo#1261175,bmo#1348955)
    Memory safety bugs fixed in Firefox ESR 52.7 and Thunderbird
    52.7</changelog>
  <changelog author="ro@suse.de" date="1522152000">- Exclude bigendian archs for now, have not built
  since version 45.8.0
  ExcludeArch: ppc ppc64 s390 s390x</changelog>
  <changelog author="wr@rosenauer.org" date="1526731200">- update to Thunderbird 52.8 (bsc#1092548)
  MFSA 2018-13
  * CVE-2018-5183 (bmo#1454692)
    Backport critical security fixes in Skia
  * CVE-2018-5184 (bmo#1411592, bsc#1093152)
    Full plaintext recovery in S/MIME via chosen-ciphertext attack
  * CVE-2018-5154 (bmo#1443092)
    Use-after-free with SVG animations and clip paths
  * CVE-2018-5155 (bmo#1448774)
    Use-after-free with SVG animations and text paths
  * CVE-2018-5159 (bmo#1441941)
    Integer overflow and out-of-bounds write in Skia
  * CVE-2018-5161 (bmo#1411720)
    Hang via malformed headers
  * CVE-2018-5162 (bmo#1457721, bsc#1093152)
    Encrypted mail leaks plaintext through src attribute
  * CVE-2018-5170 (bmo#1411732)
    Filename spoofing for external attachments
  * CVE-2018-5168 (bmo#1449548)
    Lightweight themes can be installed without user interaction
  * CVE-2018-5174 (bmo#1447080) (Windows only)
    Windows Defender SmartScreen UI runs with less secure behavior
    for downloaded files in Windows 10 April 2018 Update
  * CVE-2018-5178 (bmo#1443891)
    Buffer overflow during UTF-8 to Unicode string conversion
    through legacy extension
  * CVE-2018-5185 (bmo#1450345)
    Leaking plaintext through HTML forms
  * CVE-2018-5150 (bmo#1388020,bmo#1433609,bmo#1409440,bmo#1448705,
    bmo#1451376,bmo#1452202,bmo#1444668,bmo#1393367,bmo#1411415,
    bmo#1426129)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 52.8 and
    Thunderbird 52.8</changelog>
  <changelog author="astieger@suse.com" date="1530446400">- Build from upstream source archive and verify source signature
  (boo#1085780)</changelog>
  <changelog author="wr@rosenauer.org" date="1530532800">- update to Thunderbird 52.9.0:
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12372 (bmo#1419417, bsc#1100082)
    S/MIME and PGP decryption oracles can be built with HTML emails
  * CVE-2018-12373 (bmo#1464667, bmo#1464056, bsc#1100079)
    S/MIME plaintext can be leaked through HTML reply/forward
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12374 (bmo#1462910, bsc#1100081)
    Using form to exfiltrate encrypted mail part by pressing enter in form field
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
  * Thunderbird will now prompt to compact IMAP folders even if the
    account is online
  * Option for not decrypting subordinate message parts that
    otherwise might reveal decryted content to the attacker.
    Preference mailnews.p7m_subparts_external needs to be set to
    true for added security.
  * Fix various problems when forwarding messages inline when using
    "simple" HTML view
- correct requires and provides handling (boo#1076907)
- reduce memory footprint with %ix86 at linking time via additional
  compiler flags (boo#1091376)</changelog>
  <changelog author="wr@rosenauer.org" date="1531224000">- update to Thunderbird 52.9.1
  * Deleting or detaching attachments corrupted messages under certain
    circumstances (bmo#1473893, bsc#1100780)</changelog>
  <changelog author="wr@rosenauer.org" date="1533297600">- update to Thunderbird 60.0:
  https://www.thunderbird.net/en-US/thunderbird/60.0/releasenotes/
  * Improved message handling and composing
  * Improved handling of message templates
  * Support for OAuth2 and FIDO U2F
  * Various Calendar improvements
  * Various fixes and changes to e-mail workflow
  * Various IMAP fixes
  * Native desktop notifications
- Security fixes which can not, in general, be exploited through
  email, but are potential risks in browser or browser-like contexts:
  MFSA 2018-19 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12361 (bmo#1463244)
    Integer overflow in SwizzleData
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed
    during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12371 (bmo#1465686)
    Integer overflow in Skia library during edge builder allocation
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-12367 (bmo#1462891)
    Timing attack mitigation of PerformanceNavigationTiming
  * CVE-2018-5187 (bmo#1461324,bmo#1414829,bmo#1395246,bmo#1467938,
    bmo#1461619,bmo#1425930,bmo#1438556,bmo#1454285,bmo#1459568,
    bmo#1463884)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, and
    Thunderbird 60
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 61, Firefox ESR 60.1, Firefox
    ESR 52.9, and Thunderbird 60
- requires NSPR 4.19 and NSS 3.36.4
- source archives are now signed directly
  (removed checksum signature check)
- imported patches from Firefox 60
  * mozilla-bmo1375074.patch
  * mozilla-bmo1464766.patch
  * mozilla-i586-DecoderDoctorLogger.patch
  * mozilla-i586-domPrefs.patch
- removed obsolete patches
  * mozilla-language.patch
  * tb-ssldap.patch
  * mozilla-develdirs.patch
- removed -devel subpackage as old-style extensions are mainly gone
- storing of remote content settings fixed (boo#1084603)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534334400">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="astieger@suse.com" date="1535198400">- remove non-free untar licenced code from distributed tarball</changelog>
</package>
<package pkgid="af5fd7b0ed9afab9498f038bb9e05ee1981afb35b641dd14066e79e3ff8565ad" name="Photini" arch="noarch">
  <version epoch="0" ver="2018.5.0" rel="lp150.2.3.1"/>
  <changelog author="aloisio@gmx.com" date="1487592000">- Initial package (version 2016.12.0)</changelog>
  <changelog author="aloisio@gmx.com" date="1487592001">- Minor change</changelog>
  <changelog author="adam.reichold@t-online.de" date="1493640000">- Bump to latest upstream version</changelog>
  <changelog author="aloisio@gmx.com" date="1493726400">- Update to version 2017.5
  * Migrate Bing map from v7 to v8 of Bing API.
  * Many other map improvements.
  * Time adjustment offset now includes time zone.</changelog>
  <changelog author="aloisio@gmx.com" date="1493726401">- Added multiple icon sizes</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Remove redundant filler words from description.</changelog>
  <changelog author="aloisio@gmx.com" date="1496404800">- Update to version 2017.6
  * Add location address metadata to map tabs.
  * Fix bug in Flickr uploader if user hasn't set a "buddy" icon.
  * Use OpenCage Data for OSM map search and address lookup.</changelog>
  <changelog author="aloisio@gmx.com" date="1502280000">- Update to version 2017.8
  * Use Exif/Xmp thumbnails instead of computing from image data.
  * Improved video file metadata reading.
  * Added context menu to choose one of them.
  * Added context menu to image selector.
  * Can regenerate thumbnail, including from video files.
- Disabled tests (none was actually being performed)</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to 2017.08.1
  * Added option to preserve file timestamps.
  * Added option to change copyright boilerplate text.
  * Added config file option to change application style.
  * Fix bug with importing files with spaces in their names.
  * Changed importer template marker from () to {}.</changelog>
  <changelog author="aloisio@gmx.com" date="1507032000">- Update to 2017.10.0
  * Use timezone metadata from some Canon cameras.
  * Make thumbnails 160x120 as specified by DCF.
  * Fix bug in localisation of uploader tabs.
  * Substantial rewrite of metadata handling.</changelog>
  <changelog author="aloisio@gmx.com" date="1512129600">- Update to 2017.12.0
  * Add 'rating' to descriptive tab.
  * Don't try to upload files over 1 GByte to Flickr.
  * Fix bug with thembnails of portrait format images.
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1518264000">- Update to 2018.2.0
  * All maps are faster and less buggy.</changelog>
  <changelog author="aloisio@gmx.com" date="1524657600">- Added Photini-PyQt5-libGL.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1524657601">- Added Photini-Bing-map.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1525176000">- Update to version 2018.5.0:
  * Improved calculation of "35mm equivalent" focal length.
  * Migrate spell check from PyEnchant to Gspell.
  * Use environment variable to set location of config file.
  * Copy more metadata to sidecar when it is created.
  * Fix problem with QtWebEngine and some PyQt versions.
  * Many other bug fixes and minor improvements.
- Dropped Photini-PyQt5-libGL.patch and Photini-Bing-map.patch
  (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1533643200">- Added missing runtime dependency (fixes boo#1103804)</changelog>
</package>
<package pkgid="3a4b865d91e33ff62629a77f5e2a6dc11bc97aab3fc7d45578e9c25786f5a4c5" name="Photini" arch="src">
  <version epoch="0" ver="2018.5.0" rel="lp150.2.3.1"/>
  <changelog author="aloisio@gmx.com" date="1487592000">- Initial package (version 2016.12.0)</changelog>
  <changelog author="aloisio@gmx.com" date="1487592001">- Minor change</changelog>
  <changelog author="adam.reichold@t-online.de" date="1493640000">- Bump to latest upstream version</changelog>
  <changelog author="aloisio@gmx.com" date="1493726400">- Update to version 2017.5
  * Migrate Bing map from v7 to v8 of Bing API.
  * Many other map improvements.
  * Time adjustment offset now includes time zone.</changelog>
  <changelog author="aloisio@gmx.com" date="1493726401">- Added multiple icon sizes</changelog>
  <changelog author="jengelh@inai.de" date="1493985600">- Remove redundant filler words from description.</changelog>
  <changelog author="aloisio@gmx.com" date="1496404800">- Update to version 2017.6
  * Add location address metadata to map tabs.
  * Fix bug in Flickr uploader if user hasn't set a "buddy" icon.
  * Use OpenCage Data for OSM map search and address lookup.</changelog>
  <changelog author="aloisio@gmx.com" date="1502280000">- Update to version 2017.8
  * Use Exif/Xmp thumbnails instead of computing from image data.
  * Improved video file metadata reading.
  * Added context menu to choose one of them.
  * Added context menu to image selector.
  * Can regenerate thumbnail, including from video files.
- Disabled tests (none was actually being performed)</changelog>
  <changelog author="aloisio@gmx.com" date="1503057600">- Update to 2017.08.1
  * Added option to preserve file timestamps.
  * Added option to change copyright boilerplate text.
  * Added config file option to change application style.
  * Fix bug with importing files with spaces in their names.
  * Changed importer template marker from () to {}.</changelog>
  <changelog author="aloisio@gmx.com" date="1507032000">- Update to 2017.10.0
  * Use timezone metadata from some Canon cameras.
  * Make thumbnails 160x120 as specified by DCF.
  * Fix bug in localisation of uploader tabs.
  * Substantial rewrite of metadata handling.</changelog>
  <changelog author="aloisio@gmx.com" date="1512129600">- Update to 2017.12.0
  * Add 'rating' to descriptive tab.
  * Don't try to upload files over 1 GByte to Flickr.
  * Fix bug with thembnails of portrait format images.
- Spec cleanup</changelog>
  <changelog author="aloisio@gmx.com" date="1518264000">- Update to 2018.2.0
  * All maps are faster and less buggy.</changelog>
  <changelog author="aloisio@gmx.com" date="1524657600">- Added Photini-PyQt5-libGL.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1524657601">- Added Photini-Bing-map.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1525176000">- Update to version 2018.5.0:
  * Improved calculation of "35mm equivalent" focal length.
  * Migrate spell check from PyEnchant to Gspell.
  * Use environment variable to set location of config file.
  * Copy more metadata to sidecar when it is created.
  * Fix problem with QtWebEngine and some PyQt versions.
  * Many other bug fixes and minor improvements.
- Dropped Photini-PyQt5-libGL.patch and Photini-Bing-map.patch
  (merged upstream)</changelog>
  <changelog author="aloisio@gmx.com" date="1533643200">- Added missing runtime dependency (fixes boo#1103804)</changelog>
</package>
<package pkgid="d6e9eacd0384f76cedf10e2725e7def196c69a8684889950cab1304d149cb7ec" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.11" rel="lp150.2.3.1"/>
  <changelog author="hschmidt@suse.com" date="1473768000">- Update to 0.2.40:
  - Update man page to include the --list-extensions option (bsc#998583)</changelog>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script.</changelog>
</package>
<package pkgid="72528b0ab110353750ecd41e2674fea9fdbf62ceaedf7e8ecada5afbd802479e" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.11" rel="lp150.2.3.1"/>
  <changelog author="hschmidt@suse.com" date="1473768000">- Update to 0.2.40:
  - Update man page to include the --list-extensions option (bsc#998583)</changelog>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script.</changelog>
</package>
<package pkgid="fca87ccf3c479c5bf8e91e3a02bf2fb804157f289ffda259991cb4bfa30a6bfd" name="SUSEConnect" arch="src">
  <version epoch="0" ver="0.3.11" rel="lp150.2.6.1"/>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
</package>
<package pkgid="d860adf1c5a4c5e0425068406b323551d3fada6360fd7f91e0a9cc05174491b6" name="SUSEConnect" arch="x86_64">
  <version epoch="0" ver="0.3.11" rel="lp150.2.6.1"/>
  <changelog author="thutterer@suse.com" date="1475755200">- Update to 0.2.41:
  - Better error message for --list-extensions on unregistered systems</changelog>
  <changelog author="thutterer@suse.com" date="1488542400">- Update to 0.2.42:
  - Better error message for network request failure (bsc#982630)
  - Fix error message for --product with malformed identifier (bsc#1018190)
  - Fix some errors and formatting in manpages and help output</changelog>
  <changelog author="ashaidurov@suse.com" date="1490097600">- Update to 0.2.43:
  - RPM spec fix for openSUSE:Factory rpmlint compliance (bsc#1028660)</changelog>
  <changelog author="andrei.shaidurov@suse.com" date="1493985600">- Update to 0.3.0:
  - Single product deactivation feature (fate#320572)</changelog>
  <changelog author="thutterer@suse.com" date="1496923200">- Update to 0.3.1:
  - Fix license auto-agree issue (bsc#1037783)
  - Add missing archs to SLE 12 SP3 build target</changelog>
  <changelog author="kpimenov@suse.com" date="1498478400">- Update to 0.3.2:
  - Fix --namespace parameter persistence (bsc#1044493)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1508155200">- Properly refresh zypper services when deactivating a product on SMT (bsc#1047153)</changelog>
  <changelog author="tschmidt@suse.com" date="1512648000">- Update to version 0.3.3:
  - Fix SLE15 build</changelog>
  <changelog author="tschmidt@suse.com" date="1513252800">- Update to version 0.3.4:
  - Packaging improvements (bsc#964013)</changelog>
  <changelog author="hschmidt@suse.com" date="1513598400">- Update to 0.3.5
  - Add YaST.system_offline_migrations</changelog>
  <changelog author="hschmidt@suse.com" date="1514462400">- Update to 0.3.6
  - Make target_base_product parameter mandatory.</changelog>
  <changelog author="fschueller@suse.com" date="1516276800">- Update to 0.3.7
  - virt-create-rootfs connects to SMT server without breaking (bsc#914297)</changelog>
  <changelog author="fschueller@suse.com" date="1516708800">- Remove unnecessary .gz files</changelog>
  <changelog author="fschueller@suse.com" date="1517313600">- Repackage gem</changelog>
  <changelog author="fschnizlein@suse.com" date="1520942400">- Update to 0.3.8
  - Fix list-extensions to show the full SLE 15 tree (bsc#1064264)
  - Enable automatic activation of recommended extensions/modules
  - Automatically deregister all installed extensions/modules when
    deregistering a system</changelog>
  <changelog author="wstephenson@suse.com" date="1522929600">- Update to 0.3.9
  - Enable access to package search via gem
  - Don't try to delete directory of nonexistent service files
    (bsc#1086420)</changelog>
  <changelog author="fschnizlein@suse.com" date="1524139200">- Update to 0.3.10
  - Fix rollback mechanism on SLE15 systems (bsc#1089320)</changelog>
  <changelog author="hschmidt@suse.com" date="1525694400">- Prevent the automatic registration of recommended products that
  are not mirrored by the registration proxy.</changelog>
  <changelog author="hschmidt@suse.com" date="1526472000">- Update to 0.3.11
- Add dependencies needed by the rmt-client-setup script. bsc#1093658</changelog>
  <changelog author="wstephenson@suse.com" date="1528200000">- Weaken dependencies of rmt-client-setup script to Recommends:
  (bsc#1094348)
- Enhance error message generation
- Add not supported operation exception to PackageSearch API</changelog>
</package>
<package pkgid="3a3e16856e7a3b19eed998c06259cf6cccc25a715a10f55fe752fe06ca4fa655" name="VirtualGL" arch="src">
  <version epoch="0" ver="2.5.2" rel="lp150.2.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="694ef90c5bcf5e161524b9fccf6d0fc04b7b1ad8b7639ab8a6b253e7a5cfca0c" name="VirtualGL" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="lp150.2.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="3d361535995972eadd99bccff7e7a882fd76df4e928ec6ac135c82eac549fafd" name="VirtualGL-32bit" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="lp150.2.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="a92982e8fa20991ecb188ca07a0676389ad45a0c5e52f7d8a8dc307559d13372" name="VirtualGL-devel" arch="x86_64">
  <version epoch="0" ver="2.5.2" rel="lp150.2.3.1"/>
  <changelog author="bumblebee-project@hotmail.com" date="1310385600">- Initial package</changelog>
  <changelog author="bumblebee-project@hotmail.com" date="1325246400">- Update to 2.3</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1346932800">- Update to 2.3.1</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1351512000">- Update to 2.3.2</changelog>
  <changelog author="arnaldo.coelho@gmail.com" date="1385553600">- Update to 2.3.3</changelog>
  <changelog author="tchvatal@suse.com" date="1391774400">- Use baselibs.conf
- Cleanup the spec to use suse macros
- Sort out dependencies and use system shared libjpeg-turbo</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- No need to have different name for glxspheres on 64 and 32b.</changelog>
  <changelog author="tchvatal@suse.com" date="1392033600">- Require 32b libturbojpeg0 on the 32bit binary.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Update license to WXwindows</changelog>
  <changelog author="tchvatal@suse.com" date="1404216001">- Mention baselibs.conf in spec file</changelog>
  <changelog author="dvaleev@suse.com" date="1408622400">- Extend 64bit conditions to s390x ppc64 ppc64le aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1409313600">- Version bump to beta1 of 2.4 (2.3.90)
- Fix building with -Wl,-z,now and no-undefined
  * VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1440763200">- Update to 2.4.1:
  * Various bugfixes not mentioned on changes
  * Refresh VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1441108800">- Add proper wxwidgets license string</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1466078400">- new gcc6_literal_suffixes.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1466078401">- Version update to 2.5 release
  * See upstream changelog for details
  * Mostly removal of compat for pre-VirtualGL namespace
- Refresh patch VirtualGL-link-libs.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1472040000">- Fix bnc#993645 as-needed eating symbols needed by this lib
  * virtualgl-nodl.patch
- Use system xcb headers
- Rename glxinfo2 to vglxinfo, sounds bit better and more descriptive</changelog>
  <changelog author="tchvatal@suse.com" date="1512388800">- Version update 2.5.2:
  * Various compat fixes all around
- Remove merged gcc6_literal_suffixes.patch
- Refresh VirtualGL-link-libs.patch and virtualgl-nodl.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1512388801">- Disable ssl feature as we can tunnel via ssh and the openssl-1.1
  is not compatible at all currently</changelog>
  <changelog author="tchvatal@suse.com" date="1529409600">- Do not provide the env files which change the preload order
  bsc#1097210</changelog>
</package>
<package pkgid="e029c037507dc490e6840e1a1ec86640e804b4b2eeb52ab733e0d17b0daef868" name="ant" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="d510d1e0dc5922dca0d7f0ce697eec6346fbfca6a62350e0c5f41e226404de7b" name="ant" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="ae0295f31c5a75f8e0a505ec8e89e938d470b673f43ffa3907d878e33c521ab7" name="ant-antlr" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="dd1792efe745da78f4b573120a6c5bd674e5cbd60e2d277658d3d7771b3a6943" name="ant-antlr" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="9b7b5fabe99cb5d0bd56e5234fa8fa60e540dd3c4d34b4893e77510f863dd873" name="ant-apache-bcel" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="1f454be8741cbe27bd08017c7c2dfdda8e4523a1f250d19f373a64ba90ca10d7" name="ant-apache-bsf" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="79c0cf975ff68c2f63488a01aad6698c11a177485d1902c2f0465a772cfb00ae" name="ant-apache-log4j" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="ef490cfa1a8e96d5767634e6ce5f1471bd781218162bfa7567f9e954cd1ac970" name="ant-apache-oro" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="2f1cf778639dd448f1e1cc7bc155791bea193d587ff458eb063368d6d4b44ec9" name="ant-apache-regexp" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="b4a5c7df0f20ab97eea7a559b1db76456443b3dee622639191177b877e930926" name="ant-apache-resolver" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="2bfed0307344cf79b5c15f8458943710c23507e7cd5bfcd14b6f7647a9785cf7" name="ant-apache-xalan2" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="1e0f908f1f9202dd95a8b7549d28ced643d6e5dd8c0038fa420d9360d97f4ccf" name="ant-commons-logging" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="55eac9ad46045800a56e4ef664b864cfbde62c8bbbcd112305e3d86812b58c49" name="ant-commons-net" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="c937170659061b0d45c15e7df3c58196b15198d31bc4f3474f5f8735ee1cc45e" name="ant-javamail" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="64a35933181fc381ef487b6e4c9f88529b760be5528bec35a608ce327c0e6f35" name="ant-jdepend" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="d5cfbbdc6a788d1e65be121ba181872494e1eb025c1c953a6989ac94296603fd" name="ant-jmf" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="051b9815af78cf9f108fc72a2e1ccf0b38deb6603050b9fd64b6a22a4e7aa361" name="ant-jsch" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="4da9d6f59e1e88719b17b39f9afa48f362f864e22aec21fa48e104580580fb13" name="ant-junit" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="09c178cae32131f3133108089e09fa4330a88218949c3b61a27f0a9cf4db9708" name="ant-junit" arch="src">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="0996eaf26e8eb59a5ad391151ed63b2564be37abdda3219bd31ffc1e4a5bdede" name="ant-manual" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="716ed284ce533d28822f6feafdd66633a3bb292858aaadfe87dbd08e1bcc6035" name="ant-scripts" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="d04a06101e7e9daaa4c6a6004b10e550633569fbe3fe03a2a365e71916f9c51c" name="ant-swing" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
  <changelog author="jsikes@suse.de" date="1534420800">- Add security patch to handle malformed zip file paths bsc#1100053:
  * apache-ant-unzip-path.patch
  * CVE-2018-10886</changelog>
</package>
<package pkgid="e2a7c09bed330910bfbb89a47642d24e09f156682778f4069da94822442761cc" name="ant-testutil" arch="noarch">
  <version epoch="0" ver="1.9.10" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="jengelh@inai.de" date="1434888000">- Do better quoting to get better error messages when it fails</changelog>
  <changelog author="tchvatal@suse.com" date="1438084800">- Sync the changes files among the subpkgs
- Version bump to 1.9.6:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1438171200">- Add xalan-j2-serializer to ant-antlr requirements</changelog>
  <changelog author="opensuse@dstoecker.de" date="1452859200">- junit4 test did not work (bnc#915686)</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1486987200">- Add profile.d scripts to set ANT_HOME</changelog>
  <changelog author="tchvatal@suse.com" date="1487592000">- Revert the previous change as it broke the build of most java
  software stack</changelog>
  <changelog author="bwiedemann@suse.de" date="1494244800">- Add reproducible.patch to allow reproducible builds of ant itself
  and packages built with ant like jcodings</changelog>
  <changelog author="bwiedemann@suse.com" date="1494244801">- Version bump to 1.9.9:
  * Read WHATSNEW file for full changelist</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Disable javadoc completely it is on the web in much better form
- Remove if0 conditions
- Remove patch apache-ant-old-gcj-build.patch for sle11 and unused
- Fix build with split javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1496232000">- Fix bootstrap to avoid new cycle bsc#1041966</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Do not generate poms on ant core packages to reduce deps and
  allow bootstrap</changelog>
  <changelog author="fstrba@suse.com" date="1504699200">- Added patch:
  * apache-ant-1.9.9-sourcetarget.patch
    + Change java source and target versions to 1.6 to allow build
    with jdk9
- For non-boostrap builds require java-devel &gt;= 1.6</changelog>
  <changelog author="fstrba@suse.com" date="1505390400">- Allow bootstrapping with something else then
  java-1_5_0-gcj-compat, but still require
  java-1_5_0-gcj-compat-devel
- Added patch:
  * apache-ant-bootstrap.patch
  - Add -sourcepath option to fix build breakages with Eclipse
    Compiler for Java(tm)</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fstrba@suse.com" date="1507118400">- Remove dependency on java-1_5_0-gcj-compat-devel and build even
  the bootstrap package with java source and target 1.6</changelog>
  <changelog author="bwiedemann@suse.com" date="1508846400">- Add reproducible-build-date.patch to allow to have fixed build dates
  to make other packages build more reproducibly</changelog>
  <changelog author="jengelh@inai.de" date="1509192000">- Simply use find -delete over xargs.
- Make description neutral.</changelog>
  <changelog author="tchvatal@suse.com" date="1519300800">- Update to 1.9.10:
  * Various fixes for java10
  * Small fixes all around
- Remove merged patch reproducible.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519300801">- Add patch to run scripts with python3 if applicable bsc#1082202:
  * ant-python3.patch</changelog>
</package>
<package pkgid="bcd7c975fce67863541cbc0923ca27817b0171ecde6e56257de68aeb29f8fc8a" name="apache-pdfbox" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
</package>
<package pkgid="2f265a36446e564198d4b35440389fda057489849e213407999772c13f215325" name="apache-pdfbox" arch="src">
  <version epoch="0" ver="1.8.12" rel="lp150.4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
</package>
<package pkgid="a59f720645b3cac109a8011c434e03e512fb32b330a06751d0126883358c4337" name="apache-pdfbox-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.12" rel="lp150.4.3.1"/>
  <changelog author="fvogt@suse.com" date="1457006400">- Initial package
- Only fontbox and jempbox are built</changelog>
  <changelog author="fvogt@suse.com" date="1457352000">- Enable javadoc building and packaging</changelog>
  <changelog author="fvogt@suse.com" date="1457352001">- Drop junit and javapackages-tools Requires</changelog>
  <changelog author="fvogt@suse.com" date="1466078400">- Update to version 1.8.12
  - CVE-2016-2175 (pdfbox only, which isn't build by this spec)</changelog>
  <changelog author="sknorr@suse.com" date="1488801600">- Switch between maven-metadata/maven-fragments as appropriate
  for SLE/openSUSE (FATE#322405)</changelog>
  <changelog author="sknorr@suse.com" date="1490011200">- Needed as a dependency for FOP 2.1 (FATE#322405)</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Added patches:
  * pdfbox-1.8.12-bouncycastle.patch
    + Fix build of javadoc against bouncycastle API &gt;= 1.4.7
  * pdfbox-1.8.12-sourcetarget.patch
    + Make java source and target level ant properties
    + Leave the default 1.5
- Specify java source and target level 1.6 in order to allow
  building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1506686400">- Don't condition the maven defines on release version, but on
  _maven_repository being defined</changelog>
  <changelog author="fvogt@suse.com" date="1530532800">- Add patch to fix infinite loop while parsing files, leading to OOM
  (CVE-2018-8036,bsc#1099721):
  * fix-infinite-loop.patch
- Use %license</changelog>
</package>
<package pkgid="a228c9e9abfa113542a4efe6560e8b80a2b664ac489d06cab2c578a2333324d3" name="apache2" arch="src">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="8602c2c7971194be1856fcd4b15d1723a0d4c23f786d2531568444b1b8b16bb0" name="apache2" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="654300d749bd3422af854e71fbc6a0d0600040e31b6f36b273a971cbf65866ef" name="apache2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="079b02ba05a4591cd3d1ad76240e11bfb542e9ef636cf65f8fb9d95359cf2e57" name="apache2-doc" arch="noarch">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="1371ea2d0d57201fb01f403f4e6ae9df68aa7d915930822f095fc351f3a40151" name="apache2-event" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="e1e75bfb639e24d83b89933ae948fb161ee7b624ec29332cdda6f86d67bb3b27" name="apache2-example-pages" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="ae4e8930fb88ce3bccf11111b8702bfe93501a44dd295236fc8e4cc5f74bb4db" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="9b68f8fdb789bbe5714170b7d832e8d71454fc07228762348c01cc510d0725c6" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="6aad8b22696f9e5190c19714278693f2b32e4d4d55cbaaedf24ad00ce9f2296b" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="b8dfae147a9df2c774e7e52f8cc3f4f009986176b39b8b282b3451e5a45c967b" name="apache2-mod_php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="f624c88c6b6a49fb9b6e18becef053ca3e0347e72a5a5fd88ccd911880379dcd" name="apache2-prefork" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="5664db4cb7e65dc0c6419d83a1b8f2c70de4d925671042a5eaa0a4d2029932f2" name="apache2-utils" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="1aea06d977e1baa97b3fe27bdde3aade6886ab79f4a7e8738de2749a66318cfb" name="apache2-worker" arch="x86_64">
  <version epoch="0" ver="2.4.33" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1507204800">- suexec binary moved to main package [bsc#1054741]</changelog>
  <changelog author="pgajdos@suse.com" date="1507291200">- updated to 2.4.28:
  * ) SECURITY: CVE-2017-9798 (cve.mitre.org)
    Corrupted or freed memory access. &lt;Limit[Except]&gt; must now be used in the
    main configuration file (httpd.conf) to register HTTP methods before the
    .htaccess files.  [Yann Ylavic]
  * ) event: Avoid possible blocking in the listener thread when shutting down
    connections. PR 60956.  [Yann Ylavic]
  * ) mod_speling: Don't embed referer data in a link in error page.
    PR 38923 [Nick Kew]
  * ) htdigest: prevent a buffer overflow when a string exceeds the allowed max
    length in a password file.
    [Luca Toscano, Hanno Böck &lt;hanno hboeck de&gt;]
  * ) mod_proxy: loadfactor parameter can now be a decimal number (eg: 1.25).
    [Jim Jagielski]
  * ) mod_proxy_wstunnel: Allow upgrade to any protocol dynamically.
    PR 61142.
  * ) mod_watchdog/mod_proxy_hcheck: Time intervals can now be spefified
    down to the millisecond. Supports 'mi' (minute), 'ms' (millisecond),
    's' (second) and 'hr' (hour!) time suffixes. [Jim Jagielski]
  * ) mod_http2: Fix for stalling when more than 32KB are written to a
    suspended stream.  [Stefan Eissing]
  * ) build: allow configuration without APR sources.  [Jacob Champion]
  * ) mod_ssl, ab: Fix compatibility with LibreSSL.  PR 61184.
    [Bernard Spil &lt;brnrd freebsd.org&gt;, Michael Schlenker &lt;msc contact.de&gt;,
    Yann Ylavic]
  * ) core/log: Support use of optional "tag" in syslog entries.
    PR 60525. [Ben Rubson &lt;ben.rubson gmail.com&gt;, Jim Jagielski]
  * ) mod_proxy: Fix ProxyAddHeaders merging.  [Joe Orton]
  * ) core: Disallow multiple Listen on the same IP:port when listener buckets
    are configured (ListenCoresBucketsRatio &gt; 0), consistently with the single
    bucket case (default), thus avoiding the leak of the corresponding socket
    descriptors on graceful restart.  [Yann Ylavic]
  * ) event: Avoid listener periodic wake ups by using the pollset wake-ability
    when available.  PR 57399.  [Yann Ylavic, Luca Toscano]
  * ) mod_proxy_wstunnel: Fix detection of unresponded request which could have
    led to spurious HTTP 502 error messages sent on upgrade connections.
    PR 61283.  [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1508241600">- gensslcert:
  * set also SAN [bsc#1045159]
  * drop -C argument, it was not mapped to CN actually
  * consider also case when hostname does return empty string or
    does not exist [bsc#1057406]
  * do not consider environment ROOT variable</changelog>
  <changelog author="pgajdos@suse.com" date="1508328000">- updated to 2.4.29:
  * ) mod_unique_id: Use output of the PRNG rather than IP address and
    pid, avoiding sleep() call and possible DNS issues at startup,
    plus improving randomness for IPv6-only hosts.  [Jan Kaluza]
  * ) mod_rewrite, core: Avoid the 'Vary: Host' response header when HTTP_HOST
    is used in a condition that evaluates to true. PR 58231 [Luca Toscano]
  * ) mod_http2: v0.10.12, removed optimization for mutex handling in bucket
    beams that could lead to assertion failure in edge cases.
    [Stefan Eissing]
  * ) mod_proxy: Fix regression for non decimal loadfactor parameter introduced
    in 2.4.28.  [Jim Jagielski]
  * ) mod_authz_dbd: fix a segmentation fault if AuthzDBDQuery is not set.
    PR 61546.  [Lubos Uhliarik &lt;luhliari redhat.com&gt;]
  * ) mod_rewrite: Add support for starting External Rewriting Programs
    as non-root user on UNIX systems by specifying username and group
    name as third argument of RewriteMap directive.  [Jan Kaluza]
  * ) core: Rewrite the Content-Length filter to avoid excessive memory
    consumption. Chunked responses will be generated in more cases
    than in previous releases.  PR 61222.  [Joe Orton, Ruediger Pluem]
  * ) mod_ssl: Fix SessionTicket callback return value, which does seem to
    matter with OpenSSL 1.1. [Yann Ylavic]</changelog>
  <changelog author="pgajdos@suse.com" date="1511179200">- APACHE_MODULES now contains authn_core in default configuration
  [bsc#1066661]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="sergiolindo.empresa@gmail.com" date="1511697600">- Add which and w3m as dependencies. poo#28406</changelog>
  <changelog author="pgajdos@suse.com" date="1513339200">- which was split after SLE11</changelog>
  <changelog author="pgajdos@suse.com" date="1513684800">- do not build with nghttp2 for SLE-12-SP3</changelog>
  <changelog author="fcrozat@suse.com" date="1513771200">- Do not requires w3m, only recommends it.</changelog>
  <changelog author="pgajdos@suse.com" date="1513771201">- build brotli module</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)</changelog>
  <changelog author="pgajdos@suse.com" date="1517313600">- for older distros, still use SuSEFirewall2 [bsc#1071548c#7]</changelog>
  <changelog author="pgajdos@suse.com" date="1517572800">- remove NameVirtualHost from documentation [bsc#1078557]</changelog>
  <changelog author="pgajdos@suse.com" date="1517832000">- build mod_http2 also for 42.3</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- Replace SuSEFirewall2 by firewalld II (fate#323460) [bsc#1083492]</changelog>
  <changelog author="pgajdos@suse.com" date="1521460801">- updated to 2.4.33:
  * ) core: Fix request timeout logging and possible crash for error_log hooks.
    [Yann Ylavic]
  * ) mod_slomem_shm: Fix failure to create balancers's slotmems in Windows MPM,
    where children processes need to attach them instead since they are owned
    by the parent process already.  [Yann Ylavic]
  * ) ab: try all destination socket addresses returned by
    apr_sockaddr_info_get instead of failing on first one when not available.
    Needed for instance if localhost resolves to both ::1 and 127.0.0.1
    e.g. if both are in /etc/hosts.  [Jan Kaluza]
  * ) ab: Use only one connection to determine working destination socket
    address.  [Jan Kaluza]
  * ) ab: LibreSSL doesn't have or require Windows applink.c.  [Gregg L. Smith]
  * ) htpasswd/htdigest: Disable support for bcrypt on EBCDIC platforms.
    apr-util's bcrypt implementation doesn't tolerate EBCDIC.  [Eric Covener]
  * ) htpasswd/htdbm: report the right limit when get_password() overflows.
    [Yann Ylavic]
  * ) htpasswd: Don't fail in -v mode if password file is unwritable.
    PR 61631.  [Joe Orton]
  * ) htpasswd: don't point to (unused) stack memory on output
    to make static analysers happy.  PR 60634.
    [Yann Ylavic, reported by shqking and Zhenwei Zou]
  * ) mod_access_compat: Fail if a comment is found in an Allow or Deny
    directive.  [Jan Kaluza]
  * ) mod_authz_host: Ignore comments after "Require host", logging a
    warning, or logging an error if the line is otherwise empty.
    [Jan Kaluza, Joe Orton]
  * ) rotatelogs: Fix expansion of %Z in localtime (-l) mode, and fix
    Y2K38 bug.  [Joe Orton]
  * ) mod_ssl: Support SSL DN raw variable extraction without conversion
    to UTF-8, using _RAW suffix on variable names.  [Joe Orton]
  * ) ab: Fix https:// connection failures (regression in 2.4.30); fix
    crash generating CSV output for large -n.  [Joe Orton, Jan Kaluza]
  * ) mod_proxy_fcgi: Add the support for mod_proxy's flushpackets and flushwait
    parameters. [Luca Toscano, Ruediger Pluem, Yann Ylavic]
  * ) mod_ldap: Avoid possible crashes, hangs, and busy loops due to
    improper merging of the cache lock in vhost config.
    PR 43164 [Eric Covener]
  * ) mpm_event: Do lingering close in worker(s).  [Yann Ylavic]
  * ) mpm_queue: Put fdqueue code in common for MPMs event and worker.
    [Yann Ylavic]
  * ) mod_session: Strip Session header when SessionEnv is on.  [Yann Ylavic]
  * ) mod_cache_socache: Fix caching of empty headers up to carriage return.
    [Yann Ylavic]
  * ) core: For consistency, ensure that read lines are NUL terminated on any
    error, not only on buffer full.  [Yann Ylavic]
  * ) mod_authnz_ldap: Fix language long names detection as short name.
    [Yann Ylavic]
  * ) mod_proxy: Worker schemes and hostnames which are too large are no
    longer fatal errors; it is logged and the truncated values are stored.
    [Jim Jagielski]
  * ) regex: Allow to configure global/default options for regexes, like
    caseless matching or extended format.  [Yann Ylavic]
  * ) mod_auth_digest: Actually use the secret when generating nonces. This change
    may cause problems if used with round robin load balancers. PR 54637
    [Stefan Fritsch]
  * ) mod_proxy: Allow setting options to globally defined balancer from
    ProxyPass used in VirtualHost. Balancers are now merged using the new
    merge_balancers method which merges the balancers options.  [Jan Kaluza]
  * ) logresolve: Fix incorrect behavior or segfault if -c flag is used
    Fixes: https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=823259
    [Stefan Fritsch]
  * ) mod_remoteip: Add support for PROXY protocol (code donated by Cloudzilla).
    Add ability for PROXY protocol processing to be optional to donated code.
    See also: http://www.haproxy.org/download/1.5/doc/proxy-protocol.txt
    [Cloudzilla/roadrunner2@GitHub, Jim Jagielski, Daniel Ruggeri]
  * ) mod_proxy, mod_ssl: Handle SSLProxy* directives in &lt;Proxy&gt; sections,
    allowing per backend TLS configuration.  [Yann Ylavic]
  * ) mod_proxy_uwsgi: Add in UWSGI proxy (sub)module. [Roberto De Ioris,
    Jim Jagielski]
  * ) mod_proxy_balancer,mod_slotmem_shm: Rework SHM reuse/deletion to not
    depend on the number of restarts (non-Unix systems) and preserve shared
    names as much as possible on configuration changes for SHMs and persisted
    files.  PR 62044.  [Yann Ylavic, Jim Jagielski]
  * ) mod_http2: obsolete code removed, no more events on beam pool destruction,
    discourage content encoders on http2-status response (where they do not work).
    [Stefan Eissing]
  * ) mpm_event: Let the listener thread do its maintenance job on resources
    shortage.  PR 61979.  [Yann Ylavic]
  * ) mpm_event: Wakeup the listener to re-enable listening sockets.
    [Yann Ylavic]
  * ) mod_ssl: The SSLCompression directive will now give an error if used
    with an OpenSSL build which does not support any compression methods.
    [Joe Orton]
  * ) mpm_event,worker: Mask signals for threads created by modules in child
    init, so that they don't receive (implicitely) the ones meant for the MPM.
    PR 62009. [Armin Abfalterer &lt;a.abfalterer gmail com&gt;, Yann Ylavic]
  * ) mod_md: new experimental, module for managing domains across virtual hosts,
    implementing the Let's Encrypt ACMEv1 protocol to signup and renew
    certificates. Please read the modules documentation for further instructions
    on how to use it. [Stefan Eissing]
  * ) mod_proxy_html: skip documents shorter than 4 bytes
    PR 56286 [Micha Lenk &lt;micha lenk info&gt;]
  * ) core, mpm_event: Avoid a small memory leak of the scoreboard handle, for
    the lifetime of the connection, each time it is processed by MPM event.
    [Yann Ylavic]
  * ) mpm_event: Update scoreboard status for KeepAlive state.  [Yann Ylavic]
  * ) mod_ldap: Fix a case where a full LDAP cache would continually fail to
    purge old entries and log AH01323. PR61891.
    [Hendrik Harms &lt;hendrik.harms gmail.com&gt;]
  * ) mpm_event: close connections not reported as handled by any module to
    avoid losing track of them and leaking scoreboard entries.  PR 61551.
    [Yann Ylavic]
  * ) core: A signal received while stopping could have crashed the main
    process.  PR 61558.  [Yann Ylavic]
  * ) mod_ssl: support for mod_md added. [Stefan Eissing]
  * ) mod_proxy_html: process parsed comments immediately.
    Fixes bug (seen in the wild when used with IBM's HTTPD bundle)
    where parsed comments may be lost. [Nick Kew]
  * ) mod_proxy_html: introduce doctype for HTML 5 [Nick Kew]
  * ) mod_proxy_html: fix typo-bug processing "strict" vs "transitional"
    HTML/XHTML.  PR 56457  [Nick Kew]
  * ) mpm_event: avoid a very unlikely race condition between the listener and
    the workers when the latter fails to add a connection to the pollset.
    [Yann Ylavic]
  * ) core: silently ignore a not existent file path when IncludeOptional
    is used. PR 57585. [Alberto Murillo Silva &lt;powerbsd yahoo.com&gt;, Luca Toscano]
  * ) mod_macro: fix usability of globally defined macros in .htaccess files.
    PR 57525.  [Jose Kahan &lt;jose w3.org&gt;, Yann Ylavic]
  * ) mod_rewrite, core: add the Vary header when a condition evaluates to true
    and the related RewriteRule is used in a Directory context
    (triggering an internal redirect). [Luca Toscano]
  * ) ab: Make the TLS layer aware that the underlying socket is nonblocking,
    and use/handle POLLOUT where needed to avoid busy IOs and recover write
    errors when appropriate.  [Yann Ylavic]
  * ) ab: Keep reading nonblocking to exhaust TCP or SSL buffers when previous
    read was incomplete (the SSL case can cause the next poll() to timeout
    since data are buffered already).  PR 61301 [Luca Toscano, Yann Ylavic]
  * ) mod_http2: avoid unnecessary data retrieval for a trace log. Allow certain
    information retrievals on null bucket beams where it makes sense. [Stefan Eissing]</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- SSLProtocol TLSv1.2 [bsc#1086854]</changelog>
  <changelog author="pgajdos@suse.com" date="1532088000">- security update:
  * CVE-2018-8011 [bsc#1101688]
    (in case we will enable (now experimental) mod_md in the future)
    + apache2-mod_md-1.1.15.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533038400">- security update:
  * CVE-2018-1333 [bsc#1101689]
    + apache2-mod_http2-1.10.20.patch</changelog>
</package>
<package pkgid="62ab55c68dbf49618e07ffa94e26ba0524cabd4569182e22f028d50a9acbc63b" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="a7f6f3392e3432f8772d543b9acd379d979f00895c75be4223a0b88bfef0b5b3" name="aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="tiwai@suse.de" date="1216209600">- initial version: 0.3.2</changelog>
  <changelog author="ro@suse.de" date="1217592000">- fix requires for debuginfo package</changelog>
  <changelog author="mrueckert@suse.de" date="1224676800">- fix debug_packages_requires define</changelog>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="b8aea381966e5d096fa492c7d86a2ad95b2b31b706adb878961e282fbc1a1910" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="2fb43b577e041d7a24c15a0f961fac31d59f9c4bbf5b10f8c2de631ea15bdf24" name="aubio-tools" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="70df0a885fa2c2040cdc7834fda8078cd5fbd723672ecbcca0abf427759a7492" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.55" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1520251200">- Fix in showing/accepting base licenses: Using
  inst_product_license module instead of
  ProductLicense.AskLicenseAgreement (bnc#1073324)
- 4.0.37</changelog>
  <changelog author="lslezak@suse.cz" date="1520424000">- Fixed cloning of the base product name (bsc#1084259)
- 4.0.38</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521115200">- Reuse encrypted devices when required (bsc#1085439).
- 4.0.39</changelog>
  <changelog author="schubi@suse.de" date="1521547200">- Improved error message if the base product cannot be found.
  (follow up of bnc#1084820)
- 4.0.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521633600">- Added more entries to be used instead of the listentry tag when
  cloning the system (bsc#1013047)
- 4.0.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element in all the software
  AutoYaST schema list entries (bsc#1013047)
- 4.0.42</changelog>
  <changelog author="schubi@suse.de" date="1521720001">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
</package>
<package pkgid="61f484e5017688a7ee6ed6ac485121d8613c739f397c6041019b9f15685feedf" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.55" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1520251200">- Fix in showing/accepting base licenses: Using
  inst_product_license module instead of
  ProductLicense.AskLicenseAgreement (bnc#1073324)
- 4.0.37</changelog>
  <changelog author="lslezak@suse.cz" date="1520424000">- Fixed cloning of the base product name (bsc#1084259)
- 4.0.38</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521115200">- Reuse encrypted devices when required (bsc#1085439).
- 4.0.39</changelog>
  <changelog author="schubi@suse.de" date="1521547200">- Improved error message if the base product cannot be found.
  (follow up of bnc#1084820)
- 4.0.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521633600">- Added more entries to be used instead of the listentry tag when
  cloning the system (bsc#1013047)
- 4.0.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element in all the software
  AutoYaST schema list entries (bsc#1013047)
- 4.0.42</changelog>
  <changelog author="schubi@suse.de" date="1521720001">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
</package>
<package pkgid="75511a9dccff45e47b86edbd374e2f6cbf9eedc5ff6a30ce5890500c7cc36789" name="autoyast2" arch="noarch">
  <version epoch="0" ver="4.0.61" rel="lp150.2.6.1"/>
  <changelog author="schubi@suse.de" date="1521720000">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
</package>
<package pkgid="0bdb90360885f23cb2aaac4b815b0c3fa5088dc1b012edd498178bbb20d8fd7e" name="autoyast2" arch="src">
  <version epoch="0" ver="4.0.61" rel="lp150.2.6.1"/>
  <changelog author="schubi@suse.de" date="1521720000">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
</package>
<package pkgid="aa4aa75c2351f38a5bde64ab73ef522592b75a686de4d778b1f81fd5c671181d" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.55" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1520251200">- Fix in showing/accepting base licenses: Using
  inst_product_license module instead of
  ProductLicense.AskLicenseAgreement (bnc#1073324)
- 4.0.37</changelog>
  <changelog author="lslezak@suse.cz" date="1520424000">- Fixed cloning of the base product name (bsc#1084259)
- 4.0.38</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521115200">- Reuse encrypted devices when required (bsc#1085439).
- 4.0.39</changelog>
  <changelog author="schubi@suse.de" date="1521547200">- Improved error message if the base product cannot be found.
  (follow up of bnc#1084820)
- 4.0.40</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521633600">- Added more entries to be used instead of the listentry tag when
  cloning the system (bsc#1013047)
- 4.0.41</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- Permitted the use of 'listentry' element in all the software
  AutoYaST schema list entries (bsc#1013047)
- 4.0.42</changelog>
  <changelog author="schubi@suse.de" date="1521720001">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
</package>
<package pkgid="3ca2398d0dc0451ce4ec8557d70e720017af81cc11702924bde6345e3ee2e99e" name="autoyast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.61" rel="lp150.2.6.1"/>
  <changelog author="schubi@suse.de" date="1521720000">- Add-On-Products: Handling error popup for wrong settings.
  (bnc#1084596)
- 4.0.43</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1521806400">- Do not export an &lt;id/&gt; element in the partitioning section
  (bsc#1013047)</changelog>
  <changelog author="jlopez@suse.com" date="1521806401">- Properly abort when probing devices fails (part of bsc#1083672).
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523620800">- Honor partitioning settings from product (bsc#1085755).
- 4.0.46</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- Install the module products also in AutoYaST autoupgrade
  (related to bsc#1086818 and bsc#1087206)
- 4.0.47</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Probe storage devices again after initializing DASD or zFCP
  devices (bsc#1089326 and bsc#1089554).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524225600">- AutoYaST: properly handle empty proposals (bsc#1090390).
- 4.0.49</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830400">- Display an error and abort the installation when no storage
  devices are available for installation (bsc#1091033).
- 4.0.50</changelog>
  <changelog author="schubi@suse.de" date="1524916800">- Added general API for reporting errors while parsing the AutoYaST
  configuration file (part of bnc#1089855).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- Allow 'subvolumes' and 'subvolumes_prefix' elements to be empty
  (bsc#1076337, bsc#1090095 and bsc#1091669).
- Drop 'btrfs_set_default_subvolume_name' element.
- 4.0.52</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040000">- Handle DASD or zFCP devices even when the profile is not in a
  remote location (bsc#1089554).
- 4.0.53</changelog>
  <changelog author="schubi@suse.de" date="1527595200">- Using new libstorage-ng in order to handle "label" tag in URL.
  E.G.: autoyast=label://my_home//autoinst.xml (bnc#1094533)
- 4.0.54</changelog>
  <changelog author="schubi@suse.de" date="1528200000">- Partition configuration: Do not ask for saving values if they have
  not been changed at all. (bnc#1082556)
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1528804800">- Showing AutoYaST configuration file errors onetime only.
  (needed for bnc#1095113)
- 4.0.56</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.57</changelog>
  <changelog author="schubi@suse.de" date="1534248000">- AY configuration module: Report XML errors while reading an
  AY configuration file (bsc#1098794)
- 4.0.58</changelog>
  <changelog author="schubi@suse.de" date="1534507200">- Installation/Update: Do not call registration if module
  yast2-registraion is not available in inst-sys (bsc#1098794).
- 4.0.59</changelog>
  <changelog author="knut.anderssen@suse.com" date="1534507201">- AutoInstallRules: increased default maxdepth for not crashing
  with a big software package list (bsc#1104655)
- 4.0.60</changelog>
  <changelog author="schubi@suse.de" date="1535025600">- AutoInstallRules: Fixed crash while merging profiles.
  (bsc#1105711)
- 4.0.61</changelog>
</package>
<package pkgid="5debbfa5d7769c47efb1bff5e6482719bf3d846f6ec6d8bca7eadbc11657e064" name="bbswitch" arch="src">
  <version epoch="0" ver="0.8" rel="lp150.2.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
</package>
<package pkgid="722a55fb8d522d22486b8910ded261c0574ba34787175b27cf8ce259254472ef" name="bbswitch" arch="x86_64">
  <version epoch="0" ver="0.8" rel="lp150.2.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
</package>
<package pkgid="a309550c7284521fd7ab5a5c1370b6ff7930d7973103470bff644ebd15b3a1b9" name="bbswitch-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.8_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="tchvatal@suse.com" date="1389700800">- Create proper changelog with osc vc</changelog>
  <changelog author="tchvatal@suse.com" date="1389700801">- Cleanup the spec to adhere official formatting rules.</changelog>
  <changelog author="tchvatal@suse.com" date="1391947200">- Add kernel word to the description</changelog>
  <changelog author="tchvatal@suse.com" date="1401883200">- Add the modules autoloading for the package.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883201">- Provide bbswitch-dkms for time being to allow migration.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883202">- Say goodbye to bbswitch-dkms and use just the direct bbswitch.</changelog>
  <changelog author="tchvatal@suse.com" date="1401883203">- Name the modprobe.d file like the others.</changelog>
  <changelog author="tchvatal@suse.com" date="1404216000">- Install copying file</changelog>
  <changelog author="dvlaeev@suse.com" date="1408622400">- Make architecture exclusive to x86 platform</changelog>
  <changelog author="tchvatal@suse.com" date="1444478400">- Add %dir for %{_libexecdir}/modules_load.d as it is owned by systemd
  and there is no reason to have that in deps</changelog>
  <changelog author="tchvatal@suse.com" date="1510488000">- Depend on libelf to build correctly on tumbleweed</changelog>
</package>
<package pkgid="28627a2166fb890750e795dbd95e8579156d7ca78c4254d48a7ee5f57b5dbf6a" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="2b8cc4d1c8a9b254679537cf6980d75ebeae83bc8d60b1e5087248ded54282c6" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="b98d1ab4c872c9d07febf00b7987e2528281de38cff4786e9fac6e8b528326dc" name="bind" arch="src">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="6ab082a94169bfb77ae1f3f316400a1946400327ac64de92f56e76267083ab9c" name="bind" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="76e81b5809595f95f6e806233d32d4314dc1a94f98cf8e8267d2fbe5fdf51096" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="bfe6f708346e36f17ce1d03e799ed3f153bb5ebb84dd7fa33e3e68dc30268ca6" name="bind-chrootenv" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="14ff7004f55361c2e28bf36a8956e2986aa5a163e418aa178c7b4563f9b78749" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="d96976a61a1a2af7b98df850990aa21f0185fc96876ae417e5eff4a87b973f89" name="bind-devel-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="f69d4172007f37817132d460fbb6d1ce2210f984307ccfbdd8f705720150fd6c" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="6fc9a2a921667b0101dfc08404a6e50c7699966f1748d6b1572cb692e6eb88e6" name="bind-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="3aab50f16097e623622010cdbe6c44a345bcb1b9f551d3b8c50bf3816140c2d3" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="79fcf013a9a7060b3aaf961f2f832c872c5a24f73f4549f958c8d16374e46f84" name="bind-doc" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="b6423e962c5013e4198ef69e33180701e738e62f0df796ba89d9b8b437ddcf77" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="f3308295628cbf64aaa7e49b8d1d3136f6dc9ad6f1adfc72afe377235a816ae1" name="bind-lwresd" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="c7d621c078512d93ff0a30f5090f797c089cf36aee2863f029ed6cd91357ea0b" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="5c2795a1f1550120e40e844079cf2b81cf8e13b9fe0fde7c06013942a7a08d60" name="bind-utils" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="976b6add0e93ea0a13ac85930675edd354560823a3b83fb958393d530542469f" name="biosdevname" arch="src">
  <version epoch="0" ver="0.7.3" rel="lp150.3.3.1"/>
  <changelog author="trenn@suse.de" date="1399550400">- Provide Supplements:    modalias(dmi:*svnDell*)
  so that the package gets autoinstalled on all Dell platforms
  bnc#876733</changelog>
  <changelog author="trenn@suse.de" date="1400241600">- Revert biosdevname calling with different parameters introduced
  with the change from the 22th of April as suggested by Dell.
  Modified: biosdevname_udevrule_rename_all_network_devices.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1528113600">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
</package>
<package pkgid="9596a9d707e2da4b64752b5d06e75d3e845104319abfd60c053aaf9d9dcf41fd" name="biosdevname" arch="x86_64">
  <version epoch="0" ver="0.7.3" rel="lp150.3.3.1"/>
  <changelog author="trenn@suse.de" date="1399550400">- Provide Supplements:    modalias(dmi:*svnDell*)
  so that the package gets autoinstalled on all Dell platforms
  bnc#876733</changelog>
  <changelog author="trenn@suse.de" date="1400241600">- Revert biosdevname calling with different parameters introduced
  with the change from the 22th of April as suggested by Dell.
  Modified: biosdevname_udevrule_rename_all_network_devices.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660800">- For some reason /usr/lib/udev/rules.d/99-systemd.rules seem not to exist
  anymore. This is used to determine which udev rules.d to use.
  Use 95-udev-late.rules instead.
  Modified: udev-rule-path.patch</changelog>
  <changelog author="trenn@suse.de" date="1402660801">- Fix missing %posttrans section</changelog>
  <changelog author="trenn@suse.de" date="1407844800">- Add mainline commit: 51b8cdb0b60df3baa
  With this patch, the info can be showed correctly if there are two or more
  PCI root ports in the same Bus ID/Device ID (bnc#890562)
  Add: fix_several_PCI_root_ports_in_one_bus.patch</changelog>
  <changelog author="trenn@suse.de" date="1421928000">- Update to version 0.6.1
- Do not disable rule via perl script in .spec file, better use a patch
  (biosdevname_udevrule_rename_all_network_devices.patch)
- Modify configure.ac via sed to make use of %{_udevruledir} from .spec file
- Remove already integrated patches in latest source code:
  Delete biosdevname_v0.5.0_to_git_c140ce659a204d67e4cc.patch
  Delete biosdevname_udevrule_rename_all_network_devices.patch
  Delete fix_several_PCI_root_ports_in_one_bus.patch
  Modify udev-rule-path.patch
  Modify whitelist-dell</changelog>
  <changelog author="meissner@suse.com" date="1424520000">- biosdevname-pic.patch: make cpuid() not expose %ebx out of
  assembler, so we can build it with -fPIE.</changelog>
  <changelog author="mpluskal@suse.com" date="1428062400">- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="zaitor@opensuse.org" date="1428667200">- Fix fault in ignore-broken-BIOSes patch (boo#920054).</changelog>
  <changelog author="mpluskal@suse.com" date="1433332800">- Update to 0.6.2
  * no upstream changelog provided</changelog>
  <changelog author="werner@suse.de" date="1436788800">- Add missed build require on pkgconfig udev</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix missing dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="mpluskal@suse.com" date="1453032000">- Update to 0.7.1
  * no upstream changelog provided</changelog>
  <changelog author="trenn@suse.de" date="1457092800">- Update to latest 0.7.2 version (fate#319998)</changelog>
  <changelog author="olaf@aepfle.de" date="1471348800">- Detect dom0 via xenfs instead of cpuid to compensate for ABI
  change in xen-4.7 on AMD systems. (bnc#974257)
  biosdevname-dom0.patch</changelog>
  <changelog author="felix.gerling@suse.com" date="1484827200">-  Update to HEAD 66eab208d3c2abe947ba0a793094ee856e8fb3ee
  * Fix use-after-free of fd</changelog>
  <changelog author="fschnizlein@suse.com" date="1497009600">- Update to latest HEAD to 02811d5165c2eeecf8797fe9b5088d6e78bd25db
  * Changed source to github
  * Ignore naming of non-Ethernet network interfaces
  * Prevent reading of VPD-DCM strings for SRIOV-vfs
  - removed patch v0.7.2_to_HEAD_66eab208.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1506081600">- Update to version 0.7.3
  * Shipping and future Dell EMC systems support consistent network
    device naming feature.
  [fate#332490]</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="josef.moellers@suse.com" date="1528113600">- Prevent infinite recursion in dmidecode.c::smbios_setslot by
  checking that subordinate bus has a number greater than the
  current bus.
  [bsc#1093625, dmidecode-prevent-infinite-recursion.patch]</changelog>
</package>
<package pkgid="6fa057cb161c8f5786797558a762be122cf3934206577bb44e0c3ff5b70103e2" name="blas-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="55c4594a26ba05deef488b402c70b02469e1739943ebcfa4c4b216a1313c3d6b" name="blas-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="40755516dae2c7975594216ad8940b660caedb08edee87451f4e72ca2e50ee50" name="blas-devel-static" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="aa2e4cf3d8bb35cf9e385db6bf91e18d91c9dac1428f76d5824364911110afe0" name="blas-man" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
</package>
<package pkgid="e4ef4c1afd7252bcc3394aa8be29a69ae40c611a108f72308ef9490673da6c5f" name="bleachbit" arch="noarch">
  <version epoch="0" ver="2.0" rel="lp150.2.3.1"/>
  <changelog author="Sascha.Manns@open-slx.de" date="1321358400">- updated to version 0.9.1
- These are the changes since version 0.9.0:
  + Clean segments and segment_usage in Google Chrome History
  + Clean favicons on Chromium, Google Chrome
  + Clean "History Provider Cache" on Chromium and Google Chrome
  + Clean download history in Chromium, Google Chrome
  + Fix rare "ZeroDivisionError: float division" bug while cleaning free disk space.</changelog>
  <changelog author="Sascha.Manns@open-slx.de" date="1331985600">- updated to version 0.9.2
- These are the changes since version 0.9.1
  These are the changes since version 0.9.1:
  * Clean Firefox crash reports.
  * Clean more Google Chrome and Chromium history: omnibox shortcuts,
    Network Action Predictor, and keywords_backup.
  * Clean LibreOffice.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1344081600">- Update to 0.9.3.
  * The new application icon looks better ? especially on a black
    background.
  * Google Chrome and Chromium: clean some more SQLite database
    journals.
  * Google Chrome and Chromium: clean Favicons on new browser
    release (instead of giving an error about the database
    version).
  * Google Chrome, Chromium: find more bookmarks to avoid affecting
    history and favicons related to bookmarks, and avoid the error
    "KeyError: 'url'".
  * Be quiet about "Unsupported special file type" error message
    (lp#1012930).
  * Do not try to launch GUI if X is not available (lp#1004923).
  * Be quiet about "[Errno 39] Directory not empty" error message
    (lp#1012930).
- Build requires python-distribute instead of python-devel.
- Remove bleachbit.desktop from additional source: have it in
  tarball.
- Recommends language package.
- Clean up spec.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1345291200">- Fix runtime dependencies: really needs python-gnomevfs only.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1354795200">- Update to 0.9.4.
  * Add feature for user-defined custom cleaners. In the
    preferences, easily choose files and folders you regularly want
    to clean, and then select them from cleaning under System -
    Custom.
  * Google Chrome and Chromium: Fix error "Favicons is version 23"
    with Google Chrome 23.
  * Google Chrome and Chromium: Delete many more history files.
  * Google Chrome and Chromium: If bookmark files does not exist,
    do not throw an error.
  * Clean FAT32 partitions with more than 4GB free space.
  * Do not delete /usr/share/kde4/apps/ksgmltools2/customization
    required by kdelibs.
- Add cleaner example to docs.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1358164800">- Update to 0.9.5.
  * Google Chrome, Chromium: separate cleaning of passwords out of
    history into its own option.
  * Google Chrome: delete Flash cookies in Pepper Flash.
  * Google Chrome: delete more history.
  * Thunderbird: delete folder index files (.msf).
  * Clean out obsolete data (hashpath) in bleachbit.ini to reduce
    file size and improve privacy.
  * Improve compatibility of memory wiping with 64-bit systems.
  * Improve ability to run headless.
  * Support newer Linux kernels in memory cleaner by using new
    out-of-memory score adjustment /proc/pid/oom_score_adj.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1373630400">- Update to 0.9.6.
  * Improve wiping of free disk space.
  * Google Chrome: Fix error message no such table: keywords_backup:
    /home/foobar/.config/google-chrome/Default/Web Data.
  * Google Chrome: Fix error message Favicons is version 25.
  * Google Chrome: Delete more cache.
  * Clean Apache OpenOffice.org 3.4.1.
  * Clean LibreOffice 4.
  * OpenOffice.org: if history file has not changed, do not save
    it.
  * Adobe Acrobat: use wildcards to generically support more
    versions.
  * Do not clean VLC while it is running.
  * Thunderbird: clean indexes on Fedora.
  * Firefox: clean minidumps (crash information).
  * Clean more IcedTea (Java) cache.
  * Update Basque, Brazilian Portuguese, Croatian, English (United
    Kingdom), Esperanto, Estonian, French, German, Indonesian,
    Kirghiz, Lietuvi?, Polish, Russian, Slovak translations.
- Use full URL as a source.</changelog>
  <changelog author="saigkill@opensuse.org" date="1385294400">- updated to 1.0
- Changes:
  o The command line option --shred now shreds arbitrary files.
  o Add Octave cleaner
  o Add Warzone 2100 cleaner
  o Clean recently played in VLC (thanks to nolme/Vincent DUVERNET - Nolmë
    Informatique)
  o Google Chrome: Fix errors "Favicons is version 26" and "DatabaseError:
    no such column: full_path"
  o Google Chrome: delete more cache
  o Remove auto-hide option. (Before, it was a default.)
  o Specific to Linux
  * Coming soon: .deb package for Ubuntu 13.10 (Saucy Salamander).
  * Coming soon: .rpm package for openSUSE 11.4.
  * Add SQLite3 cleaner
  * Adobe Flash: clean NativeCache</changelog>
  <changelog author="saigkill@opensuse.org" date="1400155200">- Added patch to change KDE's Cleaning Path from .kde to .kde4
  * bleachbit-kde-patch.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1403006400">- Version bump to 1.2 with various small fixes.</changelog>
  <changelog author="ecsos@opensuse.org" date="1410350400">- Update to 1.4
  * Firefox: Fix DatabaseError: no such table: moz_hosts
  * Firefox: Purge the table moz_hosts in places.sqlite for the
    option url_history
  * Firefox: Delete Necko Predictive Network Actions
  * Firefox: Delete more session restore files
  * Google Chrome: fix error cleaning autofill_dates
  * Adobe Reader: use wildcards instead of specific versions
  (thanks to theatre-x)
  * Clean netMRL history in VLC media player (thanks to tiemay)
  * Clean GIMP version 2.8 (thanks to tiemay)
  * Improve support for Liferea (thanks to Lars Windolf)
  * Specific to Linux
  - Pass control of the ~/.cache/mozilla directory from the
    System - Cache cleaner to the Firefox - Cache cleaner
    (LP#1295826)
  - Clean additional locale directories (thanks to tstenner)
  - Clean .mask files in Easytag (thanks to tiemay)
  - Clean more history in the Links web browser (thanks to tiemay)
  - Add packages for CentOS 7 and RHEL 7</changelog>
  <changelog author="ecsos@opensuse.org" date="1417521600">- Update to 1.6
  * Google Chrome: fix error "Favicons is version 29"
  * Google Chrome: clean application cache directory.
  * Google Chrome and Chromium: in the Preferences (JSON) file
    clean a list of HTTP servers that used SPDY, which can be used
    to track servers to which the browser was connected
  * Firefox: clean more session restore files
  * Firefox: clean bookmark backups using a new option called
    Backup.
  * The auto-hide option, which was removed in version 1.0,
    is available again.
  * Specific to Linux
  - Google Chrome: delete Sync Data Backup
  - Chromium: delete application cache directory
  - Print a message when root account is being cleaned to avoid
    confusion
  - Whitelist more KDE IPC files under /tmp/ to fix problem
    launching BleachBit as root</changelog>
  <changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 1.8
  * In Preferences, there is a new option "Confirm before delete"
    that disables the confirmation.
  * When BleachBit starts, the window is centered.
  * The tool "Shred Settings and Quit" in the File menu is fixed.
  * Added cleaning for Opera passwords.
  * Shrink storage size of BleachBit icon.
  * Add descriptions to many cleaners).
  * Add a new command line option --debug-log that logs debug messages
    to a file.
  * Replace hard-coded localizations cleaning system with CleanerML entries.
  * Whitelist /tmp/fsa for FSArchiver.
  * Suppress GTK+ warning in console.
  * Add packages for Debian 8, Fedora 21, and Ubuntu 15.04.
  * Remove packages for Fedora 19 and Ubuntu 13.10.
  * In CleanerML, a cleaner description can have a translation hint.
  * Set up Travis CI for better testing.
  * Improve unit tests.</changelog>
  <changelog author="mailaender@opensuse.org" date="1458475200">- Update to 1.10
  * Speed up identification of files using regular expressions by 5% to 50%
  * Allow relative paths with --shred command line argument (reported by Eva Putnam).
  * Add descriptions for cleaners (thanks to theatre-x).
  * Fix resizing of preference dialog (thanks to Anton Bobov).
  * Warn when deleting passwords on Firefox (reported by Theatre-X).
  * Accept abbreviations T and F in bleachbit.ini configuration (reported by Ken Wallace).
  * Show a user-friendly error message when checking for updates fails because of a network error (reported by Gary).
  * Improve logging of errors. Some errors are more informative, and on Windows, errors are unlikely to cause a popup message about bleachbit.exe.log.
  * Add an option to show file sizes as IEC units (1 KiB = 1024 bytes) instead of SI units (1 kB = 1000 bytes; thanks to Tristan Stenner).
  * Clean passwords on Firefox version 32+.
  * Clean Google Chrome cookies for non-default profiles.
  * Clean more autofill on Google Chrome (reported by pcdoctor01). If you are logged in to Google Chrome, it may automatically restore some of these values from your online Google account unless you disable the option Show addresses and credit cards from Google Payments in the autofill page of Google Chrome settings.
  * Add size column to side tree control (thanks to Ivor Hewitt).
  * Clean more localizations (thanks to Tristan Stenner).
  * Add localization codes (thanks to Tristan Stenner).
  * Fix memory cleaning on Ubuntu 15.10 and other distributions (reported by Richard Pearse).
  * Fix harmless error that localizations.xml is unusable (thanks to Tristan Stenner).
  * Do not show localizations at the base level (reported by BBUser).
  * Do not show Windows Explorer cleaner on Linux (reported by Tomás F. L.).
  * Fulfill Fedora license file location change.
  * Do not delete xauth under KDE (reported by mike).
  * Remove deprecated key encoding in bleachbit.desktop.
  * Drop support for Mandriva, which is dead.
  * Do not show cleaner is unusable message in the console (except when debug mode is enabled or in non-final releases).</changelog>
  <changelog author="mailaender@opensuse.org" date="1467547200">- Update to 1.12
  * Fix error Favicons is version 32 with Google Chrome 51 (reported by Holger)
  * Fix cleaning of Thumbnails in new Chromium and Google Chrome (reported by ineuw, patrick)
  * Fix crash with corrupt BleachBit.ini (reported by BitBleacher)
  * Fix error UNIQUE constraint failed error cleaning Firefox (reported by danjackson1 and gravy45)
  * Update EasyTAG cleaner (thanks to devmapper0)
  * Update Epiphany cleaner (thanks to devmapper0)
  * Update Evolution cleaner (thanks to skquinn)
  * Update GNOME cleaner (thanks to devmapper0)
  * Update KDE cleaner for KDE 4 on openSUSE (thanks to Mailaender)
  * Remove bleachbit-kde-patch.patch
  * Update Rhythmbox cleaner (thanks to devmapper0)
  * Update Thumbnails cleaner (thanks to devmapper0)
  * Update Transmission cleaner (thanks to devmapper0)
  * Update X11 cleaner (thanks to devmapper0)
  * Switch from GnomeVFS, which is deprecated, to GIO (reported by MM)
  * Do not repeat Google Chrome cache in preview (reported by Daniel Che)
  * Fix retention of translations for Chinese
  * Whitelist iBus Pinyin (reported by Josiah Hunter)</changelog>
  <changelog author="mailaender@opensuse.org" date="1473508800">- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="jmatejek@suse.com" date="1499774400">- drop obsolete requirements on python-gnome and python-gobject2</changelog>
  <changelog author="aavindraa@gmail.com" date="1505908800">- Update to 1.17
  * There is a fix for handling special characters in usernames (LP#1347644).
  * Files can be dragged dropped onto the BleachBit window for shredding.
  * Enable "overwrite contents" and clean SQLite databases.
  * Clean HexChat (X-Chat).
  * 19 cleaners now use the XDG directory specification.
  * AppData information in the GNOME and KDE Software centers.
  * Clean journald.
  * Clean apt - autoremove.
  * Whitelisting should protect both the link source and target (LP#1455959).
- Drop appdata.patch, accepted upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1519992000">- Update to version 2.0:
  * Add drag-and-drop support (thanks to contractor Pavel). Try dropping files onto the main application window.
  * Fix preservation of thumbnails on Google Chrome and Chromium .
  * Fix error Favicons is version 36 or 38 when cleaning Google Chrome and Chromium.
  * Fix DatabaseError: no such table: moz_favicons for some Firefox profiles.
  * Use HTTPS encryption when automatically checking for software updates.
  * Add software categories to bleachbit.desktop (thanks to Hugo Lefeuvre).
  * Whitelist Bluetooth daemon (reported by Timo Ollech).
  * Fix purging of GTK recently used resources list.
  * Improve Liferea cleaner (reported by Theatre-X).</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1533643200">- add missing dependency python-xml (boo#1104093).</changelog>
</package>
<package pkgid="e54c237ab21fef7c555a5c997fb526ff9bc38b595185408137be65f8d032a05a" name="bleachbit" arch="src">
  <version epoch="0" ver="2.0" rel="lp150.2.3.1"/>
  <changelog author="Sascha.Manns@open-slx.de" date="1321358400">- updated to version 0.9.1
- These are the changes since version 0.9.0:
  + Clean segments and segment_usage in Google Chrome History
  + Clean favicons on Chromium, Google Chrome
  + Clean "History Provider Cache" on Chromium and Google Chrome
  + Clean download history in Chromium, Google Chrome
  + Fix rare "ZeroDivisionError: float division" bug while cleaning free disk space.</changelog>
  <changelog author="Sascha.Manns@open-slx.de" date="1331985600">- updated to version 0.9.2
- These are the changes since version 0.9.1
  These are the changes since version 0.9.1:
  * Clean Firefox crash reports.
  * Clean more Google Chrome and Chromium history: omnibox shortcuts,
    Network Action Predictor, and keywords_backup.
  * Clean LibreOffice.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1344081600">- Update to 0.9.3.
  * The new application icon looks better ? especially on a black
    background.
  * Google Chrome and Chromium: clean some more SQLite database
    journals.
  * Google Chrome and Chromium: clean Favicons on new browser
    release (instead of giving an error about the database
    version).
  * Google Chrome, Chromium: find more bookmarks to avoid affecting
    history and favicons related to bookmarks, and avoid the error
    "KeyError: 'url'".
  * Be quiet about "Unsupported special file type" error message
    (lp#1012930).
  * Do not try to launch GUI if X is not available (lp#1004923).
  * Be quiet about "[Errno 39] Directory not empty" error message
    (lp#1012930).
- Build requires python-distribute instead of python-devel.
- Remove bleachbit.desktop from additional source: have it in
  tarball.
- Recommends language package.
- Clean up spec.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1345291200">- Fix runtime dependencies: really needs python-gnomevfs only.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1354795200">- Update to 0.9.4.
  * Add feature for user-defined custom cleaners. In the
    preferences, easily choose files and folders you regularly want
    to clean, and then select them from cleaning under System -
    Custom.
  * Google Chrome and Chromium: Fix error "Favicons is version 23"
    with Google Chrome 23.
  * Google Chrome and Chromium: Delete many more history files.
  * Google Chrome and Chromium: If bookmark files does not exist,
    do not throw an error.
  * Clean FAT32 partitions with more than 4GB free space.
  * Do not delete /usr/share/kde4/apps/ksgmltools2/customization
    required by kdelibs.
- Add cleaner example to docs.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1358164800">- Update to 0.9.5.
  * Google Chrome, Chromium: separate cleaning of passwords out of
    history into its own option.
  * Google Chrome: delete Flash cookies in Pepper Flash.
  * Google Chrome: delete more history.
  * Thunderbird: delete folder index files (.msf).
  * Clean out obsolete data (hashpath) in bleachbit.ini to reduce
    file size and improve privacy.
  * Improve compatibility of memory wiping with 64-bit systems.
  * Improve ability to run headless.
  * Support newer Linux kernels in memory cleaner by using new
    out-of-memory score adjustment /proc/pid/oom_score_adj.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1373630400">- Update to 0.9.6.
  * Improve wiping of free disk space.
  * Google Chrome: Fix error message no such table: keywords_backup:
    /home/foobar/.config/google-chrome/Default/Web Data.
  * Google Chrome: Fix error message Favicons is version 25.
  * Google Chrome: Delete more cache.
  * Clean Apache OpenOffice.org 3.4.1.
  * Clean LibreOffice 4.
  * OpenOffice.org: if history file has not changed, do not save
    it.
  * Adobe Acrobat: use wildcards to generically support more
    versions.
  * Do not clean VLC while it is running.
  * Thunderbird: clean indexes on Fedora.
  * Firefox: clean minidumps (crash information).
  * Clean more IcedTea (Java) cache.
  * Update Basque, Brazilian Portuguese, Croatian, English (United
    Kingdom), Esperanto, Estonian, French, German, Indonesian,
    Kirghiz, Lietuvi?, Polish, Russian, Slovak translations.
- Use full URL as a source.</changelog>
  <changelog author="saigkill@opensuse.org" date="1385294400">- updated to 1.0
- Changes:
  o The command line option --shred now shreds arbitrary files.
  o Add Octave cleaner
  o Add Warzone 2100 cleaner
  o Clean recently played in VLC (thanks to nolme/Vincent DUVERNET - Nolmë
    Informatique)
  o Google Chrome: Fix errors "Favicons is version 26" and "DatabaseError:
    no such column: full_path"
  o Google Chrome: delete more cache
  o Remove auto-hide option. (Before, it was a default.)
  o Specific to Linux
  * Coming soon: .deb package for Ubuntu 13.10 (Saucy Salamander).
  * Coming soon: .rpm package for openSUSE 11.4.
  * Add SQLite3 cleaner
  * Adobe Flash: clean NativeCache</changelog>
  <changelog author="saigkill@opensuse.org" date="1400155200">- Added patch to change KDE's Cleaning Path from .kde to .kde4
  * bleachbit-kde-patch.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1403006400">- Version bump to 1.2 with various small fixes.</changelog>
  <changelog author="ecsos@opensuse.org" date="1410350400">- Update to 1.4
  * Firefox: Fix DatabaseError: no such table: moz_hosts
  * Firefox: Purge the table moz_hosts in places.sqlite for the
    option url_history
  * Firefox: Delete Necko Predictive Network Actions
  * Firefox: Delete more session restore files
  * Google Chrome: fix error cleaning autofill_dates
  * Adobe Reader: use wildcards instead of specific versions
  (thanks to theatre-x)
  * Clean netMRL history in VLC media player (thanks to tiemay)
  * Clean GIMP version 2.8 (thanks to tiemay)
  * Improve support for Liferea (thanks to Lars Windolf)
  * Specific to Linux
  - Pass control of the ~/.cache/mozilla directory from the
    System - Cache cleaner to the Firefox - Cache cleaner
    (LP#1295826)
  - Clean additional locale directories (thanks to tstenner)
  - Clean .mask files in Easytag (thanks to tiemay)
  - Clean more history in the Links web browser (thanks to tiemay)
  - Add packages for CentOS 7 and RHEL 7</changelog>
  <changelog author="ecsos@opensuse.org" date="1417521600">- Update to 1.6
  * Google Chrome: fix error "Favicons is version 29"
  * Google Chrome: clean application cache directory.
  * Google Chrome and Chromium: in the Preferences (JSON) file
    clean a list of HTTP servers that used SPDY, which can be used
    to track servers to which the browser was connected
  * Firefox: clean more session restore files
  * Firefox: clean bookmark backups using a new option called
    Backup.
  * The auto-hide option, which was removed in version 1.0,
    is available again.
  * Specific to Linux
  - Google Chrome: delete Sync Data Backup
  - Chromium: delete application cache directory
  - Print a message when root account is being cleaned to avoid
    confusion
  - Whitelist more KDE IPC files under /tmp/ to fix problem
    launching BleachBit as root</changelog>
  <changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 1.8
  * In Preferences, there is a new option "Confirm before delete"
    that disables the confirmation.
  * When BleachBit starts, the window is centered.
  * The tool "Shred Settings and Quit" in the File menu is fixed.
  * Added cleaning for Opera passwords.
  * Shrink storage size of BleachBit icon.
  * Add descriptions to many cleaners).
  * Add a new command line option --debug-log that logs debug messages
    to a file.
  * Replace hard-coded localizations cleaning system with CleanerML entries.
  * Whitelist /tmp/fsa for FSArchiver.
  * Suppress GTK+ warning in console.
  * Add packages for Debian 8, Fedora 21, and Ubuntu 15.04.
  * Remove packages for Fedora 19 and Ubuntu 13.10.
  * In CleanerML, a cleaner description can have a translation hint.
  * Set up Travis CI for better testing.
  * Improve unit tests.</changelog>
  <changelog author="mailaender@opensuse.org" date="1458475200">- Update to 1.10
  * Speed up identification of files using regular expressions by 5% to 50%
  * Allow relative paths with --shred command line argument (reported by Eva Putnam).
  * Add descriptions for cleaners (thanks to theatre-x).
  * Fix resizing of preference dialog (thanks to Anton Bobov).
  * Warn when deleting passwords on Firefox (reported by Theatre-X).
  * Accept abbreviations T and F in bleachbit.ini configuration (reported by Ken Wallace).
  * Show a user-friendly error message when checking for updates fails because of a network error (reported by Gary).
  * Improve logging of errors. Some errors are more informative, and on Windows, errors are unlikely to cause a popup message about bleachbit.exe.log.
  * Add an option to show file sizes as IEC units (1 KiB = 1024 bytes) instead of SI units (1 kB = 1000 bytes; thanks to Tristan Stenner).
  * Clean passwords on Firefox version 32+.
  * Clean Google Chrome cookies for non-default profiles.
  * Clean more autofill on Google Chrome (reported by pcdoctor01). If you are logged in to Google Chrome, it may automatically restore some of these values from your online Google account unless you disable the option Show addresses and credit cards from Google Payments in the autofill page of Google Chrome settings.
  * Add size column to side tree control (thanks to Ivor Hewitt).
  * Clean more localizations (thanks to Tristan Stenner).
  * Add localization codes (thanks to Tristan Stenner).
  * Fix memory cleaning on Ubuntu 15.10 and other distributions (reported by Richard Pearse).
  * Fix harmless error that localizations.xml is unusable (thanks to Tristan Stenner).
  * Do not show localizations at the base level (reported by BBUser).
  * Do not show Windows Explorer cleaner on Linux (reported by Tomás F. L.).
  * Fulfill Fedora license file location change.
  * Do not delete xauth under KDE (reported by mike).
  * Remove deprecated key encoding in bleachbit.desktop.
  * Drop support for Mandriva, which is dead.
  * Do not show cleaner is unusable message in the console (except when debug mode is enabled or in non-final releases).</changelog>
  <changelog author="mailaender@opensuse.org" date="1467547200">- Update to 1.12
  * Fix error Favicons is version 32 with Google Chrome 51 (reported by Holger)
  * Fix cleaning of Thumbnails in new Chromium and Google Chrome (reported by ineuw, patrick)
  * Fix crash with corrupt BleachBit.ini (reported by BitBleacher)
  * Fix error UNIQUE constraint failed error cleaning Firefox (reported by danjackson1 and gravy45)
  * Update EasyTAG cleaner (thanks to devmapper0)
  * Update Epiphany cleaner (thanks to devmapper0)
  * Update Evolution cleaner (thanks to skquinn)
  * Update GNOME cleaner (thanks to devmapper0)
  * Update KDE cleaner for KDE 4 on openSUSE (thanks to Mailaender)
  * Remove bleachbit-kde-patch.patch
  * Update Rhythmbox cleaner (thanks to devmapper0)
  * Update Thumbnails cleaner (thanks to devmapper0)
  * Update Transmission cleaner (thanks to devmapper0)
  * Update X11 cleaner (thanks to devmapper0)
  * Switch from GnomeVFS, which is deprecated, to GIO (reported by MM)
  * Do not repeat Google Chrome cache in preview (reported by Daniel Che)
  * Fix retention of translations for Chinese
  * Whitelist iBus Pinyin (reported by Josiah Hunter)</changelog>
  <changelog author="mailaender@opensuse.org" date="1473508800">- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="jmatejek@suse.com" date="1499774400">- drop obsolete requirements on python-gnome and python-gobject2</changelog>
  <changelog author="aavindraa@gmail.com" date="1505908800">- Update to 1.17
  * There is a fix for handling special characters in usernames (LP#1347644).
  * Files can be dragged dropped onto the BleachBit window for shredding.
  * Enable "overwrite contents" and clean SQLite databases.
  * Clean HexChat (X-Chat).
  * 19 cleaners now use the XDG directory specification.
  * AppData information in the GNOME and KDE Software centers.
  * Clean journald.
  * Clean apt - autoremove.
  * Whitelisting should protect both the link source and target (LP#1455959).
- Drop appdata.patch, accepted upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1519992000">- Update to version 2.0:
  * Add drag-and-drop support (thanks to contractor Pavel). Try dropping files onto the main application window.
  * Fix preservation of thumbnails on Google Chrome and Chromium .
  * Fix error Favicons is version 36 or 38 when cleaning Google Chrome and Chromium.
  * Fix DatabaseError: no such table: moz_favicons for some Firefox profiles.
  * Use HTTPS encryption when automatically checking for software updates.
  * Add software categories to bleachbit.desktop (thanks to Hugo Lefeuvre).
  * Whitelist Bluetooth daemon (reported by Timo Ollech).
  * Fix purging of GTK recently used resources list.
  * Improve Liferea cleaner (reported by Theatre-X).</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1533643200">- add missing dependency python-xml (boo#1104093).</changelog>
</package>
<package pkgid="ce33ad3d8d5358e8d795dfba0f8bb785a5e7eb17ba2686afd73df4608f827205" name="bleachbit-lang" arch="noarch">
  <version epoch="0" ver="2.0" rel="lp150.2.3.1"/>
  <changelog author="Sascha.Manns@open-slx.de" date="1321358400">- updated to version 0.9.1
- These are the changes since version 0.9.0:
  + Clean segments and segment_usage in Google Chrome History
  + Clean favicons on Chromium, Google Chrome
  + Clean "History Provider Cache" on Chromium and Google Chrome
  + Clean download history in Chromium, Google Chrome
  + Fix rare "ZeroDivisionError: float division" bug while cleaning free disk space.</changelog>
  <changelog author="Sascha.Manns@open-slx.de" date="1331985600">- updated to version 0.9.2
- These are the changes since version 0.9.1
  These are the changes since version 0.9.1:
  * Clean Firefox crash reports.
  * Clean more Google Chrome and Chromium history: omnibox shortcuts,
    Network Action Predictor, and keywords_backup.
  * Clean LibreOffice.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1344081600">- Update to 0.9.3.
  * The new application icon looks better ? especially on a black
    background.
  * Google Chrome and Chromium: clean some more SQLite database
    journals.
  * Google Chrome and Chromium: clean Favicons on new browser
    release (instead of giving an error about the database
    version).
  * Google Chrome, Chromium: find more bookmarks to avoid affecting
    history and favicons related to bookmarks, and avoid the error
    "KeyError: 'url'".
  * Be quiet about "Unsupported special file type" error message
    (lp#1012930).
  * Do not try to launch GUI if X is not available (lp#1004923).
  * Be quiet about "[Errno 39] Directory not empty" error message
    (lp#1012930).
- Build requires python-distribute instead of python-devel.
- Remove bleachbit.desktop from additional source: have it in
  tarball.
- Recommends language package.
- Clean up spec.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1345291200">- Fix runtime dependencies: really needs python-gnomevfs only.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1354795200">- Update to 0.9.4.
  * Add feature for user-defined custom cleaners. In the
    preferences, easily choose files and folders you regularly want
    to clean, and then select them from cleaning under System -
    Custom.
  * Google Chrome and Chromium: Fix error "Favicons is version 23"
    with Google Chrome 23.
  * Google Chrome and Chromium: Delete many more history files.
  * Google Chrome and Chromium: If bookmark files does not exist,
    do not throw an error.
  * Clean FAT32 partitions with more than 4GB free space.
  * Do not delete /usr/share/kde4/apps/ksgmltools2/customization
    required by kdelibs.
- Add cleaner example to docs.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1358164800">- Update to 0.9.5.
  * Google Chrome, Chromium: separate cleaning of passwords out of
    history into its own option.
  * Google Chrome: delete Flash cookies in Pepper Flash.
  * Google Chrome: delete more history.
  * Thunderbird: delete folder index files (.msf).
  * Clean out obsolete data (hashpath) in bleachbit.ini to reduce
    file size and improve privacy.
  * Improve compatibility of memory wiping with 64-bit systems.
  * Improve ability to run headless.
  * Support newer Linux kernels in memory cleaner by using new
    out-of-memory score adjustment /proc/pid/oom_score_adj.</changelog>
  <changelog author="lazy.kent@opensuse.org" date="1373630400">- Update to 0.9.6.
  * Improve wiping of free disk space.
  * Google Chrome: Fix error message no such table: keywords_backup:
    /home/foobar/.config/google-chrome/Default/Web Data.
  * Google Chrome: Fix error message Favicons is version 25.
  * Google Chrome: Delete more cache.
  * Clean Apache OpenOffice.org 3.4.1.
  * Clean LibreOffice 4.
  * OpenOffice.org: if history file has not changed, do not save
    it.
  * Adobe Acrobat: use wildcards to generically support more
    versions.
  * Do not clean VLC while it is running.
  * Thunderbird: clean indexes on Fedora.
  * Firefox: clean minidumps (crash information).
  * Clean more IcedTea (Java) cache.
  * Update Basque, Brazilian Portuguese, Croatian, English (United
    Kingdom), Esperanto, Estonian, French, German, Indonesian,
    Kirghiz, Lietuvi?, Polish, Russian, Slovak translations.
- Use full URL as a source.</changelog>
  <changelog author="saigkill@opensuse.org" date="1385294400">- updated to 1.0
- Changes:
  o The command line option --shred now shreds arbitrary files.
  o Add Octave cleaner
  o Add Warzone 2100 cleaner
  o Clean recently played in VLC (thanks to nolme/Vincent DUVERNET - Nolmë
    Informatique)
  o Google Chrome: Fix errors "Favicons is version 26" and "DatabaseError:
    no such column: full_path"
  o Google Chrome: delete more cache
  o Remove auto-hide option. (Before, it was a default.)
  o Specific to Linux
  * Coming soon: .deb package for Ubuntu 13.10 (Saucy Salamander).
  * Coming soon: .rpm package for openSUSE 11.4.
  * Add SQLite3 cleaner
  * Adobe Flash: clean NativeCache</changelog>
  <changelog author="saigkill@opensuse.org" date="1400155200">- Added patch to change KDE's Cleaning Path from .kde to .kde4
  * bleachbit-kde-patch.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1403006400">- Version bump to 1.2 with various small fixes.</changelog>
  <changelog author="ecsos@opensuse.org" date="1410350400">- Update to 1.4
  * Firefox: Fix DatabaseError: no such table: moz_hosts
  * Firefox: Purge the table moz_hosts in places.sqlite for the
    option url_history
  * Firefox: Delete Necko Predictive Network Actions
  * Firefox: Delete more session restore files
  * Google Chrome: fix error cleaning autofill_dates
  * Adobe Reader: use wildcards instead of specific versions
  (thanks to theatre-x)
  * Clean netMRL history in VLC media player (thanks to tiemay)
  * Clean GIMP version 2.8 (thanks to tiemay)
  * Improve support for Liferea (thanks to Lars Windolf)
  * Specific to Linux
  - Pass control of the ~/.cache/mozilla directory from the
    System - Cache cleaner to the Firefox - Cache cleaner
    (LP#1295826)
  - Clean additional locale directories (thanks to tstenner)
  - Clean .mask files in Easytag (thanks to tiemay)
  - Clean more history in the Links web browser (thanks to tiemay)
  - Add packages for CentOS 7 and RHEL 7</changelog>
  <changelog author="ecsos@opensuse.org" date="1417521600">- Update to 1.6
  * Google Chrome: fix error "Favicons is version 29"
  * Google Chrome: clean application cache directory.
  * Google Chrome and Chromium: in the Preferences (JSON) file
    clean a list of HTTP servers that used SPDY, which can be used
    to track servers to which the browser was connected
  * Firefox: clean more session restore files
  * Firefox: clean bookmark backups using a new option called
    Backup.
  * The auto-hide option, which was removed in version 1.0,
    is available again.
  * Specific to Linux
  - Google Chrome: delete Sync Data Backup
  - Chromium: delete application cache directory
  - Print a message when root account is being cleaned to avoid
    confusion
  - Whitelist more KDE IPC files under /tmp/ to fix problem
    launching BleachBit as root</changelog>
  <changelog author="p.drouand@gmail.com" date="1446379200">- Update to version 1.8
  * In Preferences, there is a new option "Confirm before delete"
    that disables the confirmation.
  * When BleachBit starts, the window is centered.
  * The tool "Shred Settings and Quit" in the File menu is fixed.
  * Added cleaning for Opera passwords.
  * Shrink storage size of BleachBit icon.
  * Add descriptions to many cleaners).
  * Add a new command line option --debug-log that logs debug messages
    to a file.
  * Replace hard-coded localizations cleaning system with CleanerML entries.
  * Whitelist /tmp/fsa for FSArchiver.
  * Suppress GTK+ warning in console.
  * Add packages for Debian 8, Fedora 21, and Ubuntu 15.04.
  * Remove packages for Fedora 19 and Ubuntu 13.10.
  * In CleanerML, a cleaner description can have a translation hint.
  * Set up Travis CI for better testing.
  * Improve unit tests.</changelog>
  <changelog author="mailaender@opensuse.org" date="1458475200">- Update to 1.10
  * Speed up identification of files using regular expressions by 5% to 50%
  * Allow relative paths with --shred command line argument (reported by Eva Putnam).
  * Add descriptions for cleaners (thanks to theatre-x).
  * Fix resizing of preference dialog (thanks to Anton Bobov).
  * Warn when deleting passwords on Firefox (reported by Theatre-X).
  * Accept abbreviations T and F in bleachbit.ini configuration (reported by Ken Wallace).
  * Show a user-friendly error message when checking for updates fails because of a network error (reported by Gary).
  * Improve logging of errors. Some errors are more informative, and on Windows, errors are unlikely to cause a popup message about bleachbit.exe.log.
  * Add an option to show file sizes as IEC units (1 KiB = 1024 bytes) instead of SI units (1 kB = 1000 bytes; thanks to Tristan Stenner).
  * Clean passwords on Firefox version 32+.
  * Clean Google Chrome cookies for non-default profiles.
  * Clean more autofill on Google Chrome (reported by pcdoctor01). If you are logged in to Google Chrome, it may automatically restore some of these values from your online Google account unless you disable the option Show addresses and credit cards from Google Payments in the autofill page of Google Chrome settings.
  * Add size column to side tree control (thanks to Ivor Hewitt).
  * Clean more localizations (thanks to Tristan Stenner).
  * Add localization codes (thanks to Tristan Stenner).
  * Fix memory cleaning on Ubuntu 15.10 and other distributions (reported by Richard Pearse).
  * Fix harmless error that localizations.xml is unusable (thanks to Tristan Stenner).
  * Do not show localizations at the base level (reported by BBUser).
  * Do not show Windows Explorer cleaner on Linux (reported by Tomás F. L.).
  * Fulfill Fedora license file location change.
  * Do not delete xauth under KDE (reported by mike).
  * Remove deprecated key encoding in bleachbit.desktop.
  * Drop support for Mandriva, which is dead.
  * Do not show cleaner is unusable message in the console (except when debug mode is enabled or in non-final releases).</changelog>
  <changelog author="mailaender@opensuse.org" date="1467547200">- Update to 1.12
  * Fix error Favicons is version 32 with Google Chrome 51 (reported by Holger)
  * Fix cleaning of Thumbnails in new Chromium and Google Chrome (reported by ineuw, patrick)
  * Fix crash with corrupt BleachBit.ini (reported by BitBleacher)
  * Fix error UNIQUE constraint failed error cleaning Firefox (reported by danjackson1 and gravy45)
  * Update EasyTAG cleaner (thanks to devmapper0)
  * Update Epiphany cleaner (thanks to devmapper0)
  * Update Evolution cleaner (thanks to skquinn)
  * Update GNOME cleaner (thanks to devmapper0)
  * Update KDE cleaner for KDE 4 on openSUSE (thanks to Mailaender)
  * Remove bleachbit-kde-patch.patch
  * Update Rhythmbox cleaner (thanks to devmapper0)
  * Update Thumbnails cleaner (thanks to devmapper0)
  * Update Transmission cleaner (thanks to devmapper0)
  * Update X11 cleaner (thanks to devmapper0)
  * Switch from GnomeVFS, which is deprecated, to GIO (reported by MM)
  * Do not repeat Google Chrome cache in preview (reported by Daniel Che)
  * Fix retention of translations for Chinese
  * Whitelist iBus Pinyin (reported by Josiah Hunter)</changelog>
  <changelog author="mailaender@opensuse.org" date="1473508800">- Add appdata.patch for https://en.opensuse.org/openSUSE:AppStore</changelog>
  <changelog author="jmatejek@suse.com" date="1499774400">- drop obsolete requirements on python-gnome and python-gobject2</changelog>
  <changelog author="aavindraa@gmail.com" date="1505908800">- Update to 1.17
  * There is a fix for handling special characters in usernames (LP#1347644).
  * Files can be dragged dropped onto the BleachBit window for shredding.
  * Enable "overwrite contents" and clean SQLite databases.
  * Clean HexChat (X-Chat).
  * 19 cleaners now use the XDG directory specification.
  * AppData information in the GNOME and KDE Software centers.
  * Clean journald.
  * Clean apt - autoremove.
  * Whitelisting should protect both the link source and target (LP#1455959).
- Drop appdata.patch, accepted upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1519992000">- Update to version 2.0:
  * Add drag-and-drop support (thanks to contractor Pavel). Try dropping files onto the main application window.
  * Fix preservation of thumbnails on Google Chrome and Chromium .
  * Fix error Favicons is version 36 or 38 when cleaning Google Chrome and Chromium.
  * Fix DatabaseError: no such table: moz_favicons for some Firefox profiles.
  * Use HTTPS encryption when automatically checking for software updates.
  * Add software categories to bleachbit.desktop (thanks to Hugo Lefeuvre).
  * Whitelist Bluetooth daemon (reported by Timo Ollech).
  * Fix purging of GTK recently used resources list.
  * Improve Liferea cleaner (reported by Theatre-X).</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1533643200">- add missing dependency python-xml (boo#1104093).</changelog>
</package>
<package pkgid="64433feb87c06e20653af408c3a0ea4ad6c7b14b69e5402d4f5f073b0158903a" name="blender" arch="src">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences » Themes » User Interface » Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="6a7856e45091dda9c345e3492e4134d7954ea4459bd481e31069cc067e44fc31" name="blender" arch="x86_64">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences » Themes » User Interface » Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="e10c1254cecf9dc09d589070ea5c77029acb30608445e43079b1ff8ea11de159" name="blender-devel" arch="noarch">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences » Themes » User Interface » Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="f37da43fbefa639b8846e8674ef719d538026c5a8782fbe54b35f590599c8660" name="blender-lang" arch="noarch">
  <version epoch="0" ver="2.79b" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1470830400">- Add blender.appdata.xml as a source file and install it to
  %{_datadir}/appdata/. This makes blender show up in appstores
  like GNOME Software and KDE Discover, making it more easily
  discoverable and installable.</changelog>
  <changelog author="davejplater@gmail.com" date="1475409600">- Update to release 2.78
- Removed blender-2.58-python_include.patch, no longer relevant.
- Upstream changes:
  The Blender Foundation and online developer community are proud
  to present Blender 2.78, released September 30th 2016!
  This release aims to be a very stable one, so that developers
  can focus better on Blender 2.8 work. Some of the highlights:
    Spherical Stereo images rendering support for VR
    Grease Pencil is now a full 2D drawing &amp; animation tool!
    Viewport Rendering improvements
    New Freehand curves drawing over surfaces!
    Bendy Bones, powerful new options for B-Bones
    Alembic support: import/export basic operators
    Cloth Physics: new Dynamic Base Mesh and Simulation Speed
    option
    New Add-ons, individual preferences, Python APIs changes, and a
    lot of new &amp; updated add-ons!
    For more details see:
    https://www.blender.org/features/2-78/
  Bugfixes, too many for this changelog, see:
  https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.78/Bug_Fixes</changelog>
  <changelog author="davejplater@gmail.com" date="1478088000">- Update to version 2.78a.
- Upstream changes:
  * For 2.78a, 69 bugs were fixed,the two outstanding points being:
  * Cycles is now using Cuda8 for all GPUs, performances issues with
  ?old? ones have been fixed.
  * Several issues were fixed in new data-blocks management code,
  including some crashers, and bad ?append? behaviors.
  * Fix T49629: Graph editor normalize function doesn't work on
  f-curves with a constant key value (rB8ebc7565e7).
  * Fix T49571: 2d stabilize keys not visible in the Graph Editor
  and Dope Sheet (rBd1f5c0fe48).
  * Fix T49622: Grease pencil not rendering out of VSE
  (rB9d4e3b0e63).
  * Fix unreported: Fix: Grease Pencil palettes were missing a RNA
  path callback (rB0b734f0b59).
  * Fix unreported: Fix export image generated by export UV layout
  (rB3bf9cbe7a2).
  * Fix T49471: Vertex Connect randomly broken (rB949b23d29b).
  * Fix T49478: triangulate of face hangs Blender (rB08e4846540).
  * Fix unreported: Fix assert in the wrong place, should be moved
  earlier to do anything (rB8030c4832a).
  * Fix T49464: Data Transfer modifier slows down redraw of window
  (rBff27b58b4c).
  * Fix T49595: bpy - negative skin_vertices radius crashes Blender
  (rB02eec191fb).
  * Fix unreported: Normal edit modifier: Fix relation builder for
  the new dependency graph (rB106ff0df99).
  * Fix T49548: Entering Cycles Rendered Viewport Unlinks Material
  from Objects (rB4640bf890e).
  * Fix T49827: L Crash linking material while in Material viewport
  shading mode (rB452d43b1c8).
  * Fix unreported: Fix mistake in BKE_mesh_new_from_object handling
  of materials in MetaBall case (rB602b2dbd8c).
  * Fix T49460: Particle group instance 'Use Count' value gets reset
  on file-load (rB8aa04160ba).
  * Fix T49608: runtime-only particle's boid-&gt;ground Object pointer
  was left dangling to invalid value in read code (rB29fdcbbf9f).
  * Fix T49738: Hair Add Brush doesn't work (rB50751d62e9).
  * Fix unreported: Ammend torB00dc0666b3fe: forgot to fix
  boid-&gt;ground of first particle (rB7ab972fd63).
  * Fix T49461: Dynamic paint wetmap flickers (rBa88af3e576).
  * Fix T49636: material draw mode crash with displacement and
  missing group input node (rBc9b5253cfc).
  * Fix T49789: Compositor mix node interpolation bug
  (rBe1cf002ee6).
  * Fix T49523: very slow normal map tangent computation for
  rendering in 2.78 (rB0d1bc587fa).
  * Fix T49609: Point density textures: vertex colors are not
  properly averaged in BI (rB880ebfff58).
  * Fix T49623: Immediately crash trying to render attached file in
  Cycles (rBbe254b52dc).
  * Fix T49640: Cycles constant folding incorrect for texture
  coordinates (rB10598c084e).
  * Fix T49750: Cycles wrong ray differentials for perspective and
  stereo cameras (rB4c94e327a2).
  * Fix T49818: Crash when rendering with motion blur
  (rB66ed7d7566).
  * Fix unreported: Cycles: Fix typo in shader cancel routines
  (rB08d21ff582).
  * Fix unreported: Fix wrong Cycles GLSL pointiness, still not
  supported but should be neutral 0.5 (rB4da266f48c).
  * Fix unreported: Fix Cycles CUDA performance on CUDA 8.0
  (rBfd0dea585c).
  * Fix unreported: Cycles: Fix OpenCL split kernel compilation
  after recent CUDA 8 performance fix (rB117329ae6d).
  * Fix unreported: Cycles: Fix use of uninitialized variable in SSS
  (rBb42e4c3c40).
  * Fix unreported: Cycles: Fix uninitialized variable from the
  previous commit (rBf55221e0a1).
  * Fix unreported: Cycles: Fix static initialization order fiasco
  (rBf0adb875cf).
  * Fix unreported: Fix Cycles address space OpenCL error after
  recent fix (rB759b5fb2a6).
  * Fix unreported: Cycles: Fix shadowing variable which also causes
  use of uninitialized variable (rB21bf863934).
  * Fix unreported: Fix missing outliner redraw when adding VSE
  strip (rB00d08c909d).
  * Fix T49534: 2.78 Wrong texture scaling in material viewport
  (rB3fb0c1b8e7).
  * Fix unreported: Fix missing properties editor update when
  changing 3D View camera (rB483b4f0567).
  * Fix unreported: UPBGE: Fix crash when calling shade_light
  texture when mtex has no tex (rBf978deddf8).
  * Fix unreported: Fix viewport camera gets out of sync in certain
  cases (rBcdedd082f3).
  * Fix T49506: Remove unused File Browser theme settings
  (rB11120c2981).
  * Fix T49631: radial control operators not using DPI properly
  (rB97bba76e8c).
  * Fix T49635: column_flow Layout - last column is too small
  (rB03f935961a).
  * Fix T49646: Switching from large to small image can get stuck
  zoom at max zoom distance (rBe6d9b15ab3).
  * Fix T49601: Material menu length problem (rBdacb53ff71).
  * Fix T49746: crash loading user preferences with missing
  operators (rBa6220f459b).
  * Fix unreported: Fix missing new eyedropper keymap entry in
  keyconfig_utils.py (rB07508c8b93).
  * Fix unreported: Fix memory leak caused by unknown opeartor of
  keymap item (rB4d14bd10c0).
  * Fix unreported: Fix wrong separator line width after drawing vec
  icon (rB2525c4e129).
  * Fix T49520: broken vertex colors in the game engine
  (rBe96e66b05b).
  * Fix T49764: Audio strips crackle when animating the volume
  (rB1bcddea00e).
  * Fix T49656: Crash when starting playback while using JACK audio
  with A/V sync (rB7b311c07ee).
  * Fix T49423: Data Preview of group containing only group
  instances is empty (rBa05f9bef3f).
  * Fix T49502: file browser on OS X not highlighting system folders
  and bookmarks (rB9fea90ba36).
  * Fix T49501: Animations imported via alembic render with wrong or
  no motion blur (rBe65e5045de).
  * Fix T49502: file browser on OS X not highlighting external
  drives (rB4736664da6).
  * Fix unreported: Fix missing operator-type registration
  (rBe145990fdd).
  * Fix T49466: Stupid typo in logicbricks new copy code
  fromrB776a8548f03a (rBd78a4b0c62).
  * Fix T49489: Pose marker in camera action + marker bound to
  camera -&gt; crash (rB7b43307508).
  * Fix T49553: Blender 2.78 crashes when File-&gt;Data Previews
  - &gt;Refresh Datablock Previews (rBb8194a52a0).
  * Fix T49722: Appending Bug (Groups) (rB44372d6441).
  * Fix T49775: Appending data with internal dependency cycles
  prevents correct clearing of linked data-blocks (rB3da4560143).
  * Fix unreported: Fix Scene datablocks being created with a real
  user while never having any real datablock user (rBcb9d010421).
  * Fix unreported: Fix OLD pre-git links in the API, add missing
  factory-startup option to blender executions (rBfd9aa06440).
  * Fix T49797: Exception from scene update handler might leak
  external engine descriptors (rBdac53963a8).
  * Fix unreported: BLI_task: fix case were some pool could work in
  more threads than allowed (rB4dbcbf5ba9).
  * Fix unreported: Fix a few compile errors with C++11 on macOS
  (rBcb6c43b61c).</changelog>
  <changelog author="davejplater@gmail.com" date="1479038400">- Use %mime_database_post macro instead of calling direct.</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="davejplater@gmail.com" date="1486728000">- Update to version 2.78b
- Bugfix version</changelog>
  <changelog author="davejplater@gmail.com" date="1486728001">- Build with system audaspace.</changelog>
  <changelog author="davejplater@gmail.com" date="1488369600">- Update to 2.78c
- Upstream changes:
  Port all changes for automated Cycles testing.
  Fix for wrong render result of hair with BVH motion steps.
  Fix compilation error of GLSL viewport when using Light Path node.
  Fix wrong Brick texture in material viewport.
  Fix crash with material preview and image sequences.
  Fix T50512: Linked Backround scene with animation not updating
  with new depsgraph.
  Fix T50687: Cycles baking time estimate and progress bar doesn't
  work / progress when baking with high samples.
  Fix T50748: Render Time incorrect when refreshing rendered preview
  in GPU mode.
  Fix wrong render results with texture limit and half-float
  textures.
  Fix Cycles still saving render output when error happened.</changelog>
  <changelog author="davejplater@gmail.com" date="1488715200">- Disabled system audaspace due to email crash report.</changelog>
  <changelog author="davejplater@gmail.com" date="1491566400">- Enabled system audaspace with blender-system-audaspace.patch
  which fixes the crash. see boo#1027923 and github audaspace #7</changelog>
  <changelog author="ideasman42@gmail.com" date="1495022400">- Remove extern paths which no longer exist, also epydoc which
  isn't used since 2.4x.</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108800">- Remove yasm (was only needed for extern/ codecs) now removed.
- Remove ruby (Blender doesn't use Ruby).</changelog>
  <changelog author="ideasman42@gmail.com" date="1495108801">- Remove doxygen (only documents internal source code, not
  public / scripting API's).</changelog>
  <changelog author="davejplater@gmail.com" date="1505908800">- Update to release 2.79
- Remove blender-system-audaspace.patch incorporated in this version
- Now build with ffmpeg and cyles unconditionaly.
- Added blender-2.78-C++11-build-fix.patch for future openvdb build.
- Specifically require audaspace-plugins to fix boo#1057965.
- Add Compatibility_Warning.txt to warn about 2.78/2.79 compatibility
  problems on installation.
- Upstream changes:
  * Cycles: Built-in Denoising, Shadow catcher,Principled shader,
    AMD OpenCL optimizations.
  * Grease Pencil: New frame interpolation tools, per-layer onion
    skinning.
  * Alembic: Improvements to compatibility, stability and support.
  * User Interface: Initial support for reusable custom
    configurations, automatic DPI scaling.
  * Twenty Three new and several updated add-ons.
  * 100s of bug fixes and other improvements!
  * Compatibility Warning
    Due to various issues with drivers for AMD GCN 1.0 architecture
    , those cards are no longer supported for Cycles rendering
    When using add-ons in Blender 2.79 that take advantage of the
    new data-block pointer properties, the resulting .blend files
    can't be opened in earlier versions of Blender. Attempting to
    open such .blend files in Blender 2.78c and earlier may crash.
    Some Interface Themes may need to be reloaded to work properly.
    The text color contained in a layout.box() is now defined in
    User Preferences » Themes » User Interface » Box section
    Rig compatibility:
    Changes to IK snapping may affect rigs that use non-uniform
    IK scaling. (rigs created in the 2.78 builds.)
    During the 2.78 series: IK snapping was partly broken.
    This has been fixed for Blender 2.79
    Rigs created in Blender 2.78 may not be compatible with
    2.79.
    Rigs created in Blender 2.77 may still work.
    When using the add-on Rigify, please note:
    Compatibility is broken for this release. There's no
    guarantee rigs created in previous Blender versions will
    work correctly.
    Rigs created in Blender 2.78 may not be compatible with 2.79.
    Rigs created in Blender 2.77 may still work.
    Save your work before attempting upgrading your rigs.
- See:https://wiki.blender.org/index.php/Dev:Ref/Release_Notes/2.79
  For a comprehensive list.</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- Do not BuildRequire openSUSE-release: in TW, this is a daily
  changing package, invalidating blender daily. There is no
  information a package would require, which is not also available
  in distribution-release (which exists for this very purpose and
  can be used across SUSE distributions, incl. Leap/SLE).</changelog>
  <changelog author="davejplater@gmail.com" date="1519992000">- Update to release 2.79a
- Upstream changes:
  Blender 2.79a features a new Denoiser, PBR Shader, Shadow Catcher,
  Filmic Color Management, AMD OpenCL improvements and much more.
  All of that plus over a massive 900 bug fixes!</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1522152000">- Remove xorg-x11-devel from buildrequires.
- Reorder/rework buildrequires, packages libao-devel,
  libdrm-devel, libexpat-devel,libvorbis-devel,openssl-devel,
  libsamplerate-devel are not required and were removed.
- Build using -DWITH_SYSTEM_LZO so lzo-devel is actually
  used.</changelog>
  <changelog author="davejplater@gmail.com" date="1522152001">- Update to release 2.79b.
- Upstream changes:
  This is a bug fix release.</changelog>
  <changelog author="davejplater@gmail.com" date="1527854400">- Package blender cycles headers in blender-devel sub package to
  fix boo#1094777.
- Remove Compatibility_Warning.txt.</changelog>
  <changelog author="davejplater@gmail.com" date="1527940800">- Only allow headers for x86_64 arch.</changelog>
</package>
<package pkgid="698e76c66bdb06f0bee86e19d092f6786fac272e6c28810fc16f6776c2ecdffa" name="blueman" arch="src">
  <version epoch="0" ver="2.0.6" rel="lp150.3.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="74bffb59fc119f0a8a9849b517f7479fffc52dab90e4e9f883777e42d35eb95f" name="blueman" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp150.3.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="c4ceaeb657f40c402e1def97c1d2071a22ac4a004032f376abd8207b2d1ca096" name="blueman-lang" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="lp150.3.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="96b65190286a4a9d6b0b74666352d9ca131872b41a7522d2dd7bcc6ecf358e90" name="bluez" arch="src">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="2dea82da2f832f4c619fc341daa96671a93066778474efa86706ae88625a0213" name="bluez" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="06fc5479d84f272aa919a4494c0a0d329b60e9c320ebaca7ed6621705c98c57e" name="bluez-auto-enable-devices" arch="noarch">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="f5c19392c2011594cea8af7325eb03b972bd7b3ed48c1b95a85324868b3c957d" name="bluez-cups" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="d18ae61288b98ff85d7a59618c8979f3397c9f003054c7ac395e9bd56a053509" name="bluez-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="55b69ed9db30210eb8e13d32f4afc470a3c0338de92c136d35a08c48b1ae3b4d" name="bluez-devel" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="14f5ce660471afdd5c2cb147d3407231701fbe11c61a9bbb8002fca325caba6d" name="bluez-test" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="fcbc646236c613ca4280d468fe8845862e11f017e4da62aa6964b2705cb3d168" name="bouncycastle" arch="noarch">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="f7e278770074fcb904aa07371c6007fd64a6d6b9cd7e9834ccb513d387c18e83" name="bouncycastle" arch="src">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="6fa9a9494191f36a22bce4d4f23c46ccda008a82eb97abec8488b09745ff5bcd" name="bouncycastle-javadoc" arch="noarch">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="mvyskocil@suse.cz" date="1326715200">- Initial packaging for SUSE
  from Fedora's bouncycastle 1.46</changelog>
  <changelog author="mvyskocil@suse.cz" date="1337342400">- bumb target to 1.6</changelog>
  <changelog author="mvyskocil@suse.com" date="1377691200">- use add_maven_depmap from recent javapackages-tools
- temporary mozilla-nss to BT: in order to pass a tests</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1384430400">- Don't own /etc/java/security to not clash with javapackages-tools
- Don't mark random files as config</changelog>
  <changelog author="darin@darins.net" date="1400155200">- disable bytecode check on sle_11</changelog>
  <changelog author="tchvatal@suse.com" date="1404734400">- Depend on junit not junit4</changelog>
  <changelog author="tchvatal@suse.com" date="1423569600">- Version bump to 1.50 to match Fedora
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1424433600">- Disable tests on obs as they hang</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="tchvatal@suse.com" date="1445601600">- Version update to 1.53 (latest upstream)
  * No obvious changelog
  * Fixes bnc#951727 CVE-2015-7940</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 1.54:
  * No obvious changelog to be found
  * Fixes bnc#967521 CVE-2015-7575</changelog>
  <changelog author="pcervinka@suse.com" date="1495195200">- New build dependency: javapackages-local
- Fixed requires
- Spec file cleaned</changelog>
  <changelog author="fstrba@suse.com" date="1504785600">- Set java source and target to 1.6 to allow building with jdk9</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Version update to 1.58
- Added patch:
  * ambiguous-reseed.patch
    + Upstream fix for an ambiguous overload</changelog>
  <changelog author="fstrba@suse.com" date="1526385600">- Build with source and target 8 to prepare for a possible removal
  of 1.6 compatibility</changelog>
  <changelog author="abergmann@suse.com" date="1528718400">- Version update to 1.59:
  * CVE-2017-13098: Fix against Bleichenbacher oracle when not
    using the lightweight APIs (boo#1072697).
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html
- Removed patch:
  * ambiguous-reseed.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532001600">- Version update to 1.60 bsc#1100694:
  * CVE-2018-1000613 Use of Externally-ControlledInput to Select Classes or Code
  * Release notes:
    http://www.bouncycastle.org/releasenotes.html</changelog>
</package>
<package pkgid="80b93e417daaa8be2edaab57a8f79ee9f2c8b21013effb15d6898ba4407240cd" name="breeze-gtk" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="9ce5a206a9b7e3285398095a9b088f89edb062d9d745477345b62e3e6957dbf4" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.24" rel="lp150.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
</package>
<package pkgid="60827af7ed19c9afdc890b1fb748834e97bccdc256b0b5fd34b604e399f5e6e8" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.24" rel="lp150.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- add fake basic contraints to Entrust root so p11-kit export the cert
  (bnc#829471)
- add nssckbi.h that matches certdata.txt; make sure package has the
  correct version number which is currently 1.93. No actual content
  change in certdata.txt compared to 1.85, it's just that the
  versioning scheme changed.</changelog>
  <changelog author="lnussel@suse.de" date="1374667201">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
</package>
<package pkgid="5451c511887cc2152424d7c246188b02284b86db1d61804e3e755dc202d19b57" name="ca-certificates-mozilla" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.3.6.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
</package>
<package pkgid="daf318625066c01ee360fab498c892aa8da83ec047adf83a32fa0dd02cd0e995" name="ca-certificates-mozilla" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.3.6.1"/>
  <changelog author="lnussel@suse.de" date="1374667200">- remove superfluous double quotes from certificate names</changelog>
  <changelog author="lnussel@suse.de" date="1376913600">- update Entrust root attributes to new format used by p11-kit</changelog>
  <changelog author="meissner@suse.com" date="1383048000">- Updated to 1.94
  * new: CA_Disig_Root_R1:2.9.0.195.3.154.238.80.144.110.40.crt
    server auth, code signing, email signing
  * new: CA_Disig_Root_R2:2.9.0.146.184.136.219.176.138.193.99.crt
    server auth, code signing, email signing
  * new: China_Internet_Network_Information_Center_EV_Certificates_Root:2.4.72.159.0.1.crt
    server auth
  * changed: Digital_Signature_Trust_Co._Global_CA_1:2.4.54.112.21.150.crt
    removed code signing and server auth abilities
  * changed: Digital_Signature_Trust_Co._Global_CA_3:2.4.54.110.211.206.crt
    removed code signing and server auth abilities
  * new: D-TRUST_Root_Class_3_CA_2_2009:2.3.9.131.243.crt
    server auth
  * new: D-TRUST_Root_Class_3_CA_2_EV_2009:2.3.9.131.244.crt
    server auth
  * removed: Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.185.102.crt
  * new:     Entrust.net_Premium_2048_Secure_Server_CA:2.4.56.99.222.248.crt
    I think the missing flags were adjusted.
  * removed: Equifax_Secure_eBusiness_CA_2:2.4.55.112.207.181.crt
  * new: PSCProcert:2.1.11.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_CA_2:2.16.30.158.40.232.72.242.229.239.195.124.74.30.90.24.103.182.crt
    server auth, code signing, email signing
  * new: Swisscom_Root_EV_CA_2:2.17.0.242.250.100.226.116.99.211.141.253.16.29.4.31.118.202.88.crt
    server auth, code signing
  * changed: TC_TrustCenter_Universal_CA_III:2.14.99.37.0.1.0.2.20.141.51.21.2.228.108.244.crt
    removed all abilities
  * new: TURKTRUST_Certificate_Services_Provider_Root_2007:2.1.1.crt
    server auth, code signing
  * changed: TWCA_Root_Certification_Authority:2.1.1.crt
    added code signing ability
- removed temporary Entrust.net_Premium_2048_Secure_Server_CA.p11-kit override.</changelog>
  <changelog author="lnussel@suse.de" date="1386590400">- fix handling of certificates with same name (bnc#854163)</changelog>
  <changelog author="meissner@suse.com" date="1386590401">- Updated to 1.95
  Distrust a sub-ca that issued google.com certificates.
  "Distrusted AC DG Tresor SSL" (bnc#854367)</changelog>
  <changelog author="meissner@suse.com" date="1392984000">- updated certificates to revision 1.96 (bnc#865080)
  new:     ACCVRAIZ1.pem   (Spain) (all trusts)
  new:     SG_TRUST_SERVICES_RACINE.pem (Singapore) (email signing only)
  new:     TWCA_Global_Root_CA.pem (Taiwanese) (all trusts)
  removed: Wells_Fargo_Root_CA.pem</changelog>
  <changelog author="lnussel@suse.de" date="1401883200">- updated certificates to revision 1.97 (bnc#881241)
  new: "Atos TrustedRoot 2011" (codeSigning emailProtection serverAuth)
  new: "Tugra Certification Authority" (codeSigning serverAuth)
  removed: "Firmaprofesional Root CA"
  removed: "TDC OCES Root CA"
  new: "TeliaSonera Root CA v1" (emailProtection serverAuth)
  new: "T-TeleSec GlobalRoot Class 2" (emailProtection serverAuth)</changelog>
  <changelog author="meissner@suse.com" date="1402401600">- in sle11 we bumped openssl-certs version to match the NSS version,
  so provide/obsolete the current version.</changelog>
  <changelog author="meissner@suse.com" date="1403092800">- do not provide openssl-certs, just obsolete it.</changelog>
  <changelog author="meissner@suse.com" date="1409054400">- Updated to 2.1 (bnc#888534)
- The following 1024-bit CA certificates were removed
  - Entrust.net Secure Server Certification Authority
  - ValiCert Class 1 Policy Validation Authority
  - ValiCert Class 2 Policy Validation Authority
  - ValiCert Class 3 Policy Validation Authority
  - TDC Internet Root CA
- The following CA certificates were added:
  - Certification Authority of WoSign
  - CA ?????
  - DigiCert Assured ID Root G2
  - DigiCert Assured ID Root G3
  - DigiCert Global Root G2
  - DigiCert Global Root G3
  - DigiCert Trusted Root G4
  - QuoVadis Root CA 1 G3
  - QuoVadis Root CA 2 G3
  - QuoVadis Root CA 3 G3
- The Trust Bits were changed for the following CA certificates
  - Class 3 Public Primary Certification Authority
  - Class 3 Public Primary Certification Authority
  - Class 2 Public Primary Certification Authority - G2
  - VeriSign Class 2 Public Primary Certification Authority - G3
  - AC Raíz Certicámara S.A.
  - NetLock Uzleti (Class B) Tanusitvanykiado
  - NetLock Expressz (Class C) Tanusitvanykiado
- certdata-temporary-1024.patch: restore some certificates removed
  from NSS as these are still used for some major sites.
  openssl is not as clever as NSS in selecting the new ones in the
  chain correctly.</changelog>
  <changelog author="meissner@suse.com" date="1421064000">- Updated to 2.2 (bnc#888534)
  - The following CAs were removed:
    + America_Online_Root_Certification_Authority_1
    + America_Online_Root_Certification_Authority_2
    + GTE_CyberTrust_Global_Root
    + Thawte_Premium_Server_CA
    + Thawte_Server_CA
  - The following CAs were added:
    + COMODO_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R4
    codeSigning emailProtection serverAuth
    + GlobalSign_ECC_Root_CA_-_R5
    codeSigning emailProtection serverAuth
    + USERTrust_ECC_Certification_Authority
    codeSigning emailProtection serverAuth
    + USERTrust_RSA_Certification_Authority
    codeSigning emailProtection serverAuth
    + VeriSign-C3SSA-G2-temporary-intermediate-after-1024bit-removal
  - The following CAs were changed:
    + Equifax_Secure_eBusiness_CA_1
    remote code signing and https trust, leave email trust
    + Verisign_Class_3_Public_Primary_Certification_Authority_-_G2
    only trust emailProtection</changelog>
  <changelog author="meissner@suse.com" date="1421236800">- diff-from-upstream-2.2.patch:
  Temporary reenable some root ca trusts, as openssl/gnutls
  have trouble using intermediates as root CA.
  - GTE CyberTrust Global Root
  - Thawte Server CA
  - Thawte Premium Server CA
  - ValiCert Class 1 VA
  - ValiCert Class 2 VA
  - RSA Root Certificate 1
  - Entrust.net Secure Server CA
  - America Online Root Certification Authority 1
  - America Online Root Certification Authority 2</changelog>
  <changelog author="meissner@suse.com" date="1459425600">- Updated to 2.7.
- diff-from-upstream-2.2.patch: removed as openssl 1.0.2 can do
  immediate root CAs.
- Removed server trust from:
  AC Raíz Certicámara S.A.
  ComSign Secured CA
  NetLock Uzleti (Class B) Tanusitvanykiado
  NetLock Business (Class B) Root
  NetLock Expressz (Class C) Tanusitvanykiado
  TC TrustCenter Class 3 CA II
  TURKTRUST Certificate Services Provider Root 1
  TURKTRUST Certificate Services Provider Root 2
  Equifax Secure Global eBusiness CA-1
  Verisign Class 4 Public Primary Certification Authority G3
- enable server trust
  Actalis Authentication Root CA
- Deleted CAs:
  A Trust nQual 03
  Buypass Class 3 CA 1
  CA Disig
  Digital Signature Trust Co Global CA 1
  Digital Signature Trust Co Global CA 3
  E Guven Kok Elektronik Sertifika Hizmet Saglayicisi
  NetLock Expressz (Class C) Tanusitvanykiado
  NetLock Kozjegyzoi (Class A) Tanusitvanykiado
  NetLock Minositett Kozjegyzoi (Class QA) Tanusitvanykiado
  NetLock Uzleti (Class B) Tanusitvanykiado
  SG TRUST SERVICES RACINE
  Staat der Nederlanden Root CA
  TC TrustCenter Class 2 CA II
  TC TrustCenter Universal CA I
  TDC Internet Root CA
  UTN DATACorp SGC Root CA
  Verisign Class 1 Public Primary Certification Authority - G2
  Verisign Class 3 Public Primary Certification Authority
  Verisign Class 3 Public Primary Certification Authority - G2
- New added CAs:
  CA WoSign ECC Root
  Certification Authority of WoSign
  Certification Authority of WoSign G2
  Certinomis - Root CA
  Certum Trusted Network CA 2
  CFCA EV ROOT
  COMODO RSA Certification Authority
  DigiCert Assured ID Root G2
  DigiCert Assured ID Root G3
  DigiCert Global Root G2
  DigiCert Global Root G3
  DigiCert Trusted Root G4
  Entrust Root Certification Authority - EC1
  Entrust Root Certification Authority - G2
  GlobalSign
  GlobalSign
  IdenTrust Commercial Root CA 1
  IdenTrust Public Sector Root CA 1
  OISTE WISeKey Global Root GB CA
  QuoVadis Root CA 1 G3
  QuoVadis Root CA 2 G3
  QuoVadis Root CA 3 G3
  Staat der Nederlanden EV Root CA
  Staat der Nederlanden Root CA - G3
  S-TRUST Universal Root CA
  SZAFIR ROOT CA2
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H5
  TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  USERTrust ECC Certification Authority
  USERTrust RSA Certification Authority
  ?????</changelog>
  <changelog author="meissner@suse.com" date="1459944000">- diff-from-upstream-2.7.patch: restore some important legacy
  CAs, otherwise Pidgin fails to talk to Google Talk for instance.</changelog>
  <changelog author="meissner@suse.com" date="1485259200">- updated to 2.11 state of the Mozilla NSS Certificate store.
- removed CAs:
  - Buypass_Class_2_CA_1:2.1.1.crt
    serverAuth
  - EBG_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?:2.8.76.175.115.66.28.142.116.2.crt
    codeSigning emailProtection serverAuth
  - Equifax_Secure_CA:2.4.53.222.244.207.crt
    emailProtection
  - Equifax_Secure_eBusiness_CA_1:2.1.4.crt
    emailProtection
  - Equifax_Secure_Global_eBusiness_CA:2.1.1.crt
    emailProtection
  - IGC_A:2.5.57.17.69.16.148.crt
    codeSigning emailProtection serverAuth
  - Juur-SK:2.4.59.142.75.252.crt
    codeSigning serverAuth
  - Root_CA_Generalitat_Valenciana:2.4.59.69.229.104.crt
    codeSigning emailProtection serverAuth
  - RSA_Security_2048_v3:2.16.10.1.1.1.0.0.2.124.0.0.0.10.0.0.0.2.crt
    codeSigning emailProtection serverAuth
  - Sonera_Class_1_Root_CA:2.1.36.crt
    emailProtection
  - S-TRUST_Authentication_and_Encryption_Root_CA_2005_PN:2.16.55.25.24.230.83.84.124.26.181.184.203.89.90.219.53.183.crt
    emailProtection
  - Verisign_Class_1_Public_Primary_Certification_Authority:2.16.63.105.30.129.156.240.154.74.243.115.255.185.72.162.228.221.crt
    emailProtection
  - Verisign_Class_2_Public_Primary_Certification_Authority_-_G2:2.17.0.185.47.96.204.136.159.161.122.70.9.184.91.112.108.138.175.crt
    emailProtection
  - Verisign_Class_3_Public_Primary_Certification_Authority:2.16.112.186.228.29.16.217.41.52.182.56.202.123.3.204.186.191.crt
    emailProtection
- added CAs:
  + AC_RAIZ_FNMT-RCM:2.15.93.147.141.48.103.54.200.6.29.26.199.84.132.105.7.crt
    serverAuth
  + Amazon_Root_CA_1:2.19.6.108.159.207.153.191.140.10.57.226.240.120.138.67.230.150.54.91.202.crt
    emailProtection serverAuth
  + Amazon_Root_CA_2:2.19.6.108.159.210.150.53.134.159.10.15.229.134.120.248.91.38.187.138.55.crt
    emailProtection serverAuth
  + Amazon_Root_CA_3:2.19.6.108.159.213.116.151.54.102.63.59.11.154.217.232.158.118.3.242.74.crt
    emailProtection serverAuth
  + Amazon_Root_CA_4:2.19.6.108.159.215.193.187.16.76.41.67.229.113.123.123.44.200.26.193.14.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G1:2.18.17.32.85.131.228.45.62.84.86.133.45.131.55.183.44.220.70.17.crt
    emailProtection serverAuth
  + Certplus_Root_CA_G2:2.18.17.32.217.145.206.174.163.232.197.231.255.233.2.175.207.115.188.85.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_ECC_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + Hellenic_Academic_and_Research_Institutions_RootCA_2015:2.1.0.crt
    emailProtection serverAuth
  + ISRG_Root_X1:2.17.0.130.16.207.176.210.64.227.89.68.99.224.187.99.130.139.0.crt (bsc#1010996)
    serverAuth
  + LuxTrust_Global_Root_2:2.20.10.126.166.223.75.68.158.218.106.36.133.158.230.184.21.211.22.127.187.177.crt
    serverAuth
  + OpenTrust_Root_CA_G1:2.18.17.32.179.144.85.57.125.127.54.109.100.194.167.159.107.99.142.103.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G2:2.18.17.32.161.105.27.191.189.185.189.82.150.143.35.232.72.191.38.17.crt
    emailProtection serverAuth
  + OpenTrust_Root_CA_G3:2.18.17.32.230.248.76.252.36.176.190.5.64.172.218.131.27.52.96.63.crt
    emailProtection serverAuth
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G4:2.16.33.110.51.165.203.211.136.164.111.41.7.180.39.60.196.216.crt
    emailProtection
  + Symantec_Class_1_Public_Primary_Certification_Authority_-_G6:2.16.36.50.117.242.29.47.210.9.51.247.180.106.202.208.243.152.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G4:2.16.52.23.101.18.64.59.183.86.128.45.128.203.121.85.166.30.crt
    emailProtection
  + Symantec_Class_2_Public_Primary_Certification_Authority_-_G6:2.16.100.130.158.252.55.30.116.93.252.151.255.151.200.177.255.65.crt
    emailProtection
- diff-from-upstream-2.7.patch: removed as we should be able to do
  intermediate root chains now with openssl 1.0.2 and also gnutls 3.5
  is able to do so.</changelog>
  <changelog author="jmatejek@suse.com" date="1508932800">- convert processing script to Python 3
- ensure a stable conversion of UTF8 hex-encoded certificate names
- ensure a stable ordering of trust/distrust bits in headers</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Updated to 2.22 state of the Mozilla NSS Certificate store.
- Removed CAs:
  * ACEDICOM Root
  * AddTrust Public CA Root
  * AddTrust Qualified CA Root
  * ApplicationCA - Japanese Government
  * CA Disig Root R1
  * CA WoSign ECC Root
  * Certification Authority of WoSign G2
  * Certinomis - Autorité Racine
  * China Internet Network Information Center EV Certificates Root
  * CNNIC ROOT
  * Comodo Secure Certificate Services
  * Comodo Trusted Certificate Services
  * ComSign Secured CA
  * DST ACES CA X6
  * GeoTrust Global CA 2
  * StartCom Certification Authority
  * StartCom Certification Authority
  * StartCom Certification Authority G2
  * Swisscom Root CA 1
  * TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
  * TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  * UTN USERFirst Hardware Root CA
  * UTN USERFirst Object Root CA
  * VeriSign Class 3 Secure Server CA - G2
  * WellsSecure Public Root Certificate Authority
  * Certification Authority of WoSign
  * WoSign China
- Added CAs:
  * D-TRUST Root CA 3 2013
  * GDCA TrustAUTH R5 ROOT
  * SSL.com EV Root Certification Authority ECC
  * SSL.com EV Root Certification Authority RSA R2
  * SSL.com Root Certification Authority ECC
  * SSL.com Root Certification Authority RSA
  * TrustCor RootCert CA-1
  * TrustCor RootCert CA-2
  * TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">-  Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="meissner@suse.com" date="1530878400">- Updated to 2.24 state of the Mozilla NSS Certificate store. (bsc#1100415)
- Removed CAs:
  * S-TRUST_Universal_Root_CA:2.16.96.86.197.75.35.64.91.100.212.237.37.218.217.214.30.30.crt
  * TC_TrustCenter_Class_3_CA_II:2.14.74.71.0.1.0.2.229.160.93.214.63.0.81.191.crt
  * TÜRKTRUST_Elektronik_Sertifika_Hizmet_Sa?lay?c?s?_H5:2.7.0.142.23.254.36.32.129.crt</changelog>
  <changelog author="meissner@suse.com" date="1534420800">- updated to 2.26 state of the Mozilla NSS Certificate store. (bsc#1104780)
  - removed server auth
  - Certplus Root CA G1
  - Certplus Root CA G2
  - OpenTrust Root CA G1
  - OpenTrust Root CA G2
  - OpenTrust Root CA G3
  - remove CA
  - ComSign CA
  - added new CA
  - GlobalSign</changelog>
</package>
<package pkgid="159d6d717e8eaae83ff8b8030c43e6e99643c6438505837a6a1916eb52e1370e" name="cairo" arch="src">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="5b64608a0ed55841936a5f0325464fdc6c152e0e2d7c7a260e86b7f7bf2eb7d9" name="cairo-devel" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="8a55ba610798f260d1848b841b4ff2c98091b2ed056357b09ed6e01a2217530c" name="cairo-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="40242fe3d07d77bf9d4d85fe5aa7af07a00874b20205e68189e0cebd67c19f28" name="cairo-tools" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="8caeec324ad775bf6880af8b9a372c9fe0ec10e7ac4234086c16b9bd356bc254" name="calibre" arch="src">
  <version epoch="0" ver="3.25.0" rel="lp150.3.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1510401600">- update to 3.12.0
  New Features
  - Driver for the new Nook Glowlight 3
  - Allow configuring the metadata fields displayed in the popup
    book details window. To configure, simply click the 'Configure'
    link at the bottom of the window.
  - Wireless driver: Allow specifying extra file formats
    (unknown to calibre) to send
  Bug Fixes
  - Fix a regression that caused clicking the clear button in the
    main search bar to not unapply the current search until enter
    is pressed.
  - Linux: Fix a regression causing calibre to fail to start on
    systems with no DBUS session bus
  - Browser viewer: Fix body font being forced to sans-serif,
    overriding in book and user stylesheet settings
  - Fix sending email failing of the computer's FQDN is set
    to a single period.</changelog>
  <changelog author="ecsos@opensuse.org" date="1512129600">- update to 3.13.0
  New Features
  - Driver for the new Bq Cervantes 4
  - Edit book: Auto-generate links to existing stylesheets when
    adding a new HTML file.
  - Add a button to easily clear server logs in
    Preferences-&gt;Sharing over the net-&gt;Show server logs.
  - Catalog generation: Store the list of fields to be used in
    generating CSV/XML catalogs per library.
  - Bulk metadata edit: Make the custom series controls similar to
    the builtin series ones, with the same set of features
  - Edit book: Pre-select existing cover image (if any) in add
    cover dialog
  - Make the Manage saved searches dialog a little easier for new
    users.
  - Add a tweak to control behavior of Enter on the book list
  - Content server: Fix random book button on book details page
    multiplying.
  - Edit Book: Bulk file rename dialog: Remember last used prefix
    for renaming files
  Bug Fixes
  - Tag browser: Fix use of the tweak to control order of items in
    the Tag browser causing unexpected expansion of items after
    editing metadata.
  - Content server: Improve rendering of tags/categories with long
    words on small screens.
  - Fix first added saved search not appearing in Tag browser until
    calibre restart.
  - When checking added books for duplicates, also check on the
    language field. So books with the same title/authors but
    different languages are not considered duplicates.
  - Edit Book: Spell check should not fail if there are non-HTML
    files in the spine
  - Conversion: Fix an error when using the embed_all_fonts option
    with certain books
  - Save to disk: Dont error out if the user deletes all formats
    to be saved.
  - Linux binary: Fix calibre not starting on systems where
    QT_QPA_PLATFORM is set to use wayland</changelog>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
</package>
<package pkgid="6b37c90d6afe001ba083129876d08d1d64efb77be69dfbde5ef53ce3253f2f12" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.25.0" rel="lp150.3.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1510401600">- update to 3.12.0
  New Features
  - Driver for the new Nook Glowlight 3
  - Allow configuring the metadata fields displayed in the popup
    book details window. To configure, simply click the 'Configure'
    link at the bottom of the window.
  - Wireless driver: Allow specifying extra file formats
    (unknown to calibre) to send
  Bug Fixes
  - Fix a regression that caused clicking the clear button in the
    main search bar to not unapply the current search until enter
    is pressed.
  - Linux: Fix a regression causing calibre to fail to start on
    systems with no DBUS session bus
  - Browser viewer: Fix body font being forced to sans-serif,
    overriding in book and user stylesheet settings
  - Fix sending email failing of the computer's FQDN is set
    to a single period.</changelog>
  <changelog author="ecsos@opensuse.org" date="1512129600">- update to 3.13.0
  New Features
  - Driver for the new Bq Cervantes 4
  - Edit book: Auto-generate links to existing stylesheets when
    adding a new HTML file.
  - Add a button to easily clear server logs in
    Preferences-&gt;Sharing over the net-&gt;Show server logs.
  - Catalog generation: Store the list of fields to be used in
    generating CSV/XML catalogs per library.
  - Bulk metadata edit: Make the custom series controls similar to
    the builtin series ones, with the same set of features
  - Edit book: Pre-select existing cover image (if any) in add
    cover dialog
  - Make the Manage saved searches dialog a little easier for new
    users.
  - Add a tweak to control behavior of Enter on the book list
  - Content server: Fix random book button on book details page
    multiplying.
  - Edit Book: Bulk file rename dialog: Remember last used prefix
    for renaming files
  Bug Fixes
  - Tag browser: Fix use of the tweak to control order of items in
    the Tag browser causing unexpected expansion of items after
    editing metadata.
  - Content server: Improve rendering of tags/categories with long
    words on small screens.
  - Fix first added saved search not appearing in Tag browser until
    calibre restart.
  - When checking added books for duplicates, also check on the
    language field. So books with the same title/authors but
    different languages are not considered duplicates.
  - Edit Book: Spell check should not fail if there are non-HTML
    files in the spine
  - Conversion: Fix an error when using the embed_all_fonts option
    with certain books
  - Save to disk: Dont error out if the user deletes all formats
    to be saved.
  - Linux binary: Fix calibre not starting on systems where
    QT_QPA_PLATFORM is set to use wayland</changelog>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
</package>
<package pkgid="8f7df0c303b5706ca250621f30bc334be21b9a4d65407362607211cb5c6abccc" name="calibre" arch="src">
  <version epoch="0" ver="3.27.1" rel="lp150.3.6.1"/>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
</package>
<package pkgid="b89a9a5d97b4646aad9d06168a12be18441bdfe29ce6b979700dac1ebafefb87" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.6.1"/>
  <changelog author="ecsos@opensuse.org" date="1513425600">- update to 3.14.0
  New Features
  - User manual: A new quick reference primer for regular
    expression syntax
    https://manual.calibre-ebook.com/regexp_quick_reference.html
  - Content server: Allow viewing the book metadata while reading
    a book. In the viewer controls, tap Goto and then Metadata to
    see the metadata.
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit: Allow choosing the algorithm used for
    changing the case of titles
  - Get books: The koobe.pl store plugin has now become the
    Swiat Ebookow store plugin
  - Allow Copy/paste of book metadata from the main book list.
    Right click the Edit metadata button to access these actions.
  - Allow disabling the confirmation popup when opening the
    containing folder of many books at once.
  Bug Fixes
  - Nook driver: Fix books sent via calibre not appearing under
    My Files on the Glowlight 3 Plus
  - Get Books: Update Mills &amp; Boon, publio, empik, legimi, woblink
    and beam-ebooks.de plugins for website changes
  - Book polishing: Do not scan book for font usage when subsetting
    if no embedded fonts are available.
  - Content server: Open links in the comments section from the
    book details page in new windows.
  - Choose English as the User interface language when a locale
    related environment variable is set to the C locale
  - Linux installer: A nicer error message if the user tries to run
    the installer on an ARM machine</changelog>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
</package>
<package pkgid="dce64667544180e559e42b3b53df655934c4793d10e8dcb91dcf7173c61c6763" name="calibre" arch="src">
  <version epoch="0" ver="3.27.1" rel="lp150.3.9.1"/>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
</package>
<package pkgid="124ecab9b0cfe1a450a78efb498e8675438a46c6042cd9cef364eec5c1e2d6b4" name="calibre" arch="x86_64">
  <version epoch="0" ver="3.27.1" rel="lp150.3.9.1"/>
  <changelog author="ecsos@opensuse.org" date="1515153600">- update to 3.15.0
  New Features
  - Browser viewer: Allow customizing what information is displayed
    in the header and footer areas. Access Preferences from the
    viewer controls to change.
  - Add support for MTP devices on FreeBSD
  - ToC editor: Add more case changing operations to the right
    click menu
  - Content server: Redirect pre 2.x book URLs to new 3.x URLs via
    a JavaScript redirect
  - Content server: Allow opening entries in the book list in a new
    tab via middle click/right click
  - Add a tweak in Preferences-&gt;Tweaks to exclude some fields when
    using the Edit metadata-&gt;Copy/paste actions
  - Linux: Allow using calibre-tray.png in the calibre resources
    folder to override the system tray icon.
  Bug Fixes
  - Browser viewer: Fix goto next/previous section actions not
    working when the sections are in different individual HTML
    files.
  - Edit book/Book polishing: When compressing images and the
    compressed image is larger thant he original, use the original
    image.
  - PDF input: Fix conversion of multi-level PDF Outline causing
    duplicate entries in the Table of Contents.
  - Edit book: Fix incorrect EPUB 3 declarations being added to the
    OPF file when adding covers to an EPUB 2 book
  - Edit book: Fix backspace key un-indenting instead of deleting
    even when text is selected if the cursor is at the start of the
    line
  - Tag browser: Fix position not bing preserved when deleting
    books.
  - Edit Book: Use the cache directory rather than the temp
    directory to store working files. Hopefully prevents temp file
    cleaners from destroying books.
  - EPUB input: Handle books that erroneously set the mimetype for
    font files to text/plain
  - AZW3 input: Do not fail to process files with invalid internal
    flow references.
  - When updating plugins, do not show the dialog asking which
    toolbar to put the plugin, even if the user has removed the
    plugin for all toolbars.
  - Content server: Fix using the Clear logs button preventing the
    server from restarting until calibre itself is restarted.</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Drop useless build requirement on poppler to make it build again.
  Such a package doesn't exist since ages, libpoppler provided
  "poppler" until recently but there should be no need to
  explicitly BuildRequire that anyway.</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- do not require liberation2-fonts, it is dead [bsc#1077375]
  [rh#856239]</changelog>
  <changelog author="ecsos@opensuse.org" date="1517054400">- update to 3.16.0
  New Features
  - Content server: Allow adding and deleting of books using
    the web interface
  - Allow removing the close button from tabs in the Virtual
    library tab bar. Right click the tab bar and choose 'Lock tabs'
    to do that.
  - calibredb export: Add --progress option
  - Bulk metadata editing: Show progress bars to track progress of
    the operation
  - Content server: When downloading books from the server send
    both the ASCII and full Unicode file names. Browsers that
    support RFC 6266 can make use of the unicode file name.
  - Content server: Show a warning popup on Apple devices when
    the user tries to search with an expression containing smart
    quotes, since Apple devices now automatically replace quotes
    with smart quotes when typing.
  Bug Fixes
  - DOCX Output: Fix links without anchors in the input document
    not being converted correctly.
  - calibredb: Fix a regression that broke reading of passwords
    from stdin
  - Edit book: Fix an error when saving files with filenames that
    cannot be encoded using the system codepage on Windows
  - Pasting metadata: Fix excluding title and authors not working</changelog>
  <changelog author="ecsos@opensuse.org" date="1518177600">- update to 3.17.0
  New Features
  - Allow splitting the book list, by right clicking on the column
    headers and choosing 'Split the book list'
  - Store temporary files used by the editor and viewer in the
    cache directory to try to prevent errors caused by
    'file cleaner' programs deleting temporary files still in use
  Bug Fixes
  - EPUB3 Input: Fix HTML covers and titlepages that are marked
    using the deprecated element not being recognized.
  - Bulk metadata edit: Fix regression in 3.13 that made it
    impossible to use the Force numbering checkbox for custom
    series
  - Conversion: Fix the valign attribute on tags not being honored
  - E-book viewer: Fix the 'Copy' keyboard shortcut/context menu
    action not working on some Windows systems
  - E-book viewer: Make the semi-transparent background for viewing
    metadata a little more opaque.</changelog>
  <changelog author="ecsos@opensuse.org" date="1519473600">- update to 3.18.0
  New Features
  - Browser viewer: Allow long tapping a word to look it up in
    a dictionary or search the internet for it.
  Bug Fixes
  - Conversion: Handle the deprecated type attribute on tags.
  - Fix metadata download from amazon stopped working because of
    a website change
  - Fix re-ordering of columns causing split book splitter state
    not being restored on restart
  - Fix errors when using strftime with unicode strings on
    non-utf-8 windows systems.
  - Split book view: Fix vertical scroll position of the two views
    getting out of sync after doing some searches.
  - Fix some edit widget appearing in the wrong place when editing
    in the right hand panel of the new split book list.
  - Portable build: Fix cache directory not always being
    auto-created
  - Workaround for Qt 5.10 on Linux resetting the global font,
    preventing custom interface font settings from working</changelog>
  <changelog author="ecsos@opensuse.org" date="1520596800">- update to 3.19.0
  New Features
  - Driver for the new PocketBook 740
  - Allow using relative URLs in comments type metadata.
    The relative URLs are interpreted relative to the book folder
    in the calibre library
  - Edit book: Reports: Do not show characters from the HTML markup
    in the characters report.
  - Allow adding the Virtual library button to any toolbar/menu via
    Preferences-&gt;Toolbars &amp; menus
  Bug Fixes
  - Server: Fix server becoming unresponsive if a client sends
    invalid SSL data at exactly the right moment
  - Conversion heuristics: Make unwrapping recognize Georgian
    letters as well.
  - Make de-serialization of stored conversion options safe against
    maliciously crafted input
  - E-book viewer: Change the file format used to import/export
    bookmarks to use JSON. This prevents malicious bookmarks files
    from causing code execution.
  - Make the history completion for the search and replace edit box
    case-sensitive.
  - PDF Output: When the input document contains multiple anchors
    with the same value, use the first anchor rather than the last.
    This follows browser behavior.
  - FB2 Input: Add to content to silence the useless epubcheck</changelog>
  <changelog author="ecsos@opensuse.org" date="1521892800">- update to 3.20.0
  New Features
  - Content server: Allow editing the metadata of books from the
    book details page
  - Kobo driver: Recognize Kobo Aura 2 with new firmware
    (4.6.10188)
  Bug Fixes
  - When reading metadata from HTML also recognize as being
    comments</changelog>
  <changelog author="ecsos@opensuse.org" date="1523188800">- update to 3.21.0
  New Features
  - Browser viewer: Allow showing the time left in the current
    chapter/book in the header and footer areas of the book.
  - Manage tags dialog: Searching now shows all matching tags and
    there is an undo button to undo changes.
  - Add an output profile for the Kindle Oasis 2017
  Bug Fixes
  - Content server: Fix adding/deleting books and editing metadata
    not updating the main calibre book list automatically.
  - Viewer: When doing a dictionary lookup, remove soft hyphens
    from the word, if any are present.
  - Edit metadata dialog: Fix tab order for buttons to the left
    of the title and author
  - Trim cover dialog: Remove the redundant Trim &amp; OK button,
    instead have the OK button trim automatically if there is
    a selection.
  - Update Amazon metadata plugin for a website change
  - Content server: Fix translations not being updated without
    clearing the browser cache
  - Content server: Fix switching from translations to no
    translations not working
  - Content server: When updating interface data do not transmit
    translations if they have not been changed. Saves ~30-60KB
    bandwidth when using non-English interface language.</changelog>
  <changelog author="ecsos@opensuse.org" date="1524312000">- update to 3.22.1
  New Features
  - Edit book: Add a tool to upgrade books from EPUB 2 to EPUB 3
    (Tools-&gt;Upgrade book internals)
  - Add support for the FBZ format (zipped FB2)
  - Kindle driver: Change the height of generated thumbnails to
    500px, needed for the Oasis 2017
  - Edit book: When bulk renaming files add an option to rename by
    the order in which the files appear in the book.
  - Polishing: Recognize titlepages that are marked as covers in
    the EPUB 3 landmarks section
  - Edit Book: Automatically updated the modified timestamp in the
    OPF when saving EPUB 3 books.
  - Remove the ISBNDB metadata plugin as ISBNDB no longer allows
    free lookups.
  Bug Fixes
  - EPUB 3 metadata: If the book defines more than one author sort
    value for an author use the first instead of the last
  - Check Book: Dont warn for nav document not in spine in EPUB 3
    books
  - Linux installer: Fix umask question not working with the
    recommended install command because stdin is a pipe
  - Browser viewer: Show an error message when trying to use the
    Sync function without being logged in
  - When setting cover from a PDF file and the user clicks cancel,
    do not delete the existing cover</changelog>
  <changelog author="ecsos@opensuse.org" date="1525435200">- update to 3.23.0
  New Features
  - Kobo driver: Add support for new firmware
  - Book polishing: Add an option to upgrade EPUB 2 to EPUB 3
  - DOCX Input: Convert text written with dingbat fonts such as
    Wingding or Symbol correctly.
  - When choosing the page to use as a cover from a PDF file,
    add a button to render more pages, if needed
  - TXT Input: Add support for embedded images that use relative
    URLs when converting markdown or textile. Note that this will
    only work if you are - converting using the ebook-convert
    command line tool as the main calibre program moves files
    around, so relative references will not be valid.
  - Edit book: Insert special character: Add an option to select
    if searching should match all words or any of the words
  - Edit book: Insert special character: When searching by name
    match prefixes in addition to whole words. So you can now type
    "horiz" to match "horizontal".
  - Linux installer: Simplify the command used to install calibre
    and add support for Ubuntu 18.04 which is missing a default
    python executable
  - When upgrading EPUB 2 to EPUB 3 add the 'epub' namespace to
    all HTML files, for convenience.
  Bug Fixes
  - Edit Book: Fix an error caused by a landmark entry in EPUB 3
    files that has an tag without an href attribute.
  - Edit Book: Fix names for some control characters not being
    displayed in the status bar
  - Searching: Fix A (B) not being treated as A AND (B)
  - Kobo driver: Add an option to not maintain bookmarks/read
    status/etc. when resending a book already on the device.
  - DOCX Input: Ignore complex script font styles. Fixes conversion
    of documents that specify only complex script styles and no
    simple script styles.
  - When updating EPUB 2 to EPUB 3 ensure only a single dc:date
    element is present in the OPF</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- Drop dependency on python-pypdf as we remove this package
  * The calibre does not depend on it since 2014 anyway</changelog>
  <changelog author="kbabioch@suse.com" date="1527163200">- Use OpenPGP signature provided upstream
- Added source to calibre.keyring, which contains the key from the author
- Used https for all URLs in the specfile</changelog>
  <changelog author="ecsos@opensuse.org" date="1527249600">- update to 3.24.0
  New Features
  - Conversion: EPUB Output: Add an option to output EPUB 3 files.
  - PDF Output: Add an option to break long words at the ends of
    lines.
  - PDF Output: Allow using images in the header/footer templates
  - Add an option to use two lines for the text under the toolbar
    button in Preferences-&gt;Look &amp; feel
  - Edit book: Spell check: Update the number of misspelled
    words/total words displayed when correcting/ignoring words.
  - Edit book: Fix HTML: Automatically resolve private entities
  - Improve formatting of help in Preferences-&gt;Tweaks
  - ToC Editor: Allow undo for renaming single items as well.
  Bug Fixes
  - PDF Output: Strip zero-width space characters from the text as
    their presence prevents searching from working
  - DOCX Output: Fix tags not being converted correctly.
  - DOCX Input: Fix incorrect conversion of a framed block that
    contains a list.
  - Conversion: Fix private entities that use the same name as an
    HTML entity not being handled correctly
  - Viewer: Fix HTML files with private entities displaying an
    artifact at the top
  - Edit book: Check book: Show an error for HTML files with
    private entities
  - EPUB3 Input: Fix titlepage being referred to in the nav causing
    two titlepage entries in the final book.
  - Fix throbber buttons not being perfectly aligned inside
    toolbars
  - Quickview: Fix sizes not being displayed.
  - Edit book: Compress images tool: Do not mark the book as
    changed if no images could be further compressed.
  - Book list split-view: Fix horizontal scroll position of split
    view can change when changing the current column in one view.
  - Fix Bookeen Saga not being recognized on macOS/Linux.
  - Edit metadata dialog: Fix undo last trim not working for
    automatic trims.
  - Content server: Fix series field blank in Italian translation
  - BeautifulSoup: Port fix from upstream for outputting bare
    ampersands in strings.
  - calibredb add: Run the input plugins before reading metadata
    instead of after.</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 3.24.1
  - Version 3.24.1 fixes a regression in the 3.24 in the editor
    that caused syncing between the editor and the Preview
    panel/Live CSS panel to not work correctly</changelog>
  <changelog author="ecsos@opensuse.org" date="1527508800">- update to 3.24.2
  - Version 3.24.2 fixes a bug in the new EPUB 3 output
    functionality that prevented conversion of non-EPUB 3 books
    to EPUB 3</changelog>
  <changelog author="ecsos@opensuse.org" date="1527854400">- update to 3.25.0
  New Features
  - Kobo driver: Support the new Clara HD
  - PDF Output: Add an option to use page margins from the input
    document, specified via @page CSS rules.
  Bug Fixes
  - Fix option to "show text under buttons only if there is
    enough space" not working well with the option to use
    "two lines for the text under the buttons".
  - Update notification: When both calibre and plugin updates are
    available and the user updates only the plugins, fix the
    restart calibre button not working.
  - E-book viewer: Fix printing of comics (cbz/cbr files) not
    working.
  - EPUB3 Input: Fix Table of Contents not being recognized for
    some EPUB 3 books that placed their nav document in-side
    a sub-folder.</changelog>
  <changelog author="ecsos@opensuse.org" date="1529064000">- update to 3.26.1
  New Features
  - Book list: Allow drag and drop of books onto other books to
    merge the book records.
  - Check Book: External link checker: Also check HTML anchors
    (the part after the # in the link). Can be turned off via
    a checkbox at the bottom of the link checker window.
  - Edit Book: Preview panel: Show previews when editing SVG files
  - Edit book: When downloading external resources, also convert
    data URLs into files.
  - E-book viewer: When the controls are hidden show the progress
    in the window title.
  - Library Quick switch menu: Highlight the previously switched
    from library in bold.
  Bug Fixes
  - PDF Input: Fix a regression in 3.24 that caused conversion of
    PDF to be significantly worse.
  - E-book viewer: Fix very slow loading for HTML files with
    very many images on Linux.
  - Content server: Fix a regression in 3.14 that removed
    the separator between books in the detailed list view mode.
  - Edit book: Fix SVG files not being beautified by the Beautify
    all files tool
  - Edit book: Fix searching in selected files not searching SVG
    files
  - Fix Tweaks help string not being displayed translated
  - Edit metadata dialog: Fix distorted rendering of some labels
    in the custom metadata tab in rare circumstances.
  - version 3.26.1 prevents dropping of a book onto itself from
    triggering the merge dialog, which should reduce accidental
    triggers</changelog>
  <changelog author="ecsos@opensuse.org" date="1530878400">- update to 3.27.1
  New Features
  - Content server: Allow conversion of books
  - Kobo driver: Add support for new firmware
  - Bulk metadata edit dialog: Add an "edit tags" button for tags
    like custom columns.
  - Add an option in Preferences-&gt;Look &amp; feel to disable the new
    'drag and drop to merge books feature'
  - E-book viewer: Add a shortcut (Ctrl+Alt+B) to toggle the
    bookmarks panel.
  - Edit book: Add a copy to clipboard button on the various report
    dialogs
  - Edit book: Add a shortcut (Ctrl+Alt+Down) to edit the next file
    in the book spine.
  - calibre-smtp: Verify relay server TLS certificates by default.
    New option --dont-verify-server-certificate to restore old
    behavior.
  Bug Fixes
  - Version 3.27.1 fixes a build error in 3.27.0 that caused
    calibre not to start on macOS older than High Sierra
  - Conversion: Fix a regression in the previous release that
    caused conversion of EPUB 3 to EPUB 3 to fail.
  - Fix detection of the Bookeen NolimbookXL on macOS and Linux
  - Fix a regression that broke the fetching of annotations from
    Kobo and Kindle devices.
  - DOCX Input: Fix failure to convert some DOCX files that use
    Symbol fonts.
  - When exporting very large libraries fix failures due to busy
    errors.
  - Fix commas not working in identifiers that are transformed
    to URLs via rules.
  - Review downloaded metadata: Fix cancel button on the confirm
    reject all dialog not working.
  - Kindle Fire driver: Send books by default to the "kindle"
    folder instead of the "Books" folder to workaround a change in
    the Fire firmware that causes the Kindle to not recognize files
    in the Books folder.
  - Linux installer: Also fix the execute bits in the umask if the
    user runs the installer with a umask that prevents files from
    being world executable.
  - Sort the entries in the show column menu alphabetically.</changelog>
  <changelog author="cornelis@solcon.nl" date="1535112000">- Fixes for boo#1105930:
  * Added update_kobo_driver.patch to add support for Kobo firmware
    4.10.11586
  * Added update_kindle_driver.patch to add support for cover images
    for the KFX format</changelog>
</package>
<package pkgid="1b57226b50e534b0935fda62af2b8033743e5ce0ae825aaa27a822e0bce45dde" name="cargo" arch="src">
  <version epoch="0" ver="0.26.0" rel="lp150.2.3.4"/>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519819200">- adapt cargo bootstrap version to 0.25.0
- adapt rustc bootstrap version to 1.24.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1521806400">- adapt rustc to 1.24.1</changelog>
  <changelog author="mmanu84@outlook.de" date="1525176000">- update to 0.25.0
  + Added a workspace.default-members config that overrides implied --all in virtual workspaces.
  + Enable incremental by default on development builds. Also added configuration keys to Cargo.toml
    and .cargo/config to disable on a per-project or global basis respectively.
- Patch disabled
  * update-config-guess.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525953600">- Update to version 0.26.0:
  + No longer removes rust or rs prefixs/suffixs.
  + Now defaults to creating a binary crate, instead of a library
    crate.</changelog>
  <changelog author="mmanu84@outlook.de" date="1526040000">- adapt cargo bootstrap version to 0.26.0
- adapt rustc bootstrap version to 1.25.0
- adapt rustc to 1.25.0</changelog>
</package>
<package pkgid="ff8ff176a300c5efa0321b6067b022eb1dc1c5160b51d1247e7cca308f545797" name="cargo" arch="x86_64">
  <version epoch="0" ver="0.26.0" rel="lp150.2.3.4"/>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752000">- Update to 0.17.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1489752001">- Remove reproducible.patch - has been upstreamed.</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1493380800">- Update to 0.18.0
  * [The `cargo check` command does a type check of a project without
  building it][cargo/3296]
  * [crates.io will display CI badges from Travis and AppVeyor, if
  specified in Cargo.toml][cargo/3546]
  * [crates.io will display categories listed in Cargo.toml][cargo/3301]
  * [Compilation profiles accept integer values for `debug`, in addition
  to `true` and `false`. These are passed to `rustc` as the value to
  `-C debuginfo`][cargo/3534]
  * [Implement `cargo --version --verbose`][cargo/3604]
  * [All builds now output 'dep-info' build dependencies compatible with
  make and ninja][cargo/3557]
  * [Build all workspace members with `build --all`][cargo/3511]
  * [Document all workspace members with `doc --all`][cargo/3515]
  * [Path deps outside workspace are not members][cargo/3443]
- Restrict version required for building</changelog>
  <changelog author="mimi.vx@gmail.com" date="1496923200">- require rust
- use system libgit2
- use pkgconfig deps</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1497009600">- Update to version 0.19.0
    + [Added partial Pijul support][cargo/3842] Pijul is a version control system in Rust.
    You can now create new cargo projects with Pijul using `cargo new --vcs pijul`
    + [Now always emits build script warnings for crates that fail to build][cargo/3847]
    + [Added Android build support][cargo/3885]
    + [Added `--bins` and `--tests` flags][cargo/3901] now you can build all programs
    of a certain type, for example `cargo build --bins` will build all
    binaries.
    + [Added support for haiku][cargo/3952]</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526400">- Cleans up rust_triple and adds rust compiler args
- Removes i586 from buildable targets</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1504526401">- Update to 0.21.0
  + [Cargo API token location moved from `~/.cargo/config` to
    `~/.cargo/credentials`.][cargo/3978]
  + [Cargo will now build `main.rs` binaries that are in sub-directories of
    `src/bin`.][cargo/4214] ie. Having `src/bin/server/main.rs` and
    `src/bin/client/main.rs` generates `target/debug/server` and `target/debug/client`
  + [You can now specify version of a binary when installed through
    `cargo install` using `--vers`.][cargo/4229]
  + [Added `--no-fail-fast` flag to cargo to run all benchmarks regardless of
    failure.][cargo/4248]
  + [Changed the convention around which file is the crate root.][cargo/4259]
  + [The `include`/`exclude` property in `Cargo.toml` now accepts gitignore paths
    instead of glob patterns][cargo/4270]. Glob patterns are now deprecated.
- Version 0.20.0
  + [Build scripts can now add environment variables to the environment
    the crate is being compiled in.
    Example: `println!("cargo:rustc-env=FOO=bar");`][cargo/3929]
  + [Subcommands now replace the current process rather than spawning a new
    child process][cargo/3970]
  + [Workspace members can now accept glob file patterns][cargo/3979]
  + [Added `--all` flag to the `cargo bench` subcommand to run benchmarks of all
    the members in a given workspace.][cargo/3988]
  + [Updated `libssh2-sys` to 0.2.6][cargo/4008]
  + [Target directory path is now in the cargo metadata][cargo/4022]
  + [Cargo no longer checks out a local working directory for the
    crates.io index][cargo/4026] This should provide smaller file size for the
    registry, and improve cloning times, especially on Windows machines.
  + [Added an `--exclude` option for excluding certain packages when using the
  ` --all` option][cargo/4031]
  + [Cargo will now automatically retry when receiving a 5xx error
    from crates.io][cargo/4032]
  + [The `--features` option now accepts multiple comma or space
    delimited values.][cargo/4084]
  + [Added support for custom target specific runners][cargo/3954]</changelog>
  <changelog author="opensuse@dstoecker.de" date="1505908800">- adapt cargo bootstrap version to 0.20 and gitlib2 requirement to 0.23</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241600">- Restrict x86 version to build i686 only</changelog>
  <changelog author="luke.nukem.jones@gmail.com" date="1508241601">- Update to 0.22.0
  + You can now call cargo install with multiple package names
  + Cargo commands inside a virtual workspace will now implicitly pass --all
  + Added a [patch] section to Cargo.toml to handle prepublication dependencies RFC 1969
  + include &amp; exclude fields in Cargo.toml now accept gitignore like patterns
  + Added the --all-targets option
  + Using required dependencies as a feature is now deprecated and emits a warning</changelog>
  <changelog author="mmanu84@outlook.de" date="1511179200">- adapt cargo bootstrap version to 0.22
- adapt rustc bootstrap version to 1.21
- add armv6 support</changelog>
  <changelog author="mmanu84@outlook.de" date="1511524800">- adapt cargo bootstrap version to 0.23
- adapt rustc bootstrap version to 1.22.1</changelog>
  <changelog author="jones_ld@protonmail.com" date="1515067200">- update to 0.24.0
  + Cargo now supports alternative registries[cargo/4506]
  + Cargo now supports uninstallation of multiple packages[cargo/4561]
    eg. `cargo uninstall foo bar` uninstalls `foo` and `bar`.
  + Added unit test checking to `cargo check`[cargo/4592]
  + Cargo now lets you install a specific version
    using `cargo install --version`[cargo/4637]
- version 0.23.0
  + Cargo will now build multi file examples in subdirectories of the `examples`
    folder that have a `main.rs` file.[cargo/4496]
  + Changed `[root]` to `[package]` in `Cargo.lock`[cargo/4571] Packages with
    the old format will continue to work and can be updated with `cargo update`.
  + Now supports vendoring git repositories[cargo/3992]</changelog>
  <changelog author="mmanu84@outlook.de" date="1516104000">- adapt cargo bootstrap version to 0.24</changelog>
  <changelog author="coolo@suse.com" date="1519128000">- add update-config-guess.patch to update config.* from GNU to
  support riscv64 without rpm patching it - as the patch also
  updates the checksums while rpm does not</changelog>
  <changelog author="mmanu84@outlook.de" date="1519819200">- adapt cargo bootstrap version to 0.25.0
- adapt rustc bootstrap version to 1.24.0</changelog>
  <changelog author="mmanu84@outlook.de" date="1521806400">- adapt rustc to 1.24.1</changelog>
  <changelog author="mmanu84@outlook.de" date="1525176000">- update to 0.25.0
  + Added a workspace.default-members config that overrides implied --all in virtual workspaces.
  + Enable incremental by default on development builds. Also added configuration keys to Cargo.toml
    and .cargo/config to disable on a per-project or global basis respectively.
- Patch disabled
  * update-config-guess.patch</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1525953600">- Update to version 0.26.0:
  + No longer removes rust or rs prefixs/suffixs.
  + Now defaults to creating a binary crate, instead of a library
    crate.</changelog>
  <changelog author="mmanu84@outlook.de" date="1526040000">- adapt cargo bootstrap version to 0.26.0
- adapt rustc bootstrap version to 1.25.0
- adapt rustc to 1.25.0</changelog>
</package>
<package pkgid="9e227cff0352a2fd2631b7c1a183daec56f7ed373965e1441bbd634e77319e0b" name="cdio-utils" arch="src">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1249560000">- Updated to version 0.81:
  * license of manual now GFDL 1.2 or later
  * Nero image handling more complete.
  * ISRC query for image files.
  * Allow reading pregap of a track via get_track_pregap_lsn().
  * Fixes of iso9660 time setting/getting routines, making them
    reentrant.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="ro@suse.de" date="1272283200">- add build-ignore for libcdio-mini-devel</changelog>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="f5802d5d208923dc21d05b20418c100a84ecd6ced333402b0ae0ac4b25f3d652" name="cdio-utils" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1249560000">- Updated to version 0.81:
  * license of manual now GFDL 1.2 or later
  * Nero image handling more complete.
  * ISRC query for image files.
  * Allow reading pregap of a track via get_track_pregap_lsn().
  * Fixes of iso9660 time setting/getting routines, making them
    reentrant.</changelog>
  <changelog author="jengelh@medozas.de" date="1264939200">- Package baselibs.conf</changelog>
  <changelog author="ro@suse.de" date="1272283200">- add build-ignore for libcdio-mini-devel</changelog>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Created seperate linked package cdio-utils to prevent cycles.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Change description to reflect the package content.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="aac8ff1c50a68ee333421807f0de0bf4d2d7d3855e6094065314579c613d491e" name="cgit" arch="src">
  <version epoch="0" ver="1.2.1" rel="lp150.2.3.1"/>
  <changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
  <changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
  <changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
  <changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
  <changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
  <changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
  <changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
  <changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
  <changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
</package>
<package pkgid="51f565e045c905957121fac6f526ebcd9d486edc3a11d5969f080b420f0d9a90" name="cgit" arch="x86_64">
  <version epoch="0" ver="1.2.1" rel="lp150.2.3.1"/>
  <changelog author="zooey@hirschkaefer.de" date="1322481600">- Add patch cgit-fix-more-read_tree_recursive-invocations.diff:
    There are more incorrect invocations of read_tree_recursive(),
    one example can be seen when visiting one of the 'plain' links
    in the tree view (contents of the wrong file are shown).
    This time I did what I should have done last time and checked
    and adjusted all invocations of read_tree_recursive().</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="tiwai@suse.de" date="1349870400">- Fix VUL-0: specially-crafted commits can trigger a heap-based
  buffer overflow (CVE-2012-4465, bnc#783012)</changelog>
  <changelog author="tiwai@suse.de" date="1351512000">- cgit-CVE-2012-4548-fix.diff:
  Fix VUL-0: cgit: arbitrary code / command execution via
  improperly quoted arguments (CVE-2012-4548, bnc#787074)</changelog>
  <changelog author="tiwai@suse.de" date="1353412800">- updated to cgit-0.9.1:
  Enhancements:
  - path-selected submodule links
  - intelligent default branch guessing
  - /etc/mime.types lookup
  - gitweb.* and cgit.* git-config support
  - case insensitive sorting and age sorting
  - commit, repository, and section sorting
  - bold currently viewed page in pagination
  - support BSDs in makefile
  Security:
  - CVE-2012-4465: heap-buffer overflow in parsing.c
  - CVE-2012-4548: syntax highlighting command injection
  Bug Fixes:
  - transition maintainer to Jason Donenfeld (zx2c4)
  - download git snapshot from github instead of Lars' old server
  - css fixes
  - stablization of tests
  - more compatible default highlight script
  - suppress gzip timestamp so that tarballs only use tar timestamps
  - treat ctags as target in makefile
  - do not let global variables override certain local repo settings
  - print ampersand as proper html entity
  - use placeholder for empty commit subject
  - format diff view for addition and removal of files
  - point links at correct blob from ssdiff
- drop obsoleted patches
  cgit-CVE-2011-2711-fix.diff
  cgit-CVE-2012-4465-fix.diff
  cgit-CVE-2012-4548-fix.diff</changelog>
  <changelog author="vjt@openssl.it" date="1353412801">- BuildRequire xz</changelog>
  <changelog author="tiwai@suse.de" date="1373025600">- Fix VUL-0: cgit: remote file disclosure flaw (CVE-2013-2117,
  bnc#822166)</changelog>
  <changelog author="jengelh@inai.de" date="1412596800">- Remove ancient specfile tags/sections
- Enable parallel build</changelog>
  <changelog author="guillaume@opensuse.org" date="1416830400">- Fix css and logo path in cgitrc file (replace /git by /cgit)</changelog>
  <changelog author="jengelh@inai.de" date="1430740800">- Update to new upstream release 0.11.2
  * addition of a Lua scripting engine
  * fine-grained authentication support through the new Lua
  scripting system
  * support for the "rawdiff" command was added
  * sendfile() is now used when available (Linux systems) instead
  of a loop of read() and write(). This should significantly
  increase performance for high volume sites which make heavy use
  of the caching feature, as it saves copies to and from
  user-space.
  * Caching granularity is now improved with the introduction of
  the cache-snapshot-ttl option, which allows configuration of
  the ttl for tarball and zip snapshots of repositories.
  * When filtering in the index, make the sorting links point to
  the same filtered page of results
  * Take into account leading slashes when comptuing links
- Avoid double %setup (messes with quilt). Simplify filelist.
  %doc for man is implicit.
- Drop cgit-git-1.7.6_build_fix.patch,
  cgit-fix-print-tree.diff,
  cgit-fix-more-read_tree_recursive-invocations.diff,
  cgit-CVE-2013-2117-disallow-directory-traversal.patch
- Add signature for the git core tarball.</changelog>
  <changelog author="jengelh@inai.de" date="1433851200">- Update bundled git tarball to 2.4.3</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Update bundled git tarball to 2.5.3</changelog>
  <changelog author="jengelh@inai.de" date="1444132800">- Update bundled git tarball to 2.6.1 [bnc#948969]</changelog>
  <changelog author="jengelh@inai.de" date="1452772800">- Update to new upstream release 0.12
  * Show remote refs in branch switcher combobox.
  * Add sample post-receive hook in /contrib.
  * Add HTML escaping to filters.
  * Add "enable-follow-links" option to have the log UI
  behave the same way as "git log --follow", as well
  as updating the diffand commit UIs.
  * Errors are now cached under the dynamic-ttl setting.
  * Simplified filters and converters.
  * Add "enable-html-serving" to turn on serving of HTML mimetypes
  from the /plain handler, to prevent against stored XSS.
  * /blob no longer takes a mimetype query string parameter.
- Resolve: Reflected Cross Site Scripting &amp; Header Injection in
  Mimetype Query String; Stored Cross Site Scripting &amp; Header
  Injection in Filename Parameter; Stored Cross Site Scripting in
  Git Repo Files; Integer Overflow resulting in Buffer Overflow
  [boo#961916 CVE-2016-1899 CVE-2016-1900 CVE-2016-1901]
- Update bundled git tarball to 2.7.0 (build-time requirement)</changelog>
  <changelog author="tiwai@suse.de" date="1458129600">- Fix remote code execution via buffer overflow (CVE-2016-2315,
  CVE-2016-2324, bsc#971328):
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="astieger@suse.com" date="1465819200">- cgit 1.0:
  * Add repo.homepage/gitweb.homepage setting and homepage tab.
  * Considerable internal cleanups.
  * Show reverse paths in title bar so that browser tab shows
    filename.
  * Add syntax highlighting to md2html.
  * Allow redirects even when caching is turned on.
  * Fix empty PATH_INFO on redirect.
  * Better HTML5 compliance.
  * Simplified decorations.
  * Show repo's root directory in plain view.
  * Date printing and timezone normalization.
  * Unicode issues in syntax highlighting.
  * Account for caches with empty key.
  * Use size_t for all lengths.
  * More gracefully deal with unparsable commits.
- with git 2.8.3
- the following patches are now included upstream git 2.8.3:
  0012-http-push-stop-using-name_path.patch
  0013-show_object_with_name-simplify-by-using-path_name.patch
  0014-list-objects-convert-name_path-to-a-strbuf.patch
  0015-list-objects-drop-name_path-entirely.patch
  0016-list-objects-pass-full-pathname-to-callbacks.patch</changelog>
  <changelog author="vcizek@suse.com" date="1483617600">- remove redundant gnu-crypto BuildRequires</changelog>
  <changelog author="vsvecova@suse.com" date="1484827200">- Version bump to v1.1:
  * For more information see complete changelog at
    https://git.zx2c4.com/cgit/log/
- Add cgit-built-with-git-v2.11.0.patch</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Update bundled git to 2.11.1</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 1.2.1
  * fixes CVE-2018-14912 directory traversal vulnerability
    [boo#1103799]
  * syntax-highlighting: replace invalid unicode with '?'
  * ui-repolist: properly sort by age
  * ui-patch: fix crash when using path limit
- Remove cgit-built-with-git-v2.11.0.patch (merged upstream)</changelog>
</package>
<package pkgid="de9859d4cb063904ae9261321899e9a832f1da2ea3059cb738baef8e7abd1ea0" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="67.0.3396.99" rel="lp150.2.3.3"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="364b375a5d9b32d1364da1375a41861e3bdd59423aeeec7f3cabdee533885d99" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="68.0.3440.75" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="ba6e4bcccded81aec481b71965571a331d8a8b3c08429e357a16abc70b208c6a" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.100" rel="lp150.2.16.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="a92ad37637fba7d25ed25db654bf3d362d3a39f56fe9490b1ec308b580457011" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.81" rel="lp150.2.10.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="519abe56620e8aa5022ea937233293d1fd5878fe1c4c140d49032843b0573f98" name="chromedriver" arch="x86_64">
  <version epoch="0" ver="69.0.3497.92" rel="lp150.2.13.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="cceec512b85dcb7293420f2f02b3facca5c78c07e8f173d476e8a6fedacdca1b" name="chromium" arch="src">
  <version epoch="0" ver="67.0.3396.99" rel="lp150.2.3.3"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="81c46496a045bd91cb4aec01e885157c9baa09efc4aa60d8272cb56cd0a7cbbf" name="chromium" arch="x86_64">
  <version epoch="0" ver="67.0.3396.99" rel="lp150.2.3.3"/>
  <changelog author="tchvatal@suse.com" date="1521028800">- Bundle the harfbuzz on &lt; 15.0 release as we would have to
  use requires_ge for the library itself later on otherwise</changelog>
  <changelog author="tchvatal@suse.com" date="1521028801">- Version update to 65.0.3325.162:
  * Various stability fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Use both freetype and harfbuzz either bundled or system</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- Update to Chromium 65.0.3325.181:
  * Various security relevant fixes from internal audits, fuzzing
    and other initiatives (boo#1086124)</changelog>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
</package>
<package pkgid="0a83f4b9759a638fe4053d710ad6f75e36839aaa2a259129c2826cdb7f6eca24" name="chromium" arch="src">
  <version epoch="0" ver="68.0.3440.75" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="92ca8760f2505e7949af8877d6cb548239516d3837f4c0ec28a7c323ca0bcd07" name="chromium" arch="x86_64">
  <version epoch="0" ver="68.0.3440.75" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1523016000">- Use memory-constraints package to limit threads as needed</changelog>
  <changelog author="tchvatal@suse.com" date="1523188800">- Add vaapi patches:
  * chromium-vaapi-init.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Version bump to chromium 66.0.3359.117 bsc#1090000:
  * CVE-2018-6085: Use after free in Disk Cache
  * CVE-2018-6086: Use after free in Disk Cache
  * CVE-2018-6087: Use after free in WebAssembly
  * CVE-2018-6088: Use after free in PDFium
  * CVE-2018-6089: Same origin policy bypass in Service Worker
  * CVE-2018-6090: Heap buffer overflow in Skia
  * CVE-2018-6091: Incorrect handling of plug-ins by Service Worker
  * CVE-2018-6092: Integer overflow in WebAssembly
  * CVE-2018-6093: Same origin bypass in Service Worker
  * CVE-2018-6094: Exploit hardening regression in Oilpan
  * CVE-2018-6095: Lack of meaningful user interaction requirement before file upload
  * CVE-2018-6096: Fullscreen UI spoof
  * CVE-2018-6097: Fullscreen UI spoof
  * CVE-2018-6098: URL spoof in Omnibox
  * CVE-2018-6099: CORS bypass in ServiceWorker
  * CVE-2018-6100: URL spoof in Omnibox
  * CVE-2018-6101: Insufficient protection of remote debugging prototol in DevTools
  * CVE-2018-6102: URL spoof in Omnibox
  * CVE-2018-6103: UI spoof in Permissions
  * CVE-2018-6104: URL spoof in Omnibox
  * CVE-2018-6105: URL spoof in Omnibox
  * CVE-2018-6106: Incorrect handling of promises in V8
  * CVE-2018-6107: URL spoof in Omnibox
  * CVE-2018-6108: URL spoof in Omnibox
  * CVE-2018-6109: Incorrect handling of files by FileAPI
  * CVE-2018-6110: Incorrect handling of plaintext files via file://
  * CVE-2018-6111: Heap-use-after-free in DevTools
  * CVE-2018-6112: Incorrect URL handling in DevTools
  * CVE-2018-6113: URL spoof in Navigation
  * CVE-2018-6114: CSP bypass
  * CVE-2018-6115: SmartScreen bypass in downloads
  * CVE-2018-6116: Incorrect low memory handling in WebAssembly
  * CVE-2018-6117: Confusing autofill settings
  * Various fixes from internal audits, fuzzing and other initiatives
- Remove obsolete patches:
  * chromium-compiler.patch
  * chromium-glibc-2.27.patch
  * chromium-vaapi-init.patch
  * exclude_ymp.diff
  * fix-gn-bootstrap.diff
  * fix_network_api_crash.patch
  * mojo.patch
- Add new patches:
  * chromium-ffmpeg.patch
  * chromium-gcc7.patch
  * exclude_ymp.patch
  * fix-gn-bootstrap.patch
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-vaapi.patch
- Add patch to fix missing folder from tarball:
  * add-missing-blink-tools.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524830400">- chromium 66.0.3359.139:
  * CVE-2018-6118: Use after free in Media Cache (bsc#1091288)
  * drop add-missing-blink-tools.patch, now in tarball again</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Enable build on AArch64
- Fix build on AArch64:
  * set target_cpu to arm64
  * disable tcmalloc and swiftshader for aarch64
  * Add new patches:
  - chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  - chromium-skia-neon.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
</package>
<package pkgid="a4b5b5e415f6bdfe9af51264179cf99982377805b4f12f5c0e49666df4c8cf8a" name="chromium" arch="src">
  <version epoch="0" ver="69.0.3497.100" rel="lp150.2.16.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="20bacab8a82dfe330ba4ad10d2564dc64fd1bb02d706f9d7835d08490ff905ec" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.100" rel="lp150.2.16.1"/>
  <changelog author="astieger@suse.com" date="1527336000">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272000">- Update to 69.0.3497.100 bsc#1108774
  * Fixes from internal audits, fuzzing and other initiatives</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1537272001">- Keep blank line after autopatch to make SLE12 rpm macros happy</changelog>
</package>
<package pkgid="1a0441ffbc005d5c5e7db77916f51333dd2b01c98d3c590774a378fa33f91f70" name="chromium" arch="src">
  <version epoch="0" ver="69.0.3497.81" rel="lp150.2.10.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="3df7f55de44ef660fc1354221d01cb04914c67e4d514cd4d196c223b4675aeb9" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.81" rel="lp150.2.10.1"/>
  <changelog author="tchvatal@suse.com" date="1525867200">- Add patch chromium-skia-system-fontconfig.patch to fix
  bsc#1092272</changelog>
  <changelog author="astieger@suse.com" date="1526040000">- Chromium 66.0.3359.170 (bsc#1092923):
  * Chain leading to sandbox escape:
    CVE-2018-6121: Privilege Escalation in extensions
    CVE-2018-6122: Type confusion in V8
  * CVE-2018-6120: Heap buffer overflow in PDFium
  * Various fixes from internal audits, fuzzing and other
    initiatives</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
</package>
<package pkgid="aa67edac3865dd9454792c103ffd3d92ba8c6a65041fd02d8fd8cc761db869a0" name="chromium" arch="src">
  <version epoch="0" ver="69.0.3497.92" rel="lp150.2.13.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="f0a7f495f0c72efdc3a8fc5700e3013e4b7257f05e3d1e8ee7ad0077c9cba14f" name="chromium" arch="x86_64">
  <version epoch="0" ver="69.0.3497.92" rel="lp150.2.13.1"/>
  <changelog author="astieger@suse.com" date="1526472000">- Chromium 66.0.3359.181:
  * Autoplay: Force enable on desktop for Web Audio</changelog>
  <changelog author="astieger@suse.com" date="1527336000">- Fix installation issue on SUSE PackageHub 12 with libminizip1
  (bsc#1093031)</changelog>
  <changelog author="astieger@suse.com" date="1527336001">- on SLE 12 with SUSE PackageHub 12, do not require the SDK for
  libwebpmux1 (bsc#1070421)</changelog>
  <changelog author="tchvatal@suse.com" date="1527681600">- Update to 67.0.3396.62 bsc#1095163
  * CVE-2018-6123: Use after free in Blink.
  * CVE-2018-6124: Type confusion in Blink.
  * CVE-2018-6125: Overly permissive policy in WebUSB.
  * CVE-2018-6126: Heap buffer overflow in Skia.
  * CVE-2018-6127: Use after free in indexedDB.
  * CVE-2018-6128: uXSS in Chrome on iOS.
  * CVE-2018-6129: Out of bounds memory access in WebRTC.
  * CVE-2018-6130: Out of bounds memory access in WebRTC.
  * CVE-2018-6131: Incorrect mutability protection in WebAssembly.
  * CVE-2018-6132: Use of uninitialized memory in WebRTC.
  * CVE-2018-6133: URL spoof in Omnibox.
  * CVE-2018-6134: Referrer Policy bypass in Blink.
  * CVE-2018-6135: UI spoofing in Blink.
  * CVE-2018-6136: Out of bounds memory access in V8.
  * CVE-2018-6137: Leak of visited status of page in Blink.
  * CVE-2018-6138: Overly permissive policy in Extensions.
  * CVE-2018-6139: Restrictions bypass in the debugger extension API.
  * CVE-2018-6140: Restrictions bypass in the debugger extension API.
  * CVE-2018-6141: Heap buffer overflow in Skia.
  * CVE-2018-6142: Out of bounds memory access in V8.
  * CVE-2018-6143: Out of bounds memory access in V8.
  * CVE-2018-6144: Out of bounds memory access in PDFium.
  * CVE-2018-6145: Incorrect escaping of MathML in Blink.
  * CVE-2018-6147: Password fields not taking advantage of OS protections in Views.
- Add patches to build on aarch and remove obsolete one:
  * chromium-crashpad-aarch64-fix.patch
  * chromium-skia-aarch64-buildfix.patch
  * chromium-65.0.3325.162-skia-aarch64-buildfix.patch
  * chromium-skia-neon.patch
- Remove no longer needed gcc patch:
  * chromium-gcc7.patch
- Rebase patches:
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
  * exclude_ymp.patch
  * fix_building_widevinecdm_with_chromium.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1527854400">- Require ffmpeg &gt;= 4.0 bsc#1095545</changelog>
  <changelog author="astieger@suse.com" date="1528372800">- Chromium 67.0.3396.79:
  * CVE-2018-6148: Incorrect handling of CSP header (boo#1096508)</changelog>
  <changelog author="security@suse.com" date="1528891200">- Chromium 67.0.3396.87:
  * CVE-2018-6149: Out of bounds write in V8 (boo#1097452)</changelog>
  <changelog author="tchvatal@suse.com" date="1529064000">- Add patch to build under gcc8:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1531224000">- Version update to 67.0.3396.99:
  * Various small feature fixes, no security</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Version update to 68.0.3440.75 bsc#1102530:
  * CVE-2018-6153: Stack buffer overflow in Skia.
  * CVE-2018-6154: Heap buffer overflow in WebGL.
  * CVE-2018-6155: Use after free in WebRTC.
  * CVE-2018-6156: Heap buffer overflow in WebRTC.
  * CVE-2018-6157: Type confusion in WebRTC.
  * CVE-2018-6158: Use after free in Blink.
  * CVE-2018-6159: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6160: URL spoof in Chrome on iOS.
  * CVE-2018-6161: Same origin policy bypass in WebAudio.
  * CVE-2018-6162: Heap buffer overflow in WebGL.
  * CVE-2018-6163: URL spoof in Omnibox.
  * CVE-2018-6164: Same origin policy bypass in ServiceWorker.
  * CVE-2018-6165: URL spoof in Omnibox.
  * CVE-2018-6166: URL spoof in Omnibox.
  * CVE-2018-6167: URL spoof in Omnibox.
  * CVE-2018-6168: CORS bypass in Blink.
  * CVE-2018-6169: Permissions bypass in extension installation.
  * CVE-2018-6170: Type confusion in PDFium.
  * CVE-2018-6171: Use after free in WebBluetooth.
  * CVE-2018-6172: URL spoof in Omnibox.
  * CVE-2018-6173: URL spoof in Omnibox.
  * CVE-2018-6174: Integer overflow in SwiftShader.
  * CVE-2018-6175: URL spoof in Omnibox.
  * CVE-2018-6176: Local user privilege escalation in Extensions.
  * CVE-2018-6177: Cross origin information leak in Blink.
  * CVE-2018-6178: UI spoof in Extensions.
  * CVE-2018-6179: Local file information leak in Extensions.
  * CVE-2018-6044: Request privilege escalation in Extensions.
  * CVE-2018-4117: Cross origin information leak in Blink.
- Rebase patches:
  * chromium-master-prefs-path.patch
  * chromium-non-void-return.patch
  * chromium-vaapi.patch
- Add patches:
  * chromium-cors-string.patch
  * chromium-gcc.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Remove patches:
  * chromium-gcc8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1532520001">- Raise libvpx requirement to match what we really need</changelog>
  <changelog author="tchvatal@suse.com" date="1532520002">- Add patch trying to build chromium on Leap 42.3:
  * chromium-gcc7.patch</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1532520003">- Add patch to fix aarch64 build:
  * chromium-vpx-aarch64.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533124800">- Version update to 68.0.3440.84:
  * Various small feature fixes only</changelog>
  <changelog author="tchvatal@suse.com" date="1533729600">- Update to chromium-68.0.3440.106:
  * Various feature fixes</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235200">- Version update to 69.0.3497.81 bsc#1107235:
  * CVE-2018-16065: Out of bounds write in V8
  * CVE-2018-16066:Out of bounds read in Blink
  * CVE-2018-16067: Out of bounds read in WebAudio
  * CVE-2018-16068: Out of bounds write in Mojo
  * CVE-2018-16069:Out of bounds read in SwiftShader
  * CVE-2018-16070: Integer overflow in Skia
  * CVE-2018-16071: Use after free in WebRTC
  * CVE-2018-16073: Site Isolation bypass after tab restore
  * CVE-2018-16074: Site Isolation bypass using Blob URLS
  * Out of bounds read in Little-CMS
  * CVE-2018-16075: Local file access in Blink
  * CVE-2018-16076: Out of bounds read in PDFium
  * CVE-2018-16077: Content security policy bypass in Blink
  * CVE-2018-16078: Credit card information leak in Autofill
  * CVE-2018-16079: URL spoof in permission dialogs
  * CVE-2018-16080: URL spoof in full screen mode
  * CVE-2018-16081: Local file access in DevTools
  * CVE-2018-16082: Stack buffer overflow in SwiftShader
  * CVE-2018-16083: Out of bounds read in WebRTC
  * CVE-2018-16084: User confirmation bypass in external protocol handling
  * CVE-2018-16085: Use after free in Memory Instrumentation
  * CVE-2018-16086: Script injection in New Tab Page.
  * CVE-2018-16087: Multiple download restriction bypass.
  * CVE-2018-16088: User gesture requirement bypass.
- Added patches:
  * chromium-old-glibc.patch
  * chromium-system-icu.patch
  * chromium-warnings.patch
- Removed patches:
  * chromium-cors-string.patch
  * chromium-crashpad-aarch64-fix.patch
  * chromium-ffmpeg.patch
  * chromium-gcc.patch
  * chromium-gcc7.patch
  * chromium-libjpeg.patch
  * chromium-libwebp-shim.patch
- Rebased patches:
  * chromium-last-commit-position-r0.patch
  * chromium-non-void-return.patch
  * chromium-sandbox-pie.patch
  * chromium-skia-system-fontconfig.patch
  * chromium-vaapi.patch</changelog>
  <changelog author="Tom&#xE1;? Chv&#xE1;tal &lt;tchvatal@suse.com&gt;" date="1536235201">- Split out the gn from this package, obsoletes patches:
  * fix-gn-bootstrap.patch
  * chromium-last-commit-position-r0.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536235202">- Add patch to fix mojo build on 32bit:
  * chromium-gcc8-alignof.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1536408000">- Enable jumbo build to speed things up
- Enable vulkan integration</changelog>
  <changelog author="astieger@suse.com" date="1536753600">- Chromium 69.0.3497.92 (boo#1108114), containing 2 security fixes:
  * Function signature mismatch in WebAssembly
  * URL Spoofing in Omnibox
- the rpm should not provide swiftshader libs boo#1108175
- make jumbo build configurable, default off</changelog>
</package>
<package pkgid="56061c88e1e37db61f41277cd36205fc85615e900e5a0f82c84b3d32d3eeeecd" name="cinnamon" arch="src">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="91b0206bb20d38a3c9815aa65f856954bac6a1c2e3554fdde3351dcc2134c1eb" name="cinnamon" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="2f60ffcade5bbabcf1b913038c6faa10cbf9f65ad7fa3d4e04da293ddb3c8026" name="cinnamon-gschemas" arch="x86_64">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="56fbd2da6cc269ff7c309ce53acef4c45cb1cf14dcec3972757deffb22517b3a" name="cinnamon-gschemas-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.6.7" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1481803200">- Update to version 3.2.6:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-settings-xscreensaver-path.patch,
  cinnamon-no-gksu-requirement.patch, cinnamon-fallback-icewm.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1482494400">- Update to version 3.2.7:
  * cinnamon-settings: Do a better job of handling long labels.
  * Update polling frequency to make the mouse tracking smoother.
  * Layout: Ignore NaN numbers when updating regions.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1483876800">- Update to version 3.2.8:
  * menu applet: Only construct one context menu for recent files,
    and re-use it.
  * menu applet: Don't reconstruct recent files, just re-order,
    add, remove as required.
  * menu applet: Fix a couple of minor leaks (actors created but
    never added to a container - being GInitiallyUnowned, they
    never get their floating ref sunk, and so can't be unreffed.
    Fix a prototype mismatch, and just rename GenericButton to
    NoRecentDocsButton, since that's the only user of it.
  * Fix tuples for Python 3.6.
  * tooltips.js: Add a hide timer to check if a tooltip should hide
    itself, but for various reasons never got to act on a
    leave-event (due to vagaries in event reporting).
  * recent applet: Rework to be non-destructive when updating the
    recent list (this brings a lot of the recent changes to the
    menu applet over to this one).
  * recents, applets: Couple of warning clean ups.
  * network applet: Remove a useless log warning. At some point
    more than a year ago we started getting these (possibly a
    change to NetworkManager), they have no value whatsoever, but
    fill up the log.
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1485432000">- Fix password changing in cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0:
  * Fix gnome terminal losing desktop file association during
    Cinnamon restart.
  * cinnamon-json-makepot: Add support to scan for JS files inside
    sub-dirs.
  * Start systray applet first
  * Use generic marshaller.
  * Pull functions out of loops in _refreshPlaces, _refreshApps...
  * Move uri assignment in _refreshRecent's while loop into new...
  * Use let instead of var in new handler functions.
  * panel: Rework allocation logic to avoid looping in edit mode
    this was causing the context menu animation to fail to complete
    causing the user not to be able to exit edit mode.
  * theme-node: Fix leak on stylesheet change.
  * cinnamon_dbus_acquire_name: Don't leak the result.
  * cinnamon_dbus_acquire_name: Don't leak error.
  * keyboard: Destroy the key's boxpointe.
  * Fix hotcorner hover delay timeout removal. This fixes a
    "Invalid or null source id used when attempting to run
    Mainloop.source_remove()" when leaving a hotcorner. The timeout
    is already destroyed by returning false in the callback, but we
    still knew about the timeout id and tried to remove the
    non-existing timeout.
  * st-box-layout: Don't report a paint volume when we have no
    allocation.
  * window-tracker: Fix a memory leak.
  * tooltips.js: Remove leftover logging.
  * Add cinnamon-stap-monitor utility.
  * panel.js: Couple fixes to previous commit. Let the panel
    sections cover the entire panel in edit mode. Clean up
    _allocate a bit - since we always have the centre zone occupied
    (artificially or naturally,) we don't ever need to handle cases
    where it isn't.
  * panel.js: Fix dnd pseudo-class style application for vertical
    panels.
  * panel: Allow right and left panel zones to naturally fill space.
    Fix vertical allocate calculations in st-box-layout (align_end
    was only working for horizontal box layouts).
  * panel.js: Clean actor and style class names up, simplify some
    code that no longer needs to differentiate between vertical and
    horizontal panels.
  * cs_screensaver.py: Expose setting for floating widgets.
  * panel.js: Restore the "important" style flag, accidentally
    removed from panel zones.
  * expoThumbnail.js: Don't reposition thumbnails on
    position-changed.
  * cs_screensaver.py: Use a stack to switch between default
    screensaver and plugin previews.
  * panel.js: Restore some allocation code mistakenly removed in a
    previous commit. This restores the behavior of allowing
    left/right panels to occupy more than half the panel if the
    centre zone is empty.
  * Sound applet: Fix a segmentation fault that happened when menu
    animations were disabled (gh#linuxmint/Cinnamon#5977).
  * cinnamon-desktop-editor: Use the default icon when file is
    nonexistent.
  * st-theme-node: Improve error reporting.
  * St: Support CSS margin property.
  * Fix cursor black background when taking screenshot.
  * JS API misc/util.js: Add spawnCommandLineAsync.
  * recent-applet: Fix wrong menu placement.
  * Cinnamon Tutorial: Add instructions for xlet l10n.
  * windowManager: Move handling of workspace switch effects to one
    place.
  * window-list: Don't lose our focus style class when opening the
    context menu.
  * Settings widgets range: Add an optional argument to show the
    current value of on the scale widget. This was originally the
    way it worked in the xlet settings, but with the rework, that
    functionality wasn't reimplemented. This rendered the settings
    of several applets less usefull.
  * Show desktop applet: Fix preview being stuck by
    keyboard-triggered menu open.
  * settings.js: Rebuild the settings file if it becomes corrupted.
    If the settings have already been loaded, we use the latest
    version we have, otherwise we restore from defaults.
  * vertical-panels: Make proper calculations for panel intellihide.
  * Keyboard applet: Always show something in panel edit mode.
  * Power applet: Always show something in panel edit mode
  * JS API util.js: Add doNotReap parameter to trySpawn ct. itzexor
  * util.js: Add documentation for spawn_async.
  * Add support to manage the systemd services available on the
    system.
  * cs_startup.py: Add a "Run now" button for when a row is selected.
  * Make sure applets that don't support vertical panels don't get
    dropped on a vertical panel. This was happening with at least
    some applets, causing them to "disappear", and could only be
    recovered by removing them from applet settings and re-adding
    them again.
  * cinnamon-settings: Fix some sliders being drawn backwards.
  * settings.js: Handle corrupt settings the right way. Fixes
    several issues with the previous implementation.
  * xlet settings: Add a list widget.
  * xlet settings: Fix the reference to new option added to wrong
    element.
  * Settings: Add support for lightdm-settings.
  * xlets-about-dialog: Show timestamp if exists else show version
    &amp; show "more info" button.
  * spawn_async: Clean the callbacks up after we're done.
  * looking-glass: Use bracket notation for property accessors when
    inspecting.
  * Environment: Don't fail in toString().
  * looking-glass: Set null results' value to "[null]".
  * Fix panel timeout spinbuttons jumping around
    (gh#linuxmint/Cinnamon#6374).
  * Add Manjaro Support in System Info (gh#linuxmint/Cinnamon#6387).
  * systray: Add CSS class to permit theming.
  * systray-applet: Don't crash in on_applet_removed_from_panel.
  * st-theme-node: Remove a double declaration that gives a
    compiler warning.
  * Start inode/directory application instead unregistered
    x-scheme-handler/file in case of unmounted bookmarks.
  * st-entry: Change the variable type to avoid a compiler warning.
  * Add a chooser for "inode/directory" to be able to choose the
    default file manager.
  * xlet-settings: Add a missing string for l10n.
  * st-box-layout: Remove an unused variable.
  * panel.js: Refactor Panel._showPanel and Panel._hidePanel.
  * panel.js: Don't clip the panel box shadow when showing after
    hide.
  * cs_accessibility: Restore previous theme when disabling
    High Contrast.
  * Remove panelMenu.js, which is unused but for 2 applets.
    There are a bunch of applets that import it but don't use it,
    all of which can be fixed now.
  * hotcorners: Remove the icon option.
  * cinnamon-looking-glass.py: Handle the numpad entering in entry.
  * Remove aclocal from autogen.sh as autoreconf runs it.
  * Fix for non translated applet names on Remove context menu items.
  * [Xlets] Expose config deletion request to xlet.
  * modalDialog: Avoid a js warning.
  * utils: Add check-js, to scan for runtime-breaking javascript
    syntax errors.
  * Adjustments after enabling margin for st.
  * cs_user.py: Save appropriately sized .face for
    cinnamon-screensaver.
  * cs_mouse: Add new settings to control acceleration/sensitivity.
  * power-applet: Add support for warning and error style classes.
  * cs_panel.py: Rework individual panel page to simplify code, fix
    some bugy behaviour, and improve readability.
  * Update keybindings.js.
  * Adapt Cinnamon to multi-process CSD.
  * messageTray: Show critical notifications in fullscreen.
  * cs_panel.py: Replace panel widgets with backended ones.
    This will hopefully ensure that the widgets are consistent with
    the rest of Cinnamon in terms of behaviour and appearance, as
    well as easier to maintain.
  * panel.js: Keep track of panelPosition and monitor changes.
  * panel.js: Refactor _moveResizePanel.
  * layout.js: Don't include clipped off areas in input region.
  * README file to reStructuredText file.
  * St: Margin: Remove margin:auto from menu applet and default
    theme. This avoids warning messages as margin:auto is not
    supported. And it also means third party theme developers will
    not copy non-functional CSS. The warning messages for the
    programmatic insertion of margin:auto in the menu applet were
    particularly cryptic.
  * st: Fix a couple icon/text-shadow bugs.
  * cinnamon-json-makepot: Fix for undefined global name.
  * Update cs_power.py.
  * Use St.Icon instead of fetching icons from St.TextureCache.
  * all: Adapt to changes for the new cjs (gjs 1.48/mozjs38).
  * panel.js warning fix.
  * osdWindow: Fix the level bar display.
  * Remove memory info stuff from looking glass, cinnamon-global.
  * control: Adjust version reqs for libcjs.
  * all: Some additional warning fixes due to gjs 1.48.0-&gt;1.48.2
    changes.
  * panel-launchers: Fix the panel launcher animation.
  * melange: don't freeze on quit with custom log watchers.
  * desklet.js: Ignore an extra argument to setContent().
  * js/ui/tooltip.js: Check if this.mousePosition is defined.
  * Move this.mousePosition initial assignment to TooltipBase.
  * Supress CJS mozjs38 warnings in applet, dbusMenu, indicator...
  * Correct indentation.
  * main.js: Improve logging of GLib.Errors and objects
    (gh#linuxmint/Cinnamon#6486).
  * menu-applet &amp; panel-launchers: Add new mouse cursors while.
    dragging applications (gh#linuxmint/Cinnamon#5859)
  * l10n: Update POT file.
  * l10n: Generate additional files.
- Rebase cinnamon-settings-native.patch.
- Add cinnamon-fix-gtk-3.14.patch: Add GTK+ 3.14 compatibility.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 3.4.1:
  * Remove usage of GTK_POLICY_EXTERNAL.
  * checkBox.js: Remove extra unused argument which was causing a
    warning with new cjs/mozjs.
  * st-bin.c: Fix y_fill setter (it was setting x_fill to the value
    of the existing y_fill, before it is set in the same call).
  * menu applet: Fix keyboard navigation of recent context menu.
    Fix closing of same menu when switching to another category.
    Also fix closing when opening another recent's context menu.
  * menu applet: Notify when a recent file is activated that can't
    be accessed.
  * menu applet: Make missing file notification transient.
  * menu applet (vector box): Partially revert c0d37dd: there is
    flickering as events go from a button to the vector box and
    back. Remove the idle callback, and directly react to the enter
    even once more. To compensate, increase our
    maybeUpdateVectorBox delay timeout, which more or less fixes
    the original problem the above commit was attempting to fix.
  * menu applet: _select_category - only call displayButtons if the
    category has really changed.
  * menu applet: Fix keyboard navigation when a second recent
    context menu is toggled open.
  * Sound settings: Fix device icons.
  * xlet-settings.py: Ignore files and directories in the config
    directory that aren't created by our settings api as well as
    instances that no longer exist.
  * ExtensionCore.py: Don't scrub the config directory on load.
    This is no longer necessary since xlet settings now ignores
    anything that isn't an active instance, and some applets need a
    place to store extra files so they get cleaned up on uninstall.
  * cs_panel.py: Fix a crash when there are no panels.
  * sound-applet: Remove extraneous arguments on add_actor calls.
  * radioButton.js: Remove an extra argument to add_actor.
  * window-list-applet: Fix undefined reference warning.
  * cinnamon-json-makepot: Add support to extract "title" and
    "units" keys on list elements.
  * User applet: Remove the ability to switch to guest with LightDM.
  * runDialog.js: Fix undefined variable warning.
  * Reorganise the default applets in the panel.
  * User applet: Remove trailing spaces.
  * Applets: Make TextIconApplet smarter and adapt to vertical
    panels.
  * menu applet: Use _select_category to select recents and places,
    so we can cache the current selection more accurately and
    prevent needless calls to _displayButtons.
  * window list: Add a missing dependency to settings.
- Remove cinnamon-fix-gtk-3.14.patch.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498046400">- Update to version 3.4.2:
  * st-texture-cache.c: Do not cache st_texture_cache_load_from_raw.
    Its only user is the Notification Daemon. These are transient
    images that were being stored in the cache that would never be
    evicted during theme changes (this does not just mean times
    when the user changed the icon theme).
  * l10n: Translate hardcoded string for settings reset
    confirmation dialogue.
  * Silence a few more warnings, new warnings.
  * expo, overview: Unreference actors that we destroy whenever the
    respective view closes.
  * cinnamon-slideshow.py: Only allow a single instance to run.
  * Sound applet: Avoid spacing problem in vertical panel.
  * photoframe-desklet: Fix a few issues.
  * notificationDaemon.js: Silence an occasional warning.
  * SettingsWidgets.py: Make switch widgets use "center" vertical
    alignment instead of "fill," to prevent the switch growing in
    height when the label text gets ellipsised (either through
    resizing of the window, or localisation).
  * Progress bar text initialises and resets.
  * cinnamon-settings-users: Restrict the size of user images, as
    they are displayed in the right view when a user is selected.
    If the image at /var/lib/AccountsService/icons/&lt;user&gt; is set to
    a ridiculously-sized image, it won't break the ui.
  * cs_user: Don't let large images break the ui - make sure we
    scale the selected image to an appropriate size.
    Also, don't crop user-selected images (but keep cropping webcam
    images) - it's strange to select an image file and have the
    ends of it cut off.
  * cinnamon-settings-users.py: Fix picture preview in file
    selector to maintain a reasonable size.
  * cs_user.py: Handle image previews better in the face chooser
    dialogue.
  * ChooserButtonWidgets.py: Fix a Python 3 error.
  * window-list: Bring space around preview down and correct a
    calculation problem.
  * StScrollView: Queue redraws whenever the adjustments change, to
    prevent artifacts outside of the view itself.
  * StScrollView: More effective way of fixing the graphical
    artefacts generated during scrolling. This also appears to fix
    some unrelated tearing issues I was seeing in the menu while
    testing.
  * main.c: Own onboard's dbus name to prevent it starting when
    gnome's a11y keyboard settings key is active
    (org.gnome.desktop.a11y.applications screen-keyboard-enabled).
    Also own caribou's daemon. Caribou's OSK won't interfere in a
    Cinnamon session, but its daemon will run needlessly in the
    background otherwise.
  * panel: Avoid cjs giving a warning that dummyPanels[i][j] is
    undefined.
  * systray applet: Make sure an icon actually got parented to
    this.manager_container before calling remove_child.
    This issue can occur during session startup.
  * spacer applet: Use a unique style class in the theme to prevent
    the applet from appearing active when hovered.
  * theme: Add applet-spacer class for spacer applet.
  * spacer applet: Use track_hover instead of a new style to
    prevent highlighting.
  * osdWindow: get the correct child allocation when calculating
    the width of the level bar. If a padding or margin is added to
    the level-bar style class, it was causing the parent bin to
    expand to accomodate the child's width plus its required
    padding.
- Rebase cinnamon-wheel-and-sbin-path.patch,
  cinnamon-no-gksu-requirement.patch,
  cinnamon-favourite-applications.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 3.4.3:
  * panel-launchers: Put individual launcher actions back in the
    main popup, having an options and preferences submenu was a
    bit ambiguous.
  * panel-launchers: Remove an undeclared variable warning.
  * deskletManager: Correct a call to file.delete.
  * Add a menu item to toggle the on-screen keyboard.
- Use update-alternatives to create the default.desktop xsession.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499601600">- Update to version 3.4.4:
  * classicSwitcher.js: Fix hidpi issues.
  * KeybindingWidgets.py: Fix parsing of accelerators that are
    shifted but not alpha-numeric characters.
  * xlet-settings.py: Do not crash when an invalid xlet id is
    provided.
  * window-list applet: Fix argument warning.
  * Add an issue template.
  * ui/settings: Handle undefined old settings values.
  * hotCorner.js: Fix hover delay callback.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1499860800">- Require NetworkManager-gnome on openSUSE older than Leap 15.x
  still (boo#1047540).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1503230400">- Update to version 3.4.6 (changes since 3.4.4):
  * osdWindow.js: Always check the theme node on first showing - an
    actor's width isn't necessarily filled if it hasn't been
    explicitly set, causing the first few activations of the OSD to not show an accurate level bar.
  * cs_default: Fix an incorrect button label (but preserve
    translations).
  * main.js: Remove an obsolete Meta enum member reference.
  * workspace.js: Use our normal prototype init method.
  * workspace.js: Initalise WindowClone._zoomStep to 0.
  * slideshow-applet: Fix a translation.
  * cs_themes.py: Create the file "~/.icons/default/index.theme" and
    set the selected cursor theme inside of it. This ensures other
    (non-gtk) applications end up using the same theme (though they
    are required to be restarted for these changes to take effect).
  * keyboard-applet: Applet icon vanishes when moved in edit mode.
  * cinnamon-json-makepot: Add keyword option, change language used
    by xgettext to JavaScript.
  * expoThumbnail: Correct a couple of calls with mismatched
    argument counts.
  * window-list: Set AppMenuButtons unreactive during panel edit
    mode.
  * panel-launchers: Set PanelAppLaunchers unreactive during panel
    edit mode.
  * windows-quick-list: Fix argument warning.
  * Fix a reference to undefined actor._delegate warning.
  * ui/environment: Handle undefined actors in
    containerClass.prototype.add.
  * ui/cinnamonDBus: Handle null xlet objects in
    CinnamonDBus.highlightXlet.
  * deskletManager: Initialise some variables and remove the
    variables that were initialised, probable typo</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0:
  * See /usr/share/doc/packages/cinnamon/changelog
- Rebase cinnamon-network-user-connections.patch,
  cinnamon-settings-native.patch, cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510228800">- Update to version 3.6.1:
  * Fix blurry and off-centred arrow in pop up submenus.
  * cinnamon-settings: Remove an ui file that is no longer used
    since the extension-settings-rework.
  * Spices.py: Fix xlets not installing if a file without an
    extension is in the po directory.
  * TreeListWidgets.py: Edit elements with double click.
  * Fix Gtk-Message when running a dialogue.
  * window-list: Account for hidden items during DnD repositioning.
  * Spices: Don't fail if the spice directory is missing.
- Rebase cinnamon-wheel-and-sbin-path.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510488000">- Update to version 3.6.2:
  * st-texture-cache: Avoid potential null pointer dereference.
- Rebase cinnamon-no-gksu-requirement.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511006400">- Update to version 3.6.3:
  * Show-desktop: Disable peek-at-desktop by default.
  * menu applet: Recalculate applications list box height when the
    menu's allocation changes.
  * Applets: When setting an icon, make sure it's actually an
    St.Icon. Some applets (such as the keyboard applet) set
    _applet_icon to something other than an St.Icon, so it causes
    an error when trying to set the icon using one of the api
    functions. This was causing the keyboard applet not to show in
    the panel edit mode after a keyboard layout was added and
    removed.
  * applet settings: Fix panel switch buttons not being hidden when
    there is only one panel.
  * Add Adwaita-dark thumbnails.
  * extension settings: Scan the system directory for extensions.
  * Initialise applet position to avoid drag and drop errors in
    edit mode occasionally the null applet position was being
    carried through to the writing of the new applet causing
    apparent drop failures, and to the disappearance of the
    highlighted drop box. Much visible weirdness with a very simple
    solution.
  * workspace switcher: Fix an undeclared variable warning.
  * applet settings: Improve the logic for highlighting the panel.
    The panel is now only highlighted when there is more than one
    panel, and it's better about selecting and highlighting the
    correct panel when one is added or removed.
  * Fixed spacing. Add a missing semicolon.
  * popupMenu: Prevent a warning of this._triangle.
  * Clock applet: Respect a 12h/24h choice in the vertical mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511265600">- Update to version 3.6.5 (changes since 3.6.3):
  * calendar applet: Just listen to the gsetting key for 24h to
    make sure the vertical panel default clock obeys global
    date/time settings.
  * st-theme.c: st_theme_resolve_url could assert with a theme
    issue.
  * cinnamon-settings: Use icon buttons in the xlet management
    pages.
  * Fixes crash if device.get_icon_name() is Null.
  * Allow showing seconds on a vertical panel.
  * cs_sound.py: Replace tabs with spaces.
  * calendar applet: Fix formatting.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1511524800">- Update to version 3.6.6:
  * Sound settings: Assign the selected device to the profile
    selector.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514116800">- Update to version 3.6.7:
  * Online Accounts: Use translations.
  * cinnamonDBus.js: Have GetMonitors throw an error back to GDBus
    if something goes wrong.
  * menu-applet: Rework vectorBox.
  * Fix power applet spamming the log file with error messages on
    laptops (gh#linuxmint/Cinnamon#7114).
  * Spices description: Do not cut off the letter "n".
  * Xlets: Fix shown info for overwritten xlets.</changelog>
  <changelog author="sb56637@geckolinux.github.io" date="1517659200">- Changed dependency from python-pam to python2-python-pam</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1530792000">- Add cinnamon-settings-fix-symlink-vuln.patch by Matthias Gerstner
  to fix a symlink attack vulnerability (CVE-2018-13054,
  bsc#1083067, commit 66e54f4).
- Minor spec clean-up.</changelog>
</package>
<package pkgid="af621a29f8033cce49d40204a5bc050e6c9582d63788b44215a29358e4dfc7df" name="clamav" arch="src">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="1edfa540ec6c7e400e4616c3fc0bccacbef15b2dc994d83abd5dd6e679b35409" name="clamav" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="f9f92530b6d20c1de88f8fbc663b75668aea57b3ebf705990b47f16a07cae16c" name="clamav-devel" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="28bbe334d5237cd3e4d344ea5d52abd2ad1c2e9396ce21e5baf332cf61ed2849" name="clang" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="8b2a07b3f61cb8b23cf663b8bac33950b7e1bf5566dfc758a1c9b1770854e047" name="clang-checker" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="7232094f9589dd95deaa009a67305b195a8bc128cf1417e36b6d9548bfef7422" name="clang-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="243ea6066c2af50bcc82c7b471fb2be9db49e44f993562cfa27c4e593980d567" name="cloud-init" arch="src">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="ed5ed36d5570cc2985143dad88d10fefbce158e4115f18ace7d19f66e524c88a" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="85ec4bf3cbaab740738a45da60061b62856b9bb55ca88050a00066b0fb2a4acd" name="cloud-init" arch="src">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="92a13ad30d71a296ce65c3189cd175bc55b010d702889d1207622aeea0c6737f" name="cloud-init" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="a3fae38d82340c225a0d316cf932fbab3ebff1a5916d3931abc0991b02a67d2e" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="6b64c650ce13bf384c12b3df00406088727102be7293921a34b7da2fb3af9886" name="cloud-init-config-suse" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="e083d549a3083e8b90af19ad442c21ce4f8650b300b8ae788030727884e93db6" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.de" date="1505736000">- python_sitelib does not seem to exist for non single-spec
  python modules, use python2_sitelib and python3_sitelib instead.</changelog>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
</package>
<package pkgid="8448e6290155110df48960ce33906014fb964f709e2b6d7d47ae168ab1b719ea" name="cloud-init-doc" arch="x86_64">
  <version epoch="0" ver="18.2" rel="lp150.2.6.1"/>
  <changelog author="dmueller@suse.com" date="1505908800">- add skip-argparse-on-python3.patch: don't depend on argparse
  for python3, it is builtin there (as of python 3.2, so the
  patch should be good enough)</changelog>
  <changelog author="rjschwei@suse.com" date="1505995200">- Update to version 17.1 (bsc#1035106)
  + Version numbering scheme change now YY.NUMBER_OF_RELESE_THAT_YEAR
  + Remove cloud.cfg.suse, use generated default config file
  + Remove addopenSUSEBase.patch, included upstream
  + Remove suseIntegratedHandler.patch, included upstream
  + Remove openSUSEhostsTemplate.diff, included upstream
  + Remove cloud-init-handle-no-carrier.patch, included upstream
  + Remove cloud-init-digital-ocean-datasource.patch,
    use upstream implementation
  + Remove cloud-init-digital-ocean-datasource-enable-by-default.patch,
    use upstream implementation
  + Remove cloud-init-fix-unicode-handling-binarydecode.patch,
    included upstream
  + Remove cloud-init-no-dmidecode-on-ppc64.patch, included upstream
  + Remove dataSourceOpenNebula.patch, use upstream implementation
  + Remove setupSUSEsysVInit.diff, included upstream
  + Remove suseSysVInit.diff, included upstream
  + Remove cloud-init-finalbeforelogin.patch, don't block login
  + Remove cloud-init-handle-not-implemented-query.patch, query option removed
  + Remove cloud-init-spceandtabs-clean.patch, indentation fixed upstream
  + Remove dynamicInitCmd.diff, different solution from upstream
  + Added cloud-init-more-tasks.patch, (bsc#1047363)
    replace cloud-init-finalbeforelogin.patch
  + Forward port cloud-init-python2-sigpipe.patch
  + Remove cloud-init-net-eni.patch, included upstream
  + Remove cloud-init-service.patch, included upstream
  + Forward port cloud-init-sysconfig-netpathfix.patch
  + Remove cloud-init-net-sysconfig-lp1665441.patch, included upstream
  + Remove cloud-init-python26.patch, included upstream
  + Remove skip-argparse-on-python3.patch
  + Add cloud-init-tests-set-exec.patch
  + Add cloud-init-final-no-apt.patch
  + Add zypp_add_repo_test.patch
  + doc: document GCE datasource. [Arnd Hannemann]
  + suse: updates to templates to support openSUSE and SLES.
  + [Robert Schweikert] (LP: #1718640)
  + suse: Copy sysvinit files from redhat with slight changes.
  + [Robert Schweikert] (LP: #1718649)
  + docs: fix sphinx module schema documentation [Chad Smith]
  + tests: Add cloudinit package to all test targets [Chad Smith]
  + Makefile: No longer look for yaml files in obsolete ./bin/.
  + tests: fix ds-identify unit tests to set EC2_STRICT_ID_DEFAULT.
  + ec2: Fix maybe_perform_dhcp_discovery to use /var/tmp as a tmpdir
  + [Chad Smith] (LP: #1717627)
  + Azure: wait longer for SSH pub keys to arrive.
  + [Paul Meyer] (LP: #1717611)
  + GCE: Fix usage of user-data. (LP: #1717598)
  + cmdline: add collect-logs subcommand. [Chad Smith] (LP: #1607345)
  + CloudStack: consider dhclient lease files named with a hyphen.
  + (LP: #1717147)
  + resizefs: Drop check for read-only device file, do not warn on
  + overlayroot. [Chad Smith]
  + Do not provide systemd-fsck drop-in which could cause ordering cycles.
  + [Balint Reczey] (LP: #1717477)
  + tests: Enable the NoCloud KVM platform [Joshua Powers]
  + resizefs: pass mount point to xfs_growfs [Dusty Mabe]
  + vmware: Enable nics before sending the SUCCESS event. [Sankar Tanguturi]
  + cloud-config modules: honor distros definitions in each module
  + [Chad Smith] (LP: #1715738, #1715690)
  + chef: Add option to pin chef omnibus install version
  + [Ethan Apodaca] (LP: #1462693)
  + tests: execute: support command as string [Joshua Powers]
  + schema and docs: Add jsonschema to resizefs and bootcmd modules
  + [Chad Smith]
  + tools: Add xkvm script, wrapper around qemu-system [Joshua Powers]
  + vmware customization: return network config format
  + [Sankar Tanguturi] (LP: #1675063)
  + Ec2: only attempt to operate at local mode on known platforms.
  + (LP: #1715128)
  + Use /run/cloud-init for tempfile operations. (LP: #1707222)
  + ds-identify: Make OpenStack return maybe on arch other than intel.
  + (LP: #1715241)
  + tests: mock missed openstack metadata uri network_data.json
  + [Chad Smith] (LP: #1714376)
  + relocate tests/unittests/helpers.py to cloudinit/tests
  + [Lars Kellogg-Stedman]
  + tox: add nose timer output [Joshua Powers]
  + upstart: do not package upstart jobs, drop ubuntu-init-switch module.
  + tests: Stop leaking calls through unmocked metadata addresses
  + [Chad Smith] (LP: #1714117)
  + distro: allow distro to specify a default locale [Ryan Harper]
  + tests: fix two recently added tests for sles distro.
  + url_helper: dynamically import oauthlib import from inside oauth_headers
  + [Chad Smith]
  + tox: make xenial environment run with python3.6
  + suse: Add support for openSUSE and return SLES to a working state.
  + [Robert Schweikert]
  + GCE: Add a main to the GCE Datasource.
  + ec2: Add IPv6 dhcp support to Ec2DataSource. [Chad Smith] (LP: #1639030)
  + url_helper: fail gracefully if oauthlib is not available
  + [Lars Kellogg-Stedman] (LP: #1713760)
  + cloud-init analyze: fix issues running under python 2. [Andrew Jorgensen]
  + Configure logging module to always use UTC time.
  + [Ryan Harper] (LP: #1713158)
  + Log a helpful message if a user script does not include shebang.
  + [Andrew Jorgensen]
  + cli: Fix command line parsing of coniditionally loaded subcommands.
  + [Chad Smith] (LP: #1712676)
  + doc: Explain error behavior in user data include file format.
  + [Jason Butz]
  + cc_landscape &amp; cc_puppet: Fix six.StringIO use in writing configs
  + [Chad Smith] (LP: #1699282, #1710932)
  + schema cli: Add schema subcommand to cloud-init cli and cc_runcmd schema
  + [Chad Smith]
  + Debian: Remove non-free repositories from apt sources template.
  + [Joonas Kylmälä] (LP: #1700091)
  + tools: Add tooling for basic cloud-init performance analysis.
  + [Chad Smith] (LP: #1709761)
  + network: add v2 passthrough and fix parsing v2 config with bonds/bridge
  + params [Ryan Harper] (LP: #1709180)
  + doc: update capabilities with features available, link doc reference,
  + cli example [Ryan Harper]
  + vcloud directory: Guest Customization support for passwords
  + [Maitreyee Saikia]
  + ec2: Allow Ec2 to run in init-local using dhclient in a sandbox.
  + [Chad Smith] (LP: #1709772)
  + cc_ntp: fallback on timesyncd configuration if ntp is not installable
  + [Ryan Harper] (LP: #1686485)
  + net: Reduce duplicate code. Have get_interfaces_by_mac use
  + get_interfaces.
  + tests: Fix build tree integration tests [Joshua Powers]
  + sysconfig: Dont repeat header when rendering resolv.conf
  + [Ryan Harper] (LP: #1701420)
  + archlinux: Fix bug with empty dns, do not render 'lo' devices.
  + (LP: #1663045, #1706593)
  + cloudinit.net: add initialize_network_device function and tests
  + [Chad Smith]
  + makefile: fix ci-deps-ubuntu target [Chad Smith]
  + tests: adjust locale integration test to parse default locale.
  + tests: remove 'yakkety' from releases as it is EOL.
  + tests: Add initial tests for EC2 and improve a docstring.
  + locale: Do not re-run locale-gen if provided locale is system default.
  + archlinux: fix set hostname usage of write_file.
  + [Joshua Powers] (LP: #1705306)
  + sysconfig: support subnet type of 'manual'.
  + tools/run-centos: make running with no argument show help.
  + Drop rand_str() usage in DNS redirection detection
  + [Bob Aman] (LP: #1088611)
  + sysconfig: use MACADDR on bonds/bridges to configure mac_address
  + [Ryan Harper] (LP: #1701417)
  + net: eni route rendering missed ipv6 default route config
  + [Ryan Harper] (LP: #1701097)
  + sysconfig: enable mtu set per subnet, including ipv6 mtu
  + [Ryan Harper] (LP: #1702513)
  + sysconfig: handle manual type subnets [Ryan Harper] (LP: #1687725)
  + sysconfig: fix ipv6 gateway routes [Ryan Harper] (LP: #1694801)
  + sysconfig: fix rendering of bond, bridge and vlan types.
  + [Ryan Harper] (LP: #1695092)
  + Templatize systemd unit files for cross distro deltas. [Ryan Harper]
  + sysconfig: ipv6 and default gateway fixes. [Ryan Harper] (LP: #1704872)
  + net: fix renaming of nics to support mac addresses written in upper
  + case. (LP: #1705147)
  + tests: fixes for issues uncovered when moving to python 3.6.
  + (LP: #1703697)
  + sysconfig: include GATEWAY value if set in subnet
  + [Ryan Harper] (LP: #1686856)
  + Scaleway: add datasource with user and vendor data for Scaleway.
  + [Julien Castets]
  + Support comments in content read by load_shell_content.
  + cloudinitlocal fail to run during boot [Hongjiang Zhang]
  + doc: fix disk setup example table_type options
  + [Sandor Zeestraten] (LP: #1703789)
  + tools: Fix exception handling. [Joonas Kylmälä] (LP: #1701527)
  + tests: fix usage of mock in GCE test.
  + test_gce: Fix invalid mock of platform_reports_gce to return False
  + [Chad Smith]
  + test: fix incorrect keyid for apt repository.
  + [Joshua Powers] (LP: #1702717)
  + tests: Update version of pylxd [Joshua Powers]
  + write_files: Remove log from helper function signatures.
  + [Andrew Jorgensen]
  + doc: document the cmdline options to NoCloud [Brian Candler]
  + read_dmi_data: always return None when inside a container. (LP: #1701325)
  + requirements.txt: remove trailing white space.
  + Azure: Add network-config, Refactor net layer to handle duplicate macs.
  + [Ryan Harper]
  + Tests: Simplify the check on ssh-import-id [Joshua Powers]
  + tests: update ntp tests after sntp added [Joshua Powers]
  + FreeBSD: Make freebsd a variant, fix unittests and
  + tools/build-on-freebsd.
  + FreeBSD: fix test failure
  + FreeBSD: replace ifdown/ifup with "ifconfig down" and "ifconfig up".
  + [Hongjiang Zhang] (LP: #1697815)
  + FreeBSD: fix cdrom mounting failure if /mnt/cdrom/secure did not exist.
  + [Hongjiang Zhang] (LP: #1696295)
  + main: Don't use templater to format the welcome message
  + [Andrew Jorgensen]
  + docs: Automatically generate module docs form schema if present.
  + [Chad Smith]
  + debian: fix path comment in /etc/hosts template.
  + [Jens Sandmann] (LP: #1606406)
  + suse: add hostname and fully qualified domain to template.
  + [Jens Sandmann]
  + write_file(s): Print permissions as octal, not decimal [Andrew Jorgensen]
  + ci deps: Add --test-distro to read-dependencies to install all deps
  + [Chad Smith]
  + tools/run-centos: cleanups and move to using read-dependencies
  + pkg build ci: Add make ci-deps-&lt;distro&gt; target to install pkgs
  + [Chad Smith]
  + systemd: make cloud-final.service run before apt daily services.
  + (LP: #1693361)
  + selinux: Allow restorecon to be non-fatal. [Ryan Harper] (LP: #1686751)
  + net: Allow netinfo subprocesses to return 0 or 1.
  + [Ryan Harper] (LP: #1686751)
  + net: Allow for NetworkManager configuration [Ryan McCabe] (LP: #1693251)
  + Use distro release version to determine if we use systemd in redhat spec
  + [Ryan Harper]
  + net: normalize data in network_state object
  + Integration Testing: tox env, pyxld 2.2.3, and revamp framework
  + [Wesley Wiedenmeier]
  + Chef: Update omnibus url to chef.io, minor doc changes. [JJ Asghar]
  + tools: add centos scripts to build and test [Joshua Powers]
  + Drop cheetah python module as it is not needed by trunk [Ryan Harper]
  + rhel/centos spec cleanups.
  + cloud.cfg: move to a template.  setup.py changes along the way.
  + Makefile: add deb-src and srpm targets. use PYVER more places.
  + makefile: fix python 2/3 detection in the Makefile [Chad Smith]
  + snap: Removing snapcraft plug line [Joshua Powers] (LP: #1695333)
  + RHEL/CentOS: Fix default routes for IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1696176)
  + test: Fix pyflakes complaint of unused import.
  + [Joshua Powers] (LP: #1695918)
  + NoCloud: support seed of nocloud from smbios information
  + [Vladimir Pouzanov] (LP: #1691772)
  + net: when selecting a network device, use natural sort order
  + [Marc-Aurèle Brothier]
  + fix typos and remove whitespace in various docs [Stephan Telling]
  + systemd: Fix typo in comment in cloud-init.target. [Chen-Han Hsiao]
  + Tests: Skip jsonschema related unit tests when dependency is absent.
  + [Chad Smith] (LP: #1695318)
  + azure: remove accidental duplicate line in merge.
  + azure: identify platform by well known value in chassis asset tag.
  + [Chad Smith] (LP: #1693939)
  + tools/net-convert.py: support old cloudinit versions by using kwargs.
  + ntp: Add schema definition and passive schema validation.
  + [Chad Smith] (LP: #1692916)
  + Fix eni rendering for bridge params that require repeated key for
  + values. [Ryan Harper]
  + net: remove systemd link file writing from eni renderer [Ryan Harper]
  + AliYun: Enable platform identification and enable by default.
  + [Junjie Wang] (LP: #1638931)
  + net: fix reading and rendering addresses in cidr format.
  + [Dimitri John Ledkov] (LP: #1689346, #1684349)
  + disk_setup: udev settle before attempting partitioning or fs creation.
  + (LP: #1692093)
  + GCE: Update the attribute used to find instance SSH keys.
  + [Daniel Watkins] (LP: #1693582)
  + nplan: For bonds, allow dashed or underscore names of keys.
  + [Dimitri John Ledkov] (LP: #1690480)
  + python2.6: fix unit tests usage of assertNone and format.
  + test: update docstring on test_configured_list_with_none
  + fix tools/ds-identify to not write None twice.
  + tox/build: do not package depend on style requirements.
  + cc_ntp: Restructure cc_ntp unit tests. [Chad Smith] (LP: #1692794)
  + flake8: move the pinned version of flake8 up to 3.3.0
  + tests: Apply workaround for snapd bug in test case. [Joshua Powers]
  + RHEL/CentOS: Fix dual stack IPv4/IPv6 configuration.
  + [Andreas Karis] (LP: #1679817, #1685534, #1685532)
  + disk_setup: fix several issues with gpt disk partitions. (LP: #1692087)
  + function spelling &amp; docstring update [Joshua Powers]
  + Fixing wrong file name regression. [Joshua Powers]
  + tox: move pylint target to 1.7.1
  + Fix get_interfaces_by_mac for empty macs (LP: #1692028)
  + DigitalOcean: remove routes except for the public interface.
  + [Ben Howard] (LP: #1681531.)
  + netplan: pass macaddress, when specified, for vlans
  + [Dimitri John Ledkov] (LP: #1690388)
  + doc: various improvements for the docs on cc_users_groups.
  + [Felix Dreissig]
  + cc_ntp: write template before installing and add service restart
  + [Ryan Harper] (LP: #1645644)
  + cloudstack: fix tests to avoid accessing /var/lib/NetworkManager
  + [Lars Kellogg-Stedman]
  + tests: fix hardcoded path to mkfs.ext4 [Joshua Powers] (LP: #1691517)
  + Actually skip warnings when .skip file is present.
  + [Chris Brinker] (LP: #1691551)
  + netplan: fix netplan render_network_state signature.
  + [Dimitri John Ledkov] (LP: #1685944)
  + Azure: fix reformatting of ephemeral disks on resize to large types.
  + (LP: #1686514)
  + Revert "tools/net-convert: fix argument order for render_network_state"
  + make deb: Add devscripts dependency for make deb. Cleanup
  + packages/bddeb. [Chad Smith] (LP: #1685935)
  + tools/net-convert: fix argument order for render_network_state
  + [Ryan Harper] (LP: #1685944)
  + openstack: fix log message copy/paste typo in _get_url_settings
  + [Lars Kellogg-Stedman]
  + unittests: fix unittests run on centos [Joshua Powers]
  + Improve detection of snappy to include os-release and kernel cmdline.
  + (LP: #1689944)
  + Add address to config entry generated by _klibc_to_config_entry.
  + [Julien Castets] (LP: #1691135)
  + sysconfig: Raise ValueError when multiple default gateways are present.
  + [Chad Smith] (LP: #1687485)
  + FreeBSD: improvements and fixes for use on Azure
  + [Hongjiang Zhang] (LP: #1636345)
  + Add unit tests for ds-identify, fix Ec2 bug found.
  + fs_setup: if cmd is specified, use shell interpretation.
  + [Paul Meyer] (LP: #1687712)
  + doc: document network configuration defaults policy and formats.
  + [Ryan Harper]
  + Fix name of "uri" key in docs for "cc_apt_configure" module
  + [Felix Dreissig]
  + tests: Enable artful [Joshua Powers]
  + nova-lxd: read product_name from environment, not platform.
  + (LP: #1685810)
  + Fix yum repo config where keys contain array values
  + [Dylan Perry] (LP: #1592150)
  + template: Update debian backports template [Joshua Powers] (LP: #1627293)
  + rsyslog: replace ~ with stop [Joshua Powers] (LP: #1367899)
  + Doc: add additional RTD examples [Joshua Powers] (LP: #1459604)
  + Fix growpart for some cases when booted with root=PARTUUID.
  + (LP: #1684869)
  + pylint: update output style to parseable [Joshua Powers]
  + pylint: fix all logging warnings [Joshua Powers]
  + CloudStack: Add NetworkManager to list of supported DHCP lease dirs.
  + [Syed]
  + net: kernel lies about vlans not stealing mac addresses, when they do
  + [Dimitri John Ledkov] (LP: #1682871)
  + ds-identify: Check correct path for "latest" config drive
  + [Daniel Watkins] (LP: #1673637)
  + doc: Fix example for resolve.conf configuration.
  + [Jon Grimm] (LP: #1531582)
  + Fix examples that reference upstream chef repository.
  + [Jon Grimm] (LP: #1678145)
  + doc: correct grammar and improve clarity in merging documentation.
  + [David Tagatac]
  + doc: Add missing doc link to snap-config module. [Ryan Harper]
  + snap: allows for creating cloud-init snap [Joshua Powers]
  + DigitalOcean: assign IPv4ll address to lowest indexed interface.
  + [Ben Howard]
  + DigitalOcean: configure all NICs presented in meta-data. [Ben Howard]
  + Remove (and/or fix) URL shortener references [Jon Grimm] (LP: #1669727)
  + HACKING.rst: more info on filling out contributors agreement.
  + util: teach write_file about copy_mode option
  + [Lars Kellogg-Stedman] (LP: #1644064)
  + DigitalOcean: bind resolvers to loopback interface. [Ben Howard]
  + tests: fix AltCloud tests to not rely on blkid (LP: #1636531)
  + OpenStack: add 'dvs' to the list of physical link types. (LP: #1674946)
  + Fix bug that resulted in an attempt to rename bonds or vlans.
  + (LP: #1669860)
  + tests: update OpenNebula and Digital Ocean to not rely on host
  + interfaces.
  + net: in netplan renderer delete known image-builtin content.
  + (LP: #1675576)
  + doc: correct grammar in capabilities.rst [David Tagatac]
  + ds-identify: fix detecting of maas datasource. (LP: #1677710)
  + netplan: remove debugging prints, add debug logging [Ryan Harper]
  + ds-identify: do not write None twice to datasource_list.
  + support resizing partition and rootfs on system booted without
  + initramfs. [Steve Langasek] (LP: #1677376)
  + apt_configure: run only when needed. (LP: #1675185)
  + OpenStack: identify OpenStack by product 'OpenStack Compute'.
  + (LP: #1675349)
  + GCE: Search GCE in ds-identify, consider serial number in check.
  + (LP: #1674861)
  + Add support for setting hashed passwords [Tore S. Lonoy] (LP: #1570325)
  + Fix filesystem creation when using "partition: auto"
  + [Jonathan Ballet] (LP: #1634678)
  + ConfigDrive: support reading config drive data from /config-drive.
  + (LP: #1673411)
  + ds-identify: fix detection of Bigstep datasource. (LP: #1674766)
  + test: add running of pylint [Joshua Powers]
  + ds-identify: fix bug where filename expansion was left on.
  + advertise network config v2 support (NETWORK_CONFIG_V2) in features.
  + Bigstep: fix bug when executing in python3. [root]
  + Fix unit test when running in a system deployed with cloud-init.
  + Bounce network interface for Azure when using the built-in path.
  + [Brent Baude] (LP: #1674685)
  + cloudinit.net: add network config v2 parsing and rendering [Ryan Harper]
  + net: Fix incorrect call to isfile [Joshua Powers] (LP: #1674317)
  + net: add renderers for automatically selecting the renderer.
  + doc: fix config drive doc with regard to unpartitioned disks.
  + (LP: #1673818)
  + test: Adding integratiron test for password as list [Joshua Powers]
  + render_network_state: switch arguments around, do not require target
  + support 'loopback' as a device type.
  + Integration Testing: improve testcase subclassing [Wesley Wiedenmeier]
  + gitignore: adding doc/rtd_html [Joshua Powers]
  + doc: add instructions for running integration tests via tox.
  + [Joshua Powers]
  + test: avoid differences in 'date' output due to daylight savings.
  + Fix chef config module in omnibus install. [Jeremy Melvin] (LP: #1583837)
  + Add feature flags to cloudinit.version. [Wesley Wiedenmeier]
  + tox: add a citest environment
  + Further fix regression to support 'password' for default user.
  + fix regression when no chpasswd/list was provided.
  + Support chpasswd/list being a list in addition to a string.
  + [Sergio Lystopad] (LP: #1665694)
  + doc: Fix configuration example for cc_set_passwords module.
  + [Sergio Lystopad] (LP: #1665773)
  + net: support both ipv4 and ipv6 gateways in sysconfig.
  + [Lars Kellogg-Stedman] (LP: #1669504)
  + net: do not raise exception for &gt; 3 nameservers
  + [Lars Kellogg-Stedman] (LP: #1670052)
  + ds-identify: report cleanups for config and exit value. (LP: #1669949)
  + ds-identify: move default setting for Ec2/strict_id to a global.
  + ds-identify: record not found in cloud.cfg and always add None.
  + Support warning if the used datasource is not in ds-identify's list.
  + tools/ds-identify: make report mode write namespaced results.
  + Move warning functionality to cloudinit/warnings.py
  + Add profile.d script for showing warnings on login.
  + Z99-cloud-locale-test.sh: install and make consistent.
  + tools/ds-identify: look at cloud.cfg when looking for ec2 strict_id.
  + tools/ds-identify: disable vmware_guest_customization by default.
  + tools/ds-identify: ovf identify vmware guest customization.
  + Identify Brightbox as an Ec2 datasource user. (LP: #1661693)
  + DatasourceEc2: add warning message when not on AWS.
  + ds-identify: add reading of datasource/Ec2/strict_id
  + tools/ds-identify: add support for found or maybe contributing config.
  + tools/ds-identify: read the seed directory on Ec2
  + tools/ds-identify: use quotes in local declarations.
  + tools/ds-identify: fix documentation of policy setting in a comment.
  + ds-identify: only run once per boot unless --force is given.
  + flake8: fix flake8 complaints in previous commit.
  + net: correct errors in cloudinit/net/sysconfig.py
  + [Lars Kellogg-Stedman] (LP: #1665441)
  + ec2_utils: fix MetadataLeafDecoder that returned bytes on empty
  + apply the runtime configuration written by ds-identify.
  + ds-identify: fix checking for filesystem label (LP: #1663735)
  + ds-identify: read ds=nocloud properly (LP: #1663723)
  + support nova-lxd by reading platform from environment of pid 1.
  + (LP: #1661797)
  + ds-identify: change aarch64 to use the default for non-dmi systems.
  + Remove style checking during build and add latest style checks to tox
  + [Joshua Powers] (LP: #1652329)
  + code-style: make master pass pycodestyle (2.3.1) cleanly, currently:
  + [Joshua Powers]
  + manual_cache_clean: When manually cleaning touch a file in instance dir.
  + Add tools/ds-identify to identify datasources available.
  + Fix small typo and change iso-filename for consistency [Robin Naundorf]
  + Fix eni rendering of multiple IPs per interface
  + [Ryan Harper] (LP: #1657940)
  + tools/mock-meta: support python2 or python3 and ipv6 in both.
  + tests: remove executable bit on test_net, so it runs, and fix it.
  + tests: No longer monkey patch httpretty for python 3.4.2
  + Add 3 ecdsa-sha2-nistp* ssh key types now that they are standardized
  + [Lars Kellogg-Stedman] (LP: #1658174)
  + reset httppretty for each test [Lars Kellogg-Stedman] (LP: #1658200)
  + build: fix running Make on a branch with tags other than master
  + EC2: Do not cache security credentials on disk
  + [Andrew Jorgensen] (LP: #1638312)
  + doc: Fix typos and clarify some aspects of the part-handler
  + [Erik M. Bray]
  + doc: add some documentation on OpenStack datasource.
  + OpenStack: Use timeout and retries from config in get_data.
  + [Lars Kellogg-Stedman] (LP: #1657130)
  + Fixed Misc issues related to VMware customization. [Sankar Tanguturi]
  + Fix minor docs typo: perserve &gt; preserve [Jeremy Bicha]
  + Use dnf instead of yum when available
  + [Lars Kellogg-Stedman] (LP: #1647118)
  + validate-yaml: use python rather than explicitly python3
  + Get early logging logged, including failures of cmdline url.
- From 0.7.9
  + doc: adjust headers in tests documentation for consistency.
  + pep8: fix issue found in zesty build with pycodestyle.
  + integration test: initial commit of integration test framework
  + [Wesley Wiedenmeier]
  + LICENSE: Allow dual licensing GPL-3 or Apache 2.0 [Jon Grimm]
  + Fix config order of precedence, putting kernel command line over system.
  + [Wesley Wiedenmeier] (LP: #1582323)
  + pep8: whitespace fix
  + Update the list of valid ssh keys. [Michael Felt]
  + network: add ENI unit test for statically rendered routes.
  + set_hostname: avoid erroneously appending domain to fqdn
  + [Lars Kellogg-Stedman] (LP: #1647910)
  + doc: change 'nobootwait' to 'nofail' in docs [Anhad Jai Singh]
  + Replace an expired bit.ly link in code comment.
  + user-groups: fix bug when groups was provided as string and had spaces
  + (LP: #1354694)
  + mounts: use mount -a again to accomplish mounts (LP: #1647708)
  + CloudSigma: Fix bug where datasource was not loaded in local search.
  + (LP: #1648380)
  + when adding a user, strip whitespace from group list [Lars Kellogg-Stedman]
  + (LP: #1354694)
  + fix decoding of utf-8 chars in yaml test
  + Replace usage of sys_netdev_info with read_sys_net (LP: #1625766)
  + fix problems found in python2.6 test.
  + OpenStack: extend physical types to include hyperv, hw_veb, vhost_user.
  + (LP: #1642679)
  + tests: fix assumptions that expected no eth0 in system. (LP: #1644043)
  + net/cmdline: Consider ip= or ip6= on command line not only ip=
  + (LP: #1639930)
  + Just use file logging by default (LP: #1643990)
  + Improve formatting for ProcessExecutionError [Wesley Wiedenmeier]
  + flake8: fix trailing white space
  + Doc: various documentation fixes [Sean Bright]
  + cloudinit/config/cc_rh_subscription.py: Remove repos before adding
  + [Brent Baude]
  + packages/redhat: fix rpm spec file.
  + main: set TZ in environment if not already set. [Ryan Harper]
  + Azure: No longer rely on walinux agent. (LP: #1538522)
  + disk_setup: Use sectors as unit when formatting MBR disks with sfdisk.
  + [Daniel Watkins] (LP: #1460715)
  + Add activate_datasource, for datasource specific code paths. (LP: #1611074)
  + systemd: cloud-init-local use RequiresMountsFor=/var/lib/cloud
  + (LP: #1642062)
  + systemd: cloud-init remove After=systemd-networkd-wait-online
  + systemd: cloud-init-local change Before basic to sysinit
  + pep8: fix style errors reported by pycodestyle 2.1.0
  + systemd: drop both Wants and After local-fs.target
  + systemd: networking service adjustments. (LP: #1636912)
  + systemd: replace Before=basic.target, dbus.target with sysinit.target
  + (LP: #1629797)
  + doc: Add documentation on stages of boot.
  + doc: make the RST files consistently formated and other improvements.
  + Ec2: fix syntax and tox in previous commit.
  + Ec2: protect against non-dictionary in block-device-mapping.
  + doc: fixed example to not overwrite /etc/hosts [Chris Glass]
  + Doc: fix spelling / typos in ca_certs and scripts_vendor.
  + pyflakes: fix issue with pyflakes 1.3 found in ubuntu zesty-proposed.
  + net/cmdline: Further adjustments to ipv6 support [LaMont Jones]
  + (LP: #1621615)
  + Add coverage dependency to bddeb to fix package build.
  + doc: improve HACKING.rst file
  + dmidecode: Allow dmidecode to be used on aarch64 [Robert Schweikert]
  + AliYun: Add new datasource for Ali-Cloud ECS [kaihuan.pkh]
  + Add coverage collection to tox unit tests. [Joshua Powers]
  + cc_users_groups: fix remaing call to ds.normalize_user_groups [Ryan Harper]
  + disk-config: udev settle after partitioning in gpt format. (LP: #1626243)
  + unittests: do not read system /etc/cloud/cloud.cfg.d (LP: #1635350)
  + Add documentation for logging features. [Wesley Wiedenmeier]
  + Add support for snap create-user on Ubuntu Core images. [Ryan Harper]
  + Fix sshd restarts for rhel distros. [Jim Gorz]
  + OpenNebula: replace 'ip' parsing with cloudinit.net usage.
  + Fix python2.6 things found running in centos 6.
  + Move user/group functions to new ug_util file
  + DigitalOcean: enable usage of data source by default.
  + update Gentoo initscripts to run in the correct order [Matthew Thode]
  + MAAS: improve the main of datasource to look at kernel cmdline config.
  + tests: silence the Cheetah UserWarning about NameMapper C version.
  + systemd: Run cloud-init.service Before dbus.socket not dbus.target
  + [Daniel Watkins] (LP: #1629797)
  + systemd: run cloud-init.service Before dbus.service (LP: #1629797)
  + unittests: fix use of mock 2.0 'assert_called' when running make check
  + [Ryan Harper]
  + Improve module documentation and doc cleanup. [Wesley Wiedenmeier]
  + lxd: Update network config for LXD 2.3 [Stéphane Graber]
  + DigitalOcean: use meta-data for network configruation [Ben Howard]
  + ntp: move to run after apt configuration (LP: #1628337)
  + Decode unicode types in decode_binary [Robert Schweikert]
  + systemd: Ensure that cloud-init-local happens before NetworkManager
  + Allow ephemeral drive to be unpartitioned [Paul Meyer]
  + subp: add 'update_env' argument
  + net: support reading ipv6 dhcp config from initramfs [LaMont Jones]
  + (LP: #1621615, #1621507)
  + Adjust mounts and disk configuration for systemd. (LP: #1611074)
  + dmidecode: run dmidecode only on i?86 or x86_64 arch. [Robert Schweikert]
  + systemd: put cloud-init.target After multi-user.target (LP: #1623868)</changelog>
  <changelog author="rjschwei@suse.com" date="1509624000">- Fix sed expression to set distro properly (boo#1063716)</changelog>
  <changelog author="rjschwei@suse.com" date="1510142400">- Add cloud-init-hosts-template.patch (bsc#1064594)
  + Properly expand the /etc/hosst file when manage_etc_hosts is set</changelog>
  <changelog author="rjschwei@suse.com" date="1510401600">- Add cloud-init-ntp-conf-suse.patch
  + ntp configuration was broken on sles and opensuse lp#1726572</changelog>
  <changelog author="rjschwei@suse.com" date="1510833600">- Add cloud-init-translate-netconf-ipv4-keep-gw.patch (boo#1064854)
  + Properly insert the gateway information for v1 json network config data</changelog>
  <changelog author="rjschwei@suse.com" date="1510920000">- Fix variable name in cloud-init-translate-netconf-ipv4-keep-gw.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1511092800">- Add cloud-init-break-cycle-local-service.patch
  + Let systemd pull in the default targets. This breaks a cycle</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add cloud-init-resize-ro-btrfs.patch
  + cc_resizefs fails if the current root is a read-only btrfs
    subvolume, use an always writeable subvolume instead [bsc#1042913]</changelog>
  <changelog author="rjschwei@suse.com" date="1512561600">- Add cloud-init-reproduce-build.patch (boo#1069635)
  + Make builds reproducible</changelog>
  <changelog author="dimstar@opensuse.org" date="1516104000">- Fix usage of fdupes macro: there is no '-n' parameter to the
  macro (there would be to fdupes, the command, though).</changelog>
  <changelog author="gmoro@suse.com" date="1516276800">- patch distribution detection until a fix is delivered to python3 (bsc#997614)
  add cloud-init-add-variant-cloudcfg.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1517227200">- Update to version 17.2 (boo#1069635, bsc#1072811)
  + Add cloud-init-skip-ovf-tests.patch
  + Add cloud-init-no-python-linux-dist.patch
  + Add 0001-switch-to-using-iproute2-tools.patch
  + Add 0001-Support-chrony-configuration-lp-1731619.patch
  + Add 0002-Disable-method-deprecation-warning-for-pylint.patch
  + Add 0003-Distro-dependent-chrony-config-file.patch
  + removed cloud-init-add-variant-cloudcfg.patch replaced by
    cloud-init-no-python-linux-dist.patch
  + removed zypp_add_repos.diff included upstream
  + removed zypp_add_repo_test.patch included upstream
  + removed cloud-init-hosts-template.patch included upstream
  + removed cloud-init-more-tasks.patch included upstream
  + removed cloud-init-final-no-apt.patch included upstream
  + removed cloud-init-ntp-conf-suse.patch included upstream
  + removed cloud-init-break-cycle-local-service.patch included upstream
  + removed cloud-init-reproduce-build.patch included upstream
  + For the complete changelog see https://launchpad.net/cloud-init/trunk/17.2</changelog>
  <changelog author="dmueller@suse.com" date="1517313600">- drop dependency on boto (only used in examples, and
  should really be ported to botocore/boto3 instead)</changelog>
  <changelog author="rjschwei@suse.com" date="1518523200">- Fix logfile permission settings (bsc#1080595)
  + Add 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch</changelog>
  <changelog author="dmueller@suse.com" date="1518782400">- update cloud-init-sysconfig-netpathfix.patch:
  * skip checking for files in /etc/sysconfig that never exist
  on a wickedd based system</changelog>
  <changelog author="rjschwei@suse.com" date="1521633600">- Update to version 18.1 (bsc#1085787, bsc#1084749)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port 0003-Distro-dependent-chrony-config-file.patch
    partial integration into 0001-Support-chrony-configuration-lp-1731619.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Remove 0002-Disable-method-deprecation-warning-for-pylint.patch
    use new cloud-init internal distro detection code
  + Remove cloud-init-resize-ro-btrfs.patch included upstream
  + Remove 0001-Set-syslog_fix_perms-for-SUSE-distro-addresses-bsc-1.patch
    included upstream
  + OVF: Fix VMware support for 64-bit platforms. [Sankar Tanguturi]
  + ds-identify: Fix searching for iso9660 OVF cdroms. (LP: #1749980)
  + SUSE: Fix groups used for ownership of cloud-init.log [Robert Schweikert]
  + ds-identify: check /writable/system-data/ for nocloud seed.
    (LP: #1747070)
  + tests: run nosetests in cloudinit/ directory, fix py26 fallout.
  + tools: run-centos: git clone rather than tar.
  + tests: add support for logs with lxd from snap and future lxd 3.
    (LP: #1745663)
  + EC2: Fix get_instance_id called against cached datasource pickle.
    (LP: #1748354)
  + cli: fix cloud-init status to report running when before result.json
    (LP: #1747965)
  + net: accept network-config in netplan format for renaming interfaces
    (LP: #1709715)
  + Fix ssh keys validation in ssh_util [Tatiana Kholkina]
  + docs: Update RTD content for cloud-init subcommands.
  + OVF: Extend well-known labels to include OVFENV. (LP: #1698669)
  + Fix potential cases of uninitialized variables. (LP: #1744796)
  + tests: Collect script output as binary, collect systemd journal, fix lxd.
  + HACKING.rst: mention setting user name and email via git config.
  + Azure VM Preprovisioning support. [Douglas Jordan] (LP: #1734991)
  + tools/read-version: Fix read-version when in a git worktree.
  + docs: Fix typos in docs and one debug message. [Florian Grignon]
  + btrfs: support resizing if root is mounted ro.
    [Robert Schweikert] (LP: #1734787)
  + OpenNebula: Improve network configuration support.
    [Akihiko Ota] (LP: #1719157, #1716397, #1736750)
  + tests: Fix EC2 Platform to return console output as bytes.
  + tests: Fix attempted use of /run in a test case.
  + GCE: Improvements and changes to ssh key behavior for default user.
    [Max Illfelder] (LP: #1670456, #1707033, #1707037, #1707039)
  + subp: make ProcessExecutionError have expected types in stderr, stdout.
  + tests: when querying ntp server, do not do dns resolution.
  + Recognize uppercase vfat disk labels [James Penick] (LP: #1598783)
  + tests: remove zesty as supported OS to test [Joshua Powers]
  + Do not log warning on config files that represent None. (LP: #1742479)
  + tests: Use git hash pip dependency format for pylxd.
  + tests: add integration requirements text file [Joshua Powers]
  + MAAS: add check_instance_id based off oauth tokens. (LP: #1712680)
  + tests: update apt sources list test [Joshua Powers]
  + tests: clean up image properties [Joshua Powers]
  + tests: rename test ssh keys to avoid appearance of leaking private keys.
    [Joshua Powers]
  + tests: Enable AWS EC2 Integration Testing [Joshua Powers]
  + cli: cloud-init clean handles symlinks (LP: #1741093)
  + SUSE: Add a basic test of network config rendering. [Robert Schweikert]
  + Azure: Only bounce network when necessary. (LP: #1722668)
  + lint: Fix lints seen by pylint version 1.8.1.
  + cli: Fix error in cloud-init modules --mode=init. (LP: #1736600)</changelog>
  <changelog author="rjschwei@suse.com" date="1526040000">- Update to version 18.2 (bsc#1092637, bsc#1084509)
  + Forward port cloud-init-python2-sigpipe.patch
  + Forward port cloud-init-no-python-linux-dist.patch
  + Add cloud-init-no-trace-empt-sect.patch
  + Hetzner: Exit early if dmi system-manufacturer is not Hetzner.
  + Add missing dependency on isc-dhcp-client to trunk ubuntu packaging.
  + (LP: #1759307)
  + FreeBSD: resizefs module now able to handle zfs/zpool.
  + [Dominic Schlegel] (LP: #1721243)
  + cc_puppet: Revert regression of puppet creating ssl and ssl_cert dirs
  + Enable IBMCloud datasource in settings.py.
  + IBMCloud: Initial IBM Cloud datasource.
  + tests: remove jsonschema from xenial tox environment.
  + tests: Fix newly added schema unit tests to skip if no jsonschema.
  + ec2: Adjust ec2 datasource after exception_cb change.
  + Reduce AzurePreprovisioning HTTP timeouts.
  + [Douglas Jordan] (LP: #1752977)
  + Revert the logic of exception_cb in read_url.
  + [Kurt Garloff] (LP: #1702160, #1298921)
  + ubuntu-advantage: Add new config module to support
  + ubuntu-advantage-tools
  + Handle global dns entries in netplan (LP: #1750884)
  + Identify OpenTelekomCloud Xen as OpenStack DS.
  + [Kurt Garloff] (LP: #1756471)
  + datasources: fix DataSource subclass get_hostname method signature
  + (LP: #1757176)
  + OpenNebula: Update network to return v2 config rather than ENI.
  + [Akihiko Ota]
  + Add Hetzner Cloud DataSource
  + net: recognize iscsi root cases without ip= on kernel command line.
  + (LP: #1752391)
  + tests: fix flakes warning for unused variable
  + tests: patch leaked stderr messages from snap unit tests
  + cc_snap: Add new module to install and configure snapd and snap
  + packages.
  + tests: Make pylint happy and fix python2.6 uses of assertRaisesRegex.
  + netplan: render bridge port-priority values (LP: #1735821)
  + util: Fix subp regression. Allow specifying subp command as a string.
  + (LP: #1755965)
  + doc: fix all warnings issued by 'tox -e doc'
  + FreeBSD: Set hostname to FQDN. [Dominic Schlegel] (LP: #1753499)
  + tests: fix run_tree and bddeb
  + tests: Fix some warnings in tests that popped up with newer python.
  + set_hostname: When present in metadata, set it before network bringup.
  + (LP: #1746455)
  + tests: Centralize and re-use skipTest based on json schema presense.
  + This commit fixes get_hostname on the AzureDataSource.
  + [Douglas Jordan] (LP: #1754495)
  + shellify: raise TypeError on bad input.
  + Make salt minion module work on FreeBSD.
  + [Dominic Schlegel] (LP: #1721503)
  + Simplify some comparisions. [Rémy Léone]
  + Change some list creation and population to literal. [Rémy Léone]
  + GCE: fix reading of user-data that is not base64 encoded. (LP: #1752711)
  + doc: fix chef install from apt packages example in RTD.
  + Implement puppet 4 support [Romanos Skiadas] (LP: #1446804)
  + subp: Fix subp usage with non-ascii characters when no system locale.
  + (LP: #1751051)
  + salt: configure grains in grains file rather than in minion config.
    [Daniel Wallace]</changelog>
  <changelog author="rjschwei@suse.com" date="1526472000">- Drop the generator (bsc#1089824, boo#1093501)
  + The generator spawns a script called ds-identify which in turn calls
    blkid. When the generator executes the environment may or may not be
    ready. The generator speeds up the boot process in cases where
    cloud-init is enabled but we are not in an environment where cloud-init
    should run -&gt; Don't do that.</changelog>
  <changelog author="rjschwei@suse.com" date="1526990400">- Re-add generator (bsc#1089824, boo#1093501)
  + Add cloud-init-setpath-dsitentify.patch, upstream solution to
    hanle PATH issue
  + Re-enable th egenerator to reduce effort in cloud-init configuration</changelog>
</package>
<package pkgid="e58666310f3cbb36c867c5763b4b40ae98768f4c91c6afb245890c2002e2de80" name="cloud-netconfig-azure" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="3e4896a720b3aadaf2ae223e4813547ab0619f438577861ce9bcee8497b8f151" name="cloud-netconfig-azure" arch="src">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="085ad6a3a8693b976ddfa537ce02d949c092ab7f0ef33ffd44d5e4ce6f983f78" name="cloud-netconfig-ec2" arch="noarch">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="97833bc7c46c62d53cae7c7418f7a6f1da1cedf6791be8c9df8a129ea7a4c8bf" name="cloud-netconfig-ec2" arch="src">
  <version epoch="0" ver="0.7" rel="lp150.4.3.1"/>
  <changelog author="jgleissner@suse.com" date="1502712000">- Initial version 0.3</changelog>
  <changelog author="jgleissner@suse.com" date="1504785600">- Added conflict tags
- Fix requires for non-Leap platforms</changelog>
  <changelog author="jgleissner@suse.com" date="1507636800">- Update to version 0.4:
  Do not touch VF interfaces in Azure (bsc#1055553)
- Prepare for SLE submission (FATE#323820, bsc#1027212)</changelog>
  <changelog author="rjschwei@suse.com" date="1507723200">- Update to version 0.5
  + New API version for Azure metadata server
  + Wait for the metadata server in EC2</changelog>
  <changelog author="jgleissner@suse.com" date="1507896000">- Update to version 0.6:
  + Use tested and supported metadata API versions</changelog>
  <changelog author="jgleissner@suse.com" date="1507896001">- Prepare for SLE11 submission (bsc#1063292)</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1510228800">- Add missing Provides/Conflicts statements to spec file</changelog>
  <changelog author="jgleissner@suse.com" date="1515758400">- Remove dependency on udev-persistent-ifnames (bsc#1075484)</changelog>
  <changelog author="jgleissner@suse.com" date="1516190400">- Added dependency on curl
- Use otherproviders() only on SLES 11 builds</changelog>
  <changelog author="jgleissner@suse.com" date="1527854400">- Update to version 0.7:
  + no persistent interface names in Azure (bsc#1095485)</changelog>
</package>
<package pkgid="1a191c1c1b2a90e28fdc2d773e69dd6b33f4e614651ea04387533608d05d32df" name="codec2" arch="src">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="a056481571bcb90c0d756cd594cdca7c3d7c6a37dc11fa22c7904ea08530d907" name="codec2" arch="x86_64">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="f343442230652430158d88aeaf96ac7981025d74052b43d587345124c040814c" name="codec2-devel" arch="x86_64">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="5cbc305f5cbadff166559d8d38d3f1d88b7bd0923095d0f2499e7c5d2f416b51" name="codec2-examples" arch="noarch">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="3b978abdfde0ae1879538e37bc45ee3e435ac8781dcdd557be615664173ad534" name="collectl" arch="noarch">
  <version epoch="0" ver="4.1.3" rel="lp150.3.3.1"/>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 3.4.1
  * new switch --umask for setting mode to files collectl creates
  * support for Fusion-IO disks
  * Support for OFED 1.5
  * Improved performance of playback
  * Added LSB headers to all start scripts
  * New data collection/reporting API
  * New export: gexpr, for exporting data to ganglia
  * Added NFS V4 support and collection
  * Expanded contents of verbose memory output
  * Added Power to environmental monitoring
  * Allow multiple clients to connect when is server mode
  * Added fields to --top for monitoring slabs
  * Expanded --top functionality.
  * Enhanced MDS stats to support lustre 1.6.5
  * Added --grep switch to allow searching/reporting data in raw files
  * A couple of switch names changed to be more consistent
  * Improved help</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 3.4.3
  * when errors detected during initialization not skipping subsequent checks
  * added --dskfilt
  * added check for client-side OST uuid status 'DEACTIVATED'
  * support for CPUs dynamically changing stats and going off/on-line
  * new feature: select process by UID range
  * do not issue 'stty' if !PC, running on terminal and !background.
  * added --netfilt
  * changed disk details to use 'cvt()' for reporting number of I/Os since DM
    numbers
  * 2 new process sort fields: pid and cpu
  * only look at $cpuDisabledFlag when processing CPU data</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tabraham@suse.com" date="1354708800">- bug-793027.patch: fix for collectl init script (bnc #793027)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="tabraham@suse.com" date="1370520000">- deleted bug-793027.patch : deprecated
- init-cleanup.patch : init script cleanup
- see RELEASE-collectl for list of changes between 3.4.3 and 3.6.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1382788800">- Drop sysvinit support; none of target distributions use sysvinit
  anymore
- Add systemd support
- Install collectl in /usr/bin to get it launchable with systemd and
  link it in /usr/sbin
- Add a sysconfig file</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 3.6.9
  + Typo in network plot header loop resulted in infinite loop
  + remove $int/secs from numa hit rate calc AND add more precision
    to its output
- Changes from 3.6.8
  + new flag $exportComm must be set in gexpr/ganglia so that they won't
    generate an error if run without -f or -A
  + new switch: --intfilt allows filtering of interrupts
  + always log messages of type F/E to syslog in daemon mode even if
  - m is not set
  + wasn't dealing correctly with missing whitespace after network name in
    /proc/dev/net in initRecord()
  + updated init.d script for suse per the maintainer's instructions
  + extra spaces were being printed in plot mode for tpc stats
  + added entry to envrules.std to deal with intel Phi Co-Processor
  + debian init.d script now does 'exit 1' if status reports 'not running'
  + rawnetignore switch wasn't working correctly
  + found/fixed some subtle problems with --procanalyze as well as some cleanup
  - need to ignore first sample after initializing summary arrays
  - need to init summary hashes for thrutime and accumT because get uninit var
    in print routine is only a single process entry
  - found a typo in procAnalyze() to a $usecs which wasn't being used!
  - added error check to make sure --procanalyze with -P requires -s
  + added a little more debugging output for -d128
  + discovered dynamic disk/network detail names for interactive mode were not
    being reported correctly.  sounds a lot worse than it is because this is
    typically not done very often nor are disks/networks very dynamic except in
    large, virtualized environments such as clouds
  + add to list of devices to exlude from network summary data: tap, dp and nl,
    which are associated with openstack cinder.  remember you can always add
    more to that list with --netfilt
  + $lastHour was never referenced and dayInit() called every time a log was
    created so fix logic to update $lastHour correctly AND call initDay() one
    time and do it before newLog() called.
  + closed a couple of file handles that were left open and reportedly
    causing some defunct processes with -sx.
  + fixed bug in lustre stats recording
  + clarified --showsubopts text about disk and network filters in that they
    apply to both summary and detail data output
  + fixed problem with --import and --stats
  + --statsopt a didn't work because when changed some internal logic missed
    changing a test of $timestampFlag to $timestampCounter[$rawPFlag] and so
    now $timestampCount can be removed entirely
  + clear $firstpass after 1st pass during playback
  + make sure filename initialized before calling loadConfig so if there is
    an error logsys() doesn't get an undefined var warning
  + to be safe, remove any quotes on net/dsk filters in case included by
    mistake in DaemonCommands string
  + tightened up tests to see if daemonized collectl already running
  + if no hiRes::Time, fudge the value of $microInterval based on -i
  + new --procOpt k, removes known shells from process listing with -sZ,
    currently set to /bin.sh, /usr/bin/perl, /usr/bin/python and python
  + fixed varname in lexpr: $debug should have been $lexDebug
- Remove init-cleanup.patch; merged on upstream release</changelog>
  <changelog author="tabraham@suse.com" date="1411560000">- Update to version 3.7.4
  See RELEASE-collectl for changes</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 4.0.0
  * for a complete list of changes see RELEASE-collectl
- Cleanup spec-file with spec-cleaner
- Use url for source
- Fix broken rcservice symlink
- Add ommited systemd service pre macro</changelog>
  <changelog author="tabraham@suse.com" date="1432814400">- Update to 4.0.2
  * add /bin/bash to list of 'known shells' excluded from output with
  - -procopt k
  * generalize ethernet network device name to include ALL names
    matching type 'p\dp' so we pick up p2p, p3p, p4p... [thanks Matt]
  * collect nr_shmem so we can track shared memory, apparently something
    I thought of but never acted on [thanks Christian]
  * do not include guest cpu metrics in totals since already accounted
    for in user time</changelog>
  <changelog author="tabraham@suse.com" date="1462363200">- Update to 4.0.4
  + if you try to playback a file with --stats and it has recorded
    processes or slabs, ignore them be removing from $subsys
  + playback of process data with -P was not skipping first interval and so
    stats for first entry we not rates but rather raw numbers
  + change 'yikes' message to something more meaningful
  + fixed problem with -sZ -P printing all 0s for thread count
  + added /usr/lib/systemd/system/collectl.service, per sourceforge help
    discussion on 2015-12-28
  + added disk read/write wait timing for disk detail in terminal, plot
    and lexpr format
  + new switch dskremap allows one to change disk names on the fly because
    in some cases such as etherd disks, the names are messy for use with
    other tools like ganlia
  + removed access to disk name remapping file
  + the rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
- Changes from 4.0.3
  + add AnonHuge memory to memory stats, both verbose and detailed as
    well as lexpr
  + if lexpr called with --import, throw an error
  + tighten divide-by-zero test for -sM because it looks like in some cases
    when misses &gt;0 we're getting occasional errors.  could hits be somehow
    negative?</changelog>
  <changelog author="tabraham@suse.com" date="1468497600">- Update to 4.0.5
  + rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
  + needed to initialized anonH for numa stats [thanks andy]
  + added 'hed' to known ethernet devices, used by HP Helion</changelog>
  <changelog author="tabraham@suse.com" date="1476187200">- Update to 4.1.0
  + allow lexpr to pass formatting information for strings and numbers
    [thanks Guy]
  + modify the way misc.ph reports uptime to thousandths of a day [thanks, seb]
  + added OPA interface support for -sx reporting and cleaned up some very
    old code, like quadrics support! [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1488542400">- Update to 4.1.2
  + incorrectly requiring a + with --rawdskfilt to be at beginning
  + when added support for 64bit IB counters it looks like I was only
    saving 3 of the 4 values (loop only went to 3 instead of 4)
    around line 4403. [thanks seb]
- Changes from 4.1.1
  + added packet loss and fast restransmissions to TCP Extended versbose
    output and renamed AkNoPy and PreAck to PurAck and HPAcks to be
    consistent with earlier versions [thanks Sophie]
  + add support for nvme disks [thanks fred]
  + it turns out some people re-enable lustre support for the sake of
    monitoring clients and to support that I had to add a check for
    the lustre-client module which is now in a differetn location than
    others [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1491912000">- include colmux
- Update to 4.1.3
  + correct use of uninitialized variable on output of distro info
    on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1523448000">- Cleanup spec file with spec-cleaner
- Use correct systemd build dependency
- Reduce duplicities in package via fdupes</changelog>
  <changelog author="glin@suse.com" date="1535544000">- Specify the type of service as "forking" (boo#1106366)
- Remove the execution bit from collectl.service
- Create the collectl directory in /var/log</changelog>
</package>
<package pkgid="2bfe4f5ab74e30eeead108e24c666f01a7570a1fa1ea5453d52bf8974213ebbc" name="collectl" arch="src">
  <version epoch="0" ver="4.1.3" rel="lp150.3.3.1"/>
  <changelog author="hvogel@suse.de" date="1215086400">- Initial package, Version 2.6.4</changelog>
  <changelog author="hvogel@novell.com" date="1270555200">- Update to version 3.4.1
  * new switch --umask for setting mode to files collectl creates
  * support for Fusion-IO disks
  * Support for OFED 1.5
  * Improved performance of playback
  * Added LSB headers to all start scripts
  * New data collection/reporting API
  * New export: gexpr, for exporting data to ganglia
  * Added NFS V4 support and collection
  * Expanded contents of verbose memory output
  * Added Power to environmental monitoring
  * Allow multiple clients to connect when is server mode
  * Added fields to --top for monitoring slabs
  * Expanded --top functionality.
  * Enhanced MDS stats to support lustre 1.6.5
  * Added --grep switch to allow searching/reporting data in raw files
  * A couple of switch names changed to be more consistent
  * Improved help</changelog>
  <changelog author="hvogel@novell.com" date="1288958400">- Update to version 3.4.3
  * when errors detected during initialization not skipping subsequent checks
  * added --dskfilt
  * added check for client-side OST uuid status 'DEACTIVATED'
  * support for CPUs dynamically changing stats and going off/on-line
  * new feature: select process by UID range
  * do not issue 'stty' if !PC, running on terminal and !background.
  * added --netfilt
  * changed disk details to use 'cvt()' for reporting number of I/Os since DM
    numbers
  * 2 new process sort fields: pid and cpu
  * only look at $cpuDisabledFlag when processing CPU data</changelog>
  <changelog author="jengelh@medozas.de" date="1316347200">- Remove redundant tags/sections from specfile</changelog>
  <changelog author="tabraham@suse.com" date="1354708800">- bug-793027.patch: fix for collectl init script (bnc #793027)</changelog>
  <changelog author="coolo@suse.com" date="1362484800">- update license to new format</changelog>
  <changelog author="tabraham@suse.com" date="1370520000">- deleted bug-793027.patch : deprecated
- init-cleanup.patch : init script cleanup
- see RELEASE-collectl for list of changes between 3.4.3 and 3.6.7</changelog>
  <changelog author="p.drouand@gmail.com" date="1382788800">- Drop sysvinit support; none of target distributions use sysvinit
  anymore
- Add systemd support
- Install collectl in /usr/bin to get it launchable with systemd and
  link it in /usr/sbin
- Add a sysconfig file</changelog>
  <changelog author="p.drouand@gmail.com" date="1386849600">- Update to version 3.6.9
  + Typo in network plot header loop resulted in infinite loop
  + remove $int/secs from numa hit rate calc AND add more precision
    to its output
- Changes from 3.6.8
  + new flag $exportComm must be set in gexpr/ganglia so that they won't
    generate an error if run without -f or -A
  + new switch: --intfilt allows filtering of interrupts
  + always log messages of type F/E to syslog in daemon mode even if
  - m is not set
  + wasn't dealing correctly with missing whitespace after network name in
    /proc/dev/net in initRecord()
  + updated init.d script for suse per the maintainer's instructions
  + extra spaces were being printed in plot mode for tpc stats
  + added entry to envrules.std to deal with intel Phi Co-Processor
  + debian init.d script now does 'exit 1' if status reports 'not running'
  + rawnetignore switch wasn't working correctly
  + found/fixed some subtle problems with --procanalyze as well as some cleanup
  - need to ignore first sample after initializing summary arrays
  - need to init summary hashes for thrutime and accumT because get uninit var
    in print routine is only a single process entry
  - found a typo in procAnalyze() to a $usecs which wasn't being used!
  - added error check to make sure --procanalyze with -P requires -s
  + added a little more debugging output for -d128
  + discovered dynamic disk/network detail names for interactive mode were not
    being reported correctly.  sounds a lot worse than it is because this is
    typically not done very often nor are disks/networks very dynamic except in
    large, virtualized environments such as clouds
  + add to list of devices to exlude from network summary data: tap, dp and nl,
    which are associated with openstack cinder.  remember you can always add
    more to that list with --netfilt
  + $lastHour was never referenced and dayInit() called every time a log was
    created so fix logic to update $lastHour correctly AND call initDay() one
    time and do it before newLog() called.
  + closed a couple of file handles that were left open and reportedly
    causing some defunct processes with -sx.
  + fixed bug in lustre stats recording
  + clarified --showsubopts text about disk and network filters in that they
    apply to both summary and detail data output
  + fixed problem with --import and --stats
  + --statsopt a didn't work because when changed some internal logic missed
    changing a test of $timestampFlag to $timestampCounter[$rawPFlag] and so
    now $timestampCount can be removed entirely
  + clear $firstpass after 1st pass during playback
  + make sure filename initialized before calling loadConfig so if there is
    an error logsys() doesn't get an undefined var warning
  + to be safe, remove any quotes on net/dsk filters in case included by
    mistake in DaemonCommands string
  + tightened up tests to see if daemonized collectl already running
  + if no hiRes::Time, fudge the value of $microInterval based on -i
  + new --procOpt k, removes known shells from process listing with -sZ,
    currently set to /bin.sh, /usr/bin/perl, /usr/bin/python and python
  + fixed varname in lexpr: $debug should have been $lexDebug
- Remove init-cleanup.patch; merged on upstream release</changelog>
  <changelog author="tabraham@suse.com" date="1411560000">- Update to version 3.7.4
  See RELEASE-collectl for changes</changelog>
  <changelog author="mpluskal@suse.com" date="1429531200">- Update to 4.0.0
  * for a complete list of changes see RELEASE-collectl
- Cleanup spec-file with spec-cleaner
- Use url for source
- Fix broken rcservice symlink
- Add ommited systemd service pre macro</changelog>
  <changelog author="tabraham@suse.com" date="1432814400">- Update to 4.0.2
  * add /bin/bash to list of 'known shells' excluded from output with
  - -procopt k
  * generalize ethernet network device name to include ALL names
    matching type 'p\dp' so we pick up p2p, p3p, p4p... [thanks Matt]
  * collect nr_shmem so we can track shared memory, apparently something
    I thought of but never acted on [thanks Christian]
  * do not include guest cpu metrics in totals since already accounted
    for in user time</changelog>
  <changelog author="tabraham@suse.com" date="1462363200">- Update to 4.0.4
  + if you try to playback a file with --stats and it has recorded
    processes or slabs, ignore them be removing from $subsys
  + playback of process data with -P was not skipping first interval and so
    stats for first entry we not rates but rather raw numbers
  + change 'yikes' message to something more meaningful
  + fixed problem with -sZ -P printing all 0s for thread count
  + added /usr/lib/systemd/system/collectl.service, per sourceforge help
    discussion on 2015-12-28
  + added disk read/write wait timing for disk detail in terminal, plot
    and lexpr format
  + new switch dskremap allows one to change disk names on the fly because
    in some cases such as etherd disks, the names are messy for use with
    other tools like ganlia
  + removed access to disk name remapping file
  + the rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
- Changes from 4.0.3
  + add AnonHuge memory to memory stats, both verbose and detailed as
    well as lexpr
  + if lexpr called with --import, throw an error
  + tighten divide-by-zero test for -sM because it looks like in some cases
    when misses &gt;0 we're getting occasional errors.  could hits be somehow
    negative?</changelog>
  <changelog author="tabraham@suse.com" date="1468497600">- Update to 4.0.5
  + rawdskfilt has been enhanced to allow a preceding + which will
    cause the following string to be appended to the default filter
  + needed to initialized anonH for numa stats [thanks andy]
  + added 'hed' to known ethernet devices, used by HP Helion</changelog>
  <changelog author="tabraham@suse.com" date="1476187200">- Update to 4.1.0
  + allow lexpr to pass formatting information for strings and numbers
    [thanks Guy]
  + modify the way misc.ph reports uptime to thousandths of a day [thanks, seb]
  + added OPA interface support for -sx reporting and cleaned up some very
    old code, like quadrics support! [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1488542400">- Update to 4.1.2
  + incorrectly requiring a + with --rawdskfilt to be at beginning
  + when added support for 64bit IB counters it looks like I was only
    saving 3 of the 4 values (loop only went to 3 instead of 4)
    around line 4403. [thanks seb]
- Changes from 4.1.1
  + added packet loss and fast restransmissions to TCP Extended versbose
    output and renamed AkNoPy and PreAck to PurAck and HPAcks to be
    consistent with earlier versions [thanks Sophie]
  + add support for nvme disks [thanks fred]
  + it turns out some people re-enable lustre support for the sake of
    monitoring clients and to support that I had to add a check for
    the lustre-client module which is now in a differetn location than
    others [thanks fred]</changelog>
  <changelog author="tabraham@suse.com" date="1491912000">- include colmux
- Update to 4.1.3
  + correct use of uninitialized variable on output of distro info
    on openSUSE</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mpluskal@suse.com" date="1523448000">- Cleanup spec file with spec-cleaner
- Use correct systemd build dependency
- Reduce duplicities in package via fdupes</changelog>
  <changelog author="glin@suse.com" date="1535544000">- Specify the type of service as "forking" (boo#1106366)
- Remove the execution bit from collectl.service
- Create the collectl directory in /var/log</changelog>
</package>
<package pkgid="d7ca8d83fce2c5376af5315a0d0f24535e834309eecf852ef1649e210d912c27" name="conman" arch="src">
  <version epoch="0" ver="0.2.9" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1478520000">- Initial packaging of conman v 0.2.7.</changelog>
  <changelog author="pmladek@suse.com" date="1479124800">- Call %fillup_only without -d parameter. Otherwise, it installed
  the file into /etc/sysconfig/%{2}/conman because none subdir was
  not defined.</changelog>
  <changelog author="eich@suse.com" date="1479729600">- List directories under /lib explicitely to avoid conflicts
  with directories for debuginfo.</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Removed %clean section.</changelog>
  <changelog author="eich@suse.com" date="1484654400">- Removed stray file.
- Conditionalized support for freeipmi to distro version.
- Set use of tcpwrappers to 'off' by default.
- Fixed build for pre-systemd versions.</changelog>
  <changelog author="eich@suse.com" date="1487160000">- Cleaned up spec file: add generic defines to the top.</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Replace unnecessary %__ macro indirections</changelog>
  <changelog author="eich@suse.com" date="1494244800">- conman.conf: make differences between openSUSE and SLES explicit.</changelog>
  <changelog author="jjolly@suse.com" date="1496404800">- conman-suse-fix-expect-scripts.patch:
  Fixed ssh expect script for SUSE-specific output.</changelog>
  <changelog author="jjolly@suse.com" date="1496491200">- conman service configured to start as conman:conman user</changelog>
  <changelog author="eich@suse.com" date="1502712000">- Enable tcpwrappers on all platforms by default.
- Fix systemd-specific conditionals in spec file.
- Remove Provides: group/user(): these are only
  used by conman, there is no intention to provide
  them to other packages.</changelog>
  <changelog author="eich@suse.com" date="1507291200">- Updated to version 0.2.8:
  * Changed project homepage to &lt;https://dun.github.io/conman/&gt;. (#21)
  * Changed conman.conf default loopback setting to ON.
  * Changed rpm spec file from sysvinit to systemd.
  * Added 'server nofile' config directive to increase NOFILE limit. (#17)
  * Added '-P' cmdline opt to daemon for specifying pidfile. (#20)
  * Added test console device to aid in development and testing.
  * Fixed telnet option negotiation loop. (#9)
  * Fixed arbitrary limit on number of IPMI SOL consoles. (#15)
  * Fixed 4-character limit on timezones. (#16)
  * Fixed 1-second delay when connecting the client to a console.
  * Fixed UDS console reconnect delay to use exponential timeout.
  * Fixed UDS console reconnect delay to require min connect time before reset.
  * Fixed UDS console resource leak of pathname during config processing.
  * Fixed all gcc, clang, and Coverity Scan warnings.
  * Improved scalability of daemon.
  (FATE#324170).</changelog>
  <changelog author="eich@suse.com" date="1507550400">- Set usr/group for conman to root/root on SLE12 for backward
  compatibility.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="eich@suse.com" date="1515585600">- Fix conman for non-root user:
  * create rundir
  * create logdir
  * set user/group only when set to non-root
  * fix rundir and logdir in config file on update (boo#1081217).</changelog>
  <changelog author="eich@suse.com" date="1518782400">- Add the conman user to the group of the ttyS* devices
  (boo#1081217).
- Only update config file for new user once, save backup
  copy.</changelog>
  <changelog author="eich@suse.com" date="1520510400">- Do not look for the ttyS* group - it should be dialout
  always (boo#1084571).
- Fix shebang - remove /usr/bin/env.</changelog>
  <changelog author="eich@suse.com" date="1531915200">- If-connect-fails-let-other-side-accept-connection-and-come-back.patch:
  Make sure conmand connects to a newly created UNIX socket with
  minimal delay. The implementation uses inotify, however this triggers
  when the other side bind()s to the socket, however a connection is
  not possible until the other side calls listen().
  Thus if the connection fails, reset the poll() timeout to return to
  connect() as soon as possible (bsc#1101647).
- Support %license in a backward compatible way.</changelog>
  <changelog author="eich@suse.com" date="1535025600">- Replace
  If-connect-fails-let-other-side-accept-connection-and-come-back.patch
  by:
  Reset-delay-for-unixsock-connect-from-inotify.patch:
  Upstream chose to fix bsc#1101647 slightly differently.</changelog>
  <changelog author="eich@suse.com" date="1535025601">- Update to version 0.2.9:
  - Allowed IPMI defaults to be overridden via libipmiconsole.conf. (#27)
  - Updated recognized strings for IPMI workaround-flags (FATE#326641).</changelog>
</package>
<package pkgid="78096cb7dd271eac25e579cc1e8be2271ca680f88eecfa71ba400f05c2524d19" name="conman" arch="x86_64">
  <version epoch="0" ver="0.2.9" rel="lp150.5.3.1"/>
  <changelog author="eich@suse.com" date="1478520000">- Initial packaging of conman v 0.2.7.</changelog>
  <changelog author="pmladek@suse.com" date="1479124800">- Call %fillup_only without -d parameter. Otherwise, it installed
  the file into /etc/sysconfig/%{2}/conman because none subdir was
  not defined.</changelog>
  <changelog author="eich@suse.com" date="1479729600">- List directories under /lib explicitely to avoid conflicts
  with directories for debuginfo.</changelog>
  <changelog author="eich@suse.com" date="1483531200">- Removed %clean section.</changelog>
  <changelog author="eich@suse.com" date="1484654400">- Removed stray file.
- Conditionalized support for freeipmi to distro version.
- Set use of tcpwrappers to 'off' by default.
- Fixed build for pre-systemd versions.</changelog>
  <changelog author="eich@suse.com" date="1487160000">- Cleaned up spec file: add generic defines to the top.</changelog>
  <changelog author="jengelh@inai.de" date="1487419200">- Replace unnecessary %__ macro indirections</changelog>
  <changelog author="eich@suse.com" date="1494244800">- conman.conf: make differences between openSUSE and SLES explicit.</changelog>
  <changelog author="jjolly@suse.com" date="1496404800">- conman-suse-fix-expect-scripts.patch:
  Fixed ssh expect script for SUSE-specific output.</changelog>
  <changelog author="jjolly@suse.com" date="1496491200">- conman service configured to start as conman:conman user</changelog>
  <changelog author="eich@suse.com" date="1502712000">- Enable tcpwrappers on all platforms by default.
- Fix systemd-specific conditionals in spec file.
- Remove Provides: group/user(): these are only
  used by conman, there is no intention to provide
  them to other packages.</changelog>
  <changelog author="eich@suse.com" date="1507291200">- Updated to version 0.2.8:
  * Changed project homepage to &lt;https://dun.github.io/conman/&gt;. (#21)
  * Changed conman.conf default loopback setting to ON.
  * Changed rpm spec file from sysvinit to systemd.
  * Added 'server nofile' config directive to increase NOFILE limit. (#17)
  * Added '-P' cmdline opt to daemon for specifying pidfile. (#20)
  * Added test console device to aid in development and testing.
  * Fixed telnet option negotiation loop. (#9)
  * Fixed arbitrary limit on number of IPMI SOL consoles. (#15)
  * Fixed 4-character limit on timezones. (#16)
  * Fixed 1-second delay when connecting the client to a console.
  * Fixed UDS console reconnect delay to use exponential timeout.
  * Fixed UDS console reconnect delay to require min connect time before reset.
  * Fixed UDS console resource leak of pathname during config processing.
  * Fixed all gcc, clang, and Coverity Scan warnings.
  * Improved scalability of daemon.
  (FATE#324170).</changelog>
  <changelog author="eich@suse.com" date="1507550400">- Set usr/group for conman to root/root on SLE12 for backward
  compatibility.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="eich@suse.com" date="1515585600">- Fix conman for non-root user:
  * create rundir
  * create logdir
  * set user/group only when set to non-root
  * fix rundir and logdir in config file on update (boo#1081217).</changelog>
  <changelog author="eich@suse.com" date="1518782400">- Add the conman user to the group of the ttyS* devices
  (boo#1081217).
- Only update config file for new user once, save backup
  copy.</changelog>
  <changelog author="eich@suse.com" date="1520510400">- Do not look for the ttyS* group - it should be dialout
  always (boo#1084571).
- Fix shebang - remove /usr/bin/env.</changelog>
  <changelog author="eich@suse.com" date="1531915200">- If-connect-fails-let-other-side-accept-connection-and-come-back.patch:
  Make sure conmand connects to a newly created UNIX socket with
  minimal delay. The implementation uses inotify, however this triggers
  when the other side bind()s to the socket, however a connection is
  not possible until the other side calls listen().
  Thus if the connection fails, reset the poll() timeout to return to
  connect() as soon as possible (bsc#1101647).
- Support %license in a backward compatible way.</changelog>
  <changelog author="eich@suse.com" date="1535025600">- Replace
  If-connect-fails-let-other-side-accept-connection-and-come-back.patch
  by:
  Reset-delay-for-unixsock-connect-from-inotify.patch:
  Upstream chose to fix bsc#1101647 slightly differently.</changelog>
  <changelog author="eich@suse.com" date="1535025601">- Update to version 0.2.9:
  - Allowed IPMI defaults to be overridden via libipmiconsole.conf. (#27)
  - Updated recognized strings for IPMI workaround-flags (FATE#326641).</changelog>
</package>
<package pkgid="a5fffde17dad88bde401bcb2e90757d9788957fd8a6139cceed44c4988829922" name="crash" arch="src">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="b0189f367657d0d4e3bd1407a93a7a9a4037cd9794cb822fd2eba07074642dbe" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="ec6552bee60007c584e2eaffdd23fce98ba89e299dcb7ffeedf7c935e37a63be" name="crash" arch="src">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="482f056a647a52bad468d5f3214bd7939cb7b2367d3480a12e144f81d20abf80" name="crash" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="2674ca76f9b3cca80eef8648b15fd5dd6eb7fbc4a671c8390ac606f6bae5c8b0" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="1da80344b590e4c4398dbce062a4fdf1ff3a9a1172ae560539364d15c812160b" name="crash-devel" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="739b881279a545277e2147860a344691b9203c295f2d4e561ad767c82660ac81" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="6b6186640fb43b7884523131782d5a3d11c26b369e4f631b40bdb155e45baafc" name="crash-doc" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="d68db6334c6a71a89914ecdbd19d9925190d97b4485a90b8a52d82dec7978eb9" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="c5af43f152a61be964e26a47dee35db90e05369d1e9205a17d484a7d29b002f6" name="crash-eppic" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="cb383ccbdd1ef46d1f7fd0cbb17ce8e10a23a017a1989fbfdaae80b8cc81ba71" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="945523c6ba3e8835cdf94856e454988897184e3417d098d73d317091fe3838f6" name="crash-gcore" arch="x86_64">
  <version epoch="0" ver="7.2.1" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="95080f7cef46d8ff03cb6ed7bf150b68e5a6e6c74d7356cc1f518435ce81c3c3" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="vbabka@suse.com" date="1453982400">- Upgrade to 7.1.4 from upstream. For a detailed changelog see
  http://people.redhat.com/anderson/crash.changelog.html</changelog>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
</package>
<package pkgid="a5243b8e4213afdbf8b3f0dcbe4211b5f645b093ae62c1bd0aa58c75df7cc480" name="crash-kmp-default" arch="x86_64">
  <version epoch="0" ver="7.2.1_k4.12.14_lp150.12.16" rel="lp150.2.5.1"/>
  <changelog author="dmair@suse.de" date="1464091200">- Upgrade of source tarball to 7.1.5 from upstream and fix of
  crash-sles9-time.patch for the version and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  includes a fix for bsc#977306.
  Feature enhancements include:
  - "whatis -r" and "whatis -m" commands that allow search for
    data structure of a specified size and that contains a member
    of a given type respectively.</changelog>
  <changelog author="ptesarik@suse.com" date="1464350400">- eppic-support-arm64.patch: Support for ARM64 (FATE#320844).</changelog>
  <changelog author="mkubecek@suse.cz" date="1467979200">- crash-kernel-4.7.patch:
  support 4.7 kernel (page._count renamed to page._refcount)</changelog>
  <changelog author="ptesarik@suse.com" date="1471262400">- crash-linux-4.6-printk-flags.patch: Fix warning "failed to read
  pageflag_names entry" on Linux 4.6 (bsc#978601).</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="dmair@suse.de" date="1485259200">- Upgrade of source tarball to 7.1.7 from upstream, removal of
  crash-kernel-4.7.patch (source includes it) and refresh of other
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Feature enhancements included from 7.1.6:
  - Introduction of support for "live" ramdump files, such as those
    that are specified by the latest QEMU version's mem-path
    argument of a memory-backend-file  object, e.g.:
    $ qemu-kvm ...other-options... \
  - object memory-backend-file,id=MEM,size=128m,mem-path=/tmp/MEM,share=on \
  - numa node,memdev=MEM -m 128
    and a live session run can be run against the guest kernel like so:
    $ crash &lt;path-to-guest-vmlinux&gt; live:/tmp/MEM@0
  - Implemented support for the redesigned ARM64 kernel virtual
    memory layout that was introduced in Linux 4.6. Plus ARM64
    support for 4k pages with 4-level page tables and 48 VA bits.
    NB: On live systems automatic operation with Linux 4.6 ARM64
    kernels requires that CONFIG_RANDOMIZE_BASE is not configured.
    If it is configured then use with a live system requires two
  - -machdep arguments, e.g.:
  - -machdep phys_offset=&lt;base physical address&gt;
  - -machdep kimage_voffset=&lt;kernel kimage_voffset value&gt;
  - Improvement of the ARM64 bt -f display so that, for most cases,
    the stack frame delimiter will be the location of the old FP
    and LR pair.
  - New bt -v option that checks all tasks for evidence of stack
    overflows.
  - Incorporation of an alternative stack backtrace mathod
    accessed directly using bt -o and the default method can be
    toggled between the two using bt -O.
  - Fix for the case where the sym/dis commands fail for a symbol
    name that is composed entirely of hexadecimal characters and
    was previously interpreted as an address.
  - Determine structure member data if the member is contained in
    an anonymous structure or union (no longer necessary to use a]
    discrete gdb "printf" command to find the offset of it).
  - Session initialization speed up.
  - Addition of "list -S" and "tree -S" options (similar to the -s
    option of each command) where member values are read from
    memory instead of being interpreting gdb output (much faster
    behavior for 1-, 2-, 4- and 8-byte members).
  - Fix to recognize x86_64 Linux 4.8-rc1 and later kernels that
    are configured with CONFIG_RANDOMIZE_MEMORY.
  - Support for PPC64 virtual address translation of radix MMU.
  - Improvement of "dev -d" output to display I/O statistics for
    devices that use the blk-mq interface.
  Feature enhancements included from 7.1.7:
  - Restore x86_64 "dis" command's symbol translation for call or
    jump target addresses for kernels configured with
    CONFIG_RANDOMIZE_BASE.
  - Re-factor of the trace extension module to locate all of the
    ftrace buffers and extracts data from each of them rather than
    only the primary one.
  - Support for s390x CONFIG_THREAD_INFO_IN_TASK configuration so
    that "bt" command no longer shows incomplete output.
  - Support for live ARM64 kernels from Linux 4.6 that have the
    kernel image loaded anywhere in physical memory.
  - Update of /dev/crash/kernel driver to v1.3 which adds support
    Linux 4.6 and later ARM64 kernels configured with
    CONFIG_HARDENED_USERCOPY and S390x kernels that use
    xlate_dev_mem_ptr() and unxlate_dev_mem_ptr() rather than
    kmap() and kunmap().
  - refresh eppic-support-arm64.patch crash-debuginfo-compressed.patch
  - drop crash-linux-4.6-printk-flags.patch merged upstream in 7.1.6</changelog>
  <changelog author="msuchanek@suse.com" date="1485950400">- Fix analyzing fadump dumps on PPC64 (bsc#1022962).
  + crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch</changelog>
  <changelog author="dmair@suse.de" date="1488888000">- Upgrade of source tarball to 7.1.8 from upstream and refresh of
  patches to align with the version. For a detailed changelog of
  the source tarball see:
  http://people.redhat.com/anderson/crash.changelog.html
  Adds a feature to permit the use of the command-line options
  "--kaslr=&lt;offset&gt;" and/or "--kaslr=auto" with the x86 32-bit
  architecture.
- refresh crash-sles9-time.patch crash-compressed-booted-kernel.patch
- drop crash-Fix-for-the-PPC64-bt-command-for-non-panicking-activ.patch
  merged upstram in 7.1.8</changelog>
  <changelog author="dmair@suse.com" date="1490702400">- crash source nests gdb source but gdb has a new build error on
  Factory due to the bug and build environment modifications. The
  fix is upstream gdb but not upstream crash's gdb.
  Created crash patch:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  to create the gdb patch in expanded crash and added to the gdb
  Makefile patch it's application. Resolves the build error.</changelog>
  <changelog author="astieger@suse.com" date="1493035200">- Exclude openSUSE from RT KMP build (bsc#1013843)</changelog>
  <changelog author="dmair@suse.com" date="1495713600">- crash-stop_read_error_when_intent_is_retry.patch: When reading a
  memory image fails it may not be an error if it is still possible
  to switch image and retry the read. Fix the error message output
  to only occur if no retries are intended (bsc#1038839).
  - add crash-stop_read_error_when_intent_is_retry.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1496404800">- Merge SLE changes into Factory (bsc#1041638)</changelog>
  <changelog author="dmair@suse.com" date="1497009600">- crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch:
  Since linux kernel 3.19 crash readmem() can't be used to read
  xen_p2m_addr associate memory directly during m2p translation.
  PV domU p2m mapping is also stored at xd-&gt;xfd + xch_index_offset
  and organized as struct xen_dumpcore_p2m. This patch implements
  a special reading function read_xc_p2m() to extract the mfns
  from xd-&gt;xfd + xch_index_offset and makes and crash support Xen
  PV domU dumpfiles for kernel 3.19 and later (bsc#1043501).
  - add crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch</changelog>
  <changelog author="dmair@suse.com" date="1510660800">- Upgrade the source tarball to version to 7.2.0 which requires the
  removal of patches that are then already applied:
  crash-gdb-add-proc_service-sync-with-GLIBC.patch
  crash-xen_add_support_for_domU_with_linux_kernel_from_3.19.patch
  A complete changelog is available via the crash source page at:
  http://people.redhat.com/anderson/crash.changelog.html
  Added crash-ppc64-book3s-update-hash-page-table-geometry.patch
  from hbathini@linux.vnet.ibm.com via bsc#1067702 to correct
  errors with virtual-to-physical address translation in the larger
  virtual address range of newer kernels.
  Added a BuildRequires of libelf that will populate the build
  workspace with libelf (from elfutils) even though it is not
  directly required by crash but is required by gdb (which crash
  nests). It no longer got picked up automatically for build and
  gdb and kernel module features had build errors before it.</changelog>
  <changelog author="dmair@suse.com" date="1511956800">- Added crash-x86_64_kvtop-usable-symtab_init.patch to change
  x86_64_kvtop() so that it can be called during symtab_init()
  Added crash-allow-use-of-sadump-captured-KASLR-kernel.patch to
  allow use of dumps of KASLR enabled kernels that were captured
  by sadump.
  Both are bsc#1070278/FATE#323473</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dmair@suse.com" date="1515758400">- Added crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
  With latest NMI IPI changes, crash_ipi_callback is found multiple
  times on the stack. Ensure the chosen symbol relates to an actual
  backtrace. bsc#1072718</changelog>
  <changelog author="dmair@suse.com" date="1517832000">- Added:
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Fixes Xen dump files that cannot be opened in hypervisor mode.
  bsc#1073993</changelog>
  <changelog author="dmair@suse.com" date="1521460800">- Upgraded to 7.2.1 because it includes the fixes to support
  several core cases that recently were caused tofail to open.
  As a result, removed patches that were already superceded by
  7.2.1 source.
  Removed:
    crash-ppc64-book3s-update-hash-page-table-geometry.patch
    crash-x86_64_kvtop-usable-symtab_init.patch
    crash-ppc64-ensure-chosen-stack-symbol-relates-to-an-actual-backtrace.patch
    crash-fix-error-cannot-resolve-schedulers-0001.patch
    crash-fix-error-cannot-resolve-schedulers-0002.patch
    crash-extend-direct-mapping-to-5TB.patch
  Modified:
    crash-allow-use-of-sadump-captured-KASLR-kernel.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1533729600">- Added:
    crash-Fix-and-an-update-for-the-ipcs-command.patch
  The update is required for Linux 4.11 and greater kernels, which
  reimplemented the IDR facility to use radix trees in kernel commit
  0a835c4f090af2c76fc2932c539c3b32fd21fbbb, titled "Reimplement IDR and IDA
  using the radix tree".  Without the patch, if any IPCS entry exists, the
  command would fail with the message "ipcs: invalid structure member offset:
  idr_top" (bsc#1092101)
- fix license warning</changelog>
</package>
<package pkgid="d9f6ef0125445ccd2cacf81f135aa421f72ec78f5bdaeebbc93c32ce756512ec" name="crmsh" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="6055555da75ff6ddcf0800e0710f83328c3377f8c2f55b9769e958bfe3b7a48b" name="crmsh" arch="src">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="da311b681204cc54b7ec7cb6489ca603c5e9b562971a3326df79a7b13c3c351a" name="crmsh-scripts" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="2589fe8b11b08f20b4c492c56e235427a674636974bc014c1673eb4dddf9ab7b" name="crmsh-test" arch="noarch">
  <version epoch="0" ver="4.0.0+git.1526547258.54aafa1d" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1510228800">- Update to version 4.0.0+git.1510233955.43c72bf7:
  * high: bootstrap: Fix readline error in cluster remove (bsc#1067424)
  * low: bootstrap: Clarify removal warning
  * low: bootstrap: Avoid printing None instead of NTP service name (bsc#1060602)</changelog>
  <changelog author="kgronlund@suse.com" date="1510574400">- Update to version 4.0.0+git.1510563824.1aecfa01:
  * high: utils: Use python3 in util scripts (bsc#1067823)
  * high: bootstrap: Use firewall-offline-cmd for firewalld (bsc#1067498)
  * medium: hb_report: Verify corosync.conf exists before opening it (bsc#1067456)
  * low: config: Collect /var/log/ha-cluster-bootstrap.log (bsc#1067438)
  * medium: bootstrap: Avoid SSH to localhost (bsc#1067324)</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Update to version 4.0.0+git.1511256861.18b44cfa:
  * high: bootstrap: Use default IP address for ring0 (bsc#1069142)
  * medium: scripts: make sure gfs2 can be configured using hawk (bsc#1067123)
  * medium: bootstrap: fix init vgfs crash if no "-o device" option
  * medium: bootstrap: fix init storage crash if no value input
  * medium: ui_configure: fix crash when no args given
  * medium: filter exist args
  * low: utils: convert bytes to str (bsc#1067823)
  * low: ui_context: Continue completing when input is an alias
  * low: bootstrap: Change error/confirm message with specific device name</changelog>
  <changelog author="kgronlund@suse.com" date="1511784000">- Update to version 4.0.0+git.1511604050.816cb0f5:
  * high: crm_rpmcheck: Fix bytes to str encoding error (bsc#1069294)
  * medium: bootstrap: Missing dmidecode on ppc64le (bsc#1069802)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388800">- Update to version 4.0.0+git.1512385350.d06aa847:
  * Fix writing non-ascii chars to log (bsc#1070344)
  * Fix is_program(dmidecode) error (bsc#1070344)
  * low: ui_configure: fix for 309d2e, remove "id=" in a save way
  * low: ra: Don't require deprecated parameters (#321)
  * low: cibconfig: use refresh instead of reset after commit</changelog>
  <changelog author="kgronlund@suse.com" date="1512388801">- Update to version 4.0.0+git.1512395407.e65870b4:
  * high: bootstrap: Encode, not decode (bsc#1070344)</changelog>
  <changelog author="kgronlund@suse.com" date="1512388802">- Update to version 4.0.0+git.1512406036.adc26906:
  * high: bootstrap: Fix firewall reload command invocation (bsc#1071108)</changelog>
  <changelog author="kgronlund@suse.com" date="1513080000">- Update to version 4.0.0+git.1513011384.5aebf8a4:
  * high: parse: Support new alert syntax (#280) (bsc#1069129)
  * high: parse: Support new container bundles (fate#323415)
  * low: hb_report: return "" to avoid TypeError
  * low: ui_configure: use filter_keys replace any_startswith</changelog>
  <changelog author="kgronlund@suse.com" date="1513166400">- Update to version 4.0.0+git.1513179435.e1d17d7b:
  * high: scripts: Fix Python 3 migration issues in health, check-uptime (bsc#1071519)</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.0.0+git.1515511613.5ee0eb23:
  * high: scripts: Enable complex expressions in when: (bsc#1074835)
  * medium: hb_report: Support new pacemaker.log location (fate#324508)
  * low: ui_configure: Complete rsc template correctly
  * fix: ra: Convert bytes to str
  * fix: ui_resource: Using crm_failcount instead of crm_attribute(bsc#1074127)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.0.0+git.1515767348.9561209c:
  * medium: ui_cluster: Stop corosync when stopping pacemaker (bsc#1066156)
  * medium: bootstrap: Don't try to remove full nodes from remote nodes
  * medium: clvm-vg: update to use LVM-activate RA (bsc#1074835)
  * medium: clvm: update to use lvmlockd instead of clvmd (bsc#1074835)
  * low: ui_node: normal is deprecated in favor of member (fate#324508)
  * low: ui_configure: no complete for rename new_id
  * low: bootstrap: Don't ssh to localhost in remove
  * low: ui_configure: improve do_group completer</changelog>
  <changelog author="kgronlund@suse.com" date="1516104000">- Update to version 4.0.0+git.1516124911.d66d9d1f:
  * medium: constants: Add bundle to constants (bsc#1076239)
  * low: xmlutil: Add bundle to sort (bsc#1076239)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.0+git.1518010150.a58fa637:
  * high: bootstrap: Add QDevice/QNetd support (bsc#1070961)
  * medium: hb_report: implement dlm_dump info (bsc#1078710)
  * fix: hb_report: collect sbd info (bsc#1076389)
  * fix: hb_report: Collect irregular log file (bsc#1067438)</changelog>
  <changelog author="kgronlund@suse.com" date="1518091200">- Update to version 4.0.0+git.1518073467.76fb6a0b:
  * high: crm_script: Python2-&gt;3 string conversion crash in wizards (bsc#1074835)</changelog>
  <changelog author="kgronlund@suse.com" date="1518523200">- Update to version 4.0.0+git.1518510059.7a6f94e6:
  * fix: bootstrap: Create pacemaker_remote authkey (bsc#1077389)
  * low: bootstrap: Always ask whether to use sbd
  * fix: hb_report: got the right file decompressor(bsc#1077553)
  * medium: hb_report: Avoid calling deprecated network utilities (bsc#1073638)</changelog>
  <changelog author="kgronlund@suse.com" date="1519732800">- Update to version 4.0.0+git.1519721966.9abd841c:
  * low: bootstrap: Updated authkey generation (bsc#1077389)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 4.0.0+git.1522278003.cd7ae188:
  * high: ui_resource: Undeprecate refresh and remove reprobe (bsc#1084736)</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.0+git.1523435067.43bb4847:
  * high: hbreport: adjustment for hbreport (bsc#1088784)</changelog>
  <changelog author="kgronlund@suse.com" date="1523880000">- Update to version 4.0.0+git.1523871649.78999e05:
  * doc: Fix unbalanced example marker (bsc#1075764)</changelog>
  <changelog author="kgronlund@suse.com" date="1526644800">- Update to version 4.0.0+git.1526547258.54aafa1d:
  * high: bash_completion: Adjust for non-interactive mode(bsc#1090304)
  * high: utils: Parse /32 route entries
  * low: terminal will lose cursor after type ctrl+c(bsc#1090626)
  * low: ui_configure: Adjust prompt string after help messages(bsc#1090140)
  * low: bootstrap: Strip spaces before some status descriptions</changelog>
</package>
<package pkgid="77ab1464f05a09a1eef7f0252b4dd3a7453e1f9492c6ff6a613c3c3eb35d50ad" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c2a69be467a3ca9467b9ea1ebcd1229494117e7674b5d4831194d0623778cbe9" name="ctdb" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="2e6c842b610f0b93786613754d6cb9cada1df315ae54b528ee7895acf5d9d78b" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="82d92e6462bb844906ad82bcf2640fe8e106c44f31ed979a519cb27fa228e082" name="ctdb-pcp-pmda" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="8d121d826ac9bbed348fe3ab5075b989e29c5331c4c996cf955c557f9851e325" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="fa37d5deabd6bd8e508dbd39cfd354c231e4ca8951c913e0063eda8f3c216035" name="ctdb-tests" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="fa7b1ecdebd60624d484764a80338e7da0755919814167fece0407bf8c46d8c2" name="cups" arch="src">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="72e0ed5629a094b2814e6b29e8ab6eaba1991e013621a43a499c802ee5926b20" name="cups" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="8e0ba17e1f5ceaa8bfc7176d4234fd32d17b8749830599d32b688b3c7910a903" name="cups-client" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="1d6173ac318c67616b30f5c4408455aef6a1048fd710aa680015f5d75e51d8ff" name="cups-config" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="5e6794990c86db49cc993bdaf60d81814de8e505f9ea326af58a9c9cd8e6c6cc" name="cups-ddk" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="a605d965e34bfd022de862ff3deb5dd6bb76a9d71b4a01ffd0c973b3946d71c5" name="cups-devel" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="3a2df2c6650d02cb32c6964b2097f406b888ede875d48577d0626911bf0c1a22" name="cups-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="d43e2ef6d3df731950a34ac7624adbb1f7507dbf93c37f664505b3b7568c49ba" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="9510ace316cae985150f2c91d9ee05ce6d14cc11840ec2a270f0a65878452b58" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="bd01815943b2e58c84cb2de613cf614995a02d99b51b9584c7b0dfc7ec4c62ad" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="df8bc3350530b8690998ce669f28bcee411640140ef50c3fc58d1d888ae6fde2" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="0d91ea281432f93d65cd9d76d21d476096cc8442b7d72cf15dd86861fd0c50d4" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="8f2debadd40120ab611a899869b448d2bc3833904dd02a5e0c61021c896f6e9a" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="1971e7a7f352c46c0ba2773c1f78a6b554b4acec1372f5cd4356c3493efdd1de" name="curl" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="3e4d9a5484f67d82cee488b190223b56919cb97f1be54d5f823cc518bf506408" name="curl" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="342f5e87d7b3fc2b3dc4ae215274166d3711f5e67d57d6c13d3add6451f044f9" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="5e033a4da46050898fb95405095db53c05994b35a62a80c10c313a2d483b3cdb" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="133ae8de811720ca774160ae098f1096726d0b5b5eccd0b8be448fab2951fd06" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="3f845e46e4e9ca859775481ba59cf49aae4ad6819d473ae6318c3545b59a731b" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="fb16c2f04b687ef1c819ebf138d1defab79a782b7d584aa8fb247cb94aaf16b4" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="d454761b312f6a59865c714b68bcc26a1734874799cfb3d00903175f49178bda" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="4ce08bde493b2a5e77e7625d41ca679a403072d670f63c22bdc4e6c5f41c382b" name="curl-mini" arch="src">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="b6ab7a2d89daef85280726f453b4135d431d2d5d0e0fe7aba0e8f2e9c3c8bd03" name="curl-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="525ab6029a5e925d7f7997a2bdea181b2f59493e43eac0e6d4029bc46d26277a" name="datovka" arch="src">
  <version epoch="0" ver="4.10.3" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1444651200">- Version update to 4.4.0:
  * Various bugfixes all around. See ChangeLog file</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Version update to 4.4.3:
  * Various bugfixes. See ChangeLog file
  * Fixed broken expired password swap</changelog>
  <changelog author="tchvatal@suse.com" date="1455624000">- Version update to 4.5.0:
  * various backend updates
  * various bugs fixed
  * qt 5.3 required now
- Rebase patch:
  * datovka-fix-pro.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
</package>
<package pkgid="1f43f5fc4c684665a6b80dc51ef423c5b1a7e5225fde42de3cdbef5dec95a2de" name="datovka" arch="x86_64">
  <version epoch="0" ver="4.10.3" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1444651200">- Version update to 4.4.0:
  * Various bugfixes all around. See ChangeLog file</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Version update to 4.4.3:
  * Various bugfixes. See ChangeLog file
  * Fixed broken expired password swap</changelog>
  <changelog author="tchvatal@suse.com" date="1455624000">- Version update to 4.5.0:
  * various backend updates
  * various bugs fixed
  * qt 5.3 required now
- Rebase patch:
  * datovka-fix-pro.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1459512000">- Update to 4.5.3
  * Fixed problems with HOTP authorisation on Windows. There have
    been problems with the bundled libisds. MinGW does not handle
    POSIX extensions of printf formatting strings properly. Patch
    for libisds has been added.
  * Fixed a non-working PRAGMA statement when asking for a database
    integrity check.
  * The --version command-line argument now also prints the version
    of libraries which Datovka depends on.
  * Automatic background downloads didn't cause the deactivation of
    download buttons that could still be triggered. Triggering those
    buttons in this situation could cause the application to crash.
  * Adding new account caused the account tree to collapse. This has
    been fixed.
- Changes for 4.5.2
  * NLS of bundled libisds (OS X, Windows) has been disabled.
  * The logging of libisds actions has been restricted on Windows
    because there are discrepancies from standard-defined behaviour
    of some functions on Windows.
  * Improved behaviour when message download fails. The error
    dialogue is only shown when an explicit message download fails.
  * A message in the notification area appears when the download
    has been triggered by downloading message list. This should
    reduce the amount of error dialogues generated.
  * Improved behaviour when downloading messages on accounts with
    restricted privileges. Received messages are not automatically
    downloaded when the user has no privileges to do that.
- Changes for 4.5.1
  * Fixed bug in action logging causing the application to crash
    occasionally.
  * Fixed bug where message line was not deleted when deleting from
    ISDS failed.
  * New account model internals.
- Build with optflags
- Use macros for desktop file and icon handling</changelog>
  <changelog author="tchvatal@suse.com" date="1463227200">- Version update to 4.6.0:
  * Added support for tags. These can be locally assigned to the messages.
  * Message information are shown in separate window when double-clicking the
    message in message list or when hitting the Return/Enter key.
  * When composing a message, the recipient can be added to the recipient list
    by double clicking it in the recently-used recipient list.
  * Information about personal delivery are shown in message description field.
  * Fixed problem where account entry has not been updated after message
    deletion.
  * Fixed encoding issue when exporting correspondence overview in HTML.
  * Fixed a bug causing the create message button not to activate when first
    account was created.</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version update to 4.6.1:
  * Message envelope can be exported to a PDF file along with other message
    attachments.
  * Fixed issue when the sending of a new message lasted too long. In such case
    the application could occasionally crash.
  * Patched bundled libisds to fix wrong sender identification. This fix
    affects only Windows and OS X users. Linux users should update to latest
    libisds version (0.10.4).
  * Fixed version string shown in notification dialogue.</changelog>
  <changelog author="tchvatal@suse.com" date="1476878400">- Version update to 4.7.0:
  * openssl 1.1.0 support
  * Various small fixes</changelog>
  <changelog author="jslaby@suse.com" date="1487160000">- Version update to 4.7.1:
  * User is notified about existent files when storing all attachments.
  * Added forward message action.
  * Fixed problem in which the main window was placed slightly off-screen when
  run for the first time.
  * When composing messages, attachment files can be rearranged using drag and
  drop actions.
  * Fixed bug. Message model is updated after tags have been edited.
  * Fixes errors in application localisation.</changelog>
  <changelog author="mpluskal@suse.com" date="1487246400">- Use qmake macros</changelog>
  <changelog author="tchvatal@suse.com" date="1488974400">- Fix license to be GPL-3.0+ as per COPYING file</changelog>
  <changelog author="tchvatal@suse.com" date="1490702400">- Drop dejavu dependency as it is now using fontconfig and not hardcoded
  paths in the code</changelog>
  <changelog author="tchvatal@suse.com" date="1490875200">- Version update to 4.8.0:
  * Added full-text data box search which is now the default method to search
    for data boxes.
  * Fixed problems with placing the main application window when starting the
    application on a smaller screen than it has been closed before.
  * Refactoring of code related to message imports and exports.
  * Reduced the amount of code in main application window.</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Version update to 4.8.1:
  * Fixed problem with disappearing splitters on application start.
- add checksum to sources, so that OBS can check consistency</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version update to 4.9.0:
  * Added API and support for sending messages into records management
    services.
  * Removed explicit clear buttons from filter fields.
  * Fixed problems with remembering location of saved attachment files.
  * Directory structure can be created when exporting correspondence overview.
  * Line height of account list and message table has been adjusted to be the
    same.
  * Fixed confusion between the terms of delivery (dodani) and acceptance
    (doruceni) in Czech localisation.
  * Process of exporting multiple selected messages can be aborted by clicking
    Cancel button.
  * Tags can be stored into HTML correspondence overview.
  * HTML correspondence overview now contains both delivery and acceptance
    times.
  * Fixed problems with sending messages from accounts that cannot search for
    data boxes.
  * Fixed tag ordering. Tag sorting is now locale-aware.
- disable -Wdate-time -- unrecognized e.g. with gcc 4.8</changelog>
  <changelog author="jengelh@inai.de" date="1500465601">- Remove odd backslashes from description.</changelog>
  <changelog author="jslaby@suse.com" date="1508673600">- Update Version update to 4.9.3
  * Fixed a problem when message list was not updated after account
    synchronisation when a message was selected.
  * Fixed a bug when database location may have been saved even though the
    databases reside in default location. This problem was visible especially
    on Windows.
- Update Version update to 4.9.2
  * Changed tag dialogue to contain two views when editing tag assignment.
  * Using the prefix 'ODZ_' for sent and 'DDZ_' for received data messages
    when uploading them into records management service.
  * Default documentation location can be changed when running qmake using the
    TEXT_FILES_INST_DIR variable.
  * Full-text data-box search does not block the search dialogue.
  * Full-text data-box search can be interrupted and restarted again without
    closing the dialogue.
  * Separated core and GUI code. Removed models from database interface.
  * Added new CLI option '--get-msg-ids'.
  * Command-line application without GUI can be built separately. This
    executable is going to be distributed in Windows packages together with
    the GUI application.
- Update Version update to 4.9.1
  * Added experimental support for new data-box and user types that are going
    to be introduced into the ISDS production environment and which are
    already present in the ISDS testing environment.
    Version 0.10.7 of libisds is required to build the application.
  * Updated building scripts for the Windows application to automatically pull
    Qt dependencies into the package.
  * Fixed issue when records management data have not been erased from message
    model after the service has been deactivated.
  * Fixed issues with records management logo not being displayed in message
    list immediately after the service has been set up.
  * Alphabetically sorting nodes of records management hierarchy.
  * Sub-nodes of matching element are also displayed when filtering hierarchy
    of records management service.
  * Removed inactive mojeid-datovka code from the sources.</changelog>
  <changelog author="tchvatal@suse.com" date="1512129600">- Version update to 4.10.0:
  * Can now encrypt passwords via master password
  * Better support for screen readers</changelog>
  <changelog author="tchvatal@suse.com" date="1516190400">- Update to 4.10.1:
  * Few small fixes
  * MSI installer tweaks
- Refresh patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Update to 4.10.3 bsc#1104620:
  * Added classes based on Qt types encapsulating various ISDS data types and
    structures. Sharing this code with mobile application.
  * Added per-account locking of communication contexts.
  * Modified database interface to accommodate new data types.
  * Explicitly specifying tab order for most windows and dialogues. It is also
    possible (on Windows and Linux) to cycle through actions in top tool bar.
  * Asking users for confirmation before deleting tags which are still assigned
    to some messages.
  * Added tooltip description of message state value in sent message list.
  * Added button to view account password when editing account credentials and
    PIN (master password) is enabled.
  * Added DigiCert Global Root G2 certificate.
  * Improved keyboard-based control of main and other dialogue windows. All
    important elements should be navigable only by keyboard (on Windows and
    Linux).
  * Fixed a problem with wrong conversion of obtained ISDS error statuses into
    readable text. This may have caused the programme to crash.
  * Fixed scaling of some icon-based control elements when using enlarged fonts
    on Windows.
  * Fixed message list sorting and filtering according to assigned tags.
  * Displaying busy cursor when switching between entries in account list.
  * New version notification can be blocked on Windows in runtime by setting
    specific registry values. It can also be blocked at compile time
    by using a configuration option when running qmake.
  * Extended resource information for the generated Windows executable.
  * Fixed project file include paths in order not to interfere with user-defined
    compiler flags.
  * Fixed problem with unpredictable construction order of global object
    instances.
  * Added missing conversion strings to some unknown message types.
  * Fixed issue causing the application to crash on macOS when switching
    between accounts and when having some text in the message filter field.
  * Fixed issue causing the application to crash on macOS when updating
    information about messages without a valid delivery time.
  * Re-enabled logging of transferred message on Windows data when setting
    debug verbosity to 3.
  * Code shared with mobile application has been placed into separate
    directory.
- Rebase patch datovka-fix-pro.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1534507200">- Update datovka-fix-pro.patch to contain fix for Leap 42.3 build</changelog>
</package>
<package pkgid="319b013faa725e6d647b5f9bbf82b0bfc8debc4712d1839fb0b54a272054b7e8" name="discover" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="68e978b2c3994e3db81fa37efaaa6585a5ee72e8e5dc38304d5e25837d4e51a0" name="discover" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="2784c181bc29255423bd9bb4f224974ef6835e23a72efc4b4eb36e7f600fc289" name="discover-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="75256d9cf2ddd0b085c227c88577a160c9d61a01f1f6c78c75d2df3b66e56f94" name="discover-plasmoid" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * auto generate desktop file for url handling
  * Revert "auto generate desktop file for url handling"
  * auto generate desktop file for url handling
  * Remove the navigationEnabled concept (kde#383294)
  * Fix license, comply with our naming scheme
  * Don't disable the updates action when there are no updates (kde#383294)
  * Some elements aren't reporting a big preview
  * Fallback to the package icon if there isn't a stock icon as well
  * Prevent memory leak
  * Make sure we don't crash when opening flatpakrepo files
  * Make it possible to prevent some resources from being Reviewed
  * Don't show the version if there's none on the ApplicationPage (kde#383036)
  * Make sure we don't render HTML on the Discover page header</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503921600">- Adjust License tag</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Use the right update icon when there's no updates
  * When the delegate is compact, don't show the longDescription at all
  * Fix featured filtering
  * Fix listing several sources in an application
  * Fix warnings
  * Optimize adding resources to the model (kde#383743)
  * make for better debug output
  * Don't go through categories more than necessary
  * Properly traverse a hash with iterators
  * Use flatpak_installation_list_installed_refs for listing installed flatpaks</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Fix under Qt 5.10
  * Fix tests
  * Remove our isCompact concept and use Kirigami's</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Include the progress of transactions (kde#384038)
  * Fix adding remote sources
  * list items should be lighter than normal background
  * Use QQC2.Popup instead of Kirigami.OverlaySheet for screenshots (kde#385115)
  * Don't open a null application from the progress view (update transaction)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't refresh invalid backends (kde#386045)
  * Remove unused class
  * Don't delete resources whenever asked to clear the view
  * Extend the resetModel until the model is ready to be fetched again
  * Make sure we set the page size
  * Unneeded dependency in the library
  * Fix warning
  * Remove unused code
  * --warning: don't capture unused variable
  * Properly listen to ODRS replies
  * Assert on ODRS reviews fetched
  * Don't leak QNetworkAccessManager instances
  * Recover the right delegate background color
  * Improve global updates progress reporting
  * Improve progress reporting in some PackageKit updates
  * Show errors from refreshing (kde#386244)
  * Include the progress of transactions (kde#384038)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Flatpak: Make sure we don't degrade resources' state
  * If it's busy, try again in a second
  * Group updater refreshes
  * StandardUpdater: Only refresh when it's going to make a difference
  * Narrow down the scope of a variable
  * Make it possible for updaters to show notifications at any time
  * Remove unused code
  * Remove hidden styling from the delegate's comment (kde#387221)
  * No need to explicitly notify
  * Make sure we remove the Transaction before it's destroyed
  * Revert "Install related ref instead attempting to upgrade it"
  * Install related ref instead attempting to upgrade it
  * Link to a url that still exists
  * Don't fetch updates while the updater is working
  * Remove weirdly long timer to display notifications (kde#381812)
  * Simplify notifier logic
  * Don't crash if we get into a weird state (kde#385637)
  * Remove unneeded declaration
  * Make sure we never search on an invalid KNS backend</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Keep track of the kns entries status internally
  * Revert "Make sure m_isFetching is initialized when we use it"
  * Make sure m_isFetching is initialized when we use it
  * Make it possible to navigate screenshots from the overlay (kde#387402)
  * Hide reviews page when opening the review dialog (kde#386902)
  * Revert "Improve error message when review dialog contents are wrong"
  * Improve error message when review dialog contents are wrong (kde#387261)
  * Usually applications won't be compulsory for a desktop
  * Don't show packages tightly coupled to other desktops by default
  * Readability
  * PK: Use the stream to store the information rather than the transaction (kde#386992)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Update copyright year (kde#390358)
  * Notify about the backend (kde#390339)
  * Don't notify when the number of updates becomes smaller (kde#390322)
  * Remove commented out code
  * Forgot to add file
  * Fix freeze when showing the ApplicationPage (kde#390123)
  * Only report changes when they actually happen
  * Fix binding loop when showing the update description
  * Disable Review button for resources that aren't installed (kde#390053)
  * Show a beautiful disabled icon for updates (kde#390076)
  * Make sure we mark as busy before clearling the list (kde#390114)
  * Add some paddings to the Review button (kde#390030)
  * Make it possible to specify a fallback appstream id (kde#390016)
  * Use the default passive notification amount (kde#388087)
  * Remove redundant action (kde#389767)
  * Fix tests, now we don't show a list from a URL
  * Only show the description for PackageKit sources (kde#389715)
  * Print a warning when a remote can't be removed
  * Fix dummy build
  * Address source by id look-up in Flatpak source
  * Fix source removal
  * Make it possible for the source id to be different from the display string
  * Fix warnings
  * Reduce duplication in flatpak sources display
  * Flatpak: don't show full url, just the hostname (kde#389714)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix checking if the package is already on the ResProxyModel
  * Add multimedia sub-categories
  * Put all systemwide add-ons in Plasma Addons category (kde#390594)
  * Sort by sortable rating
  * Make it possible to debug sorting
  * Make sure sortableRating is initialised
  * Don't let the user write the first review for apps they haven't installed
  * Fix warning
  * Only instantiate the ProgressView sheet when it's to be displayed
  * Fix placement of the BusyIndicator over loading screenshots (kde#390391)
  * Update copyright year (kde#390358)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521806400">- Add patch to show an informative warning when adding FlatHub:
  * 0001-Warning-for-FlatHub.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * Simplify the tasks view (kde#391760)
  * Remove unneeded includes
  * Fix dbus path
  * Include a test for cancelling flatpak installations
  * Improve status of FlatpakTransaction
  * Remove pointless i18n call
  * KNS: Only indicate that it's fetching if already fetching reviews
  * Include a test that makes sure we can list origins
  * Solve some inconsistencies found when testing flatpak
  * Introduce a flatpak test
  * No need to pass the extra arguments on the Update Action (kde#391801)
  * Add Qt5::Xml
  * Simplify KNSTransaction creation (kde#390236)
  * Fix test
  * Add a test to make sure we don't add resources with the wrong URL
  * kns: Fix logic for adding screenshots (kde#391190)
  * Add debug information when the searched URI is wrong</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Improve display of Progress element (kde#393323)
  * More elegant syntax for qrc files in cmake
  * Make sure we update the checkability of all delegates when one changes
  * PK: Improve information on resources that extend others
  * Report 0% update progress when not progressing
  * Infer cancellability of the StandardBackendUpdater (kde#390319)
  * Forward action enabled state into the button
  * Don't change the resources while updating (kde#391262)
  * Remove unused variable
  * Fix typo
  * Fix notifier button placement
  * Fix warning on Qt 5.11
  * Remove wrongly commented code
  * Report when root categories change
  * Readability
  * Properly concatenate strings
  * Fix crash when installing flatpak files
  * Remove unneeded dependency
  * Don't crash when cancelling flatpak jobs (kde#391941)
  * Remove unused imports
  * --debug
  * Make sure we don't crash automatically (kde#392082)
  * Fix sorting when the actual comparison matches
  * Fix warning in Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="0286ef71781450649a7193ea3bea5adb5d0991a176655f4862a02e3e05fc3e43" name="diskimage-builder" arch="noarch">
  <version epoch="0" ver="2.15.1" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1476705600">- Initial commit. Taken from the Cloud OBS project
  * diskimage-builder-rpmlintrc: Add rpmlint file to prevent build
    failures due to the 'wrong-script-interpreter' check. It's a
    spurious warning since the interpreter is only used within the
    generated image and it does not affect the host or the package
    itself.
  * 0001-lib-Drop-shebang-from-library-scripts.patch: Add patch to
    drop the shebang from the lib/* files which are meant to be
    sourced instead of executed (fixes: 'non-executable-script')
  * 0002-elements-Drop-executable-bits-from-environment-files.patch:
    Add patch to drop the executable bit from files which are meant to
    be sourced instead of executed. (fixes: 'script-without-shebang')</changelog>
  <changelog author="mchandras@suse.de" date="1476792000">- Use addFilter instead of setBadness in the rpmlintrc file.</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 1.24.0
  * elements: pip-and-virtualenv: Add python-xml dependency
  * Trace package install in package-installs-v2
  * elements: zypper-minimal: Add ca-certificates-mozilla package
  * Improve checksum performance for images
  * Perform package install outside of debootstrap
  * Remove obsolete patches for the time being
  - 0001-lib-Drop-shebang-from-library-scripts.patch
  - 0002-elements-Drop-executable-bits-from-environment-files.patch</changelog>
  <changelog author="mchandras@suse.de" date="1482408000">- Update to version 1.26.1
  * Generate ssh-hostkeys on boot for ironic agent
  * add option to configure cloud-init to allow password authentication
  * elements: Drop unneeded DIB_INIT_SYSTEM usage
  * Replace six.iteritems() with .items()
  * Catch errors in DIB_INIT_SYSTEM export
  * DIB element to support cinder local attach/detach functionality
  * elements: Drop executable bits from environment files
  * Update sysctl-write-value to do conflict checking
  * Put MKFS_OPTS after filesystem type
  * Make dib-python use the default python for distro
  * Don't set the executable bit on dhcp-interface@.service
  * Move pip-and-virtualenv source install to 10-
  * Add install-types as pip-and-virtualenv dep
  * Allow package-installs to parse DIB_PYTHON_VERSION
  * Fix pip-and-virtualenv to work with python3
  * elements: dib-python: Add python2 as the default version for openSUSE
  * Support sysv init system used by Debian Wheezy
  * Pip install as 10- incompatible with 05-heat-cfntools
  * Recreate initramfs within loopback image
  * Fix bootloader element on ppc
  * Add ubuntu-precise support to dib-python
  * FIx the DIB_CLOUD_INIT_ALLOW_SSH_PWAUTH variable name in README file
  * Switch to openSUSE Leap 42.2 release by default
  * Install dracut-generic-config package
  * Add output image format tgz support
  * Add squashfs output image format
  * set default DIB_PYTHON_VERSION=2 for rhel7
  * Set grub timeout default
  * Dont run with VIRTUAL_ENV set</changelog>
  <changelog author="mchandras@suse.de" date="1487246400">- Update to version 1.27.0
  * Add DIB_IPA_COMPRESS_CMD option
  * ironic-agent: use /sbin for modprobe
  * move post-install.d to finalize.d
  * Bump fedora release to 25
  * Fix dhcp-all-interfaces for ubuntu-minimal xenial
  * Don't set base element path in run_functests.sh
  * Use %i instead of %I in dhcp-interface@.service
  * Remove hardcoded components
  * Set grub device in /etc/default/grub
  * Replace yaml.load() with yaml.safe_load()
  * Unify tidy up logs in lib/img-functions
  * Also check bin/ for tabs
  * Handle failure of carrier check in dhcp-all-interfaces.sh
  * Make DHCP timeout configurable
  * Run dhcp-interface@.service after network.target
  * update pkg-map entries for python3
  * dib-lint: python3 compatibility fixes
  * debootstrap: avoid duplicate network configuration
  * Remove yum chroot caching
  * Speed up chroot checking loop
  * Allow disto-specific mirror settings
  * Update hpssacli to ssacli in proliant-tools element</changelog>
  <changelog author="mchandras@suse.de" date="1488542400">- Update to version 1.28.0
  * [suse] Handle pip-and-virtualenv install for opensuse
  * pip-and-virtualenv: also handle rhel distros
  * [suse] remove --no-confirm from zypper invocation
  * gentoo: do not manually clean /tmp
  * Fix requirements update
  * Fix up doc errors
  * python-brickclient: accommodate python2/3 changes
  * Move Ubuntu specific use_tempaddr setting to ubuntu-common element
  * Fix typo in README.rst
  * yum/install-packages output cleanup
  * Preinstall pyOpenSSL
  * Target map-packages deprecation message
  * Turn down some low-value tracing output
  * Move generation of dib_[environment|args] to manifest element
  * Use strings in package-installs follow output</changelog>
  <changelog author="mchandras@suse.de" date="1489406400">- Update to version 2.0.0
  * Add 2.0.0 release notes
  * Run indent checks in diskimage_builder/lib
  * Use OrderedDict for partitions instead of simple dictionary
  * Refactor: block-device partitioning cleanup
  * fix grub2 element for ubuntu xenial [lp##1627402]
  * Semi-automatic doc generation of element dependency
  * Fix up element doc generation
  * Check return of _load_state
  * block-device: change top level config from dict to list
  * Handle blank lines in element-deps
  * Don't run unit tests from run_functests.sh
  * Refactor: block-device handling (partitioning)
  * Add get_elements; preserve backwards compat for expand_dependencies
  * Fix --version display
  * Activate virtualenv in disk-image-create
  * Remove execute perm from disk-image-create
  * Move dib-run-parts into diskimage-builder
  * Move diskimage-image-create to an entry point
  * Move elements &amp; lib relative to diskimage_builder package
  * Fail on element-info error
  * Remove deploy element
  * Remove deprecated deploy-ironic element
  * Remove deprecated ironic-discoverd-ramdisk
  * Remove deprecated expand-dependencies arg
  * Remove deprecated serial-console element
  * Remove deprecated map-services
  * Add release notes for block device handling.
  * Move element-info to a standard entry-point
  * Refactor: block-device handling (local loop)
  * Convert pkg-map and svc-map copies to explicit variables
  * Add IMAGE_ELEMENT_YAML and get_image_element_array
  * Making element overriding explicit
  * For developer and low-level oriented changes please read the following thread
  - http://lists.openstack.org/pipermail/openstack-dev/2017-February/111833.html</changelog>
  <changelog author="mchandras@suse.de" date="1492776000">- Update to version 2.3.3
  * Add yum-utils as EPEL dependency
  * Skip python3-virtualenv on &lt;= trusty
  * pip-and-virtualenv : install python2 &amp; 3, and default to 2
  * Install pip with python interpreter
  * Move do_extra_package_install to run in install phase
  * Updated from global requirements
  * Unify and fix doc of several Debian and Ubuntu elements
  * Fix package-installs-v2 output
  * Basic logging for package-installs-squash
  * Use DIB_PYTHON_EXEC to run commands
  * Fix typo in pip-and-virtualenv
  * Ignore missing path in unmount_dir
  * Run dib-run-parts out of /tmp
  * Don't provide dib-run-parts
  * Add flag to disable EPEL
  * Fix code-block in README of rhel7 element
  * Fix opensuse-minimal element on non-SUSE hosts
  * Use stevedore for plugin config of block device
  * Adding aarch64 support for CentOS7
  * Have simple-init enable network.service
  * Use correct Ubuntu distro url on non-x86 arches
  * Typo fix: curent =&gt; current
  * functests: skip qcow2 generically but add specific test
  * Add default PPC block-device layout
  * Capture output in _exec_sudo
  * Fix typo in CMDLINE env var for bootloader
  * Allow ELEMENTS_DIR to be configurable
  * Use sphinx warning-is-error
  * Updated from global requirements
  * squash-package-install to use the correct python
  * Make our virtualenv source py3 safe
  * blockdevice.py: python3 fixes
  * Fix dib-init-system for Debian Jessie and Debian Stretch
  * Send custom parameters in bootloader to GRUB_CMDLINE</changelog>
  <changelog author="mchandras@suse.de" date="1495022400">- Version bump to 2.4.0
  * Refactor: block-device filesystem creation, mount and fstab
  * Take --params from environment
  * Refactor documentation on image creation
  * Add a test to validate we can build debian vms
  * Introduce exec_sudo command
  * Fix py3 error in block-device
  * Refactor block-device base functions.
  * Add bzip2 to test install
  * Add refactor of tree-like vs graph
  * Set LC_ALL in disk-image-create
  * Improve documentation for image creation
  * Refactor block_device: isolate the getval call
  * Refactor block_device: passing command line parameters
  * Make Gentoo package updates work more often
  * Turn off strict_id mode for Ec2 datasource
  * Clean out apt index caches at end of image build</changelog>
  <changelog author="mchandras@suse.de" date="1495713600">- Version bump to 2.4.1
  * Set manifest permissions in the image
  * Move parts of Partition creation into object
  * Split partition into it's own file
  * Move exception to it's own file (again)
  * Add weights to digraph
  * Switch debian to deb.debian.org
  * Add dracut-regenerate elements
  * Set manifests to mode 600 and owner root
  * Only unmount directories that are mounted
  * Apply setfiles on all mountpoints</changelog>
  <changelog author="mchandras@suse.de" date="1497182400">- Version bump 2.5.0
  * Disable recommended package installations for zypper-minimal
  * Use networkx for digraph
  * Various internal fixes
  * Adding unit testing for configuration
  * Produce API documentation</changelog>
  <changelog author="mchandras@suse.de" date="1497355200">- Version bump to 2.6.0
  * PPC bootloader; install to boot partition
  * Pass all blockdevices to bootloader
  * Move global mount tracking into state
  * Use global state to check for duplicate fs labels
  * Remove 'state' argument from later cmd_* calls
  * Use picked nodes for later cmd_* calls
  * Don't make image &amp; loopdev functions static
  * Add env var to dump config graph
  * Move ppc block-device default to right $ARCH
  * Update tracing in block_device_create_config_file
  * Pad state dump
  * Adjust package mapping for SUSE family
  * Drop support for Ubuntu precise
  * Adjust package installation for openSUSE
  * Refactor mount-point sorting
  * Remove dracut-network element
  * Remove ccache
  * Test openSUSE 42.2/42.3 image builds
  * Add state object, rename "results", add unit tests
  * allow uninstalls to fail on gentoo
  * Refactor: use lazy logging
  * drop deprecated map-services/packages from zypper element
  * dhcp-all-interfaces.sh - Add support for InfiniBand interface DHCP</changelog>
  <changelog author="mchandras@suse.de" date="1500033600">- Version bump to 2.6.1
  * On suse the python2 dev package is python-devel
  * Move ironic-agent test to fedora-minimal
  * Start at using CI mirrors for fedora/centos
  * Use local mirror for ubuntu-minimal jobs
  * Move apt-sources to ubuntu-minimal / move debian to skip list
  * Sync after writing partition table
  * Install systemd earlier for Stretch
  * Fix mkfs failure when loop device is not ready</changelog>
  <changelog author="mchandras@suse.de" date="1500897600">- Version bump to 2.7.0
  * Move setfiles to outside chroot with runcon
  * doc: supported_distros: Add openSUSE Leap 42.2/3 and Tumbleweed
  * Add -m flag to setfiles for Fedora 26
  * yum-minimal: pre-install coreutils
  * Force install during pip-and-virtualenv
  * Fix latest-limit command line
  * opensuse-minimal: install glibc-locale
  * elements: openstack-ci-mirrors: Use openSUSE mirrors for gating jobs
  * Remove DIB_[DISTRO]_DISTRIBUTION_MIRROR
  * doc: Switch from oslosphinx to openstackdocstheme
  * The correct option for label name in fat and vfat is '-n'
  * zypper-minimal: No point in preserving the environment here
  * Remove additional Bumblebee repository for opensuse element
  * Enable console during kernel boot on Power
  * fix readme.rst to reflect correct environment variable
  * Add symlink test for resolv.conf restore
  * pip-and-virtualenv: Install python3 on openSUSE
  * Support for Cloud Images on ppc64le for rhel7 and centos7
  * bindep.txt: Exclude gnupg2 package on openSUSE
  * Avoid hanging endlessly on unreachable cache urls
  * elements: pip-and-virtualenv: Use common packages for openSUSE
  * Remove mirror create
  * Remove centos and rhel elements
  * Updated from global requirements
  * dib-lint: Ignore editor temp files for linting run
  * Fix mkfs use wrong label option for vfat
  * Use the dib python to do cleanup
  * Replace architecture-emulation-binaries with qemu-debootstrap</changelog>
  <changelog author="mchandras@suse.de" date="1501070400">- Version bump to 2.7.1
  * elements: zypper-minimal: Install tar package
  * zypper: Clean caches and don't cache packages locally</changelog>
  <changelog author="mchandras@suse.de" date="1502712000">- Version bump to 2.8.0
  * Move selinux packages to redhat-common
  * Use SELinuxfs to check selinux status
  * Switch openSUSE to 42.3 by default</changelog>
  <changelog author="mchandras@suse.de" date="1512388800">- Version bump to 2.9.0
  * Add initramfs-tools for ubuntu-minimal
  * Create /etc/machine-id for fedora
  * Use latest Fedora .qcow URL
  * Updated from global requirements
  * Add missing package dependency for yaml
  * Mention the need of dracut-regenerate element
  * Move the ordering of the dracut regenerate command
  * Fix cylical systemd config for dhcp-all-interfaces
  * LVM support for dib-block-device
  * Increase timeout for removal
  * Add netbase to ensure /etc/protocols is placed for debian
  * Add kpartx as a requirement to build images
  * Clear up debian element documentation
  * Bump fedora/fedora-minimal DIB_RELEASE 26
  * Allow users to specify partition type in the MBR PTE
- Fix env-script-interpreter rpmlint warnings.</changelog>
  <changelog author="mchandras@suse.de" date="1520596800">- Version bump to 2.11.0
  * Install systemd earlier for Ubuntu Bionic
  * update gentoo vars for new profile and python
  * Set default label for XFS disks
  * Don't install dmidecode on Fedora ppc64le
  * Updated from global requirements
  * Add support for Fedora 27, remove EOL Fedora 25
  * Don't fstrim vfat partitions
  * Remove RH1 check OVB jobs from configuration
  * upgrade pip before using -c option
  * Correct link address
  * Updated from global requirements
  * Add SUSE Mapping
  * Revert "Dont install python-pip for py3k"
  * Adding mapping for SUSE package
  * Check source-repository-* files for trailing newline
  * ironic-agent: don't remove make
  * Remove architecture rules on lshw dependency in ironic-agent
  * zypper: fix package removal
  * Avoid tox_install.sh for constraints support
  * Fix wrong epel-release-7* package URL
  * Add the groundwork for musl profile support
  * Enable support for Gentoo overlays
  * Pre-install curl
  * Install fedora-gpg-keys for F27
  * Make preinstall.d more deterministic
  * Use EPEL for debootstrap on centos
  * Fix /dev/pts mount options handling
  * Make python changes more reliable
  * Remove setting of version/release from releasenotes
  * elements: zypper-minimal: Refresh repositories where necessary
  * Updated from global requirements
  * elements: Respect devpts mount options
  * Dont install python-pip for py3k
  * Enable gentoo in pip-and-virtualenv element
  * Add zipl element as s390x architecture bootloader
  * diskimage_builder: lib: common-functions: Fix options for devpts mount
  * Move to a common lock-file directory
  * Create rescue user on ironic agent
  * Use -t devpts for /dev/pts mounts
  * Dont install python-virtualenv for py3k in deb
  * Import legacy playbooks
  * Add debian minimal requirement for arm64
  * Fix grub2 dependency on arm64
  * Remove dd from LVM element
  * Update Gentoo element for element changes
  * Update proliant-tools to support Gen10 Proliant servers
  * Move fstrim to block device layer
  * Actually sort mount-point list
  * Change to install a package in 'proliant-tools'
  * Clear /etc/machine-id to avoid duplicate machine-ids
  * Add timestamp output filter</changelog>
  <changelog author="mchandras@suse.de" date="1525089600">- Version bump to 2.14.1
  * Fix epel element for centos-minimal
  * Revert "debootstrap: Call update-initramfs explicitly"
  * Remove installed packages before pip install
  * Don't only install python3-virtualenv
  * Don't use -e to test for what might be broken symlink
  * add lower-constraints job
  * Set the dhclient timeout to match DIB_DHCP_TIMEOUT
  * Formalise saving of /etc/resolv.conf
  * Restore tracing on exit points of block_device_create_config_file
  * delete unused module
  * debootstrap: Call update-initramfs explicitly
  * Change the GENTOO_PORTAGE_CLEANUP variable default
  * Fix element-provides in debian element
  * Revert "Remove tripleo jobs"
  * enable systemd profile for Gentoo
  * install sudo in the devuser element
  * Fix default partition type
  * Remove tripleo jobs
  * remove portage git directory
  * Updated from global requirements
  * Updated from global requirements
  * proliant-tools: add net-tools package to support hpsum utility
  * Make the build reproducible
  * Updated from global requirements
  * secondary architectures use different url
  * Fix for rhel7 iso image creation.
  * Fix for passing user defined value for satellite cert for rhel-common.
  * arm64: use HWE kernel and fix console
  * Choose appropriate bootloader for block-device
  * Add block-device defaults
  * Fail if two elements provide the same thing
  * GPT partitioning support
  * update Gentoo Hardened profiles (now stable)
  * Checking link status according to DIB_DHCP_TIMEOUT
  * Remove some redundant indents
  * Update Fedora defaults to 27
  * zypper-minimal: Set default locale env to C.UTF-8
  * Clean up dib-python symlink</changelog>
  <changelog author="mchandras@suse.de" date="1528372800">- Version bump to 2.15.1 (bsc#1097115)
  * elements: pip-and-virtualenv: Handle openSUSE Leap 15
  * Allow to rebuild arbitrary images
  * Replace the ubuntu-minimal trusty test with a bionic one
  * Remove non-maintained ubuntu-core element
  * elements: zypper-minimal: Add support for openSUSE Leap 15.X
  * Add Ubuntu 18.04 support
  * Remove duplicate GRUB command line entry
  * rpm-distro: set the contentdir yum var
  * Trivial: update url to new url
  * Fixes add-apt-keys in dpkg element
  * Add pip cache cleanup to pip-and-virtualenv
  * pip-and-virtualenv: fix install-pip when centos-release-openstack is enabled
  * Stop using slave_scripts/install-distro-packages.sh</changelog>
</package>
<package pkgid="c33cc2dd6ab700f7aaefd9b409c0b3f13ace678d090f09950c89cd016114b100" name="diskimage-builder" arch="src">
  <version epoch="0" ver="2.15.1" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1476705600">- Initial commit. Taken from the Cloud OBS project
  * diskimage-builder-rpmlintrc: Add rpmlint file to prevent build
    failures due to the 'wrong-script-interpreter' check. It's a
    spurious warning since the interpreter is only used within the
    generated image and it does not affect the host or the package
    itself.
  * 0001-lib-Drop-shebang-from-library-scripts.patch: Add patch to
    drop the shebang from the lib/* files which are meant to be
    sourced instead of executed (fixes: 'non-executable-script')
  * 0002-elements-Drop-executable-bits-from-environment-files.patch:
    Add patch to drop the executable bit from files which are meant to
    be sourced instead of executed. (fixes: 'script-without-shebang')</changelog>
  <changelog author="mchandras@suse.de" date="1476792000">- Use addFilter instead of setBadness in the rpmlintrc file.</changelog>
  <changelog author="mchandras@suse.de" date="1480939200">- Update to version 1.24.0
  * elements: pip-and-virtualenv: Add python-xml dependency
  * Trace package install in package-installs-v2
  * elements: zypper-minimal: Add ca-certificates-mozilla package
  * Improve checksum performance for images
  * Perform package install outside of debootstrap
  * Remove obsolete patches for the time being
  - 0001-lib-Drop-shebang-from-library-scripts.patch
  - 0002-elements-Drop-executable-bits-from-environment-files.patch</changelog>
  <changelog author="mchandras@suse.de" date="1482408000">- Update to version 1.26.1
  * Generate ssh-hostkeys on boot for ironic agent
  * add option to configure cloud-init to allow password authentication
  * elements: Drop unneeded DIB_INIT_SYSTEM usage
  * Replace six.iteritems() with .items()
  * Catch errors in DIB_INIT_SYSTEM export
  * DIB element to support cinder local attach/detach functionality
  * elements: Drop executable bits from environment files
  * Update sysctl-write-value to do conflict checking
  * Put MKFS_OPTS after filesystem type
  * Make dib-python use the default python for distro
  * Don't set the executable bit on dhcp-interface@.service
  * Move pip-and-virtualenv source install to 10-
  * Add install-types as pip-and-virtualenv dep
  * Allow package-installs to parse DIB_PYTHON_VERSION
  * Fix pip-and-virtualenv to work with python3
  * elements: dib-python: Add python2 as the default version for openSUSE
  * Support sysv init system used by Debian Wheezy
  * Pip install as 10- incompatible with 05-heat-cfntools
  * Recreate initramfs within loopback image
  * Fix bootloader element on ppc
  * Add ubuntu-precise support to dib-python
  * FIx the DIB_CLOUD_INIT_ALLOW_SSH_PWAUTH variable name in README file
  * Switch to openSUSE Leap 42.2 release by default
  * Install dracut-generic-config package
  * Add output image format tgz support
  * Add squashfs output image format
  * set default DIB_PYTHON_VERSION=2 for rhel7
  * Set grub timeout default
  * Dont run with VIRTUAL_ENV set</changelog>
  <changelog author="mchandras@suse.de" date="1487246400">- Update to version 1.27.0
  * Add DIB_IPA_COMPRESS_CMD option
  * ironic-agent: use /sbin for modprobe
  * move post-install.d to finalize.d
  * Bump fedora release to 25
  * Fix dhcp-all-interfaces for ubuntu-minimal xenial
  * Don't set base element path in run_functests.sh
  * Use %i instead of %I in dhcp-interface@.service
  * Remove hardcoded components
  * Set grub device in /etc/default/grub
  * Replace yaml.load() with yaml.safe_load()
  * Unify tidy up logs in lib/img-functions
  * Also check bin/ for tabs
  * Handle failure of carrier check in dhcp-all-interfaces.sh
  * Make DHCP timeout configurable
  * Run dhcp-interface@.service after network.target
  * update pkg-map entries for python3
  * dib-lint: python3 compatibility fixes
  * debootstrap: avoid duplicate network configuration
  * Remove yum chroot caching
  * Speed up chroot checking loop
  * Allow disto-specific mirror settings
  * Update hpssacli to ssacli in proliant-tools element</changelog>
  <changelog author="mchandras@suse.de" date="1488542400">- Update to version 1.28.0
  * [suse] Handle pip-and-virtualenv install for opensuse
  * pip-and-virtualenv: also handle rhel distros
  * [suse] remove --no-confirm from zypper invocation
  * gentoo: do not manually clean /tmp
  * Fix requirements update
  * Fix up doc errors
  * python-brickclient: accommodate python2/3 changes
  * Move Ubuntu specific use_tempaddr setting to ubuntu-common element
  * Fix typo in README.rst
  * yum/install-packages output cleanup
  * Preinstall pyOpenSSL
  * Target map-packages deprecation message
  * Turn down some low-value tracing output
  * Move generation of dib_[environment|args] to manifest element
  * Use strings in package-installs follow output</changelog>
  <changelog author="mchandras@suse.de" date="1489406400">- Update to version 2.0.0
  * Add 2.0.0 release notes
  * Run indent checks in diskimage_builder/lib
  * Use OrderedDict for partitions instead of simple dictionary
  * Refactor: block-device partitioning cleanup
  * fix grub2 element for ubuntu xenial [lp##1627402]
  * Semi-automatic doc generation of element dependency
  * Fix up element doc generation
  * Check return of _load_state
  * block-device: change top level config from dict to list
  * Handle blank lines in element-deps
  * Don't run unit tests from run_functests.sh
  * Refactor: block-device handling (partitioning)
  * Add get_elements; preserve backwards compat for expand_dependencies
  * Fix --version display
  * Activate virtualenv in disk-image-create
  * Remove execute perm from disk-image-create
  * Move dib-run-parts into diskimage-builder
  * Move diskimage-image-create to an entry point
  * Move elements &amp; lib relative to diskimage_builder package
  * Fail on element-info error
  * Remove deploy element
  * Remove deprecated deploy-ironic element
  * Remove deprecated ironic-discoverd-ramdisk
  * Remove deprecated expand-dependencies arg
  * Remove deprecated serial-console element
  * Remove deprecated map-services
  * Add release notes for block device handling.
  * Move element-info to a standard entry-point
  * Refactor: block-device handling (local loop)
  * Convert pkg-map and svc-map copies to explicit variables
  * Add IMAGE_ELEMENT_YAML and get_image_element_array
  * Making element overriding explicit
  * For developer and low-level oriented changes please read the following thread
  - http://lists.openstack.org/pipermail/openstack-dev/2017-February/111833.html</changelog>
  <changelog author="mchandras@suse.de" date="1492776000">- Update to version 2.3.3
  * Add yum-utils as EPEL dependency
  * Skip python3-virtualenv on &lt;= trusty
  * pip-and-virtualenv : install python2 &amp; 3, and default to 2
  * Install pip with python interpreter
  * Move do_extra_package_install to run in install phase
  * Updated from global requirements
  * Unify and fix doc of several Debian and Ubuntu elements
  * Fix package-installs-v2 output
  * Basic logging for package-installs-squash
  * Use DIB_PYTHON_EXEC to run commands
  * Fix typo in pip-and-virtualenv
  * Ignore missing path in unmount_dir
  * Run dib-run-parts out of /tmp
  * Don't provide dib-run-parts
  * Add flag to disable EPEL
  * Fix code-block in README of rhel7 element
  * Fix opensuse-minimal element on non-SUSE hosts
  * Use stevedore for plugin config of block device
  * Adding aarch64 support for CentOS7
  * Have simple-init enable network.service
  * Use correct Ubuntu distro url on non-x86 arches
  * Typo fix: curent =&gt; current
  * functests: skip qcow2 generically but add specific test
  * Add default PPC block-device layout
  * Capture output in _exec_sudo
  * Fix typo in CMDLINE env var for bootloader
  * Allow ELEMENTS_DIR to be configurable
  * Use sphinx warning-is-error
  * Updated from global requirements
  * squash-package-install to use the correct python
  * Make our virtualenv source py3 safe
  * blockdevice.py: python3 fixes
  * Fix dib-init-system for Debian Jessie and Debian Stretch
  * Send custom parameters in bootloader to GRUB_CMDLINE</changelog>
  <changelog author="mchandras@suse.de" date="1495022400">- Version bump to 2.4.0
  * Refactor: block-device filesystem creation, mount and fstab
  * Take --params from environment
  * Refactor documentation on image creation
  * Add a test to validate we can build debian vms
  * Introduce exec_sudo command
  * Fix py3 error in block-device
  * Refactor block-device base functions.
  * Add bzip2 to test install
  * Add refactor of tree-like vs graph
  * Set LC_ALL in disk-image-create
  * Improve documentation for image creation
  * Refactor block_device: isolate the getval call
  * Refactor block_device: passing command line parameters
  * Make Gentoo package updates work more often
  * Turn off strict_id mode for Ec2 datasource
  * Clean out apt index caches at end of image build</changelog>
  <changelog author="mchandras@suse.de" date="1495713600">- Version bump to 2.4.1
  * Set manifest permissions in the image
  * Move parts of Partition creation into object
  * Split partition into it's own file
  * Move exception to it's own file (again)
  * Add weights to digraph
  * Switch debian to deb.debian.org
  * Add dracut-regenerate elements
  * Set manifests to mode 600 and owner root
  * Only unmount directories that are mounted
  * Apply setfiles on all mountpoints</changelog>
  <changelog author="mchandras@suse.de" date="1497182400">- Version bump 2.5.0
  * Disable recommended package installations for zypper-minimal
  * Use networkx for digraph
  * Various internal fixes
  * Adding unit testing for configuration
  * Produce API documentation</changelog>
  <changelog author="mchandras@suse.de" date="1497355200">- Version bump to 2.6.0
  * PPC bootloader; install to boot partition
  * Pass all blockdevices to bootloader
  * Move global mount tracking into state
  * Use global state to check for duplicate fs labels
  * Remove 'state' argument from later cmd_* calls
  * Use picked nodes for later cmd_* calls
  * Don't make image &amp; loopdev functions static
  * Add env var to dump config graph
  * Move ppc block-device default to right $ARCH
  * Update tracing in block_device_create_config_file
  * Pad state dump
  * Adjust package mapping for SUSE family
  * Drop support for Ubuntu precise
  * Adjust package installation for openSUSE
  * Refactor mount-point sorting
  * Remove dracut-network element
  * Remove ccache
  * Test openSUSE 42.2/42.3 image builds
  * Add state object, rename "results", add unit tests
  * allow uninstalls to fail on gentoo
  * Refactor: use lazy logging
  * drop deprecated map-services/packages from zypper element
  * dhcp-all-interfaces.sh - Add support for InfiniBand interface DHCP</changelog>
  <changelog author="mchandras@suse.de" date="1500033600">- Version bump to 2.6.1
  * On suse the python2 dev package is python-devel
  * Move ironic-agent test to fedora-minimal
  * Start at using CI mirrors for fedora/centos
  * Use local mirror for ubuntu-minimal jobs
  * Move apt-sources to ubuntu-minimal / move debian to skip list
  * Sync after writing partition table
  * Install systemd earlier for Stretch
  * Fix mkfs failure when loop device is not ready</changelog>
  <changelog author="mchandras@suse.de" date="1500897600">- Version bump to 2.7.0
  * Move setfiles to outside chroot with runcon
  * doc: supported_distros: Add openSUSE Leap 42.2/3 and Tumbleweed
  * Add -m flag to setfiles for Fedora 26
  * yum-minimal: pre-install coreutils
  * Force install during pip-and-virtualenv
  * Fix latest-limit command line
  * opensuse-minimal: install glibc-locale
  * elements: openstack-ci-mirrors: Use openSUSE mirrors for gating jobs
  * Remove DIB_[DISTRO]_DISTRIBUTION_MIRROR
  * doc: Switch from oslosphinx to openstackdocstheme
  * The correct option for label name in fat and vfat is '-n'
  * zypper-minimal: No point in preserving the environment here
  * Remove additional Bumblebee repository for opensuse element
  * Enable console during kernel boot on Power
  * fix readme.rst to reflect correct environment variable
  * Add symlink test for resolv.conf restore
  * pip-and-virtualenv: Install python3 on openSUSE
  * Support for Cloud Images on ppc64le for rhel7 and centos7
  * bindep.txt: Exclude gnupg2 package on openSUSE
  * Avoid hanging endlessly on unreachable cache urls
  * elements: pip-and-virtualenv: Use common packages for openSUSE
  * Remove mirror create
  * Remove centos and rhel elements
  * Updated from global requirements
  * dib-lint: Ignore editor temp files for linting run
  * Fix mkfs use wrong label option for vfat
  * Use the dib python to do cleanup
  * Replace architecture-emulation-binaries with qemu-debootstrap</changelog>
  <changelog author="mchandras@suse.de" date="1501070400">- Version bump to 2.7.1
  * elements: zypper-minimal: Install tar package
  * zypper: Clean caches and don't cache packages locally</changelog>
  <changelog author="mchandras@suse.de" date="1502712000">- Version bump to 2.8.0
  * Move selinux packages to redhat-common
  * Use SELinuxfs to check selinux status
  * Switch openSUSE to 42.3 by default</changelog>
  <changelog author="mchandras@suse.de" date="1512388800">- Version bump to 2.9.0
  * Add initramfs-tools for ubuntu-minimal
  * Create /etc/machine-id for fedora
  * Use latest Fedora .qcow URL
  * Updated from global requirements
  * Add missing package dependency for yaml
  * Mention the need of dracut-regenerate element
  * Move the ordering of the dracut regenerate command
  * Fix cylical systemd config for dhcp-all-interfaces
  * LVM support for dib-block-device
  * Increase timeout for removal
  * Add netbase to ensure /etc/protocols is placed for debian
  * Add kpartx as a requirement to build images
  * Clear up debian element documentation
  * Bump fedora/fedora-minimal DIB_RELEASE 26
  * Allow users to specify partition type in the MBR PTE
- Fix env-script-interpreter rpmlint warnings.</changelog>
  <changelog author="mchandras@suse.de" date="1520596800">- Version bump to 2.11.0
  * Install systemd earlier for Ubuntu Bionic
  * update gentoo vars for new profile and python
  * Set default label for XFS disks
  * Don't install dmidecode on Fedora ppc64le
  * Updated from global requirements
  * Add support for Fedora 27, remove EOL Fedora 25
  * Don't fstrim vfat partitions
  * Remove RH1 check OVB jobs from configuration
  * upgrade pip before using -c option
  * Correct link address
  * Updated from global requirements
  * Add SUSE Mapping
  * Revert "Dont install python-pip for py3k"
  * Adding mapping for SUSE package
  * Check source-repository-* files for trailing newline
  * ironic-agent: don't remove make
  * Remove architecture rules on lshw dependency in ironic-agent
  * zypper: fix package removal
  * Avoid tox_install.sh for constraints support
  * Fix wrong epel-release-7* package URL
  * Add the groundwork for musl profile support
  * Enable support for Gentoo overlays
  * Pre-install curl
  * Install fedora-gpg-keys for F27
  * Make preinstall.d more deterministic
  * Use EPEL for debootstrap on centos
  * Fix /dev/pts mount options handling
  * Make python changes more reliable
  * Remove setting of version/release from releasenotes
  * elements: zypper-minimal: Refresh repositories where necessary
  * Updated from global requirements
  * elements: Respect devpts mount options
  * Dont install python-pip for py3k
  * Enable gentoo in pip-and-virtualenv element
  * Add zipl element as s390x architecture bootloader
  * diskimage_builder: lib: common-functions: Fix options for devpts mount
  * Move to a common lock-file directory
  * Create rescue user on ironic agent
  * Use -t devpts for /dev/pts mounts
  * Dont install python-virtualenv for py3k in deb
  * Import legacy playbooks
  * Add debian minimal requirement for arm64
  * Fix grub2 dependency on arm64
  * Remove dd from LVM element
  * Update Gentoo element for element changes
  * Update proliant-tools to support Gen10 Proliant servers
  * Move fstrim to block device layer
  * Actually sort mount-point list
  * Change to install a package in 'proliant-tools'
  * Clear /etc/machine-id to avoid duplicate machine-ids
  * Add timestamp output filter</changelog>
  <changelog author="mchandras@suse.de" date="1525089600">- Version bump to 2.14.1
  * Fix epel element for centos-minimal
  * Revert "debootstrap: Call update-initramfs explicitly"
  * Remove installed packages before pip install
  * Don't only install python3-virtualenv
  * Don't use -e to test for what might be broken symlink
  * add lower-constraints job
  * Set the dhclient timeout to match DIB_DHCP_TIMEOUT
  * Formalise saving of /etc/resolv.conf
  * Restore tracing on exit points of block_device_create_config_file
  * delete unused module
  * debootstrap: Call update-initramfs explicitly
  * Change the GENTOO_PORTAGE_CLEANUP variable default
  * Fix element-provides in debian element
  * Revert "Remove tripleo jobs"
  * enable systemd profile for Gentoo
  * install sudo in the devuser element
  * Fix default partition type
  * Remove tripleo jobs
  * remove portage git directory
  * Updated from global requirements
  * Updated from global requirements
  * proliant-tools: add net-tools package to support hpsum utility
  * Make the build reproducible
  * Updated from global requirements
  * secondary architectures use different url
  * Fix for rhel7 iso image creation.
  * Fix for passing user defined value for satellite cert for rhel-common.
  * arm64: use HWE kernel and fix console
  * Choose appropriate bootloader for block-device
  * Add block-device defaults
  * Fail if two elements provide the same thing
  * GPT partitioning support
  * update Gentoo Hardened profiles (now stable)
  * Checking link status according to DIB_DHCP_TIMEOUT
  * Remove some redundant indents
  * Update Fedora defaults to 27
  * zypper-minimal: Set default locale env to C.UTF-8
  * Clean up dib-python symlink</changelog>
  <changelog author="mchandras@suse.de" date="1528372800">- Version bump to 2.15.1 (bsc#1097115)
  * elements: pip-and-virtualenv: Handle openSUSE Leap 15
  * Allow to rebuild arbitrary images
  * Replace the ubuntu-minimal trusty test with a bionic one
  * Remove non-maintained ubuntu-core element
  * elements: zypper-minimal: Add support for openSUSE Leap 15.X
  * Add Ubuntu 18.04 support
  * Remove duplicate GRUB command line entry
  * rpm-distro: set the contentdir yum var
  * Trivial: update url to new url
  * Fixes add-apt-keys in dpkg element
  * Add pip cache cleanup to pip-and-virtualenv
  * pip-and-virtualenv: fix install-pip when centos-release-openstack is enabled
  * Stop using slave_scripts/install-distro-packages.sh</changelog>
</package>
<package pkgid="a83177f12ce815b63dd6294d6ebcad0bc329ca0ec2a76ad0e1f56c62c1701bc4" name="docker" arch="src">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="25b190f244251c7d9c65448a2d5b2d1bcb039b46e4df26acebaab1e053bae0f0" name="docker" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="433fdc56266d6aafdcfac99b5f5c71a82427d4ec288e5f3bfeb0c1940691264c" name="docker-bash-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="aeb06bc0b7b7f6abf5dd4ee63791198f3354c791a4cd0445c25ddf0e65f587f3" name="docker-test" arch="x86_64">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="a307d0e3628a8a0a5d643df205591d7c69b1764ef202dc12b1b9b9adf16ba2c9" name="docker-zsh-completion" arch="noarch">
  <version epoch="0" ver="17.09.1_ce" rel="lp150.5.3.1"/>
  <changelog author="asarai@suse.com" date="1510660800">- Remove migration code for the v1.9.x -&gt; v1.10.x migration. This has been
  around for a while, and we no longer support migrating from such an old
  version "nicely". Docker still has migration code that will run on
  first-boot, we are merely removing all of the "nice" warnings which tell
  users how to avoid issues during an upgrade that ocurred more than a year
  ago.
- Drop un-needed files:
  - docker-plugin-message.txt
  - docker-update-message.txt</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="asarai@suse.com" date="1512043200">- Include secrets fix to handle "old" containers that have orphaned secret
  data. It's not clear why Docker caches these secrets, but fix the problem by
  trashing the references manually. bsc#1057743
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1512388800">- Fix up the ordering of tests in docker.spec. This is to keep things easier to
  backport into the SLE package.</changelog>
  <changelog author="asarai@suse.com" date="1512475200">- Add a patch to dynamically probe whether libdevmapper supports
  dm_task_deferred_remove. This is necessary because we build the containers
  module on a SLE12 base, but later SLE versions have libdevmapper support.
  This should not affect openSUSE, as all openSUSE versions have a new enough
  libdevmapper. Backport of https://github.com/moby/moby/pull/35518.
  bsc#1021227 bsc#1029320 bsc#1058173
  + bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598400">- Update to Docker v17.09.0_ce. Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.0-ce
- Rebased patches:
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch
- Removed patches (merged upstream):
  - bsc1064781-0001-Allow-to-override-build-date.patch</changelog>
  <changelog author="asarai@suse.com" date="1513598401">- Update to Docker v17.09.1_ce (bsc#1069758). Upstream changelog:
  https://github.com/docker/docker-ce/releases/tag/v17.09.1-ce
- Removed patches (merged upstream):
  - bsc1045628-0001-devicemapper-remove-container-rootfs-mountPath-after.patch
  - bsc1066210-0001-vendor-update-to-github.com-vbatts-tar-split-v0.10.2.patch
  - bsc1066801-0001-oci-add-proc-scsi-to-masked-paths.patch</changelog>
  <changelog author="vrothberg@suse.com" date="1516363200">- Remove requirement on bridge-utils, which has been replaced by libnetwork in
  Docker. bsc#1072798</changelog>
  <changelog author="asarai@suse.com" date="1516363201">- Add Obsoletes: docker-image-migrator, as the tool is no longer needed and
  we've pretty much removed it from everywhere except the containers module.
  bsc#1069758</changelog>
  <changelog author="asarai@suse.com" date="1518523200">- Update patches to be sourced from https://github.com/suse/docker-ce (which
  are based on the upstream docker/docker-ce repo). The reason for this change
  (though it is functionally identical to the old patches) is so that public
  patch maintenance is much simpler.
  * bsc1021227-0001-pkg-devmapper-dynamically-load-dm_task_deferred_remo.patch
  * bsc1055676-0001-daemon-oci-obey-CL_UNPRIVILEGED-for-user-namespaced-.patch
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1522152000">- Add requirement for catatonit, which provides a docker-init implementation.
  fate#324652 bsc#1085380</changelog>
  <changelog author="vrothberg@suse.com" date="1522843200">- Compile and install all manpages.
  bsc#1085117</changelog>
  <changelog author="asarai@suse.com" date="1523016000">- Fix manpage generation breaking ppc64le builds due to a missing
  - buildemode=pie.</changelog>
  <changelog author="mmeister@suse.com" date="1523361600">- Add patch to handle AppArmor changes that make 'docker kill' stop working.
  bsc#1073877 boo#1089732
  + bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="asarai@suse.com" date="1527595200">- Update secrets patch to not log incorrect warnings when attempting to inject
  non-existent host files. bsc#1065609
  * secrets-0001-daemon-allow-directory-creation-in-run-secrets.patch
  * secrets-0002-SUSE-implement-SUSE-container-secrets.patch</changelog>
  <changelog author="asarai@suse.com" date="1528200000">- Remove 'go test' from %check section, as it has only ever caused us problems
  and hasn't (as far as I remember) ever caught a release-blocking issue. Smoke
  testing has been far more useful. boo#1095817</changelog>
  <changelog author="asarai@suse.com" date="1528200001">- Update to AppArmor patch so that signal mediation also works for signals
  between in-container processes. bsc#1073877
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch</changelog>
  <changelog author="dcassany@suse.com" date="1528891200">- Make use of %license macro</changelog>
  <changelog author="asarai@suse.com" date="1530273600">- Update the AppArmor patchset again to fix a separate issue where changed
  AppArmor profiles don't actually get applied on Docker daemon reboot.
  bsc#1099277
  * bsc1073877-0001-apparmor-allow-receiving-of-signals-from-docker-kill.patch
  + bsc1073877-0002-apparmor-clobber-docker-default-profile-on-start.patch</changelog>
  <changelog author="asarai@suse.com" date="1532952000">- Build the client binary with -buildmode=pie to fix issues on POWER.
  bsc#1100727
  + bsc1100727-0001-build-add-buildmode-pie.patch</changelog>
</package>
<package pkgid="712a9ae9c524f82538a07851c9aec2541ce436aa4bbf9c0def315232966d729e" name="dpdk" arch="src">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="ddf55b9e5b54cc538f236a434a511b4a9364885fdaa2dc948c64000858809471" name="dpdk" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="d800947c4858448aaf384f09f02f4e8905b2e27e95c1a890c163b77d340837bd" name="dpdk-devel" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="2794e2c39201c1f77643ac3a8fa4eb2d1a75a8f4998868d66596e325712c6ad5" name="dpdk-doc" arch="noarch">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="c925121572222fb58942055c15866c0cee5165175d8edd6bcf064daa2156bfc0" name="dpdk-examples" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="7cc55592ae73b7e5680d494d19bc634e2035cf43684a2c8ffe2b2a950fb3971b" name="dpdk-kmp-default" arch="x86_64">
  <version epoch="0" ver="17.11.2_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="344c8cc98befa950be62dd8241ec61ad401479a7c22099990fa19cc551372dd9" name="dpdk-tools" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="fcc0ad6d05ae3f5728993dfe866d38d3be048a5ecbacd68f6153833b0d01ecf8" name="dracut" arch="src">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="fedc4ff7c9dd6d4880f27042e84705e66fd7a096fc202a4b4fe20a06188f73e0" name="dracut" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="5f75e1a3009c0363a538c5e302d58ff8d81f5883520220bf0b80b9cc26a0f438" name="dracut-fips" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="53968c0072a55cc4c512a126de09f123fb98db347b7e12ae3f3120e63e3e06d9" name="dracut-ima" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="f4980dcf66f9059b800cba4d24c57516d545544ebec04081db44a80053baf9ea" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="744c3a6cd62281cde9bd58ad9cdcd4259bd2de9c3cdad631df151359b460a4af" name="dracut-kiwi-lib" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="641c6a37ac53dec44074ca571ca1910b6d4d1f61df89314b18d438ed77749334" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="c5edc2107d761c364cf8bc74e0b3fa966811ef2210f35dd3cd34b65250decf6d" name="dracut-kiwi-live" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="7624e62cd7131639b819225ed6906520151c1d36be134228604929b39888fec9" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="bada34f8a4745a2ba88aa1aaa1c9014779f9f23312553a3a8d290042c9ad29a2" name="dracut-kiwi-oem-dump" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="1eab22d88156fc1fc0613281539a8b72eda897155d08b7f6cf99b992de40bce2" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="6635312e30ab1344eae839f72bcd510a58a361e16c39353b5452efa18a24997a" name="dracut-kiwi-oem-repart" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="648c07660d181b55cbbd4cc8e8f3ee7812149a325e5f803a585d38fe6ecbdbd6" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="8b196af6f46cf5dcbd6fbde00ad09a508a85a0a8600a248c988b044eb6c927c1" name="dracut-kiwi-overlay" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="525b5ee4f5dd902537e85d61d74f762b589068693a11ef59d9e9d13467360bfb" name="dracut-tools" arch="x86_64">
  <version epoch="0" ver="044.1" rel="lp150.14.3.1"/>
  <changelog author="daniel.molkentin@suse.com" date="1513339200">- Switch back to fipvlan for bnx2fc (bsc#1052840)
  * adds 0548-95fcoe-Switch-back-to-using-fipvlan-for-bnx2fc.patch
- 95fcoe: Allow bnc2x driver more time to complete DCB negotiation (bsc#1052840)
  * adds 0549-fcoe-up-Increase-sleeptime-to-13s.patch
- 95fcoe: add timeout initqueue entries (bsc#1052840)
  * adds 0550-95fcoe-add-timeout-initqueue-entries.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515499200">- dracut-ima requires evmctl and keyutils (bsc#1073466)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1515585600">- FIPS: Try to fetch list of fips modules from the kernel's modules dir (bsc#1074984)
  * Adds 0551-fips-use-lib-modules-uname-r-modules.fips.patch
- Annotated patches regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516363200">- Fix typo for ima dependency (evmtcl vs evmctl) (bsc#1073466)
- Updated Patch annotation regarding their upstream state</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1516881600">- support validating the IMA policy file signature, needed since Kernel 4.7
  * Adds 0552-98integrity-support-validating-the-IMA-policy-file-s.patch
- IMA: improve support for evm key loading (bsc#1077359, fate#323906)
  * Adds 0553-98integrity-support-loading-x509-into-the-trusted-bu.patch
  * Adds 0554-98integrity-support-X.509-only-EVM-configuration.patch
- FIPS: Adjust dependencies to work for cryptsetup 2.0 (bsc#1077070)
- Added a few more patch annotations</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1518177600">- 95qeth_rules: Add new module to copy qeth rules (FATE#323440)
  * Adds 0556-95qeth_rules-Add-new-module-to-copy-qeth-rules.patch
- Avoid executing emergency hook twice
  * Adds 0555-Avoid-executing-emergency-hooks-twice.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519387200">- 40network: disable arping, it is no longer part of default installation (bsc#1078245)
  * Adds 0557-40network-make-arping-optional.patch
- 40network: replace brctl, it is longer part of default installation (bsc#1078245)
  * Adds 0558-40network-remove-brctl-dependency.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519819200">- 40network: Add wickedd duid.xml and iaid.xml if available
  (bsc#1022872, bsc#1082832)
  * adds 0559-Add-wickedd-duid.xml-and-iaid.xml-if-available.patch
- 95qeth_rules: Fix file permissions (FATE#323440)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1519905600">- 90kernel-modules: Ensure PCI host modules are included (boo#1079924)
  * adds 0560-90kernel-modules-Ensure-PCI-host-modules-are-include.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1520424000">- purge-kernels: Handle SLE 15 kernel live patches (bsc#108437)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520596800">- 95iscsi: Add the qedi driver to driver list for iscsi boot
  * adds 0561-Add-the-qedi-driver-to-driver-list-for-iscsi-boot.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1520942400">- Enable aarch64 and adds critical drivers of ARM platform (bsc#1084272)
  * adds 0562-Adjust-driver-list-to-modern-kernels.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1521201600">- Instead of using arping, use wicked's own implementation (bsc#1078245)
  Follow-up patch to "disable arping", requires wicked 0.6.46.
  * adds 0563-40network-collapse-arping-and-dhcp-calls-into-wicked.patch
- Wicked: Properly add set gateway variable when using dhcp (bsc#1085614)
  * adds 0564-40network-Always-set-the-gw-variable.patch
- Allow booting from block devices using intel vmd (bsc#1079924)
  * adds 0565-90kernel-modules-Include-Intel-Volume-Management-Dev.patch</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1522929600">- Remove RH-specific s390 modules (bsc#1086216)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139200">- 95nfs: If no server is configured, read BOOTSERVERADDR from wicked's leaseinf
  (boo#1089332)
  * adds 0566-95nfs-If-no-server-is-configured-read-BOOTSERVERADDR.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524139201">- Do not attempt to run purge-kernels.service on ro rootfs (bsc#1087880)</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1524657600">- 01fips: fix FIPS mode on SLES 15 (bsc#1074984)
  * adds 0567-Fix-booting-with-fips-1-on-SLES-15.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977600">- 95multipath: Pickup multipath files in /etc/multipath/conf.d (boo#1048551)
  * adds 0568-95multipath-Pickup-files-in-etc-multipath-conf.d.patch
- 10i18n: Load all keymaps for a given locale (boo#1065058)
  * adds 0569-10i18n-Load-all-keymaps-for-a-given-locale.patch
  * adds 0570-10i18n-Fix-possible-infinite-recursion.patch</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1528977601">- 40network: Fix static network setup (bsc#1091099)
  * adds 0571-40network-Fix-static-network-setup.patch
- lsinitrd: Fix cat: write error: Broken pipe error (bsc#1094603)
  * adds 0572-lsinitrd-no-more-cat-write-error-Broken-pipe.patch
  * adds 0573-lsinitrd.sh-quote-filename-in-extract_files.patch</changelog>
</package>
<package pkgid="bb9fffa35db70167981299d8dff3a0b29dab0e9f1368d6e55f5bc1f0ceca528f" name="drbd" arch="src">
  <version epoch="0" ver="9.0.13+git.b83ade31" rel="lp150.2.2.1"/>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
</package>
<package pkgid="21e742cfd3eaf094e2134ff4e2eaa9f2d8acc3b709cf8b166ade02bb75c45858" name="drbd" arch="x86_64">
  <version epoch="0" ver="9.0.13+git.b83ade31" rel="lp150.2.2.1"/>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
</package>
<package pkgid="c25d1c9b07b0c886f3ea355ae76eb5f47f669f887a656fe13bc04bc09782f2fa" name="drbd-kmp-default" arch="x86_64">
  <version epoch="0" ver="9.0.13+git.b83ade31_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="nwang@suse.com" date="1460116800">- Compat with kernel 4.5
- Add patch kernel-4.5-compat.patch</changelog>
  <changelog author="nwang@suse.com" date="1465387200">- bsc#983633, upgrade to ver9.0.2 to build against kernel 4.6/4.7
- Add patch compat-4.7-9902af79-i_mutex.patch
- Add patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
- Add patch compat-4.7-50225243-kill-nla_put_u64.patch
- Add patch compat-4.7-1dee3f59-align-nla-u64.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310400">- Upgrade 9.0.2 to 9.0.5
- Remove patch compat-4.7-9902af79-i_mutex.patch
  Remove patch compat-4.7-fe8fb75e-blk_queue_write_cache.patch
  Remove patch compat-4.7-50225243-kill-nla_put_u64.patch
  Remove patch compat-4.7-1dee3f59-align-nla-u64.patch
  Remove patch drbd-buildcompare.patch
  Remove patch kernel-4.5-compat.patch
  Remove patch temp.patch</changelog>
  <changelog author="nwang@suse.com" date="1477310401">- bsc#1006176, compat with kernel 4.8 with 9.0.5</changelog>
  <changelog author="lpechacek@suse.com" date="1479556800">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="lpechacek@suse.com" date="1480075200">- Excluded openSUSE from RT KMP build (bsc#1005578)</changelog>
  <changelog author="nwang@suse.com" date="1487246400">- bsc#1025585, upgrade to 9.0.6</changelog>
  <changelog author="hare@suse.de" date="1488801600">- Compability fixes for SLE12 SP3 (bsc#993388, FATE#321732)
- Add patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch</changelog>
  <changelog author="nwang@suse.com" date="1490356800">- Update to 9.0.7rc1
- various fixes to the 2-phase-commit online resize
  fix fencing and disk state trasition and from consistent, necessary
  for crm-fence-peer
  fix calculation of authoritative nodes
  Quorum to avoid data divergence, an alternative to fencing
  Compat with Linux 4.10
- Remove patch drbd_wrapper-Blank-out-WRITE_SYNC-warning-for-new-ke.patch
- Add fix-resync-finished-with-syncs-have-bits-set.patch for bsc#1025089
- Including the compatible fix of bsc#1031299</changelog>
  <changelog author="nwang@suse.com" date="1493208000">- Update to 9.0.7
  Using 9.0.7rc2 for upgrading from rc1...
- bsc#1028124, fix kernel compat
- Fix a potenial split brain
- Change the drbd-utils requirement to 8.9.11</changelog>
  <changelog author="nwang@suse.com" date="1495713600">- bsc#1038852, fix initial sync not triggered
  add patch fix-initial-sync-stop.patch</changelog>
  <changelog author="nwang@suse.com" date="1497441600">- bsc#1045473, update to 9.0.8
  fix a race condition between adding connections and receiving data
  fix a OOPS on a diskfull node when a request from a diskless node
  fix a distributed deadlock when doing a discard/write-same burst
  fix an issue with diskless nodes adopting wrong current UUIDs
  fix wrongly rejected two-phase-state transactions
  fix initial resync, triggered by "--force primary"(regression 9.0.7)
  Speed-up AL-updates with bio flags REQ_META and REQ_PRIO
  Merged changes from 8.4.10 and with that compatibility with Linux-4.12
- Remove patch fix-initial-sync-stop.patch
- Fix the license to GPL-2.0+</changelog>
  <changelog author="bwiedemann@suse.com" date="1500465600">- Add reproducible.patch to sort file lists (boo#1041090)
  and to override build date (boo#1047218) to fix build-compare</changelog>
  <changelog author="nwang@suse.com" date="1507291200">- bsc#1061981, update to 9.0.9
  * fix occasionally forgotten resyncs in installations where
  diskless primaries are present.
  * fix an issue that causes unexpected split-brain upon connect.
  * in a cluster with a diskless primary, when a server goes away,
  and is not outdated, outdate it upon reconnect.
  * fix update of exposed data UUID on diskless primaries.
  * fix a possible OOPS when in a debug message regarding bitmap
  locking
  * fix discard bigger than 1MiB
  * fix left over bits in bitmap on SyncSource after resync
  * fix peers becoming unexpectedly displayed as D_OUTDATED at the
  end of a resync
  * fix a race between auto promote and auto demote of multiple volumes
  in a single resource
  * Speed up down of many resources by using call_rcu() instead
  of synchronize_rcu()
  * Make it compatible with the soon to be released 4.13 kernel
- Modify reproducible.patch since part of the patch is merged</changelog>
  <changelog author="nwang@suse.com" date="1507723200">- bsc#1062749, disable buildrt against SLE15 x86_64 temporarily.
  This change will be removed when rt is ready.</changelog>
  <changelog author="nwang@suse.com" date="1510920000">- bsc#1068587, add build request libelf-devel to build.</changelog>
  <changelog author="nwang@suse.com" date="1512561600">- bsc#1074169, Update to 9.0.10-1
  * Fix resync of two secondary nodes in the presence of
  a 3rd node that is primary (maybe with disk or diskless);
  Fixed the race condition that caused the resync to sometimes not terminate
  * Improve connection behavior with autopromote enable one node Primary and
  udev present.
  * Fix in memory alignment of DRBD's struct bio.
  * Improve the quorum implementation, so that is works nicely with for the
  purpose of replacing fencing with quorum in a Pacemaker setup.
  * Ensure compatibility with upstream Linux kernel 4.14
- Remove patch reproducible.patch</changelog>
  <changelog author="nwang@suse.com" date="1516795200">- bsc#1077318, Update to 9.0.12
  * Fix a race condition in the device_open code path that can cause an
  internal counter to go negative
- Update to 9.0.11
  * Fix bug in compat code: Without this fix large bios are not split.</changelog>
  <changelog author="nwang@suse.com" date="1518350400">- bsc#1080458, enable build with kernel-rt on x86_64.
- bsc#1080459, support build against 4.15.0.
  setup_timer() change to timer_setup()
- Add patch support-timer-setup.patch</changelog>
  <changelog author="nwang@suse.com" date="1523188800">- bsc#1090167, Update to 9.0.13-1
  * abort a resync if a resync source becomes weakly and the sync
  targetis a neighbor of the primary
  * fix UUID handling with multiple diskless nodes
  * When a data-set gets into contact with an all diskless cluster,
  make sure to either set it to "Consistent" or reject the attach
  * correctly handle when a node that was marked as intentional
  diskless should get a disk
  * fix outdating of weakly connected nodes
  * made returning from Ahead to SyncSource more reliable
  * fix a hard to trigger deadlock in the receiver
  * fix online resize in the presence of two or more diskless nodes
  * fix online add of volumes to diskless nodes when it already has
  established connections
  * Set the SO_KEEPALIVE socket option on data sockets
  * automatically solve a specific split brain when quorum is enabled
  * Compat: Added support for kernels up to v4.15.x
  * new wire packet P_ZEROES a cousin of P_DISCARD, following the
  kernel as it introduced separated BIO ops for writing zeros
  and discarding
  * compat workaround for two RHEL 7.5 idiosyncrasies regarding
  refcount_t and struct nla_policy
- Remove patch support-timer-setup.patch. Upstream fix 74b1cbb274</changelog>
</package>
<package pkgid="351b2f3a98b8542e275f1fe362fcc0913c4874d2c32d3543f2d54533d1ee9ad7" name="e2fsprogs" arch="src">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="3ca82cd15c5bdc69554e6328b4a9784c594e6d7f2abfdabd7554fdce895a60d9" name="e2fsprogs" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="4610ca22659701eaef413a0e382b0b93428789b16eb63d5678db59bb5c1c87f9" name="e2fsprogs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="86b85d4194705c33412473540b606a611374cf818856afeef6bb94bd6ffb29a6" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
</package>
<package pkgid="e299d3f2a911bf74e700cf858047828f9e7941370e3e16755cf877a313d4a8b5" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1430827200">- enigmail 1.8.2, fixing the following bugs:
  * Punycode domain handling incorrect
  * Mail is not automatically encrypted anymore. Enigmail does not
    warn about unencrypted mail
  * Decrypted message, but "Error - decryption failed" or "Error -
    no matching private/secret key found to decrypt message"
  * Sign Button indicates wrong status on recipient rules
  * Decryption filter merges Received headers incorrectly
  * Questionmarks "???" in Enigmail menu and encrypting message
    only with senders key
  * Enigmail key management fails always fails to connect to
    keyservers when searching for keys
  * TB account hangs when filter for storing decrypted emails is
    applied to IMAP account
  * Deleting multiple keys in key manager fails
  * INV_RECP error message confuses new users</changelog>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
</package>
<package pkgid="f0f7ba01421aba44c6c4e27b1b0ac60aa4d0e689309054dc6470f8a239805414" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.5" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
</package>
<package pkgid="9263de36e94d96c6e25e9ef4c9a54722c9814c9bcb6b72f06d700dba9cda5a1c" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.5" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1456747200">- enigmail 1.9:
  * Added support for GnuPG 2.1
  * Backup and restore of keys and Enigmail settings
  * Messages are sent using PGP/MIME by default
  * Several new dialog windows that improve usability
  * Added support for protected headers (off by default)
  * There is no binary component anymore - this version runs on all
    platforms for which Thunderbird and GnuPG are available.
  * gpg2 2.0.7 or newer required
  * no longer run tests, a utility is not available</changelog>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
</package>
<package pkgid="b709b4895e51d5e05110345bf97aa9aef049bc707ce469ffa14bc5ec3b3bd387" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.6" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
</package>
<package pkgid="10f4dcabede1c95198fc11fa599aa2520c44e0458fc28f0e40a719ce2ba65dc8" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.6" rel="lp150.2.9.1"/>
  <changelog author="astieger@suse.com" date="1460030400">- enigmail 1.9.1:
  * fix recignition of MS Exchange messages
  * fix slow PGP/MIME signature verification with attachments
  * fix freeze with large mail with signature
  * fix backup/restore UI
  * fix UI issues with German umlauts</changelog>
  <changelog author="astieger@suse.com" date="1462276800">- enigmail 1.9.2:
  * Add support for Zimbra OpenPGP encrypted messages
  * Fix decrypt loop with S/MIME signed mails
  * Fix silently failing import of revocation certificate
  * Fix E-Mail saved as draft and reopened will show empty message
  * Fix multipart/signed mail without micalg parameter blank body
  * Fix display of changed key expiration date</changelog>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
</package>
<package pkgid="ad5060daed81f7326379faf6bfcf14fec4e4a2a34dad209fb42e418bbcf07815" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.7" rel="lp150.2.12.1"/>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
</package>
<package pkgid="27dfa4f06602569adb7c748092b54ec7a0b1be31419bf3f436c84f01f60cda8d" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.7" rel="lp150.2.12.1"/>
  <changelog author="astieger@suse.com" date="1465387200">- enigmail 1.9.3:
  * Fix Decrypt loop with S/MIME self-signed mails
  * Fix Manage UIDs throws errors if called from key properties dialog
  * Fix No error message if configured key not found on keyring
  * Fix Enigmail munges display of messages with S/MIME signature
  * Allow importing of expired keys</changelog>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
</package>
<package pkgid="a0522a44693b1f86447c104fc63a7721d087790f89567c5c9b769191d74b54af" name="enigmail" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp150.2.15.1"/>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
</package>
<package pkgid="a3c0fbb260b57161fc4681fd14fd39257225db3d4d32b553ffa9fe4ed77bc572" name="enigmail" arch="x86_64">
  <version epoch="0" ver="2.0.8" rel="lp150.2.15.1"/>
  <changelog author="astieger@suse.com" date="1468411200">- enigmail 1.9.4:
  * Improved compatibility with Send Later add-on
  * Various bugs fixed</changelog>
  <changelog author="astieger@suse.com" date="1473076800">- enigmail 1.9.5:
  * fix failure during GnuPG installation
  * Include AppData
  * Forwarding an encrypted message results in empty body
  * Fix parsing ofr last '=' in quoted-printable encoded
    encrypted/signed parts
  * fix regression in key selection for Per-Recipient-Rules
- license is MPL-2.0, include license text</changelog>
  <changelog author="astieger@suse.com" date="1479038400">- enigmail 1.9.6:
  * Better detection is decrypted message is displayed
  * New variant of PGP/MIME messages broken by MS-Exchange
  * Make key importing more robust</changelog>
  <changelog author="astieger@suse.com" date="1479729600">- enigmail 1.9.6.1:
  * fix locating of GnuPG executable (openSUSE not affected)</changelog>
  <changelog author="wr@rosenauer.org" date="1494849600">- enigmail 1.9.7:
  * This version fixes a compatibility bug on Thunderbird 52 that
    makes keyserver up/downloads unusable</changelog>
  <changelog author="astieger@suse.com" date="1499256000">- enigmail 1.9.8:
  * fix blocking in the mail sending process (boo#1047252)</changelog>
  <changelog author="astieger@suse.com" date="1499601600">- enigmail 1.9.8.1:
  * handle EINTR cases of child process terminations</changelog>
  <changelog author="astieger@suse.com" date="1503403200">- enigmail 1.9.8.2:
  * fixed wrong translation that break keygen dialog
  * make getting time format more robust
  * Add support for new type of broken exchange messages</changelog>
  <changelog author="astieger@suse.com" date="1507118400">- enigmail 1.9.8.3:
  * move calling of subprocess library to the end</changelog>
  <changelog author="thardeck@suse.com" date="1513771200">- enigmail 1.9.9, fixing multiple vulnerabilities (boo#1073858):
  * Enigmail could be coerced to use a malicious PGP public key
    with a corresponding secret key controlled by an attacker
  * Enigmail could have replayed encrypted content in partially
    encrypted e-mails, allowing a plaintext leak
  * Enigmail could be tricked into displaying incorrect signature
    verification results
  * Specially crafted content may cause denial of service</changelog>
  <changelog author="astieger@suse.com" date="1522065600">- enigmail 2.0:
  * The Encryption and Signing buttons now work for both OpenPGP
    and S/MIME. Enigmail will chose between S/MIME or OpenPGP
    depending on whether the keys for all recipients are available
    for the respective standard.
  * Support for the Autocrypt standard, which is now enabled by
    default.
  * Support for Pretty Easy Privacy (p?p) is implemented in
    Enigmail.
  * Support for Web Key Directory (WKD) is implemented. Enigmail
    will try to download unavailable keys during message
    composition from WKD. GnuPG 2.2.x is used the provider
    supports the Web Key Service protocol, users can also use
    Enigmail to upload keys to WKD.
  * The message subject can now be encrypted and replaced with a
    dummy subject, following the Memory Hole standard for
    protected Email Headers.
  * The keys on the keyring are automatically refreshed from
    keyservers at an irregular interval.
  * Enigmail was turned into a "restartless" addon. That is, once
    Enigmail is installed, subsequent updates will be installed
    without needing to restart Thunderbird.
  * Keys are internally addressed using the fingerprint instead of
    the key ID.
- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1522756800">- enigmail 2.0.1, addressing several issues found in 2.0:
  * S/MIME signing/encryption not working correctly, if Enigmail
    is not enabled for an account
  * Emails fail to decrypt if the sender address contains brackets
  * Autocrypt-headers may flip manually created per-recipient rules
  * The key manager does not load if no key on the keyring</changelog>
  <changelog author="astieger@suse.com" date="1523620800">- enigmail 2.0.2, addressing more regressions in 2.0/2.0.1:
  * protected headers should not check for force-display part
  * Incorrectly displayed subject line in writing dialog when
    forwarding
  * Error in Preferences Dialog upon loading
  * Autocrypt messages were unreadable without Enigmail</changelog>
  <changelog author="astieger@suse.com" date="1525867200">- enigmail 2.0.3 addresses the following issues (bsc#1092581):
  Stability and functionality:
  * Thunderbird may at displaying a message with an encrypted e-mail
  * Crash from processing double encrypted PGP/MIME message
  * Specific UI interaction sequence may prevent editing OpenPGP
    settings
  * Filter might not not executed at Thunderbird startup for ne
    message
  * gpg not terminated correctly when canceling "Import Key"
  Encryption/Decryption:
  * Saving encrypted draft leaks subject (even if protected headers
    are used)
  * manual PGP/MIME sig verification not working
  * Autocrpyt "addr" address might not match "From" header
  * Viewing S/MIME signed email disables PGP signature checks
  * S/MIME signing/encryption defaults not applied correctly
  E-mail subject handling:
  * Double "Re:" prefix on replies
  * "Re:" prefix on subject line disappears when editing encrypted,
    saved draft
  * Encrypted Message" subject in reply messages</changelog>
  <changelog author="astieger@suse.com" date="1526472000">- enigmail 2.0.4:
  * CVE-2017-17688: CFB gadget attacks allowed to exfiltrate
    plaintext out of encrypted emails. enigmail now fails on GnuPG
    integrit check warnings for old Algorithms (EFAIL, bsc#1093151)
  * CVE-2017-17689: CBC gadget attacks allows to exfiltrate
    plaintext out of encrypted emails (EFAIL), bsc#1093152)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- enigmail 2.0.5:
  * Improvements on previous fixes on CVE-2017-17688, bsc#1093151
    and CVE-2017-17689, bsc#1093152 (EFAIL):
  - do not decrypt MIME parts unnecessarily
  - improve Error Message for Missing MDC</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- enigmail 2.0.6:
  * Replies to a partially encrypted message may have revealed
    protected information - no longer display PGP/MIME message
    part followed by unencrypted data (bsc#1094781)
  * Fix signature Spoofing via Inline-PGP in HTML Mails
  * Fix filter actions forgetting selected mail folder names</changelog>
  <changelog author="astieger@suse.com" date="1527854400">- enigmail 2.0.6.1:
  * fix compatibility issue with Thunderbird 60b7
  * disallow plaintext (literal packets) outside of encrpyted
    packets</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- enigmail 2.0.7:
  * CVE-2018-12020: Mitigation against GnuPG signature spoofing:
    Email signatures could be spoofed via an embedded "--filename"
    parameter in OpenPGP literal data packets. This update prevents
    this issue from being exploited if GnuPG was not updated
    (boo#1096745)
  * CVE-2018-12019: The signature verification routine interpreted
    User IDs as status/control messages and did not correctly keep
    track of the status of multiple signatures. This allowed remote
    attackers to spoof arbitrary email signatures via public keys
    containing crafted primary user ids (boo#1097525)</changelog>
  <changelog author="michael@stroeder.com" date="1533470400">- enigmail 2.0.8:
  This release addresses a security issue and
  solves a few regression bugs.
  * a security issue has been fixed that allows an attacker to prepare
    a plain, unauthenticated HTML message in a way that it looks like
    it's signed and/or encrypted (boo#1104036)</changelog>
</package>
<package pkgid="4c21f20099c15d18e40d7e47090c284e4f4cbd59783cf951d96e0e26583301fd" name="exiv2" arch="src">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="67b82f3717497c488e76faadfc0cc470dba478f11d14389c72a35ea33ddfedbf" name="exiv2" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="a99a6457675a270984778dedef2ff488cfa0fb7d63dd57a136b9720c8a5be734" name="exiv2-lang" arch="noarch">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="ecb387b515b2389d07d708a0d83c4ba391cad4df63b7e35e77fffe07566ce58a" name="exo-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="8f8bace23968451635c7a77d0d217d7c171c1941e9665d826c8a72f4299ba5b4" name="fate" arch="src">
  <version epoch="0" ver="1.6.0.5" rel="lp150.2.3.1"/>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
  <changelog author="jplack@suse.com" date="1512734400">- bugfix release 1.6.0.4
  * fix #1071535 - Prio P1: Changes to Dev/QA in ECO tab are not recognized or saved
  * fix #962999  - CSS: Font size 8pt too small for reading
  * fix #1059515 - Fate repeatedly crashing
  * fix #1054023 - Can change ECO fields after initial save
  * fix #1047302 - Duplicated features not visible in FATE
  * fix #984459  - Crash after not saving new entry and quitting</changelog>
  <changelog author="jplack@suse.com" date="1527163200">- bugfix release 1.6.0.5
  * fix #1094520 - New or imported features are sometimes not
  shown/editable, thanks to Dwain Sims
  * fix #1081921 - explicitely select feature if it is the first one
  * enhanced ECO approver handling
  * implement adding of single ECO approver
  * fix #1080586 - Misleading label in ECO form
  * fix #1088478 - Prefs can have invalid Products, thanks to Adam Majer
  * integrate experimental list and tree view (sparetime project) to
    help SLE12SP4 business value process experiment
  * make some space in PriorityTable for context menu to select
  * give additional productid for each approver for each diff or history
  * include caching of productId for ECO approvers</changelog>
  <changelog author="joachim@suse.de" date="1527249600">- remove own old definition of CHECK_CXX_SYMBOL_EXISTS to compile
  again with cmake 3.11+</changelog>
</package>
<package pkgid="d7488acd169b44cac5c6356840e56835471bcf1a3359d39f103496ef1946c20c" name="fate" arch="x86_64">
  <version epoch="0" ver="1.6.0.5" rel="lp150.2.3.1"/>
  <changelog author="jplack@suse.de" date="1458561600">- update to version 1.5.5.5
  * add editing person as additional requester when he adds a new
    product to the feature</changelog>
  <changelog author="joachim@suse.de" date="1481803200">- added requirement for oxygen5-icon-theme (bsc#980276)</changelog>
  <changelog author="jplack@suse.com" date="1484827200">- update to version 1.5.5.6
  * make fate.spec clean for "spec-cleaner"
  * cleanup of cmakefiles, adapting to current style and syntax with much help
    from Tomas Chvatal
  * removed code for unused query-history tracking
  * replace deprecated code from qt3 compatability remaining from last port
  * remove code for unused tagging and voting
  * clean old outdated comments/code from specfile, use new Makefile
  * included patches from dmolkentin to fix fate process help view
  * switched to using repo on new gitlab.suse.de, adjusted update script
  * fix ProgressWidget as a final step away from Qt3 remainders
  * fixes BSC#980276, #978153, #956270, #1004536, #957827, #934673
  * fixes 8+ years old bsc#401198: Saving changes list of displayed features</changelog>
  <changelog author="jplack@suse.com" date="1485259200">- removed old style 'norootforbuild'
- require oxygen-icon-theme instead of oxygen5-icon-theme (bsc#1015881)</changelog>
  <changelog author="jplack@suse.com" date="1485432000">- update to version 1.5.5.7
  * make comments always editable by original author
  * bsc#1006192: have UTC time stamps in comments as in openfate
  * bsc#940928: fix formatting and limit comment threads
  * bsc#967367: remove bookmarks feature which is currently broken
  * bsc#1004536 : create an extra list for ECO stakeholders in feature view</changelog>
  <changelog author="jplack@suse.com" date="1485604800">- more fixes:
  * bsc#837526: fix filter in productviewer, rearrange columns and layout,
    also show feature open dates and deadlines
  * bsc#964882: fix crash, QList::first() returns undefined on empty list, so
    check first</changelog>
  <changelog author="jplack@suse.com" date="1485864000">- replaces outdated inttools@ mail adress by featureadmin@ (bug via email)</changelog>
  <changelog author="jplack@suse.com" date="1486728000">- weekend update, pl2 ;-)
  * the mouse wheel is now (better) usable in the general tab of
    the feature editor
  * better label for priority editor table
  * bsc#1024737: update fate.desktop file to have official menu
    categories listed</changelog>
  <changelog author="jplack@suse.com" date="1488801600">- update to version 1.5.5.8
  * bsc#1028004: Error when generating a query that uses milestones
  * remember DeltaDialog size over restart
  * make diffs in 'Changes' dialog coloured</changelog>
  <changelog author="jplack@suse.com" date="1488888000">- remove dependency to libBoost, contribution from Michael Matz</changelog>
  <changelog author="jplack@suse.com" date="1489665600">- limit query title label to a single line, EMail bug from Kai Dupke</changelog>
  <changelog author="jplack@suse.com" date="1496923200">- test build of version 1.6</changelog>
  <changelog author="jplack@suse.com" date="1496923201">- update to version 1.6
  * override the productName in features with the one from the database
    if available
  * remove "show Document Source" functionality nobody really needs
- Easier workflow fo Save/SaveAll features (bsc#1036753):
  * add save actions w/ kbd shortcuts to separate FeatureViews
  * add save actions to menues and tool bars
  * Fix naming for explicit number queries
  * adding actions for save_feature and save_all_features to FeatureView
  * change Query shortcut from Ctrl-S to Ctrl-F
- Multiple changes at once:
  * distinguish between updateProduct and addProduct in
    PriorityTable::updateProductData
  * change editable flag of requester prio dynamically in PriorityTable
  * always keep old values in PriorityTable
  * avoid usage of QSignalMapper in PriorityTable
  * use Feature::updateProduct in PriorityTable
  * implement MultiFeature::updateProduct
  * implement Feature::updateProduct()
  * move down PriorityTable::addAsRequester() for newly added products to
    class Feature
  * pass a real list in Feature::products() instead of a const reference
  * pass a real list of actors up instead of a reference so that the compiler
    does not optimize in multifeature
  * use class MultiOpView in FeatureView
  * implement class MultiOpView
  * implement class MultiFeature
  * avoid excess signals in Feature::removeProduct
  * implement Priority::operator=
- Use class FeatureViewBase wherever appropriate:
  * SimpleEditor, more use of macro FeatureViewBase_setFeature
  * derive SimpleEditor from FeatureViewBase
  * also disconnect the other way round in FeatureViewBase_setFeature
  * prepare Simpleeditor for using FeatureViewBase
  * remove acccess includes in ecoeditor.cpp
  * include verticalpage.h directly for ecoeditor
  * split out VerticalPage from simpleeditor into separate files
  * use FVB extension in EcoEditor, PriorityTable, FeatureDisplay,
    FeatureDiffView and FeatureActorEdit
  * derive class FeatureView from FeatureViewBase
  * extend class FeatureViewBase
- Enhance presenting Diffs (bsc#1039533 and more):
  * dimm green and red by 10% used for presenting changed lines in
    FeatureViewDiff
  * use monospaced font for presenting diffs
- Simpleeditor:
  * refactor to use new class Feature signals
  * avoid cursor position reset (wrong feedback from Feature) when editing in
    QLineEdit
  * use QLineEdit instead of KLineEdit
  * fix richtext conversion in all RichTextEdit widgets, report from
    behlert@suse.de
- Multiple FeatureView windows:
  * set default size 800x600 for newFeatureView
  * fix crash when calling context menu outside of table
  * fix crashes on reload of the feature
  * open new window on signal requestFeatureView in MainView
  * implement a context menu just to signal a requestFeatureView(Feature *)
  * implement class FateTableWidget to avoid selection on right mouse button
    click
  * remove obsoleted slot FeatureTableView::updateTitle
  * make ProductMap a singleton class and use it in FeatureView, EcoEditor,
    PriorityTable, ApproverListEdit, SimpleEditor, MainView
  * added TODO comments about what needs to be done
  * update signal connections to FeatureView
  * eliminate MainView::selectFeature() only used once
  * for initial feature selection also highlight it in FeatureListView
  * add helpful coments to mainview.cpp
  * remove FeatureView::save() finally
- Make ECO code compliant to refactored class feature
  * avoid warnings from early translation
  * fix FeatureView::startECO
  * signal modified moved from VerticalPage where it disappeared
  * remove duplicated code and fix wrong usage of derived virtual methods
  * eliminate obsolete FeatureView::saveData()
  * transform EcoEditor to derive from FeatureViewBase
  * implement signal Feature::saveECO()
- Refactor SimpleEditor to use new signals of class Feature:
  * fix problems saving single modified feature (email report from
    Matthias Eckermann)
  * implement FeatureDisplay::updateView for obvious reasons
  * comment out currentFeatureAboutToBeSaved
  * remove connects to deprecated signal modified()
  * remove FeatureView::slotTitleChanged
  * remove obsoleted code and declarations
  * FeatureView: no more need to actively update other widgets
  * remove modified signals, slots and flag, class Feature keeps state
  * remove signal titleChanged, class Feature has it now
  * remove signal titleChanged() form FeatureView which now comes from Feature
  * remove no longer needed method saveData(bool)
  * use-feature-signals for ReleaseNotesPage, InternalPage, MiscPage,
    PartnerPage, GeneralPage
  * get independent from definitions of documentationStatus in FeatureData
  * remove dead, commented or debug code
  * RichtextEditor: implement signal textEdited(s), make setPlainText a slot
  * RichtextEditor: update copyright notice
- New product&amp;priority editor:
  * update feature data model when deleting a single product in PriorityTable
  * fix unintended changes of feature in PriorityTable::setArch
  * add completion to PriorityTable::addAsRequester
  * priorityTable: remove warnings
  * transform PriorityTable to derive from FeatureViewBase
  * eliminate PriorityTable::clear
  * show milestone column only when needed
  * cleanup PriorityTable::addProduct
  * remove passthrough slot for priorityTable
  * get confusing column and row out of the names, use product_ix and attribute
    instead
  * remove scrollbarpolicy that is without effect
  * delete unused archeditor
  * cleanup debug and warning messages
  * split out common code from changeProduct and editProduct to method void
    changeProduct(int, QString);
  * rename editProduct to editSingleProduct, be less confusing same with
    addProduct(void) to slotAddProduct
  * prioritytable: simplify and clean code a bit
  * prepare for extended status handling
  * fix status tooltip and add for duplicates and products cleanup status
    handling
  * eliminate mEditing, setEnabled() is enough
  * also add products through product pulldown
  * add tooltips to row headers
  * removed always hidden duplicateRow and unsuse TableCol enum
  * create a popup QMenu for editing single products
  * simplify setXX functions, delete unused
  * pass generalpage in constructor of PriorityTable
  * eliminate slotEditProductList()
  * simplyfy code and loops, heavy use of foreach macro
  * disable text editing of product name item
  * adjust style for comboboxes
  * remove KDE3 #if remainders
  * Convert  mEntries to be a QList&lt;Entry&gt;
  * prioritytable: implement size hints and resize handling
  * derive PriorityTable directly from QTableWidget
  * remove unused sort function
  * remember products by name rather than id
  * eliminate productlisteditorbase
  * exchange order of PrjMgr and PM, PM first
  * edit architectures through QxtCheckComboBox now
  * simplyfy setComboItem and use it where possible
  * Turn priority dialog by 90 degrees
- New ActorList Editor:
  * Merge branch 'new-actorlist-editor'
  * fix item association in ActorListEdit::showActorMenu
  * highlist role when it contains yourself
  * use FeatureActorEdit instead of ActorListEdit in GeneralPage
  * commentDialog acts directly on Feature object
  * implement class FeatureActorEdit as a FeatureViewBase wrapper around
    ActorListEdit
  * enable context menu on left click as well
  * remove Delete shortcut from ListEdit which does not work as the action
    needs to be added to a global widget
  * fix updating of display
  * fix functionality when roleHidden is set
  * fix crash in removeActor
  * fix layout for other dialogs using ActorListEdit
  * updateView is virtual
  * use SIGNAL ActorListEdit::actorsEdited in simpleeditor
  * implement ActorListEdit::showActorMenu
  * implement ActorListEdit::slotAddMyself(QString roleId) and heavily use it
  * remove all radio and check boxes from ActorEditor
  * remove debugging messages
  * refine layout mgmt for ActorListEdit
  * implement ActorListEdit::sizeHint() and minimumSizeHint()
  * remove commented broken code
  * nicer name list and tooltip
  * make sure the list has the requester first, followed by ProdMgr
  * remove remaining KDE deps
  * make slotXXitem methods work again
  * let addActor(QSharedActor *) handle duplicates
  * add another findRow(QSharedActor*) method
  * fix setToolTip and move into updateView
  * remove unused ActorListEdit::actorUpdated(), adjust removeActor methods
  * First stage: - exchanged role and person column which now contains a list of
    all person in that role - loading and storing of the data works - all slots
    need testing/adjusting
  * use Actor::displayName() in eco.cpp, remove unused static method
  * ListEdit: enhance layout management and reimplement removeRow() for that
  * ListEdit: sizeHint() is virtual
  * ListEdit: remove unused kDebug
  * implemented ListEdit::insertRow() methods
  * remove unused stuff, eliminate roleHidden and listView in ActorListEdit
  * adjust ListEdit's sizePolicy
  * deprecate ListEdit::listView()
  * choose a nicer label for roles and actors
  * fix toolTips using Qt4 style finally
  * implement signal actorsEdited() replacing signal modified() and make
    setActors() a slot
- Configurable tabbed FeatureView:
  * some tuning for FeatureDiffView
  * better default tabs in FeatureView
  * add a placeholder for a multiOperation widget
  * initialize newly added FeatureViewBase tab with current feature data
  * FeatureDiffView: keep config over restart
  * implement FeatureDiffView::setFeature(Feature *), eliminate diff() and
    showDiff()
  * implement FeatureDiffView::configure (dialog)
  * transform FeatureDiffView to derive from FeatureViewBase
  * transform FeatureDisplay to derive from FeatureViewBase
  * implement class FeatureViewBase
  * adjust CMakeLists.txt and editor/featurediffview* to compile again in the
    new location
  * mv ui/diffgenerator to editor/featurediffview
  * use new FeatureDiffView in FeatureView
  * transform DiffGenerator to class FeatureDiffView
  * replace FeatureMap::showDiff dialog by the data provider origFeature()
  * show ECO tab when selected feature has an ECO section
  * remove all bottom buttons in ECOEditor, SimpleEditor and FeatureDisplay
  * implement configurable QTabWidget w/ all bottom buttons in a QMenu
- Eliminate use of some KDE widgets including KTabWidget
  * directly derive FeatureView from QTabWidget, eliminate KTabWidget
  * SimpleEditor: port from KTabWidget -&gt; QTabWidget
  * directly derive ECOEditor from QTabWidget
  * MainView: better icons for reload actions
  * MainView: port from KTabWidget -&gt; QTabWidget
  * use class RelationTreeMap as a singleton class
  * reduce usage of KLineEdit
  * replace KTextEdit
  * replace KPushButton
- Refactor class Feature model alike
  * simplify Feature::productByName
  * Do not allow duplicate actors (bsc#961147)
  * Feature::addProduct() does now also work for update
  * implement Feature::removeProduct(const QString &amp;id)
  * implement ProductContext::operator=
  * add architecture strings to featuredata
  * fix FeatureData::Actor::match to handle empty identity special and not as a
    catchall wildcard
  * make FeatureData::Actor::operator= and operator!= const
  * adding FeatureData::Actor::displayName() and Actor::displayEmail()
  * feature: export assigned featureMap
  * avoid crash on destruction of HtmlView
  * do not use intelligent setter functions while parsing feature
  * update copyright notice, fold long lines
  * feature: optimize/minimize emitting of signals
  * feature: remove unused method removeActorRole()
  * feature: simplify code
  * featuremap: pass through signal Feature::featureChanged()
  * implemented Feature::operator=
  * make handling of documentationStatus in FeatureData case insensitive, return
    upcase-first strings
  * implement emitting of signals
  * make class Feature a decendent of QObject
  * make setter methods public slots for class Feature
  * remove unused methods from class Feature
  * remove or comment support for feature tagging/voting, disable code compilation
  * removed support for unused feature element 'effort'
- Also resolves bugzillas:
  * bsc#887741  normal quit of fate client triggers KCrash
  * bsc#961147  Duplicate Person Box
  * bsc#1024737 FATE: Does not show up in menu
  * bsc#1032240 Segfault when removing Info Provider
  * bsc#1036753 Two clicks required to save a FATE entry
  * bsc#1032321 No save button after changing product
  * bsc#1032481 Unable to save a feature
  * bsc#1040654 Rename SLE-13-HPC to SLE-15-HPC</changelog>
  <changelog author="jplack@suse.com" date="1498219200">- bugfix release 1.6.0.1
  * bsc#1044954 FATE crashes on selected feature in query (TumbleWeed only)</changelog>
  <changelog author="jplack@suse.com" date="1498564800">- bugfix: bring back signal FeatureMap::featureReloaded</changelog>
  <changelog author="jplack@suse.com" date="1501502400">- bugfix release 1.6.0.2
  * fix bsc#1050997 in query by ids, thanks to reporter afaerber@
    and aschwab@
  * fix freeze/unfreeze in FeatureTableView
  * do not copy xml representation in Feature::operator=
  * eliminate public method FeatureMap::recordChange that nobody needs
  * FeatureMapListView: derive directly from FeatureTableView
  * fix reloading of single features, eliminate signal
    FeatureMap::featureReloaded()
  * let FeatureView handle its stuff alone in MainView
  * handle signals from FeatureMap properly in FeatureView if they apply
  * add a new public method FeatureMap::addNewFeature, making
    addFeature/addFeatures protected
  * hide progress bar after Feature import or cloning
  * make Feature::operator= an internal operation for friend classes only
  * do not bail out on new Features in FeatureDiffView::showFeatureChanges
  * remove non-emitted signal FeatureDisplay::featureSelected(Feature*)
  * remove FeatureMap* from FeatureView constructor
  * fix bug in Feature::operator=</changelog>
  <changelog author="jplack@suse.com" date="1502712000">- bugfix release 1.6.0.3
  * fix #1049390 - Standard approvers are not prepopulated anymore in ECOs
  * fix #1052788 - attachments are accepted , but not added / referenced
  * fix #1053025 - Crash when trying to approve an ECO
  * fix #1052391 - Cannot add Engineering Manager
  * fix #1052799 - Cannot change Priority</changelog>
  <changelog author="jplack@suse.com" date="1512734400">- bugfix release 1.6.0.4
  * fix #1071535 - Prio P1: Changes to Dev/QA in ECO tab are not recognized or saved
  * fix #962999  - CSS: Font size 8pt too small for reading
  * fix #1059515 - Fate repeatedly crashing
  * fix #1054023 - Can change ECO fields after initial save
  * fix #1047302 - Duplicated features not visible in FATE
  * fix #984459  - Crash after not saving new entry and quitting</changelog>
  <changelog author="jplack@suse.com" date="1527163200">- bugfix release 1.6.0.5
  * fix #1094520 - New or imported features are sometimes not
  shown/editable, thanks to Dwain Sims
  * fix #1081921 - explicitely select feature if it is the first one
  * enhanced ECO approver handling
  * implement adding of single ECO approver
  * fix #1080586 - Misleading label in ECO form
  * fix #1088478 - Prefs can have invalid Products, thanks to Adam Majer
  * integrate experimental list and tree view (sparetime project) to
    help SLE12SP4 business value process experiment
  * make some space in PriorityTable for context menu to select
  * give additional productid for each approver for each diff or history
  * include caching of productId for ECO approvers</changelog>
  <changelog author="joachim@suse.de" date="1527249600">- remove own old definition of CHECK_CXX_SYMBOL_EXISTS to compile
  again with cmake 3.11+</changelog>
</package>
<package pkgid="e99f4dd859414d1e5e6060e0fc4ded9ec25809661dac1c97bb7858b1193d2afc" name="feh" arch="src">
  <version epoch="0" ver="2.27.1" rel="lp150.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1472731200">- update to 2.17.1
- added feh-makefile_app.patch -- fix install location of icons
- refreshed feh-makefile_optflags.patch
  * Install feh icon (both 48x48 and scalable SVG) to /usr/share/icons
    when running "make install app=1"
  * Fix --sort not being respected after the first reload when used in
    conjunction with --reload
  * All key actions can now also be bound to a button by specifying them
    in .config/feh/buttons. However, note that button actions can not be
    bound to keys.
  * Rename "menu" key action to "toggle_menu", "prev" to "prev_img" and
    "next" to "next_img". The old names are still supported, but no longer
    documented.
  * feh now also sets the X11 _NET_WM_PID and WM_CLIENT_MACHINE window
    properties
  * Fix compilation on systems where HOST_NAME_MAX is not defined</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.18.2
  * Fix image-specific format specifiers not being updated correctly
  * New key binding: ! -  zoom_fill (zoom to fill window, may cut off image parts
  * Disable EXIF-based auto rotation by default
  * add --auto-rotate option to enable auto rotation</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492603200">- update to 2.18.3
- fixes boo#1034567 - CVE-2017-7875
  * Fix double-free/OOB-write in E17 IPC. This only affects the background
    setting options and requires a malicious X11 app to run alongside feh
    and pretend to be an E17 window manager.
  * Fix image-specific format specifiers not being updated correctly in thumbnail
    mode window titles
  * Fix memory leak when closing images opened from thumbnail mode
  * Fix a possible out of bounds read caused by an unterminated string when
    using --output to save images in long paths
  * Fix out of bounds read/write when handling empty or broken caption files.
  * Fix memory leak when saving a filelist or image whose target filename
    already exists.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497787200">- update to 2.19
  * Follow the freedesktop.org Thumbnail Managing Standard by saving thumbnails
    in ${XDG_CACHE_HOME}/thumbnails (defaulting to ~/.cache/thumbnails)
    instead of ~/.thumbnails
  * Install app icons with the correct permissions of 644
  * Documentation improvements</changelog>
  <changelog author="aavindraa@gmail.com" date="1507464000">- Drop feh-2.12-fix_sighandler.patch, fixed upstream
- update to 2.21
  * Add toggle_fixed_geometry (g) key binding to toggle window auto-resize
  * Improve control via terminal input
  * Fix crash (segmentation fault) when using feh -O in non-index mode
  * Fix --force-aliasing (and possibly other options) missing from ~/.fehbg
    when using them for background setting
- includes changes from 2.20
  * Fix clang/gcc warnings
  * Add support for control via terminal input. feh will read key presses
  from the controlling terminal and handle them like X11 key presses
  inside the feh window. Note that at the moment, only lower / upper case
  ASCII letters and a very small set of additional keys are supported.
  * Fix broken ImageMagick support (see --magick-timeout) when using some ImageMagick versions
  * Remove images from the filelist if they were removed by executing a user-defined action
- includes changes from 2.19.1 - 2.19.3:
  * Fix Shift modifier not being recognized for tab, space and similar keys.
  This lead to keybindings like Shift+Tab or Shift+Space being parsed as
  if the Shift modifier had not been specified
  * Show ImageMagick loader errors unless --quiet is specified
  * Fix crash when handling certain media keys (introduced in 2.19.1)
  * Save geometry data in .fehbg when setting a wallpaper with --geometry
  * Fix Imlib2 developer warning and improve out-of-memory error message when using --thumbnails / --index on large directories</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Rebase feh-makefile_app.patch
- update to 2.22
  * Add support for CURL_CA_BUNDLE environment variable when loading
  images via HTTPS
  * Fix ~/.fehbg not being updated when setting a wallpaper via menu
  (broken in 2.21)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- update to 2.22.1
  * Allow ~/.fehbg to be sourced (instead of executed) from other
  shell scripts again (broken in 2.22)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- update to 2.22.2
  * Fix HTTPS certificate errors on some systems (broken in 2.22)</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- update to 2.23
  * Fix broken thumbnail/index windows when using --scale-down
  * Use Imlib2 as in-memory image cache (default size: 4MiB)
    noticable performance improvements, especially in small
    slideshows
  * Add --cache-size option to set Imlib2 image cache size
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Ensure neutrality of description.</changelog>
  <changelog author="avindra@opensuse.org" date="1517486400">- update to 2.23.1
  * The Makefile no longer honors CPPFLAGS and instead consistently
    uses CFLAGS for user-provided include paths
  * Fix %u format specifier in multiwindow and list modes
  * Minor performance improvements
  * Stability improvements when using --magick-timeout
- switch to https version of website
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518523200">- Remove BuildRequires on xorg-x11-* metapackages
- Remove unused buildRequires.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 2.23.2
  * Fix support for nested quotes in .config/feh/themes
- feh-makefile_app.patch
  * use DESTDIR variable
- spec file: simplify a bit</changelog>
  <changelog author="avindra@opensuse.org" date="1519646400">- update to 2.24
  * Improve performance when using --{max,min}-dimension in
    slideshow mode
  * Fix crash when using %m format specifier in slideshow mode</changelog>
  <changelog author="mvetter@suse.com" date="1520424000">- Update to 2.25
  * Add --version-sort option to enable natural sorting of file
    and directory names
  * Allow arbitrary X11 colors as -B/--image-bg argument
  * Improve --image-bg support and transparency handling in
  - -bg-* mode
  * Respect --geometry settings in --bg-fill mode
  * Add keybinding toggle_auto_zoom (default "Z") to toggle
  - -auto-zoom
  * Fix filelists specified by -f/--filelist not being reloaded
    when using --reload</changelog>
  <changelog author="avindra@opensuse.org" date="1520856000">- Update to 2.25.1
  * Re-render current image when toggle_fixed_geometry is input
  * Fix issues when using CFLAGS=-m64 on some gcc versions
- run spec-cleaner</changelog>
  <changelog author="pvorel@suse.cz" date="1525867200">- Update to 2.26
  * Save absolute file paths in ~/.fehbg, similar to behaviour prior
    to 2.21
  * Add %g (window dimensions) and %Z (precise zoom level) format
    specifiers
  * Improve -z/--randomize randomness</changelog>
  <changelog author="avindra@opensuse.org" date="1526126400">- Update to 2.26.1
  * Restore pre-2.21 ~/.fehbg behaviour. This fixes nondeterministic
    wallpaper setting when using --bg-* --randomize, issues when
    specifying --theme both in ~/.fehbg and on the commandline, and
    possibly other edge cases
  * Fix /tmp being cluttered with temp ImageMagick files when using
  - -magick-timeout and a conversion takes longer than allowed</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.26.3:
  * Properly escape --image-bg argument in ~/.fehbg (broken in
    2.26.1).
- Update to 2.26.2:
  * Show correct filelist position in windows opened from thumbnail
    mode.
  * Note that navigation is still not supported in those windows.
  * Improve support for key input from stdin.
  * Do not push menus off the screen when hitting screen limits.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532088000">- update to 2.27.1
- fix boo#1101466  - specify PREFIX also for build
  * Fix --keep-zoom-vp issues introduced in 2.27
  * Fix feh occasionally becoming unresponsive when asked
    to terminate via SIGINT/SIGQUIT/SIGTERM
  * Fix size_to_image ("w") command when both --scale-down and
  - -keep-zoom-vp are enabled
  * Fix --auto-zoom not being triggered on window resize events
    when --scale-down is enabled
  * Fix --auto-zoom conflicting with manual zoom
  * Prevent --zoom &lt;percent&gt; from blocking --scale-down in fullscreen
    / fixed geometry mode
  * Prevent --keep-zoom-vp from blocking the dynamic window resizing mechanism
  - Prevent automatic recalculation of the zoom ratio when
  - -keep_zoom_vp is enabled</changelog>
</package>
<package pkgid="4e6b36a23b7fbf20df6c75c1095e49868059d2dc6dbb3a4c552dac54b088bf30" name="feh" arch="x86_64">
  <version epoch="0" ver="2.27.1" rel="lp150.2.3.1"/>
  <changelog author="mimi.vx@gmail.com" date="1472731200">- update to 2.17.1
- added feh-makefile_app.patch -- fix install location of icons
- refreshed feh-makefile_optflags.patch
  * Install feh icon (both 48x48 and scalable SVG) to /usr/share/icons
    when running "make install app=1"
  * Fix --sort not being respected after the first reload when used in
    conjunction with --reload
  * All key actions can now also be bound to a button by specifying them
    in .config/feh/buttons. However, note that button actions can not be
    bound to keys.
  * Rename "menu" key action to "toggle_menu", "prev" to "prev_img" and
    "next" to "next_img". The old names are still supported, but no longer
    documented.
  * feh now also sets the X11 _NET_WM_PID and WM_CLIENT_MACHINE window
    properties
  * Fix compilation on systems where HOST_NAME_MAX is not defined</changelog>
  <changelog author="mimi.vx@gmail.com" date="1487937600">- update to 2.18.2
  * Fix image-specific format specifiers not being updated correctly
  * New key binding: ! -  zoom_fill (zoom to fill window, may cut off image parts
  * Disable EXIF-based auto rotation by default
  * add --auto-rotate option to enable auto rotation</changelog>
  <changelog author="mimi.vx@gmail.com" date="1492603200">- update to 2.18.3
- fixes boo#1034567 - CVE-2017-7875
  * Fix double-free/OOB-write in E17 IPC. This only affects the background
    setting options and requires a malicious X11 app to run alongside feh
    and pretend to be an E17 window manager.
  * Fix image-specific format specifiers not being updated correctly in thumbnail
    mode window titles
  * Fix memory leak when closing images opened from thumbnail mode
  * Fix a possible out of bounds read caused by an unterminated string when
    using --output to save images in long paths
  * Fix out of bounds read/write when handling empty or broken caption files.
  * Fix memory leak when saving a filelist or image whose target filename
    already exists.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1497787200">- update to 2.19
  * Follow the freedesktop.org Thumbnail Managing Standard by saving thumbnails
    in ${XDG_CACHE_HOME}/thumbnails (defaulting to ~/.cache/thumbnails)
    instead of ~/.thumbnails
  * Install app icons with the correct permissions of 644
  * Documentation improvements</changelog>
  <changelog author="aavindraa@gmail.com" date="1507464000">- Drop feh-2.12-fix_sighandler.patch, fixed upstream
- update to 2.21
  * Add toggle_fixed_geometry (g) key binding to toggle window auto-resize
  * Improve control via terminal input
  * Fix crash (segmentation fault) when using feh -O in non-index mode
  * Fix --force-aliasing (and possibly other options) missing from ~/.fehbg
    when using them for background setting
- includes changes from 2.20
  * Fix clang/gcc warnings
  * Add support for control via terminal input. feh will read key presses
  from the controlling terminal and handle them like X11 key presses
  inside the feh window. Note that at the moment, only lower / upper case
  ASCII letters and a very small set of additional keys are supported.
  * Fix broken ImageMagick support (see --magick-timeout) when using some ImageMagick versions
  * Remove images from the filelist if they were removed by executing a user-defined action
- includes changes from 2.19.1 - 2.19.3:
  * Fix Shift modifier not being recognized for tab, space and similar keys.
  This lead to keybindings like Shift+Tab or Shift+Space being parsed as
  if the Shift modifier had not been specified
  * Show ImageMagick loader errors unless --quiet is specified
  * Fix crash when handling certain media keys (introduced in 2.19.1)
  * Save geometry data in .fehbg when setting a wallpaper with --geometry
  * Fix Imlib2 developer warning and improve out-of-memory error message when using --thumbnails / --index on large directories</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Rebase feh-makefile_app.patch
- update to 2.22
  * Add support for CURL_CA_BUNDLE environment variable when loading
  images via HTTPS
  * Fix ~/.fehbg not being updated when setting a wallpaper via menu
  (broken in 2.21)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510056000">- update to 2.22.1
  * Allow ~/.fehbg to be sourced (instead of executed) from other
  shell scripts again (broken in 2.22)</changelog>
  <changelog author="aavindraa@gmail.com" date="1510142400">- update to 2.22.2
  * Fix HTTPS certificate errors on some systems (broken in 2.22)</changelog>
  <changelog author="avindra@opensuse.org" date="1514462400">- update to 2.23
  * Fix broken thumbnail/index windows when using --scale-down
  * Use Imlib2 as in-memory image cache (default size: 4MiB)
    noticable performance improvements, especially in small
    slideshows
  * Add --cache-size option to set Imlib2 image cache size
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="jengelh@inai.de" date="1514548800">- Ensure neutrality of description.</changelog>
  <changelog author="avindra@opensuse.org" date="1517486400">- update to 2.23.1
  * The Makefile no longer honors CPPFLAGS and instead consistently
    uses CFLAGS for user-provided include paths
  * Fix %u format specifier in multiwindow and list modes
  * Minor performance improvements
  * Stability improvements when using --magick-timeout
- switch to https version of website
- rebase feh-makefile_optflags.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518523200">- Remove BuildRequires on xorg-x11-* metapackages
- Remove unused buildRequires.</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- update to 2.23.2
  * Fix support for nested quotes in .config/feh/themes
- feh-makefile_app.patch
  * use DESTDIR variable
- spec file: simplify a bit</changelog>
  <changelog author="avindra@opensuse.org" date="1519646400">- update to 2.24
  * Improve performance when using --{max,min}-dimension in
    slideshow mode
  * Fix crash when using %m format specifier in slideshow mode</changelog>
  <changelog author="mvetter@suse.com" date="1520424000">- Update to 2.25
  * Add --version-sort option to enable natural sorting of file
    and directory names
  * Allow arbitrary X11 colors as -B/--image-bg argument
  * Improve --image-bg support and transparency handling in
  - -bg-* mode
  * Respect --geometry settings in --bg-fill mode
  * Add keybinding toggle_auto_zoom (default "Z") to toggle
  - -auto-zoom
  * Fix filelists specified by -f/--filelist not being reloaded
    when using --reload</changelog>
  <changelog author="avindra@opensuse.org" date="1520856000">- Update to 2.25.1
  * Re-render current image when toggle_fixed_geometry is input
  * Fix issues when using CFLAGS=-m64 on some gcc versions
- run spec-cleaner</changelog>
  <changelog author="pvorel@suse.cz" date="1525867200">- Update to 2.26
  * Save absolute file paths in ~/.fehbg, similar to behaviour prior
    to 2.21
  * Add %g (window dimensions) and %Z (precise zoom level) format
    specifiers
  * Improve -z/--randomize randomness</changelog>
  <changelog author="avindra@opensuse.org" date="1526126400">- Update to 2.26.1
  * Restore pre-2.21 ~/.fehbg behaviour. This fixes nondeterministic
    wallpaper setting when using --bg-* --randomize, issues when
    specifying --theme both in ~/.fehbg and on the commandline, and
    possibly other edge cases
  * Fix /tmp being cluttered with temp ImageMagick files when using
  - -magick-timeout and a conversion takes longer than allowed</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1528632000">- Update to 2.26.3:
  * Properly escape --image-bg argument in ~/.fehbg (broken in
    2.26.1).
- Update to 2.26.2:
  * Show correct filelist position in windows opened from thumbnail
    mode.
  * Note that navigation is still not supported in those windows.
  * Improve support for key input from stdin.
  * Do not push menus off the screen when hitting screen limits.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1532088000">- update to 2.27.1
- fix boo#1101466  - specify PREFIX also for build
  * Fix --keep-zoom-vp issues introduced in 2.27
  * Fix feh occasionally becoming unresponsive when asked
    to terminate via SIGINT/SIGQUIT/SIGTERM
  * Fix size_to_image ("w") command when both --scale-down and
  - -keep-zoom-vp are enabled
  * Fix --auto-zoom not being triggered on window resize events
    when --scale-down is enabled
  * Fix --auto-zoom conflicting with manual zoom
  * Prevent --zoom &lt;percent&gt; from blocking --scale-down in fullscreen
    / fixed geometry mode
  * Prevent --keep-zoom-vp from blocking the dynamic window resizing mechanism
  - Prevent automatic recalculation of the zoom ratio when
  - -keep_zoom_vp is enabled</changelog>
</package>
<package pkgid="48c665dec4c09a081385daf0b0420f24b595855c55fd184fa759fa6111f40c96" name="fence-agents" arch="src">
  <version epoch="0" ver="4.0.25+git.1524215631.8f9c770a" rel="lp150.2.3.1"/>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
</package>
<package pkgid="45ffe0ee7a80a5a80b2e6acc08146859b93643683139ae5c4fb880ba718a1c6c" name="fence-agents" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1524215631.8f9c770a" rel="lp150.2.3.1"/>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
</package>
<package pkgid="5068726936561498db90ada3e9b325a15a36e43457015b6e785bfdec43870a33" name="fence-agents-devel" arch="x86_64">
  <version epoch="0" ver="4.0.25+git.1524215631.8f9c770a" rel="lp150.2.3.1"/>
  <changelog author="aspiers@suse.com" date="1444651200">- Update to 4.0.21:
  * Documentation of new actions in manual pages is improved
  * Tests were improved and Travis CI is now used for every push
  * fence_virsh has new option --missing-as-off to support older XEN hosts
  * fence_ilo(2) now automatically attempts to use TLS1.0 if it is not
    possible to connect via SSLv3
  * fence_mpath re-create SCSI keys after reboot, monitoring of devices
    were improved too</changelog>
  <changelog author="kgronlund@suse.com" date="1452686400">- Update to 4.0.22:
  * New fence agent for VirtualBox
  * A lot of changes in fence_compute (OpenStack)
  * Re-enable fence_zvm
  * Support for APC firmware v6.x
  * Add hard-reboot option for fence_scsi_check script
  * Add option for setting Docker Remote API version
  * Fix HP Brocade fence agent (timeout settings, deprecated options)
  * New action 'diag' for fence_ipmi</changelog>
  <changelog author="kgronlund@suse.com" date="1453896000">- Package fence_dummy in fence-agents-devel package
- Clean up package</changelog>
  <changelog author="kgronlund@suse.com" date="1456142400">- Update to version 4.0.22+git.1455008135.15c5e92:
  + fence_cisco_ucs: Obtain status of device from different endpoint
  + fence_cisco_ucs: Add --missing-as-off
- Backport fence_compute (fate#320346) (bsc#964748)
- Patches for fence_compute (fate#320346) (bsc#964748)
  - fence_compute: Add --insecure command line argument
  - fence_compute: Add --region-name command line argument
  - fence_compute: Create nova client with API 2.11
  - fence_compute: Fix disabling force_down on node when action is on
  - fence_compute: Evacuate instances on all tenants
  - fence_compute: On list, don't list hypervisors but nova-compute services
  - fence_compute: Only list nova-compute services when getting status
  - fence_compute: Deprecate the domain option
- Add 0001-fence_compute-Add-insecure-command-line-argument.patch
- Add 0002-fence_compute-Add-region-name-command-line-argument.patch
- Add 0003-fence_compute-Create-nova-client-with-API-2.11.patch
- Add 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
- Add 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
- Add 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
- Add 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
- Add 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1467288000">- Update to version 4.0.23:
  * A lot of changes in fence_compute (OpenStack compute instance)
  * Obtain status of nodes from Cisco UCS correctly
  * New fence agent for AMT using openwsman
  * Python3 support
  * Fence agent for PVE can be used by non-root users
  * Parallel building and testing of fence agents
  * Fix occasional failures of APC fence agent
- Updated fence_compute patch set:
  - Add 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  - Add 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  - Add 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Add 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  - Add 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  - Add 0006-fence_compute-Fix-use-of-undefined-variable.patch
  - Add 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  - Add 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  - Add 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0001-fence_compute-Add-insecure-command-line-argument.patch
  - Remove 0002-fence_compute-Add-region-name-command-line-argument.patch
  - Remove 0003-fence_compute-Create-nova-client-with-API-2.11.patch
  - Remove 0004-fence_compute-Fix-disabling-force_down-on-node-when-.patch
  - Remove 0005-fence_compute-Evacuate-instances-on-all-tenants.patch
  - Remove 0006-fence_compute-On-list-don-t-list-hypervisors-but-nov.patch
  - Remove 0007-fence_compute-Only-list-nova-compute-services-when-g.patch
  - Remove 0008-fence_compute-Deprecate-the-domain-option.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1472212800">- Update to version 4.0.24:
  * Improve obtaining status on Cisco UCS devices
  * Fix issues with symlink installations
  * Fix documentation for fence_scsi and fence_mpath</changelog>
  <changelog author="kgronlund@suse.com" date="1480593600">- Update to version 4.0.24+git.1480563949.e67fcd4:
  * fence_azure_arm: add fencing agent for Azure Resource Manager
  * fence_lpar: Add support for IVM
  * fence_lpar: Handle exceptions when invalid output is read
  * fence_zvmip: Update XML metadata
  * fence_compute: fix ConnectionError by using full module name
  * fence_powerman: add fence agent for powerman
  * Suppress InsecureRequestWarning when ssl_insecure is given
  * compute: Correctly handle installations without tagged flavours
  * compute: Use the best available nova API version
  * compute: correctly implement 'on' when the force-down API call is available
  * compute: Correctly identify when the nodename already includes the supplied domain
  * compute: Ensure we can connect to nova when fixing the plug name
  * compute: Simpler check for nova force down compatibility
- Rebase and remove merged patches:
  * Remove 0001-fence_compute-Create-nova-client-with-API-2.11.patch
  * Remove 0002-fence_compute-Keep-compatibility-with-python-novacli.patch
  * Remove 0003-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Remove 0004-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Remove 0005-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Remove 0006-fence_compute-Fix-use-of-undefined-variable.patch
  * Remove 0007-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Remove 0008-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * Add 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * Add 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * Add 0004-fence_compute-Fix-handling-of-domain-None.patch
  * Add 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * Add 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * Add 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * Add 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.25+git.1485179354.eb43835:
  * Ironic fence agent
  * fencing: Add --quiet option to disable logging to stderr
  * fence_powerman: fix typo in option powerman-path
  * fence_cisco_ucs: Commands sent to Cisco UCS are changed to
- Drop merged patch:
  * Remove 0008-Fix-travis.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1487073600">- Downgrade some agent-specific dependencies to recommends (bsc#1025149)
  * Add 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.25+git.1501671877.7bae40a0:
  * fence_ipmilan: add target support
  * Explicitly use version 3 of the oVirt API
  * fence_rhevm: fix "--api-path must not have an argument" issue
  * Convert URLs passed to pycurl to ASCII
  * fence_vbox: Add support for host on MacOS
  * fence_vbox: Add support for Windows host
  * fence_compute: fix to avoid breaking nova
  * fence_ipmilan: fix target support
  * fence_vmware_soap: fix for selfsigned certificate
  * fence_ipmilan: Add support for hexadecimal format of Kg key
  * fence_azure_arm: fix hardcoded path
  * fence_azure_arm: remove release/build info
  * fence_ipmilan: Fix inconsistency between help and manual page (defalt for --method)
  * fence_scsi: add FIPS support
  * fence_ipmilan: fix indentation
  * fencing_snmp: fix timemout typo
- Drop outdated patch:
  * 0010-Make-pywsman-dependency-optional.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504008000">- Remove deprecated agents
  * Remove fence_ovh
  * Remove fence_drac
  * Remove fence_vmware_soap
- Drop build dependency on python-suds
- Update package description</changelog>
  <changelog author="kgronlund@suse.com" date="1504958400">- Move to python3</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.25+git.1509350522.8d6f8530 (bsc#1065966):
  * Use Python 3 for all scripts
  * compute: Fix unfencing and ensure fencing occurs in partial up/down states
  * compute: Split out evacation functionality
  * compute: Handle differences in Nova API argument passing
  * fence_zvm: fix "uintptr_t" undeclared
  * fence_ifmib: fix README typo(s)
- Add patch:
  * 0001-Use-Python-3-for-all-scripts-bsc-1065966.patch
- Remove merged patches:
  * 0001-fence_compute-Only-list-nova-compute-services-when-g.patch
  * 0002-fence_compute-Don-t-list-hypervisors-but-nova-comput.patch
  * 0003-fence_compute-Do-not-override-domain-if-it-is-alread.patch
  * 0004-fence_compute-Fix-handling-of-domain-None.patch
  * 0005-fence_compute-Fix-fix_domain-to-not-return-too-early.patch
  * 0006-fence_compute-Fix-fix_plug_name-when-looking-if-plug.patch
  * 0007-fence_compute-Remove-duplicate-check-for-binary-name.patch
  * 0009-fence_compute-Fix-disabling-force_down-on-node-when-.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1511265600">- Recommend openwsman-python3, not python-openwsman (bsc#1069137)</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.0.25+git.1516265527.7ab202cf (bsc#1074000):
  * fence_ilo3: default to onoff
  * fence_compute: Add support for keystone v3 authentication
  * fence_ilo_ssh: fix hard reset
  * fence_vmware_rest: new agent</changelog>
  <changelog author="kgronlund@suse.com" date="1518436800">- Update to version 4.0.25+git.1518188333.853850c3:
  * heuristics_ping: fix for python3 TypeError</changelog>
  <changelog author="kgronlund@suse.com" date="1523448000">- Update to version 4.0.25+git.1523367910.7473fab7:
  * Add fence_gce: Google Compute Engine fence support (fate#325539) (bsc#1088358)
  * Low: fence_scsi: Remove period from cmd string
  * fence_compute/fence_evacuate: revert to old parameters
  * fence_azure_arm: implement network-fencing (w/library from @MSSedusch)
  * fence_mpath: Correction of command line which argument is not correctly recognized
  * Mid: fence_docker: Exclude slashes from the list.
  * fence_pve : choose vm type either lxc or qemu</changelog>
  <changelog author="kgronlund@suse.com" date="1524657600">- Disable Google Compute Engine support unless openSUSE (fate#325539) (bsc#1088358)</changelog>
  <changelog author="kgronlund@suse.com" date="1524744000">- Update to version 4.0.25+git.1524215631.8f9c770a:
  * fence_gce: Write error messages to log (fate#325539) (bsc#1088358)
  * fence_azure_arm: fix subscriptionId from metadata (bsc#1090995)
  * fence_scsi: fix plug-parameter and keep support for nodename to avoid regressions</changelog>
  <changelog author="kgronlund@suse.com" date="1526558400">- run_command: fix Python 3 encoding issue (bsc#1082871)
- fence_gce: use default credentials from googleapiclient
- fence_gce: fix regression - missing import oauth2client.client
- fence_gce: fix regression - missing import googleapiclient.discovery
- Add 0002-fence_gce-fix-regression-missing-import-googleapicli.patch
- Add 0003-fence_gce-fix-regression-missing-import-oauth2client.patch
- Add 0004-fence_gce-use-default-credentials-from-googleapiclie.patch
- Add 0005-run_command-fix-Python-3-encoding-issue.patch</changelog>
</package>
<package pkgid="2cdc1401cde25f126f14f60dbea8384aa615994abac58c6c5c561bcba9a351f1" name="ffmpeg-3" arch="src">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="1997a3568b87def229dff1bd02cba4fb5a083acb6b2cf6934078134f82ea1b7a" name="ffmpeg-3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="eaf1d023612b8fade39c09a24907fe751662940d9d53eecac6fca23e66b57b19" name="ffmpeg-3" arch="src">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="b2f5326ec02aec617d156aea7d2751b6552eb4e75844ed0dc5b3ac194bcd0886" name="ffmpeg-3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="4a1628f4440135682a3fe1da5fcc300bc60452d19270596e3b6a9dcc4bccf4ab" name="ffmpeg-3-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="d5da4789c0f9f129101d334dcfcd6d262a2c5a18821fb6fbb395259d9c29335e" name="ffmpeg-3-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="de5ff2ae016397788831492e2ca1dded6f0967b4ed32b598607360382fef8330" name="ffmpeg-3-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="e85cf3e80d5d50c64a54ee57fb7dac81e7321bcc76cb2b69e6b5f328d71a01df" name="ffmpeg-3-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="4ccd90e2c5ed36c7b449c24022e9d6e8a1114c225b4e645a81a2e742b6458e8a" name="ffmpeg-3-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="967a48f67c1b053ff997647ede9318752951fecf5df2bd9ed85b653eb089e606" name="ffmpeg-3-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="c23dfc11e05d611aa194e722e609106c5a18c45c083f27576ac59ef9dac7c56e" name="ffmpeg-3-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="34a43d68b283230ab954420a7289cd9d5ca6984aca8622baf799c76fce756cd5" name="ffmpeg-3-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="b0145ccb6b78284411ab4d2d85dd3b0cdd3b576f7e048ea6d1e234efc74938ba" name="ffmpeg-3-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="26fffabb614a9fa103e7344dd27f3038a9abb6832a3cba070761a2727e16b80e" name="ffmpeg-3-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="9da34dff9f3352ee21965ccc044cf60c108f398db71fc23295317ed1989e8cc1" name="ffmpeg-3-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="dbe5721e42de03cd5615e3dca5026f0cc07f55a1e2341dd31b33c094bff1ca10" name="ffmpeg-3-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="358e018a24fa144364ff08b6706c855f747ff892f3723c9ac89c1dc8285c5593" name="ffmpeg-3-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="787509f45749b435a1d53198369f4177cd9c50c05f5f7ebd2e14f38ea255da46" name="ffmpeg-3-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7a23ebeea8d2331e0ac35620c64d874de587517a857526e4554bb52c8c44e821" name="ffmpeg-3-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="a43de328797f1b734f736416e025bc508853ac20e7ee7ba56923abd73235fc75" name="ffmpeg-3-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="174adaa52362d396bd197c6cc5dad4f17f2dafbdb91973e7c2db8e6ac49bef7d" name="ffmpeg-3-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="d3a08757c6241ad193d4d327d919b3a2699984cfd31bb3bf7a006bbe77f50fa8" name="ffmpeg-3-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="6cf0c3c64e9e28a006b2210779e93a2b5bdd5bbfc6af1ec05d14991b9dbeb468" name="ffmpeg-3-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="9e95bf897edbb5fa2744857aa261fcfff022799ac857f1abf79eb100d8c42aeb" name="ffmpeg-3-private-devel" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="d387e86ebb6b090be23b09a7e8335c33d63f2072e46cedd393a688910c77bfe0" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7916407b4a3889d6971ab387b9e2202bd8f73fd8755cd040130c4f649e41e749" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="7f97acee2646273860d62080c036b8e74cdfa1907fb295bf184d93631d13f667" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="1fe82832c0bb56a9ad0105ae131bf38bc23f18466242257c2d519688ce6354d9" name="ffmpeg-4" arch="src">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="9205204442e469a3c1fe81dd5ad893b233f12a6bce65c1af7bc6d3c9226b0d36" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="d03ec9d253534c958188efb0e06d9508b6ff029ddd265357aa87233c0252ca34" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="afc8ef2ddb787002cd5dc980d952587f64b6cd0e4a98d2873918d3b8c0e246e4" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="fc6b17b0a82b475e7dede9328443c133828ec2def2aa6c08735e4fdf923384f8" name="ffmpeg-4-libavcodec-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="4c5d8d16cc757c02a5e0ff3e371cc75bd5819c7cd945a15acd5795f7992fea75" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="92c281c7f57dc9f3be2e51a7022d9d5d0fa3a7cdaf0c0db938810fd114645fec" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="cd14400470c0478d289ac709c1c81f122560665fc5636c227d3c94146f2f9086" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="fcf0679c2b3be5a91bc1ad1d90c3687609667f595491f24d6f24800fff0d3f85" name="ffmpeg-4-libavdevice-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="6362238c0dbe69d4ee35a42e129602a634b9a2961b88e6117be86363e8dd9098" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="2725b3eefac84e663afbcd0d33d1621636aea0e038a6dd14aa8212fdf0c92a4a" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="5dabd69232058ae91671ec1d67ee9a20fdc7f4dfb92ea6490eb613b9431a84af" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="d0ba983f0463e4cd921e61a82c64f5323922777870d4d18c1620e2f5644dbc18" name="ffmpeg-4-libavfilter-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="8ac46e383dfe132aac5561a2d1d9b152635cdf9c08ee3104bad9c289a43ff028" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="052e50815564ba7a51fcda90eae9b752d4ebd9b5ddb7f8a22b4111a0fc648ede" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="74946ab55e73f4287ba1e00881f83a991e9f6f0e1fa46768fec76c4129eb3587" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="453a7b288be39d35737e69f397b2c722342b0ec01be5d9eaa6c1bada0db46967" name="ffmpeg-4-libavformat-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="dffbd827428f390042050bc9dc59145feb8cf0cb0162b05f2debcba756c9eca2" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="080ca8947f5c5effed9d1752a8e4e3fc11ccfe0a80505986e886a583d5a2fb01" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="f1c4108b451e14cc55b3b87ecea225bdb02ec668cb22fa80f261049c71fa5247" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="17f295958223f44a5c2d58759bad130fbd102774939b24f98ae2a66a6fae7070" name="ffmpeg-4-libavresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="8ec9b0e6ffec137ba6773829db0378bd745a10fe11f936a4f6707aea2d4573d3" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="6b02fa149da68457a34b4f2b34d982652f728ee439a6aea4d4a7ebfcd74ae9d1" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="a0395b8e16f32b3e1e71d19df6fb70d2a70640489c754e006af987faa9d30e1f" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="92b44ccbd45c5bc70aed488ca32a8d14d42a9b69b9365cb144461ae3004c0a71" name="ffmpeg-4-libavutil-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="762d275868d1f7679732e7ab2a435607523d66064464d8fe3995b6281ca730a0" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="146477858e1bcfbf8aeeb07c739f8c4dfb4f24641a9e7483d868117020af6840" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="1ffe027008a62b4e75fbc4debf74a0bd15fe62e5f86def9fbf6d6052c38c75fa" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="0247021f0fee155496abd26c6f792bfc8a849a35ade4895d8cdc3b1df02363ac" name="ffmpeg-4-libpostproc-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="fa10864575e950ddd7c99bef723cd14192f764f16882333a4cd8f068670c49e9" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="50f2485f4273e058f601341b37f75c15fe2669622527b212684b6fde52033ee5" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="993cbf4be241055d953800f86f074bde07e5840807c051d725e67954b2299044" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="20ea95e84c0be2a4bf9d1467db5c52b3391b9ce9d83aaf8b7a099b5053224d61" name="ffmpeg-4-libswresample-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="1c81b5136833f171249e1b5f27bc7e2c4870c52feaadd5a1ae76c5ac16a6d19d" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="c7eba6f2a999a23f7c55f41518a925b38709a20c47b8c10891c246722f3de883" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="dc171525c8e94adbd9938efb5ee46b1ce1dc03a9c929ec976e69783f5c6bbb24" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="6a52cfea81160e2536a47a5725f13519a6fab97a80253d7618afe4791e821f7a" name="ffmpeg-4-libswscale-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="4474583683a0346ae57999ac0774d49e101f6c94a908bda0159b7b0b85968354" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="0e89c573dfc2741d8e3f21877c74523168b167af1c7e855cd781f9df4bbfe01a" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="13babf755a8c72f22326b4067b16c95287ef869b508ceb76e98837a36b1e9252" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="3b9dfd2d74987b83e5538df41833247a1fbdc68b39be7cd8d6d2dd88fbed9310" name="ffmpeg-4-private-devel" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="c18b5d732debce32c44dc7c04d4d430da6a516fb77787ae975c3978288bda9a3" name="filesystem" arch="src">
  <version epoch="0" ver="15.0" rel="lp150.8.3.1"/>
  <changelog author="kukuk@suse.de" date="1490788800">- Move /etc/init.d hiearchy to insserv-compat
- Move /etc/cups to cups-libs [bsc#1025689]</changelog>
  <changelog author="kukuk@suse.de" date="1492430400">- Remove home directories for wwwrun, lp, mail and nobody.
  They are now part of the corresponding system-user-* RPMs.</changelog>
  <changelog author="kukuk@suse.de" date="1496750400">- Change ownership of /etc/ppp, group dialout has meanwhile another
  meaning and there are no setgid dialout binaries who could need
  that.</changelog>
  <changelog author="kukuk@suse.de" date="1496923200">- Get ride of the last non-root group. /run/lock is created by
  systemd, not filesystem, so remove it from here.</changelog>
  <changelog author="kukuk@suse.de" date="1496923201">- Remove /etc/susehelp.d and subdirectories, susehelp is gone
- Remove /etc/tmpdirs.d, support was removed 2011 and migrated
  to tmpfiles.d
- Remove /var/adm/perl-modules (support was removed with 11.4)</changelog>
  <changelog author="kukuk@suse.de" date="1496923202">- Require user root and group root</changelog>
  <changelog author="kukuk@suse.de" date="1497009600">- Remove /etc/ppp and subdirectories, the current, full list of
  directories is part of the sysconfig package</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Add /usr/share/metainfo: this is the new location defined by
  AppStream to replace /usr/share/appdata.</changelog>
  <changelog author="rbrown@suse.com" date="1510142400">- Add /usr/share/fillup-templates: this is the new location for
  fillup-templates</changelog>
  <changelog author="kukuk@suse.de" date="1511265600">- Create fs-var.conf for systemd-tmpfiles, which contains all
  directories and links below /var. This is needed for systems,
  which use transactional update, read-only root filesystem, or
  other things, where either /var is not available during upgrade
  or does not survive a reboot. So that systemd-tmpfiles could
  create them at next boot.
- Drop deprecated /usr/tmp compat link</changelog>
  <changelog author="kukuk@suse.de" date="1511352000">- Fix incomplete /usr/X11R6 drop from 2013</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Remove /var/adm/backup/{rpmdb,sysconfig}, they belong to
  aaa_base-extras only.</changelog>
  <changelog author="rbrown@suse.com" date="1517832001">- Remove /var/adm/fillup-templates, already prohibited by rpmlint</changelog>
  <changelog author="kukuk@suse.de" date="1517918400">- Adjust aaa_base test for latest aaa_base changes</changelog>
  <changelog author="kukuk@suse.de" date="1518091200">- Exclude some directories from fs-var.conf which are already part
  of systemd [bsc#1078466].
- Remove obsolete, outdated or duplicate directories:
  /lib/YaST, /lib/lsb, /srv/ftp, /usr/lib/lsb, /usr/share/nls and
  /usr/share/tmac.</changelog>
  <changelog author="schwab@suse.de" date="1518609600">- Use lib64 filelist on riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Handle aaa_base moving the license files to /usr/share/licenses.</changelog>
  <changelog author="ro@suse.de" date="1521201600">- drop /etc/xinetd.d (bsc#1084457)</changelog>
  <changelog author="msuchanek@suse.com" date="1522152000">- Add /etc/modprobe.d and /usr/lib/modprobe.d (bsc#1082050).</changelog>
  <changelog author="ro@suse.de" date="1526558400">- pretrans lua script: try to move away /var/run and /var/lock
  unless they are already symlinks (bsc#1084119)</changelog>
</package>
<package pkgid="f8ec155406ec18c758a6eef987ee94c7bda5271c9ca717feacca3485411c1f8a" name="filesystem" arch="x86_64">
  <version epoch="0" ver="15.0" rel="lp150.8.3.1"/>
  <changelog author="kukuk@suse.de" date="1490788800">- Move /etc/init.d hiearchy to insserv-compat
- Move /etc/cups to cups-libs [bsc#1025689]</changelog>
  <changelog author="kukuk@suse.de" date="1492430400">- Remove home directories for wwwrun, lp, mail and nobody.
  They are now part of the corresponding system-user-* RPMs.</changelog>
  <changelog author="kukuk@suse.de" date="1496750400">- Change ownership of /etc/ppp, group dialout has meanwhile another
  meaning and there are no setgid dialout binaries who could need
  that.</changelog>
  <changelog author="kukuk@suse.de" date="1496923200">- Get ride of the last non-root group. /run/lock is created by
  systemd, not filesystem, so remove it from here.</changelog>
  <changelog author="kukuk@suse.de" date="1496923201">- Remove /etc/susehelp.d and subdirectories, susehelp is gone
- Remove /etc/tmpdirs.d, support was removed 2011 and migrated
  to tmpfiles.d
- Remove /var/adm/perl-modules (support was removed with 11.4)</changelog>
  <changelog author="kukuk@suse.de" date="1496923202">- Require user root and group root</changelog>
  <changelog author="kukuk@suse.de" date="1497009600">- Remove /etc/ppp and subdirectories, the current, full list of
  directories is part of the sysconfig package</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Add /usr/share/metainfo: this is the new location defined by
  AppStream to replace /usr/share/appdata.</changelog>
  <changelog author="rbrown@suse.com" date="1510142400">- Add /usr/share/fillup-templates: this is the new location for
  fillup-templates</changelog>
  <changelog author="kukuk@suse.de" date="1511265600">- Create fs-var.conf for systemd-tmpfiles, which contains all
  directories and links below /var. This is needed for systems,
  which use transactional update, read-only root filesystem, or
  other things, where either /var is not available during upgrade
  or does not survive a reboot. So that systemd-tmpfiles could
  create them at next boot.
- Drop deprecated /usr/tmp compat link</changelog>
  <changelog author="kukuk@suse.de" date="1511352000">- Fix incomplete /usr/X11R6 drop from 2013</changelog>
  <changelog author="kukuk@suse.de" date="1517832000">- Remove /var/adm/backup/{rpmdb,sysconfig}, they belong to
  aaa_base-extras only.</changelog>
  <changelog author="rbrown@suse.com" date="1517832001">- Remove /var/adm/fillup-templates, already prohibited by rpmlint</changelog>
  <changelog author="kukuk@suse.de" date="1517918400">- Adjust aaa_base test for latest aaa_base changes</changelog>
  <changelog author="kukuk@suse.de" date="1518091200">- Exclude some directories from fs-var.conf which are already part
  of systemd [bsc#1078466].
- Remove obsolete, outdated or duplicate directories:
  /lib/YaST, /lib/lsb, /srv/ftp, /usr/lib/lsb, /usr/share/nls and
  /usr/share/tmac.</changelog>
  <changelog author="schwab@suse.de" date="1518609600">- Use lib64 filelist on riscv64</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992000">- Handle aaa_base moving the license files to /usr/share/licenses.</changelog>
  <changelog author="ro@suse.de" date="1521201600">- drop /etc/xinetd.d (bsc#1084457)</changelog>
  <changelog author="msuchanek@suse.com" date="1522152000">- Add /etc/modprobe.d and /usr/lib/modprobe.d (bsc#1082050).</changelog>
  <changelog author="ro@suse.de" date="1526558400">- pretrans lua script: try to move away /var/run and /var/lock
  unless they are already symlinks (bsc#1084119)</changelog>
</package>
<package pkgid="e98161bea751b59b9b3c65a7e2ff6fddbe436925933244fcd20a37e8295843d3" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="46752effa18f03342ee48568acbb17614e8eea021d85ae64a0062de5e67350af" name="firewall-applet" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="ced4206ae8813a98c7858b63c69915b272825eaae7598973fd593224aad7f839" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="e013db63439ac91faac9e73e46f911c4b9f6884523529bf8c3db54202eccab38" name="firewall-config" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="965f9e5e1beccce59e92ae9bb9a82aa45bc1cf73a8175b07cdfbb70367a08b06" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="fc4b986e75b176febeb9bedb48ec2b9e2a765ed09b98c13d9daa2a921e1b0fb7" name="firewall-macros" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="ab5d94368e675096f8a8ac1e823bf6b42997fecbdef62a973ab9c70b2c13151e" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="85a93f1d815dbe8ebaf85df8326c7787925580432a1d9bbd9c751a3802760fcb" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="42f4aeaaad29bfd295deaf3792a40c4d0afde59900a8775591f24eb1c02fa60a" name="firewalld" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="b02f07db839a192e916c4fa0d6a69b71ec3e20c810223cb06f1eb290210cd922" name="firewalld" arch="src">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="ed222b8b4d9b91186ae3e81e463012d56aa3bfe6c38f83e3bfe29db9d3780d04" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="99e1405cd9cc8a5ad2207600c4bc11188aefe42e975ebb6e39294e1509e10aa6" name="firewalld-lang" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="e65af1836fb24ab4dd1bc81e6c80049ec0dc0dd3f08d3a6322ac4482b2137922" name="firewalld-rpcbind-helper" arch="noarch">
  <version epoch="0" ver="0.1" rel="lp150.3.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
</package>
<package pkgid="eb61eb48eeabca319b74ddd23af85aafd879351f2a11fe60ae518e0248182d23" name="firewalld-rpcbind-helper" arch="src">
  <version epoch="0" ver="0.1" rel="lp150.3.3.1"/>
  <changelog author="matthias.gerstner@suse.com" date="1523448000">- initial version of package</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1523880000">- Require python3 and to be in line with the Leap-15 /
  SLE-15 situation (see OBS comments in sr#595722).
- shebang.patch: use python3 in shebang for the same reasons.</changelog>
  <changelog author="jengelh@inai.de" date="1523966400">- Feed file through spec-cleaner</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1526040000">Fixes for bnc#1096064:
- 0001-main-script-fix-running-with-python3-need-to-decode.patch: fix error
  when running in python3 context, because of a missing decode() call.
- 0002-main-script-be-prepared-for-some-of-the-sysconfig-fi.patch: don't raise
  Exceptions when one of the target sysconfig files isn't installed.</changelog>
</package>
<package pkgid="3b413b2b7e26917f51ea124429e59d4fd89e97582c7da033bb6c889e355d64fc" name="fvwm2" arch="src">
  <version epoch="0" ver="2.6.7" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1262001600">- Remove gnome-libs-devel, gtk-devel, gtkdoc, imlib-config,
  imlib-devel BuildRequires.
- Add xorg-x11-devel BuildRequires.
- Pass --disable-gtk to configure.
- Remove gtk subpackage: it's optional, and doesn't look that good.
- This is for fate#308601: remove gtk/gnome 1.x stack.</changelog>
  <changelog author="ro@suse.de" date="1270382400">- fix build with libpng14 (replace long deprecated functions)</changelog>
  <changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
  <changelog author="coolo@novell.com" date="1299844800">- use of %find_lang is a MUST</changelog>
  <changelog author="pgajdos@suse.com" date="1314878400">- build with --no-copy-dt-needed-entries
  * no-copy-dt-needed-entries.patch</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- remove uncommented patch</changelog>
  <changelog author="vcizek@suse.com" date="1325592000">- update to 2.6.3
  dropped libpng patch
  New features over 2.5.26:
  * Support libpng 1.4 and 1.5.0's slightly newer APIs
  * New extended variable $[w.visiblename]
  * Style matching now honours the window's visible name
  * New style InitialMapCommand allows to execute any command when
    a window is mapped first.
  * New option to PrintInfo, "bindings" which prints out all of the
    Key, PointerKey, Mouse and Stroke bindings which fvwm knows about.
  * New differentiated options for SnapAttraction when snapping
    against screen edges:
  * New option to the BugOpts command
  * New BugOpts option QtDragnDropWorkaround to work around an oddity
    in handling drag-n-drop events to Qt applications.
  * New MenuStyle "UniqueHotkeyActivatesImmediate" and its negation
    "!UniqueHotkeyActivatesImmediate" to retain the menu until the
    user presses one of the menu keybindings to enact that change in
    the case where there's only one item defined in the menu at the
    specified hotkey.
  * New Style commands
  * New Resize argument to direction
  * Couple of changes to the Move command:
  * The EWMH working area is now honoured by default.
  * To move a window ignoring the working area, the option "ewmhiwa"
    can be used, similar to how the Maximize command works.
  * New expansion placeholder $[pointer.screen] to return the screen
    number the pointer is on.</changelog>
  <changelog author="werner@suse.de" date="1328616000">- update to 2.6.4
  new features:
  - FvwmIconMan no longer allows for itself to be transient
  - New command InfoStore -- to store key/value pairs of information
    to relieve the burden of the SetEnv command.
  - Speed-up improvements for fvwm-menu-desktop when generating XDG
    menus by removing unnecessary stat(2) calls.
  - BusyCursor and CursorStyle have been set to make the cursor look
    like a dot during Read/PipeRead commands, by default.
  Bug fixes:
  - FvwmRearrange now understands the "ewmhiwa" option when placing
    windows.
  - Client gravity for subwindows is honoured for reparenting
    windows, such as with XEmbed, when changing the parent's
    geometry.
  - Conditional command processing of !Layer n
    has now been fixed.
  - Fixed handling of swallowed windows for transient FvwmButtons'.
  - fvwm-menu-desktop now looks in /usr/share/applications for KDE
    legacy mode.
  - fvwm-config no longer accepts "--is-stable", "--is-released",
    "--is-final".</changelog>
  <changelog author="werner@suse.de" date="1364644800">- Add two missing build requires: librsvg-devel and libxslt-tools</changelog>
  <changelog author="werner@suse.de" date="1374148800">- Update to 2.6.5 + snpashot 2012/10/11
  - NEWS: Added FvwmForm Separators,
    fvwm-desktop-menu fixes.
  - libs/Bindings.c (AddBinding):
  - fvwm/builtins.c (FkeysymToKeycode):
  - fvwm/events.c (__handle_key):
    Add detection of XKeycodeToKeysym as deprecated, and provide a wrapper
    for it by way of fvwm_KeycodeToKeysym() to call the newer
    XkbKeycodeToKeysum() where needed.
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Fix compilation errors.
  - fvwm/menu.c ( __scan_for_pixmap):
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Add fvwm_msg() for hints about failed image load.
  - fvwm/events.c (HandlePropertyNotify):
    Fix XSizeHints problem with FVWM not correctly allowing resizing of
    windows when the hints are toggled with respect to FVWM processing
    XA_WM_NORMAL_HINTS.
  - fvwm/placement.c ( __pl_position_get_pos_simple):
    When using "UnderMouse" for PositionPlacement, ensure we honor the EWMH
    working area by default if it's in use.
  - fvwm/fvwm.c (InstallSignals):
    Unblock signals when installing them.
    When signals are registered, ensure they're unblocked so as not to queue
    them up.
  - fvwm/infostore.c (get_metainfo_length):
  + fvwm/infostore.c (new_metainfo):
  + fvwm/infostore.c (insert_metainfo):
  + fvwm/style.c (style_parse_one_style_option):
    Make C90 compliant.
- Add patch fvwm-snapshot.patch for snpashot 2012/10/11
- Add patch fvwm-rsvg.patch to avoid internal rsvg-cairo.h included twice
- Add source bin/fvwm-menu-desktop-config.fpl as missed in 2012/10/11
- Modify patch fvwm-2.5.26-gcc-warnings.patch as fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1374667200">- Add patch fvwm-2.6.5-eventcrash.patch which should avoid that not
  set icon names will be freed  (bnc#778347)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412078400">- fvwm-no-date-time.patch Do not include __DATE__ and __TIME__
  in binaries.
- Drop usage of xorg-x11-devel. pick only the needed packages.</changelog>
  <changelog author="tchvatal@suse.com" date="1412769600">- Rename config file to not have underscore at begining</changelog>
  <changelog author="mvetter@suse.com" date="1457006400">- Clean up with spec-cleaner
- Remove 'system.fvwm2rc_' seems not to be used
- Fix module 'Command' see (boo#966650)</changelog>
  <changelog author="werner@suse.de" date="1470139200">- Update to 2.6.6
  * fvwm features:
  - Support for Russian from Ivan Gayevskiy.
  - EnvMatch supports infostore variables.
  - The option "forget" to the Maximize command allows to
    unmaximize a window without changing its size and position.
  - Windows shaded to a corner (NW, NE, SW, SE) are reduced to a
    small square.
  - New option "!raise" to the WarpToWindow command.
  - The new extended variables $[wa.x], $[wa.y], $[wa.width],
    $[wa.height] can be used to get the geometry of the EWMH
    working area, and $[dwa.x], $[dwa.y], $[dwa.width],
    $[dwa.height] can be used to get the geometry of the EWMH
    dynamic working area.
  - The Resize commands accept "wa" or "da" as a suffix of the
    width or height value.  If present, the value is a percentage
    of the width or height of the EWMH working area or the EWMH
    dynamic working area.
  - Fvwm is much more resilient against applications that flood the
    window manager with repeated events.
  * New module features:
  - FvwmForm supports separator lines.
  - New FvwmIconMan options:
    IconAndSelectButton
    IconAndSelectColorset
  * Bug fixes:
  - Provide a wrapper for the deprecation of XKeycodeToKeysym and
    use XkbKeycodeToKeysym() where appropriate.
  - fvwm-menu-desktop is re-written and provides better support of
    the XDG menu specification.
  - Fix fvwm-menu-desktop keyError bug.  Use "others" if no desktop
    environment found.
  - FvwmIconMan had problems displaying the hilight colour on some
    systems (64 bit issue?).
  - Globally active windows cannot take the focus if the style
    forbids programs to take focus themselves (style
    !FPFocusByProgram).
  - Windows no longer jump from one position to the other which
    could happen in some cases with SnapAttraction.  Windows now
    snap to the closest window (or screen edge).
  - Removing bindings had several strange side effects that are
    fixed now (removing too many bindings; old bindings showing up
    again after another is removed; possibly other effects).
  - Windows sometimes did not get expose events (i.e. did not
    redraw properly) if they were uncovered by moving a window
    above them.  This has been fixed.
  - FvwmConsole now causes much less network traffic.
  - Suppress bogus events sent to the modules when a window is
    resized with the mouse.
  - Properly handle the has_ref_window_moved flag for ResizeMove and
    ResizeMoveMaximize.
  - Removed some unnecessary redraws in FvwmPager.
  - The option "NoDeskLimitY" option of the GotoPage command did
    not work.
  - Negative coordinates in the "rectangle" option to the Menu
    commend did not work correctly.  This has been fixed.
  - Removes a slight graphics problem whith the ResizeMaximize
    command being invoked from a window button menu.
  - When an attempt to reparent a client window (i.e. decorate
    it) fails, fvwm no longer throws away all events but only the
    events for that window.
  - The ChangeButton command of FvwmButtons used to strip
    whitespace from the beginning and end of button titles and
    image paths.  This is no longer done.
- Remove patches now upstream
  fvwm-2.6.5-eventcrash.patch
  fvwm-rsvg.patch
  fvwm-snapshot.patch
- Add upstream patch
  fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
    Expose: don't flush accumulated events</changelog>
  <changelog author="mvetter@suse.com" date="1471521600">- boo#877539 - wrong path in system.fvwm2rc:
  * Fix wallpaper path for 'init' and 'restart' commands.
  * Require default branding wallpaper package.</changelog>
  <changelog author="werner@suse.de" date="1486468800">- Update to 2.6.7 (06-Nov-2016)
  - dropped fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
  * New fvwm features:
    A new default configuration which is available when fvwm
    doesn't detect a configuration file to load.
    A new conditional command "Desk n" can restrict matching
    windows to a specific desk.
    A new conditional command "Screen n" to restrict matching
    windows on a given Xinerama screen.
    New expansion variable "w.screen" to ascertain the Xineram
    screen number a window is on.
    New command "InfoStoreClear" to remove all items in the
    InfoStore.
  * Removed features:
    The old and unmaintained debian/ and rpm/ directories have
    been removed; use the maintainers' copies where available.
    VMS support has been removed.
    GTK1.x support has been removed.
    GNOME-specific window hints (pre-EWMH) have been removed.
    Some fvwm modules have been removed:
    FvwmDragWell (no replacement)
    FvwmGTK (no replacement)
    FvwmSave (no replacement)
    FvwmSaveDesk (no replacement)
    FvwmScroll (no replacement)
    FvwmTabs (no replacement, never worked anyway)
    FvwmTaskBar (use FvwmButtons)
    FvwmTheme (in core of fvwm as colorsets)
    FvwmWharf (use FvwmButtons)
    FvwmWinList (use WindowList command)
    FvwmWindowMenu (use WindowList command)
    FvwmIconBox (use the IconBox style instead)
  * New module features:
    FvwmButtons learned a new option "Colorset" to its
    ChangeButton command.
  * fvwm-menu-desktop updated:
    Renamed default menu to XDGMenu and changed the name
    of the FvwmForm to FvwmForm-XDGMenu-Config to not conflict
    with someone already using FvwmMenu.
    fvwm-menu-desktop will now load defaults from the
    FvwmForm-XDGMenu-Config data file.
    Improved dynamic menus by regenerating them on-the-fly.
    Added new options: --regen-cmd, --dynamic, and more.
  * Bug fixes:
    A bug introduced in 2.6.6 could cause applications with
    negative coordinates to be placed at strange positions. This
    affected for example acroread when switching to fullscreen
    mode. This has been fixed.
    FvwmButtons "Silent" option for dynamic ChangeButton commands
    no longer loops infinitely.</changelog>
  <changelog author="jengelh@inai.de" date="1486728000">- Update summary</changelog>
  <changelog author="mvetter@suse.com" date="1526644800">- boo#1080494: Add update-alternative configuration
- Run spec-cleaner</changelog>
</package>
<package pkgid="ab5a696cf764451b7d425422370b7bfd57f378aa43219439ab4bfc59cb59fc07" name="fvwm2" arch="x86_64">
  <version epoch="0" ver="2.6.7" rel="lp150.2.3.1"/>
  <changelog author="vuntz@opensuse.org" date="1262001600">- Remove gnome-libs-devel, gtk-devel, gtkdoc, imlib-config,
  imlib-devel BuildRequires.
- Add xorg-x11-devel BuildRequires.
- Pass --disable-gtk to configure.
- Remove gtk subpackage: it's optional, and doesn't look that good.
- This is for fate#308601: remove gtk/gnome 1.x stack.</changelog>
  <changelog author="ro@suse.de" date="1270382400">- fix build with libpng14 (replace long deprecated functions)</changelog>
  <changelog author="coolo@novell.com" date="1289217600">- remove support for pre-9.1</changelog>
  <changelog author="coolo@novell.com" date="1299844800">- use of %find_lang is a MUST</changelog>
  <changelog author="pgajdos@suse.com" date="1314878400">- build with --no-copy-dt-needed-entries
  * no-copy-dt-needed-entries.patch</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- remove uncommented patch</changelog>
  <changelog author="vcizek@suse.com" date="1325592000">- update to 2.6.3
  dropped libpng patch
  New features over 2.5.26:
  * Support libpng 1.4 and 1.5.0's slightly newer APIs
  * New extended variable $[w.visiblename]
  * Style matching now honours the window's visible name
  * New style InitialMapCommand allows to execute any command when
    a window is mapped first.
  * New option to PrintInfo, "bindings" which prints out all of the
    Key, PointerKey, Mouse and Stroke bindings which fvwm knows about.
  * New differentiated options for SnapAttraction when snapping
    against screen edges:
  * New option to the BugOpts command
  * New BugOpts option QtDragnDropWorkaround to work around an oddity
    in handling drag-n-drop events to Qt applications.
  * New MenuStyle "UniqueHotkeyActivatesImmediate" and its negation
    "!UniqueHotkeyActivatesImmediate" to retain the menu until the
    user presses one of the menu keybindings to enact that change in
    the case where there's only one item defined in the menu at the
    specified hotkey.
  * New Style commands
  * New Resize argument to direction
  * Couple of changes to the Move command:
  * The EWMH working area is now honoured by default.
  * To move a window ignoring the working area, the option "ewmhiwa"
    can be used, similar to how the Maximize command works.
  * New expansion placeholder $[pointer.screen] to return the screen
    number the pointer is on.</changelog>
  <changelog author="werner@suse.de" date="1328616000">- update to 2.6.4
  new features:
  - FvwmIconMan no longer allows for itself to be transient
  - New command InfoStore -- to store key/value pairs of information
    to relieve the burden of the SetEnv command.
  - Speed-up improvements for fvwm-menu-desktop when generating XDG
    menus by removing unnecessary stat(2) calls.
  - BusyCursor and CursorStyle have been set to make the cursor look
    like a dot during Read/PipeRead commands, by default.
  Bug fixes:
  - FvwmRearrange now understands the "ewmhiwa" option when placing
    windows.
  - Client gravity for subwindows is honoured for reparenting
    windows, such as with XEmbed, when changing the parent's
    geometry.
  - Conditional command processing of !Layer n
    has now been fixed.
  - Fixed handling of swallowed windows for transient FvwmButtons'.
  - fvwm-menu-desktop now looks in /usr/share/applications for KDE
    legacy mode.
  - fvwm-config no longer accepts "--is-stable", "--is-released",
    "--is-final".</changelog>
  <changelog author="werner@suse.de" date="1364644800">- Add two missing build requires: librsvg-devel and libxslt-tools</changelog>
  <changelog author="werner@suse.de" date="1374148800">- Update to 2.6.5 + snpashot 2012/10/11
  - NEWS: Added FvwmForm Separators,
    fvwm-desktop-menu fixes.
  - libs/Bindings.c (AddBinding):
  - fvwm/builtins.c (FkeysymToKeycode):
  - fvwm/events.c (__handle_key):
    Add detection of XKeycodeToKeysym as deprecated, and provide a wrapper
    for it by way of fvwm_KeycodeToKeysym() to call the newer
    XkbKeycodeToKeysum() where needed.
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Fix compilation errors.
  - fvwm/menu.c ( __scan_for_pixmap):
  - libs/PictureImageLoader.c (PImageLoadSvg, PimageLoadXpm,
    PImageLoadPng):
    Add fvwm_msg() for hints about failed image load.
  - fvwm/events.c (HandlePropertyNotify):
    Fix XSizeHints problem with FVWM not correctly allowing resizing of
    windows when the hints are toggled with respect to FVWM processing
    XA_WM_NORMAL_HINTS.
  - fvwm/placement.c ( __pl_position_get_pos_simple):
    When using "UnderMouse" for PositionPlacement, ensure we honor the EWMH
    working area by default if it's in use.
  - fvwm/fvwm.c (InstallSignals):
    Unblock signals when installing them.
    When signals are registered, ensure they're unblocked so as not to queue
    them up.
  - fvwm/infostore.c (get_metainfo_length):
  + fvwm/infostore.c (new_metainfo):
  + fvwm/infostore.c (insert_metainfo):
  + fvwm/style.c (style_parse_one_style_option):
    Make C90 compliant.
- Add patch fvwm-snapshot.patch for snpashot 2012/10/11
- Add patch fvwm-rsvg.patch to avoid internal rsvg-cairo.h included twice
- Add source bin/fvwm-menu-desktop-config.fpl as missed in 2012/10/11
- Modify patch fvwm-2.5.26-gcc-warnings.patch as fixed upstream</changelog>
  <changelog author="werner@suse.de" date="1374667200">- Add patch fvwm-2.6.5-eventcrash.patch which should avoid that not
  set icon names will be freed  (bnc#778347)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1412078400">- fvwm-no-date-time.patch Do not include __DATE__ and __TIME__
  in binaries.
- Drop usage of xorg-x11-devel. pick only the needed packages.</changelog>
  <changelog author="tchvatal@suse.com" date="1412769600">- Rename config file to not have underscore at begining</changelog>
  <changelog author="mvetter@suse.com" date="1457006400">- Clean up with spec-cleaner
- Remove 'system.fvwm2rc_' seems not to be used
- Fix module 'Command' see (boo#966650)</changelog>
  <changelog author="werner@suse.de" date="1470139200">- Update to 2.6.6
  * fvwm features:
  - Support for Russian from Ivan Gayevskiy.
  - EnvMatch supports infostore variables.
  - The option "forget" to the Maximize command allows to
    unmaximize a window without changing its size and position.
  - Windows shaded to a corner (NW, NE, SW, SE) are reduced to a
    small square.
  - New option "!raise" to the WarpToWindow command.
  - The new extended variables $[wa.x], $[wa.y], $[wa.width],
    $[wa.height] can be used to get the geometry of the EWMH
    working area, and $[dwa.x], $[dwa.y], $[dwa.width],
    $[dwa.height] can be used to get the geometry of the EWMH
    dynamic working area.
  - The Resize commands accept "wa" or "da" as a suffix of the
    width or height value.  If present, the value is a percentage
    of the width or height of the EWMH working area or the EWMH
    dynamic working area.
  - Fvwm is much more resilient against applications that flood the
    window manager with repeated events.
  * New module features:
  - FvwmForm supports separator lines.
  - New FvwmIconMan options:
    IconAndSelectButton
    IconAndSelectColorset
  * Bug fixes:
  - Provide a wrapper for the deprecation of XKeycodeToKeysym and
    use XkbKeycodeToKeysym() where appropriate.
  - fvwm-menu-desktop is re-written and provides better support of
    the XDG menu specification.
  - Fix fvwm-menu-desktop keyError bug.  Use "others" if no desktop
    environment found.
  - FvwmIconMan had problems displaying the hilight colour on some
    systems (64 bit issue?).
  - Globally active windows cannot take the focus if the style
    forbids programs to take focus themselves (style
    !FPFocusByProgram).
  - Windows no longer jump from one position to the other which
    could happen in some cases with SnapAttraction.  Windows now
    snap to the closest window (or screen edge).
  - Removing bindings had several strange side effects that are
    fixed now (removing too many bindings; old bindings showing up
    again after another is removed; possibly other effects).
  - Windows sometimes did not get expose events (i.e. did not
    redraw properly) if they were uncovered by moving a window
    above them.  This has been fixed.
  - FvwmConsole now causes much less network traffic.
  - Suppress bogus events sent to the modules when a window is
    resized with the mouse.
  - Properly handle the has_ref_window_moved flag for ResizeMove and
    ResizeMoveMaximize.
  - Removed some unnecessary redraws in FvwmPager.
  - The option "NoDeskLimitY" option of the GotoPage command did
    not work.
  - Negative coordinates in the "rectangle" option to the Menu
    commend did not work correctly.  This has been fixed.
  - Removes a slight graphics problem whith the ResizeMaximize
    command being invoked from a window button menu.
  - When an attempt to reparent a client window (i.e. decorate
    it) fails, fvwm no longer throws away all events but only the
    events for that window.
  - The ChangeButton command of FvwmButtons used to strip
    whitespace from the beginning and end of button titles and
    image paths.  This is no longer done.
- Remove patches now upstream
  fvwm-2.6.5-eventcrash.patch
  fvwm-rsvg.patch
  fvwm-snapshot.patch
- Add upstream patch
  fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
    Expose: don't flush accumulated events</changelog>
  <changelog author="mvetter@suse.com" date="1471521600">- boo#877539 - wrong path in system.fvwm2rc:
  * Fix wallpaper path for 'init' and 'restart' commands.
  * Require default branding wallpaper package.</changelog>
  <changelog author="werner@suse.de" date="1486468800">- Update to 2.6.7 (06-Nov-2016)
  - dropped fvwm-icon-440d675d14412ec0a123d4c977534ab688229148.patch
  * New fvwm features:
    A new default configuration which is available when fvwm
    doesn't detect a configuration file to load.
    A new conditional command "Desk n" can restrict matching
    windows to a specific desk.
    A new conditional command "Screen n" to restrict matching
    windows on a given Xinerama screen.
    New expansion variable "w.screen" to ascertain the Xineram
    screen number a window is on.
    New command "InfoStoreClear" to remove all items in the
    InfoStore.
  * Removed features:
    The old and unmaintained debian/ and rpm/ directories have
    been removed; use the maintainers' copies where available.
    VMS support has been removed.
    GTK1.x support has been removed.
    GNOME-specific window hints (pre-EWMH) have been removed.
    Some fvwm modules have been removed:
    FvwmDragWell (no replacement)
    FvwmGTK (no replacement)
    FvwmSave (no replacement)
    FvwmSaveDesk (no replacement)
    FvwmScroll (no replacement)
    FvwmTabs (no replacement, never worked anyway)
    FvwmTaskBar (use FvwmButtons)
    FvwmTheme (in core of fvwm as colorsets)
    FvwmWharf (use FvwmButtons)
    FvwmWinList (use WindowList command)
    FvwmWindowMenu (use WindowList command)
    FvwmIconBox (use the IconBox style instead)
  * New module features:
    FvwmButtons learned a new option "Colorset" to its
    ChangeButton command.
  * fvwm-menu-desktop updated:
    Renamed default menu to XDGMenu and changed the name
    of the FvwmForm to FvwmForm-XDGMenu-Config to not conflict
    with someone already using FvwmMenu.
    fvwm-menu-desktop will now load defaults from the
    FvwmForm-XDGMenu-Config data file.
    Improved dynamic menus by regenerating them on-the-fly.
    Added new options: --regen-cmd, --dynamic, and more.
  * Bug fixes:
    A bug introduced in 2.6.6 could cause applications with
    negative coordinates to be placed at strange positions. This
    affected for example acroread when switching to fullscreen
    mode. This has been fixed.
    FvwmButtons "Silent" option for dynamic ChangeButton commands
    no longer loops infinitely.</changelog>
  <changelog author="jengelh@inai.de" date="1486728000">- Update summary</changelog>
  <changelog author="mvetter@suse.com" date="1526644800">- boo#1080494: Add update-alternative configuration
- Run spec-cleaner</changelog>
</package>
<package pkgid="386fd295cdb0405689f247c83fdd778bc37e3062d68bbd69d6814f8e9e990c71" name="g3utils" arch="x86_64">
  <version epoch="0" ver="1.1.37" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not include build date in binaries</changelog>
  <changelog author="gjhe@novell.com" date="1305288000">- fix bug [bnc#646280],adjust faxspool to process pdf file using
  gs directly, do not use acroreader.</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="coolo@suse.com" date="1324900800">- don't package files twice</changelog>
  <changelog author="prusnak@opensuse.org" date="1327406400">- build with PIE [bnc#743151]</changelog>
  <changelog author="mweckbecker@suse.com" date="1331294400">- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with
  PIE work properly</changelog>
  <changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
  <changelog author="dmueller@suse.com" date="1357819200">- replace run_permissions call with set_permissions (bnc#764113)</changelog>
  <changelog author="schwab@suse.de" date="1362484800">- lp64.patch: Add support for future LP64 platforms</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
</package>
<package pkgid="2e00a6ae8624fe11d18bd8dd370fc0e011fe60738d1c081a10f8df7b00d3a7b3" name="gajim" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
</package>
<package pkgid="da13e90a65563f0045c39617698056d7c6d97750f86206e83adc7edc813167eb" name="gajim" arch="src">
  <version epoch="0" ver="1.0.3" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
</package>
<package pkgid="bb795640adb618bc241d84ed04ed29c235a1df3c764f56fb68197f436a521a27" name="gajim-lang" arch="noarch">
  <version epoch="0" ver="1.0.3" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1437825600">- Update to 0.16.2:
  * Improve Zeroconf (Avahi) with IPv6.
  * Fix errors with GnuPG.
  * Minor fixes and improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1438516800">- Update to 0.16.3:
  * Fix reading secret file.
  * Fix reconnection after suspend.
  * Fix sending GPG-encrypted file to non-trusted key.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1443355200">- Update to 0.16.4:
  * Fix trusting GPG keys.
  * Ability to disable synchronisation of logs with server.
  * Improve MAM usage.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1451390400">- Update to 0.16.5:
  * Improve MAM implementation.
  * Improve security on connexion and for roster managment
    (rh#1295475, bsc#960668, CVE-2015-8688)
  * Ability for emoticons to be sorted in menu.</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Add gajim-remote-dont-show.patch:
  gajim-remote is cli only. Dont list it in menus.
- If python-gstreamer-0_10 is installed the error message
  'ImportError: could not import gst' is not shown.
  See: https://trac.gajim.org/ticket/7836</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.16.6:
  * Fix using gpg2.
  * Improve message receips usage.
  * Improve roster filtering.
  * Fix several minor bugs.
- Remove gajim-remote-dont-show.patch: merged upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494331200">- Update to version 0.16.7:
  * Better compatibility with XEP-0191: Blocking Command.
  * Gajim now depends on python-gnupg for PGP encryption.
  * Remove usage of demandimport.
  * Many minor bugfixes.
- Move python-farstream-0_1 to Suggests.
- Correct the licence to GPL-3.0.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496059200">- Add gajim-0.16.7-default-disable-xep-0146.patch by
  Philipp Hörist: Add a config option to activate XEP-0146 commands
  (commit cb65cfc, CVE-2016-10376, bsc#1041163).</changelog>
  <changelog author="vilene@posteo.net" date="1499169600">- Update to version 0.16.8:
  * Fix rejoining MUCs after connection loss
  * Fix Groupchat invites
  * Fix encoding problems with newer GnuPG versions
  * Fix old messages randomly reappearing in the chat window
  * Fix some problems with IBB filetransfer
  * Make XEP-0146 Commands opt-in
  * Improve sending messages to your own resources
  * Improve reliability of delivery recipes
  * Many minor bugfixes
- Add gajim-do_not_ship_certificate.patch.in: Do not package
  bundled PEM certificate, use one provided by package
  `ca-certificates-mozilla' instead.
- Remove gajim-0.16.7-default-disable-xep-0146.patch: Not needed
  anymore, patch applied upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1499688000">- Trim filler wording from description.</changelog>
  <changelog author="mvetter@suse.com" date="1512475200">- Update to 0.16.9:
  * Improve Zeroconf behavior
  * Fix showing normal message event
  * remove usage of OpenSSL.rand
  * a few minor bugfixes
- Update of icon cache and desktop file only in case of older
  distribution</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Add Requires:       python-nbxmpp &gt;= 0.6.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 1.0.0:
  * Ported to GTK+3 / Python3.
  * Integrate HTTPUpload.
  * Add Navigation buttons in History Window.
  * Improvements for HiDPI Screens.
  * Depend on the python keyring package for password storage.
  * Lots of refactoring.
  * New Emoji support.
  * New Chat Window design.
  * New StartChat Window (Ctrl+N).
  * New ServerInfo Window.
  * AccountWindow Redesign.
  * Move some encryption code out into Plugins (see PGP Plugin,
    Esessions Plugin).
  * Add mam:1 and mam:2 support (mam:0 was removed).
  * Add MAM for MUCs support.
  * Add support for showing XEP-0084 Avatars.
  * Add support for geo: URIs.
  * Add xmpp URI handling directly in Gajim.
  * Remove Gajim-Remote.
  * Remove XEP-0012 (Last Activity).
  * Remove XEP-0136 (Message Archiving).
  * Add XEP-0156 (Discovering Alternative XMPP Connection Methods).
  * Add XEP-0319 (Last User Interaction in Presence).
  * Add XEP-0368 (SRV records for XMPP over TLS).
  * Add XEP-0380 (Explicit Message Encryption).
  * Add Jingle FT:5 support.
  * Lots of other small bugfixes.
- Rebase gajim-do_not_ship_certificate.patch.in.
- Update requirements and recommendations:
  also require things that are not strictly required if they are
  harmless and definitely available.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1522670400">- Update to version 1.0.1:
  * Improve MAM support.
  * Image preview in the file chooser dialogue.
  * Groupchat: Set minimise on auto join default to true.
  * Delete a bookmark when we destroy a room.
  * Fix account deletion.
  * Fix custom font handling.
  * Fix OpenPGP message decryption.
  * Fix window position restore on multi-head setups.
  * Fix scrolling in message window.</changelog>
  <changelog author="dev@stellardeath.org" date="1523188800">- Add the python3-axolotl package to recommends to make OMEMO work
  out of the box.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1525348800">- Update to version 1.0.2:
  * Server name was rejected for group chat bookmarks.
  * setup.py install missed some files if used with "--skip-build".
  * Password was sometimes stored in plaintext.
  * Do not show an error when receiving invalid avatars.
  * Fix no Licence in the About dialogue.
  * Encode filenames before sending.
  * Catch invalid IQ stanzas and log them.
  * XMPP logo in "Add New Contact" window instead Gajim logo.
  * Mark some strings as translatable.
  * Fix an error on file send completion.
  * Removing a bookmark caused an error.
  * Avatar is deleted when updating vCard.
  * Account label didn't change in tooltip of notification area
    icon.
  * Placeholder text didn't disappear.
  * Fix History Manager search.
  * Proxy comobobox in accounts/connections didn't get updated
    after ManageProxies.
  * Fix a problem receiving files.
  * Notification never autohides in gnome.
  * Correctly reload Plugins.
  * Save history export with utf8 encoding.
  * Dont allow plain BOSH by default.</changelog>
  <changelog author="tbro@opensuse.org" date="1526126400">- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * With python3-nbxmpp 0.6.4 the newest version of gajim broke</changelog>
  <changelog author="frede@b1-systems.de" date="1526299200">- Fixed dependency in spec file on python3 &gt;= 3.5.0:
  * since Leap 42.3 and SLES 12 have only 3.4.6 they will not work
- Fixed dependency in spec file on python3-nbxmpp 0.6.5:
  * changed the also the required not only build-required</changelog>
  <changelog author="mvetter@suse.com" date="1526731200">- Update to 1.0.3:
  * bug 8296 Fix errors on roster updates after stream management resume
  * bug 9106 Convert font weight from pango to css values
  * bug 9124 Bring ChatControl to front when notification is clicked
  * Set no-store hint on groupchat chatstates
  * Dont show OOB uri if message body is the same
  * Add missing bybonjour dependency for Windows zeroconf
- Remove Require for pyasn1: not needed anymore</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1527076800">- Symlink the system PEM certfiicate to the path where
  Plugin Installer expects it to be instead of patching
  Plugin Installer as it can be updated locally unpatched and thus
  fail to work (boo#1094343).
- Remove gajim-do_not_ship_certificate.patch.in: no longer needed.</changelog>
</package>
<package pkgid="1be303a509b4fc6410f695996131992f32f7eb8c68fd05396f6a4dab39286b0e" name="gcompris-qt" arch="src">
  <version epoch="0" ver="0.91" rel="lp150.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="d1a3105e311ac75fea88da12ea1af448926aed83ce8b0d04173c106e0b48be3d" name="gcompris-qt" arch="x86_64">
  <version epoch="0" ver="0.91" rel="lp150.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="56190b217c73ccc41841c02241f70c8b0b4a4d1d71f934ba713a036c74f0c6e9" name="gcompris-qt-activities" arch="noarch">
  <version epoch="0" ver="0.91" rel="lp150.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="d16043bec559e2ea4cc4da585b369adcee9ebc4cf34b779344307a1e512879ff" name="gcompris-qt-lang" arch="noarch">
  <version epoch="0" ver="0.91" rel="lp150.3.3.1"/>
  <changelog author="bruno@ioda-net.ch" date="1451736000">- Added upstream patch for Box2D qml-box2d detection
  robustify_Qt-plugin_and_qml-path_detection.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453118400">- Update to upstream 0.52 new version
  It includes all the little patches and improvements from master (
  without new activities or features). Most important is the
  lang activity that was not available in French.
- Remove upstream merged patches
  add-option-to-disable-qml-box2d-module-and-depending-activites.patch
  robustify_Qt-plugin_and_qml-path_detection.patch
- Refreshed content of voices-ogg</changelog>
  <changelog author="bruno@ioda-net.ch" date="1453291200">- Added upstream patch fixing build errors on 13.2
  upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1464177600">- Update to upstream 0.60 new version
- remove merged upstream-fix-compilation-on-openSUSE.patch</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467547200">- Packaging :
  + fix upstream url source
  + Remove second %changelog
  + Add rpmlintrc (man page for binary)
- Refresh voices.tar.xz with recent upstream updates</changelog>
  <changelog author="bruno@ioda-net.ch" date="1467720000">- Fixed definitively upstream src url checked with obs service.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1468756800">- Added also as sources in spec
  + gcompris-qt-rpmlintrc
  + fetch_voices.sh</changelog>
  <changelog author="jengelh@inai.de" date="1469188800">- Set data file subpackages to noarch. Trim long description.</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voices off to separate SRPM
- Rename -translations subpackage to -lang</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Update to last bugfix enhancement upstream revision 0.61
  Complete release changes at http://gcompris.net/news-en.html
  + New activities are:
    baby_word_processor
    tangram
    explore_momuments
    graph_coloring
    land_safe
    photo_hunter
  + Updated images for chess, hangman and horizontal/vertical
    reading activities along with the gcompris logo.
  + Lots of little fixes/improvements have been done (storing and
    restoring the window's width/height at start-up, docbook
    updated, levels/images bonus, adding an internal dataset for
    words games so that we no more expect the network to run
    GCompris.
  + Translation side 17 languages fully supported:
    Belarusian, British English, Brazilian Portuguese, Catalan,
    Catalan (Valencian), Chinese Simplified, Dutch, French,
    Galician, Italian, Norwegian Nynorsk, Polish, Portuguese,
    Romanian, Spanish, Swedish, Ukrainian.
  + some partially: Breton (88%), Chinese Traditional (97%),
    Estonian (82%), Finnish (74%), German (93%), Russian (83%),
    Slovak (76%), Slovenian (82%), Turkish (82%)</changelog>
  <changelog author="wbauer@tmo.at" date="1479556800">- Require libQt5Multimedia5 and libqt5-qtquickcontrols, it doesn't
  start without them (boo#1011125)</changelog>
  <changelog author="wbauer@tmo.at" date="1479729600">- Also require libqt5-qtgraphicaleffects, that's needed too</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- New 0.70 version contains 8 new activities, half of them being
  created by last Google Summer of Code students:
  * an activity where the child has to move elements to build a
    given model (crane by Stefan Toncu)
  * an activity to draw the numbers (drawnumbers by Nitish Chauhan)
  * an activity to draw the letters (drawletters by Nitish Chauhan)
  * an activity to find on which words a given letter belongs
    (letter-in-word by Akshat Tandon)
  * the nine men morris game against Tux (nine_men_morris by Pulkit
    Gupta)
  * the nine men morris game with a friend
    (nine_men_morris_2_players by Pulkit Gupta)
  * an activity to learn to split a given number of candies amongst
    children (share by Stefan Toncu)
  * an activity to learn roman numbers (roman_numerals by Bruno
    Coudoin)
  + new features and bug fixes:
  * search feature by Rishabh Gupta
  * windows build by Bruno Coudoin and Johnny Jazeix
  * hint icon in the bar (used in photohunter) by Johnny Jazeix
  * neon build by Jonathan Riddell
  * openSUSE Tumbleweed build by Bruno Friedmann
  * archlinux (https://aur.archlinux.org/packages/gcompris-qt/)
    by Jose Riha
  * KaOS (http://kaosx.tk/packages/index.php?act=show&amp;subdir=\
    build&amp;sortby=date&amp;file=gcompris-0.70-1-x86_64.pkg.tar.xz)
    by demm
  * package on mageia cauldron by Timothee Giet
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.
  * new graphics for crane by Timothee Giet
  * screenshots on gcompris.net updated to the Qt version
- Update gcompris-qt-voices to 20161224 version</changelog>
  <changelog author="bruno@ioda-net.ch" date="1486987200">- Add missing requires : libQt5Svg5 and qml-box2d that obs/rpm
  doesn't add when they should.
  Fixing empty gcompris-qt on pure leap Gnome3 installation.
- Add missing desktop, appdata, icon files
- Fix copyright year</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Upgrade to last release 0.80
  This new version contains 6 new activities:
  + a categorization activity where the child has to categorize
    item depending on the theme (by Divyam Madaan)
  + a guess count game where the child has to find the good
    operations to find a given number (by Rahul Yadav)
  + a game where you have to let the computer put the last ball in
    a row (by Utkarsh Tiwari)
  + as above but the child plays with a friend (Utkarsh Tiwari)
  + a checkers game (by Johnny Jazeix)
  + as above but the child plays with a friend (by Johnny Jazeix)
  We always have new features and content:
  + Polish lang dataset by ?ukasz Wojni?owicz
  + Swedish lang dataset by Stefan Asserhäll
  + Ukrainian lang dataset by Yuri Chornoivan
  + new icons
  + Updated graphics on several activities
  + lots of bug fixes
  + website translation migrated to KDE infrastructure and
    translated in Belarusian, Catalan, Catalan (Valencia),
    Romanian, Portuguese and Ukrainian
  + new mingw windows builds
  + partial translations in Greek and Hindi
- Packaging :
  + Fix icons included (the real svg is used now upstream)
  + Add appinfo and metainfo
  + Raise minimal QT version to be &gt;= 5.6.0 upstream #6c203a3</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Upgrade to bugfix release 0.81 the most important changes are:
  + Categorization, fix the "Shape" category
  + Categorization, fix the menu layout
  + Categorization, display score in expert mode
  + Guesscount, fix invalid result
  + Add Indonesian locale
  + Fix the missing copyright and licence info
  + Fix a font issue on windows version
  + Add a new minimal version with software rendering
    (requires Qt 5.8)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Upgrade to new 0.90 version
  + 8 new activities:
  * A calendar activity where the child learns how to use it
  * Another activity based on calendar where the child has to find
    the date corresponding at a date + some days further/before
    this date
  * An activity to learn how people on a family are related and how
    to call this relation
  * Another similar activity with questions about family members
  * An extension of memory activities where the child has to match
    lowercase letters with their corresponding uppercase
  * The same activity in two players mode with Tux
  * The Gtk+ port and improved submarine activity where the child
    learns a basic overview on how to run a submarine
  * The digital electricity activity where the child can use
    different components to create an electric schema. There is also
    a tutorial mode to explain how to use each component
  + bug fixes:
  * Irish translation, voices and datasets by Séamus Ó Briain
  * Updated graphics on several activities
  * Lot of improvements on removing overriding elements issues
    (score were hidden behind the bar...)
  * Add Tutorial item to be able to have activity introductions
    with both images and texts
  * Add easy mode in letter in word with less words displayed
  * Add license page
  * Lots of small bug fixes
- Modernize spec file with spec-cleaner -m</changelog>
  <changelog author="mimi.vx@gmail.com" date="1521547200">- Provide and obsolette original gtk gcompris
- use secure optflags on all distributions.
- and use proper cmake macros for build</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Upgrade to new 0.91 version
  summary of changes
  + Activities:
  - fix English text in several activities
  - fix score position in several activities
  - block some buttons and interactions when needed in several
    places
  - lots of fixes for audio in several activities
  - number_sequence (and others based on it), fix base layout
  - update dataset for clickanddraw, drawnumbers and drawletters
  - crane, add localized dataset
  - lightsoff, add keyboard support and other fixes
  - algorithm, add keyboard support and other fixes
  - money, fixes for locale currency used
  - ballcatch, improve audio feedback
  - calendar, several little fixes
  - memory-case-association fix icons size
  ° Other changes:
  - re-enable sound effects on linux
  - improved playback of sound effects, no more delay
  - add captions to images and OARS tags in the appdata
  - add Scottish Gaelic to core, and update some datasets for it
  - main bar, fix some items size
  - remove unused images
  + Translations
  16 languages fully supported: British English, Catalan, Catalan
  (Valencian), Chinese Traditional, Dutch, French, Greek,
  Indonesian, Irish Gaelic, Italian, Polish, Portuguese, Romanian,
  Spanish, Swedish, Ukrainian.
  15 languages partially supported: Norwegian Nynorsk (97%), Hindi
  (96%), Turkish (90%), Scottish Gaelic (86%), Galician (86%),
  Brazilian Portuguese (84%), Belarusian (84%), German (81%),
  Chinese Simplified (79%), Russian (78%), Estonian (77%), Slovak
  (76%), Finnish (76%), Slovenian (69%), Breton (65%).
  If you want to help completing one of these translations or
  adding a new one, please contact upstream.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="e9c5c22d7a8353ced051d9442b7e7c21c5a69887a5ed76f91e97742140e9a603" name="gcompris-qt-voices" arch="noarch">
  <version epoch="0" ver="0~20180517" rel="lp150.2.4.1"/>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voice subpackage off gcompris-qt.spec</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Updated contents to match gcompris-qt 0.61 release</changelog>
  <changelog author="bruno@ioda-net.ch" date="1479902400">- Fix path to install to allow gcompris-qt to find the voices</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- Refresh content for gcompris-qt release 0.70
  * czech.ogg got renamed and refreshed to czechia.ogg
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * various updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Refrech content for gcompris-qt release 0.80
  * Updated LICENSE file with the upstream changes.
    Renamed, deleted, added files.
- Packaging : change requires to gcomprit-qt</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505304000">- Update version to its real state 20170826
- Fix provide version to be equal to main package</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Update version 20170930 (gcompris-qt 0.81)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Modernize spec with spec-cleaner minimal
- Update version 20180311 (gcompris-qt 0-90)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Update to version 20180517 (gcompris-qt 0.91)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="898d03caa9a7d13d7b2171fd7c61189578ffe85856baf040a0cf2e870fba64e9" name="gcompris-qt-voices" arch="src">
  <version epoch="0" ver="0~20180517" rel="lp150.2.4.1"/>
  <changelog author="jengelh@inai.de" date="1469620800">- Split voice subpackage off gcompris-qt.spec</changelog>
  <changelog author="bruno@ioda-net.ch" date="1470657600">- Updated contents to match gcompris-qt 0.61 release</changelog>
  <changelog author="bruno@ioda-net.ch" date="1479902400">- Fix path to install to allow gcompris-qt to find the voices</changelog>
  <changelog author="bruno@ioda-net.ch" date="1482580800">- Refresh content for gcompris-qt release 0.70
  * czech.ogg got renamed and refreshed to czechia.ogg
  * word list for Slovakia by Jose Riha
  * word list for Belarusian by Antos Vaclauski
  * various updates on Romanian wordlists and voices by Horia Pelle
  * voices added for Portuguese Brazilian by Marcos D.</changelog>
  <changelog author="bruno@ioda-net.ch" date="1503748800">- Refrech content for gcompris-qt release 0.80
  * Updated LICENSE file with the upstream changes.
    Renamed, deleted, added files.
- Packaging : change requires to gcomprit-qt</changelog>
  <changelog author="bruno@ioda-net.ch" date="1505304000">- Update version to its real state 20170826
- Fix provide version to be equal to main package</changelog>
  <changelog author="bruno@ioda-net.ch" date="1506772800">- Update version 20170930 (gcompris-qt 0.81)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1521028800">- Modernize spec with spec-cleaner minimal
- Update version 20180311 (gcompris-qt 0-90)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526558400">- Update to version 20180517 (gcompris-qt 0.91)</changelog>
  <changelog author="bruno@ioda-net.ch" date="1526817600">- Fix boo#1093988 for Leap 15.0</changelog>
</package>
<package pkgid="b226557d52a633d17b379fcc21c1f7aba6d9c2a50db4e484963d2f1d9e5ba282" name="gd" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="ed7416d9c810835c409143167dee412b3cbdd704bea2b143d7a60503edd694d8" name="gd" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="1cc1e22661c7677ae1d40304d60354810b3122a0cb696d0f61d4cf4bf853dd65" name="gd-devel" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="ab7933f7f3002dd0125084ecea93c616696bea4227b3a18ddaba6e47869f5cb5" name="gdm" arch="src">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="1a8804571a1f0d250fafd2da8fa3c18acd4e0c0ac092ad19098ae5e59bca76dc" name="gdm" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="faff7d2bcaa03029cea9beba0ec0925a6b89c102ada615de4c67b6601394adeb" name="gdm-branding-upstream" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="5bde40a97a1e3c694da37136c9b9015de977c3680b80b435ebb4aaaa44e8cf94" name="gdm-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="e08bf8cd707708710deff9a3bb761eabc45e139c8cee24427177eee04b0147bb" name="gdm-lang" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="7599725063b9c688abade40722654ca745cc20f96cfbb0e03ac32e717cc1f2df" name="gdmflexiserver" arch="noarch">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="8d1bfca98d8105400d452bdd24f99137ba245dc3e941de91b2d09a27b2a5c13c" name="geotiff" arch="src">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="judas_iscariote@shorewall.net" date="1184414400">- spec file cleanup
  Mon Jun 19 12:00:00 UTC 2006 - Tim Fischer
- SPEC file created for SUSE 10.1</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.4" date="1213012800">- SPEC file created for openSUSE build service</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="62878d53a6ec59048a95923f7d9a48ff6dba15e3bbb58522ac8afe44e5c93106" name="geotiff" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="21d007a4f60caa1a9a74ef6add7314967ac09396ae4605dcf7719579970c100f" name="geotiff-devel" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="68371b6acddfc6382cae67dd7899f9f7d5e53cc970220ff2ae4b5631efe96e07" name="ghostscript" arch="src">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="ee04a7f87fb83799954ca8fa6028a07439153cfac9027c67110e2dc45d64bb4f" name="ghostscript" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="a492bb6077457481f65a9061c6ba28d68e1bcab483a31b65ddb7712069ab66aa" name="ghostscript-devel" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="6ea1e9f95e9deb62a4bb53adeef74b55fd7775f8b2d7d2051829d0e872f809f1" name="ghostscript-mini" arch="src">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="7bd82c15db068bcf4fa4c83554b69351e060e2c59a6e50a7341100a73886b8fb" name="ghostscript-mini" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="ac0b6a098e845eae76a7c65fff80e30e29da1f6ab505486721c7ebe49ae00cbc" name="ghostscript-mini-devel" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="dcc4961ac7048012416bc41046728bd6087490ba2a863f2872f1da90c833f00e" name="ghostscript-x11" arch="x86_64">
  <version epoch="0" ver="9.23" rel="lp150.2.3.1"/>
  <changelog author="schwab@suse.de" date="1447848000">- Do not use library sources for freetype jpeg libpng tiff zlib
  from the Ghostscript upstream tarball because we prefer to use
  for long-established standard libraries the ones from SUSE
  in particular to automatically get SUSE security updates
  for standard libraries.
  In contrast we use e.g. lcms2 from the Ghostscript upstream
  tarball because this one is specially modified to work with
  Ghostscript so that we cannot use lcms2 from SUSE.
- remove-zlib-h-dependency.patch removes dependency on zlib/zlib.h
  in makefiles as we do not use the zlib sources from the
  Ghostscript upstream tarball.</changelog>
  <changelog author="jsmeix@suse.de" date="1458302400">- Version upgrade to 9.19rc1 (first release candidate for 9.19).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- ijs-config is no longer provided
- fix_make_install.patch fixes an install error and
  add_brackets_for_old_autoconf.patch fixes an autoconf error
  see http://bugs.ghostscript.com/show_bug.cgi?id=696665
- fix_ijs_and_x11_for_FirstPage_and_LastPage.patch is no longer
  needed because it is fixed in the upstream sources.
- install_gserrors.h.patch is no longer needed because it is fixed
  in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1458734400">- Version upgrade to 9.19. Mainly a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Metadata pdfmark is now implemented. This allows the user
    to specify an XMP stream which will be written to the
    Catalog of the PDF file. A new pdfmark 'Ext_Metadata' has
    been defined. This takes a string parameter which contains
    XML to be add to the XMP normally created by pdfwrite.
    See "pdfwrite pdfmark extensions" for more information.
  * An experimental, rudimentary raster trapping implementation
    has been added to the Ghostscript graphics library.
    See "Trapping" for details.
  Incompatible changes:
  * (Minor) API change: copy_alpha now supports 8 bit depth
    (as well as the previous 2 and 4).
  * The gs man pages are woefully out of date and basically
    unmaintained. With the release following 9.19, we intend
    to replace their contents with a very limited summary
    of (unlikely to ever change aspects of) calling
    Ghostscript, and a pointer to the (maintained) HTML
    documentation. That is, unless a volunteer is willing
    to update, and commit to maintaining the man pages.
  * ijs-config is no longer provided
  Planned incompatible changes:
  * We plan (ideally for the release following 9.19) to somewhat
    tidy up the device API. We plan to remove deprecated device
    procs (methods/function pointers). We also intend to merge
    the imager state and graphics state (thus eliminating the
    imager state), and change the device API so every device proc
    takes a graphics state parameter (rather than the current
    scheme where only a very few procs take an imager state
    parameter). This should serve as notice to anyone maintaining
    a Ghostscript device outside the canonical source tree that
    you may (probably will) need to update your device(s) when
    these changes happen. Devices using only the non-deprecated
    procs should be trivial to update.
- fix_make_install.patch fixes and
  add_brackets_for_old_autoconf.patch are no longer needed
  because both issues are fixed in the upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1473940800">- Version upgrade to 9.20rc1 (first release candidate for 9.20).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1475150400">- Version upgrade to 9.20. Purely a maintenance release.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy did not happen for this release,
    due to time pressures, but we still intend to undertake the
    following: We plan to somewhat tidy up the device API.
    We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter (rather
    than the current scheme where only a very few procs take an
    imager state parameter). This should serve as notice to anyone
    maintaining a Ghostscript device outside the canonical source
    tree that you may (probably will) need to  update your
    device(s) when these changes happen. Devices using only
    the non-deprecated procs should be trivial to update.</changelog>
  <changelog author="jsmeix@suse.de" date="1476705600">- CVE-2013-5653 (getenv and filenameforall ignore -dSAFER)
  is fixed in the Ghostscript 9.20 upstream sources
  see http://bugs.ghostscript.com/show_bug.cgi?id=694724
  (bsc#1001951).
- CVE-2016-7976.patch fixes that
  various userparams allow %pipe% in paths, allowing
  remote shell command execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697178
  (bsc#1001951).
- CVE-2016-7977.patch fixes that
  .libfile doesn't check PermitFileReading array, allowing
  remote file disclosure
  see http://bugs.ghostscript.com/show_bug.cgi?id=697169
  (bsc#1001951).
- CVE-2016-7978.patch fixes that
  reference leak in .setdevice allows
  use-after-free and remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697179
  (bsc#1001951).
- CVE-2016-7979.patch fixes that
  type confusion in .initialize_dsc_parser allows
  remote code execution
  see http://bugs.ghostscript.com/show_bug.cgi?id=697190
  (bsc#1001951).
- CVE-2016-8602.patch fixes a NULL dereference in .sethalftone5
  see http://bugs.ghostscript.com/show_bug.cgi?id=697203
  (bsc#1004237).</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1484222400">- Set SOURCE_DATE_EPOCH based on changelog head
- Add 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  * Use SOURCE_DATE_EPOCH for mkromfs output for reproducible build
- Add 0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  * Sort ROM contents for deterministic output</changelog>
  <changelog author="jsmeix@suse.de" date="1491825600">- Version upgrade to 9.21.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * pdfwrite now preserves annotations from
    input PDFs (where possible).
  * The GhostXPS interpreter now provides the pdfwrite device
    with the data it requires to emit a ToUnicode CMap: thus
    allowing fully searchable PDFs to be created from XPS
    input (in the vast majority of cases).
  * Ghostscript now allows the default color space
    for PDF transparency blends.
  * The Ghostscript/GhostPDL configure script now has much
    better/fuller support for cross compiling.
  * The tiffscaled and tiffscaled4 devices can now
    use ETS (Even Tone Screening)
  * The toolbin/pdf_info.ps utility can now emit
    the PDF XML metadata.
  * Ghostscript has a new scan converter available
    (currently optional, but will become the default in a near
    future release). It can be enabled by using the command line
    option: '-dSCANCONVERTERTYPE=2'. This new implementation
    provides vastly improved performance with large and complex
    paths.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes:
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device
    procs (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need to
    update your device(s) when these changes happen. Devices using
    only the non-deprecated procs should be trivial to update.
- CVE-2016-7976.patch and CVE-2016-7977.patch and
  CVE-2016-7978.patch and CVE-2016-7979.patch and
  CVE-2016-8602.patch are no longer needed because
  those issues are fixed in the upstream sources.
- 0001-mkromfs-make-build-reproducible-use-buildtime-from-S.patch
  and
  0002-mkromfs-sort-gp_enumerate_files-output-for-determini.patch
  are no longer needed because both are included
  in the upstream sources, see the upstream issue
  https://bugs.ghostscript.com/show_bug.cgi?id=697484
- Again use the zlib sources from Ghostscript upstream
  and disable remove-zlib-h-dependency.patch because
  Ghostscript 9.21 does no longer build this way,
  cf. the entry below dated "Wed Nov 18 11:46:58 UTC 2015"</changelog>
  <changelog author="jsmeix@suse.de" date="1491998400">- CVE-2016-10317 (bsc#1032230)
  heap buffer overflow in fill_threshhold_buffer()
  is not yet fixed because there is no fix available at
  https://bugs.ghostscript.com/show_bug.cgi?id=697459
- CVE-2016-10219 (bsc#1032138)
  divide by zero in intersect()
  https://bugs.ghostscript.com/show_bug.cgi?id=697453
  is fixed in the version 9.21 upstream sources
- CVE-2016-10218 (bsc#1032135)
  null pointer dereference in pdf14_pop_transparency_group()
  https://bugs.ghostscript.com/show_bug.cgi?id=697444
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10217 (bsc#1032130)
  use-after-free in pdf14_cleanup_parent_color_profiles()
  that is related to pdf14_open() in base/gdevp14.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697456
  is fixed in the version 9.21 upstream sources.
- CVE-2016-10220 (bsc#1032120)
  null pointer dereference in gx_device_finalize() that is
  related to gs_makewordimagedevice() in base/gsdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697450
  is fixed in the version 9.21 upstream sources.
- CVE-2017-5951.patch fixes
  null pointer dereference in ref_stack_index() that is
  related to mem_get_bits_rectangle() in base/gdevmem.c
  https://bugs.ghostscript.com/show_bug.cgi?id=697548
  (bsc#1032114)</changelog>
  <changelog author="jsmeix@suse.de" date="1493726400">- CVE-2017-8291.patch fixes
  a type confusion in .rsdparams and .eqproc
  see https://bugs.ghostscript.com/show_bug.cgi?id=697808
  and https://bugs.ghostscript.com/show_bug.cgi?id=697799
  (bsc#1036453).</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1496404800">- CVE-2017-7207.patch fixes a NULL pointer dereference
  in mem_get_bits_rectangle
  see https://bugs.ghostscript.com/show_bug.cgi?id=697676
  (bsc#1030263)
- CVE-2017-9216.patch fixes a NULL pointer dereference
  in jbig2_huffman_get
  see https://bugs.ghostscript.com/show_bug.cgi?id=697934
  (bsc#1040643)</changelog>
  <changelog author="jsmeix@suse.de" date="1505390400">- Version upgrade to 9.22rc1 (first release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Since Ghostscript 9.22rc1 font2c and wftopfa are removed.
- CVE-2017-5951.patch CVE-2017-7207.patch
  CVE-2017-8291.patch and CVE-2017-9216.patch
  are fixed in the version 9.22rc1 upstream sources.</changelog>
  <changelog author="jsmeix@suse.de" date="1506686400">- Version upgrade to 9.22rc2 (second release candidate for 9.22).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing</changelog>
  <changelog author="jsmeix@suse.de" date="1511956800">- Version upgrade to 9.22.
  For details see the News.htm and History9.htm files.
  Highlights in this release include:
  * Ghostscript can now consume and produce (via the pdfwrite
    device) PDF 2.0 compliant files.
  * The main focus of this release has been security and code
    cleanliness. Hence many AddressSanitizer, Valgrind and
    Coverity issues have been addressed.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy (still!) did not happen for
    this release, due to time pressures, but we still intend
    to undertake the following: We plan to somewhat tidy up
    the device API. We intend to remove deprecated device procs
    (methods/function pointers) and change the device API
    so every device proc takes a graphics state parameter
    (rather than the current scheme where only a very few procs
    take an imager state parameter). This should serve as notice
    to anyone maintaining a Ghostscript device outside the
    canonical source tree that you may (probably will) need
    to update your device(s) when these changes happen.
    Devices using only the non-deprecated procs should be
    trivial to update.
- Up to 9.22rc1 it "just built" for all openSUSE versions but
  since 9.22rc2 the libijs part does no longer buid for any
  released openSUSE version where if fails with messages like
    libtool: Version mismatch error.
    This is libtool 2.4.6 Debian-2.4.6-2, but the
    definition of this LT_INIT comes from libtool 2.4.2.
    You should recreate aclocal.m4 with macros from
    libtool 2.4.6 Debian-2.4.6-2 and run autoconf again.
    Makefile: recipe for target 'ijs.lo' failed
  so that currently it only builds for Tumbleweed/Factory.
  Presumably it is not too complicated to make it build again
  also for released openSUSE versions but currently I have
  less than zero energy to fix such "latest breaking changes"
  so that for now Ghostscript 9.22 is only provided for
  openSUSE Tumbleweed/Factory and the upcoming SLE15/Leap15.</changelog>
  <changelog author="novell@mirell.de" date="1519732800">- Add ghostscript-fix-debug-use.patch from upstream to fix broken
  printing with some drivers (especially Dell Printers) from
  https://bugs.ghostscript.com/show_bug.cgi?id=698837
- Fix build for SLE targets</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519819200">- Use -p /sbin/ldconfig instead of shell post(un) scriptlet, drop
  explicit Prereq for ldconfig
- Use shared libgs library for gs binary instead of static linked
  version
- Use --disable-compile-inits, to allow unbundling of Resource files
- Remove --disable-omni switch, has been removed in GS 9.20
- Keep patch ordering in full/mini consistent
- Remove patch backup files to avoid packaging</changelog>
  <changelog author="jsmeix@suse.de" date="1521115200">- Version upgrade to 9.23rc1 (first release candidate for 9.23).
  For details see the News.htm and History9.htm files.
  Regarding installing packages (in particular release candidates)
  from the openSUSE build service development project "Printing"
  see https://build.opensuse.org/project/show/Printing
- Adapted ppc64le-support.patch: In Ghostscript 9.23 there is now
  lcms2art/include/lcms2art.h (instead of lcms2/include/lcms2.h).
- ghostscript-fix-debug-use.patch is no longer needed
  because the issue is fixed in the upstream sources.
- fix_ln_docdir_gsdatadir.patch avoids
  "base/unixinst.mak:162: recipe for target 'install-doc' failed"
- Adapted spec file to the new Ghostscript upstream documentation
  directory /usr/share/doc/ghostscript/9.23/</changelog>
  <changelog author="jsmeix@suse.de" date="1521201600">- For now use lcms2 from SUSE because that is what currently
  Ghostscript upstream recommends according to
  https://ghostscript.com/pipermail/gs-devel/2018-March/010061.html
  because since Ghostscript 9.23rc1 there is no longer lcms2
  in Ghostscript but now it is lcms2art which is the beginning
  of a lcms2 fork, see News.htm that reads in particular
  "LCMS2 is not thread safe ... Our fork will be thread safe ...
  We will maintain compatibility between Ghostscript and LCMS2
  for a time, but not in perpetuity", see also
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c14
- On SLE11 and on SLE12-SP1 there is liblcms2-2-2.5
  which is too old so that configure fails there with
    configure: error: lcms2 not found, or too old
  but there is no configure option to build it without lcms2
  so that for SLE11 and SLE12-SP1 it is built with
  the lcms2art in Ghostscript.
- ppc64le-support.patch is no longer needed because it only
  contained a fix for lcms2art/include/lcms2art.h in Ghostscript
  but currently lcms2 from SUSE is used instead (see above).
- Do no longer require any fonts packages in particular
  neither require ghostscript-fonts-std because the PostScript
  Base35 fonts are provided by Ghostscript (in 'Resource')
  nor require ghostscript-fonts-other (provides Bitream Charter,
  Adobe Utopia, URW Antiqua, URW Grotesq and Hershey fonts where
  all but the last are also provided by texlive-&lt;name&gt;-fonts) and
  those fonts are not required for PostScript compliance, see
  https://bugzilla.opensuse.org/show_bug.cgi?id=1082896#c13</changelog>
  <changelog author="jsmeix@suse.de" date="1521720000">- Version upgrade to 9.23
  Highlights in this release include:
  * Ghostscript now has a family of 'pdfimage' devices
    (pdfimage8, pdfimage24 and pdfimage32) which produce
    rendered output wrapped up as an image in a PDF.
    Additionally, there is a 'pclm' device which
    produces PCLm format output.
  * There is now a ColorAccuracy parameter allowing the user
    to decide between speed or accuracy in ICC color transforms.
  * JPEG Passthrough: devices which support it can now receive
    the 'raw' JPEG stream from the interpreter.
    The main use of this is the pdfwrite/ps2write family of devices
    that can now take JPEG streams from the input file(s) and write
    them unchanged to the output (thus avoiding additional
    quantization effects).
  * PDF transparency performance improvements
  * IMPORTANT: We (i.e. Ghostscript upstream) are in the process
    of forking LittleCMS.
    LCMS2 is not thread safe, and cannot be made thread safe
    without breaking the ABI. Our fork will be thread safe,
    and include performance enhancements (these changes have all
    be been offered and rejected upstream). We will maintain
    compatibility between Ghostscript and LCMS2 for a time,
    but not in perpetuity. Our fork will be available as its own
    package separately from Ghostscript (and MuPDF).
  * We have continued the focus on code hygiene in this release
    cleaning up security issues, ignored return values,
    and compiler warnings.
  * The usual round of bug fixes, compatibility changes,
    and incremental improvements.
  Incompatible changes
  * The planned device API tidy has, unfortunately, been
    indefinitely postponed, until appropriate resources
    are available.
  For a release summary see:
  http://www.ghostscript.com/doc/9.23/News.htm
  For details see the News.htm and History9.htm files.
  See also the entries below since "Version upgrade to 9.22"
  (boo#1082896 and boo#1074266).</changelog>
  <changelog author="jsmeix@suse.de" date="1528200000">- CVE-2018-10194.patch fixes stack-based buffer overflow
  in gdevpdts.c (bsc#1090099), see
  https://bugs.ghostscript.com/show_bug.cgi?id=699255 and
  http://git.ghostscript.com/?p=ghostpdl.git;a=commit;h=39b1e54b2968620723bf32e96764c88797714879</changelog>
</package>
<package pkgid="8680d1b81a98d4f35859c5d6dab89b9a113a493f859ee477c129e004f2ec389d" name="git" arch="src">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="fbd02f0e608ce1e4985222f8eda885e0afb1a005577e123077cbf5ca236429eb" name="git" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="5dcca7743a3d44e4380ace5c96c3fdfbf7b0f570169765c422c95483c6da27a2" name="git-annex" arch="src">
  <version epoch="0" ver="6.20180626" rel="lp150.2.5.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="3345ee1890c48acf8ca22fe72e1d471b378a33d3bfbfbb446c4e60cf1304f1e1" name="git-annex" arch="x86_64">
  <version epoch="0" ver="6.20180626" rel="lp150.2.5.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="c71268216aa153e6c869477718712e7164d5e9bb85a47a597b96ad38a798a5d8" name="git-annex-bash-completion" arch="x86_64">
  <version epoch="0" ver="6.20180626" rel="lp150.2.5.1"/>
  <changelog author="psimons@suse.com" date="1477828800">- Update to version 6.20161027 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1478001600">- Update to version 6.20161031 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479124800">- Update to version 6.20161111 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1479643200">- Update to version 6.20161118 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1481889600">- Update to version 6.20161210 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1483531200">- Update to version 6.20170101 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1487592000">- Update to version 6.20170214 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1488456000">- Update to version 6.20170301.1 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1490184000">- Update to version 6.20170321 with cabal2obs.
  * Bugfix: Passing a command a filename that does not exist sometimes did not display an error, when a path to a directory was also passed.
  * status: Propigate nonzero exit code from git status.
  * Linux standalone builds put the bundled ssh last in PATH, so any system ssh will be preferred over it.
  * assistant: Add 1/200th second delay between checking each file in the full transfer scan, to avoid using too much CPU.
  * get -J: Improve distribution of jobs amoung remotes when there are more jobs than remotes.
  * fsck -q: When a file has bad content, include the name of the file in the warning message.
  * Windows: Improve handling of shebang in external special remote program, searching for the program in the PATH.
  * Drop support for building with old versions of dns, http-conduit, directory, feed, and http-types.
  * Windows: Fix bug in shell script shebang lookup code that caused a "delayed read on closed handle" error.
  * git-annex-shell: Fix bug when used with a recently cloned repository, where "merging" messages were included in the output of configlist (and perhaps other commands) and caused a "Failed to get annex.uuid configuration" error.
  * Support GIT_SSH and GIT_SSH_COMMAND, which are handled close the same as they are by git. However, unlike git, git-annex sometimes needs to pass the -n parameter when using these.
  * sync --content-of=path (-C path) added for when you want to sync only some files' contents, not the whole working tree.</changelog>
  <changelog author="psimons@suse.com" date="1494936000">- Update to version 6.20170510 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1495454400">- Update to version 6.20170519 with cabal2obs.</changelog>
  <changelog author="psimons@suse.com" date="1497873600">- Update to version 6.20170520.</changelog>
  <changelog author="psimons@suse.com" date="1501761600">- Updated with latest spec-cleaner version 0.9.8-8-geadfbbf.</changelog>
  <changelog author="psimons@suse.com" date="1503316800">- Update to version 6.20170818 (bsc#1054653, CVE-2017-12976).
  * Security fix: Disallow hostname starting with a dash, which
    would get passed to ssh and be treated an option. This could
    be used by an attacker who provides a crafted repository url
    to cause the victim to execute arbitrary code via -oProxyCommand.
    (The same class of security hole recently affected git itself.)
  * git-annex.cabal: Deal with breaking changes in Cabal 2.0.
  * Fix build with QuickCheck 2.10.
  * fsck: Support --json.
  * move, copy: Support --batch.
  * Added GIT_ANNEX_VECTOR_CLOCK environment variable, which can be used to
    override the default timestamps used in log files in the git-annex
    branch. This is a dangerous environment variable; use with caution.
  * Fix a git-annex test failure when run on NFS due to NFS lock files
    preventing directory removal.
  * test: Avoid most situations involving failure to delete test
    directories, by forking a worker process and only deleting the test
    directory once it exits.
  * Disable http-client's default 30 second response timeout when HEADing
    an url to check if it exists. Some web servers take quite a long time
    to answer a HEAD request.
  * Added remote configuration settings annex-ignore-command and
    annex-sync-command, which are dynamic equivilants of the annex-ignore
    and annex-sync configurations.
  * Prevent spaces from being embedded in the name of new WORM keys,
    as that handing spaces in keys would complicate things like the
    external special remote protocol.
  * migrate: WORM keys containing spaces will be migrated to not contain
    spaces anymore.
  * External special remotes will refuse to operate on keys with spaces in
    their names. That has never worked correctly due to the design of the
    external special remote protocol. Display an error message suggesting
    migration.
  * Fix incorrect external special remote documentation, which said that
    the filename parameter to the TRANSFER command could not contain
    spaces. It can in fact contain spaces. Special remotes implementors
    that relied on that may need to fix bugs in their special remotes.
  * Fix the external special remotes git-annex-remote-ipfs,
    git-annex-remote-torrent and the example.sh template to correctly
    support filenames with spaces.
  * Windows: Win32 package has subsumed Win32-extras; update dependency.</changelog>
  <changelog author="psimons@suse.com" date="1505736000">- The upstream release tarball changed in some trivial way. Copy
  the new tarball into place to keep our version in sync.</changelog>
  <changelog author="psimons@suse.com" date="1506427200">- Update to version 6.20170925.
  * git-annex export: New command, can create and efficiently update
    exports of trees to special remotes.
  * Use git-annex initremote with exporttree=yes to set up a special remote
    for use by git-annex export.
  * Implemented export to directory, S3, and webdav special remotes.
  * External special remote protocol extended to support export.
    Developers of external special remotes should consider if export makes
    sense for them and add support.
  * sync, assistant: Update tracking exports.
  * Support building with feed-1.0, while still supporting older versions.
  * init: Display an additional message when it detects a filesystem that
    allows writing to files whose write bit is not set.
  * S3: Allow removing files from IA.
  * webdav: Checking if a non-existent file is present on Box.com
    triggered a bug in its webdav support that generates an infinite series
    of redirects. Deal with such problems by assuming such behavior means
    the file is not present.
  * webdav: Fix lack of url-escaping of filenames. Mostly impacted exports
    of filenames containing eg spaces.
  * webdav: Changed path used on webdav server for temporary files.</changelog>
  <changelog author="psimons@suse.com" date="1507118400">- Update to version 6.20171003.
  * webdav: Improve error message for failed request to include the request
    method and path.
  * metadata: Added --remove-all.
  * Warn when metadata is inherited from a previous version of a file,
    to avoid the user being surprised in cases where that behavior is not
    desired or expected.
  * sync: Added --cleanup, which removes local and remote synced/ branches.
  * external: When the external special remote program crashed, a newline
    could be output, which messed up the expected output for --batch mode.
  * external: Avoid checking EXPORTSUPPORTED for special remotes that are
    not configured to use exports.
  * test: Fix reversion that made it only run inside a git repository.
  * copy, move: Behave same with --fast when sending to remotes located
    on a local disk as when sending to other remotes.
  * Fix process and file descriptor leak that was exposed when
    git-annex was built with ghc 8.2.1. Broke git-annex test on OSX
    due to running out of FDs, and may have also leaked in other situations.
  * info: Improve cleanup of stale transfer info files.</changelog>
  <changelog author="psimons@suse.com" date="1508414400">- Update to version 6.20171018.
  * add: Replace work tree file atomically on systems supporting hard
    links. Avoids a window where interrupting an add could result in
    the file being moved into the annex, with no symlink yet created.
  * webdav: Avoid unncessisarily creating the collection at the top
    of the repository when storing files there, since that collection
    is created by initremote.
    (This seems to work around some brokenness of the box.com webdav
    server, which caused uploads to be very slow or sometimes fail.)
  * webdav: Make --debug show all webdav operations.
  * get -J/move -J/copy -J/mirror -J/sync -J: Avoid "transfer already in
    progress" errors when two files use the same key.
  * Konqueror desktop file location changed to one used by plasma 5.
    Thanks, Félix Sipma.
  * Avoid repeated checking that files passed on the command line exist.
  * Fix build with aws-0.17.
  * stack.yaml: Update to lts-9.9.</changelog>
  <changelog author="psimons@suse.com" date="1509105600">- Update to version 6.20171026.
  * Windows: Fix reversion that caused the path used to link
    to annexed content to include the drive letter and full path, rather
    than being relative. (`git annex fix` will fix up after this problem).
  * Windows build fixed, and changed to use stack for more reliable build
    environment.
  * Windows: Remove wget from bundle; it needs libraries that are not
    included, and git for windows includes curl which git-annex will use
    instead.
  * Add day to metadata when annex.genmetadata is enabled.
    Thanks, Sean T Parsons
  * stack.yaml: Added nix packages section.
    Thanks, Sean T Parsons</changelog>
  <changelog author="psimons@suse.com" date="1530100800">- Update to version 6.20180626 to fix two security issues that
  remote attackers could exploit to get unauthorized access to
  local files and even decrypt them with the user's private GPG
  key. [bsc#1098062, CVE-2018-10857, bsc#1098364, CVE-2018-10859]
  Important changes are:
  * Refuse to download content, that cannot be verified with a
    hash, from encrypted special remotes (for CVE-2018-10859), and
    from all external special remotes and glacier (for
    CVE-2018-10857). In particular, URL and WORM keys stored on
    such remotes won't be downloaded. If this affects your files,
    you can run `git-annex migrate` on the affected files, to
    convert them to use a hash.
  * Added annex.security.allow-unverified-downloads, which can
    override the above.
  * Added annex.security.allowed-url-schemes setting, which
    defaults to only allowing http, https, and ftp URLs. Note
    especially that file:/ is no longer enabled by default.
  * Removed annex.web-download-command, since its interface does
    not allow supporting annex.security.allowed-url-schemes across
    redirects. If you used this setting, you may want to instead
    use annex.web-options to pass options to curl.
  * git-annex will refuse to download content from http servers on
    localhost, or any private IP addresses, to prevent accidental
    exposure of internal data. This can be overridden with the
    annex.security.allowed-http-addresses setting.
  * Local http proxies will not be used unless allowed by the
    annex.security.allowed-http-addresses setting.
  * Since the interfaces to curl and youtube-dl do not have a way
    to prevent them from accessing localhost or private IP
    addresses, they default to not being used for url downloads.
    Only when annex.security.allowed-http-addresses=all will curl
    and youtube-dl be used.
  Additionally, this update brings many bug fixes and new features.
  http://hackage.haskell.org/package/git-annex-6.20180626/changelog
  has a detailed list of changes.</changelog>
</package>
<package pkgid="8aec6a9273a5272aaa84fab05b619eb0ec97be46d76017a27a86e65ffb39b30a" name="git-arch" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="2cd01ca941eab10904af2eb554b036165ae91c0af91e6ee31b35fad5ba62f48d" name="git-core" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="78e770e7c338d7c7e566cbbf6936eefbcb60bc7d13852b36b3208d3ce24e08d0" name="git-credential-gnome-keyring" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="21d15858fa3393423826ee53d32cb96fc947d35066e12ea1145c8220f4315efd" name="git-credential-libsecret" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="773469aaa6e4764fd235c5c887c70857bbe2ac4ae6139fe1d78abe845a123f1b" name="git-cvs" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="7c9516ce79e21f74a6e9911af520f859ebeb893a81bbf50f5ccc11cc24cbbea8" name="git-daemon" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="e035044191d44e1980c82ac262bc191d460ef3567c99603070e4a0489471de63" name="git-doc" arch="noarch">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="4a4b9810db74121f3ce09a3be4f68a10164cda44867e8e8ae9fe92e96401ea25" name="git-email" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="5d8c273083c23b5cc9be57d103327d2ef43fa861479bfb21ee242c39cce32745" name="git-gui" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="c8b973db839c5478a52fdd3b74f97b0bb782c1366b69d05a2b3d9632695719be" name="git-p4" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="80af70a4d29fdc36a68ecf645f5db8d8aa7a30c9e68074baa8e4076de3ab8549" name="git-svn" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="a2758d9d0b621db5506252e7ab747fcf1a6563faaf0047cdb5763622be0a2f86" name="git-web" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="d94f6ba3907d30b72800956f7b41e9c2b0ac687caadb78fb20767dcb406ab419" name="gitk" arch="x86_64">
  <version epoch="0" ver="2.16.4" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1501934400">- git 2.14.0:
  * Use of an empty string as a pathspec element that is used for
    'everything matches' is deprecated, use '.'
  * Avoid blindly falling back to ".git" when the setup sequence
    indicates operation not on a Git repository
  * "indent heuristics" are now the default.
  * Builds with pcre2
  * Many bug fixes, improvements and updates</changelog>
  <changelog author="astieger@suse.com" date="1502366400">- git 2.14.1 (bsc#1052481):
  * Security fix for CVE-2017-1000117: A malicious third-party can
    give a crafted "ssh://..." URL to an unsuspecting victim, and
    an attempt to visit the URL can result in any program that
    exists on the victim's machine being executed. Such a URL could
    be placed in the .gitmodules file of a malicious project, and
    an unsuspecting victim could be tricked into running
    "git clone --recurse-submodules" to trigger the vulnerability.
  * A "ssh://..." URL can result in a "ssh" command line with a
    hostname that begins with a dash "-", which would cause the
    "ssh" command to instead (mis)treat it as an option. This is
    now prevented by forbidding such a hostname (which should not
    impact any real-world usage).
  * Similarly, when GIT_PROXY_COMMAND is configured, the command
    is run with host and port that are parsed out from "ssh://..."
    URL; a poorly written GIT_PROXY_COMMAND could be tricked into
    treating a string that begins with a dash "-" as an option.
    This is now prevented by forbidding such a hostname and port
    number (again, which should not impact any real-world usage).
  * In the same spirit, a repository name that begins with a dash
    "-" is also forbidden now.</changelog>
  <changelog author="astieger@suse.com" date="1506427200">- git 2.14.2:
  * fixes to color output
  * http.{sslkey,sslCert} now interpret "~[username]/" prefix
  * fixes to walking of reflogs via "log -g" and friends
  * various fixes to output correctness
  * "git push --recurse-submodules $there HEAD:$target" is now
    propagated down to the submodules
  * "git clone --recurse-submodules --quiet" c$how propagates quiet
    option down to submodules.
  * "git svn --localtime" correctness fixes
  * "git grep -L" and "git grep --quiet -L" now report same exit code
  * fixes to "git apply" when converting line endings
  * Various Perl scripts did not use safe_pipe_capture() instead
    of backticks, leaving them susceptible to end-user input.
    CVE-2017-14867 bsc#1061041
  * "git cvsserver" no longer is invoked by "git daemon" by
    default</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- git 2.14.3:
  * git send-email understands more cc: formats
  * fixes so gitk --bisect
  * git commit-tree fixed to handle -F file alike
  * Prevent segfault in "git cat-file --textconv"
  * Fix function header parsing for HTML
  * Various small fixes to user commands and and internal functions</changelog>
  <changelog author="astieger@suse.com" date="1509537600">- git 2.15.0:
  * Use of an empty string as a pathspec element that is used for
  'everything matches' is still warned and Git asks users to use a
    more explicit '.' for that instead. Removal scheduled for 2.16
  * Git now avoids blindly falling back to ".git" when the setup
    sequence said we are _not_ in Git repository (another corner
    case removed)
  * "branch --set-upstream" was retired, deprecated since 1.8
  * many other improvements and updates</changelog>
  <changelog author="tiwai@suse.de" date="1509969600">- Build with the external libsha1detectcoll (bsc#1042644)</changelog>
  <changelog author="jmatejek@suse.com" date="1510228800">- split off p4 to a subpackage (bsc#1067502)
- do not buildrequire asciidoc (dependent on Python 2) when
  not building docs
- switch to Python 3 for tests</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tiwai@suse.de" date="1511870400">- Rewrite from sysv init to systemd unit file for git-daemon
  (bsc#1069803)</changelog>
  <changelog author="aavindraa@gmail.com" date="1512129600">- git 2.15.1:
  * fix "auto" column output
  * fixes to moved lines diffing
  * documentation updates
  * fix use of repositories immediately under the root directory
  * improve usage of libsecret
  * fixes to various error conditions in git commands</changelog>
  <changelog author="avindra@opensuse.org" date="1516363200">- git 2.16.0:
  * See https://raw.github.com/git/git/master/Documentation/RelNotes/2.16.0.txt
- partial cleanup with spec-cleaner
- drop git-gui-tclIndex.patch
  * merged upstream in da10ea373b80cc8bf8efca5acb1d11ecf410fb0c</changelog>
  <changelog author="astieger@suse.com" date="1516708800">- git 2.16.1:
  * "git clone" segfaulted when cloning a project that happens to
    track two paths that differ only in case on a case insensitive
    filesystem</changelog>
  <changelog author="avindra@opensuse.org" date="1518955200">- git 2.16.2:
  * An old regression in "git describe --all $annotated_tag^0" has
  been fixed.
  * "git svn dcommit" did not take into account the fact that a
  svn+ssh:// URL with a username@ (typically used for pushing)
  refers to the same SVN repository without the username@ and
  failed when svn.pushmergeinfo option is set.
  * "git merge -Xours/-Xtheirs" learned to use our/their version
  when resolving a conflicting updates to a symbolic link.
  * "git clone $there $here" is allowed even when here directory
  exists as long as it is an empty directory, but the command
  incorrectly removed it upon a failure of the operation.
  * "git stash -- &lt;pathspec&gt;" incorrectly blew away untracked files
  in the directory that matched the pathspec, which has been
  corrected.
  * "git add -p" was taught to ignore local changes to submodules
  as they do not interfere with the partial addition of regular
  changes anyway.</changelog>
  <changelog author="fcrozat@suse.com" date="1519214400">- Create subpackage for libsecret credential helper.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1519732800">- Move %{?systemd_requires} to daemon subpackage</changelog>
  <changelog author="tiwai@suse.de" date="1520337600">- Build with asciidoctor for the recent distros (bsc#1075764)</changelog>
  <changelog author="tiwai@suse.de" date="1520510400">- Drop superfluous xinetd snippet, no longer used (bsc#1084460)</changelog>
  <changelog author="avindra@opensuse.org" date="1521806400">- git 2.16.3:
  * "git status" after moving a path in the working tree (hence
    making it appear "removed") and then adding with the -N option
    (hence making that appear "added") detected it as a rename, but
    did not report the  old and new pathnames correctly.
  * "git commit --fixup" did not allow "-m&lt;message&gt;" option to be
    used at the same time; allow it to annotate resulting commit
    with more text.
  * When resetting the working tree files recursively, the working
    tree of submodules are now also reset to match.
  * Fix for a commented-out code to adjust it to a rather old API
    change around object ID.
  * When there are too many changed paths, "git diff" showed a
    warning message but in the middle of a line.
  * The http tracing code, often used to debug connection issues,
    learned to redact potentially sensitive information from its
    output so that it can be more safely sharable.
  * Crash fix for a corner case where an error codepath tried to
    unlock what it did not acquire lock on.
  * The split-index mode had a few corner case bugs fixed.
  * Assorted fixes to "git daemon".
  * Completion of "git merge -s&lt;strategy&gt;" (in contrib/) did not
    work well in non-C locale.
  * Workaround for segfault with more recent versions of SVN.
  * Recently introduced leaks in fsck have been plugged.
  * Travis CI integration now builds the executable in 'script'
    phase to follow the established practice, rather than during
    'before_script' phase.  This allows the CI categorize the
    failures better ('failed' is project's fault, 'errored' is
    build environment's).</changelog>
  <changelog author="kukuk@suse.de" date="1522152000">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="tiwai@suse.de" date="1527681600">- Update to git 2.16.4: security fix release
  * path sanity-checks on NTFS can read arbitrary memory
    (CVE-2018-11233, bsc#1095218)
  * arbitrary code execution when recursively cloning a malicious
    repository (CVE-2018-11235, bsc#1095219)</changelog>
</package>
<package pkgid="c1ecf5e901d98b16e440da233357ef5b934cc52d4fb853bf72ebbe8365d94a9a" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="3fff436f4d422d8e9f0263d92f6eba78ec694112f1721dfe982a4aa56f49186f" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="6307ebfce7d1b59fc32d7fa012029e34d5af77ef1f1928b0a66051dc8cf0e637" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="69f572c99d0ac7d1ec9378aca1a85062c159fe66e64f860d3c6ba153db29b338" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="6c40fd5c7c8ea408e86367726a8380ae02e21757c70b903103ed5a599b9ea0ea" name="glibc" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="ccbf978c4b98059500e16ab9c4d8b5cd1eec6b515e9b144b7eb32aff5d06ec07" name="glibc" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="f977838156d3e2c177682be54164e8e8239587158245fedef2a0e569756d681a" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="1ff179450234ff5109aa24cdaca5af64588ea868a669d79967cd2a4340631fb2" name="glibc-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="a08927fbec02b2744763517605b781b285fb24ca0b36dc08c7ae433c3dd609d9" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="ae1f41affe63b1dda60edae1bde92e33c3bf6ec0f034873ad332c586ea81118e" name="glibc-devel" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="ffebea957c212b38f1c163c5747900b31fd22b413e8ceb18a3f913f033753880" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="883b0f5e8187b39e28b6c7612a1ad508f55725fcfa7b4a31d663937fe50f6f97" name="glibc-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="28dd048e1061051286abfaf1974d78c124df37a431f4b18329a4bf13f04a5d71" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="8b7e055b974f98a391bfb5e44113ca8986cebbecb9b3ea35387c5d6dddb07e77" name="glibc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="f6a1d68aff15d6b782e019d7bbcb3303b7c8d646e9b452cd6c7ea90678646f82" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="38f08bcab81f2f3e88d33c7e5142609a432668a6be239fab0a301da48246b41e" name="glibc-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="b5de7c9bf332dbe85e02056b6a2b0a1219b875c821d75f6c1277eecc65d1afe1" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="305ed8862882e9dbaef11c1482fb1324f5f6e651935bf053ad8d29f7f54c7b22" name="glibc-extra" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="4089788aec0b3b25f6eb3f99216838bf45311be73b9c0e45ef9a44837e681069" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="a9a14b9df8f1fe57706b1cfce98ca60f08f91cdf945e81c8b370da43efbb2138" name="glibc-html" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="5cc666366ff4375e2a5cc6914627f583a7c2fca30d0a31be7f701e4294657b1f" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="31c5b4b4f8143120cf881e43c83ace446025a4b8c643759127d9ba32cf525cbe" name="glibc-i18ndata" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="87c98b11821356c2e8a798a5903739d1b6209aab53018fcd37254bbfcae66540" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="d854763d4a36b04b72d6865fe97e951c853ed3eafe18e48af99723b11583964d" name="glibc-info" arch="noarch">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="56295b5f964be4179bbad656aa4a4a62d5b0d471ff031b6f881ac836f5863ce1" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="52c34d3b2a2778e0fa44877046cd35664a13bb87f9a18f2821081545e46e15d5" name="glibc-locale" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="2fd6a0b4afad58668c1c0359891657a2f407a589d0935dd3bcf616ab05bb283b" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="992913522458fde333178b811bae771e8279fcdd174abff5fb591fbf7cd23300" name="glibc-locale-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="cf26c293e6d34f3233c7e5ee64c12838f7d021c4e258413a98e12ed10919ecd1" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="4bef71b9f0a6046b2ebd0b47f1258bf4164f8a389163d087bee2ed7ed4fb89a2" name="glibc-profile" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="497f8c4052db88503ebd32f1b59bdaf371ac11b27641798f400ff7a6f8941cbf" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="e12bf537d24350a8d0fca6b2d195880ef28e77ddf88f4a386c4cffc5e1a83d50" name="glibc-profile-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="7f620689203bb19b8da70a3e0c5aacff2345febce737cba9a5cc932f28a41af0" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="e02a9a1eea427b3a380f6567bb68bb5d6d6ca3a907bdec40cb3b2d413566e006" name="glibc-testsuite-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="21902bf345f501ddc69c124324e8aecd1acd27c207d9e494260b47bd45603b4c" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="8e423a2c73b65f9f41d14924f2c0a2c6bccab931fdbdc263ec20023e155eb078" name="glibc-utils" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="46372286903571c576150615f9fa1d4488ca62073f5fb37b6d194d48da446c61" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="98e5607fd1368dac69f9941fbec9bcea7f2e35f61cf085325d7fa0e89f4bcdb5" name="glibc-utils-32bit" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="252c6c2af736b950fdda40542b052a52a0267d167361093c867613e816a56502" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="b33a924baa8ec85bc1c007724ca9c05013e0dcd8fa37aacd55efa62552649ddd" name="glibc-utils-src" arch="src">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="24746f8be7bae7adf2be888cdaf2620aa0ddac42539286b9c4851197048e5edb" name="gn" arch="src">
  <version epoch="0" ver="0.1463" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
</package>
<package pkgid="a443177e72d9e1ff15f9840744009867fb3ca06f334c897372a1f8c8fcde1bb0" name="gn" arch="x86_64">
  <version epoch="0" ver="0.1463" rel="lp150.2.1"/>
  <changelog author="tchvatal@suse.com" date="1532520000">- Initial commit, package used to generate ninja files, used
  when configuring chromium</changelog>
  <changelog author="tchvatal@suse.com" date="1533556800">- Fix building on openSUSE Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1535457600">- Update to 0.1463:
  * No upstream changelog
- Rebase patch gn-flags.patch</changelog>
</package>
<package pkgid="08278e0e59b334f03d5d96511343e98bdf0642ccca180d8c0a298975b1af14ef" name="gnome-control-center" arch="src">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="53ee7a8cfc2a0fce6d255ce6918153625b378ceafe26893feaaf831c344aaa09" name="gnome-control-center" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="204c0e6b1a841595d26a146e5e91c8b922419b36e46a2c9284263762600af800" name="gnome-control-center-color" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="6754302e89c83136f6b0fcaad010c86808ed8c91d82347a81ba45f9fed62c89d" name="gnome-control-center-devel" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="21f5a4eb1496317338065ce2165ab1d5949385ab88251b6398e7c3a97ad87c93" name="gnome-control-center-goa" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="dc084021e3291eb606b680d863a7890d125edac056699b9a17d5cbd66dc9c2cd" name="gnome-control-center-lang" arch="noarch">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="9eba7ff1618a5f4b863870322d9024ca18beede3456c120a13e05f8500ced561" name="gnome-control-center-user-faces" arch="x86_64">
  <version epoch="0" ver="3.26.2" rel="lp150.5.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1503489600">- Update to version 3.25.91:
  + Several small UI improvements and layout adjustments.
  + Various crash fixes.
  + Updated translations.
- Disable gnome-control-center-disable-error-message-for-NM.patch
  again, needs rebase.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504180800">- Drop since a long time obsolete gnome-menus Requires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267200">- Update to version 3.25.92:
  + A few more layout adjustments for the new shell.
  + Make Devices and Details rows selectable.
  + Crash and memory leak fixes.
  + Display:
  - Fix the two output UI to start with the current
    configuration.
  - Ensure we generate the UI initially on two output mode.
  - Don't show inactive monitors in the arrangement widget.
  - Show refresh rates with two digits after the radix.
  - Round the displayed scale values logically.
  - Fix some valid scaled multi monitor layouts being rejected by
    mutter.
  + Sharing: Add Wayland screen sharing support - only shown if
    mutter advertises the capability.
  + Updated translations.
- Add gnome-control-center-fix-finish-translation.patch: Fix the
  finish translation, it broke the build.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504267201">- Clean up the SLE patches structure, only keep what makes sense
  for openSUSE, move the rest to patch tag PATCH-FEATURE-SLE.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 3.25.92.1:
  + Fix inability to run Settings shell caused by a broken
    translation.
  + Updated translations.
- Drop gnome-control-center-fix-finish-translation.patch: Fixed
  upstream.</changelog>
  <changelog author="jengelh@inai.de" date="1504958400">- Remove --with-pic which is a no-op due to --disable-static.
- Avoid running fdupes across hardlink boundaries.
  One summary grammar fix.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505217600">- Update to version 3.26.0:
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1505304000">- Drop conditional and currently not applied
  gnome-control-center-probe-radius-server-cert.patch: All upstream
  bugs closed as fixed, so we do not need this anymore. Following
  this drop conditional NetworkManager(cacert-patch) Requires.
- Drop all suse_update_desktop_file macros, no longer needed.</changelog>
  <changelog author="zaitor@opensuse.org" date="1507118400">- Update to version 3.26.1:
  + Honor OnlyShowIn/NotShowIn in panel desktop files.
  + Make alternative window decoration layouts work with the new
    split header bar.
  + Background: Improve panel responsiveness.
  + Color: Ensure a reasonable minimum height.
  + User Accounts: Fix password strength check.
  + Wifi: Prevent some potential crashes.
  + Updated translations.</changelog>
  <changelog author="sckang@suse.com" date="1507550400">- Rebase gnome-control-center-disable-error-message-for-NM.patch
  on 3.26.1.</changelog>
  <changelog author="sckang@suse.com" date="1507636800">- Add control-center-network-add-domain-suffix-match.patch:
  wifi: Add domain-suffix-match entry (bgo#787882, bsc#1047509).</changelog>
  <changelog author="sckang@suse.com" date="1508932800">- Add gnome-control-center-bring-back-firewall-zone.patch:
  network: Bring back the firewall zone combo box  to select proper
  firewall zone for each connection (fate#316719).</changelog>
  <changelog author="dimstar@opensuse.org" date="1509537600">- Update to version 3.26.2:
  + Background: Fix background preview with newer gtk+ versions.
  + Info: Fix opening the panel from the .desktop file.
  + Network:
  - Don't require a private key password for TLS connections.
  - Avoid a crash with the proxy dialog.
  - Avoid crashing if NM doesn't report any devices or
    connections.
  + Notifications: Add help link.
  + Printers: Fix compilation with cups versions &lt; 1.7.
  + Privacy: Fix the Empty Trash button.
  + Sound: Fix random selection of input/output device when the
    selected one is removed.
  + Wifi: Fix help link.
  + Updated translations.</changelog>
  <changelog author="fezhang@suse.com" date="1512648000">- Drop gnome-control-center-allow-extra-tools-in-shell.patch and
  gnome-control-center-add-alacarte-for-sle.patch: The new UI
  doesn't have a main window with all icons any more (bsc#1071214).</changelog>
  <changelog author="mgorse@suse.com" date="1524744000">- Add gnome-control-center-users-empty-state.patch and
  gnome-control-center-fix-users-crash.patch: fix crash opening
  users as root (bsc#1087583 bgo#773673).</changelog>
  <changelog author="sckang@suse.com" date="1525780800">- Add control-center-fix-crash-due-to-object-name-clashes.patch and
  control-center-fix-crash-opening-hidden-network.patch: fix crash
  due to object name clashes in NM and g-c-c
  (bsc#1083668, bgo#785099).
- Add control-center-sharing-fix-margin-issue.patch: set end margin
  for labels in Networks list box (bsc#1087134).</changelog>
  <changelog author="qkzhu@suse.com" date="1525780801">- Drop gnome-control-center-890979-change-remote-passwd.patch:
  Remote password could be changed without this patch.
- Enable gnome-control-center-info-never-use-gnome-software.patch,
  gnome-control-center-more-power-button-actions.patch and
  gnome-control-center-bring-back-firewall-zone.patch in Leap15
  (bsc#1091305).</changelog>
  <changelog author="lnussel@suse.de" date="1526126400">- BuildRequire translation-update-upstream also for Leap</changelog>
  <changelog author="sckang@suse.com" date="1528372800">- Add control-center-ignore-unmanaged-wifi-devices.patch:
  wifi: only manage Wi-Fi devices managed by NM (bsc#1079320).</changelog>
  <changelog author="yfjiang@suse.com" date="1534507200">- Add gnome-control-center-remove-implicit-language-setting.patch:
  user-accounts: remove implicit language setting when a new user
  navigating the user panel at the first time (bsc#1078968, commit
  a1066a2).</changelog>
</package>
<package pkgid="b5ff0b502e5f132169b05c254c9eeafa2c58649bb6838245b757c6abe5ac24e4" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.10.1"/>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
</package>
<package pkgid="8670e2538f53c3851372cffe3ce9265a4d8f5fdaed782fa56d591893b6764925" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.10" rel="lp150.5.10.1"/>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1535371200">- Adding a dummy executable called 'gnuhealth' with some help text
  (boo#1107771)</changelog>
</package>
<package pkgid="fb880dca96f9fa43a85160a8b1a91eac258c3aab7c4a421db7a31cfb95195fdd" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
</package>
<package pkgid="2e5faea60be369403c49e94994a11120e419b29c644a56a795861bae632e84ec" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.10" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1498305600">- Requirement on python3-PyWebDAV3-GNUHealth added</changelog>
  <changelog author="axel.braun@gmx.de" date="1498996800">- Version 3.2.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
</package>
<package pkgid="c6fe61b16f738519e5de54ddf496f5c558876261191d20378bfa6d5ff4a89bcd" name="gnuhealth" arch="noarch">
  <version epoch="0" ver="3.2.10" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
</package>
<package pkgid="99e5591c0a10d4f39b01840afc4208baa4f256fc1576943a06263e2c2147a638" name="gnuhealth" arch="src">
  <version epoch="0" ver="3.2.10" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1499774400">- update of documentation for upgrade from Leap 42.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1500724800">- version 3.2.1
  Fix view error on lab order</changelog>
  <changelog author="axel.braun@gmx.de" date="1502193600">- added gnuhealth-webdav@.service
- updated documentation on gnuhealth-webdav@.service
- added alias cdutil for compatibility reasons (not really needed,
  as binaries are in /usr/bin anyway)
- fixed path for cdexe</changelog>
  <changelog author="axel.braun@gmx.de" date="1503921600">- version 3.2.2
  health_imaging : Update health professional retrieval to the current standard method</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation adapted</changelog>
  <changelog author="axel.braun@gmx.de" date="1505563200">- version 3.2.3 Fix bug #52038: Field history is repeated in the tree
  view of the prescription line</changelog>
  <changelog author="axel.braun@gmx.de" date="1506513600">- gnuhealth-control corrected (message command)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 3.2.4
  health_services: Fix bug #52160: Issues related to invoice type and domain when creating the service invoice
  health_disability : Rename anf fix  Amputation model description from Amputation to Prothesis
  health : Prescription report . Include duration frequency selections strings for translation. Update conditional op. to Python3 (!=)</changelog>
  <changelog author="axel.braun@gmx.de" date="1507464000">- version 3.2.5
  health, health_qrcodes : Fix bug #52179: Traceback due to obsolete unicode method in reports</changelog>
  <changelog author="axel.braun@gmx.de" date="1508328000">- Correction for gnuhealth-control (file not found in backup)</changelog>
  <changelog author="axel.braun@gmx.de" date="1509278400">- Version 3.2.6
  dependency on python3-pymongo removed
  fix bug #52298: Traceback generating an invoice from service with an insurance policy plan
  Fix bug #52275: Traceback when creating a free slot in appointments or work schedule</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747200">- health_crypto. Fix bug #52366: Error when signing the death certificate
  task #14626: Renaming Package names prefix trytond_ from Pypi. Update descriptions
  task #14626: Renaming Package names prefix trytond_ from Pypi. Remove tryton from keywords
  remove lingering egg-info dirs from webdav3</changelog>
  <changelog author="axel.braun@gmx.de" date="1510747201">- removed pypi dependencies</changelog>
  <changelog author="axel.braun@gmx.de" date="1512561600">- Version 3.2.9
  Fix bug #52580: Removing the patient field before saving the record generates an error
  Fix bug #52579: some on_change numeric method operations generate traceback
  Fix bug #52578: WHR should be on the same line as hip and waist fields</changelog>
  <changelog author="axel.braun@gmx.de" date="1512820800">- documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1514548800">- typo in documentation corrected</changelog>
  <changelog author="axel.braun@gmx.de" date="1516363200">- added gnuhealth-client to documentation</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 3.2.10
  bug #54055: Caldav event does not update after changing the appointment</changelog>
  <changelog author="axel.braun@gmx.de" date="1529496000">- gnuhealth-control: added info about backup file
  openSUSE-gnuhealth-setup added</changelog>
  <changelog author="axel.braun@gmx.de" date="1531828800">- openSUSE-gnuhealth-setup: User tryton set to SUPERUSER
  Documentation updated</changelog>
</package>
<package pkgid="ddbf3b9f199e1003bbd3237815c40f94ecfb82f6833a62012bba5f4c42730e70" name="go" arch="src">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="34003fa1e564648a0f777585d2450d1d72c2d8ac85622f29f888bd8f50cea971" name="go" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="0f4cc5930f57be722d165a5e74792ad352285e1b1285afbe9f6a5da978782667" name="go-doc" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="91abee5d2b0d32b0c05da840c48cd94e412fdbc2d396f63264a1c2e4d3d50b86" name="go-race" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Make go be a metapackage
  Removed patches:
  * allow-binary-only-packages.patch
  * armv6l.patch
  * fix-sanitizer-build-against-latest-glibc.patch
  * tools-packaging.patch
  * go-1.5-build-dont-reinstall-stdlibs.patch
  * verbose-build.patch
  * go-1.5-install-dont-reinstall-stdlibs.patch
  * gcc6-go.patch
  * gcc7-go.patch</changelog>
  <changelog author="guillaume@opensuse.org" date="1518696000">- Enable build for %arm</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- Update to 1.9.4
  fix bsc#1080006 (CVE-2018-6574)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1529496000">- Update to 1.9.7
  fix bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="fcdf9eb7c8fb44c52dfea5d893672d85677b7109bcc71db2c58389f777532ae6" name="go1.9" arch="src">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="d35dfc5f2373dd5882e53c29dde37d7075be3205b2c88445c653c44a1e8c9ec3" name="go1.9" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="ed3bef500f1ef4d511fac6692c125e382d475b326a5f725bbfbe4000c195b61b" name="go1.9-doc" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="16c11b5375eab2f2e811434555f80052859940a57283abe98524e3494dc8cc01" name="go1.9-race" arch="x86_64">
  <version epoch="0" ver="1.9.7" rel="lp150.2.4.2"/>
  <changelog author="jmassaguerpla@suse.com" date="1493812800">- fix update-alternatives usage. This way, we can either use go1.7 or
  go 1.8 without having to change the docker spec file or any other
  package that requires go 1.7 but it will require go 1.8 in the
  future.</changelog>
  <changelog author="agraf@suse.com" date="1494504000">- Enable gccgo with gcc-6 for SLE12</changelog>
  <changelog author="thipp@suse.de" date="1496059200">- Minor update to go1.8.3
  Fixes included:
  * go1.8.2 (released 2017/05/23) includes a security fix to the
    crypto/elliptic package (CVE-2017-8932, bsc#1040618).
  * go1.8.3 (released 2017/05/24) includes fixes to the compiler, runtime,
    documentation, and the database/sql package.</changelog>
  <changelog author="thipp@suse.de" date="1496404800">- Build with gcc-7 on Tumbleweed
  + Add gcc7-go.patch</changelog>
  <changelog author="dmueller@suse.com" date="1497787200">- build with binutils-gold on aarch64, which is hardcoded to
  be used for shared linking due to bugs in BFD binutils</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499342400">- Add gcc6-go.patch for sle12 and leap42.x and use binutils-gold
  except for s390x/s390
  Remove gcc5-go.patch cause we use gcc6 for sle12 and leap42.x and
  gcc7 for newer versions (factory)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1499428800">- Simplify all the "ifdef suse_version" by removing versions which
  have reach eol (13.* 42.1 sle11*)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1500638400">- Remove ruby requirement. golang-macros are not ruby anymore, plus
  this requirement should have been in the golang-packaging package</changelog>
  <changelog author="asarai@suse.com" date="1502280000">- go-race: add compiler-rt TSAN binary, necessary for the race detector builds
  to work. This requires building compiler-rt from source (becuase upstream Go
  stores precompiled binaries in the tree, and we cannot use them). In
  addition, a %check was added purely to ensure that we don't install the wrong
  version of compiler-rt. boo#1052528
- go-rpmlintrc: add some entries to address the .syso additions.</changelog>
  <changelog author="thipp@suse.de" date="1504180800">- add fix-sanitizer-build-against-latest-glibc.patch which fixes
  the sanitizer built against certain glibc versions</changelog>
  <changelog author="thipp@suse.de" date="1504612800">- Fixed incorrectly ghosted files</changelog>
  <changelog author="thipp@suse.de" date="1505736000">- Update to go1.9
  There are two changes to the language: adding support for type aliases and
  defining when implementations may fuse floating point operations. Most of the
  changes are in the implementation of the toolchain, runtime, and libraries. As
  always, the release maintains the Go 1 promise of compatibility. We expect
  almost all Go programs to continue to compile and run as before.
  The release adds transparent monotonic time support, parallelizes compilation
  of functions within a package, better supports test helper functions, includes
  a new bit manipulation package, and has a new concurrent map type.
  Remove patches:
  - fix_certificates_lookup.patch
  - runtime-bump-MaxGomaxprocs.patch</changelog>
  <changelog author="thipp@suse.de" date="1507204800">- Update to go1.9.1
  go1.9.1 (released 2017/10/04) includes two security fixes. See
  the Go 1.9.1 milestone on our issue tracker for details.
  Fixes included:
  * net/smtp: fix PlainAuth to refuse to send passwords to non-TLS
    servers (CVE-2017-15042, bsc#1062087)
  * cmd/go: arbitrary code execution during ?go get? or ?go get -d?
    (CVE-2017-15041, bsc#1062085)</changelog>
  <changelog author="asarai@suse.com" date="1508587200">- Install $GOROOT/lib packages, to include upstream files such as the timezone
  database. bsc#1064522</changelog>
  <changelog author="thipp@suse.de" date="1509019200">- Update to go1.9.2
  go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a
  bug introduced in Go 1.9.1 that broke go get of non-Git
  repositories under certain conditions. See the Go 1.9.2 milestone
  on our issue tracker for details.</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1513857600">- Rename package to go1.9</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519473600">- fix bsc#1082409: Review dependencies (requires, recommends and supports)</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1519819200">- update to go1.9.4
  * go1.9.2 (released 2017/10/25) includes fixes to the compiler,
  linker, runtime, documentation, go command, and the crypto/x509,
  database/sql, log, and net/smtp packages. It includes a fix to a bug
  introduced in Go 1.9.1 that broke go get of non-Git repositories
  under certain conditions.
  * go1.9.3 (released 2018/01/22) includes fixes to the compiler, runtime,
  and the database/sql, math/big, net/http, and net/url packages.
  * go1.9.4 (released 2018/02/07) includes a security fix to ?go get?:
  CVE-2018-6574 (bsc#1080006)</changelog>
  <changelog author="fcastelli@suse.com" date="1519992000">- fix various issues in go trace (bsc#1085785):
  * Ensure go binaries are not stripped (eg: go tools trace), this
    caused some of them to misbehave
  * Ensure go trace html template is shipped as part of the
    installation, otherwise the web UI won't work
  * Fix license of go race</changelog>
  <changelog author="duyizhaozj321@yahoo.com" date="1528632000">- Update to version 1.9.7:
  * go1.9.7 (released 2018/06/05) includes fixes to the go command,
    and the crypto/x509, and strings packages. In particular, it adds
    minimal support to the go command for the vgo transition. See the
    Go 1.9.7 milestone on our issue tracker for details.
- Changes in version 1.9.6:
  * go1.9.6 (released 2018/05/01) includes fixes to the compiler and
    go command. See the Go 1.9.6 milestone on our issue tracker for details.
- Changes in version 1.9.5:
  * go1.9.5 (released 2018/03/28) includes fixes to the compiler, go
    command, and net/http/pprof package. See the Go 1.9.5 milestone
    on our issue tracker for details.
    Includes fix for bsc#1081495 (CVE-2018-7187)</changelog>
</package>
<package pkgid="4fee750f724eb060b16dc4d00dcab3dab4b328e6727198df4beb74138c1f7303" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="b22fce368f5a57815b658a20f68e97873ffae90237ccbcb0393f658fba3b9a8d" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="1ddf8bc46f96c9b6534a6b412a3cb2949b8174db4b8e00936328e96cd37cfcf6" name="google-compute-engine" arch="src">
  <version epoch="0" ver="20180510" rel="lp150.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
</package>
<package pkgid="29bddbf706465d347fabe78ea8026dde4eb2e394a155b7b1b03e92e2e8336ebf" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="63630ecefaeb84f5e5d3c429354164bd9bd56a45dd69d234c266f230d3455f4f" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="b3923efbac2f42219ac3dbdcffce93b81c9afe817608e9975463463032c08f18" name="google-compute-engine-init" arch="noarch">
  <version epoch="0" ver="20180510" rel="lp150.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
</package>
<package pkgid="ccc570dddad05dbf606ab4e0e355066a78af8d81fd61ae83b982f58c6584e856" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="5991da00a467bdc26f0d54108d0fe0c722ab41c62856da9336315a79c7406b71" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="24fc33ec63abe80aa1c3e67b04bd4192e4145e0520a0f3b7186e38fc547c4da2" name="google-compute-engine-oslogin" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.9.1"/>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
  <changelog author="rjschwei@suse.com" date="1527595200">- Remove gcei-lnx-distro-py3.patch
  + Upstream intention is to depend on distro module from GitHub
- Add dependency on python3-distro for SLE/Leap 15 and later</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1528977600">- Add patch to set run_dir to /var/run (bsc#1097378, #1097616)
  + gcei-set-run_dir.patch
- Drop deleted patch from spec file
  + gcei-lnx-distro-py3.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1529323200">- Ensure that google-ip-forwarding-daemon service and
  google-network-setup are stopped and disabled
  during upgrade
- Ensure that google-network-daemon service is enabled
  and started during upgrade</changelog>
</package>
<package pkgid="801eea55dacc89651b562175231c4946a1eab849a813c323ca716aea717b22b6" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Package the rsyslog config unconditionally, rsyslog also available on
  SLE 11</changelog>
  <changelog author="rjschwei@suse.com" date="1476878401">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
</package>
<package pkgid="a8804bbce23bceb3d729e17406c3e5c4ade5892e478f521a79ac08f02cbed327" name="google-compute-engine-oslogin-32bit" arch="x86_64">
  <version epoch="0" ver="20180510" rel="lp150.2.6.1"/>
  <changelog author="rjschwei@suse.com" date="1476878400">- Add gcei-handle-failed-open.patch
  * Do not exit with a traceback if the sudoers file cannot be written</changelog>
  <changelog author="rjschwei@suse.com" date="1476964800">- Update gcei-handle-failed-open.patch to match upstream PR</changelog>
  <changelog author="rjschwei@suse.com" date="1477483200">- Include in SLE 12 and SLE 11 (FATE#321748, FATE#321890, bsc#994943)</changelog>
  <changelog author="jengelh@inai.de" date="1477828800">- Resolve description inaccuracy
- Call %service_* just once, but with all args</changelog>
  <changelog author="rjschwei@suse.com" date="1482148800">- Update to version 20161213 (bsc#1015829, bsc#1016372)
  + Remove gcei-handle-failed-open.patch included upstream
  + Remove gcei-handle-missing-gsutil.patch included upstream
  + Forward port gcei-hide-py-deps.patch
  + Improved alias IP support
- From 20161118
  + Add support for alias IPs in the IP forwarding daemon.
  + IP forwarding daemon adds back local routes after network restart.
  + Account daemon removes expired key access without metadata change.
  + Account daemon ignores SSH keys with non-ascii characters.
  + Improved exception handling.
  + Fix for syslog startup on systemd.
  + Add a route to the metadata server to /etc/hosts.
- From 20160930
  + Provide a service to enable network interfaces on boot.
  + Create a common library for inspecting network interfaces.
  + Allow metadata script output that is not UTF-8.
  + Fixed instance config file logic.
  + Fixed accounts management Python 3 compatibility.
  + Fixed IP forwarding Python 3 compatibility.
  + Improved style consistency.
  + Run a service on boot to enable additional network interfaces.
  + Update dhclient-script on EL 6 to fix local routing.</changelog>
  <changelog author="rjschwei@suse.com" date="1484222400">- Scripts that are one-shot should not be marked as "stop_on_removal"
  as there is no process running (bsc#1017395)
- One-shot scripts should not run with startproc</changelog>
  <changelog author="rjschwei@suse.com" date="1484308800">- The startup script attempts a network connection, thus it must
  run after network setup</changelog>
  <changelog author="rjschwei@suse.com" date="1504958400">- Update to version 20170829 (bsc#1049242, FATE#323757)
  + Support oslogin feature
  + Add rpmlintrc
    ~ We ship pam and nss modules in -oslogin we do not want
    to name the package according to the shared library naming policy
  + Add baslibs.config
    ~ Handle the nss and pam modules provided by oslogin properly
- From version 20170718
  + Allow nologin paths other than /sbin/nologin.
  + Try to download GCS URLs with curl if gsutil is not installed.
  + Fix control scripts to correctly restart sshd and nscd if they exist.
  + Retry HTTP requests if error 500 is received.
  + Move oslogin sudoers directory locations.
- Setup for Python 3 build oSTW and SLE 15
- Source package renamed to google-compute-engine
  + Binary subpackages -init -oslogin</changelog>
  <changelog author="rjschwei@suse.com" date="1505131200">- Add gcei-scripts-after-reg.patch (bsc#1057671)</changelog>
  <changelog author="rjschwei@suse.com" date="1505217600">- Fix baslibs.conf, use package, not files
- Include rpmlintrc and baslibc.conf as source</changelog>
  <changelog author="rjschwei@suse.com" date="1505822400">- Ship the udevrules with the -init package only</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1509019200">- Update to version 20171025 (bsc#1064356, bsc#1065308)
  + Add apt configuration to prevent auto-removal of Google packages.
  + Rename set_hostname to prevent naming conflicts.
  + Remove logging when checking OS Login status.
- From version 20171019
  + Support the enable-oslogin metadata key for activating OS Login.
  + Improve packaging to restart services.
  + OS Login is available in Beta.
  + Add status option to the OS Login control file.
- From version 20171006
  + Fix system hang during VM shutdown.
  + JSON parser accepts string types for int64 values.
- From version 20170921
  + JSON parser casts uid and gid to unsigned integers.
- From version 20170914
  + Remove fstab barrier options in EL 7.
  + Use curl to download metadata script files for SSL certificate validation.
  + Use netifaces for retrieving MAC address names if the import exists.</changelog>
  <changelog author="rjschwei@suse.com" date="1509105600">- Fix build for SLES 11</changelog>
  <changelog author="rjschwei@suse.com" date="1509710400">- Change dependencies -init depends on -oslogin
  + oslogin feature is now enabled by the initialization code
    when appropriate
- Do not start the oslogin feature upon package install</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1512302400">- Update to version 20171129 (bsc#1070895, bsc#1070918)
  + Generate SSH host keys when none are present.
  + Improve logging when activating OS Login.
  + Fix parsing logic for expiration time on SSH public keys.
  + Fix home directory creation PAM config.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1517572800">- Update to version 20180129 (bsc#1078349, bsc#1079077)
  + Improve rsyslog daemon reset when using the dhcp exit hook.
  + The OS Login feature is generally available.
  + Change the OS Login uid restriction to allow uid 1000.
  + Close socket connections after requesting metadata.
- From version 20171213
  + Force IPv4 for Debian apt configs.</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1523880000">- Update to version 20180227 (bsc#1066273)
  + Add distro specific logic.
  + Support SLES 11 and 12 in multi-nic setup.
  + Fix boto config documentation.
  + Add modprobe blacklist for nouveau and floppy modules.
  + Fix irqbalance conflict in Debian package.
  + Fix conflict with other applications that use curl and SSL.
- Install new kernel module blacklist into /etc/modprobe.d.
- Refresh patches for new version:
  + gcei-hide-py-deps.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1525780800">- Update to version 20180504 (bsc#1092214)
  + Create a new network daemon.
  + Refactor the IP forwarding daemon and network setup.
  + Improvements for using NSS cache in the accounts daemon.
  + Include libnss cache as part of the OS Login package.
- Refresh patches for new version:
  + gcei-scripts-after-reg.patch</changelog>
  <changelog author="adrian.glaubitz@suse.com" date="1526040000">- Update to version 20180510 (bsc#1092214)
  + Prevent delay in configuring IP forwarding routes.
  + Improve instance setup support for FreeBSD.
- Include new google-network-daemon
  + Add google-network-daemon.service activation in
    %pre and %post sections
  + Add google-network-daemon.suse init script for SysV
- Stop shipping deprecated google-ip-forwarding-daemon service
  + Remove google-ip-forwarding-daemon.service activation in
    %pre and %post sections
  + Drop google-ip-forwarding-daemon.suse from source distribution
- Add missing association with "init" package for  %pre, %post,
  %preun and %postun sections
- Install google_oslogin_nss_cache binary into oslogin package</changelog>
  <changelog author="rjschwei@suse.com" date="1526904000">- Add patch gcei-lnx-distro-py3.patch (bsc#1094074)</changelog>
</package>
<package pkgid="bee470692f2cc6192230d41d152e3467b824a84f74c5e4d9d375ddb7dd633c46" name="gpg2" arch="src">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1482667200">- add runtime dependency to match runtime version check for libksba</changelog>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
</package>
<package pkgid="7716887d7d254a816112a7a9c7126a3368e7f5ee5297e48ba2b174a93477ab31" name="gpg2" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1482667200">- add runtime dependency to match runtime version check for libksba</changelog>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
</package>
<package pkgid="611d50d300eae18972d423ade5a87641c5c5dd69b1f599fb84a82d48171ad5c3" name="gpg2-lang" arch="noarch">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="astieger@suse.com" date="1482667200">- add runtime dependency to match runtime version check for libksba</changelog>
  <changelog author="tchvatal@suse.com" date="1483963200">- Remove the fixme, condition around fdupes</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- GnuPG 2.1.18:
  * gpg: Remove bogus subkey signature while cleaning a key (with
    export-clean, import-clean, or --edit-key's sub-command clean)
  * gpg: Allow freezing the clock with --faked-system-time.
  * gpg: New --export-option flag "backup", new --import-option flag
    "restore".
  * gpg-agent: Fixed long delay due to a regression in the progress
    callback code.
  * scd: Lots of code cleanup and internal changes.
  * scd: Improved the internal CCID driver.
  * dirmngr: Fixed problem with the DNS glue code (removal of the
    trailing dot in domain names).
  * dirmngr: Make sure that Tor is actually enabled after changing the
    conf file and sending SIGHUP or "gpgconf --reload dirmngr".
  * dirmngr: Fixed Tor access to IPv6 addresses.  Note that current
    versions of Tor may require that the flag "IPv6Traffic" is used
    with the option "SocksPort" in torrc to actually allow IPv6
    traffic.
  * dirmngr: Fixed HKP for literally given IPv6 addresses.
  * dirmngr: Enabled reverse DNS lookups via Tor.
  * dirmngr: Added experimental SRV record lookup for WKD.
    See commit 88dc3af3d4ae1afe1d5e136bc4c38bc4e7d4cd10 for details.
  * dirmngr: For HKP use "pgpkey-hkps" and "pgpkey-hkp" in SRV record
    lookups.  Avoid SRV record lookup when a port is explicitly
    specified.  This fixes a regression from the 1.4 and 2.0 behavior.
  * dirmngr: Gracefully handle a missing /etc/nsswitch.conf.  Ignore
    negation terms (e.g. "[!UNAVAIL=return]" instead of bailing out.
  * dirmngr: Better debug output for flags "dns" and "network".
  * dirmngr: On reload mark all known HKP servers alive.
  * gpgconf: Allow keyword "all" for --launch, --kill, and --reload.
  * tools: gpg-wks-client now ignores a missing policy file on the
    server.
  * Avoid unnecessary ambiguity error message in the option parsing.
  * Further improvements of the regression test suite.
  * Fixed building with --disable-libdns configure option.
  * Fixed a crash running the tests on 32 bit architectures.
  * Fixed spurious failures on BSD system in the spawn functions.
    This affected for example gpg-wks-client and gpgconf.</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Rewrite descriptions</changelog>
  <changelog author="astieger@suse.com" date="1488888000">- GnuPG 2.1.19:
  * gpg: Print a warning if Tor mode is requested but the Tor
    daemon is not running.
  * gpg: New status code DECRYPTION_KEY to print the actual private
    key used for decryption.
  * gpgv: New options --log-file and --debug.
  * gpg-agent: Revamp the prompts to ask for card PINs.
  * scd: Support for multiple card readers.
  * scd: Removed option --debug-disable-ticker. Ticker is used
    only when it is required to watch removal of device/card.
  * scd: Improved detection of card inserting and removal.
  * dirmngr: New option --disable-ipv4.
  * dirmngr: New option --no-use-tor to explicitly disable the use
    of Tor.
  * dirmngr: The option --allow-version-check is now required even
    if the option --use-tor is also used.
  * dirmngr: Handle a missing nsswitch.conf gracefully.
  * dirmngr: Avoid PTR lookups for keyserver pools. The are only
    done for the debug command "keyserver --hosttable".
  * dirmngr: Rework the internal certificate cache to support
    classes of certificates. Load system provided certificates on
    startup.
  * Add options --tls, --no-crl, and --systrust to the "VALIDATE"
    command.
  * dirmngr: Add support for the ntbtls library.
  * wks: Create mails with a "WKS-Phase" header. Fix detection of
    Draft-2 mode.
  * Many other bug fixes and new regression tests.
- dirmngr: use system certificate store</changelog>
  <changelog author="astieger@suse.com" date="1489492800">- Use stronger defaults for new users, using SHA-2 digest family
  for certificates and message signatures - FATE#323084
  adding gnupg-2.1.19-stronger-defaults.patch</changelog>
  <changelog author="astieger@suse.com" date="1491307200">- GnuPG 2.1.20:
  * gpg: New properties 'expired', 'revoked', and 'disabled' for the
    import and export filters.
  * gpg: New command --quick-set-primary-uid.
  * gpg: New compliance field for the --with-colon key listing.
  * gpg: Changed the key parser to generalize the processing of local
    meta data packets.
  * gpg: Fixed assertion failure in the TOFU trust model.
  * gpg: Fixed exporting of zero length user ID packets.
  * scd: Improved support for multiple readers.
  * scd: Fixed timeout handling for key generation.
  * agent: New option --enable-extended-key-format.
  * dirmngr: Do not add a keyserver to a new dirmngr.conf.  Dirmngr
    uses a default keyserver.
  * dimngr: Do not treat TLS warning alerts as severe error when
    building with GNUTLS.
  * dirmngr: Actually take /etc/hosts in account.
  * wks: Fixed client problems on Windows.  Published keys are now set
    to world-readable.
  * tests: Fixed creation of temporary directories.
  * A socket directory for a non standard GNUGHOME is now created on
    the fly under /run/user.  Thus "gpgconf --create-socketdir" is now
    optional.  The use of "gpgconf --remove-socketdir" to clean up
    obsolete socket directories is however recommended to avoid
    cluttering /run/user with useless directories.
  * Fixed build problems on some platforms.</changelog>
  <changelog author="astieger@suse.com" date="1494849600">- GnuPG 2.1.21:
  * gpg,gpgsm: Fix corruption of old style keyring.gpg files,
    regression in 2.1.20
  * gpg,dirmngr: Removed the skeleton config file support
    New installations no longer generate a configuration file.
    In the absence of a file, SHA-2 family hashes are used.
    Existing configurations are not touched.
    drop gnupg-2.1.19-stronger-defaults.patch FATE#323084
  * gpg: Fixed import filter property match bug.
  * scd: Removed Linux support for Cardman 4040 PCMCIA reader.
  * scd: Fixed some corner case bugs in resume/suspend handling.
  * Many minor bug fixes and code cleanup.</changelog>
  <changelog author="marco.strigl@suse.com" date="1495195200">- GnuPG 2.1.21:
  * modified gnupg-2.0.18-files-are-digests.patch to work with
    obs-sign again bsc#1039899</changelog>
  <changelog author="astieger@suse.com" date="1501243200">- GnuPG 2.1.22:
  * gpg: Extend command --quick-set-expire to allow for setting the
    expiration time of subkeys.
  * gpg: By default try to repair keys during import. New sub-option
    no-repair-keys for --import-options.
  * gpg,gpgsm: Improved checking and reporting of DE-VS compliance.
  * gpg: New options --key-origin and --with-key-origin. Store the
    time of the last key update from keyservers, WKD, or DANE.
  * agent: New option --ssh-fingerprint-digest.
  * dimngr: Lower timeouts on keyserver connection attempts and made
    it configurable.
  * dirmngr: Tor will now automatically be detected and used. The
    option --no-use-tor disables Tor detection.
  * dirmngr: Now detects a changed /etc/resolv.conf.
  * agent,dirmngr: Initiate shutdown on removal of the GnuPG home
    directory.
  * gpg: Avoid caching passphrase for failed symmetric encryption.
  * agent: Support for unprotected ssh keys.
  * dirmngr: Fixed name resolving on systems using only v6
    nameservers.
  * dirmngr: Allow the use of TLS over http proxies.
  * wks: New man pages for client and server.</changelog>
  <changelog author="astieger@suse.com" date="1502539200">- GnuPG 2.1.23:
  * gpg: Options --auto-key-retrieve and --auto-key-locate "local,wkd"
    are now used by default.  Note: this enables keyserver and Web Key
    Directory operators to notice when a signature from a locally
    non-available key is being verified for the first time or when
    you intend to encrypt to a mail address without having the key
    locally.  This new behaviour will eventually make key discovery
    much easier and mostly automatic.  Disable this by adding
    no-auto-key-retrieve
    auto-key-locate local
    to your gpg.conf.
  * agent: Option --no-grab is now the default.  The new option --grab
    allows to revert this.
  * gpg: New import option "show-only".
  * gpg: New option --disable-dirmngr to entirely disable network
    access for gpg.
  * gpg,gpgsm: Tweaked DE-VS compliance behaviour.
  * New configure flag --enable-all-tests to run more extensive tests
    during "make check".
  * gpgsm: The keygrip is now always printed in colon mode as
    documented in the man page.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- GnuPG 2.2.0:
  * New long term stable branch, replacing the 2.0.x series
  * gpg: Reverted change in 2.1.23 so that --no-auto-key-retrieve
    is again the default boo#1054088
  * Fixed a few minor bugs</changelog>
  <changelog author="astieger@suse.com" date="1505822400">- GnuPG 2.2.1:
  * gpg: Fix formatting of the user id in batch mode key generation
    if only "name-email" is given.
  * gpgv: Fix annoying "not suitable for" warnings.
  * wks: Convey only the newest user id to the provider. This is
    the case if different names are used with the same addr-spec.
  * wks: Create a complying user id for provider policy mailbox-only.
  * wks: Add workaround for posteo.de.
  * scd: Fix the use of large ECC keys with an OpenPGP card.
  * dirmngr: Use system provided root certificates if no specific
    HKP certificates are configured. If bu</changelog>
  <changelog author="astieger@suse.com" date="1510056000">- GnuPG 2.2.2:
  * gpg: Avoid duplicate key imports by concurrently running gpg
    processes
  * gpg: Fix creating on-disk subkey with on-card primary key
  * gpg: Fix validity retrieval for multiple keyrings
  * gpg: Fix --dry-run and import option show-only for secret keys
  * gpg: Print "sec" or "sbb" for secret keys with import option
    import-show
  * gpg: Make import less verbose
  * gpg: Add alias "Key-Grip" for parameter "Keygrip" and new
    parameter "Subkey-Grip" to unattended key generation
  * gpg: Improve "factory-reset" command for OpenPGP cards
  * gpg: Ease switching Gnuk tokens into ECC mode by using the magic
    keysize value 25519
  * gpgsm: Fix --with-colon listing in crt records for fields &gt; 12.
  * gpgsm: Do not expect X.509 keyids to be unique
  * agent: Fix stucked Pinentry when using --max-passphrase-days
  * agent: New option --s2k-count
  * dirmngr: Do not follow https-to-http redirects
  * dirmngr: Reduce default LDAP timeout from 100 to 15 seconds
  * gpgconf: Ignore non-installed components for commands
  - -apply-profile and --apply-defaults
  * Add configure option --enable-werror</changelog>
  <changelog author="astieger@suse.com" date="1511265600">- GnuPG 2.2.3:
  * dirmngr: Fix crash in case of a CRL loading error
  * gpgtar: Fix wrong behaviour of --set-filename
  * gpg: Silence AKL retrieval messages
  * agent: Use clock or clock_gettime for calibration
  * agent: Improve robustness of the shutdown pending state</changelog>
  <changelog author="astieger@suse.com" date="1513857600">- GnuPG 2.2.4:
  * gpg: Change default preferences to prefer SHA512.
  * gpg: Print a warning when more than 150 MiB are encrypted using
    a cipher with 64 bit block size.
  * gpg: Print a warning if the MDC feature has not been used for a
    message.
  * gpg: Fix regular expression of domain addresses in trust
    signatures
  * agent: New option --auto-expand-secmem to help with high
    numbers of concurrent connections. Requires libgcrypt 1.8.2
    for having an effect.
  * dirmngr: Cache responses of WKD queries.
  * gpgconf: Add option --status-fd.
  * wks: Add commands --check and --remove-key to gpg-wks-server
  * Increase the backlog parameter of the daemons to 64 and add
    option --listen-backlog.
- Not enabled features:
  * New configure option --enable-run-gnupg-user-socket to first
    try a socket directory which is not removed by systemd at
    session end.</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="astieger@suse.com" date="1519560000">- GnuPG 2.2.5:
  * gpg: Allow the use of the "cv25519" and "ed25519" short names
    in addition to the canonical curve names in --batch --gen-key
  * gpg: Make sure to print all secret keys with option --list-only
    and --decrypt
  * gpg: Fix the use of future-default with --quick-add-key for
    signing keys
  * gpg: Select a secret key by checking availability under
    gpg-agent
  * gpg: Fix reversed prompt texts for --only-sign-text-ids
  * gpg,gpgsm: Fix detection of bogus keybox blobs on 32 bit
    systems
  * gpgsm: Fix regression since 2.1 in --export-secret-key-raw
    which got $d mod (q-1)$ wrong
  * scd: Support the KDF Data Object of the OpenPGP card 3.3
  * scd: Fix a regression in the internal CCID driver for certain
    card readers
  * dirmngr: Improve returned error description on failure of DNS
    resolving
  * wks: Implement command --install-key for gpg-wks-server.</changelog>
  <changelog author="kbabioch@suse.com" date="1522929600">- Added gnupg-CVE-2018-9234.patch: Enforce that key certification
  can only be done with the master key, and not a signing subkey.
  (bnc#1088255 CVE-2018-9234)</changelog>
  <changelog author="kbabioch@suse.com" date="1528459200">- Added gnupg-CVE-2018-12020.patch: Sanitize the diagnostic output of the
  original file name in verbose mode (bsc#1096745, CVE-2018-12020).</changelog>
</package>
<package pkgid="7f187311a30f456aa85b9471a49eee6d0ebc21ce80820a38bf4e18ec15f6dfca" name="growpart" arch="noarch">
  <version epoch="0" ver="0.30" rel="lp150.4.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="50a6ea6129b38e964a92b81f934147d23219e1e50a5fc59b7ca02a978855d1d4" name="growpart" arch="src">
  <version epoch="0" ver="0.30" rel="lp150.4.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="69debcab32127c9a5a88948c1d84af51b120633a95c4bc6d00a48ce55bff304d" name="growpart-rootgrow" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="lp150.4.3.1"/>
  <changelog author="rschweikert@suse.com" date="1395057600">- Initial build</changelog>
  <changelog author="rschweikert@suse.com" date="1395057601">- include in SLE 12 (FATE #315990, #315991, and 316167)</changelog>
  <changelog author="rschweikert@suse.com" date="1395144000">- add patch licenseGPLv3.patch
  + no license file included in upstream release
    (https://bugs.launchpad.net/cloud-utils/+bug/1294338)
  + GPL v3 applies to growpart script, that is all we are distributing
    at the moment
- fix the Group, don't shout</changelog>
  <changelog author="rjschwei@suse.com" date="1473768000">- Update to version 0.29 (bsc#998378)
  + fix use of partx for newer util-linux versions (LP: #1587971)
    [Lars Kellogg-Stedman]
  + fix some issues in error path reporting
  + capture output of 'partx --help' as older versions
    do not support that flag, and send output to stderr.
  + fix bug when growing partitions on disks &gt; 2TB. (LP: #1259703)
  + run partx only on block devices (not files)
  + better --dry-run output for gpt disks, providing sgdisk command
    line that would be used.
  + support sfdisk &gt;= 2.26, and support gpt partitions with sfdisk</changelog>
  <changelog author="rjschwei@suse.com" date="1516622400">- Update to version 0.30 (bsc#1064755)
  + improved error messages on failure.
  + ignore sfdisk failure in 2.28.1 when due to reread failing
  (LP: #1619285)
  + Add service file to start growpart via systemd
  + Add rootgrow script to wrap growpart</changelog>
  <changelog author="rjschwei@suse.com" date="1516795200">- Split rootgrow and script and service into subpackage to retain
  dependency chain for growpart</changelog>
  <changelog author="kukuk@suse.de" date="1522843200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="rjschwei@suse.com" date="1529582400">- Support btrfs resize, handle ro setup in rootgrow (bsc#1097455, bsc#1098681)</changelog>
</package>
<package pkgid="1660b86d2598036a6b5f7e84ece39603b4dffb0ee1ab4136efcb88c58e125584" name="grub2" arch="src">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="c8539f768e9e5b1c2018ec90e4faa6ffe56ce35d877a39e5909e2bfb92575f61" name="grub2" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="1d30f528c3aac538ba4fea4bc400d4cc1748941e3ee197faf7fef5b8864015d0" name="grub2-branding-upstream" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="6256f88d492e7ad53f470e9c03f1523c4648eab271ba51414bcd13f765615024" name="grub2-i386-pc" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="d21f3568880dbcd8f60afe10c3875f7146036db7572ea3e026cce139831ca7b3" name="grub2-snapper-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="74816041ab39240939c4b4706730f5c38f2f3e59dbafa630904d4f65cce57bec" name="grub2-systemd-sleep-plugin" arch="noarch">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="5ab59ada7727b0ff5d22fd6af9b6c55eb986b095cb92aa61478d933813e70c3a" name="grub2-x86_64-efi" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="af7ef8b285ab640436832891aac325aa83a22992546841d8aec60fe1d6b7fa47" name="grub2-x86_64-xen" arch="x86_64">
  <version epoch="0" ver="2.02" rel="lp150.13.4.1"/>
  <changelog author="mchang@suse.com" date="1516708800">- Check if default entry need to be corrected for updated distributor version
  and/or use fallback entry if default kernel entry removed (bsc#1065349)
  * grub2-check-default.sh
  * grub2-mkconfig-default-entry-correction.patch
- Fix grub2-mkconfig warning when disk is LVM PV (bsc#1071239)
  * grub2-getroot-scan-disk-pv.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1517832000">- The %prep section applies patches, the %build section builds.
  Remove mixup of patching and building from %prep for quilt setup
  Related to bsc#1065703</changelog>
  <changelog author="mchang@suse.com" date="1517918400">- Fix unquoted string error and add some more checks (bsc#1079330)
  * grub2-check-default.sh</changelog>
  <changelog author="mchang@suse.com" date="1518004800">- Fix disappeared snapshot menu entry (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="mchang@suse.com" date="1518523200">- Fix incorrect check preventing the script from running (bsc#1078481)
  * 80_suse_btrfs_snapshot</changelog>
  <changelog author="iforster@suse.com" date="1519905600">- Rename grub2-btrfs-workaround-grub2-once.patch to
  grub2-grubenv-in-btrfs-header.patch
- Store GRUB environment variable health_checker_flag in Btrfs header</changelog>
  <changelog author="mchang@suse.com" date="1520337600">- fix wrong command output when default subvolume is toplevel tree with
  id 5 (bsc#1078775)
  * grub2-btrfs-09-get-default-subvolume.patch
- insert mdraid modules to support software RAID (bsc#1078775)
  * grub2-xen-pv-firmware.cfg</changelog>
  <changelog author="mchang@suse.com" date="1520856000">- Fix UEFI HTTPS Boot from ISO installation image (bsc#1076132)
  * 0001-add-support-for-UEFI-network-protocols.patch</changelog>
  <changelog author="msuchanek@suse.com" date="1522065600">- Fix incorrect netmask on ppc64 (bsc#1085419)
  * grub2-Fix-incorrect-netmask-on-ppc64.patch</changelog>
  <changelog author="mchang@suse.com" date="1522411200">- Fix packed-not-aligned error on GCC 8 (bsc#1084632)
  * 0001-Fix-packed-not-aligned-error-on-GCC-8.patch</changelog>
  <changelog author="mchang@suse.com" date="1522670400">- Fix Nvidia GPU in legacy I/O slot 2 disappears during system
  startup (bsc#1082914)
  * 0001-Fix-PCIe-LER-when-GRUB2-accesses-non-enabled-MMIO-da.patch</changelog>
  <changelog author="jdelvare@suse.de" date="1523361600">- Fix corruption of "grub2-install --help" and grub2-install manual
  page (bsc#1086670)
  * unix-exec-avoid-atexit-handlers-when-child-exits.patch</changelog>
  <changelog author="mchang@suse.com" date="1523534400">- Fix error of essential directory not found on UEFI Xen host (bsc#1085842)
  * add grub2-efi-xen-removable.patch
  * rediff grub2-suse-remove-linux-root-param.patch</changelog>
  <changelog author="mchang@suse.com" date="1523966400">- Fallback to raw mode if Open Firmware returns invalid ihandler (bsc#1071559)
  * grub2-ieee1275-open-raw-mode.patch</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1525694400">- grub2-emu on s390 keep network during kexec boot (bsc#1089493)
  * grub2-s390x-10-keep-network-at-kexec.patch</changelog>
  <changelog author="mchang@suse.com" date="1532433600">- Fix config_directory on btrfs to follow path scheme (bsc#1063443)
  * grub2-btrfs-10-config-directory.patch
-  Fix setparams doesn't work as expected from boot-last-label NVRAM var, after
  inital CAS reboot on ieee1275 (bsc#1088830)
  * grub2-ppc64-cas-new-scope.patch</changelog>
  <changelog author="mchang@suse.com" date="1533729600">- Downgrade libburnia-tools to suggest as minimal system can't afford pulling
  in tcl/tk and half of the x11 stack (bsc#1102515)
  * modified grub2.spec</changelog>
  <changelog author="mchang@suse.com" date="1535025600">- Fix overflow in sector count calculation (bsc#1105163)
  * grub2-msdos-fix-overflow.patch</changelog>
  <changelog author="mchang@suse.com" date="1535716800">- Fix outputting invalid btrfs subvol path on non btrfs filesystem due to bogus
  return code handling. (bsc#1106381)
  * modified grub2-btrfs-10-config-directory.patch</changelog>
  <changelog author="mchang@suse.com" date="1536840000">- Fix broken network interface with random address and same name (bsc#1084508)
  * 0001-ofnet-Initialize-structs-in-bootpath-parser.patch</changelog>
</package>
<package pkgid="ad48ff6d1bc15faa5bc42ed930d7fe64acfa2eb7a553559c314a830019ea40dc" name="gtk2-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="24714b900f645795dc43ec849be4bcfb082fdb640a2f485404a6e77af8f3fc90" name="gtk3-metatheme-breeze" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="913dce64663a439fc7043583c269bc13c27042bf5fa5e437327784320ce94013" name="guake" arch="noarch">
  <version epoch="0" ver="3.2.1" rel="lp150.2.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1522411200">- initial package for version 3.0.5
- add fix-simplegladeapp.patch to fix runtime bug</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523707200">- update to version 3.1.1:
  * New Features
  * Quick open displays a combobox with predefined settings for Visual Studio Code, Atom and Sublime Text.
  * Bug Fixes
  * Fix hyperlink VTE
- update to version 3.1.0:
  * Release Summary
  * This version of Guake brings mostly bug fixes, and some new features like "Quick Open on selection".
    I have also reworked internally the Quick Open so that it can automatically open files from logs
    from pytest and other python development tools output. However, there might still some false
    positive on the hovering of the mouse in the terminal, the most famous being the output of ``ls -l``
    which may have the mouse looks like it sees hyperlinks on the terminal everywhere. Click does
    nothing but its an annoying limitation.
  * New Features:
  - New "start at login" option in the settings (only for GNOME) #251
  - Add ``--verbose``/``-v`` parameter to enable debug logging. Please note the existing ``-v`` (for
    version number) has been renamed ``-V``.
  - Support for hyperlink VTE extension (`described
    here &lt;https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda&gt;`__ ) #945 (Untested, as
    it requires VTE 0.50)
  - Add great color palettes from `Guake Color
    Scheme &lt;https://github.com/ziyenano/Guake-Color-Schemes&gt;
  - Allow application to capture right click (ex: Midnight commander). #1096. It is still possible to
    show the contextual menu with Shift+right click.
  * Bug Fixes:
  - delete tab even without libutempter (#1198)
  - Fix crash when changing command file #1229
  - fix ``import sys`` in ``simplegladeapp.py``
  - change scope of ``which_align`` variable in ``pref.py`` (#1225)
  - Fix user interface translations #1228
  - Fix several issues on Quick Edit:
  - There might be broken translations, or not up-to-date language support by Guake. A global refresh
    of all existing translations would be welcomed. Most has not been updated since the transition to
    Guake 3, so these languages support might probably be unfunctional or at least partialy
    localized.
- remove fix-simplegladeapp.patch, merged upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523880000">- Use gobject-introspection for typelib library detection.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 3.2.1:
  * Introduce Nord: a new nice, clean new palette theme is
    available for Guake users (gh#Guake/guake#1275)
  * Fix duplication in theme list (gh#Guake/guake#1304)
  * Fix right click selection in Midnight Commander
  * Corrected usage of Vte.Regex.new_for_match to fix regular
    expression matching (hyperlinks, quick open) on VTE &gt;0.50
    (gh#Guake/guake#1295). URL with ' (simple quote) and ()
    (parenthesis) are now captured by hyperlink matcher. User can
    still select the URL in the terminal if he wishes to capture
    the exact url, before doing a Ctrl+click or a right click.
  * Fix "Grubbox Dark" theme
  * Updated translations.
- Changes from version 3.2.0:
  * Allow user to select the theme within the preference UI
  * Selected tab use "selected highlight" color from theme
    (gh#Guake/guake##1036)
  * Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1535025600">- Add python3-gobject-Gdk to Requires; fixes boo#1102963.</changelog>
</package>
<package pkgid="e38acd8eba84a39f855ccdd5b51072a6166693ab5b030423798160bbcfd54dbe" name="guake" arch="src">
  <version epoch="0" ver="3.2.1" rel="lp150.2.3.1"/>
  <changelog author="sebix+novell.com@sebix.at" date="1522411200">- initial package for version 3.0.5
- add fix-simplegladeapp.patch to fix runtime bug</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523707200">- update to version 3.1.1:
  * New Features
  * Quick open displays a combobox with predefined settings for Visual Studio Code, Atom and Sublime Text.
  * Bug Fixes
  * Fix hyperlink VTE
- update to version 3.1.0:
  * Release Summary
  * This version of Guake brings mostly bug fixes, and some new features like "Quick Open on selection".
    I have also reworked internally the Quick Open so that it can automatically open files from logs
    from pytest and other python development tools output. However, there might still some false
    positive on the hovering of the mouse in the terminal, the most famous being the output of ``ls -l``
    which may have the mouse looks like it sees hyperlinks on the terminal everywhere. Click does
    nothing but its an annoying limitation.
  * New Features:
  - New "start at login" option in the settings (only for GNOME) #251
  - Add ``--verbose``/``-v`` parameter to enable debug logging. Please note the existing ``-v`` (for
    version number) has been renamed ``-V``.
  - Support for hyperlink VTE extension (`described
    here &lt;https://gist.github.com/egmontkob/eb114294efbcd5adb1944c9f3cb5feda&gt;`__ ) #945 (Untested, as
    it requires VTE 0.50)
  - Add great color palettes from `Guake Color
    Scheme &lt;https://github.com/ziyenano/Guake-Color-Schemes&gt;
  - Allow application to capture right click (ex: Midnight commander). #1096. It is still possible to
    show the contextual menu with Shift+right click.
  * Bug Fixes:
  - delete tab even without libutempter (#1198)
  - Fix crash when changing command file #1229
  - fix ``import sys`` in ``simplegladeapp.py``
  - change scope of ``which_align`` variable in ``pref.py`` (#1225)
  - Fix user interface translations #1228
  - Fix several issues on Quick Edit:
  - There might be broken translations, or not up-to-date language support by Guake. A global refresh
    of all existing translations would be welcomed. Most has not been updated since the transition to
    Guake 3, so these languages support might probably be unfunctional or at least partialy
    localized.
- remove fix-simplegladeapp.patch, merged upstream</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1523880000">- Use gobject-introspection for typelib library detection.</changelog>
  <changelog author="badshah400@gmail.com" date="1525089600">- Update to version 3.2.1:
  * Introduce Nord: a new nice, clean new palette theme is
    available for Guake users (gh#Guake/guake#1275)
  * Fix duplication in theme list (gh#Guake/guake#1304)
  * Fix right click selection in Midnight Commander
  * Corrected usage of Vte.Regex.new_for_match to fix regular
    expression matching (hyperlinks, quick open) on VTE &gt;0.50
    (gh#Guake/guake#1295). URL with ' (simple quote) and ()
    (parenthesis) are now captured by hyperlink matcher. User can
    still select the URL in the terminal if he wishes to capture
    the exact url, before doing a Ctrl+click or a right click.
  * Fix "Grubbox Dark" theme
  * Updated translations.
- Changes from version 3.2.0:
  * Allow user to select the theme within the preference UI
  * Selected tab use "selected highlight" color from theme
    (gh#Guake/guake##1036)
  * Updated translations.</changelog>
  <changelog author="badshah400@gmail.com" date="1535025600">- Add python3-gobject-Gdk to Requires; fixes boo#1102963.</changelog>
</package>
<package pkgid="3efecd35be63759b0fba80aad5d2380a1ec2220a30194355452397b6d69269b4" name="guix" arch="src">
  <version epoch="0" ver="0.14.0" rel="lp150.2.3.1"/>
  <changelog author="sleep_walker@opensuse.org" date="1443700800">- use pkgconfig dependencies
- clean-up with spec-cleaner</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446379200">- rename default group from guix-builders to guixbuild to match
  upstream
- install /gnu/store directory
- depend on emacs, package emacs scripts</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446638400">- change ownership of /gnu/store
- remove sysconfig.guix file as it is not used anymore
- define macro %guix_builder_group to make such changes in future
  easier</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447329600">- bump to 0.9.0
  - see changelog for complete list of changes
- add guile-json as dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1451995200">- fix typo preventing creation of new users</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278400">- replace setBadness with addFilter in guix-rpmlint, add explanations
- add guix-rpmlint into spec file as Source
- create rcguix-daemon symlink
- make guix bash completion script as %config to silence warning</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278401">- add ExclusiveArch to restrict available architectures
- remove filter for non-standard group guixbuild (it is standard now)
- remove %config for bash completion script (rpmlint was fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1460808000">- bump to 0.10.0
- add gnutls-guile as build time dependency
- don't mark bash completion as %config (warning fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1467806400">- explicitly require libgcrypt-devel until the dynamic-link is able to
  load symlink target of /usr/lib*/libgcrypt.so
  http://debbugs.gnu.org/cgi/bugreport.cgi?bug=21076</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1468065600">- require gnutls-guile also as run time dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1470225600">- bump to 0.11.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1482753600">- bump to 0.12.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495540800">- bump to 0.13.0
  overview of changes is in NEWS
- add signatures for the bootstrap tarballs
- drop emacs dependency (emacs-guix is split out)
- update keyring</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495972800">- replace pkgconfig(guile-2.0) &gt;= 2.0.7 dependency with guile-devel
  (guile 2.2 provides pkgconfig(guile-2.2) and OBS can't handle
  boolean operators in dependencies yet</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518696000">- require guile-git and libgit2-devel for build
- bump to 0.14.0
  Changes in 0.14.0
  * Package management
  * ?guix package? displays how much will be downloaded
  * ?guix package? warns about insufficient disk space
  * ?guix package? now reports package collisions early on
  * ?guix package --search? sorts results by relevance
  * ?guix pull? now fetches code directly over Git using Guile-Git
  * Substitutes can be downloaded from servers equivalent to the authorized ones
  * New ?guix-daemon? options: ?--listen?, ?--timeout?, ?--max-silent-time?
  * New ?guix weather? command
  * ?guix publish --cache? now also caches uncompressed items
  * ?guix publish? no longer removes live items from its cache
  * ?guix challenge? now displays an overall summary
  * ?guix refresh? no longer uses FTP for GNU and GNOME packages
  * ?guix refresh? has a new ?-m? or ?--manifest? option
  * New ?refresh? checker for ?guix lint?
  * New ?json? importer for ?guix import? to simplify first packages
  * New ?texlive? importer for ?guix import?
  * Distribution
  * GuixSD installation image is now available as ISO-9660
  * GuixSD installation image now includes an ?sshd? service
  * New (gnu bootloaders) API, with support for U-Boot and extlinux
  * ?grub-configuration? is deprecated in favor of ?bootloader-configuration?
  * ?%desktop-services? now includes NetworkManager instead of Wicd
  * The (uuid ?) form can now specify FAT32 and ISO-9660 UUIDs
  * ?guix system? now reports missing file system UUIDs and labels
  * ?guix system? can provide hints when reporting unbound variables
  * New ?--file-system-type? option for ?guix system disk-image?
  * ?guix system disk-image? can now creates ISO-9660 images
  * ?guix system vm-image? &amp; co. automatically estimate the image size
  * ?guix system vm? now uses overlayfs instead of unionfs
  * ?guix system init? displays a progress bar while copying files
  * TeX Live is now also available as a set of small ?texlive-? packages
  * New ?guix system search? command to search for services
  * New services
    certbot, fcgiwrap, gdm, git-http, knot, libvirt, memcached,
    mongodb, mpd, murmur, rsync, tailon, sysctl
  * 1211 new packages
  * 1403 package updates
  * Programming interfaces
  * New build systems: ?font?, ?meson?, ?minify?, ?scons?, ?texlive?
  * ?cmake-build-system? now supports cross-compilation
  * Various improvements to ?asdf-build-system?, ?emacs-build-system?,
    ?ant-build-system?, and ?go-build-system?
  * ?patches? field of &lt;origin&gt; can now contain any lowerable object
  * (gnu system vm) has a new ?make-iso9660-image? procedure
  * ?openssh-service-type? can now be extended with new authorized keys
  * ?rottlog-service-type? can now be extended with new ?log-rotation?s
  * ?network-manager-service-type? now supports VPN plugins
  * &lt;service-type&gt; now has a ?description? field, used by ?guix system search?
  * New ?virtual-machine? form in (gnu system vm)
  * New (gnu system uuid) module, which defines a disjoint &lt;uuid&gt; type
  * New (guix progress) module
  * Noteworthy bug fixes
  * GuixSD no longer creates setuid binaries in /gnu/store
    (&lt;https://bugs.gnu.org/28751&gt;)
  * /root is no longer world-readable (&lt;http://bugs.gnu.org/27135&gt;)
  * ?guix publish? no longer leaks memory (&lt;https://bugs.gnu.org/28784&gt;)
  * Missing cursor icons in GNOME could cause crashes
    (&lt;https://bugs.gnu.org/25958&gt;)
  * Setuid programs now honor the system timezone
    (&lt;https://bugs.gnu.org/29212&gt;)
  * Clients honor the daemon?s ?max-silent-time?
    (&lt;https://bugs.gnu.org/27157&gt;)
  * ?guix substitute? honors substitute expiry time again
    (&lt;https://lists.gnu.org/archive/html/guix-devel/2017-07/msg00179.html&gt;)
  * Several portability fixes for aarch64
  * Native language support
  Updated translations: da (Danish), fr (French)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1519128000">- use wrapper for running daemon and alter service file to use it
  - if there is new daemon available - use it
  - if there is not, use the one from this package</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1520596800">- fix build against guile 2.0+</changelog>
  <changelog author="kasimir_@outlook.de" date="1522497600">- disable armv6 build (architecture is not supported)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1527508800">- add gnutls-fix.patch
  GnuTLS built against guile 2.0 is breaking any HTTPS connection,
  this upstream patch solves it
- put COPYING as %license in specfile</changelog>
  <changelog author="jbrielmaier@suse.de" date="1528200000">- gnutls-fix.patch fixes boo#1095970</changelog>
</package>
<package pkgid="b5378b6a7557caca03833b1ce35a219c5f0d6d44aa541b0b98274be1f795e8b8" name="guix" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="lp150.2.3.1"/>
  <changelog author="sleep_walker@opensuse.org" date="1443700800">- use pkgconfig dependencies
- clean-up with spec-cleaner</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446379200">- rename default group from guix-builders to guixbuild to match
  upstream
- install /gnu/store directory
- depend on emacs, package emacs scripts</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1446638400">- change ownership of /gnu/store
- remove sysconfig.guix file as it is not used anymore
- define macro %guix_builder_group to make such changes in future
  easier</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1447329600">- bump to 0.9.0
  - see changelog for complete list of changes
- add guile-json as dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1451995200">- fix typo preventing creation of new users</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278400">- replace setBadness with addFilter in guix-rpmlint, add explanations
- add guix-rpmlint into spec file as Source
- create rcguix-daemon symlink
- make guix bash completion script as %config to silence warning</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1455278401">- add ExclusiveArch to restrict available architectures
- remove filter for non-standard group guixbuild (it is standard now)
- remove %config for bash completion script (rpmlint was fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1460808000">- bump to 0.10.0
- add gnutls-guile as build time dependency
- don't mark bash completion as %config (warning fixed)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1467806400">- explicitly require libgcrypt-devel until the dynamic-link is able to
  load symlink target of /usr/lib*/libgcrypt.so
  http://debbugs.gnu.org/cgi/bugreport.cgi?bug=21076</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1468065600">- require gnutls-guile also as run time dependency</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1470225600">- bump to 0.11.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1482753600">- bump to 0.12.0
  overview of changes is in NEWS</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495540800">- bump to 0.13.0
  overview of changes is in NEWS
- add signatures for the bootstrap tarballs
- drop emacs dependency (emacs-guix is split out)
- update keyring</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1495972800">- replace pkgconfig(guile-2.0) &gt;= 2.0.7 dependency with guile-devel
  (guile 2.2 provides pkgconfig(guile-2.2) and OBS can't handle
  boolean operators in dependencies yet</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1518696000">- require guile-git and libgit2-devel for build
- bump to 0.14.0
  Changes in 0.14.0
  * Package management
  * ?guix package? displays how much will be downloaded
  * ?guix package? warns about insufficient disk space
  * ?guix package? now reports package collisions early on
  * ?guix package --search? sorts results by relevance
  * ?guix pull? now fetches code directly over Git using Guile-Git
  * Substitutes can be downloaded from servers equivalent to the authorized ones
  * New ?guix-daemon? options: ?--listen?, ?--timeout?, ?--max-silent-time?
  * New ?guix weather? command
  * ?guix publish --cache? now also caches uncompressed items
  * ?guix publish? no longer removes live items from its cache
  * ?guix challenge? now displays an overall summary
  * ?guix refresh? no longer uses FTP for GNU and GNOME packages
  * ?guix refresh? has a new ?-m? or ?--manifest? option
  * New ?refresh? checker for ?guix lint?
  * New ?json? importer for ?guix import? to simplify first packages
  * New ?texlive? importer for ?guix import?
  * Distribution
  * GuixSD installation image is now available as ISO-9660
  * GuixSD installation image now includes an ?sshd? service
  * New (gnu bootloaders) API, with support for U-Boot and extlinux
  * ?grub-configuration? is deprecated in favor of ?bootloader-configuration?
  * ?%desktop-services? now includes NetworkManager instead of Wicd
  * The (uuid ?) form can now specify FAT32 and ISO-9660 UUIDs
  * ?guix system? now reports missing file system UUIDs and labels
  * ?guix system? can provide hints when reporting unbound variables
  * New ?--file-system-type? option for ?guix system disk-image?
  * ?guix system disk-image? can now creates ISO-9660 images
  * ?guix system vm-image? &amp; co. automatically estimate the image size
  * ?guix system vm? now uses overlayfs instead of unionfs
  * ?guix system init? displays a progress bar while copying files
  * TeX Live is now also available as a set of small ?texlive-? packages
  * New ?guix system search? command to search for services
  * New services
    certbot, fcgiwrap, gdm, git-http, knot, libvirt, memcached,
    mongodb, mpd, murmur, rsync, tailon, sysctl
  * 1211 new packages
  * 1403 package updates
  * Programming interfaces
  * New build systems: ?font?, ?meson?, ?minify?, ?scons?, ?texlive?
  * ?cmake-build-system? now supports cross-compilation
  * Various improvements to ?asdf-build-system?, ?emacs-build-system?,
    ?ant-build-system?, and ?go-build-system?
  * ?patches? field of &lt;origin&gt; can now contain any lowerable object
  * (gnu system vm) has a new ?make-iso9660-image? procedure
  * ?openssh-service-type? can now be extended with new authorized keys
  * ?rottlog-service-type? can now be extended with new ?log-rotation?s
  * ?network-manager-service-type? now supports VPN plugins
  * &lt;service-type&gt; now has a ?description? field, used by ?guix system search?
  * New ?virtual-machine? form in (gnu system vm)
  * New (gnu system uuid) module, which defines a disjoint &lt;uuid&gt; type
  * New (guix progress) module
  * Noteworthy bug fixes
  * GuixSD no longer creates setuid binaries in /gnu/store
    (&lt;https://bugs.gnu.org/28751&gt;)
  * /root is no longer world-readable (&lt;http://bugs.gnu.org/27135&gt;)
  * ?guix publish? no longer leaks memory (&lt;https://bugs.gnu.org/28784&gt;)
  * Missing cursor icons in GNOME could cause crashes
    (&lt;https://bugs.gnu.org/25958&gt;)
  * Setuid programs now honor the system timezone
    (&lt;https://bugs.gnu.org/29212&gt;)
  * Clients honor the daemon?s ?max-silent-time?
    (&lt;https://bugs.gnu.org/27157&gt;)
  * ?guix substitute? honors substitute expiry time again
    (&lt;https://lists.gnu.org/archive/html/guix-devel/2017-07/msg00179.html&gt;)
  * Several portability fixes for aarch64
  * Native language support
  Updated translations: da (Danish), fr (French)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1519128000">- use wrapper for running daemon and alter service file to use it
  - if there is new daemon available - use it
  - if there is not, use the one from this package</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1520596800">- fix build against guile 2.0+</changelog>
  <changelog author="kasimir_@outlook.de" date="1522497600">- disable armv6 build (architecture is not supported)</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1527508800">- add gnutls-fix.patch
  GnuTLS built against guile 2.0 is breaking any HTTPS connection,
  this upstream patch solves it
- put COPYING as %license in specfile</changelog>
  <changelog author="jbrielmaier@suse.de" date="1528200000">- gnutls-fix.patch fixes boo#1095970</changelog>
</package>
<package pkgid="3eea83084b3faf321e9a65af872a54bceb9874c9fc4637570b978bf9dbd2b29a" name="gvfs" arch="src">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="e0ce869cb478854b4e2c791ab7fcf65a6e1a52d2572c5026cdde0e43c9ad8a56" name="gvfs" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="3d24c69539bda685a52efb858edb508cc5fe0ef1dfa1d8c6e77da2ade4351e47" name="gvfs-32bit" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="09cdb81a975331c48019d92e03304f4fadafcd81a324319dd95be92d694a0e2b" name="gvfs-backend-afc" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="cb3783c64a74c312d01774c742db9ccbeed530ddd3c623cc7dc26841a3950efa" name="gvfs-backend-samba" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="0a0af37f64a4e5436cb98b54632e096be66faa2f7fb3d3b0db807edc6d8a46ce" name="gvfs-backends" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="269bdf6f51e19895737cbf6482969ceeacb0aea581061c300777bc89b64d3dd8" name="gvfs-devel" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="5c4c6d224b48d78d139577e2a3d5d8dac2bb916f1ea52d07b55fa2b7c0f60650" name="gvfs-fuse" arch="x86_64">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="5584a7778e65b050ecbeefb3d8c7f81890dc612a9904804c3c65332403f460f5" name="gvfs-lang" arch="noarch">
  <version epoch="0" ver="1.34.2.1" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1497960000">- Update to version 1.33.3:
  + Do not send user invisible mounts in order to speed up
    g_volume_monitor_get.
  + mtp: Remove avoidance of file push for big files for better
    performance.
  + Various build fixes and cleanups.
  + Port several parts to GTask.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.33.90:
  + admin: Require mounting for each client explicitly.
  + dav: Fix DAV implementation stripping spaces.
  + gdaemonfileenumerator: Fix crashes in synchronous enumerator
    code.
  + goa: Fix password-based authentication.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503316800">- Update to version 1.33.91:
  + daemon: Avoid overflowing when querying for filesystem info.
  + proxy: Fix shadow mount handling for equal paths.
  + gdaemonfile:
  - Fix g_file_equal for different mount_prefix.
  - Fix relative path handling.
  + client: Fix crash when calculating a relative path.
  + channel: Set sockets as nonblocking to prevent deadlocks when
    copying.
  + google: Report FS total size and free space.
  + Several smaller bugfixes.
  + Updated translations.</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.33.92:
  + Updated translations.</changelog>
  <changelog author="dimstar@opensuse.org" date="1504699200">- License: LGPL-2.1+ AND GPL-3.0: gvfsd-trash links against
  trashlib, which is licensed GPL-3.0.</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Package description updates. Enable parallel build.</changelog>
  <changelog author="dimstar@opensuse.org" date="1505131201">- Update to version 1.34.0:
  + Updated translations.</changelog>
  <changelog author="fcrozat@suse.com" date="1505476800">- Rebase gvfs-nds.patch for gvfs 1.34.0, including identations and
  warnings fixes.</changelog>
  <changelog author="fcrozat@suse.com" date="1506340800">- No longer recommends gvfs-backend-afc from gvfs-backends, use
  packageand(gvfs:libimobiledevice6) on gvfs-backend-afc
  instead.</changelog>
  <changelog author="zaitor@opensuse.org" date="1506945600">- Update to version 1.34.1:
  + dav: Prevent usage of uninitialized variables.
  + afp: Prevent usage of uninitialized variables.
  + programs: Remove bashism from gvfs-* wrapper script.
  + Updated translations.</changelog>
  <changelog author="tbechtold@suse.com" date="1509451200">- Set caps(cap_net_bind_service=+ep) for gvfds-nfs: Many NFS
  servers default to a mode where they do not allow non-system
  ports from connecting. These servers require to use the
  "insecure" export option in /etc/exports in order to allow libnfs
  clients to be able to connect. Allow the usage of privileged
  ports for the gvfsd-nfs executable to not require the "insecure"
  option on the server (bsc#1065864).</changelog>
  <changelog author="zaitor@opensuse.org" date="1510747200">- Add gvfs-fix-mtp-volume-removal.patch: Fix various mtp issues
  with volume management (bgo#789491).</changelog>
  <changelog author="mgorse@suse.com" date="1511179200">- Add gvfs-mtp-handle-read-past-eof.patch: fix hang when
  transferring on some Android devices (boo#1069030 bgo#784477).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511352000">- Disable caps(cap_net_bind_service=+ep) from gvfsd-nfs: this is
  not acceptable from a security PoV, see boo#1065864#c6).</changelog>
  <changelog author="dimstar@opensuse.org" date="1512216000">- Re-enable caps(cap_net_bind_service=+ep) for gvfsd-nfs: the
  permissions package was updated to reflect this change.
- Add appropriate post/verifyscripts to set the capabilities as
  defined in the permissions package.</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Enable libnfs support also on SLE: BuildRequire pkgconfig(libnfs)
  unconditionally (bsc#1074978).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517918400">- Update to version 1.34.2:
  + Recent: Prevent crash when recent file changed.
  + Trash: Fix trash::orig-path for relative paths.
  + Mtp:
  - Handle read-past-EOF ourselves to prevent hangs.
  - Fix volume removal with current udev behavior.
  + Gphoto2: Fix volume removal with current udev behavior.
  + Updated translations.
- Drop gvfs-fix-mtp-volume-removal.patch and
  gvfs-mtp-handle-read-past-eof.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 1.34.2.1:
  + mtp: Prevent crashes if device is unplugged during mount
    operation.</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="fezhang@suse.com" date="1528459200">- Add gvfs-smb-Use-O_RDWR-to-fix-fstat-when-writing.patch: Fix
  failures copying files on smb mounts (bgo#795805 boo#1096476).</changelog>
</package>
<package pkgid="c57bd2bdad2c1e20d65acb97c0630566289029b44e6a44c723448721f76e41c7" name="hawk2" arch="src">
  <version epoch="0" ver="2.1.0+git.1526638315.05cdaf9d" rel="lp150.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1505217600">- minimize the packages we really need for this package:
  - adds hawk2-nodev.patch
  - use %{rubygem } syntax for BuildRequires/Requires
  - reorder requires to match the Gemfile
  - drop unused BR for nokogiri
  - run "bundle.%{rb_ruby_suffix} exec bin/rails version"
    to verify that we have everything needed for the Gemfile</changelog>
  <changelog author="kgronlund@suse.com" date="1505390400">- Update to version 2.1.0+git.1505201925.7f077708:
  * Use hawk-apiserver as proxy
  * Remove hawk_monitor and related dependencies</changelog>
  <changelog author="mrueckert@suse.de" date="1505390401">- add some BR to help the scheduler</changelog>
  <changelog author="kgronlund@suse.com" date="1505736000">- Loosen BR for nodejs to enable nodejs8</changelog>
  <changelog author="kgronlund@suse.com" date="1505736001">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
</package>
<package pkgid="3ccbe0a3ee0ab89a41137e3c5a9698b38803d45ccfc7e4aa69e2cb0ae9b7ea56" name="hawk2" arch="x86_64">
  <version epoch="0" ver="2.1.0+git.1526638315.05cdaf9d" rel="lp150.2.3.1"/>
  <changelog author="mrueckert@suse.de" date="1505217600">- minimize the packages we really need for this package:
  - adds hawk2-nodev.patch
  - use %{rubygem } syntax for BuildRequires/Requires
  - reorder requires to match the Gemfile
  - drop unused BR for nokogiri
  - run "bundle.%{rb_ruby_suffix} exec bin/rails version"
    to verify that we have everything needed for the Gemfile</changelog>
  <changelog author="kgronlund@suse.com" date="1505390400">- Update to version 2.1.0+git.1505201925.7f077708:
  * Use hawk-apiserver as proxy
  * Remove hawk_monitor and related dependencies</changelog>
  <changelog author="mrueckert@suse.de" date="1505390401">- add some BR to help the scheduler</changelog>
  <changelog author="kgronlund@suse.com" date="1505736000">- Loosen BR for nodejs to enable nodejs8</changelog>
  <changelog author="kgronlund@suse.com" date="1505736001">- Require timezone data to be present during build</changelog>
  <changelog author="kgronlund@suse.com" date="1505908800">- Update to version 2.1.0+git.1505902130.031a9f76:
  * Medium: Get post-expression value of ip resource for booth (bsc#1059492)
  * Only trigger attrlist click if paired with a SELECT element (bsc#1053456)</changelog>
  <changelog author="kgronlund@suse.com" date="1505995200">- Update to version 2.1.0+git.1505978451.64a32626:
  * Link error to report creation (bsc#1056483)
  * Low: Show cluster name in status title
  * Show revoke action for locally granted tickets (bsc#1059662)</changelog>
  <changelog author="kgronlund@suse.com" date="1510056000">- Update to version 2.1.0+git.1510051134.341d508e:
  * Show descriptions in cluster config (bsc#1054027)
  * Fix systemd installation for hawk-backend.service</changelog>
  <changelog author="kgronlund@suse.com" date="1510747200">- Update to version 2.1.0+git.1510742499.03cc2be8:
  * Switch to ruby 2.5 (bsc#1068183)
  * Permit parameter conversion in history upload dialog</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511438400">- Update to version 2.1.0+git.1511437564.94d31646:
  * Fix resources and constraints renaming (bsc#1068942)
  * Fix node/resource event injection in simulator (bsc#1069217)</changelog>
  <changelog author="rbrown@suse.com" date="1511438401">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kgronlund@suse.com" date="1511956800">- Fix incorrect virtus dependency</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1512129600">- Update to version 2.1.0+git.1512139291.a886c8b1:
  * Disabled click when wizard apply successfully
  * Check data-wizard-enable to disable/enable related options
  * Correct path to Cluster configuration page
  * Fix acl_enabled? (bsc#1069296)</changelog>
  <changelog author="kgronlund@suse.com" date="1512561600">- Update to version 2.1.0+git.1512558762.84542abc:
  * Ensure certificate/key is group readable (bsc#1071481)</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 2.1.0+git.1515768475.ff6e103b:
  * High: Support guest nodes (bsc#1074856)</changelog>
  <changelog author="kgronlund@suse.com" date="1518609600">- Update to version 2.1.0+git.1518590724.856b089e:
  * High: Fix remote nodes iteration (bsc#1080439)</changelog>
  <changelog author="abelarbi@suse.de" date="1519214400">- Update to version 2.1.0+git.1519229624.7c397acb:
  * Medium: Support Pacemaker Container Bundle feature (fate#324558)
  * Medium: Improved navigational structure in Hawk 2 (fate#323418)</changelog>
  <changelog author="kgronlund@suse.com" date="1522238400">- Update to version 2.1.0+git.1522277768.8e5a2060:
  * High: Better guest node detection / display (bsc#1074856)
  * High: Calculate guest node state correctly (bsc#1074856)
  * Use Promotable etc. (bsc#1085318) (bsc#1085343)
  * Enable node events for remote/guest nodes (fate#324558)
  * Add minimal bundle model object (fate#324558)
  * Low: Drop errors heading in status to align with dashboard</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1525089600">- Update to version 2.1.0+git.1525082027.af7afec4:
  * Low: Update copyright year in branding
  * Medium: Implement Hawk's cluster API (fate#323437)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526644800">- Update to version 2.1.0+git.1526638315.05cdaf9d:
  * High: Return after redirect in reports (bsc#1090562)
  * Medium: Comply routes' id with resources' ID (bsc#1092108)
  * High: Update links to release notes and documentation (bsc#1089709)
  * Medium: Fix history explorer views (bsc#1093420)
  * High: Fetch correct meta data (bsc#1092122)</changelog>
</package>
<package pkgid="25e2d0537842deaae39a1e557c814d0dc1ab01500fd674988e55d1e2220d092f" name="hdjmod" arch="src">
  <version epoch="0" ver="1.28" rel="lp150.3.2.1"/>
  <changelog author="marix@marix.org" date="1280059200">- Initial version</changelog>
  <changelog author="marix@marix.org" date="1280059201">- Build for older openSUSE versions</changelog>
  <changelog author="marix@marix.org" date="1285502400">- Patched to fix build with kernels newer than openSUSE 11.3</changelog>
  <changelog author="marix@marix.org" date="1291291200">- Patched to fix build with kernel 2.6.37</changelog>
  <changelog author="marix@marix.org" date="1304164800">- Cleaned up spec file
- Fixed missing dependency to the kernel</changelog>
  <changelog author="marix@marix.org" date="1304164801">- Fixed build on SLE 11 SP 1</changelog>
  <changelog author="marix@marix.org" date="1306756800">- Fixed build on kernels newer than openSUSE 11.4</changelog>
  <changelog author="cfarrell@novell.com" date="1312372800">- license update: GPL-2.0+
  Specify the license more accurately using the appropriate syntax</changelog>
  <changelog author="marix@marix.org" date="1331640000">- Fixed USB hotplugging
  Previously the module also loaded for devices of other vendors.</changelog>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
  <changelog author="marix@marix.org" date="1495800000">- Added hdjmod_kernel_4.11.patch: Fixes build on Kernel 4.11 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1498910400">- Added hdjmod_fix_buffer_overrun_in_device_name_handling.patch:
  Fixes a potential buffer overrun in device name handling.</changelog>
  <changelog author="marix@marix.org" date="1511697600">- Added hdjmod_kernel_4.14.patch: Fixes build on Kernel 4.14 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1518264000">- Added hdjmod_kernel_4.15.patch: Fixes build on Kernel 4.15 and
  up.
- Removed accidentally added backup file from
  hdjmod_fix_hotplug.patch</changelog>
</package>
<package pkgid="8c9c9d31b805dd5b71c68557e505f28a285e9daa07b65aa26ed6ba6ffb4bcc03" name="hdjmod-kmp-default" arch="x86_64">
  <version epoch="0" ver="1.28_k4.12.14_lp150.12.13" rel="lp150.3.2.1"/>
  <changelog author="marix@marix.org" date="1280059200">- Initial version</changelog>
  <changelog author="marix@marix.org" date="1280059201">- Build for older openSUSE versions</changelog>
  <changelog author="marix@marix.org" date="1285502400">- Patched to fix build with kernels newer than openSUSE 11.3</changelog>
  <changelog author="marix@marix.org" date="1291291200">- Patched to fix build with kernel 2.6.37</changelog>
  <changelog author="marix@marix.org" date="1304164800">- Cleaned up spec file
- Fixed missing dependency to the kernel</changelog>
  <changelog author="marix@marix.org" date="1304164801">- Fixed build on SLE 11 SP 1</changelog>
  <changelog author="marix@marix.org" date="1306756800">- Fixed build on kernels newer than openSUSE 11.4</changelog>
  <changelog author="cfarrell@novell.com" date="1312372800">- license update: GPL-2.0+
  Specify the license more accurately using the appropriate syntax</changelog>
  <changelog author="marix@marix.org" date="1331640000">- Fixed USB hotplugging
  Previously the module also loaded for devices of other vendors.</changelog>
  <changelog author="marix@marix.org" date="1333800000">- Fixed build on SLE 11 SP 2</changelog>
  <changelog author="marix@marix.org" date="1350388800">- Fixed build on kernel 3.6</changelog>
  <changelog author="marix@marix.org" date="1356264000">- Fixed build on kernel 3.7</changelog>
  <changelog author="marix@marix.org" date="1406289600">- Fixed build on kernel 3.16
  The required patch is hdjmod_kernel_3.16.patch</changelog>
  <changelog author="marix@marix.org" date="1495800000">- Added hdjmod_kernel_4.11.patch: Fixes build on Kernel 4.11 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1498910400">- Added hdjmod_fix_buffer_overrun_in_device_name_handling.patch:
  Fixes a potential buffer overrun in device name handling.</changelog>
  <changelog author="marix@marix.org" date="1511697600">- Added hdjmod_kernel_4.14.patch: Fixes build on Kernel 4.14 and
  up.</changelog>
  <changelog author="marix@marix.org" date="1518264000">- Added hdjmod_kernel_4.15.patch: Fixes build on Kernel 4.15 and
  up.
- Removed accidentally added backup file from
  hdjmod_fix_hotplug.patch</changelog>
</package>
<package pkgid="2e9c964468bd7ef0e7bde7de4cb91a5f76eba5c2e65a21833406ad381ebac626" name="hg-git" arch="noarch">
  <version epoch="0" ver="0.8.11" rel="lp150.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1364299200">- update to version 0.4.0
  - Add test to show dulwich fault on invalid timezone data
  - scrub bad timezone values before dulwich sees them
  - push: provide better output about changed references
  - push: add more output about what was added
  - git_handler: add bookmark compatibility with new bmstore
  - git_handler: defend against unexported revisions in tag
    exporting
  - tests: use fn_git_commit in test-encoding.t
  - tests: make test-encoding.t compatible with git 1.8.0
  - tests: remove filterhash from test-incoming.t
  - tests: remove mercurial version check from test-incoming.t
  - tests: remove mercurial version check from
    test-pull-after-strip.t
  - tests: convert echos to comments
  - tests: avoid changing the current directory
  - tests: extract git command-line client and dulwich requirements
    into testutil
  - tests: let git init create directories when applicable
  - tests: add check for dulwich in test-url-parsing.py
  - tests: extract commonly used commit/tag functions into testutil
    library
  - tests: extract extension configuration into a testutil library</changelog>
  <changelog author="ohering@suse.de" date="1385985600">- Update to 503d403fc040 to fix interface to python-dulwich 0.9.1
  - Export Git objects from incremental Mercurial changes
  - overlaymanifest: add iteritems(), used by recent hg versions
  - Only export modified Git trees
  - Fixes #54 | option branch_bookmark_suffix doesn't move bookmarks
  - Make the path part of URL contain a leading slash only if it's not
  - git_handler: skip exporting hg tags whose names are not valid as git
  - test-tree-decomposition: work around git command format changes
  - Update test output to handle 65d8a43b adding some more objects.
  - test-subrepos: cope with unsorted output in .hgsub
  - Upgraded to use latest version of dulwich (0.9.1).
  - Updated `setup.py` file to reflect requirement on newer version of
  - git_handler: clean up trailing whitespace
  - git_handler: fix bugs introduced by 47df57f2bb2b which could never
  - overlays: fix incoming support for hg 2.8
  - Fix for #68 | Use .gitignore files (with proper semantics)</changelog>
  <changelog author="gber@opensuse.org" date="1386072000">- bump version to 0.4.0_hg20131127</changelog>
  <changelog author="gber@opensuse.org" date="1387281600">- update to version 0.5.0
  - test-subrepos.t: hide output from newer hg versions about
    active bookmarks
  - testedwith: drop 2.3.1, which has at least one test failure
  - testedwith: add 2.8.1
  - gitignore: gate feature on dirstate having rootcache and ignore
    having readpats
  - git_handler: iterate over new refs in sorted order to stabilize
    test output
  - overlay: add kludge to make sure we only ever give hexshas to
    dulwich
  - test-timezone.t: add missing (but needed) trailing whitespace
  - tests: dulwich is now smarter about sending fewer objects,
    update output
  - setup: bump dep on dulwich to 0.9.4
  - git-handler: turn refs from None to {} so that empty git repos
    can convert</changelog>
  <changelog author="gber@opensuse.org" date="1401105600">- update to version 0.6.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.0 for a
    detailed list of changes</changelog>
  <changelog author="gber@opensuse.org" date="1408363200">- update to version 0.6.1
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.1 for a
    detailed list of changes</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.7.0
  * no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.7.0 for a
    detailed list of changes
- Remove unzip build requirement; not needed
- Cleanup specfile
- Remove depreciated -f INSTALLED_FILES and --record-rpm=INSTALLED_FILES
  and use {python_sitelib} instead
- Remove "env CFLAGS="$RPM_OPT_FLAGS""; useless for a noarch package</changelog>
  <changelog author="gber@opensuse.org" date="1423137600">- update to version 0.8.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.8.0 for a
    detailed list of changes</changelog>
  <changelog author="develop7@develop7.info" date="1424606400">- require python-dulwich &gt;= 0.9.7, as required by upstream setup.py</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1443873600">- update to 0.8.2
  Changes: see upstream</changelog>
  <changelog author="develop7@develop7.info" date="1449489600">- update to v0.8.3
  * fixes Mercurial 3.6 compatibility issues
  * Other changes: see https://bitbucket.org/durin42/hg-git/branches/compare/0.8.3%0D0.8.2
- use %version macro
- remove unused %rev define</changelog>
  <changelog author="develop7@develop7.info" date="1454328000">- update to v0.8.4
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.4%0D0.8.3</changelog>
  <changelog author="mpluskal@suse.com" date="1454328001">- Update project url
- Cleanups spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="develop7@develop7.info" date="1454414400">- update to v0.8.5
  * Support Mercurial 3.7
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.5%0D0.8.4</changelog>
  <changelog author="astieger@suse.com" date="1471262400">- disable failing tests</changelog>
  <changelog author="develop7@develop7.info" date="1493640000">- update to v0.8.6
  * Support Mercurial 4.2-rc
  * Bugfixes
- enable tests back
- source verification added</changelog>
  <changelog author="mpluskal@suse.com" date="1493726400">- Fix download url</changelog>
  <changelog author="olaf@aepfle.de" date="1503748800">- update to v0.8.9
  no changelog provided by upstream
- remove weird tests with hg-git.patch</changelog>
  <changelog author="astieger@suse.com" date="1510488000">- update to 0.8.10:
  * mercurial 4.4 compatibility
  * drop hg-git.patch and disable test, this is in flux upstream</changelog>
  <changelog author="astieger@suse.com" date="1529409600">- update to 0.8.11 (boo#1096561)
  * add config knob for marking git branches public
  * re-enable git subrepositories disabled in 4.4.1
  * fix compatibility with hg &lt; 4.2
  * improve compatibility with hg 4.5+
- as this package is known not to work with mercurial 4.6, add
  a conflict</changelog>
</package>
<package pkgid="435d4e9f585c5c1afcbf73ed67eca77559ff26373852254d3920400f880c5744" name="hg-git" arch="src">
  <version epoch="0" ver="0.8.11" rel="lp150.2.3.1"/>
  <changelog author="gber@opensuse.org" date="1364299200">- update to version 0.4.0
  - Add test to show dulwich fault on invalid timezone data
  - scrub bad timezone values before dulwich sees them
  - push: provide better output about changed references
  - push: add more output about what was added
  - git_handler: add bookmark compatibility with new bmstore
  - git_handler: defend against unexported revisions in tag
    exporting
  - tests: use fn_git_commit in test-encoding.t
  - tests: make test-encoding.t compatible with git 1.8.0
  - tests: remove filterhash from test-incoming.t
  - tests: remove mercurial version check from test-incoming.t
  - tests: remove mercurial version check from
    test-pull-after-strip.t
  - tests: convert echos to comments
  - tests: avoid changing the current directory
  - tests: extract git command-line client and dulwich requirements
    into testutil
  - tests: let git init create directories when applicable
  - tests: add check for dulwich in test-url-parsing.py
  - tests: extract commonly used commit/tag functions into testutil
    library
  - tests: extract extension configuration into a testutil library</changelog>
  <changelog author="ohering@suse.de" date="1385985600">- Update to 503d403fc040 to fix interface to python-dulwich 0.9.1
  - Export Git objects from incremental Mercurial changes
  - overlaymanifest: add iteritems(), used by recent hg versions
  - Only export modified Git trees
  - Fixes #54 | option branch_bookmark_suffix doesn't move bookmarks
  - Make the path part of URL contain a leading slash only if it's not
  - git_handler: skip exporting hg tags whose names are not valid as git
  - test-tree-decomposition: work around git command format changes
  - Update test output to handle 65d8a43b adding some more objects.
  - test-subrepos: cope with unsorted output in .hgsub
  - Upgraded to use latest version of dulwich (0.9.1).
  - Updated `setup.py` file to reflect requirement on newer version of
  - git_handler: clean up trailing whitespace
  - git_handler: fix bugs introduced by 47df57f2bb2b which could never
  - overlays: fix incoming support for hg 2.8
  - Fix for #68 | Use .gitignore files (with proper semantics)</changelog>
  <changelog author="gber@opensuse.org" date="1386072000">- bump version to 0.4.0_hg20131127</changelog>
  <changelog author="gber@opensuse.org" date="1387281600">- update to version 0.5.0
  - test-subrepos.t: hide output from newer hg versions about
    active bookmarks
  - testedwith: drop 2.3.1, which has at least one test failure
  - testedwith: add 2.8.1
  - gitignore: gate feature on dirstate having rootcache and ignore
    having readpats
  - git_handler: iterate over new refs in sorted order to stabilize
    test output
  - overlay: add kludge to make sure we only ever give hexshas to
    dulwich
  - test-timezone.t: add missing (but needed) trailing whitespace
  - tests: dulwich is now smarter about sending fewer objects,
    update output
  - setup: bump dep on dulwich to 0.9.4
  - git-handler: turn refs from None to {} so that empty git repos
    can convert</changelog>
  <changelog author="gber@opensuse.org" date="1401105600">- update to version 0.6.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.0 for a
    detailed list of changes</changelog>
  <changelog author="gber@opensuse.org" date="1408363200">- update to version 0.6.1
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.6.1 for a
    detailed list of changes</changelog>
  <changelog author="p.drouand@gmail.com" date="1421582400">- Update to version 0.7.0
  * no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.7.0 for a
    detailed list of changes
- Remove unzip build requirement; not needed
- Cleanup specfile
- Remove depreciated -f INSTALLED_FILES and --record-rpm=INSTALLED_FILES
  and use {python_sitelib} instead
- Remove "env CFLAGS="$RPM_OPT_FLAGS""; useless for a noarch package</changelog>
  <changelog author="gber@opensuse.org" date="1423137600">- update to version 0.8.0
  - no changelog provided, see
    https://bitbucket.org/durin42/hg-git/commits/tag/0.8.0 for a
    detailed list of changes</changelog>
  <changelog author="develop7@develop7.info" date="1424606400">- require python-dulwich &gt;= 0.9.7, as required by upstream setup.py</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1443873600">- update to 0.8.2
  Changes: see upstream</changelog>
  <changelog author="develop7@develop7.info" date="1449489600">- update to v0.8.3
  * fixes Mercurial 3.6 compatibility issues
  * Other changes: see https://bitbucket.org/durin42/hg-git/branches/compare/0.8.3%0D0.8.2
- use %version macro
- remove unused %rev define</changelog>
  <changelog author="develop7@develop7.info" date="1454328000">- update to v0.8.4
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.4%0D0.8.3</changelog>
  <changelog author="mpluskal@suse.com" date="1454328001">- Update project url
- Cleanups spec file with spec-cleaner
- Enable tests</changelog>
  <changelog author="develop7@develop7.info" date="1454414400">- update to v0.8.5
  * Support Mercurial 3.7
  * No changelog provided, see
    https://bitbucket.org/durin42/hg-git/branches/compare/0.8.5%0D0.8.4</changelog>
  <changelog author="astieger@suse.com" date="1471262400">- disable failing tests</changelog>
  <changelog author="develop7@develop7.info" date="1493640000">- update to v0.8.6
  * Support Mercurial 4.2-rc
  * Bugfixes
- enable tests back
- source verification added</changelog>
  <changelog author="mpluskal@suse.com" date="1493726400">- Fix download url</changelog>
  <changelog author="olaf@aepfle.de" date="1503748800">- update to v0.8.9
  no changelog provided by upstream
- remove weird tests with hg-git.patch</changelog>
  <changelog author="astieger@suse.com" date="1510488000">- update to 0.8.10:
  * mercurial 4.4 compatibility
  * drop hg-git.patch and disable test, this is in flux upstream</changelog>
  <changelog author="astieger@suse.com" date="1529409600">- update to 0.8.11 (boo#1096561)
  * add config knob for marking git branches public
  * re-enable git subrepositories disabled in 4.4.1
  * fix compatibility with hg &lt; 4.2
  * improve compatibility with hg 4.5+
- as this package is known not to work with mercurial 4.6, add
  a conflict</changelog>
</package>
<package pkgid="29c1b944d0cae60db633e7760e5044962d61bdac28c7fd9934a46e861a6816d1" name="hwdata" arch="noarch">
  <version epoch="0" ver="0.314" rel="lp150.2.3.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 0.310:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 0.311:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 0.312:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 0.313:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 0.314:
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="2440e4a683cf08bf5862bdc012a76432c91f9fd6ed7f834ca3a2b65affda07e9" name="hwdata" arch="src">
  <version epoch="0" ver="0.314" rel="lp150.2.3.1"/>
  <changelog author="mc@suse.de" date="1390046400">- initial release</changelog>
  <changelog author="mc@suse.com" date="1390046401">- update to version 0.258
- updated pci and oui ids
- remove blacklist.conf</changelog>
  <changelog author="mc@suse.com" date="1405166400">- update to version 0.267
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1410609600">- version 0.269
- updated pci, usb and vendor ids</changelog>
  <changelog author="mc@suse.de" date="1443441600">- version 0.282
- updated pci, usb and vendor ids</changelog>
  <changelog author="mpluskal@suse.com" date="1492257600">- Update to version 0.299
- Update project and download urls
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to version 0.300 (boo#1038809)</changelog>
  <changelog author="mpluskal@suse.com" date="1497268800">- Update to version 0.301</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 0.302</changelog>
  <changelog author="mpluskal@suse.com" date="1501675200">- Update to version 0.303</changelog>
  <changelog author="mpluskal@suse.com" date="1504872000">- Update to version 0.304</changelog>
  <changelog author="mpluskal@suse.com" date="1506945600">- Update to version 0.305</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 0.306:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1512561600">- Update to version 0.307:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 0.308:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1520510400">- Update to version 0.310:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 0.311:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 0.312:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="mpluskal@suse.com" date="1531137600">- Update to version 0.313:
  * Updated pci, usb and vendor ids.</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 0.314:
  * Updated pci, usb and vendor ids.</changelog>
</package>
<package pkgid="dc0d237a76c5c47a8e96cdc80ce4db263357626e84be3c020a0c87f359f3b26a" name="hylafax+" arch="src">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="254efe976061c9cbb794bf5742d5b6aad90e1765ebd97259944ab27c092afc0c" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="bd26dd6febc4ddc46f836bad69f07c828a676635585272dbdff65c12a96c301a" name="hylafax+" arch="src">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="9ddf8e51be7e03d40f98314ceeed6c6a021f97bc441befe0ea44b53538144275" name="hylafax+" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="08e9b59ad2db3af0f8bb4ba60f0c75afb91d1ff856b66d0f6c4bac3e9774f638" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="20f16bef7e58e47b2f3baf19a0c42bd49d63ab8a63bb98b5df3c55613b323ce5" name="hylafax+-client" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="d8994889d80e7fd20336786ac9abe16778b1c16524d84a086296be2dc0c35dc8" name="hyper-v" arch="src">
  <version epoch="0" ver="7" rel="lp150.4.3.2"/>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
</package>
<package pkgid="edb74cedc3d8a5b4b2b4026b70b00e3deba72e82f8048fd157164e7106c62193" name="hyper-v" arch="x86_64">
  <version epoch="0" ver="7" rel="lp150.4.3.2"/>
  <changelog author="ohering@suse.de" date="1389873600">- Add hv_fcopy_daemon for post 13.1 releases (fate#315887)
  hyper-v.tools.hv.hv_fcopy_daemon.c</changelog>
  <changelog author="ohering@suse.de" date="1390478400">- Start daemons on demand via udev rules because the guest services
  are optional.
- If systemd is used daemons live in libdir, they are not usercallable apps</changelog>
  <changelog author="ohering@suse.de" date="1392206400">- Update hv_fcopy_daemon, kernel name changed to /dev/vmbus/hv_fcopy</changelog>
  <changelog author="ohering@suse.de" date="1393761600">- Package /usr/lib/udev to fix build error</changelog>
  <changelog author="ohering@suse.de" date="1397131200">- Handle the case when the target file exists correctly in hv_fcopy_daemon
- vssdaemon: Ignore VFAT mounts during the Freeze operation</changelog>
  <changelog author="ohering@suse.de" date="1400673600">- Start hyper-v helpers manually with helper script in inst-sys</changelog>
  <changelog author="ohering@suse.de" date="1401105600">- copy mask2pfxlen from /etc/sysconfig/network/scripts/functions
  to hv_set_ifconfig (bnc#879256)</changelog>
  <changelog author="ohering@suse.de" date="1404216000">- fix file overwriting of hv_fcopy_daemon</changelog>
  <changelog author="ohering@suse.de" date="1412078400">- vssdaemon: ignore the EBUSY on multiple freezing the same
  partition (bnc#899204)</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in pre/post scripts</changelog>
  <changelog author="ohering@suse.de" date="1416916800">- introduce -n/--no-daemon option (fate#317533)</changelog>
  <changelog author="ohering@suse.de" date="1418817600">- Start hv_kvp_daemon after network-online.target (bnc#910353)
- ignore ENOBUFS and ENOMEM in the KVP daemon
- vssdaemon: skip all filesystems mounted readonly (bnc#909864)
- vssdaemon: report freeze errors</changelog>
  <changelog author="ohering@suse.de" date="1421064000">- Check return value of setsockopt call
- Improve error logging in VSS daemon.
- Check return value of poll call
- Properly pack the data for file copy functionality
- make struct hv_do_fcopy match Hyper-V host messages</changelog>
  <changelog author="ohering@suse.de" date="1429185600">- Add runlevel script for fcopy daemon in SLE11 (bnc#926534)</changelog>
  <changelog author="ohering@suse.de" date="1430395200">- hv: hypervvssd: call endmntent before call setmntent again
- remove unused bytes_written from kvp_update_file()
- address compiler warnings for hv_kvp_daemon.c
- kvp_daemon: make IPv6-only-injection work
- address compiler warnings for hv_fcopy_daemon.c
- do not add redundant '/' in hv_start_fcopy()</changelog>
  <changelog author="ohering@suse.de" date="1442577600">- add a python script lsvmbus to list VMBus devices (fate#315887)</changelog>
  <changelog author="ohering@suse.de" date="1462363200">- add Conflicts with kernel &lt; 4.2 (fate#320485)
- vss: fix the write()'s argument: error -&gt; vss_msg
- remove repeated HV_FCOPY string
- report ENOSPC errors in hv_fcopy_daemon
- fcopy: full handshake support
- vss: full handshake support
- vss: use misc char device to communicate with kernel
- kvp: use misc char device to communicate with kernel</changelog>
  <changelog author="ohering@suse.de" date="1498651200">- Check VSS daemon is listening before a hot backup (bnc#1029693)
- fix a compile warning in snprintf
- kvp: ensure kvp device fd is closed on exec
- lsvmbus: add pci pass-through UUID</changelog>
  <changelog author="ohering@suse.de" date="1515412800">- update buffer handling in hv_fcopy_daemon
- remove unnecessary header files and netlink related code
- Avoid reading past allocated blocks from KVP file (bnc#1087658)
- fix snprintf warning in kvp_daemon
- properly handle long paths
- kvp: configurable external scripts path
- vss: Thaw the filesystem and continue if freeze call has timed out
- vss: Skip freezing filesystems backed by loop</changelog>
  <changelog author="ohering@suse.de" date="1526990400">- Update lsvmbus interpreter from env(1) to python3(1) (bsc#1093910)</changelog>
</package>
<package pkgid="2e9f6f9082e25beb199dce290f857fa2f7904c3c245c00aff5275ec538ad7d53" name="ibmtss" arch="src">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="eafdd608b2924c166409f0b2c3d8ba9d421cc67769bd6a52d8d8eae02f8df090" name="ibmtss" arch="x86_64">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="68c08a55cb66dd072e01fc4d43343c4f1fdf2c0cf1680d8520a4059e0997aa29" name="ibmtss-base" arch="noarch">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="c4865e2fa3b59c8088323f83a2c1a44917d5a48a35722b67e0b0b63659507b39" name="ibmtss-devel" arch="x86_64">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="f3de3797ef292905d194ab3bd824d12512daea4d206ecdc513e4094d9d77fe31" name="icewm" arch="src">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="e55f0dfee791e497fb287ebd3dd3d8ef643ae70713459a85ee6900e191c59260" name="icewm" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="42bc09a8218670238155ea6ff97a6dc60f93915120eb013b14c9de02496505ff" name="icewm-config-upstream" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="faeb5df22e8940a8e771f6531dd48b27b6125eee792e6ee709c510c528fd09be" name="icewm-default" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="f216fc4e323793d118e573556d17352d308b6216d5f89380ff863da1435b2e58" name="icewm-lang" arch="noarch">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="64ee18280abd8c1c260c3c532a770753a98f14012e460aa12f0fc3955a514a51" name="icewm-lite" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.6.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1455710400">- Require xterm-bin instead of xterm: only the binary is required.</changelog>
  <changelog author="alarrosa@suse.com" date="1455796800">- Small fix to continue requiring xterm in distributions that don't
  have xterm-bin (Leap 42.1 and older)</changelog>
  <changelog author="tchvatal@suse.com" date="1457438400">- Add back icewm menu as it is used by us
  * icewm-susemenu.patch
- Add patch to fix icewm session desktop files
  * icewm-session-desktop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1457438401">- Update prefferences patch to point to correct wallpaper on the disk
  based on openSUSE/SLE branding package</changelog>
  <changelog author="tchvatal@suse.com" date="1457956800">- Disable image centering, with scaling now working it keeps aspect
  ration with centering enabled:
  * icewm-preferences.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1464868800">- Use just xlockmore wrt fate#320737
  * icewm-preferences.patch</changelog>
  <changelog author="tyang@suse.com" date="1472040000">- Modify: icewm-preferences.patch
  bnc#977233 modify the command to correct one.</changelog>
  <changelog author="fvogt@suse.com" date="1472126400">- Add patch icewm-exit-fork.patch to avoid deadlock (bsc#977233)</changelog>
  <changelog author="okurz@suse.com" date="1487764800">- Ensure a valid mailbox check tool (bsc#1026134)
  * icewm-mail.patch
  * https://github.com/bbidulock/icewm/pull/108</changelog>
  <changelog author="fvogt@suse.com" date="1495022400">- Use update-alternatives to create default.desktop xsession (boo#1030873)</changelog>
  <changelog author="tchvatal@suse.com" date="1495540800">- Fix the updates-alternatives code</changelog>
  <changelog author="aavindraa@gmail.com" date="1506254400">- Update to 1.4.2
- Rebase patches
  - icewm-susemenu.patch: rebase "suseprog" function
  - icewm-preferences.patch: rebase, only IconPath hunk not in upstream now
  - icewm-mate.patch: rebase several hunks in which context changed
- Drop patches that were accepted upstream
  - icewm-session-desktop.patch
  - icewm-exit-fork.patch
  - icewm-mail.patch
- Swap "sgmltool" for "asciidoc"</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Partially revert icewm-preferences.patch to previous revision, otherwise
  the icewm default desktop background is used instead of the openSUSE/SLE
  specific one, breaking openQA all over the place</changelog>
  <changelog author="tchvatal@suse.com" date="1507636800">- Use prefoverride instead of preferences in the sysconfig to make
  sure take priority over theme
- Move programs config option to /etc from /usr/share</changelog>
  <changelog author="tchvatal@suse.com" date="1507636801">- Bring back full icewm-preferences.patch from 1.3 series to actually
  work</changelog>
  <changelog author="yfjiang@suse.com" date="1513339200">- Make polkit-gnome is recommended in SLE, since SLES requires an
  authentication dialog when being rebooted and shutted-down from
  GUI (bsc#1067788 bsc#1072428)</changelog>
  <changelog author="qkzhu@suse.com" date="1513857600">- Drop our distribution's icewm.desktop and use the one provided by
  IceWM upstream
- Add patch icewm-desktop-nodisplay.patch
  Set NoDisplay for upstream's icewm.desktop since it only starts the
  window manager, icewm-session.desktop (the preferred program to
  start the IceWM system) will be displayed in display manager
  (bsc#1072557)</changelog>
  <changelog author="qzheng@suse.com" date="1516190400">- Change the recommend xlockmore to xscreensaver( bsc#1074932 ).</changelog>
  <changelog author="qzheng@suse.com" date="1519732800">- Add icewm-use-iproute2-ss-instead-of-netstat.patch:
  Because netstat is not available by default, so call "ss" instead
  of "netstat", and make the Clock command work on icewm
  ( bsc#1079627  ).</changelog>
  <changelog author="qzheng@suse.com" date="1536321600">- Delete icewm.desktop and rename icewm-session.desktop to
  icewm.desktop to fix the upgrade issue ( bsc#1096917 ).</changelog>
</package>
<package pkgid="6e2fee8104ee6a4a2c743c5be7612652d56464848864f5ef52c1cc678ca673a7" name="install-initrd-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.373" rel="lp150.2.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/installation-images#234
- add vmd.ko module (bsc#1079924)
- 14.359</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- build skelcd-installer-net subpackage containing the network
  install setup (bsc#1063789)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596800">- merge gh#openSUSE/installation-images#235
- udevadm should retrigger 'add' events (bsc#1084357)
- 14.360</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596801">- merge gh#openSUSE/installation-images#236
- remove default driver update url (bsc#1084510)
- 14.361</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521201600">- merge gh#openSUSE/installation-images#237
- move tftpboot location (bsc#1085479)
- 14.362</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720000">- merge gh#openSUSE/installation-images#238
- allow udevd to be run with --debug (bsc#1085212)
- 14.363</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720001">- merge gh#openSUSE/installation-images#239
- add novnc &amp; python3-websockify (bsc#1078785)
- 14.364</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522065600">- merge gh#openSUSE/installation-images#240
- add libstorage-ng translations (bsc#1081454)
- 14.365</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522238400">- merge gh#openSUSE/installation-images#241
- s390x: add zpxe.rexx to dvd (bsc#813454)
- 14.366</changelog>
  <changelog author="wfeldt@opensuse.org" date="1523016000">- merge gh#openSUSE/installation-images#242
- adjust adddir script to allow updating coreutils (bsc#1087901)
- 14.367</changelog>
  <changelog author="snwint@suse.de" date="1523275200">- do not delete efi image in skelcd-installer-net (bsc#1088679)</changelog>
  <changelog author="kukuk@suse.de" date="1523275201">- No upgrade option for Kubic (bsc#1088304)</changelog>
  <changelog author="snwint@suse.de" date="1523448000">- disable Kubic 32-bit build (bsc#1089102)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524052800">- merge gh#openSUSE/installation-images#243
- run postin script of yast2-storage-ng (bsc#1081198)
- 14.368</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524139200">- merge gh#openSUSE/installation-images#244
- remove dmraid from inst-sys (fate#323743, bsc#1088570)
- remove explicit dependency from mozilla-nspr
- 14.369</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
</package>
<package pkgid="6a5cc268934c0b4f21f38151aa79556fabc76b69c2f11b40f8a3f3f2a541eb77" name="installation-images-debuginfodeps-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.373" rel="lp150.2.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/installation-images#234
- add vmd.ko module (bsc#1079924)
- 14.359</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- build skelcd-installer-net subpackage containing the network
  install setup (bsc#1063789)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596800">- merge gh#openSUSE/installation-images#235
- udevadm should retrigger 'add' events (bsc#1084357)
- 14.360</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596801">- merge gh#openSUSE/installation-images#236
- remove default driver update url (bsc#1084510)
- 14.361</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521201600">- merge gh#openSUSE/installation-images#237
- move tftpboot location (bsc#1085479)
- 14.362</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720000">- merge gh#openSUSE/installation-images#238
- allow udevd to be run with --debug (bsc#1085212)
- 14.363</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720001">- merge gh#openSUSE/installation-images#239
- add novnc &amp; python3-websockify (bsc#1078785)
- 14.364</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522065600">- merge gh#openSUSE/installation-images#240
- add libstorage-ng translations (bsc#1081454)
- 14.365</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522238400">- merge gh#openSUSE/installation-images#241
- s390x: add zpxe.rexx to dvd (bsc#813454)
- 14.366</changelog>
  <changelog author="wfeldt@opensuse.org" date="1523016000">- merge gh#openSUSE/installation-images#242
- adjust adddir script to allow updating coreutils (bsc#1087901)
- 14.367</changelog>
  <changelog author="snwint@suse.de" date="1523275200">- do not delete efi image in skelcd-installer-net (bsc#1088679)</changelog>
  <changelog author="kukuk@suse.de" date="1523275201">- No upgrade option for Kubic (bsc#1088304)</changelog>
  <changelog author="snwint@suse.de" date="1523448000">- disable Kubic 32-bit build (bsc#1089102)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524052800">- merge gh#openSUSE/installation-images#243
- run postin script of yast2-storage-ng (bsc#1081198)
- 14.368</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524139200">- merge gh#openSUSE/installation-images#244
- remove dmraid from inst-sys (fate#323743, bsc#1088570)
- remove explicit dependency from mozilla-nspr
- 14.369</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
</package>
<package pkgid="c363490af963f51ba490025e2f10531908845b9c588ff8e599c2419899b4110f" name="issue-generator" arch="noarch">
  <version epoch="0" ver="1.5" rel="lp150.3.3.1"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
</package>
<package pkgid="562485fabaef625b402289553e77098f38a3cfc7628e7854b030d1664270078b" name="issue-generator" arch="src">
  <version epoch="0" ver="1.5" rel="lp150.3.3.1"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
</package>
<package pkgid="c34991af9088c9f5e86f6292eb19aa65b91d78c561da329bf7466348261f7401" name="issue-generator" arch="noarch">
  <version epoch="0" ver="1.6" rel="lp150.3.6.2"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
  <changelog author="kukuk@suse.de" date="1528113600">- Update to version 1.6
  - Fix permission of /run/issue [bsc#1095697]</changelog>
</package>
<package pkgid="0cf954fa211f494319e9913b36a8fa3ecbf92306f98d09feb9594f1017bdf88c" name="issue-generator" arch="src">
  <version epoch="0" ver="1.6" rel="lp150.3.6.2"/>
  <changelog author="kukuk@suse.de" date="1477656000">- Initial version</changelog>
  <changelog author="kukuk@suse.de" date="1478001600">- Add directories for udev to filelist</changelog>
  <changelog author="kukuk@suse.de" date="1478088000">- Update to version 1.0</changelog>
  <changelog author="kukuk@suse.de" date="1479211200">- Use correct systemd macros</changelog>
  <changelog author="kukuk@suse.de" date="1479211201">- Update to version 1.1
  - fix several typos
  - relead agetty if we modify /run/issue</changelog>
  <changelog author="kukuk@suse.de" date="1479902400">- Update to version 1.2
  - add additional docu</changelog>
  <changelog author="kukuk@suse.de" date="1480075200">- Fix typo in spec file</changelog>
  <changelog author="kukuk@suse.de" date="1490702400">- Update to version 1.3
  - make list of network interfaces configureable</changelog>
  <changelog author="kukuk@suse.de" date="1496232000">- Remove ghost entry for /etc/issue [bsc#1038526]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1511870400">- Don't require systemd: if it's there, we will use it, if it is
  not there like in a base container image, there is nothing to do
  for us.</changelog>
  <changelog author="kukuk@suse.de" date="1511870401">- Use official systemd macros in %post install</changelog>
  <changelog author="kukuk@suse.com" date="1512734400">- Readd require for systemd, else package will be installed too
  early and services will never be enabled [bsc#1071776]</changelog>
  <changelog author="kukuk@suse.de" date="1513166400">- Enable more network devices to be shown on s390x [bsc#1071776]
- Remove systemd require again, systemd-preset-branding is fixed.</changelog>
  <changelog author="kukuk@suse.de" date="1518004800">- Update to version 1.4
  - check if agetty is available
  - adjust to changed ssh-keygen output</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1526644800">- Update to version 1.5
  - don't replace issue file or reload agetty if there were no
    changes (found due to [bsc#1085196]).</changelog>
  <changelog author="kukuk@suse.de" date="1528113600">- Update to version 1.6
  - Fix permission of /run/issue [bsc#1095697]</changelog>
</package>
<package pkgid="259a47efc169fe2facce2e8ea046eabc826a37ec032639424d0277c7d9417d65" name="java-10-openjdk" arch="src">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="1e25ac2370970d6d71ab2af36b24d59cf5823662c63a0adc2bea530ab1ba97f2" name="java-10-openjdk" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="0454b1a03a3100404ae367007661a70047f2bf0e327e088bde05e728a3bc2bc5" name="java-10-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="43eaa4c7617495c421f8164478d48968dfbe76745627fc9cf740f843b3f64a6e" name="java-10-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="a23f635a978f23bbd9b4ac9230fdbe7e00596ecb8f505de78ed9614b6122461d" name="java-10-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="3b918aaea3b4963a337acdfc842ba4bae3bfef955305abd4b90f8ac85d5877f2" name="java-10-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="184a4a0673c83ac7eba3b06b7b3fbb61c235a87265b92ff8b1f5da190894e5dc" name="java-10-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="566f1476e273bafdbab017c45e77d8627f6839c1080f3f509e8c2422bdbc8709" name="java-10-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="163515dfe8f2b3abc514c8e5c30512f9c957f0c13b704e37dadae719c8fa6013" name="java-10-openjdk-src" arch="x86_64">
  <version epoch="0" ver="10.0.2.0" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1516104000">- Recommend tzdata-java8 instead of depending on it. This fixes
  build cycles.</changelog>
  <changelog author="fstrba@suse.com" date="1516276800">- Update to tag jdk-10+40 (January 2018 CPU) - bsc#1076366
  * Security fixes:
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Security-In-Depth fixes:
    + S8160104: CORBA communication improvements
    + S8174756: Extra validation for public keys
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8186080: Transform XML interfaces
  * Fixes:
    + S8075939: Stream.flatMap() causes breaking of
    short-circuiting of terminal operations
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8175542: JMX: Not enough JDP packets received
    + S8179700: Exceptions thrown in StartManagementAgent.java
    + S8181047: Add comment to technical terms that shall not be
    translated
    + S8181878: javadoc should support/ignore --add-opens
    + S8187946: Support ISO 4217 Amendments 163 and 164
    + S8188145: MethodHandle resolution should follow JVMS sequence
    of lookup by name &amp; type before type descriptor resolution
    + S8189146: Have use of "var" in 9 and earlier source versions
    issue a warning for type declarations
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191350: jdk/internal/reflect/CallerSensitive/CheckCSMs.java
    test fails when -Xmx512m set
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8193597: sun/nio/cs/TestStringCoding.java fails
    intermittently with getBytes(csn) failed -&gt; GBK
    + S8193664: AppCDS tests should use
  - XX:+UnlockCommercialFeatures when running with commercial JDK
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8193767: Improve javadoc in ResourceBundle working with
    modules
    + S8193933: Export ClassLoaderData claim state to support
    interleaved object traversal
    + S8194044: Regression manual Test
    javax/swing/JFileChooser/8067660/FileChooserTest.java fails
    + S8194286: tools/launcher/FXLauncherTest.java fails with
    java.lang.UnsatisfiedLinkError
    + S8194287: tools/launcher/RunpathTest.java fails with
    java.lang.NullPointerException
    + S8194717: JDK10 L10n resource file update - msgdrop 10
    + S8194883: Unhandleable Push Promises should be cancelled
    + S8194914: Compilation fails with "node not on backedge" in
    OuterStripMinedLoopNode::adjust_strip_mined_loop
    + S8194929: Unreferenced FileDescriptors not closed
    + S8194953: doclet corrupts HTML files when adding navbar
    + S8194955: Warn when default HTML version is used
    + S8194959: Correct test tag to move bugid from @test to @bug
    + S8194963: SystemDictionary::link_method_handle_constant()
    can't link MethodHandle.invoke()/invokeExact()
    + S8194988: 8 Null pointer dereference defect groups related to
    MultiNode::proj_out()
    + S8194993: Loop Strip Mining has some leftover debugging code
    + S8195072: Update ASM 3rd party legal copyright to 6.0
    + S8195094: Fix type-O in "8159422: Very high Concurrent Mark
    mark stack contention"
    + S8195123: Very large regressions in Octane benchmarks using
    10-b39
    + S8195138: The asynchronous Http1HeaderParser doesn't handle
    all line folds correctly
    + S8195153: [test] runtime/6981737/Test6981737.java shouldn't
    check 'java.vendor' and 'java.vm.vendor' properties
- Added patch:
  * revert-8174962-for-aarch64.patch
    + revert "S8174962, CVE-2018-2582: Better interface
    invocations" for aarch64 and zero. The patch misses aarch64
    and zero parts and causes crashes during the build on those
    architectures.
- Modified patch:
  * disable-doclint-by-default.patch
    + rediff to changes in context</changelog>
  <changelog author="fstrba@suse.com" date="1516449600">- Removed patch:
  * revert-8174962-for-aarch64.patch
    + a proper fix for aarch64 exists
- Added patches:
  * JDK-8195685-aarch64.patch
    + S8195685, AArch64 cannot build with JDK-8174962
  * revert-8174962-for-zero.patch
    + revert "S8174962, CVE-2018-2582: Better interface invocations"
    for ZERO. The patch misses ZERO parts and causes crash
  during build.</changelog>
  <changelog author="fstrba@suse.com" date="1516622400">- Removed patch:
  * revert-8174962-for-zero.patch
    + a proper fix for ZERO exists
- Added patch:
  * JDK-8194739-zero.patch
    + S8194739: Zero port of 8174962: Better interface invocations</changelog>
  <changelog author="fstrba@suse.com" date="1516881600">- Modified patch:
  * JDK-8195685-aarch64.patch
    + Incorporate S8196136: AArch64: Correct register use in patch
    for JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1516968000">- Update to tag jdk-10+41
  * Fixes:
    + S8189761: COMPANY_NAME, IMPLEMENTOR, BUNDLE_VENDOR, VENDOR,
    but no configure flag
    + S8191839: ModuleElement.DirectiveVisitor :: visit() method
    behavior is deviating from the spec
    + S8192004: InspectedFrame.materializeVirtualObjects only
    updates locals with new objects
    + S8194135: The content in textArea can not be pasted after
    clicking "Copy" button.
    + S8194229: tools/jmod/JmodTest.jtr fails when no privilege to
    create sym link on windows
    + S8194307: KeyStore#getInstance with custom LoadStoreParameter
    succeeds with invalid password
    + S8194869: [TESTBUG][aix, s390] Adapt tests to platforms.
    + S8194982: 2 Null pointer dereference defect groups related to
    ProjNode::is_uncommon_trap_if_pattern()
    + S8194989: 2 Null pointer dereference defect groups caused by
    Dependencies::DepValue::as_klass()
    + S8194991: Null pointer dereference caused by
    c2v_getNextStackFrame
    + S8194992: Null pointer dereference in MultiNode::proj_out
    related to loopexit()
    + S8195478: sun/text/resources/LocaleDataTest.java fails with
    java.lang.Exception
    + S8195615: libsplashscreen linux ppc64le build error after
    libpng update
    + S8195685: AArch64: AArch64 cannot build with JDK-8174962
    + S8195823: Buffers given to response body subscribers should
    not contain unprocessed HTTP data
- Modified patch:
  * JDK-8194739-zero.patch
    + Version that is commited to the jdk10 repository
  * jdk10-gcc6.patch
    + Rediff to changed context
- Removed patch:
  * JDK-8195685-aarch64.patch
    + Integrated upstream
- Added patch:
  * JDK-8196136-aarch64.patch
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685</changelog>
  <changelog author="fstrba@suse.com" date="1517572800">- Update to tag jdk-10+42
  * Fixes:
    + S8191915: JCK tests produce incorrect results with C2
    + S8193840: Add compiler/c2/Test8007294.java to the problem list
    + S8194739: Zero port of 8174962: Better interface invocations
    + S8195852: The usage of permissions in Desktop API should be
    clarified
    + S8195859: AArch64: vtableStubs gtest fails after 8174962
    + S8195970: Crash passing null to a VarHandle
    + S8196136: AArch64: Correct register use in patch for
    JDK-8195685
    + S8196221: AArch64: Mistake in committed patch for JDK-8195859
    + S8196287: Update src/java.desktop/share/legal/libpng.md for
    libpng 1.6.34
    + S8196295: [Graal] remove unused org.graalvm.options package
    + S8196296: Lucene test crashes C2 compilation
- Removed patches:
  * JDK-8194739-zero.patch
  * JDK-8196136-aarch64.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1518177600">- Update to tag jdk-10+43
  * Fixes:
    + S8194764: javac incorrectly flags deprecated for removal
    imports
    + S8195837: (tz) Upgrade time-zone data to tzdata2018c
    + S8195973: Update JDK 10 repo for FCS build
    + S8196288: Update src/java.desktop/share/legal/libharfbuzz.md
    for harfbuzz
    + S8196503: PPC64: vtableStubs gtest fails after 8174962
    + S8196678: avoid printing uninitialized buffer in
    os::print_memory_info on AIX
    + S8196717: remove xmlresolver.md</changelog>
  <changelog author="fstrba@suse.com" date="1519214400">- Update to tag jdk-10+44
  * Fixes:
    + S8196383: JDK 10 L10n resource file update - msgdrop 20
    + S8196602: Change HeapRegionClosure to comply to naming
    conventions
    + S8196883: G1RemSet::refine_card_concurrently doesn't need to
    check for cards in collection set
    + S8197493: [Backout] JDK-8196602 Change HeapRegionClosure to
    comply to naming conventions
    + S8197968: [Backout] JDK-8196883
    G1RemSet::refine_card_concurrently doesn't need to check for
    cards in collection set</changelog>
  <changelog author="fstrba@suse.com" date="1519819200">- Update to tag jdk-10+45
  * Fixes:
    + S8198658: Docs still point to JDK 9 docs</changelog>
  <changelog author="fstrba@suse.com" date="1519992000">- Modified patch:
  * system-pcsclite.patch
    + Fix merge error in the patch</changelog>
  <changelog author="fstrba@suse.com" date="1520510400">- Update to tag jdk-10+46
- Fixes:
  + S8198950: AArch64: org.openjdk.jcstress.tests.varhandles.DekkerTest
    fails</changelog>
  <changelog author="fstrba@suse.com" date="1521547200">- Official OpenJDK 10 release
  * remove the "-internal" postfix of the version string
  * remove the build number from rpm version of the package
  * take tarballs from the jdk-update project, since the CPUs will
    be delivered there</changelog>
  <changelog author="fstrba@suse.com" date="1523534400">- Build client JVM on arm v6 and lower. Server JVM does not work on
  anything lower then arm v7.</changelog>
  <changelog author="fstrba@suse.com" date="1524139200">- OpenJDK 10.0.1 (April 2018 CPU)
  * Security fixes:
    + S8194238: Trying exceptions in MethodHandles (CVE-2018-2826,
    bsc#1090197)
    + S8194233: Improve support for array handles (CVE-2018-2825,
    bsc#1090196)
    + S8192025: Less referential references (CVE-2018-2814,
    bsc#1090032)
    + S8189997: Enhance keystore mechanisms (CVE-2018-2794,
    bsc#1090024)
    + S8189977: Improve permission portability (CVE-2018-2795,
    bsc#1090025)
    + S8192757: Improve stub classes implementation (CVE-2018-2815,
  bsc#1090033)
    + S8189993: Improve document portability (CVE-2018-2799,
    bsc#1090029)
    + S8189989: Improve container portability (CVE-2018-2798,
    bsc#1090028)
    + S8189985: Improve tabular data portability (CVE-2018-2797,
    bsc#1090027)
    + S8189981: Improve queuing portability (CVE-2018-2796,
    bsc#1090026)
    + S8189969: Manifest better manifest entries (CVE-2018-2790,
    bsc#1090023)
  * Security-In-Depth fixes:
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192030: Better MTSchema support
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
  * Fixes:
    + S8160104: CORBA communication improvements
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8172525: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962: Better interface invocations
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8175932: Improve host instance supports
    + S8176450: Revise default document styling
    + S8178449: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179533: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180869: Cleaner image file reading handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125: Improve reliability of DNS lookups
    + S8182387: Improve PKCS usage
    + S8182601: Improve usage messages
    + S8185292: Stricter key generation
    + S8185325: Improve GTK initialization
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186080: Transform XML interfaces
    + S8186212: Improve GSS handling
    + S8186600: Improve property negotiations
    + S8186606: Improve LDAP lookup robustness
    + S8186998: Improve JMX supportive features
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189284: More refactoring for deserialization cases
    + S8189989: Improve container portability
    + S8190227: Forward port 8188880 to JDK10CPU
    + S8190289: More refactoring for client deserialization cases
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    /TestURICertStoreParameters.java fails after JDK-8186606
    + S8191142: More refactoring for naming deserialization cases
    + S8191358: Restore TSA certificate expiration check
    + S8191907: PPC64 and s390 parts of JDK-8174962: Better
    interface invocations
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8193683: Increase the number of clones in the CloneableDigest
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8194540: Change version number to 10.0.1
    + S8194542: Update milestone to ea for 10.0.1+1
    + S8196289: Update src/java.desktop/share/legal/lcms.md for
    LCMS 2.9
    + S8196426: Update milestone to fcs for 10.0.1+3
    + S8197443: ArrayIndexOutOfBoundsException in
    UcryptoException.getError
    + S8198746: JDK 10.0.1 L10n resource file update
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524139201">- Fix armv6 build with fix_armv6_build.patch</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530100800">- Move idlj to *-devel package (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1530878400">- Remove the alternative for java before reinstalling it, if idlj
  is its slave (bsc#1096420)</changelog>
  <changelog author="fstrba@suse.com" date="1531915200">- OpenJDK 10.0.2 (July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes
    + S8187577: JVM crash during gc doing concurrent marking
    + S8193802: NullPointerException from
    JarFileSystem.getVersionMap()
    + S8194554: filterArguments runs multiple filters in the wrong
    order
    + S8195096: Exception printed on console with custom LogManager
    on starting Apache Tomcat
    + S8196224: Even better Internet address support
    + S8199910: Compiler crashes with -g option and variables of
    intersection type inferred by `var`
    + S8200118: [TESTBUG] String concat tests should test
    toString() application order
    + S8200355: local variable inference regression test generates
    classfile in test folder
    + S8200359: (tz) Upgrade time-zone data to tzdata2018d
    + S8200556: AArch64: assertion failure in slowdebug builds
    + S8200640: Change version number to 10.0.2
    + S8200641: Update milestone to ea for 10.0.2
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201495: [Zero] Reduce limits of max heap size for boot JDK
    on s390
    + S8201509: Zero: S390 31bit atomic_copy64 inline assembler is
    wrong
    + S8201788: Number of make jobs wrong for bootcycle-images
    target
    + S8202210: jlink uses little-endian for big-endian
    cross-compilation targets
    + S8202262: libjsig.so not linked with extra linker flags from
    configure
    + S8202522: Switch to 'fcs' milestone for July CPU 2018 release
    + S8202540: Zero build is broken after JDK-8189871 (Refactor GC
    barriers to use declarative semantics)
    + S8202588: JDK 10.0.2 l10n resource file update
    + S8202784: generated-configure.sh changes missing in 8201495
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203367: Upgrade to Freetype 2.9.1
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8204322: += applied to String operands can provoke side
    effects
    + S8205491: adjust reflective access checks
- Removed patch:
  * bootcycle_jobs.patch
    + Fixed upstream</changelog>
</package>
<package pkgid="a2bce2ec24186cfd79ab6e291c380c6bcd0f35ba643b971e7f414f1b6c78ff1c" name="java-11-openjdk" arch="src">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="0a997b7c259b6b816aa851ae6c27ff647c1468e7ebb6f4d7266ceb8b1dc217e1" name="java-11-openjdk" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="9be0ca6667ee7f8ff9a280f99b4572c0765e936b8d13482cb5da4a1bd030de00" name="java-11-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="d3ee1e9f0f5c4cd11bd6cdf93773aeae577b9b192cbf8fe15f98a1bc64852862" name="java-11-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="57d7b52b813f8d1b0942144d103be73df883a1f233d37ff718cc81dabfd8b327" name="java-11-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="438f6e9c445bc9241755019cb1cdae2196e17d75d987ebc485d1ea62be6a3743" name="java-11-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="149e861bd19916f95a63117d9ca0d402b9e99c4f01024ad6928cc8bc898ed52b" name="java-11-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="3c9da83b32803039d8d8823cfcfd815067a3b0f103d92712aa09e9dc7480b2eb" name="java-11-openjdk-jmods" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="32b55c90868221287b31dbdf9cea7449fb788108711c202d74a2a25747a37677" name="java-11-openjdk-src" arch="x86_64">
  <version epoch="0" ver="11.0.0.0~24" rel="lp150.2.3.2"/>
  <changelog author="fstrba@suse.com" date="1525953600">- Fix s390x build, since INCLUDE_SA is false by default on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526040000">- Update to ustream tag jdk-11+13
  * Fixes:
    + S4842658: DefaultListModel and DefaultComboBoxModel should
    support addAll (Collection c)
    + S6574555: PNGImageWriter incorrectly sets bKGD chunk
    + S6788458: PNGImageReader ignores tRNS chunk while reading
    non-indexed RGB/Gray images
    + S8153532: Add @throws NPE javadoc to
    UIManager.setLookAndFeel(String) method description
    + S8154463: New failure of
    closed/java/awt/font/Outline/OutlineInvarianceTest.java
    + S8171277: Elliptic Curves for Security in Crypto
    + S8176717: GC log file handle leaked to child processes
    + S8181594: Efficient and constant-time modular arithmetic
    + S8181910: [macos] Support dark title bars on macOS
    + S8185034: Cleanup and consolidate Metaspace coding
    + S8187123: (reflect) Class#getCanonicalName and
    Class#getSimpleName is a part of performance issue
    + S8187392: Deprecated methods in the peers can be removed
    + S8189687: Swing: Invalid position of candidate pop-up of
    InputMethod in Hi-DPI on Windows
    + S8189916: Dynamic Constant support for Sparc
    + S8191410: Unicode 10
    + S8194968: problem list actions for
    tools/javac/jvm/VerboseOutTest
    + S8195002: Fix test/hotspot/jtreg/gtest/GTestWrapper.java on
    Alpine/Musl
    + S8195717: test java/lang/invoke/MethodHandlesTest timed out
    running testAsCollector1
    + S8196113: Remove the Compact Profile builds
    + S8196572: Tests ColConvCCMTest.java and MTColConvTest.java
    fail
    + S8197388: Added not existing bug id in jdk/ProblemList.txt
    + S8197447: LogCompilation throws "couldn't find bytecode"
    + S8197954: Remove unnecessary intermediary APIs from AppCDS
    implementation
    + S8198342: Test FileSystemViewListenerLeak.java is unstable
    + S8199067: [REDO] NMT: Enhance thread stack tracking
    + S8199196: Add javadoc support for preview features
    + S8199382: [TESTBUG] Open source VM testbase JDI tests
    + S8199748: Touch keyboard is not shown, if text component gets
    focus from other text component
    + S8199852: Print more information about class loaders in
    LinkageErrors.
    + S8199912: jshell tool: /open from URI
    + S8199932: Missing copyright header in AWT source code
    + S8200083: Bump bootjdk requirement for JDK 11 to JDK 10
    + S8200094: Turkish locale reports NPE No enum constant
    com.sun.source.doctree.DocTree.Kind.S?NCE
    + S8200146: Remove the appletviewer launcher
    + S8200313: java/awt/Gtk/GtkVersionTest/GtkVersionTest.java
    fails
    + S8200372: String::trim JavaDoc should clarify meaning of space
    + S8200557: OopStorage parallel iteration scales poorly
    + S8200716: Object propertyIsEnumerable buggy behavior on short
    integer-string key
    + S8200729: Conditional compilation of GCs
    + S8201138: Defect in XMLEventReader.getElementText() may cause
    data to be skipped, duplicated or otherwise result in a
    ClassCastException
    + S8201433: Fix potential crash in BufImg_SetupICM
    + S8201492: Properly implement non-contiguous generations for
    Reference discovery
    + S8201524: [AIX] Don't link libfontmanager against
    libawt_headless
    + S8201572: Improve Metaspace Statistics
    + S8201598: Fix for 8181910: Support dark title bars on macOS
    broke the MacOS build
    + S8201602: ARM32 - Minimal Dynamic Constant support
    + S8201626: Typo in MakeWindowAlwaysOnTop test
    + S8201640: Use _ref_processor_* member variables directly in
    G1CollectedHeap
    + S8201793: (ref) Reference object should not support cloning
    + S8202017: Merge Reference Enqueuing phase with phase 3 of
    Reference processing
    + S8202018: Move card table clear before enqueuing pending
    references
    + S8202021: Improve variable naming in ReferenceProcesso
    + S8202050: Add javax/sound/midi/Sequencer/Recording.java to
    the problemList
    + S8202080: Introduce ordering semantics for Atomic::add and
    other RMW atomics
    + S8202083: Remove explicit CMS checks in CardTableBarrierSet
    + S8202143: Parts of 8193435 added in merge change set.
    + S8202181: Correctly specify size of hostname buffer in Unix
    Inet*AddressImpl_getLocalHostName implementations
    + S8202291: java/rmi/Naming/LookupIPv6.java failed with
    Connection refused
    + S8202301: Add tests related to JDK-8196572 to the ProblemList
    + S8202303: LogStream should autoflush on destruction
    + S8202319: Fix compilation warnings in Solaris debug builds
    for DevStudio 12.6
    + S8202387: javac --release 11 not supported
    + S8202424: Metaspace: on chunk retirement, use correct lower
    limit on chunksize when adding blocks to free blocks list
    + S8202435: [aix] print program break as part of memory info
    into hs-err file
    + S8202447: Fix unloading_occurred to mean unloading_occurred
    + S8202465: [C1] casts should not be eliminated for interface
    types
    + S8202548: Use reservation Object when creating SpeciesData
    + S8202552: [AOT][JVMCI] Incorrect usage of INCLUDE_JVMCI and
    INCLUDE_AOT
    + S8202563: BigInteger/BigDecimal not immune to overflow,
    contrary to spec
    + S8202564: java/lang/management/ThreadMXBean/ThreadCounts.java
    fails
    + S8202565: C1 compilation crashes with
    "assert(is_double_stack() &amp;&amp; !is_virtual()) failed: type check"
    + S8202575: Remove java/lang/String/nativeEncoding/
    /StringPlatformChars.java from ProblemList
    + S8202581: failure_handler: gather more environment
    information on macOS
    + S8202582: DateTimeFormatterBuilder.parseOffsetBased
    unnecessarily calls toString()
    + S8202583: Remove experimental ClassForNamePlugin
    + S8202584: de-problem list tools/javac/jvm/VerboseOutTest
    + S8202591: Remove usage of CMSEdenChunksRecordAlways in
    defNewGeneration.cpp
    + S8202592: Remove unused EvacuateFollowersClosure
    + S8202597: javac is not inducing a notional interface if
    Object appears in an intersection type
    + S8202599: Mark intermittently failing jshell tests
    + S8202606: Deprecate AllowNonVirtualCalls option
    + S8202631: JVM_Clone to throw CloneNotSupportException for
    Reference object
    + S8202634: Metaspace: simplify SpaceManager lists
    + S8202639: Use concrete Generation classes in SerialHeap and
    CMSHeap
    + S8202640: Small C1 cleanups for BarrierSetC1
    + S8202641: Replace OOP_SINCE_SAVE_MARKS with templates
    + S8202642: Replace PAR_OOP_ITERATE with templates
    + S8202647: Add deduplicate_string function to CollectedHeap
    + S8202649: Move the Parallel GC specific task creation
    functions out of Threads
    + S8202650: Enforce group for attach listener file
    + S8202662: JFR tests fails: Could not find leak with class
    + S8202672: Build failed in metaspace.cpp with VS2017
    + S8202676: AArch64: Missing enter/leave around barrier leads
    to infinite loop
    + S8202684: Minimal VM build is broken after JDK-8199067,
    JDK-8202638
    + S8202686: Missing test case for 8200167 - final Object methods
    + S8202690: jdk/jshell/ToolBasicTest.java failed in
    testOpenFileOverHttp() and testOpenLocalFileUrl()
    + S8202709: Move oopDesc::is_archive_object to
    MetaspaceShared::is_archive_object
    + S8202711: Merge tiered compilation policies
    + S8202719: Use Collections.emptyEnumeration where possible
    + S8202722: Move marksweep_init into GC code
    + S8202744: Expired flag removal for JDK 11
    + S8202780: Remove EnqueueTask related code from
    ReferenceProcessor after JDK-8202017
    + S8202781: Fix typo in DiscoveredListIterator::complete_enqeue
    + S8202810: Remove class-for-name test
    + S8202816: Update JarSigning.keystore
- Removed patch:
  * aarch64-infinite-loop.patch
  - Integrated upstream
- Modified patch:
  * java11-improved-fonts.patch
  - Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1526299200">- s390x: avoid packaging files that are not present on this
  architecture</changelog>
  <changelog author="fstrba@suse.com" date="1526558400">- Update to upstream tag jdk-11+14
  * Fixes:
    + S8132287: obsolete the "InlineNotify" flag option
    + S8174995: SA: clhsdb 'where -a' throws Assertion Failure with
    illegal code 236 when CDS is used
    + S8176510: java/awt/font/GlyphVector/TestLayoutFlags.java
    fails with OpenJDK
    + S8183910: gc/arguments/TestAggressiveHeap.java fails
    intermittently
    + S8185505: AArch64: Port AOT to AArch64
    + S8189140: SystemDictionaryShared::initialize() should be
    renamed to be more meaningful
    + S8189271: Metaspace::_capacity_until_GC should be size_t
    + S8191533: jar --describe-module prints service provider class
    names in lower case
    + S8193935: Illegal countedLoops transformation
    + S8194998: broken error message for subclass of interface with
    private method
    + S8195613: [SA] HotSpotTypeDataBase.readVMLongConstants
    truncates values to int
    + S8196340: (coll) Examine overriding inherited methods in
    ArrayList and ArrayList.SubList
    + S8196360: java/awt/Dialog/SiblingChildOrder/
    /SiblingChildOrderTest.java fails
    + S8196616: java/awt/GraphicsDevice/DisplayModes/
    /CompareToXrandrTest.java fails
    + S8197948: Create test for SwingSet2 main window
    + S8198412: MonospacedGlyphWidthTest.java may fail on Solaris
    + S8198991: Move Java2D demo to the open repository
    + S8199252: [TESTBUG] Open source VM testbase system dictionary
    tests
    + S8199712: Flight Recorder
    + S8200377: String::strip, String::stripLeading,
    String::stripTrailing
    + S8201447: C1 does backedge profiling incorrectly
    + S8201491: G1 support for java.lang.ref.Reference precleaning
    + S8201532: Update idom to get correct dom depth calculation
    + S8201593: Print array length in
    ArrayIndexOutOfBoundsException.
    + S8201604: ARM64 - Build failure after JDK-8193260
    + S8202016: Use obj+offset in interpreter array access
    + S8202064: Jemmy JInternalFrameOperator: Add wait for close(),
    activate(), resize() and move() operations
    + S8202113: Reflection API is causing caller classes to leak
    + S8202289: Non-empty directory in module path is not handled
    properly at CDS/AppCDS dump time
    + S8202322: AIX: symbol visibility flags not support on xlc 12.1
    + S8202392: [TESTBUG] open source vm testbase heapdump tests
    + S8202395: AARCH64: wrong encoding for SIMD instructions zip,
    trn, uzp
    + S8202426: NPE thrown by Transformer when XMLStreamReader
    reports no xml attribute type
    + S8202476: ImageLib is broken in 32 bit Windows
    + S8202519: Crash during large AppCDS dump
    + S8202544: Hide unused exports in libzip
    + S8202553: Update FXLauncherTest as part of removing JavaFX
    from JDK
    + S8202557: OpenJDK fails to start in Windows 7 and 8.1 after
    upgrading compiler to VC 2017
    + S8202580: Dashed BasicStroke randomly painted incorrectly,
    may freeze application
    + S8202614: Add ability to validate links in JavadocTester
    + S8202679: Updates on windows failures in the problem list
    + S8202683: Minimal VM should build cleanly on 64-bit platforms
    + S8202708: Add a check of opening stream for not-existing UNC
    url
    + S8202714: Create a MacroAssembler::access_load/store_at
    wrapper for AArch64
    + S8202718: Jemmy JInternalFrameOperator: Dependency with
    orders of Minimize, Maximize and Close buttons
    + S8202738: vm_version Abstract_VM_Version::internal_vm_info_string()
    returns same string for different incremental builds
    + S8202745: Remove hyphens from "out-of-bounds".
    + S8202748: jtreg :hotspot_misc group shouldn't include
    vmTestbase tests
    + S8202756: move FilterUSRTest.java to openJDK
    + S8202763: failure_handler: list open files for macOS
    + S8202764: api/java_text/SimpleDateFormat/index.html#Format
    testcases started to fail with JDK11 b12
    + S8202767: java/awt/font/GlyphVector/TestLayoutFlags.java is
    missing null check
    + S8202773: Unhandled oop in JavaThread::collect_counters
    + S8202811: Problem List some tests that leave windows open on
    the desktop
    + S8202822: Add .git to .hgignore
    + S8202824: Cleanup discrepancies in ProblemList for java_awt
    jtreg tests
    + S8202829: Implement CollectedHeap::get_safepoint_workers()
    for G1
    + S8202843: langtools ant build fails
    + S8202878:
    com/apple/laf/ScreenMenu/ScreenMenuMemoryLeakTest.java fails
    + S8202889: Remove trailing LF from perf log
    + S8202914: Let custom makefile override jmod intput dir
    locations
    + S8202915: [JAXP] Performance enhancements and cleanups in
    com.sun.org.apache.xerces.internal.impl.dtd.XMLDTDValidator
    + S8202919: JDK-8202683 broke macosx build
    + S8202920: jvm.cfg generation incorrect
    + S8202974: Backout JDK-8202683
    + S8202976: Add C1 lea patching support for x86
    + S8202993: Add support for x86 testptr/testq with register and
    address
    + S8202994: Add support for undoing last TLAB allocation
    + S8202997: Split test/jdk/:tier1 to enable better parallel
    execution
    + S8203032: PrintMetaspaceDcmd fails: Non-Class: missing from
    stdout/stderr
    + S8203059: (so) Closing a socket channel registered with
    Selector and with SO_LINGER set to 0 does not reset connection
    + S8203176: javadoc handles non-ASCII characters incorrectly.
    + S8203220: Introduce ATTRIBUTE_ALIGNED macro
    + S8203223: Signed integer overflow in ImageStrings::hash_code
    (libjimage.so)
    + S8203250: runtime/LoadClass/test-classes/Hello.java has wrong
    legal notice
    + S8203251: Non-PCH build failed after JDK-8199712 (Flight
    Recorder)
    + S8203274: 32-bit build failures after JDK-8199712 (Flight
    Recorder)
    + S8203278: AArch64/PPC64 build failures after JDK-8199712
    (Flight Recorder)
    + S8203285: Minimal VM fails to build after JDK-8199712 (Flight
    Recorder)</changelog>
  <changelog author="fstrba@suse.com" date="1526990400">- Added patch:
  * fix-s390x-and-ppc64-builds.patch
    + upstream fix for broken s390x and ppc64/ppc64le builds</changelog>
  <changelog author="fstrba@suse.com" date="1527249600">- Update to upstream tag jdk-11+15
  * Fixes:
    + S8027760: JFC schema condition should not have defaults
    + S8134537: Much nearly duplicated code for sun.misc.Signal
    support
    + S8146293: Add support for RSASSA-PSS Signature algorithm
    + S8148354: Errors targeting functional interface intersection
    types
    + S8176808: Split up metaspace.cpp
    + S8185803: JdbExprTest.sh fails in JDK10-hs nightly due to
    "Name unknown: java.lang.Long.MAX_VALUE "
    + S8192992: Test8007294.java failed: attempted to spill a
    non-spillable item
    + S8193332: MetaspaceShared::check_shared_class_loader_type is
    not used during archive creation
    + S8195098: Low latency hashtable for read-mostly scenarios
    + S8195817: JFR.stop should require name of recording
    + S8195818: JFR.start should increase autogenerated name by one
    + S8195819: Remove recording=x from jcmd JFR.check output
    + S8196048: thrown type variables should be roots in the
    minimum inference graph
    + S8196201: Generate pages to list all classes and all packages
    in javadoc output
    + S8196619: [TESTBUG] restore current version check in
    runtime/appcds/MultiReleaseJars.java
    + S8196987: Resolve disabled warnings for libzip
    + S8198315: Incomplete classpath causes NPE in TransTypes
    + S8198337: -XX:StartFlightRecording=dumponexit=true,disk=false
    doesn't work
    + S8198548: Initialization race in
    com.sun.org.apache.xerces.internal.impl.xpath.regex.Token.getRange()
    on Token.categories
    + S8199064: Test applications/jcstress/other/Test.java#id1108
    fails on Sparc
    + S8199257: [TESTBUG] Open source VM testbase metaspace tests
    + S8199271: [TESTBUG] open source VM testbase stress tests
    + S8199370: [TESTBUG] Open source vm testbase GC tests
    + S8199379: [TESTBUG] Open source vm testbase JDB tests
    + S8199384: [TESTBUG] Open source VM testbase MLVM tests
    + S8199807: AppCDS performs overly restrictive path matching
    check.
    + S8200380: String::lines
    + S8200436: String::isBlank
    + S8201331: Better test cleanup for
    jdk/jfr/api/consumer/TestRecordingFile.java
    + S8201386: Miscellaneous changes imported from jsr166 CVS
    2018-05
    + S8201627: Kerberos sequence number issues
    + S8201867: Kerberos keytabs with holes in certain places are
    parsed incorrectly
    + S8202014: Possible to receive signal before signal semaphore
    created
    + S8202076: test/jdk/java/io/File/WinSpecialFiles.java on
    windows with VS2017
    + S8202305: [Graal] org.graalvm.compiler.core.test.GraphResetDebugTest
    fails with java.util.ServiceConfigurationError
    + S8202377: Modularize C2 GC barriers
    + S8202427: Enhance os::print_memory_info on Windows
    + S8202466: Test serviceability/tmtools/jstat/GcTest01.java
    fails: Number of concurrent GC events is 1, but CGCT is 0
    + S8202479: Add missing try_resolve_jobject_in_native calls
    + S8202669: Intermittent crash in
    ClassLoadingService::compute_class_size()
    + S8202685: Optimize ArrayList subList replaceAll
    + S8202710: AARCH64: sporadic jtreg test fail
    + S8202713: Create a MacroAssembler::access_load/store_at
    wrapper for S390 and PPC
    + S8202771: Migrate Unicode character tests to JDK Repo
    + S8202848: -XX:+ExecuteInternalVMTests asserts with
    "assert(cd.valid() == true) failed: failed on a valid
    DirectivesParser string"
    + S8202853: NotifyCount is not initialized
    + S8202863: Rename OopStorage inner collection classes
    + S8202978: Incorrect tmp register passed to
    MacroAssembler::load_mirror()
    + S8202989: Add missing decorators in calls to to
    arraycopy_prologue/epilogue
    + S8203196: C1 emits incorrect code due to integer overflow in
    _tableswitch keys
    + S8203215: IdealLoopTree::split_outer_loop leaves phi-nodes
    with only one input
    + S8203227: Introduce os::processor_id() for Linux and Solaris
    + S8203279: Faster rounding up to nearest power of two
    + S8203287: Zero fails to build after JDK-8199712 (Flight
    Recorder)
    + S8203288: PPC64 and s390 fail to build after JDK-8199712
    (Flight Recorder)
    + S8203292: Print complete set of flags in the hs_err file
    + S8203305: PPC64: Improve TM detection for enabling RTM on
    Linux / POWER9
    + S8203318: compiler/stable/TestStableShort.java is broken
    + S8203339: Add oopDesc::field_offset()
    + S8203341: Add a safepoint-aware Semaphore
    + S8203346: JFR: Inconsistent signature of
    jfr_add_string_constant
    + S8203352: Improve java implementation of
    Integer/Long.numberOfLeadingZeros
    + S8203355: MITSHM define guarding missing
    + S8203377: Cleanup the usage of os::file_name_strcmp() in
    SharedPathsMiscInfo::check().
    + S8203381: Replace InstanceKlass::allocate_instance_handle
    with JavaCalls::construct_new_instance
    + S8203391: Update com/sun/jdi/JdbMethodExitTest.sh to pass
    valid URL[]
    + S8203398: Test test/langtools/tools/javac/options/release/
    /ReleaseOptionCurrent.java writes into the source directory
    + S8203400: Fix issue with "8199852: Print more information
    about class loaders in LinkageErrors."
    + S8203410: Zero: Disable jfr feature by default
    + S8203431: TestFloatsOnStackDeopt.java throws
    java.lang.LinkageError: loader &lt;bootstrap&gt; attempted duplicate
    class definition for
    java.lang.invoke.BoundMethodHandle$Species_LLL
    + S8203436: javac should fail early when emitting illegal
    signature attributes
    + S8203437: 8199370 broke build on linux-ppc64le (w/ GCC 4.8.5.)
    + S8203454: Minimal, Zero builds fail after JDK-8202377
    (Modularize C2 barriers)
    + S8203457: Add back missing full buffer notification
    + S8203486: skip type inference for non functional interface
    components of intersection types
    + S8203487: Typo in ICUBinary.java: s/Magin/Magic/
    + S8203490: StringTable::dump lacks a load barrier
    + S8203500: Fix broken links to Specification in "specs"
    directory
    + S8203626: ProblemList
    compiler/runtime/TestFloatsOnStackDeopt.java
    + S8203635: JFR sampler thread does not record stack info
    + S8203694: Add a safepoint-aware Semaphore - part 2
- Removed patch:
  * fix-s390x-and-ppc64-builds.patch
    + integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1527768000">- Update to upstream tag jdk-11+16
  * Fixes:
    + S8133564: Runtime - 2nd followup to Validate JVM Command-Line
    Flag Arguments
    + S8184030: TestUseRTMLockingOptionOnUnsupportedVM - RTM
    locking optimization not supported is missing
    + S8188248: NullPointerException on generic methods
    + S8189766: whitebox failure with -Xcheck:jni
    + S8191844: Remove SECOM root (secomevrootca1)
    + S8193717: Import resolution performance regression in JDK 9
    + S8194298: Add support for per Socket configuration of TCP
    keepalive
    + S8194630: Uninitialized initiator_address in native GSS
    + S8196202: Javadoc should not generate frames by default
    + S8196913: javadoc does not (over)write stylesheet.css
    + S8198323: testing.md not updated for repository layout change
    + S8199255: [TESTBUG] Open source VM testbase default methods
    tests
    + S8199307: NPE in
    jdk.javadoc.internal.doclets.toolkit.util.Utils.getLineNumber
    + S8199383: [TESTBUG] Open source VM testbase JVMTI tests
    + S8200172: String.split non-positive term incorrect use
    + S8200266: [Graal] Update ProblemList-graal.txt files
    + S8201518: add test for randomized iteration order of
    unmodifiable Set and Map
    + S8202178: type.getKind() for var is None instead of Error
    + S8202290: AtomicAppend tests fail on macOS 10.13 ("High
    Sierra")
    + S8202813: Move vm_weak processing from SystemDictionary to
    WeakProcessor
    + S8202832: cycle detection depends on ordering of requires
    directives
    + S8202842: G1 footprint regressions in jdk11+10
    + S8202945: OopStorage should use GlobalCounter
    + S8202947: Fix minor issues with taglets
    + S8202949: C2: assert(false) failed: Bad graph detected in
    build_loop_late
    + S8202950: C2: assert(found_sfpt) failed: no node in loop
    that's not input to safepoint
    + S8203014: jcmd should output command list if no command is
    given
    + S8203028: Simplify reference processing in light of
    JDK-8175797
    + S8203041: AArch64: fix overflow in immediate cmp/cmn
    instruction
    + S8203183:
    vmTestbase/vm/mlvm/anonloader/stress/oome/heap/Test.java times
    out
    + S8203221: Makefile fixes after Flight Recorder
    + S8203225: Fix of redefining a method that removes 1 or more
    lambda expressions failed to commit test cases
    + S8203233: (tz) Upgrade time-zone data to tzdata2018e
    + S8203262: Incorrect cmpxchg usage in
    MetaspaceGC::inc_capacity_until_GC
    + S8203297: java/net/URL/OpenStream.java fails intermittently
    + S8203327: Small cleanups in java.lang.ref
    + S8203328: Rename EFS in java.util.zip internals to something
    meaningful
    + S8203354: assert in
    ClassLoader::update_module_path_entry_list() could have
    incorrect message
    + S8203366: Tag added wrongly in Docs.gmk
    + S8203368: ObjectInputStream filterCheck method throws
    NullPointerException
    + S8203369: Check for both EAGAIN and EWOULDBLOCK error codes
    + S8203370: [JVMCI] UseJVMCICompiler should imply EnableJVMCI
    + S8203455: jcmd: VM.metaspace: print loader name for anonymous
    CLDs
    + S8203488: Remove error generation from TransTypes
    + S8203497: Bump Jib format version to 1.2
    + S8203628: Optimize (masked) byte memory comparisons on x86
    + S8203686: Add JDK 11 major version to
    javax/net/ssl/compatibility/JdkRelease.java
    + S8203689: Add failure code to threaddb exception messages`
    + S8203699: java/lang/invoke/SpecialInterfaceCall fails with
    SIGILL on aarch64
    + S8203766: Add some instrumentation to
    jdk/java/nio/channels/Selector/RacyDeregister.java
    + S8203769: ProblemList
    test/jdk/java/util/Map/InPlaceOpsCollisions.java
    + S8203774: jdk/jfr/api/recorder/TestStartStopRecording.java
    failed due to compilation failed
    + S8203793: cacerts/VerifyCACerts.java fails with
    java.lang.Exception: At least one cacert test failed
    + S8203795: Change default compiler on Windows to VS2017
    + S8203815: add tests failed because of 8203809 to the
    ProblemList-graal
    + S8203816: add tests failed because of 8203174 to the
    ProblemList-graal
    + S8203817: Monitor::try_lock() should not call
    check_prelock_state()
    + S8203843: BasicParState::default_estimated_thread_count(false)
    can return 0 in gtest
    + S8203865: Metaspace cleanup: Remove unused MemRegion in
    VirtualSpaceNode
    + S8203881: Print erroneous size in NegativeArraySizeException
    + S8203885: ConcurrentLocksDump::dump_at_safepoint() should not
    allocate array in resource area
    + S8203886: Invoke LambdaMetafactory::altMetafactory exactly
    from the BootstrapMethodInvoker
    + S8203892: Target interface added as marker interface in calls
    to altMetafactory
    + S8203926: Problem list
    test/langtools/tools/javac/importscope/T8193717.java
    + S8203932: Windows devkit has wrong dlls in 32 bit tools dir
    + S8203938: Fix build failures from JDK-8133564</changelog>
  <changelog author="fstrba@suse.com" date="1528200000">- Change build requirement to Java 10 or 11, since Java 9 cannot
  build OpenJDK 11 any more.</changelog>
  <changelog author="fstrba@suse.com" date="1528200001">- Change the alternatives priority from 0 to 2105, since OpenJDK 11
  should now be in a shape to be able to be used.</changelog>
  <changelog author="fstrba@suse.com" date="1528372800">- Update tu upstream tag jdk-11+17
  * Fixes:
    + S5109146: PNGMetadata Background color initialization from
    standard metadata is incomplete
    + S8050818: Predicate::not - provide an easier way to negate a
    predicate
    + S8072996: Deprecate stream-based GSSContext methods
    + S8150156: Update bugs.sun.com references to bugs.java.com
    + S8153029: ChaCha20 Cipher Implementation
    + S8154736: enhancement of cmpxchg and copy_to_survivor for
    ppc64
    + S8177276: MethodHandles.insertArguments doesn't specify
    IllegalArgumentException on index mismatch
    + S8187289: NotifyFramePop request is not cleared if
    JVMTI_EVENT_FRAME_POP is disabled
    + S8189335: javac exception when referencing private inner
    class with same name as normal class with dollar_1
    + S8189949: Remove Baltimore Cybertrust Code Signing CA
    + S8190417: javadoc updates to java.util.regex.Matcher
    + S8190875: modules not listed in overview/index page
    + S8191031: Remove several Symantec Root CAs
    + S8191522: Remove Bigelow&amp;Holmes Lucida fonts from JDK sources
    + S8193552: ISO 4217 amendment 165
    + S8194327: [macos] AWT windows have incorrect main/key window
    behaviors
    + S8195624: Desktop API cannot be used without permission to
    read "os.version"
    + S8196373: Introspector does not see overridden generic setter
    method
    + S8197387: jcmd started by "root" must be allowed to access
    all VM processes
    + S8197989: java/util/zip/ZipFile/TestCleaner.java failed with
    "cleaner failed to clean zipfile
    + S8198285: More consistent Access API for arraycopy
    + S8198378: javac crash when checking imports and a broken
    class is present
    + S8199150: Accessibility issues in java.desktop
    + S8199268:
    docs/api/jdk.javadoc/com/sun/javadoc/package-summary.html
    contain low contrast text
    + S8199371: [TESTBUG] Open source vm testbase JDWP tests
    + S8199380: [TESTBUG] Open source VM testbase AOD tests
    + S8199388: Test development for ChaCha20 and Poly1305
    algorithms
    + S8199530: Upgrade to harfbuzz 1.7.6
    + S8199723: Test java/awt/TextComponent/
    /DeselectionDuringDoSelectionNonVisibleTest/
    /DeselectionDuringDoSelectionNonVisibleTest.java fails
    + S8199882: compiler/uncommontrap/TestDeoptOOM.java failed w/
    fatal error: ExceptionMark constructor expects no pending
    exceptions
    + S8199893: the javadoc tool generates pages with a low
    constrast
    + S8200052: libjavajpeg: Fix compile warning in jchuff.c
    + S8200166: Repeating annotations refering to to-be-generated
    classes don't work.
    + S8200288: [SPARC] "assert(!(is_cti(prev) &amp;&amp; is_cti(insn)))
    failed: CTI-CTI not allowed"
    + S8200530: '\r' is not supported as "newline" in
    java.util.jar.Manifest
    + S8200623: Primitive heap access for interpreter
    BarrierSetAssembler/x86
    + S8201279: javax.sound tests should not set java.home system
    property
    + S8201364: [macosx] Component.getLocation() gives inconsistent
    coordinate for a component at (0,0)
    + S8201429: Support AIX Input Method Editor (IME) for AWT Input
    Method Framework (IMF)
    + S8202026: ISO 4217 amendment 166
    + S8202051: Address compilation warnings in libawt with VS2017
    + S8202094: jdk/jfr/api/recording/event/TestEventTime.java
    intermittently times out
    + S8202095: JFR TestBiasedLockRevocationEvents should cope with
    multiple events during a single safepoint
    + S8202360: [TESTBUG] runtime/LoadClass/TestResize.java needs
    to print output when it fails
    + S8202547: Move G1 runtime calls used by generated code to
    G1BarrierSetRuntime
    + S8202627: javadoc generates broken links to deprecated items
    when -nodeprecated is used
    + S8202670: Update Graal
    + S8202758: SIGSEGV calling
    Class.forName(String,Boolean,ClassLoader) with mocked loader
    + S8202776: Modularize GC allocations in runtime
    + S8202812: [TESTBUG] Open source VM testbase compiler tests
    + S8202913: loader constraint message for fields specifies
    incorrect referring class
    + S8203027: Open source tests for "java.awt.geom"
    + S8203031: segfaults from jvmti_AddToBootstrapClassLoaderSearch
    + S8203182: Release session if initialization of SunPKCS11
    Signature fails
    + S8203219: VM.metaspace jcmd should optionally show loaded
    classes for loaders
    + S8203237: JFR TestBiasedLockRevocationEvents should ignore
    events unrelated to the test
    + S8203319: JDK-8201487 disabled too much queue balancing
    + S8203321: assert(current_query_index &lt;
    process_query_set-&gt;size) failed: invariant
    + S8203324: Use out of scope in getMacOSXLocale of
    java_props_macosx.c:120
    + S8203380: Missing platform and bug information for
    MouseModifiersInKeyEvent test
    + S8203435: Circular nested dynamic constant test needed to
    confirm JVMS resolution behavior
    + S8203445: [TESTBUG] Remove
    appcds/jigsaw/limitmods/LimitModsTests.java
    + S8203474: Update description of "Cyrillic Supplementary"
    block name in Character.UnicodeBlock class.
    + S8203485: [freetype] text rotated on 180 degrees is too narrow
    + S8203498: The specification for java.applet package should be
    updated
    + S8203669: PPC64: Fix jtreg RTM tests after "8203305: Improve
    TM detection for enabling RTM on Linux / POWER9"
    + S8203765: java/nio/channels/Selector/SelectAndClose: add some
    prints and @intermittent tag
    + S8203780: javadoc should be updated to use jquery 1.12.4,
    jquery-ui 1.12.1 and jszip v3.1.5
    + S8203787: Hotspot build broken on linux-sparc after 8202377
    + S8203802: Jvmti test fails to build with VS2017
    + S8203827: Upgrade JLine to 2.14.6
    + S8203837: Split nmethod unloading from inline cache cleaning
    + S8203872: Upgrading JDK with latest available LSR data from
    IANA.
    + S8203891: Upgrade JOpt Simple to 5.0.4
    + S8203919: Remove "-add-modules" hint from error message
    + S8203921: JFR thread sampling is missing fixes from
    JDK-8194552
    + S8203923: Add @requires feature to check flag values for the
    running JVM
    + S8203924: Zero: bootcycle-images build fails on x86_64
    + S8203937: Not possible to read data from socket after write
    detects connection reset
    + S8203939: JVMFlag::printError missing ATTRIBUTE_PRINTF
    + S8203945: Cleanup nashorn build
    + S8203946: Move UnpackSecurity.gmk to closed
    + S8203948: Expand JVMTI callback notion of "internal threads"
    + S8203960: [TESTBUG] runtime/logging/DefaultMethodsTest.java
    failed when running in CDS mode
    + S8204055: SIGSEGV in java -XX:
    + S8204085: avoid printing uninitialized pointer in
    java.desktop/windows/native/libawt/java2d/windows/
    /GDIWindowSurfaceData.cpp
    + S8204087: C++ Interpreter code left over in MethodData
    + S8204091: Configure broken on MIPS when uname returns mipsel
    or mips64el
    + S8204094: assert(worker_i &lt; _length) failed: Worker 15 is
    greater than max: 11 at ReferenceProcessorPhaseTimes
    + S8204095: [TESTBUG] TestPrintReferences.java fails if
    multiple concurrent mark happens
    + S8204103: Mark test
    serviceability/dcmd/compiler/CompilerQueueTest.java as
    intermittent and exclude it from tier1
    + S8204109: JDK-8203945 broke nashorn
    + S8204122: Update harfbuzz.md
    + S8204134: jtreg: Fix RTM abort provoker for various tests
    after "8149159: Clean up Unsafe"
    + S8204136: jtreg: Fix failing RTM test RTMSpinLoopCount
    + S8204160: BiasedLockingTest needs -XX:+UseBiasedLocking
    + S8204162: TestG1HeapRegion needs @requires vm.gc.G1
    + S8204163: Also detect concurrent GCs in MetaspaceBaseGC.java
    + S8204164: OOM-only logging in Metaspace
    + S8204165: Filter out tests requiring class unloading when
    ClassUnloading is disabled
    + S8204167: Filter out tests requiring compressed oops when
    CompressedOops is disabled
    + S8204168: Increase small heap sizes in tests to accommodate
    ZGC
    + S8204173: Lower the minimum number of heap memory pools in
    MemoryTest.java
    + S8204179: [BACKOUT] OopStorage should use GlobalCounter
    + S8204194: Lazily create
    MethodHandleImpl$AsVarargsCollector.asCollectorCache
    + S8204195: Clean up macroAssembler.inline.hpp and other
    inline.hpp files included in .hpp files
    + S8204199: Test fails after 8202670 Graal update
    + S8204237: Clean up incorrectly included .inline.hpp files
    from jvmciJavaClasses.hpp
    + S8204250: Problem list pkcs11 tests on windows
    + S8204269: ISO 4217 amendment 167
    + S8204277: [testbug] fix DisassembleCodeBlobTest.
    + S8204292: PPC64: Fix missing includes after 8204195
    + S8204295: [BACKOUT] - JVMFlag::printError missing
    ATTRIBUTE_PRINTF
    + S8204301: Make OrderAccess functions available to hpp rather
    than inline.hpp files
    + S8204321: javadoc tests fail after JDK-8203780
    + S8204322: "+=" applied to String operands can provoke side
    effects
    + S8204341: AArch64: AOT runtime does not need a workaround for
    far calls
    + S8204345: [s390]: no precompiled headers build broken
    + S8204348: AArch64: Remove C2 address reshaping code</changelog>
  <changelog author="fstrba@suse.com" date="1528977600">- Update to upstream tag jdk-11+18
  * Fixes:
    + S6350055: (se) SelectionKey.interestOps variants to
    atomically update interest ops
    + S8174734: Safepoint sync time did not increase
    + S8178374: Problematic ByteBuffer handling in
    CipherSpi.bufferCrypt method
    + S8190326: Robot.mouseMove uses scaling factor of main display
    on unscaled second display
    + S8194073: Invalid SunNativeProvider.INSTANCE initialization
    + S8195097: Make it possible to process StringTable outside
    safepoint
    + S8196030: AWT Robot mouseMove fails on Windows 10 1709 with
    HiDPI
    + S8196141: Add GoDaddy root certificates
    + S8196990: Resolve disabled warnings for libjli
    + S8196993: Resolve disabled warnings for libunpack
    + S8197930: JNI exception pending in initializeEncoding of
    jni_util.c
    + S8200132: Remove jre images and bundles
    + S8200387: [Graal] fromTonga/nsk/jdi tests hang with Graal as
    JIT
    + S8201193: Use XMM/YMM for objects initialization
    + S8201274: Launch Single-File Source-Code Programs
    + S8201407: Files.move throws DirectoryNonEmptyException when
    moving directory across file system
    + S8201528: Add new test to check for package versioning
    information in OpenJDK
    + S8201608: fix broken links in javax/sql/rowset/package.html
    and javax/sql/rowset/spi/package.html
    + S8202049: G1: ReferenceProcessor doesn't handle mark stack
    overflow
    + S8202088: Japanese new era implementation
    + S8202611: [GRAAL] Exclude CMS GC testing from runs with Graal
    + S8202705: ARM32 build crashes on long JavaThread offsets
    + S8202747: C2: assert(mode == ControlAroundStripMined &amp;&amp; use
    == sfpt) failed: missed a node
    + S8202772: NMT thread stack tracking causes crashes on AIX
    + S8202864: [TESTBUG] Need to replace the image used in two
    Swing tests
    + S8203033: [Testbug] vmTestbase/nsk/jdi/TypeComponent/
    /isSynthetic/issynthetic002/TestDescription.java fails with
    nestmates
    + S8203172: Primitive heap access for interpreter
    BarrierSetAssembler/aarch64
    + S8203224: java.awt.desktop.*Event classes could not be
    instantiated if Desktop feature is not supported
    + S8203308: Remove the appletviewer classes
    + S8203329: JDWP/JDI VM information string is incorrect
    + S8203353: Fixup inferred decorators in the interpreter
    + S8203367: Upgrade to freetype 2.9.1
    + S8203425: assert(is_Loop()) failed: invalid node class
    + S8203480: IncompatibleClassChangeError thrown at sites linked
    to default interface methods
    + S8203499: Uninitialised memory in WinAccessBridge.cpp
    + S8203679: AssertionError in DeferredAttr with parenthesized
    method reference
    + S8203682: Add jcmd "VM.classloaders" command to print out
    class loader hierarchy, details
    + S8203796: Define API to support specifying ownership of print
    dialogs
    + S8203822: AIX version of jsig.c was not removed in JDK-8200298
    + S8203839: API clarification: versioned jar entry verification
    in multi-release jar file
    + S8204081: Mismatch in rebuild policy and collection set
    chooser causes remembered sets to be kept errorneously
    + S8204084: Remove the G1RSBarrierRegionFilter develop flag
    + S8204097: Simplify OopStorage::AllocateList block entry access
    + S8204110: serviceability/sa/ClhsdbSymbol.java and
    ClhsdbInspect.java failed when running in CDS mode
    + S8204113: Upgrade linker used in AOT tests to be same version
    as build toolchain
    + S8204118: [macos] Nonsensical self == [super init] in
    CFileDialog.m
    + S8204126: MonospacedGlyphWidthTest.java failed again
    + S8204127: Change bundle format on Windows to zip
    + S8204180: Implementation: JEP 318: Epsilon, A No-Op Garbage
    Collector
    + S8204187: Remove proprietary JPEG code from javax.imageio
    + S8204210: Implementation: JEP 333: ZGC: A Scalable
    Low-Latency Garbage Collector (Experimental)
    + S8204211: windows : handle potential C++ exception in
    GDIRenderer
    + S8204229: Formatter and String.format ignore the width with
    the percent modifier (%5%)
    + S8204243: remove Thread.destroy() and Thread.stop(Throwable)
    + S8204287: Phase timings not updated correctly after
    JDK-6672778
    + S8204288: Matching the end of a string followed by an empty
    greedy regex and a word boundary fails
    + S8204290: Add check to limit number of capture groups
    + S8204303: Add redirect for overview-summary.html
    + S8204335: [ppc] Assembler::add_const_optimized incorrect for
    some inputs
    + S8204375: Add TimeUnit#convert(Duration)
    + S8204377: Rename Object#wait parameter name from "timeout" to
    "timeoutMillis"
    + S8204444: java.time cleanup
    + S8204474: Have instanceRefKlass use HeapAccess when loading
    the referent
    + S8204476: Add additional statistics to
    CodeCache::print_summary
    + S8204477: Count linkage errors and print in
    Exceptions::print_exception_counts_on_error
    + S8204479: Bitwise AND on byte value sometimes produces wrong
    result
    + S8204494: Fix for 8200530 triggered regression,
    closed/test/jdk/security/infra/java/security/KeyStore/
    /BouncyCastleInterop.java failed
    + S8204496: backout fix for 8203796 which was pushed under
    another ID
    + S8204504: Fix for 8198285 breaks slowdebug builds
    + S8204539: improve error messages in matchJavaTZ [windows]
    + S8204549: [aix][testbug] signal tests fail because vm can not
    start in primordial thread.
    + S8204554: JFR TLAB tracing broken after 8202776
    + S8204557: NMT: Linux os::committed_in_range() does not break
    out outer loop when contiguous region is found
    + S8204561: JVM_GetClassSigners: wrap signers oop in an
    objArrayHandle for subsequent safepoint
    + S8204563: UseAppCDS obsolete message confusing
    + S8204565: (spec) Document java.{vm.}?specification.version
    system properties' relation to $FEATURE
    + S8204572: SetupJdkLibrary should setup SRC and -I flags
    automatically
    + S8204576: (fs) java/nio/file/Files/CopyAndMove.java does not
    set isUnix = true on macOS
    + S8204577: jittester generator doesn't kill processes on
    timeout
    + S8204584: jdeps generates illegal dot file containing
    ranksep=0,600000
    + S8204585: Remove IN_ARCHIVE_ROOT from Access API
    + S8204588: Test failures after "Launch Single-File Source-Code
    Programs"
    + S8204589: ProblemList failing launcher tests
    + S8204598: add more thread-related system settings info to
    hs_error file on Linux
    + S8204602: Add devkit for linux-arm32
    + S8204606: [Aarch64] SIGSEGVs caused by C1 because of improper
    register usage
    + S8204610: Compiler confused by parenthesized "this" in final
    fields assignments
    + S8204617: ParallelGC parallel reference processing does not
    set MT degree in reference processor
    + S8204618: The parallel GC reference processing task executor
    enqueues a wrong number of tasks into the queue
    + S8204628: [AArch64] Assertion failure in
    BarrierSetAssembler::load_at
    + S8204648: test/jdk/tools/launchers/SourceMode.java fails with
    long shebang line
    + S8204652: [aix] fix thread stack allocation, too big stack
    sizes not recognized
    + S8204674: Inconsistent lambda parameter span
    + S8204680: Disassembly does not display code strings in stubs
    + S8204682: Parsing for LOG=report=none is broken when combined
    with other keywords
    + S8204684: [AIX] Build of libjli_static broken after change
    8204572 (SetupJdkLibrary)
    + S8204694: Add failed compiler/stable tests into
    ProblemList-graal.txt
    + S8204850: BarrierSet::make_* should be static
    + S8204861: fix for 8196993 has broken the build on linux
- Modified patch:
  * system-pcsclite.patch
    + rediff to changed context
- Added patch:
  * generated-headers.patch
    + fix a regression after JDK-8204572</changelog>
  <changelog author="fstrba@suse.com" date="1529582400">- Update to upstream tag jdk-11+19
  * Fixes:
    + S6545967: sp05t003 failed ResumeThread() due to
    THREAD_NOT_SUSPENDED
    + S6608234: SwingWorker.get throws CancellationException
    + S7183985: (ann) Class.getAnnotation() throws an
    ArrayStoreException when the annotation class not present
    + S8029250: [macosx] There is no tray icon shown in the system
    tray area when case starts
    + S8042131: DateTimeFormatterBuilder Mapped-values do not work
    for JapaneseDate
    + S8043575: Dynamically parallelize reference processing work
    + S8149565: -locale option issues
    + S8153107: enabling ObjectSynchronizer::quick_enter() on ARM64
    causes hangs
    + S8170159: Improve the performance of BitSet traversal
    + S8177334: Update xmldsig implementation to Apache Santuario
    2.1.1
    + S8178150: Regression in logic for handling inference stuck
    constraints
    + S8184349: There should be some verification that EnableJVMCI
    is disabled if a GC not supporting JVMCI is selected
    + S8191512: T2K font rasterizer code removal
    + S8193302: Javac AssertionError: typeSig ERROR on usage of
    @Generated
    + S8194308: jdeprscan will need updates to deal with the
    removal of the Java EE modules
    + S8195115: G1 Old Gen MemoryPool CollectionUsage.used values
    don't reflect mixed GC results
    + S8195293: Issue more comprehensive warnings for use of
    \"var\" in earlier source versions
    + S8196618: Create API to list supported values for javac
  - -release option
    + S8196988: Resolve disabled warnings for libjimage
    + S8198669: Refactor annotation array value parsing to reduce
    duplication
    + S8198719: MethodHandleHelper.linkToStatic should drop MH arg
    + S8199433: (se) select(Consumer&lt;SelectionKey&gt; action) as
    alternative to selected-key set
    + S8199435: Unsafe publication of java.util.Properties.map
    + S8199441: Wrong caret position in multiline text components
    on Windows with a screen resolution higher than 100%
    + S8199871: Deprecate pack200 and unpack200 tools
    + S8200115: System property java.vm.vendor value includes
    quotation marks
    + S8200121: Remove unused qualified exports in java.base
    + S8200353: Shift or Capslock not working in Textfield after
    accented keystrokes
    + S8200605: Create test for GridBagLayoutDemo
    + S8200867: Remove references to "jdk 9" in build system
    + S8201276: (fs) Add methods to Files for reading/writing a
    string from/to a file
    + S8202199: Provide public, unsupported JDK API for
    JavaFX/Swing interop
    + S8202216: Add Buffer mismatch methods
    + S8202537: CLDR33
    + S8202559: Tests which start VM using JNI start failing after
    compile upgrade to VC 2017
    + S8202605: Standardize on ClassLoaderData::loader_name()
    throughout the VM to obtain a class loader's name
    + S8202624: javadoc generates references to enum constructors,
    which are not documented
    + S8202740: runtime/8176717/TestInheritFD.java fails with
    java.lang.RuntimeException: could not match:
    VM RESULT =&gt; RETAINS FD
    + S8202768: [macos] Appkit thread slows when any Window Manager
    active
    + S8202845: Refactor reference processing for improved
    parallelism
    + S8202948: C2: assert(init_offset &gt;= 0) failed: positive
    offset from object start
    + S8203030: Zero s390 31 bit size_t type conflicts in shared
    code
    + S8203157: Object equals abstraction for BarrierSetAssembler
    + S8203197: C2: consider all paths in loop body for loop
    predication
    + S8203301: Linux-sparc fails to build after JDK-8199712
    (Flight Recorder)
    + S8203338: Unboxing in return from lambda miscompiled to throw
    ClassCastException
    + S8203343: VM.{metaspace|classloaders|classhierarchy...} jcmd
    should show invocation targets for
    Generated{Method|Constructor}AccessorImpl classes
    + S8203344: Make C1 leal patchable on SPARC
    + S8203357: Container Metrics
    + S8203394: Implementation of JEP 331: Low-Overhead Heap
    Profiling
    + S8203479: JFR enabled ARM32 build assertion failure
    + S8203491: [TESTBUG] Port heapdump tests into java
    + S8203641: Refactor String Deduplication into shared
    + S8203667: Platform specific include files in jdk image in
    wrong sub directory
    + S8203680: os::stat() on Posix platform does not need to copy
    input path
    + S8203691: Test /runtime/containers/cgroup/PlainRead.java fails
    + S8203809: [Graal] JDI tests fail with:
    JDITestRuntimeException : ** event IS NOT a breakpoint **
    + S8203813: javac accepts an illegal name as a receiver
    parameter name
    + S8203838: javac performance regression in 11+11
    + S8203915: Induction variable of over-unrolled loop conflicts
    with range checks
    + S8204152: SignedObject throws NullPointerException for null
    keys with an initialized Signature object
    + S8204166: TLH: Semaphore may not be destroy until signal have
    returned.
    + S8204169: Humongous continues region remembered set states do
    not match the one from the corresponding humongous start
    region
    + S8204172: Predicate::not should explicitly mention
    "NullPointerException - if target is null"
    + S8204231: Update Graal
    + S8204236: JFR unit test of thread CPU load should be enabled
    + S8204240: Extend MDO to allow more reasons to be recorded per
    bci
    + S8204268: Improve some IncompatibleClassChangeError messages.
    + S8204330: Javadoc IllegalArgumentException: HTML special
    chars in constant value
    + S8204342: methods in java.time s TCKZoneRules OpenJDK test
    miss Test annotation
    + S8204353: AARCH64: optimize FPU load and stores in
    macroAssembler
    + S8204454: Remove of sun.applet.AppletAudioClip
    + S8204473: AARCH64: register post-index addressing mode is not
    supported directly
    + S8204509: Fix compilation error in harfbuzz 1.7.6 for Solaris
    Developer Studio 12.6
    + S8204531: Remove unused chars following '\0'
    + S8204538: Split ScanClosure and ScanClosureWithParBarrier
    + S8204571: Add support for launching multiple startup
    recordings
    + S8204613: StringTable: Calculates wrong number of uncleaned
    items.
    + S8204620: ModuleEntry::is_non_jdk_module() determination for
    what is a jdk module is incorrect
    + S8204654: [testbug] Fix pattern matching in jstat tests.
    + S8204663: clean up remaining native parts after JDK-8187631
    + S8204664: PrepareFailureLogs should be done after sequential
    make targets
    + S8204666: javadoc should be updated to use jQuery 3.3.1
    + S8204668: Cleanup management of the java.vm.info System
    property
    + S8204679: HTTP Client refresh
    + S8204685: Abstraction for TLAB dummy object
    + S8204701: [TESTBUG] runtime/SharedArchiveFile/
    /BootAppendTests.java should handle mapping failure
    + S8204857: ConcurrentHashTable: Fix parallel processing
    + S8204859: [macosx] Remove javax/swing/plaf/nimbus/8057791/
    /bug8057791.java from the ProblemList.txt
    + S8204915: (fs) Add some print diagnostics to
    java/nio/file/Files/CopyAndMove.java
    + S8204922: Create bootcycle jib profiles
    + S8204923: Restore Symantec root verisignclass2g2ca
    + S8204927: ZGC: assert(phase-&gt;idom(head) ==
    head-&gt;in(LoopNode::EntryControl)) failed
    + S8204929: Fonts with embedded bitmaps are not always rotated
    + S8204935: [aix] TOC overflow in libjvm.so (release build)
    + S8204939: Change Access nomenclature: root to native
    + S8204941: Refactor TemplateTable::_new to use MacroAssembler
    helpers for tlab and eden
    + S8204943: Improve message of ArrayStoreException.
    + S8204944: Remove java/util/Map/InPlaceOpsCollisions.java from
    ProblemList
    + S8204957: Remove TestBiasedLockRevocationEvents from
    ProblemList.txt
    + S8204958: Minor cleanups for the diagnostic framework
    + S8204961: JVMTI jtreg tests build warnings on 32-bit platforms
    + S8204965: Fix '--disable-cds' and disable CDS on AIX by
    default
    + S8204973: Add build support for filtering translations
    + S8204978: [Graal] Disable Epsilon GC tests from running with
    Graal
    + S8205003: Replace selected link tags with linkplain in
    java.lang.Class
    + S8205006: Assertion failure when rehashing stringtable
    + S8205020: ZGC: Apply workaround for buggy sem_post() in glibc
    &lt; 2.21
    + S8205022: ZGC: SoftReferences not always cleared before
    throwing OOME
    + S8205024: ZGC: Worker threads boost mode not always enabled
    when is should be
    + S8205025: [AOT] make jdk.aot module upgradeable
    + S8205028: ZGC: Remove incorrect comment in
    ZHeap::object_iterate()
    + S8205033: [REDO] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205034: [BACKOUT] Induction variable of over-unrolled loop
    conflicts with range checks
    + S8205043: Make parallel reference processing default for G1
    + S8205050: ZGC: Incorrect use of RootAccess in ZHeapIterator
    + S8205052: No compilation error thrown when no valid
    parameterization exists for functional interface type
    + S8205054: Could not find "lsof" on test machine
    + S8205055: Fix compilation optimization errors with new
    Solaris toolchain
    + S8205062: (fs) Improve some print diagnostics in
    java/nio/file/Files/CopyAndMove.java
    + S8205064: Fail immediately if an unavailable GC is selected
    + S8205074: [Graal] Add rest of compiler/stable tests into
    ProblemList-graal.txt
    + S8205091: AIX: build errors in hotspot after 8203641:
    Refactor String Deduplication into shared
    + S8205096: Add missing files for 8203394
    + S8205108: [testbug] Fix pattern matching in jstatd tests.
    + S8205110: Fix xchip warnings with new Solaris toolchain
    + S8205112: Remove non-existent modules from
    test/jdk/jdk/modules/etc/UpgradeableModules.java
    + S8205116: jdeps --system $java.home fails with IAE
    + S8205141: runtime/exceptionMsgs/ArrayStoreException/
    /ArrayStoreExceptionTest.java failed with
    "assert(k-&gt;is_objArray_klass()) failed: cast to ObjArrayKlass
    + S8205148: Turn off logging in jQuery-migrate
    + S8205149: hs201t002 should be put on the problem list
    + S8205163: ZGC: Keeps finalizable marked PhantomReference
    referents strongly alive
    + S8205172: 32 bit build broken
    + S8205181: ProblemList
    applications/ctw/modules/java_desktop_2.java
    + S8205183: Warning about using VS2017 should be removed
    + S8205338: ZGC: LeakProfiler not yet supported
    + S8205339: ZGC: VerifyBeforeIteration not yet supported
    + S8205341: AARCH64: Clean up duplicate uzp1 &amp; uzp2 instruction
    definition
    + S8205344: TraceMemoryManagerStats changes in JDK-8195115
    broke ZGC
    + S8205407: [windows, vs&lt;2017] C4800 after 8203197
- Modified patches:
  * generated-headers.patch
    + Better version resulting from discussion with upstream
  * java11-improved-fonts.patch
    + Rediff to changed context</changelog>
  <changelog author="fstrba@suse.com" date="1529668800">- Added patch:
  * missing-return.patch
    + fix no-return-in-nonvoid-function</changelog>
  <changelog author="fstrba@suse.com" date="1530532800">- Update to upstream tag jdk-11+20 (rampdown phase 1)
  * Fixes:
    + S4475138: getBestCursorSize and XFree86 4.1.0
    + S7007966: Add Brainpool ECC support (RFC 5639)
    + S8003209: JFR events for network utilization
    + S8010319: Implementation of JEP 181: Nest-Based Access Control
    + S8060192: Add default method &lt;A&gt; A[]
    Collection.toArray(IntFunction&lt;A[]&gt; generator)
    + S8066709: Make some JDK system properties read only
    + S8137164: Include PID in the JFR jcmd hint
    + S8144992: Remove OopIterateClosure::idempotent
    + S8149729: [jittester] Replace all 'path1 +"/" + path2' with
    Paths::get
    + S8153732: Windows remote printer changes do not reflect in
    lookupPrintServices()
    + S8155192: [TESTBUG] SHA tests assumes that x86 does not have
    SHA intrinsics
    + S8160673: Jittester: investigate bytecode generation hangs
    during bytecode tests generation
    + S8169559: Add class loader names to relevant VM messages
    + S8172854: [TESTBUG] Exclude
    runtime/ReservedStack/ReservedStackTest.java from being run
    with DeoptimizeALot option
    + S8185927: create regression test for 8062950
    + S8187100: Support Unicode Variation Selectors
    + S8187218: GSSCredential.getRemainingLifetime() returns
    negative value for TTL &gt; 24 days.
    + S8187288: bad (no) wrapping for modifier and type column
    + S8189103: AARCH64: optimize String indexOf intrinsic
    + S8189105: AARCH64: create intrinsic for sin and cos
    + S8189112: AARCH64: optimize StringUTF16 compress intrinsic
    + S8189113: AARCH64: StringLatin1 inflate intrinsic doesn't use
    prefetch instruction
    + S8189429: SA: MacOSX: Replace the deprecated PT_ATTACH with
    PT_ATTACHEXC
    + S8190876: javadoc search on "java.se" shows "java.se" the
    last one among other modules
    + S8192953: sun/management/jmxremote/bootstrap/*.sh tests fail
    with error : revokeall.exe: Permission denied
    + S8194152: sun/security/tools/jarsigner/AltProvider.java
    failed on de-DE locale
    + S8194873: right ALT key hotkeys no longer work in Swing
    components
    + S8194937: Inconsistent behavior of --validate-modules when
    combined with -m and other options
    + S8195077: [Testbug] tools/javac/processing/model/
    /completionfailure/NoAbortForBadClassFile.java -
    AccessDeniedException
    + S8195607: sun/security/pkcs11/Secmod/TestNssDbSqlite.java
    failed with "NSS initialization failed" on NSS 3.34.1
    + S8195630: [Graal] vmTestbase/nsk/jvmti/AttachOnDemand/
    /attach024/TestDescription.java fails with Graal
    + S8195650: Method references to VarHandle accessors
    + S8195986: Incorrect javac -h output with annotation
    processing and missing classes
    + S8196213: sun/security/tools/jarsigner/warnings/
    /NoTimestampTest.java test fails on ar_SA locale.
    + S8196402: AARCH64: create intrinsic for Math.log
    + S8196425: tools/javac/modules/AnnotationProcessing.java failed
    + S8196584: TLS 1.3 Implementation
    + S8197425: Liveset information for Old Object sample event
    + S8197532: Re-examine policy for the default set of modules
    when compiling or running code on the class path
    + S8198372: API to create a SelectableChannel to a
    FileDescriptor
    + S8198909: [Graal] compiler/codecache/stress/
    /UnexpectedDeoptimizationTest.java crashed with SIGSEGV
    + S8199124: (fs) Reduce allocation for file system methods that
    are invoked with no open options
    + S8199265: java/util/Arrays/TimSortStackSize2.java fails with
    OOM
    + S8199580: [TESTBUG] Un-quarantine vm/mlvm/indy/func/jdi/
    /breakpointOtherStratum and breakpoint
    + S8199940: Print more information about class loaders in
    IllegalAccessErrors.
    + S8200243: System error message is decoded as invalid encoding
    in Windows.
    + S8200720: Print additional information in thread dump (times,
    allocated bytes etc.)
    + S8201610: Broken link on the page
    api/java.rmi/java/rmi/server/UnicastRemoteObject.html
    + S8201815: Use Mozilla Public Suffix List
    + S8202292: java/io/FileOutputStream/UnreferencedFOSClosesFd.java
    fails with "raw fd count wrong"
    + S8202299: Java Keystore fails to load PKCS12/PFX certificates
    created in WindowsServer2016
    + S8202326: AARCH64: optimize string compare intrinsic
    + S8202331: Obsolete support for commercial features
    + S8202422: value of 'sizeCtl' in ConcurrentHashMap varies with
    the constructor called
    + S8202554: Remove hotspot tests for javafx.* modules
    + S8202608: CommonSeeder test needs a white-box testing
    mechanism to replace the default entropy source
    + S8202615: Remove NativeMonitorSpinLimit, NativeMonitorFlags
    and NativeMonitorTimeout experimental flags
    + S8202696: Remove exclusion range for phonetic chars in
    windows fontconfig.properties
    + S8202698: Update Graal for JEP 181 - Nest-based access control
    + S8202788: Explicitly reclaim cached thread-local direct
    buffers at thread exit
    + S8202922: Method reference identity is broken by serialization
    + S8203003: Several FileDialog Modality Tests fail on Linux due
    to X errors
    + S8203184: List.copyOf() fails to copy sublists
    + S8203188: Add JEP-181 support to the Zero interpreter
    + S8203228: Branch-free output conversion for X25519 and X448
    + S8203299: StringPoolBuffer access covered by exclusive access
    invariant, remove (problematic) cas operations
    + S8203481: Incorrect constraint for unextended_sp in
    frame:safe_for_sender
    + S8203664: JFR start failure after AppCDS archive created with
    JFR StartFlightRecording
    + S8203670: unmodifiable List iterator() implementations should
    not be ListIterators
    + S8203681: Miscellaneous changes imported from jsr166 CVS
    2018-06
    + S8203814: javac --release=8 "cannot find symbol" for
    NashornException.getEcmaError()
    + S8203864: Execution error in Java's Timsort
    + S8203929: Limit amount of data for JFR.dump
    + S8204082: Make names of Young GCs more uniform in logs
    + S8204157: Compiler.sunflow hangs after JDK-8192992
    + S8204209: [Graal] Compilation fails during nmethod printing
    with "assert(bci == 0 || 0 &lt;= bci &amp;&amp; bci &lt; code_size())
    failed: illegal bci"
    + S8204233: Add configurable option for enhanced socket
    IOException messages
    + S8204289: AARCH64: enable math intrinsics usage in
    interpreter and C1
    + S8204331: AArch64: fix CAS not embedded in normal graph error
    + S8204492: Add deprecation annotation to Nashorn APIs and
    warning to nashorn, jjs
    + S8204524: Unnecessary memory barriers in
    G1ParScanThreadState::copy_to_survivor_space
    + S8204540: Automatic oop closure devirtualization
    + S8204661: Show error 'Port already in use' in
    HashedPasswordFileTest.java
    + S8204930: Reader:nullReader() spec does not match the behavior
    + S8204946: Clean-up problem list for JDK-8202933 and
    JDK-8202934
    + S8204967: Resolve disabled warnings for libunpack
    + S8205004: AArch64: fix failures in jtreg ArraysEqCmpTest
    + S8205053: Decouple type registration from framework lifecycle
    + S8205058: (fs) Files read/writeString should throw
    CharacterCodingException instead of IOException with an
    IllegalArgumentException as cause
    + S8205107: assert(c-&gt;Opcode() == Op_SafePoint) failed: broken
    outer loop
    + S8205111: Develop new Test to verify different key types for
    supported TLS protocols.
    + S8205113: Update JVMTI doc references to object allocation
    tracking
    + S8205119: SwingApplet demo should be removed
    + S8205136: Move StylePad demo to the open repository
    + S8205144: JSpinner may change the font after became visible
    + S8205153: Delete "standard instructions" machinery in the
    open automated tests
    + S8205158: Update the .md files for 3rd party software Unicode
    10.0, ICU 60.2, and CLDR v33.
    + S8205160: jQuery UI, jQuery-migrate, and jQuery license file
    to be updated to the revision present.
    + S8205175: Deprecate UnlinkSymbolsALot debugging option.
    + S8205184: Delegating Iterator implementations that don't
    delegate forEachRemaining()
    + S8205194: Improve the Array Comparison when there is mismatch
    at first element.
    + S8205195: NestedThreadsListHandleInErrorHandlingTest fails
    because hs_err doesn't contain _nested_thread_list_max
    + S8205197: Never default to using libc++ on Linux
    + S8205199: more Linux clang compile failures
    + S8205207: Port Graal unit tests under jtreg
    + S8205324: Part of java.awt.Desktop.browse(URI) spec is
    outdated after support of applets was removed
    + S8205342: windows : potential memleaks in getAdapter(s) in
    NetworkInterface_winXP.c
    + S8205397: InetAddress has wrong declaration for
    readObjectNoData
    + S8205398: AES-CBC decryption algorithm using AVX512
    instructions
    + S8205400: [Graal]
    compiler/jvmci/compilerToVM/DisassembleCodeBlobTest.java fails with
    can't be enqueued for compilation on level 4
    + S8205405: ZGC: Decouple JFR type registration
    + S8205416: windows: fix checking of CloseHandle return code in
    Java_java_io_FileCleanable_cleanupClose0
    + S8205419: [testbug] TestJmapCore failing without SA:
    introduce @requires vm.hasSAandCanAttach
    + S8205422: assert(false) failed: Bad verification_type_info
    + S8205424: Change to Xcode 9.4 for building on Macosx at Oracle
    + S8205438: Re-enable shebang tests in
    test/jdk/tools/launchers/SourceMode.java
    + S8205441: Upgrade to harfbuzz 1.8.1
    + S8205442: Avoid hard-coding --source value in
    SourceLauncherTest.java
    + S8205445: Add RSASSA-PSS Signature support to SunMSCAPI
    + S8205455: jdeprscan issues annotation processor warning
    regarding RELEASE_10
    + S8205456: Unification of iterations over arrays
    + S8205459: Rename Access API flag decorators
    + S8205474: AARCH64: wrong zr encoding for ccmp instruction
    + S8205475: AARCH64: optimize FPU loads and stores in
    C1_Runtime1_aarch64.cpp
    + S8205490: update ProblemList-graal
    + S8205494: Convert or remove all AWT applet demos
    + S8205498: Typo in fix for 8205119 breaks Solaris demo build
    + S8205499: C1 temporary code buffers are not removed with
  - XX:+UseDynamicNumberOfCompilerThreads
    + S8205508: hotspot/jtreg/vmTestbase/nsk/jdb/exclude/exclude001/
    /exclude001.java fails with Prompt is not received during
    300200 milliseconds.
    + S8205509: assert(_name_and_id != 0LL) failed: encountered a
    class loader null name and id
    + S8205528: Base64 encoding algorithm using AVX512 instructions
    + S8205531: jcmd VM.classloaders should fold similar loaders
    + S8205533: Class.getPackage() fails with InternalError if
    class is defined to the bootstrap class loader but module is
    not in the boot layer
    + S8205540: test/hotspot/jtreg/vmTestbase/nsk/jdb/trace/
    /trace001/trace001.java fails with Debuggee did not exit
    after 15 &lt;cont&gt; commands
    + S8205547: FileChannel/CleanerTest.java fails due to expected
    FD count
    + S8205559: Remove IN_CONCURRENT_ROOT Access decorator
    + S8205570: fix a number of typos in the JVMTI spec
    + S8205577: parallel/TestPrintGCDetailsVerbose.java fails
    assertion
    + S8205583: Crash in ConcurrentHashTable
    do_bulk_delete_locked_for
    + S8205605: [testbug][aix] Various test adaption to aix
    pecularities.
    + S8205607: Use oop_iterate instead of oop_iterate_no_header
    + S8205609: [PPC64] Fix PPC64 part of 8010319 and TLH without
    UseSIGTRAP on AIX
    + S8205612: (fc) Files.readAllBytes fails with
    ClosedByInterruptException when interrupt status set
    + S8205614: NestMates tests failing in CI jdk11-jdk.931
    + S8205616: Build fails with system headers after 8204572
    + S8205623: Replace use of Class::getPackage with
    Class::getPackageName
    + S8205625: linux-aarch64-cmp-baseline fails builds-tier5
    + S8205627: Replace hardcoded spec version value in
    build.tools.ExtLink taglet
    + S8205632: Include stack.inline.hpp in markSweep.inline.hpp
    + S8205641: Make java/nio/channels/Selector/RacyDeregister.java
    noisier and flush after prints
    + S8205648: fix for 8205195 breaks secondary error handling
    + S8205649: Make clang stack flags independent of OS
    + S8205663: ZGC: Log metaspace used/capacity/committed/reserved
    + S8205664: Move detailed metaspace logging from debug to trace
    + S8205671: Remove HTTP Client tests erroneously problem listed
    by the TLS 1.3 integration
    + S8205673: Problem list RmiRegistrySslTest.java and
    RmiSslBootstrapTest.sh
    + S8205676: ZGC: Remove TLAB allocations in relocation path
    + S8205678: ZGC: Remove unused ZAllocationFlags::java_thread()
    + S8205679: Remove unused
    ThreadLocalAllocBuffer::undo_allocate()
    + S8205681: [TEST_BUG] vmTestbase/nsk/jvmti/Allocate/alloc001/
    /TestDescription.java fails with exit code 98
    + S8205683: Refactor heap allocation to separate concerns
    + S8205694: AArch64: Add test to validate volatile load, store
    and CAS code generation
    + S8205696: Undo licence.md
    + S8205699: assert(_owner_offset != 0) failed in javaClasses.cpp
    + S8205701: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorGCCMSTest.java
    + S8205702: assert(UseCompressedClassPointers) failed in
    universe.hpp
    + S8205703: [JVMCI] Expose all GC selection flags
    + S8205719: Windows
    Java_sun_tools_attach_VirtualMachineImpl_enqueue() method
    should include exitCode in exception message
    + S8205721: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatArrayCorrectnessTest.java
    + S8205723: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8205824: Update Graal
    + S8205906: jdk.jfr.jcmd.TestJcmdDumpLimited fails due to
    erronous processing of -XX:FlightRecorderOptions
    + S8205913: Inconsistent source code model
    + S8205916: [test] Fix jdk/tools/launcher/RunpathTest to handle
    both, RPATH and RUNPATH
    + S8205923: ZGC: Verification applies load barrier before
    verification
    + S8205923: ZGC: Verification applies load barriers before
    verification
    + S8205925: Print correct and more information about secondary
    errors
    + S8205926: Support invokeSpecialIFC in GenerateJLIClassesPlugin
    + S8205927: Update src/java.base/share/legal/public_suffix.md
    to match the actual file version
    + S8205940: LoadNode::find_previous_arraycopy fails with
    "broken allocation" assert
    + S8205942: Build failure on macosx after JDK-8189429
    + S8205945: Revert unintended changes to
    make/gensrc/Gensrc-jdk.hotspot.agent.gmk
    + S8205954: clean up hotspot ProblemList
    + S8205956: Fix usage of "OpenJDK" in build and test
    instructions
    + S8205959: Do not restart close if errno is EINTR
    + S8205985: Remove tools/javac/options/release/
    /ReleaseOptionUnsupported.java from problem list
    + S8205993: ZGC: Fix typos and incorrect indentations
    + S8205996: JDK-8205906 broke the build on Mac
    + S8206004: [BACKOUT] errant changeset for JDK-8137164
    + S8206006: Build failed on Windows
    + S8206088: 8205207 broke builds
- Removed patch:
  * generated-headers.patch
    + Integrated upstream
- Modified patch:
  * alternative-tzdb_dat.patch
    + Modify to upstream changes in the context</changelog>
  <changelog author="fstrba@suse.com" date="1530792000">- Update to upstream tag jdk-11+21
  * Fixes:
    + S8201552: Ellipsis in "Classical" label in SwingSet2 demo
    with Windows L&amp;F at Hidpi
    + S8203848: Missing remembered set entry in j.l.ref.references
    after JDK-8203028
    + S8204355: [Graal] org.graalvm.compiler.debug.test.CSVUtilTest
    fails on Windows due to improper line separator used
    + S8204517: [Graal]
    org.graalvm.compiler.debug.test.VersionsTest fails with
    InvalidPathException on windows
    + S8205515: assert(opcode == Op_RangeCheck) failed: no other if
    variant here
    + S8205563: modules/AnnotationProcessing.java failed
    testGenerateSingleModule
    + S8205720: KeyFactory#getKeySpec and translateKey throws
    NullPointerException with Invalid key
    + S8205965: SIGSEGV on write to NativeCallStack::EMPTY_STACK
    + S8205984: javax/net/ssl/compatibility/Compatibility.java
    failed to access port log file
    + S8206003: SafepointSynchronize with TLH: StoreStore barriers
    should be moved out of the loop
    + S8206093: compiler/graalunit/HotspotTest.java fails in
    CheckGraalIntrinsics
    + S8206117: failed to get JDK properties for JVM w/o JVMCI</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1531396800">- Switch armv6 to zero JVM variant (without JIT) since client and
  server JVM do not build for armv6 ATM</changelog>
  <changelog author="fstrba@suse.com" date="1531396801">- Update to upstream tag jdk-11+22
  * Fixes
    + S8185740: The help-doc.html generated by the doclet is
    outdated
    + S8187069: The case auto failed with the
    java.lang.ClassNotFoundException:
    IPv6NameserverPlatformParsingTest exception
    + S8189604: possible hang in
    sun.awt.shell.Win32ShellFolder2$KnownFolderDefinition::&lt;clinit&gt;
    + S8193126: Incorrect setting of MetaspaceSize and
    NewSizeThreadIncrease when using JVMCI compiler
    + S8194740: UseSubwordForMaxVector causes performance regression
    + S8198346: assert(!_cld-&gt;claimed()) failed in
    TestObjectDescription.java
    + S8198352: java.util.MissingResourceException:
    sun.security.util.AuthResources when trying to use
    com.sun.security.auth.module.UnixLoginModule
    + S8198405: JImageExtractTest.java &amp; JImageListTest.java failed
    in Windows.
    + S8198819: tools/jimage/JImageExtractTest.java, fails
    intermittently at testExtract (macos)
    + S8199645: javax/net/ssl/SSLSession/TestEnabledProtocols.java
    failed with Connection reset
    + S8201611: Broken links in java.desktop javadoc
    + S8202123: C2 Crash in Node::in(unsigned int) const+0x14
    + S8202264: Race condition in AudioClip.loop()
    + S8202329: [AIX] Fix codepage mappings for IBM-943 and Big5
    + S8202561: clean up TEST.groups file
    + S8202769: jck test fails with C2:
    vm/jvmti/FollowReferences/fref001/fref00113/fref00113.html
    + S8203007: Address missing block coverage for ChaCha20 and
    Poly1305 algorithms
    + S8203943: eventThreadGroup was null in
    TestJavaBlockedEvent.java
    + S8204603: Short week days, NaN value and timezone name are
    inconsistent between CLDR and Java in zh_CN, zh_TW locales.
    + S8204630: Generating an anonymous class with
    Filer#createClassFile causes an NPE in
    JavacProcessingEnvironment
    + S8204691: HeapRegion.apply_to_marked_objects_other_vm_test
    fails with assert(!hr-&gt;is_free() || hr-&gt;is_empty()) failed:
    Free region 0 is not empty for set Free list #
    + S8205426: Humongous continues remembered set does not match
    humongous start region one after Remark
    + S8205454: &amp;amp; is displayed in some Swing docs
    + S8205472: Deadlock in Kitchensink when trying to print
    compile queues causing timeout
    + S8205588: Deprecate for removal com.sun.awt.SecurityWarning
    + S8205646: Broken link in jdk.jsobject
    + S8205878: pthread_getcpuclockid is expected to return 0 code
    + S8205924: ZGC: Premature OOME due to failure to expand
    backing file
    + S8205928: [TESTBUG]
    jdk/internal/platform/docker/TestDockerMemoryMetrics
    + S8205966: [testbug] New Nestmates JDI test times out with
    Xcomp on sparc
    + S8205973: Client jtreg ProblemList cleanup
    + S8205999: C2 compilation fails with
    "assert(store-&gt;find_edge(load) != -1) failed: missing
    precedence edge"
    + S8206001: Enable TLS1.3 by default in Http Client
    + S8206106: [solaris sparc] jck tests
    api/javax_print/PrintService failing
    + S8206135: Building jvm with AOT but without JVMCI should fail
    at configure time
    + S8206145: dbgsysSocketClose - do not restart close if errno
    is EINTR [linux]
    + S8206163: AArch64: incorrect code generation for StoreCM
    + S8206173: MallocSiteTable::initialize() doesn't take function
    descriptors into account
    + S8206184: docs-reference build fails due to
    extlink.spec.version property not set
    + S8206243: java -XshowSettings fails if memory.limit_in_bytes
    overflows LONG.max
    + S8206254: Unable to complete emergency dump during safepoint
    + S8206255: fix compiler/intrinsics/sha/cli/
    /TestUseSHAOptionOnSupportedCPU.java jtreg test on linux s390x
    + S8206287: fix legal notice in hotspot tests
    + S8206316: ZGC: Preferred tmpfs mount point not found on Debian
    + S8206322: ZGC: Incorrect license header in gtests
    + S8206323: Missing some legal notices in docs bundle
    + S8206324: compiler/whitebox/DeoptimizeFramesTest.java to
    ProblemList-graal.txt
    + S8206355: SSLSessionImpl.getLocalPrincipal() throws NPE
    + S8206375: ProblemList update of bug ID for
    SwingFontMetricsTest
    + S8206378: Backout JDK-8202561
    + S8206394: missing ResourceMark in
    AOTCompiledMethod::metadata_do,
    AOTCompiledMethod::clear_inline_caches,
    CompiledMethod::clear_ic_stubs,
    CompiledMethod::cleanup_inline_caches_impl
    + S8206408: Add missing CPU/system info to vm_version_ext on
    PPC64
    + S8206428: Upgrade JDK11 to harfbuzz 1.8.2
    + S8206429: [REDO] 8202561 clean up TEST.groups
    + S8206433: Several jib profiles missing autoconf dependency
    + S8206436: sun/nio/cs/TestIBMBugs.java no longer compiles
    + S8206450: Add JImageListTest.java to ProblemList.txt
    + S8206459: [s390] Prevent restoring incorrect bcp and locals
    in interpreter and avoid incorrect size of
    partialSubtypeCheckNode in C2
    + S8206476: Wrong assert in phase_enum_2_phase_string() in
    referenceProcessorPhaseTimes.cpp
    + S8206919: s390: add missing info to vm_version_ext_s390
    + S8206951: [Graal]
    org.graalvm.compiler.hotspot.test.GraalOSRTest to
    ProblemList-graal.txt
    + S8206952: java/lang/Class/GetPackageBootLoaderChildLayer.java
    fails with Graal
    + S8206954: Test runtime/Thread/ThreadPriorities.java crashes
    with SEGV in pthread_getcpuclockid
    + S8207007: Add missing license header to zHash.inline.hpp</changelog>
  <changelog author="fstrba@suse.com" date="1531569600">- Merge standalone modules java.activation, java.xml.bind,
  java.xml.soap, java.xml.ws.annotation and java.xml.ws into the
  OpenJDK
- Added patches:
  * activation-module.patch
    + add module-info.java file for java.activation module
  * annotation-module.patch
    + add module-info.java file for java.xml.ws.annotation</changelog>
  <changelog author="fstrba@suse.com" date="1532088000">- Update to upstream tag jdk-11+23
  * Fixes
    + S8181855: [Graal]
    runtime/ReservedStack/ReservedStackTest.java triggers:
    assert(thread-&gt;deopt_mark() == __null) failed: no stack
    overflow from deopt blob/uncommon trap
    + S8189747: JDK9 javax.lang.model.util.Elements#getTypeElement
    regressed 1000x in performance.
    + S8191948: db error: InvalidTypeException: Can't assign
    double[][][] to double[][][]
    + S8199779: Add T-Systems, GlobalSign and Starfield services
    root certificates
    + S8200282: Serializing non-zero byte as zero to ByteBuffer
    + S8202481: RegisterDuringSelect.java fails with
    java.util.concurrent.ExecutionException:
    java.nio.channels.ClosedSelectorException
    + S8204860: The frame could be resized by dragging a corner of
    the frame with the mouse
    + S8205541: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatArrayCorrectnessTest.java fails with Should
    not have any events stored yet.
    + S8205576: forkjoin/FJExceptionTableLeak.java fails
    "AssertionError: failed to satisfy condition"
    + S8205643: HeapMonitorGCCMSTest fails with Graal
    + S8205652: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java fails
    + S8205725: Update the JVMTI Spec for Heap Sampling
    + S8205967: Remove sun/security/krb5/auto/UnboundSSL.java from
    ProblemList.txt
    + S8206189: sun/security/pkcs12/EmptyPassword.java fails with
    Sequence tag error
    + S8206238: Aspect ratio is not maintained when Image is scaled
    in JEditorPane
    + S8206265: aarch64 jtreg: assert in TestOptionsWithRanges.jtr
    + S8206271: CodeHeap State Analytics must digest new method
    state
    + S8206448: (fs) Extended attributes assumed to be enabled on
    ext3 (lnx)
    + S8206471: Race with ConcurrentHashTable deleting items on
    insert with cleanup thread
    + S8206873: 2 Null pointer dereference defect groups in
    LIRGenerator
    + S8206903: Unable to build Client VM with JVMCI
    + S8206915: XDH TCK issues
    + S8206929: Check session context for TLS 1.3 session resumption
    + S8206953: compiler/profiling/TestTypeProfiling.java fails
    when JVMCI build disabled
    + S8206960: HeapMonitor tests fail with Graal
    + S8206975: AArch64: Fix CompareAndSwapOp when useLSE is
    enabled in Graal
    + S8206977: Minor improvements of runtime code.
    + S8206980: ZonedDateTime could not parse timezone name with
    zh_CN locale correctly.
    + S8206998: [test] runtime/ElfDecoder/TestElfDirectRead.java
    requires longer timeout on ppc64
    + S8207001: *.obj.log files get truncated causing unreliable
    incremental builds on Windows
    + S8207006: serviceability/sa/TestUniverse.java#id0 crashes
    with EpsilonGC and AOT
    + S8207023: Add trace info to
    java/nio/channels/Selector/RegisterDuringSelect.java
    + S8207027: Lookup.accessClass fails for an array type in the
    same package when assertions are enabled
    + S8207029: Unable to use custom SSLEngine with default
    TrustManagerFactory after updating to JDK 11 b21
    + S8207032: Compilation succeeds without checking readability
    when --add-exports used
    + S8207044: minimal vm build fail: missing #include
    + S8207047: Multiple VM variants build fail
    + S8207049: Minor improvements of compiler code.
    + S8207065: Cleanup compiler tests for Client VM
    + S8207067: [test] prevent timeouts in
    serviceability/tmtools/jstat/{GcTest02,GcCauseTest02}.java
    + S8207068: Add Entrust root certificates
    + S8207152: Placeholder for Japanese new era should be two
    characters
    + S8207190: JDK 11 javadoc generates bad code example
    + S8207210: Problem list
    javax/sound/sampled/Clip/AutoCloseTimeCheck.java
    + S8207213: The help-doc.html generated by the doclet is
    incomplete
    + S8207217: Problem list
    java/lang/management/ThreadMXBean/AllThreadIds.java
    + S8207233: Minor improvements of jdk C-coding
    + S8207235:
    ManagementFactory.getPlatformMXBeans(BufferPoolMXBean.class)
    throws NPE
    + S8207240: AARCH64: C2-only VM does not build
    + S8207261: [Graal] JDI and JDWP tests that consume all memory
    should be filtered out to not run with Graal
    + S8207265: Bad HTML in {@link} in
    HttpResponse.BodySubscribers.ofPublisher
    + S8207318: KeyStore#getInstance(File, LoadStoreParameter) does
    not load the keystore
    + S8207342: error occurred during error reporting (printing
    register info)
    + S8207345: AArch64: Trampoline generation code reads from
    unitialized memory
    + S8207763: serviceability/jvmti/HeapMonitor/MyPackage/
    /HeapMonitorStatRateTest.java failed with Error. Parse
    Exception: Can't find source file:
    HeapMonitorStatIntervalTest.java</changelog>
  <changelog author="fstrba@suse.com" date="1532606400">- Update to upstream tag jdk-11+24 (Oracle July 2018 CPU)
  * Security fixes:
    + S8197925: Better stack walking (CVE-2018-2940, bsc#1101645)
    + S8199547: Exception to Pattern Syntax (CVE-2018-2952,
    bsc#1101651)
    + S8200332: Improve GCM counting (CVE-2018-2972, bsc#1101655)
    + S8200666: Improve LDAP support (CVE-2018-2973, bsc#1101656)
  * Security-In-Depth fixes:
    + S8191239: Improve desktop file usage
    + S8193419: Better Internet address support
  * Fixes:
    + S8189922: UseNUMA memory interleaving vs membind
    + S8196224: Even better Internet address support
    + S8202837: PBES2 AlgorithmId encoding error in PKCS12 KeyStore
    + S8203230: update VerifyCACerts test
    + S8203504: [Graal]
    org.graalvm.compiler.debug.test.DebugContextTest fails with
    java.util.ServiceConfigurationError
    + S8203820: [TESTBUG]
    vmTestbase/metaspace/staticReferences/StaticReferences.java
    timed out
    + S8204196: integer cleanup
    + S8205390: jtreg: Fix failing TestRTMSpinLoopCount on PPC64
    + S8205491: adjust reflective access checks
    + S8205578: jtreg: Fix failing TestRTMAbortRatio on PPC64
    + S8205580: PPC64: RTM: Don't retry lock on abort if abort was
    intentional
    + S8205581: PPC64: RTM: Fix abort on native calls
    + S8205582: PPC64: RTM: Fix counter for aborts on nested
    transactions
    + S8206171: Signature#getParameters for RSASSA-PSS throws
    ProviderException when not initialized
    + S8206241: compiler/graalunit/PhasesCommonTest.java fails with
    java.lang.Error: TESTBUG: no tests found for prefix
    org.graalvm.compiler.phases.common.test
    + S8206445: JImageListTest.java failed in Windows
    + S8206456: [TESTBUG] docker jtreg tests fail on systems
    without cpuset.effective_cpus / cpuset.effective_mem
    + S8206865: RMI activation tests fail with InvalidClassException
    + S8206886: Java does not set the default format locale
    correctly on mac10.13
    + S8206931: Misleading "COMPILE SKIPPED: invalid non-klass
    dependency" compile log
    + S8207056: Epsilon GC to support object pinning
    + S8207069: [AOT] we should check that VM uses the same GC as
    one used for AOT library generation.
    + S8207223: SSL Handshake failures are reported with more
    generic SSLException
    + S8207243: Fix translation filtering to also support zh_HK and
    zh_TW
    + S8207244: java/nio/channels/Selector/SelectWithConsumer.java
    testInterruptDuringSelect() fails intermittently
    + S8207250: setUseClientMode post handshake with the same value
    as before does not throw IAE
    + S8207252: C1 still does eden allocations when TLAB is enabled
    + S8207365: Make man pages optional
    + S8207380: compiler/graalunit/JttLangMTest.java timeout
    + S8207383: [Graal] SelfChangedCDS.java fails with
    "guarantee(disp == (intptr_t)(jint)disp) failed: must be
    32-bit offset"
    + S8207392: [PPC64] Implement JFR profiling.
    + S8207584: ARM32: ShouldNotReachHere assertion on Test8168712
    jtreg test
    + S8207761: Split compiler/graalunit/JttReflectFTest.java
    + S8207765: HeapMonitorStatIntervalTest.java fails with ZGC
    + S8207766: [testbug] Adapt tests for Aix.
    + S8207818: Problem list several rmi tests
    + S8207819: Problem list serviceability/jvmti/HeapMonitor/
    /MyPackage/HeapMonitorStatRateTest.java
    + S8207830: [aix] disable jfr in build and tests
    + S8207833: java/nio/channels/Selector/SelectWithConsumer.java
    testCancel() fails intermittently
    + S8207846: Generalize the jdk.net.includeInExceptions security
    property
    + S8207915: [AOT] jaotc w/ '--ignore-errors' should ignore
    illegal class files
    + S8207952: Problem-list 3 sctp tests
    + S8207959: The initial value of
    SETTINGS_MAX_CONCURRENT_STREAMS should have no limit
    + S8207960: Non-negative WINDOW_UPDATE increments may leave the
    stream window size negative
    + S8208075: Quarantine vmTestbase/nsk/jvmti/RedefineClasses/
    /StressRedefineWithoutBytecodeCorruption/TestDescription.java
    + S8208092: ProblemList serviceability/sa/ClhsdbCDSCore.java
    + S8208096: Update build documentation to reflect compiler
    upgrades at Oracle
    + S8208111: Problem list
    java/nio/channels/Selector/RacyDeregister.java</changelog>
</package>
<package pkgid="830a8ad0fb3c3fc438db8e82766922d67ab5f0cc9b163274c5cd8691d06ab7b4" name="java-1_8_0-openjdk" arch="src">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="530a1d17b1880547dddfdb0a345581293325b32e7a499021b011e46576070a53" name="java-1_8_0-openjdk" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="f119a025a75471710c8162c7307f160c33f1c9d44cdf3bb25b688ac6052b7e6d" name="java-1_8_0-openjdk-accessibility" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="be4d6ce3a81871e7c87578832408b4c1789c77fc22f315edb302b8c7ecad1e0d" name="java-1_8_0-openjdk-demo" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="5e77b9b4952988117614dc2b7addd799fac5ff0f4583565e7591b3ead9254e98" name="java-1_8_0-openjdk-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="8a2d2c6c61e66638ab05683f9af309f82dfed31ad0058392358b2721e24ab2cd" name="java-1_8_0-openjdk-headless" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="d37c118e33b7a679320e992950067b6065af575e690910fbf1dd2121b8160a4f" name="java-1_8_0-openjdk-javadoc" arch="noarch">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="9310ae986aec2477dcde5f257e246be0267e352cc294d9395bfd462a506607bd" name="java-1_8_0-openjdk-src" arch="x86_64">
  <version epoch="0" ver="1.8.0.171" rel="lp150.2.3.1"/>
  <changelog author="fstrba@suse.com" date="1488369600">- Fix build of Sun Elliptical Curves Crypto provider on Tumbleweed.
  Fixes bsc#1026102.
- Clean the mozilla-nss requires and move them into the headless</changelog>
  <changelog author="fstrba@suse.com" date="1495022400">- Upgrade to version jdk8u131 (icedtea 3.4.0) - bsc#1034849
  * Security fixes
  - S8163520, CVE-2017-3509: Reuse cache entries
  - S8163528, CVE-2017-3511: Better library loading
  - S8165626, CVE-2017-3512: Improved window framing
  - S8167110, CVE-2017-3514: Windows peering issue
  - S8168699: Validate special case invocations
  - S8169011, CVE-2017-3526: Resizing XML parse trees
  - S8170222, CVE-2017-3533: Better transfers of files
  - S8171121, CVE-2017-3539: Enhancing jar checking
  - S8171533, CVE-2017-3544: Better email transfer
  - S8172299: Improve class processing
  * New features
  - PR1969: Add AArch32 JIT port
  - PR3297: Allow Shenandoah to be used on AArch64
  - PR3340: jstack.stp should support AArch64
  * Import of OpenJDK 8 u131 build 11
  - S6474807: (smartcardio) CardTerminal.connect() throws
    CardException instead of CardNotPresentException
  - S6515172, PR3346: Runtime.availableProcessors() ignores Linux
    taskset command
  - S7155957:
    closed/java/awt/MenuBar/MenuBarStress1/MenuBarStress1.java
    hangs on win 64 bit with jdk8
  - S7167293: FtpURLConnection connection leak on
    FileNotFoundException
  - S8035568: [macosx] Cursor management unification
  - S8079595: Resizing dialog which is JWindow parent makes JVM
    crash
  - S8130769: The new menu can't be shown on the menubar after
    clicking the "Add" button.
  - S8146602:
    jdk/test/sun/misc/URLClassPath/ClassnameCharTest.java test
    fails with NullPointerException
  - S8147842: IME Composition Window is displayed at incorrect
    location
  - S8147910, PR3346: Cache initial active_processor_count
  - S8150490: Update OS detection code to recognize Windows
    Server 2016
  - S8160951: [TEST_BUG]
    javax/xml/bind/marshal/8134111/UnmarshalTest.java should be
    added into :needs_jre group
  - S8160958: [TEST_BUG]
    java/net/SetFactoryPermission/SetFactoryPermission.java
    should be added into :needs_compact2 group
  - S8161147: jvm crashes when -XX:+UseCountedLoopSafepoints is
    enabled
  - S8161195: Regression:
    closed/javax/swing/text/FlowView/LayoutTest.java
  - S8161993, PR3346: G1 crashes if active_processor_count
    changes during startup
  - S8162876: [TEST_BUG]
    sun/net/www/protocol/http/HttpInputStream.java fails
    intermittently
  - S8162916: Test sun/security/krb5/auto/UnboundSSL.java fails
  - S8164533: sun/security/ssl/SSLSocketImpl/CloseSocket.java
    failed with "Error while cleaning up threads after test"
  - S8167179: Make XSL generated namespace prefixes local to
    transformation process
  - S8168774: Polymorhic signature method check crashes javac
  - S8169465: Deadlock in com.sun.jndi.ldap.pool.Connections
  - S8169589: [macosx] Activating a JDialog puts to back another
    dialog
  - S8170307: Stack size option -Xss is ignored
  - S8170316: (tz) Support tzdata2016j
  - S8170814: Reuse cache entries (part II)
  - S8170888, PR3314, RH1284948: [linux] Experimental support for
    cgroup memory limits in container (ie Docker) environments
  - S8171388: Update JNDI Thread contexts
  - S8171949: [macosx] AWT_ZoomFrame Automated tests fail with
    error: The bitwise mask Frame.ICONIFIED is not setwhen the
    frame is in ICONIFIED state
  - S8171952: [macosx]
    AWT_Modality/Automated/ModalExclusion/NoExclusion/ModelessDialog
    test fails as DummyButton on Dialog did not gain focus when
    clicked.
  - S8173030: Temporary backout fix #8035568 from 8u131-b03
  - S8173031: Temporary backout fix #8171952 from 8u131-b03
  - S8173783, PR3328: IllegalArgumentException:
    jdk.tls.namedGroups
  - S8173931: 8u131 L10n resource file update
  - S8174844: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
  - S8174985: NTLM authentication doesn't work with IIS if NTLM
    cache is disabled
  - S8176044: (tz) Support tzdata2017a
  * Backports
  - S6457406, PR3335: javadoc doesn't handle &lt;a
    href='http://...'&gt; properly in producing index pages
  - S8030245, PR3335: Update langtools to use try-with-resources
    and multi-catch
  - S8030253, PR3335: Update langtools to use strings-in-switch
  - S8030262, PR3335: Update langtools to use foreach loops
  - S8031113, PR3337: TEST_BUG:
    java/nio/channels/AsynchronousChannelGroup/Basic.java fails
    intermittently
  - S8031625, PR3335: javadoc problems referencing inner class
    constructors
  - S8031649, PR3335: Clean up javadoc tests
  - S8031670, PR3335: Remove unneeded -source options in javadoc
    tests
  - S8032066, PR3335: Serialized form has broken links to non
    private inner classes of package private
  - S8034174, PR2290: Remove use of JVM_* functions from java.net
    code
  - S8034182, PR2290: Misc. warnings in java.net code
  - S8035876, PR2290: AIX build issues after '8034174: Remove use
    of JVM_* functions from java.net code'
  - S8038730, PR3335: Clean up the way JavadocTester is invoked,
    and checks for errors.
  - S8040903, PR3335: Clean up use of BUG_ID in javadoc tests
  - S8040904, PR3335: Ensure javadoc tests do not overwrite
    results within tests
  - S8040908, PR3335: javadoc test TestDocEncoding should use
  - notimestamp
  - S8041150, PR3335: Avoid silly use of static methods in
    JavadocTester
  - S8041253, PR3335: Avoid redundant synonyms of NO_TEST
  - S8043780, PR3368: Use open(O_CLOEXEC) instead of
    fcntl(FD_CLOEXEC)
  - S8061305, PR3335: Javadoc crashes when method name ends with
    "Property"
  - S8072452, PR3337: Support DHE sizes up to 8192-bits and DSA
    sizes up to 3072-bits
  - S8075565, PR3337: Define @intermittent jtreg keyword and mark
    intermittently failing jdk tests
  - S8075670, PR3337: Remove intermittent keyword from some tests
  - S8078334, PR3337: Mark regression tests using randomness
  - S8078880, PR3337: Mark a few more intermittently failuring
    security-libs
  - S8133318, PR3337: Exclude intermittent failing PKCS11 tests
    on Solaris SPARC 11.1 and earlier
  - S8144539, PR3337: Update PKCS11 tests to run with security
    manager
  - S8144566, PR3352: Custom HostnameVerifier disables SNI
    extension
  - S8153711, PR3313, RH1284948: [REDO] JDWP: Memory Leak:
    GlobalRefs never deleted when processing invokeMethod command
  - S8155049, PR3352: New tests from 8144566 fail with "No
    expected Server Name Indication"
  - S8173941, PR3326: SA does not work if executable is DSO
  - S8174164, PR3334, RH1417266: SafePointNode::_replaced_nodes
    breaks with irreducible loops
  - S8174729, PR3336, RH1420518: Race Condition in
    java.lang.reflect.WeakCache
  - S8175097, PR3334, RH1417266: [TESTBUG] 8174164 fix missed the
    test
  * Bug fixes
  - PR3348: Architectures unsupported by SystemTap tapsets throw
    a parse error
  - PR3378: Perl should be mandatory
  - PR3389: javac.in and javah.in should use @PERL@ rather than a
    hardcoded path
  * AArch64 port
  - S8168699, PR3372: Validate special case invocations [AArch64
    support]
  - S8170100, PR3372: AArch64: Crash in C1-compiled code
    accessing References
  - S8172881, PR3372: AArch64: assertion failure: the int
    pressure is incorrect
  - S8173472, PR3372: AArch64: C1 comparisons with null only use
    32-bit instructions
  - S8177661, PR3372: Correct ad rule output register types from
    iRegX to iRegXNoSp
  * AArch32 port
  - PR3380: Zero should not be enabled by default on arm with the
    AArch32 HotSpot build
  - PR3384, S8139303, S8167584: Add support for AArch32
    architecture to configure and jdk makefiles
  - PR3385: aarch32 does not support -Xshare:dump
  - PR3386, S8164652: AArch32 jvm.cfg wrong for C1 build
  - PR3387: Installation fails on arm with AArch32 port as
    INSTALL_ARCH_DIR is arm, not aarch32
  - PR3388: Wrong path for jvm.cfg being used on arm with AArch32
    build
  * Shenandoah
  - Fix Shenandoah argument checking on 32bit builds.
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u101-b14-shenandoah-merge-2016-07-25
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-02-20
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-06
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-09
  - Import from Shenandoah tag
    aarch64-shenandoah-jdk8u121-b14-shenandoah-merge-2017-03-23</changelog>
  <changelog author="fstrba@suse.com" date="1500638400">- Upgrade to version jdk8u141 (icedtea 3.5.0)
  * Security fixes
  - S8163958, CVE-2017-10102, bsc#1049316: Improved garbage
    collection
  - S8167228: Update to libpng 1.6.28
  - S8169209, CVE-2017-10053, bsc#1049305: Improved image
    post-processing steps
  - S8169392, CVE-2017-10067, bsc#1049306: Additional jar
    validation steps
  - S8170966, CVE-2017-10081, bsc#1049309: Right parenthesis
    issue
  - S8171539, CVE-2017-10078, bsc#1049308: Better script
    accessibility for JavaScript
  - S8172204, CVE-2017-10087, bsc#1049311: Better Thread Pool
    execution
  - S8172461, CVE-2017-10089, bsc#1049312: Service Registration
    Lifecycle
  - S8172465, CVE-2017-10090, bsc#1049313: Better handling of
    channel groups
  - S8172469, CVE-2017-10096, bsc#1049314: Transform Transformer
    Exceptions
  - S8173286, CVE-2017-10101, bsc#1049315: Better reading of text
    catalogs
  - S8173697, CVE-2017-10107, bsc#1049318: Less Active
    Activations
  - S8173770, CVE-2017-10074, bsc#1049307: Image conversion
    improvements
  - S8174098, CVE-2017-10110, bsc#1049321: Better image fetching
  - S8174105, CVE-2017-10108, bsc#1049319: Better naming
    attribution
  - S8174113, CVE-2017-10109, bsc#1049320: Better sourcing of
    code
  - S8174770: Check registry registration location
  - S8174873: Improved certificate processing
  - S8175106, CVE-2017-10115, bsc#1049324: Higher quality DSA
    operations
  - S8175110, CVE-2017-10118, bsc#1049326: Higher quality ECDSA
    operations
  - S8176055: JMX diagnostic improvements
  - S8176067, CVE-2017-10116, bsc#1049325: Proper directory
    lookup processing
  - S8176760, CVE-2017-10135, bsc#1049328: Better handling of
    PKCS8 material
  - S8178135, CVE-2017-10176, bsc#1049329: Additional elliptic
    curve support
  - S8179101, CVE-2017-10193, bsc#1049330: Improve algorithm
    constraints implementation
  - S8179998, CVE-2017-10198, bsc#1049331: Clear certificate
    chain connections
  - S8181420, CVE-2017-10074, bsc#1049307: PPC: Image conversion
    improvements
  - S8183551, CVE-2017-10074, PR3423, bsc#1049307: AArch64: Image
    conversion improvements
  - S8184185, CVE-2017-10111, bsc#1049322: Rearrange MethodHandle
    arrangements
  - bsc#1049332, CVE-2017-10243: Unspecified vulnerability in
    subcomponent JAX-WS
  - bsc#1049327, CVE-2017-10125: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049323, CVE-2017-10114: Unspecified vulnerability in
    subcomponent JavaFX
  - bsc#1049317, CVE-2017-10105: Unspecified vulnerability in
    subcomponent deployment
  - bsc#1049310, CVE-2017-10086: Unspecified vulnerability in
    subcomponent JavaFX
  * New features
  - PR3392, RH1273760: Support using RSAandMGF1 with the SHA hash
    algorithms in the PKCS11 provider
  * Import of OpenJDK 8 u141 build 15 (bsc#1049302)
  - S8139870: sun.management.LazyCompositeData.isTypeMatched()
    fails for composite types with items of ArrayType
  - S8155690: Update libPNG library to the latest up-to-date
  - S8159058: SAXParseException when sending soap message
  - S8162461: Hang due to JNI up-call made whilst holding JNI
    critical lock
  - S8163889: [macosx] Can't print from browser on Mac OS X
  - S8165231: java.nio.Bits.unaligned() doesn't return true on ppc
  - S8165367: Additional tests for JEP 288: Disable SHA-1
    Certificates
  - S8173145: Menu is activated after using mnemonic Alt/Key
    combination
  - S8173207: Upgrade compression library
  - S8175251: Failed to load RSA private key from pkcs12
  - S8176329: jdeps to detect MR jar file and output a warning
  - S8176536: Improved algorithm constraints checking
  - S8176731: JCK tests in api/javax_xml/transform/ spec
    conformance started failing after 8172469
  - S8176769: Remove accidental spec change in jdk8u
  - S8177449: (tz) Support tzdata2017b
  - S8178996: [macos] JComboBox doesn't display popup in mixed
    JavaFX Swing Application on 8u131 and Mac OS 10.12
  - S8179014: JFileChooser with Windows look and feel crashes on
    win 10
  - S8180582: The bind to rmiregistry is rejected by
    registryFilter even though registryFilter is set
  - S8181591: 8u141 L10n resource file update
  - S8181698: Remove and retag 8u141-b12 tag from source
    repository
  - S8181946: JDK 8 THIRD_PARTY_README - Minor Cleanup
  - S8182054: Improve wsdl support
  - S8184235: Backout JDK-8173207 from 8u141, 7u151 and higher
    updates source base
  * Backports
  - S8164293, PR3412, RH1459641: HotSpot leaking memory in
    long-running requests
  - S8175813, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    when -XX:+UseNUMA is used
  - S8175887, PR3415: C1 value numbering handling of
    Unsafe.get*Volatile is incorrect
  - S8179084, PR3409, RH1455694: HotSpot VM fails to start when
    AggressiveHeap is set
  - S8180048, PR3411, RH1449870: Interned string and symbol table
    leak memory during parallel unlinking
  - S8181055, PR3394, RH1448880: PPC64: "mbind: Invalid argument"
    still seen after 8175813
  - S8181419, PR3413, RH1463144: Race in jdwp invoker handling
    may lead to crashes or invalid results
  * AArch64 port
  - S7009641, PR3423: Don't fail VM when CodeCache is full
  - S8182581, PR3423: aarch64: fix for crash caused by earlyret
    of compiled method
  * AArch32 port
  - PR3391: Revert PR3385 as -Xshare:dump does appear to work on
    AArch32</changelog>
  <changelog author="fstrba@suse.com" date="1501070400">- Use aarch32 instead of arm as a directory for JIT arm 32-bit
  virtual machine.</changelog>
  <changelog author="fstrba@suse.com" date="1501502400">- Update to version jdk8u144 (icedtea 3.5.1)
  * Import of OpenJDK 8 u144 build 01
  - S8184993: Jar file verification failing with
    SecurityException: digest missing xxx
  * Shenandoah
  - Amend "ArrayCopy verification code fix" with 8u-specific node
    hierarchy test
  - Amend "Refactor asm acmp" with a few missing changes
  - [backport] aarch64 store check fix
  - [backport] Account "shared" out-of-LAB allocations separately
  - [backport] Adaptive should not be scared of user-requested
    System.gc()
  - [backport] Added assertion for page alignment of heap's base
    address
  - [backport] Add "verify jcstress" acceptance test
  - [backport] "Allocation failure" cause should not be
    overwritten
  - [backport] ArrayCopy verification code fix
  - [backport] Assorted cleanups
  - [backport] "Before Full GC" verification is too strong for
    OOME-during-evac
  - [backport] C1 stores constants without read barriers
  - [backport] Cleanup AArch64 code
  - [backport] Cleanup class unloading and string intern code
  - [backport] Cleanup duplicated Shenandoah task queue
    declarations
  - [backport] Cleanups
  - [backport] Cleanup ShenandoahBarrierSet::write_barrier
  - [backport] Cleanup ShenandoahHeap::do_evacuation
  - [backport] Clean up unused fields and methods
  - [backport] Cleanup: update-refs check in_collection_set twice
  - [backport] Code cache roots styles
  - [backport] Concurrent code cache evacuation + bugfixes
  - [backport] Concurrent preclean + Fix weakref precleaning
  - [backport] Correct prefetch offset for marked object
    iteration
  - [backport] Deferred region cleanup.
  - [backport] Dense ShenandoahHeapRegion printout
  - [backport] Detailed ParallelCleanupTask statistics + Split
    out Full GC stats for parallel cleaning
  - [backport] Disable aggressive+verification test configs
    (jtreg eats up last configuration)
  - [backport] Do not abandon RP discovery on conc GC cancel,
    do that only before Full GC
  - [backport] Eliminating _num_regions variable in
    ShenandoahHeap
  - [backport] Ensure collection set and cset map are consistent
  - [backport] Fallback to shared allocation if GCLAB is not
    available
  - [backport] Fast synchronizer root scanning
  - [backport] "F: Code Cache Roots" is missing from gc+stats
  - [backport] Fix DerivedPointerTable handling when scanning
    roots twice in init-evac phase
  - [backport] Fixed a few of early returns that calling
    register_gc_end()
  - [backport] Fix live data accounting for humongous region
  - [backport] Fix memory Phis with only data uses
  - [backport] Fix recycled regions zapping
  - [backport] Fix up pointer volatility
  - [backport] Generic verification should not trust bitmaps
  - [backport] Heap/matrix verification for all reachable objects
  - [backport] Heap memory usage counting not longer needs to be
    atomic
  - [backport] Heap region recycling should call explicit clear()
    and request zapping
  - [backport] Heap region verification
  - [backport] Implementation of interpreter matrix barrier on
    aarch64
  - [backport] Implement early update references phase.
  - [backport] implicit null checks broken on aarch64
  - [backport] Increase timeout for EvilSyncBug test
  - [backport] Lazy parallel code cache iterator
  - [backport] Make statistics gathering span more operations
  - [backport] Make sure atomic operations are done on
    "volatile" fields
  - [backport] Make sure new_active_workers is used
  - [backport] Make {T,GC}LAB statistics unconditional
  - [backport] Mark-compact and heuristics should consistently
    process refs and unload classes
  - [backport] minor fix to optimization of java mirror
    comparison
  - [backport] more barrier on constant oop fixes + couple small
    unrelated fixes
  - [backport] More collection set and matrix cleanup
  - [backport] Nit: mark-compact phase 3 (Adjust Pointers) should
    announce itself as "Phase 3"
  - [backport] Optimize heap region size checks
  - [backport] Optimize heap verification
  - [backport] Out-of-TLAB evacuation should overwrite stale
    copies
  - [backport] Parallel code cache scanning
  - [backport] Parallel verification
  - [backport] Print correct message about gross times in stats
  - [backport] Print heap changes in phases that actually change
    heap occupancy
  - [backport] Print more detailed final UR stats
  - [backport] Print more details for weak ref and class
    unloading stats
  - [backport] Properly react on -ClassUnloading
  - [backport] Purge ealier version of redefined classes during
    class unloading
  - [backport] Purge ratio, global, connections heuristics.
  - [backport] Purge shenandoahHumongous.hpp
  - [backport] Purge ShenandoahVerify(Reads|Writes)ToFromSpace.
  - [backport] Reduce region retirement during tlab allocation
  - [backport] Refactor asm acmp (x86, aarch64, renames)
  - [backport] Refactor BrooksPointer asserts
  - [backport] Refactor heap verification
  - [backport] Reference processing deadlocks with
  - ParallelRefProcEnabled
  - [backport] Reference processors might use non-forwarded alive
    checks
  - [backport] Region sampling may not be enabled because last
    timetick is uninitialized
  - [backport] Rehash ShenandoahHeap section in hs_err
  - [backport] Reinstate "Purge" block in final-mark stats
  - [backport] Relax assert to not fire at safepoint
  - [backport] Remove heap printing routines from ShenandoahHeap
  - [backport] Remove obsolete compile_resolve_oop_runtime()
    methods
  - [backport] Rename final mark operations
  - [backport] Rename ShenandoahBarriersForConst
  - [backport] Replace ShHeapRegionSet::get with get_fast
  - [backport] Report correct total garbage data. Print out
    garbage and cset data with -Xlog:gc+ergo
  - [backport] Report oops and fwdptrs verification failures
    fully
  - [backport] Result of write barrier on constant not used
  - [backport] Separate Full GC root operations in GC stats
  - [backport] ShenandoahCollectionSet refactor
  - [backport] ShenandoahGCSession used wrong timer for full GC
  - [backport] ShenandoahHeap::evacuate_object() with boolean
    result flag.
  - [backport] Shenandoah options should be uintx
  - [backport] shenandoah_wb should fallback to slow path with
  - UseTLAB + Fix aarch64 compilation error due to
    shenandoah_wb change
  - [backport] ShenandoahWriteBarrierNode::memory_dominates_all_paths()
    assert failure when compiling methods using unsafe
  - [backport] Shortcut reference processing when no work is
    available
  - [backport] Simplify parallel synchronizer roots iterator
  - [backport] Skip RESOLVE when references update is not needed
  - [backport] Stats should attribute "Resize TLABs" properly,
    and mention "Pause" for init/final mark
  - [backport] Stats should not record past-shutdown events
  - [backport] "String/Symbol/CodeCache" -&gt; "Str/Sym, Code Cache"
  - [backport] Tests should use all heuristics and pass heap
    verification + Disable aggressive+verification test configs
  - [backport] Total pauses should include final-mark pauses
  - [backport] Trim down native GC footprint
  - [backport] Update region sampling to include TLAB/GCLAB
    allocation data
  - [backport] Update roots should always handle derived pointers
  - [backport] Update ShenandoahHeapSampling to avoid double
    counting.
  - [backport] Update statistics to capture thread data
    accurately
  - [backport] Use CollectedHeap::base() instead of
    ShenandoahHeap::first_region_bottom()
  - [backport] Use lock version heap region memory allocator
  - [backport] Use scoped object for gc session/phases recording
  - [backport] Variable steps in adaptive heuristics
  - [backport] Verification error log is truncated
  - [backport] Verification levels
  - [backport] Verification should assert complete bitmaps in
    most phases + Disable complete bitmap verification in init
    mark
  - [backport] Verifier performance improvements: scan objects
    once, avoid double oop checks
  - [backport] Verifier should not assert cset in forwarded test
    block
  - [backport] Verifier should print extended info on referenced
    location
  - [backport] Verifier should use non-optimized root scans
  - [backport] Verify marked objects
  - [backport] Verify TAMS and object sizes
  - [backport] write barrier can get stuck below predicates
    resulting in unschedulable graph
  - S8140584: nmethod::oops_do_marking_epilogue always runs
    verification code
  - S8180175, S8180599: Cherry-pick/synchronize
  - Cleanup: Removed redundant
    ClassLoaderData::clear_claimed_marks() calls
  - Cleanup shared code.
  - Fixed memory leak in region garbage cache
  - Fix return type of
    ShenandoahHeapRegion::region_size_words_jint()
  - Improved comment about AArch64bit addressing in assembler.
  - Leak mutex in ShenandoahTaskTerminator
  - Make sure C2 arguments are not used when C2 is disabled.
  - Refactor parallel ClassLoaderData iterator
  - Revert G1 changes and bring shared BitMap
  - Add missing cmpoops() declaration to AArch64 macro assembler.
    Back out matrix related code from AArch64 interpreter.
  - Fix build without precompiled headers.
  - Fixed build issues on Windows</changelog>
  <changelog author="fstrba@suse.com" date="1503489600">- Added patch:
  * java-1_8_0-openjdk-linuxfilestore.patch
  - Fix bsc#1032647, bsc#1052009 with btrfs subvolumes and
    overlayfs</changelog>
  <changelog author="fstrba@suse.com" date="1504180800">- Added patch:
  * zero-atomic_copy64.patch
  - Fix wrong assembly for ppc and (maybe for) s390</changelog>
  <changelog author="fstrba@suse.com" date="1505476800">- Don't require java-bootstrap-devel, build with the non-bootstrap
  java.</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Make the requirements for mozilla-nss requires_ge instead of
  requires_eq</changelog>
  <changelog author="fstrba@suse.com" date="1505995200">- Allow bootstrapping by itself (BuildConflicts: java-devel &gt;= 1.9)</changelog>
  <changelog author="fstrba@suse.com" date="1505995201">- Update the provided jdbc-stdext version to 4.2</changelog>
  <changelog author="fstrba@suse.com" date="1506600000">- Added patch:
  * alternative-tzdb_dat.patch
    + Allow specifying alternative path where to find the tzdb.dat
    file. With fallback to $JAVA_HOME/jre/lib/tzdb.dat
- Don't symlink tzdb.dat in postinstall</changelog>
  <changelog author="fstrba@suse.com" date="1506945600">- Change the requirement of tzdata-java8 to Recommends, since it is
  not strictly needed.</changelog>
  <changelog author="fstrba@suse.com" date="1507464000">- Enable improved font rendering on systems where it applies</changelog>
  <changelog author="fstrba@suse.com" date="1509624000">- Update to version jdk8u151 (icedtea 3.6.0)
  * Security fixes
    + S8165543: Better window framing
    + S8169026, CVE-2017-10274: Handle smartcard clean up better
    (bsc#1064071)
    + S8169966: Larger AWT menus
    + S8170218: Improved Font Metrics
    + S8171252: Improve exception checking
    + S8171261: Stability fixes for lcms
    + S8174109, CVE-2017-10281: Better queuing priorities
    (bsc#1064072)
    + S8174966, CVE-2017-10285: Unreferenced references
    (bsc#1064073)
    + S8175940: More certificate subject checking
    + S8176751, CVE-2017-10295: Better URL connections (bsc#1064075)
    + S8178794, CVE-2017-10388: Correct Kerberos ticket grants
    (bsc#1064086)
    + S8180024: Improve construction of objects during
    deserialization
    + S8180711, CVE-2017-10346: Better invokespecial checks
    (bsc#1064078)
    + S8181100, CVE-2017-10350: Better Base Exceptions (bsc#1064082)
    + S8181323, CVE-2017-10347: Better timezone processing
    (bsc#1064079)
    + S8181327, CVE-2017-10349: Better X processing (bsc#1064081)
    + S8181370, CVE-2017-10345: Better keystore handling
    (bsc#1064077)
    + S8181432, CVE-2017-10348: Better processing of unresolved
    permissions (bsc#1064080)
    + S8181597, CVE-2017-10357: Process Proxy presentation
    (bsc#1064085)
    + S8181612, CVE-2017-10355: More stable connection processing
    (bsc#1064083)
    + S8181692, CVE-2017-10356: Update storage implementations
    (bsc#1064084)
    + S8183028, CVE-2016-10165: Improve CMS header processing
    (bsc#1064069)
    + S8184682, CVE-2016-9840, CVE-2016-9841, CVE-2016-9842,
    CVE-2016-9843: Upgrade compression library (bsc#1064070)
  * New features
    + PR3469: Alternative path to tzdb.dat
    + PR3483: Separate addition of nss.cfg and tz.properties into
    separate targets
    + PR3484: Move SystemTap support to its own target
    + PR3485: Support additional targets for the bootstrap build
  * Import of OpenJDK 8 u151 build 12
    + S8029659: Keytool, print key algorithm of certificate or key
    entry
    + S8057810: New defaults for DSA keys in jarsigner and keytool
    + S8075484, PR3473, RH1490713: SocketInputStream.socketRead0
    can hang even with soTimeout set
    + S8077670: sun/security/krb5/auto/MaxRetries.java may fail
    with BindException
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8153146: sun/security/krb5/auto/MaxRetries.java failed with
    timeout
    + S8157561: Ship the unlimited policy files in JDK Updates
    + S8158517: Minor optimizations to ISO10126PADDING
    + S8171319: keytool should print out warnings when reading or
    generating cert/cert req using weak algorithms
    + S8177569: keytool should not warn if signature algorithm
    used in cacerts is weak
    + S8177837: need to upgrade install tools
    + S8178714: PKIX validator nameConstraints check failing after
    change 8175940
    + S8179423: 2 security tests started failing for
    JDK 1.6.0 u161 b05
    + S8179564: Missing @bug for tests added with JDK-8165367
    + S8181048: Refactor existing providers to refer to the same
    constants for default values for key length
    + S8182879: Add warnings to keytool when using JKS and JCEKS
    + S8184937: LCMS error 13: Couldn't link the profiles
    + S8185039: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185040: Incorrect GPL header causes RE script to miss swap
    to commercial header for licensee source bundle
    + S8185778: 8u151 L10n resource file update
    + S8185845: Add SecurityTools.java test library
    + S8186503: sun/security/tools/jarsigner/DefaultSigalg.java
    failed after backport to JDK 6/7/8
    + S8186533: 8u151 L10n resource file update md20
    + S8186674: Remove JDK-8174109 from CPU Aug 21 week builds
  * Backports
    + S8035496, PR3487: G1 ARM: missing remset entry noticed by
    VerifyAfterGC for vm/gc/concurrent/lp50yp10rp70mr30st0
    + S8146086, PR3439, RH1478402: Publishing two webservices on
    same port fails with "java.net.BindException: Address already
  in use"
    + S8184673, PR3475, RH1487266: Fix compatibility issue in
  AlgorithmChecker for 3rd party JCE providers
    + S8185164, PR3438: GetOwnedMonitorInfo() returns incorrect
  owned monitor
    + S8187822, PR3478, RH1494230: C2 conditonal move optimization
  might create broken graph
  * Bug fixes
    + PR3479, RH1486025: ECC and NSS JVM crash
    + PR3486: Path to jvm.cfg is wrong in add-systemtap-boot
    + S8165852, PR3468: (fs) Mount point not found for a file
  which is present in overlayfs
    + S8188030, PR3459, RH1484079: AWT java apps fail to start
  when some minimal fonts are present
  * PPC port
    + S8145913, PR3466, RH1498309: PPC64: add Montgomery multiply
  intrinsic
    + S8168318, PR3466, RH1498320: PPC64: Use cmpldi instead of
  li/cmpld
    + S8170328, PR3466, RH1498321: PPC64: Use andis instead of
  lis/and
    + S8181810, PR3466, RH1498319: PPC64: Leverage extrdi for
  bitfield extract
  * AArch64 port
    + S8161190, PR3488: AArch64: Fix overflow in immediate cmp
  instruction
    + S8187224, PR3488: aarch64: some inconsistency between
  aarch64_ad.m4 and aarch64.ad
  * SystemTap
    + PR3467, RH1492139: Hotspot object_alloc tapset uses
  HeapWordSize incorrectly
  * Shenandoah
    + Add missing UseShenandoahGC checks to C2
    + [backport] Add JVMTI notifications to Shenandoah GC pauses.
    + [backport] After Evac verification should run consistently
    + [backport] All definitions should start with Shenandoah*
    + [backport] Allocation latency tracing
    + [backport] Allow allocations in pinned regions
    + [backport] Assorted monitoring support fixes
    + [backport] Avoid Full STW GC on System.gc() + related fixes
    + [backport] BrooksPointer tracing overwhelms -Xlog:gc=trace
    + [backport] Cannot do more than 1000 Full GCs
    + [backport] Cap heap size for TestRegionSizeArgs test
    + [backport] Cleanup "dirty" mentions
    + [backport] Cleanup unused methods and statements + Trivial
  cleanup: removed unused field, etc.
    + [backport] Common pause marker to capture everything
  before/after pause
    + [backport] Consistent print_on and tty handling
    + [backport] "continuous" heuristics
    + [backport] Disable biased locking by default
    + [backport] Fix build error: avoid loops with empty bodies
    + [backport] Fix build error: switches over enums should take
  all enums
    + [backport] Fix build error: verifier liveness should not be
  implicitly casted to size_t
    + [backport] Fixed assertion failures when printing heap
  region to trace output
    + [backport] Fixed C calling convention of shenandoah_wb() on
  Windows
    + [backport] LotsOfCycles test always degrades to Full GC
    + [backport] Made ShenandoahPrinter debug only
    + [backport] Make sure different Verifier levels work
    + [backport] Make sure we have at least one memory pool per
  memory manager (JMX) + JMX double-counts heap used size
    + [backport] Mark heuristics diagnostic/experimental
    + [backport] Move Verifier "start" message under (gc,start)
    + [backport] On-demand commit as heap resizing strategy
    + [backport] Periodic GC
    + [backport] PhiNode::has_only_data_users() needs to apply to
  shenandoah barrier only
    + [backport] Pinning humongous regions should be allowed
    + [backport] Reclaimed humongous regions should count towards
  immediate garbage
    + [backport] Refactor region flags into finite state machine
    + [backport] Refactor ShConcThread dispatch
    + [backport] Refactor ShenandoahFreeSet + Fast-forward over
  humongous regions to keep "current" non-humongous
    + [backport] Refactor ShenandoahHeapLock
    + [backport] Refactor ShenandoahHeapRegionSet
    + [backport] Region (byte|word) shifts as the replacement for
  divisions
    + [backport] Rehash -XX:-UseTLAB in tests + Rehash allocation
  tests
    + [backport] Rename inline guards
    + [backport] Selectable humongous threshold + Humongous top()
  should be correct for iteration
    + [backport] Shortcut concurrent cycle when enough immediate
  garbage is reclaimed
    + [backport] Templatize and improve inlining of arraycopy and
  clone barriers.
    + [backport] TestRegionSampling test
    + [backport] TestSmallHeap test for Shenandoah
    + [backport] Uncommit heap regions after given delay
    + [backport] Underflow in adaptive free_threshold calculation
    + [backport] Unlock more GC-specific tests for Shenandoah
    + [backport] Update counters on slow-path more rarely
    + [backport] Verifier should avoid pushing on stack when
  walking objects past TAMS
    + [backport] Verifier should walk cset and humongous regions
    + [backport] Verify humongous regions liveness
    + [backport] Verify liveness data
    + Correct way to fix Windows call convention issue
    + Fix build error in release config.
    + Fixed Fixed message logging
    + Handle Java heap initialization and expansion failures
    + Make sure -verbose:gc, PrintGC, PrintGCDetails work
  consistently
    + Missing barriers on constant oops + acmp rework + cas fix +
  write barrier on constant oop fix
    + Missing UseShenandoahGC check in
  LibraryCallKit::inline_multiplyToLen()
    + Missing UseShenandoahGC check to C2
    + OOME in SurrogateLockerThread deadlocks the GC cycle
    + Properly unlock ShenandoahVerify
    + Remove unused memory_for, fixing the build
    + Remove useless code following acmp rework
    + Revert accidental G1 closure rename
    + Test bug: test library and flags in TestHeapAlloc
    + UnlockDiagnosticVMOptions flag is needed for ShenandoahVerify
    + Write barrier pin and expand cleanup
- Removed patches:
  * alternative-tzdb_dat.patch
  * java-1_8_0-openjdk-linuxfilestore.patch
    + Integrated upstream</changelog>
  <changelog author="fstrba@suse.com" date="1509710400">- Added patch:
  * tzdb_dat.patch
    + Patch also the other place in jdk that loads the tzdb.dat
    file</changelog>
  <changelog author="fstrba@suse.com" date="1517227200">- Fix build with gcc 7.3
  * add -fno-delete-null-pointer-checks -fno-lifetime-dse and
  - std=gnu++98</changelog>
  <changelog author="fstrba@suse.com" date="1519905600">- Update to vesion jdk8u161 (icedtea 3.7.0) - bsc#1076366
  * Security fixes
    + S8160104: CORBA communication improvements
    + S8172525, CVE-2018-2579: Improve key keying case
    + S8174756: Extra validation for public keys
    + S8174962, CVE-2018-2582: Better interface invocations
    + S8175932: Improve host instance supports
    + S8176458: Revise default document styling
    + S8178449, CVE-2018-2588: Improve LDAP logins
    + S8178458: Better use of certificates in LDAP
    + S8178466: Better RSA parameters
    + S8179536: Cleaner print job handling
    + S8179990: Cleaner palette entry handling
    + S8180011: Cleaner native graphics device handling
    + S8180015: Cleaner AWT robot handling
    + S8180020: Improve SymbolHashMap entry handling
    + S8180433: Cleaner CLR invocation handling
    + S8180877: More deeply colored ICC spaces
    + S8181664: Improve JVM UTF String handling
    + S8181670: Improve implementation of keystores
    + S8182125, CVE-2018-2599: Improve reliability of DNS lookups
    + S8182387, CVE-2018-2603: Improve PKCS usage
    + S8182601, CVE-2018-2602: Improve usage messages
    + S8185292, CVE-2018-2618: Stricter key generation
    + S8185325, CVE-2018-2641: Improve GTK initialization
    + S8186080: Transform XML interfaces
    + S8186212, CVE-2018-2629: Improve GSS handling
    + S8186600, CVE-2018-2634: Improve property negotiations
    + S8186606, CVE-2018-2633: Improve LDAP lookup robustness
    + S8186699: Clean up extra Derby files
    + S8186867: Improve native glyph layouts
    + S8186998, CVE-2018-2637: Improve JMX supportive features
    + S8189284, CVE-2018-2663: More refactoring for deserialization
    cases
    + S8190289, CVE-2018-2677: More refactoring for client
    deserialization cases
    + S8191142, CVE-2018-2678: More refactoring for naming
    deserialization cases
  * Import of OpenJDK 8 u152 build 16
    + S4953367: MAWT: Java should be more careful manipulating
    NLSPATH, XFILESEARCHPATH env variables
    + S6772009:
    java/util/concurrent/locks/ReentrantLock/CancelledLockLoops.java
    test failed with 'Completed != 2'
    + S6947916: JarURLConnection does not handle useCaches correctly
    + S6980209: Make tracking SecondaryLoop.enter/exit methods
    easier
    + S7052625: com/sun/net/httpserver/bugs/6725892/Test.java fails
    intermittently
    + S7102702:
    java/net/PortUnreachableException/OneExceptionOnly.java failing
    + S7131356: (props) "No Java runtime present, requesting
    install" when creating VM from JNI [macosx]
    + S7172652: With JDK 1.7 text field does not obtain focus when
    using mnemonic Alt/Key combin
    + S8022291: Mac OS: Unexpected JavaLaunchHelper message
    displaying
    + S8022580: sun.net.ftp.impl.FtpClient.nameList(String path)
    handles "null" incorrectly
    + S8025306: Inet[4|6]Address class and fieldID initialization
    in networking native code
    + S8028363: XmlGregorianCalendarImpl.getTimeZone() bug when
    offset is less than 10 minutes
    + S8028725: [Parfait] warnings from b116 for
    jdk.src.solaris.native.java.net: JNI pending exceptions
    + S8028769: Check src/share/native/java/lang/*.c for cases when
    JNI calls are used with pending warnings
    + S8029018: (bf) Check src/share/native/java/nio/Bits.c for JNI
    pending exceptions
    + S8030116: (process) Check Parfait warnings in
    src/solaris/native/java/lang/*
    + S8031586: Check jdk/src/*/native/com/sun/security/auth/module
    for pending JNI exceptions
    + S8033371: jdk/src/solaris/native/java/lang/ProcessEnvironment.c
    environ doesn't check for JNI pending exceptions
    + S8033372: Check jdk/src/share/native/java/lang for JNI
    pending exception issues
    + S8034102: Check solaris/native/sun/nio/fs/MacOSXNativeDispatcher.c
    for JNI pending exceptions
    + S8034249: need more workarounds for suspend equivalent
    condition issue
    + S8035158: Remove dependency on sun.misc.RegexpPool and friends
    + S8035568: [macosx] Cursor management unification
    + S8035653: InetAddress.getLocalHost crash
    + S8037346: Need to terminate server process if client runs
    into problems
    + S8037909: JNI warnings in
    jdk/src/windows/native/java/nio/MappedByteBuffer.c
    + S8038075: JNI warnings in
    jdk/src/share/native/sun/misc/VMSupport.c
    + S8038348: Instance field load is replaced by wrong data Phi
    + S8039412: Stack overflow on Linux using
    DialogTypeSelection.NATIVE
    + S8040322: TextArea.replaceRange() and insert() are broken
    with setText(null)
    + S8040635: [macosx] Printing a shape filled with a texture
    doesn't work under Mac OS X
    + S8043913: remove legacy code in SPARC's
    VM_Version::platform_features
    + S8046768: com/sun/jndi/ldap/LdapTimeoutTest.java fails
    intermittently
    + S8046893: JNI exception pending in
    jdk/src/solaris/native/java/net: ExtendedOptionsImpl.c,
    PlainDatagramSocketImpl.c
    + S8046901: Check jdk/src/solaris/native/sun/nio for Parfait
    flagged uninitialized memory
    + S8049717: expose L1_data_cache_line_size for
    diagnostic/sanity checks
    + S8050478: [macosx] Cursor not updating correctly after
    closing a modal dialog
    + S8054214: JapaneseEra.getDisplayName doesn't return names if
    it's an additional era
    + S8055204: Memory leak in
    jdk/src/windows/native/java/lang/java_props_md.c
    + S8058316: lookupDefaultPrintService returns null on Solaris 11
    + S8061258: [macosx] PrinterJob's native Print Dialog does not
    reflect specified Copies or Page Ranges
    + S8064470: JNI exception pending in
    jdk/src/java/base/unix/native/libjava/FileDescriptor_md.c
    + S8066250: compiler/dependencies/MonomorphicObjectCall/
    /TestMonomorphicObjectCall.java fails product
    + S8067059: PrinterJob.pageDialog() with
    DialogSelectionType.NATIVE returns a PageFormat when
    cancelled.
    + S8071424: JCK test api/java_net/Socket/descriptions.html#Bind
    crashes on Windows
    + S8075516: Deleting a file from either the open or save
    java.awt.FileDialog hangs.
    + S8076249: NPE in AccessBridge while editing JList model
    + S8076554: [macosx] Custom Swing text components need to allow
    standard accessibility
    + S8080486: JNI exception pending in jdk/src/java.base/windows/
    /native/libnet/DualStackPlainSocketImpl.c
    + S8081219: hs_err improvement: Add event logging for class
    redefinition to the hs_err file
    + S8087144: sun/security/krb5/auto/MaxRetries.java fails with
    Retry count is -1 less
    + S8087342: Crash in
    klassItable::initialize_itable_for_interface
    + S8089573: [macosx] Incorrect char to glyph mapping printing
    on OSX 10.10
    + S8129361: ISO 4217 amendment 160
    + S8130041: TsacertOptionTest.java intermittently fails on Mac
    + S8132209: DiagnosticCommandImpl.getNotificationInfo() may
    expose internal representation
    + S8132455: com/sun/jndi/ldap/LdapTimeoutTest.java fails at
    handleNamingException
    + S8134119: Use new API to get cache line sizes
    + S8134389: Crash in HotSpot with jvm.dll+0x42b48
    ciObjectFactory::create_new_metadata
    + S8134918: C2: Type speculation produces mismatched unsafe
    accesses
    + S8135124: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8136570: Stop changing user environment variables related to
    /usr/dt
    + S8139189: VK_OEM_102 dead key detected as VK_UNDEFINED
    + S8140309: [REDO] failed: no mismatched stores, except on raw
    memory: StoreB StoreI
    + S8140525: AwtFrame::WmShowWindow() may steal focus
    + S8141370: com/sun/jndi/ldap/LdapTimeoutTest.java failed
    intermittently
    + S8143897: Weblogic12medrec assert(handler_address ==
    SharedRuntime::compute_compiled_exc_handler(nm, pc, exception,
    force_unwind, true)) failed: Must be the same
    + S8145207: [macosx] JList, VO can't access non-visible list
    items
    + S8145732: Duplicate entry in http.nonProxyHosts will ignore
    subsequent entries
    + S8145952: ISO 4217 amendment 161
    + S8145981: (fs) LinuxWatchService can reports events against
    wrong directory
    + S8146961: Fix PermGen memory leaks caused by static final
    Exceptions
    + S8147772: Update KerberosTicket to describe behavior if it
    has been destroyed and fix NullPointerExceptions
    + S8149521: automatic discovery of LDAP servers with Kerberos
    authentication
    + S8149714: [parfait] char array lengths don't match in
    awt_Font.cpp:1701
    + S8152000: Java FlightRecorder does not run on Java 8 compact
    3 profile since u65
    + S8152172: PPC64: Support AES intrinsics
    + S8152730: File Leak in CompileBroker::init_compiler_thread_log
    of compileBroker.cpp:1665.
    + S8152981: Double icons with JMenuItem
    setHorizontalTextPosition on Win 10
    + S8153134: Infinite loop in handle_wrong_method in jmod
    + S8153176: ParOldGC: Use correct TaskQueueSet for
    ParallelTaskTerminator in marking.
    + S8153267: nmethod's exception cache not multi-thread safe
    + S8153925: (fs) WatchService hangs on GetOverlappedResult and
    locks directory (win)
    + S8154945: Enable 8130150 and 8081778 intrinsics by default
    + S8155691: Update GIFlib library to the latest up-to-date
    + S8155781: C2: opaque unsafe access triggers an assert
    + S8156116: [macosx] two JNI locals to delete in AWTWindow.m,
    CGraphicsEnv.m
    + S8156723: JVM crash at
    sun.java2d.windows.GDIBlitLoops.nativeBlit
    + S8157035: Use stronger algorithms and keys for JSSE testing
    + S8157181: Compilers accept modification of final fields
    outside initializer methods
    + S8157184: java/lang/invoke/LFCaching/LFMultiThreadCachingTest.java
    failed with a fatal error
    + S8157548: JVM crashes sometimes while starting
    + S8157665: ProblemList.txt needs to be updated as 7041639
    closed
    + S8158325: [macosx] Memory leak in com.apple.laf.ScreenMenu
    + S8158356: SIGSEGV when attempting to rotate BufferedImage
    using AffineTransform by NaN degrees
    + S8158639: C2 compilation fails with SIGSEGV
    + S8159035: CTSMode.java test crashed due to unhandled case of
    cipher length value as 0
    + S8159696: java.beans.MethodRef#get throws NullPointerException
    + S8160024: jdb returns invalid argument count if first
    parameter to Arrays.asList is null
    + S8160119: Utils.tryFindJvmPid sometimes find incorrect pid
    + S8160174: java.net.NetworkInterface - fixes and improvements
    for network interface listing
    + S8160370: System.getProperty("os.version") returns "Unknown"
    on Mac
    + S8160551: assert(c == Bytecodes::_putfield) failed: must be
    putfield
    + S8160570: [macosx] modal dialog can skip the activation/focus
    events
    + S8160623: [PIT] Exception running
    java/awt/event/KeyEvent/KeyChar/KeyCharTest.java
    + S8160664: JVM crashed with font manager on Solaris 12
    + S8160696: IllegalArgumentException: adding a component to a
    container on a different GraphicsDevice
    + S8160893: [macosx] JMenuItems in JPopupMenu are not accessible
    + S8160913: [TEST_BUG] javax/management/security/SecurityTest.java
    fails due to missing keyStore file
    + S8160941: "text/uri-list" dataflavor concats the first two
    strings
    + S8161039: System.getProperty("os.version") returns incorrect
    version number on Mac
    + S8161664: Memory leak in com.apple.laf.AquaProgressBarUI
    removed progress bar still referenced
    + S8161733: [parfait] Memory leak in imageioJPEG.c:2803
    + S8161742: [parfait] Uninitialised memory in isXTestAvailable
    of awt_Robot.c:65
    + S8161761: [parfait] 2 JNI exception pending defect groups in
    GraphicsPrimitiveMgr.c
    + S8162101: C2: Handle "wide" aliases for unsafe accesses
    + S8162488: JDK should be updated to use LittleCMS 2.8
    + S8162496: missing precedence edge for anti_dependence
    + S8162598: XSLTC transformer swallows empty namespace
    declaration which is needed to undeclare default namespace
    + S8162603: Unrecognized VM option 'UseCountedLoopSafepoints'
    + S8162766: Unsafe_DefineClass0 accesses raw oops while in
    _thread_in_native
    + S8162795: [REDO] MemberNameTable doesn't purge stale entries
    + S8162796: [macosx] LinearGradientPaint and
    RadialGradientPaint are not printed on OS X.
    + S8163104: Unexpected NPE still possible on some Kerberos
    ticket calls
    + S8163181: Further improvements for Unix NetworkInterface
    native implementation
    + S8163518: Integer overflow in StringBufferInputStream.read()
    and CharArrayReader.read/skip()
    + S8163877: Tests added in JDK-8163518 fail on some platforms
    + S8163896: Finalizing one key of a KeyPair invalidates the
    other key
    + S8163945: Honor Number type hint in toPrimitive on Numbers
    + S8163969: Cyclic interface initialization causes JVM crash
    + S8163979: [macosx] Chinese text shows as Latin w/ openVanilla
    input method
    + S8164002: Add a new CPU family (S_family) for SPARC S7 and
    above processors
    + S8164119: MoveToOtherScreenTest fails due wrong key attribute
    + S8164366: ZoneOffset.ofHoursMinutesSeconds() does not reject
    invalid input
    + S8164501: Uninitialised memory in byteArrayToPacket of
    SharedMemoryConnection.c
    + S8164508: unexpected profiling mismatch in c1 generated code
    + S8164784: ISO 4217 amendment 162
    + S8164846: CertificateException missing cause of underlying
    exception
    + S8165153: Crash in rebuild_cpu_to_node_map
    + S8165243: Base64.Encoder.wrap(os).write(byte[],int,int) with
    incorrect arguments should not produce output
    + S8165320: Small flaw when integrating 8160174 to JDK8
    + S8165428: Security Warning dialog should be always on the top
    when multiple applets with APPLICATION_MODAL dialog launched
    in a browser
    + S8165482: java in ldoms, with cpu-arch=generic has problems
    + S8165717: [macosx] Various memory leaks in jdk9
    + S8165751: NPE hit with java.security.debug=provider
    + S8165829: Android Studio 2.x crashes with NPE at
    sun.lwawt.macosx.CAccessibility.getAccessibleIndexInParent
    + S8165988: Test JarURLConnectionUseCaches.java fails at
    windows: failed to clean up files after test
    + S8166248: tools/pack200/Pack200Test.java fails on Win32:
    Could not reserve enough space
    + S8166507: ConcurrentSkipListSet.clear() can leave the Set in
    an invalid state
    + S8166747: Add invalid network / computer name cases to
    isReachable known failure switch
    + S8166799: ASSEMBLY_EXCEPTION contains historical company name
    + S8166840: Synthetic bridge constructor in ArrayList$Itr
    blocks inlining
    + S8166872: GPL header in
    /hotspot/src/share/vm/gc_implementation/g1/g1RemSetSummary.cpp
    + S8166902: Nested object literal property maps not reset in
    optimistic recompilation
    + S8167102: [macosx] PrintRequestAttributeSet breaks page size
    set using PageFormat
    + S8168115: Remove and retag jdk8u122-b03 in 8u repo
    + S8168364: [macosx] Delete unused class NSPrintinfo
    + S8168373: don't emit conversions for symbols outside their
    lexical scope
    + S8168405: Pending exceptions in java.base/windows/native
    + S8168751: Two "Direct Clip" threads are created to play the
    same "AudioClip" object, what makes clip sound corrupted
    + S8168914: Crash in ClassLoaderData/JNIHandleBlock::oops_do
    during concurrent marking
    + S8169056: StringIndexOutOfBoundsException in Pattern.compile
    with CANON_EQ flag
    + S8169112: java.lang.VerifyError: (class: GregorSamsa, method:
    template-bash signature: (LGregorSamsa8;)V) Register 10
    contains wrong type
    + S8169229: RSAClientKeyExchange debug info is incorrect
    + S8169355: Diacritics input works incorrectly on Windows if
    Spanish (Latin American) keyboard layout is used
    + S8169481: StackOverflowError on start when parsing PAC file
    to autodetect Proxy settings
    + S8169556: Wrapping of FileInputStream's native skip and
    available methods
    + S8169865: Downport minor fixes in java.net native code from
    JDK 9 to JDK 8
    + S8170153: PPC64/s390x/aarch64: Poor StrictMath performance
    due to non-optimized compilation
    + S8170278: ticket renewal won't happen with debugging turned on
    + S8170409: CMS: Crash in
    CardTableModRefBSForCTRS::process_chunk_boundaries
    + S8170465: JNI exception pending in jni_util.c:190
    + S8170466: JNI exception pending in jni_util.c:190
    + S8170536: Uninitialised memory in set_uintx_flag of
    attachListener.cpp
    + S8170552: [macosx] Wrong rendering of diacritics on macOS
    + S8170565: JSObject call() is passed undefined for the
    argument 'thiz'
    + S8170578: CUPS Printing is broken with Ubuntu 16.10 (CUPS 2.2)
    + S8170594: &gt;&gt;&gt;=0 generates invalid bytecode for BaseNode LHS
    + S8170913: Java "1.8.0_112" on Windows 10 displays different
    characters for EUDCs from ones created in eudcedit.exe.
    + S8170950: Text is displayed in bold when fonts are installed
    into symlinked folder
    + S8170977: SparseArrayData should not grow its underlying
    dense array data
    + S8171151: JDK8u ProblemList.txt Updates
    + S8171155: Scanning method file for initialized final field
    updates can fail for non-existent fields
    + S8171194: Exception "Duplicate field name&amp;signature in class
    file" should report the name and signature of the field
    + S8171219: Missing checks in sparse array shift()
    implementation
    + S8171808: Performance problems in dialogs with large tables
    when JAB activated
    + S8171849: Collection and Queue conversions not prioritized
    for Arrays
    + S8171909: [PIT] on Windows, failure of
    java/awt/Dialog/DialogAboveFrame/DialogAboveFrameTest.java
    + S8171952: [macosx] AWT_Modality/Automated/ModalExclusion/
    /NoExclusion/ModelessDialog test fails as DummyButton on
    Dialog did not gain focus when clicked.
    + S8172053: (ppc64) Downport of 8170153 breaks build on
    linux/ppc64 (big endian)
    + S8172145: C2: anti dependence missed because store hidden by
    membar
    + S8173373: C1: NPE is thrown instead of LinkageError when
    accessing inaccessible field on NULL receiver
    + S8173423: Wrong display name for supplemental Japanese era
    + S8173581: performance regression in
    com/sun/crypto/provider/OutputFeedback.java
    + S8173654: Regression since 8u60: System.getenv doesn't return
    env var set in JNI code
    + S8173664: Typo in
    https://java.net/downloads/heap-snapshot/hprof-binary-format.html
    + S8173853: IllegalArgumentException in
    java.awt.image.ReplicateScaleFilter
    + S8173876: Fast precise scrolling and DeltaAccumulator fix for
    macOS Sierra 10.12.2
    + S8174736: [JCP] [Mac]Cannot launch JCP on Mac os with
    language set to "Chinese, Simplified" while region is not China
    + S8174779: Locale issues with Mac 10.12
    + S8175025: The copyright section in the test/java/awt/font/
    /TextLayout/DiacriticsDrawingTest.java should be updated
    + S8175131: sun.rmi.transport.tcp.TCPChannel.createConnection
    close connection on timeout
    + S8175345: Reported null pointer dereference defect groups
    + S8175915: NullPointerException from JComboBox and JList when
    Accessibility enabled
    + S8176287: [macosx] The print test crashed with Nimbus L&amp;F
    + S8176490: [macosx] Sometimes NSWindow.isZoomed hangs
    + S8176511: JSObject property access is broken for numeric keys
    outside the int range
    + S8176530: JDK support for JavaFX modal print dialogs
    + S8177095: Range check dependent CastII/ConvI2L is prematurely
    eliminated
    + S8177450: javax.swing.text.html.parser.Parser parseScript
    ignores a character after commend end
    + S8177678: Overstatement of universality of
    Era.getDisplayName() implementation
    + S8177776: Create an equivalent test case for JDK9's
    SupplementalJapaneseEraTest
    + S8177817: Remove assertions in 8u that were removed by
    8056124 in 9.
    + S8179515: Class java.util.concurrent.ThreadLocalRandom fails
    to Initialize when using SecurityManager
    + S8180511: Null pointer dereference in Matcher::ReduceInst()
    + S8180565: Null pointer dereferences of ConstMethod::method()
    + S8180575: Null pointer dereference in LoadNode::Identity()
    + S8180576: Null pointer dereference in Matcher::xform()
    + S8180617: Null pointer dereference in
    InitializeNode::complete_stores
    + S8180660: missing LNT entry for finally block
    + S8180813: Null pointer dereference of CodeCache::find_blob()
    result
    + S8180934: PutfieldError failed with
    UnsupportedClassVersionError
    + S8180949: Correctly handle exception in
    TCPChannel.createConnection
    + S8181191: getUint32 returning Long
    + S8181192: [macos] javafx.print.PrinterJob.showPrintDialog()
    hangs on macOS
    + S8181205: JRE fails to load/register security providers when
    started from UNC pathname
    + S8181500: [TESTBUG] com/sun/jdi/LineNumberInfo.java fails
    with jArrayIndexOutOfBoundsException
    + S8182672: Java 8u121 on Linux intermittently returns null for
    MAC address
    + S8185779: 8u152 L10n resource file update
    + S8186532: 8u152 L10n resource file update md20
  * Import of OpenJDK 8 u161 build 12
    + S8035105: DNS provider cleanups
    + S8137255: sun/security/provider/NSASuiteB/
    /TestDSAGenParameterSpec.java timeouts intermittently
    + S8140436: Negotiated Finite Field Diffie-Hellman Ephemeral
    Parameters for TLS
    + S8148108: Disable Diffie-Hellman keys less than 1024 bits
    + S8148421, PR3504: Transport Layer Security (TLS) Session Hash
    and Extended Master Secret Extension
    + S8154344: sun/security/pkcs11/KeyAgreement/SupportedDHKeys.java
    fails on solaris
    + S8156502: Use short name of
    SupportedEllipticCurvesExtension.java
    + S8158116: com/sun/crypto/provider/KeyAgreement/
    /SupportedDHParamGens.java failed with timeout
    + S8159240: XSOM parser incorrectly processes type names with
    whitespaces
    + S8159377: JMX Connections need white-list filters
    + S8161598: Kitchensink fails: assert(nm-&gt;insts_contains(original_pc))
    failed: original PC must be in nmethod/CompiledMethod
    + S8163237: Restrict the use of EXPORT cipher suites
    + S8166362: [TEST_BUG] test sun/net/www/http/HttpClient/B8025710.java
    failing with cert error in 8u121 b01
    + S8169944: sun/security/tools tests fail with CompilationError
    + S8170157: Enable unlimited cryptographic policy by default in
    OracleJDK
    + S8170245: [TEST_BUG] Cipher tests fail when running with
    unlimited policy
    + S8170911: 8170823 changes in 8u131 causing signature-test
    failure in jck runtime8b suite
    + S8171262: Stability fixes for lcms
    + S8172297: In java 8, the marshalling with JAX-WS does not
    escape carriage return
    + S8173631: Backout three hotspot fixes from 8u121-bpr repo
    + S8176536: Improved algorithm constraints checking
    + S8177144: [TEST BUG] sun/net/www/http/HttpClient/B8025710.java
    should run in ovm mode
    + S8177750: Forgot TestSocketFactory testcase in 8163958
    changeset
    + S8178536: OOM ERRORS + SERVICE-THREAD TAKES A PROCESSOR TO
    100%
    + S8178728: Check the AlgorithmParameters in algorithm
    constraints
    + S8179223: Integrate 8176490 into 8u131-bpr repo
    + S8181439: Test the jdk.tls.namedGroups System Property
    + S8181975: Run sun/security/pkcs11 tests on Mac
    + S8182614: Backout JDK-8140436 from 8u161
    + S8183939: Import JDK-8182672 into 8u141-bpr repo
    + S8184016: Text in native popup is not always updated with
    Sogou IME
    + S8185572: Enable AssumeMP by default on SPARC machines
    + S8185628: Backport jdk/test/lib/testlibrary/CompilerUtils.java
    to jdk8u which is helpful in test development
    + S8185719: rmi TestSocketFactory does not flush
    + S8185909: Disable JARs signed with DSA keys less than 1024
    bits
    + S8186539: [testlibrary] TestSocketFactory should allow
    triggers before match/replace
    + S8187482: Backout JDK-8159377
    + S8187556: Backout of a fix reintroduced a dependency that had
    since been removed
    + S8188880: A JAXB JCK test failure found after 8186080
    + S8190258, PR3499: (tz) Support tzdata2017c
    + S8190259, PR3499: test tck.java.time.zone.TCKZoneRules is
    broken by tzdata2017c
    + S8190266: closed/java/awt/ComponentOrientation/WindowTest.java
    throws java.util.MissingResourceException.
    + S8190449: sun/security/pkcs11/KeyPairGenerator/TestDH2048.java
    fails on Solaris x64 5.10
    + S8190497: DHParameterSpec.getL() returns zero after
    JDK-8072452
    + S8190541: 8u161 L10n resource file update
    + S8190789: sun/security/provider/certpath/LDAPCertStore/
    TestURICertStoreParameters.java fails after JDK-8186606
    + S8191137, PR3503: keytool fails to format resource strings
    for keys for some languages after JDK-8171319
    + S8191340: 8ux linux builds failing - com.sun.org.apache.xalan.
    internal.xsltc.trax.TransformerFactoryImpl (unknown type)
    + S8191352: Remove 8u161-b07 and 8u162-b07 tag to include
    8191340 for b07
    + S8191907: PPC64 part of JDK-8174962: Better interface
    invocations
    + S8192793: 8u161 L10n resource file update md20
    + S8193683: Increase the number of clones in the CloneableDigest
  * Backports
    + S8165996, PR3506: PKCS11 using NSS throws an error regarding
    secmod.db when NSS uses sqlite
    + S8170523, PR3506: Some PKCS11 test cases are ignored with
    security manager
    + S8187667, PR3517: Disable deprecation warning for readdir_r
    + S8189789, PR3530: tomcat gzip-compressed response bodies
    appear to be broken in update 151
    + S8194739, PR3520: Zero port of 8174962: Better interface
    invocations
    + S8194828, PR3520: Fix for 8194739: Zero port of 8174962:
    Better interface invocations
    + S8195837, PR3522: (tz) Upgrade time-zone data to tzdata2018c
    + S8196516, PR3523: [REDO] [linux] libfontmanager should be
    linked against headless awt library
    + S8196978, PR3517: JDK-8187667 fails on GCC 4.4.7 as found on
    RHEL 6
  * Bug fixes
    + PR3489: Incomplete reading of directory containing tzdb.dat
    + PR3501: Revert 8165320 so as not to revert the work of
    8034174 (PR2290)
    + PR3526: configure fails to parse GCC version
  * AArch64 port
    + S8164113, PR3519: AArch64: follow-up the fix for 8161598
    + S8193133, PR3519: Assertion failure because 0xDEADDEAD can be
    in-heap
    + S8194686, PR3519: AArch64 port of 8174962: Better interface
    invocations
    + S8195859, PR3519: AArch64: vtableStubs gtest fails after
    8174962
    + S8196136, PR3519: AArch64: Correct register use in patch for
    JDK-8194686
    + S8196221, PR3519: AArch64: Mistake in committed patch for
    JDK-8195859
    + PR3519: Fix functions with missing return value.
    + PR3519: Fix further functions with a missing return value.
  * AArch32 port
    + S8140584: [aarch32] nmethod::oops_do_marking_epilogue always
    runs verification code
    + S8174962: [aarch32] Better interface invocations
  * Shenandoah
    + Fix post-CPU merge Shenandoah regressions
- Removed patch:
  * tzdb_dat.patch
    + integrated upstream
- Added patch:
  * aarch64.patch
    + fix aarch64 build</changelog>
  <changelog author="fstrba@suse.com" date="1522324800">- Added patch:
  * no-return-in-nonvoid-function.patch
    + fix broken build with gcc8 (bsc#1087066)</changelog>
  <changelog author="fstrba@suse.com" date="1527854400">- Update to version jdk8u171 (icedtea 3.8.0)
  * Security fixes
    + S8180881: Better packaging of deserialization
    + S8182362: Update CipherOutputStream Usage
    + S8183032: Upgrade to LittleCMS 2.9
    + S8189123: More consistent classloading
    + S8189969, CVE-2018-2790, bsc#1090023: Manifest better manifest
    entries
    + S8189977, CVE-2018-2795, bsc#1090025: Improve permission
    portability
    + S8189981, CVE-2018-2796, bsc#1090026: Improve queuing
    portability
    + S8189985, CVE-2018-2797, bsc#1090027: Improve tabular data
    portability
    + S8189989, CVE-2018-2798, bsc#1090028: Improve container
    portability
    + S8189993, CVE-2018-2799, bsc#1090029: Improve document
    portability
    + S8189997, CVE-2018-2794, bsc#1090024: Enhance keystore
    mechanisms
    + S8190478: Improved interface method selection
    + S8190877: Better handling of abstract classes
    + S8191696: Better mouse positioning
    + S8192025, CVE-2018-2814, bsc#1090032: Less referential
    references
    + S8192030: Better MTSchema support
    + S8192757, CVE-2018-2815, bsc#1090033: Improve stub classes
    implementation
    + S8193409: Improve AES supporting classes
    + S8193414: Improvements in MethodType lookups
    + S8193833, CVE-2018-2800, bsc#1090030: Better RMI connection
    support
  * New features
    + PR3493: Run AES test to test intrinsics
  * Import of OpenJDK 8 u162 build 12
    + S4354680: Runtime.runFinalization() silently clears
    interrupted flag in the calling thread
    + S6618335: ThreadReference.stop(null) throws NPE instead of
    InvalidTypeException
    + S6651256: jstack: DeleteGlobalRef method call doesn't lead to
    descreasing of global refs count shown by jstack
    + S6656031: SA: jmap -permstat number of classes is off by 1
    + S6977426: sun/tools tests can intermittently fail to find
    app's Java pid
    + S6988950: JDWP exit error JVMTI_ERROR_WRONG_PHASE(112)
    + S7124271: [macosx] RealSync test failure
    + S7162125: [macosx] A font has different behaviour for
    ligatures depending on its creation mod
    + S8023667: SA: ExceptionBlob and other C2 classes not
    available in client VM
    + S8031661: java/net/Authenticator/B4769350.java failed
    intermittently
    + S8046778: Better error messages when starting JMX agent via
    attach or jcmd
    + S8066185: VM crashed with SIGSEGV
    VirtualMemoryTracker::add_reserved_region
    + S8072428: Enable UseLoopCounter ergonomically if
    on-stack-replacement is enabled
    + S8073670: TypeF::eq and TypeD::eq do not handle NaNs correctly
    + S8074812: More specific error message when the .java_pid
    well-known file is not secure
    + S8078269: JTabbedPane UI Property
    TabbedPane.tabAreaBackground no longer works
    + S8080504: [macosx] SunToolkit.realSync() may hang
    + S8087291: InitialBootClassLoaderMetaspaceSize and
    CompressedClassSpaceSize should be checked consistent from
    MaxMetaspaceSize
    + S8132374: AIX: fix value of os.version property
    + S8134103: JVMTI_ERROR_WRONG_PHASE(112): on checking for an
    interface
    + S8139218: Dialog that opens and closes quickly changes focus
    in original focusowner
    + S8147002: [macosx] Arabic character cannot be rendered on
    MacOS X
    + S8148786: xml.tranform fails on x86-64
    + S8155197: Focus transition issue
    + S8157896: TestDSAGenParameterSpec.java test fails with timeout
    + S8158633: BASE64 encoded cert not correctly parsed with UTF-16
    + S8159432: [PIT][macosx] StackOverflow in
    closed/java/awt/Dialog/DialogDeadlock/DialogDeadlockTest
    + S8162530: src/jdk.management/share/native/libmanagement_ext/
    /GcInfoBuilder.c doesn't handle JNI exceptions properly
    + S8164954: split_if creates empty phi and region nodes
    + S8166742: SIGFPE in C2 Loop IV elimination
    + S8169961: Memory leak after debugging session
    + S8172751: OSR compilation at unreachable bci causes C1 crash
    + S8175340: Possible invalid memory accesses due to
    ciMethodData::bci_to_data() returning NULL
    + S8177026: jvm.dll file version not updated since 8u72
    + S8177414: Missing key events on Mac Os
    + S8177958: Possible uninitialized char* in
    vm_version_solaris_sparc.cpp
    + S8178047: Aliasing problem with raw memory accesses
    + S8179086: java.time.temporal.ValueRange has poor hashCode()
    + S8180370: Characters are skipped on input of Korean text on
    OS X
    + S8180855: Null pointer dereference in OopMapSet::all_do of
    oopMap.cpp:394
    + S8181659: Create an alternative fix for JDK-8167102, whose
    fix was backed out
    + S8181786: Extra runLater causes impossible states to be
    possible using javafx.embed.singleThread=true
    + S8182402: Tooltip for Desktop button is in English when
    non-English locale is set
    + S8182996: Incorrect mapping Long type to JavaScript equivalent
    + S8184009: Missing null pointer check in
    InterpreterRuntime::update_mdp_for_ret()
    + S8184271: Time related C1 intrinsics produce inconsistent
    results when floating around
    + S8184328: JDK 8u131 socketRead0 hang at SSL read
    + S8184893: jdk8u152 b06 : issues with nashorn when running
    kraken benchmarks
    + S8185346: Relax RMI Registry Serial Filter to allow arrays of
    any type
    + S8187023: Cannot read pkcs11 config file in UTF-16 environment
    + S8189918: Remove Trailing whitespace from file while syncing
    8u into 8u162-b03
    + S8190280: [macos] Font2DTest demo started failing for Arabic
    range from JDK 8 u162 b01 on Mac
    + S8190542: 8u162 L10n resource file update
    + S8192794: 8u162 L10n resource file update md20
  * Import of OpenJDK 8 u171 build 11
    + S8054213: Class name repeated in output of Type.toString()
    + S8068778: [TESTBUG] CompressedClassSpaceSizeInJmapHeap.java
    fails if SA not available
    + S8150530: Improve javax.crypto.BadPaddingException messages
    + S8153955: increase java.util.logging.FileHandler MAX_LOCKS
    limit
    + S8169080: Improve documentation examples for crypto
    applications
    + S8175075: Add 3DES to the default disabled algorithm security
    property
    + S8179665: [Windows] java.awt.IllegalComponentStateException:
    component must be showing on the screen to determine its
    location
    + S8186032: Disable XML Signatures signed with EC keys less
    than 224 bits
    + S8186441: Change of behavior in the getMessage () method of
    the SOAPMessageContextImpl class
    + S8187496: Possible memory leak in
    java.apple.security.KeychainStore.addItemToKeychain
    + S8189851: [TESTBUG]
    runtime/RedefineTests/RedefineInterfaceCall.java fails
    + S8191358: Restore TSA certificate expiration check
    + S8191909: Nightly failures in nashorn suite
    + S8192789: Avoid using AtomicReference in
    sun.security.provider.PolicyFile
    + S8194259: keytool error: java.io.IOException: Invalid secret
    key format
    + S8196952: Bad primeCertainty value setting in
    DSAParameterGenerator
    + S8197030: Perf regression on all platforms with 8u171-b03 -
    early lambda use
    + S8198494: 8u171 and 8u172 - Build failure on non-SE Linux
    Platforms
    + S8198662: Incompatible internal API change in JDK8u161:
    signature of method exportObject()
    + S8198963: Fix new rmi property name
    + S8199001: [TESTBUG] RMIConnectionFilterTest.java test fails
    in compilation
    + S8199141: Windows: new warning messaging for JRE installer UI
    in non-MOS cases
    + S8200314: JDK 8u171 l10n resource file update - msg drop 40
  * Backports
    + S8062808, PR3548: Turn on the -Wreturn-type warning
    + S8141570, PR3548: Fix Zero interpreter build for
  - -disable-precompiled-headers
    + S8143245, PR3548: Zero build requires disabled warnings
    + S8165489, PR3589: Missing G1 barrier in
    Unsafe_GetObjectVolatile
    + S8171000, PR3542, RH1402819: Robot.createScreenCapture()
    crashes in wayland mode
  _ S8184309, PR3596: Build warnings from GCC 7.1 on Fedora 26
    + S8185723, PR3553: Zero: segfaults on Power PC 32-bit
    + S8186461, PR3557: Zero's atomic_copy64() should use SPE
    instructions on linux-powerpcspe
    + S8187577, PR3578: JVM crash during gc doing concurrent marking
    + S8197429, PR3546, RH1536622: Increased stack guard causes
    segfaults on x86-32
    + S8197546, PR3542: Fix for 8171000 breaks Solaris + Linux
    builds
    + S8197981, PR3548: Missing return statement in
    __sync_val_compare_and_swap_8
    + S8200556, PR3566: AArch64: assertion failure in slowdebug
    builds
    + S8201509, PR3579: Zero: S390 31bit atomic_copy64 inline
    assembler is wrong
  * Bug fixes
    + S8199936, PR3533: HotSpot generates code with unaligned
    stack, crashes on SSE operations
    + S8199936, PR3591: Fix for bug 3533 doesn't add -mstackrealign
    to JDK code
    + PR3539, RH1548475: Pass EXTRA_LDFLAGS to HotSpot build
    + PR3549: Desktop file doesn't reference versioned icon
    + PR3550: Additional category used in jconsole.desktop.in is
    incorrect
    + PR3559: Use ldrexd for atomic reads on ARMv7.
    + PR3575, RH1567204: System cacerts database handling should
    not affect jssecacerts
    + PR3592: Skip AES test on AArch64 due to VM crash
    + PR3593: s390 needs to use '%z' format specifier for size_t
    arguments as size_t != int
    + PR3594: Patch for bug 3593 breaks Shenandoah build
    + PR3597: Potential bogus -Wformat-overflow warning with
  - Wformat enabled
  * Shenandoah
    + PR3573: Fix TCK crash with Shenandoah
    + Remove oop cast in oopMap.cpp again, as oopDesc::operator==
    has additional checking in Shenandoah.
    + Fix new code for Shenandoah after the 8u171 merge
    + Revert accidental OpSpinWait matching
    + UseBiasedLocking should be disabled only for Shenandoah
  * AArch32 port
    + PR3548: Add missing return values for AArch32 port
- Removed patches:
  * no-return-in-nonvoid-function.patch
  * zero-atomic_copy64.patch
    + fixed upstream
  * java-1_8_0-openjdk-gcc6.patch
    + not needed any more
- Modified patch:
  * java-1_8_0-openjdk-suse-desktop-files.patch
    + rediff to changed context</changelog>
</package>
<package pkgid="70e72f8a192d7d308c8b0a82a9341b3d81121a96ff79280aedd2f21d196bcd81" name="jeos-firstboot" arch="noarch">
  <version epoch="0" ver="0.0+git20180525.280836a" rel="lp150.2.3.1"/>
  <changelog author="mkravec@opensuse.org" date="1472731200">- Update to version 0.0+git20160720.7177a42:
  * add tool to generate zypp repos from control.xml
  * fix copyright holder
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation</changelog>
  <changelog author="mkravec@opensuse.org" date="1472731201">- Update to version 0.0+git20160901.d14f112:
  * Removed jeos-tool</changelog>
  <changelog author="mkravec@suse.com" date="1473854400">- Update to version 0.0+git20160720.7177a42:
  * add tool to generate zypp repos from control.xml
  * fix copyright holder
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation</changelog>
  <changelog author="mkravec@suse.com" date="1474027200">- Update to version 0.0+git20160915.bd90972:
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation
  * Use jeos-tool to add repositories
  * Add comments</changelog>
  <changelog author="mkravec@suse.com" date="1474027201">- Update to version 0.0+git20160916.ce20b59:
  * Fix jeos-tool typo</changelog>
  <changelog author="lnussel@suse.de" date="1480507200">- Update to version 0.0+git20161130.db63ad6:
  * Add LICENSE
  * Add README
  * Move ifcfg-eth0 to examples
  * Don't package service symlinks</changelog>
  <changelog author="lnussel@suse.de" date="1484827200">- add license to file list</changelog>
  <changelog author="fvogt@suse.com" date="1488888000">- Update to version 0.0+git20170307.f650718:
  * Add [Install] section to jeos-firstboot.service</changelog>
  <changelog author="fvogt@suse.com" date="1489147200">- Update to version 0.0+git20170310.18283bf:
  * Replace jeos-tool with jeos-add-repos script
  * Move jeos-add-repos to sbin</changelog>
  <changelog author="fvogt@suse.com" date="1489752000">- Update to version 0.0+git20170317.c20e917:
  * Use same dependencies as systemd-firstboot.service</changelog>
  <changelog author="lnussel@suse.de" date="1499169600">- Update to version 0.0+git20170629.77ff28f:
  * Add udev-settle to wait all udev rules to be run
  * Provide default values for LINES and COLUMNS
  * Check if booted through EFI to fix yast bootloader
  * fixes after review</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1508932800">- Update to version 0.0+git20171024.4c4ec65:
  * Add require for snapshots mount point
  * Initial network configuration fixes bsc#1061829</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1510574400">- Update to version 0.0+git20171113.02e973c:
  * change initial snapshot number to 2
  * Run dracut before initial snapshot</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511524800">- Update to version 0.0+git20171124.eead2bd:
  * Change default values for ifcfg files bsc#1069782</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515672000">- Update to version 0.0+git20180111.c39e31f:
  * append to vconsole.conf instead of overwriting</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1520942400">- Update to version 0.0+git20180313.313b2ea:
  * Remove dracut initrd regeneration, bsc#1084161
  * Remove obsolete kiwi hook, bsc#1084160</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1523016000">- Update to version 0.0+git20180406.e01f473:
  * Setup quota for btrfs, fix bsc#1087079</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1524744000">- Update to version 0.0+git20180425.76e5ff7:
  * Turn off systemd status output while jeos-firstboot is running</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526472000">- Update to version 0.0+git20180516.d5031a7:
  * Run sevice before systemd-tmpfiles, bsc#1092132</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Update to version 0.0+git20180525.280836a:
  * Rework locale selection
  * Map console fonts for non-latin locale,bsc#1094346
  * Also check for license filenames with the locale's UTF-8 suffix stripped</changelog>
</package>
<package pkgid="29a80ca70d5c3a454f20ee1b73ffdcd026824211ca840abaa98fbffb83186569" name="jeos-firstboot" arch="src">
  <version epoch="0" ver="0.0+git20180525.280836a" rel="lp150.2.3.1"/>
  <changelog author="mkravec@opensuse.org" date="1472731200">- Update to version 0.0+git20160720.7177a42:
  * add tool to generate zypp repos from control.xml
  * fix copyright holder
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation</changelog>
  <changelog author="mkravec@opensuse.org" date="1472731201">- Update to version 0.0+git20160901.d14f112:
  * Removed jeos-tool</changelog>
  <changelog author="mkravec@suse.com" date="1473854400">- Update to version 0.0+git20160720.7177a42:
  * add tool to generate zypp repos from control.xml
  * fix copyright holder
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation</changelog>
  <changelog author="mkravec@suse.com" date="1474027200">- Update to version 0.0+git20160915.bd90972:
  * conflict with emergency.service
  * adjust for new kiwi
  * rename snapshot 1 to match normal SLE's
  * Create read-only snapshots
  * Set dialog heigh
  * Set kernel logging to warning
  * Apply changes from Matthias and disable timeline creation
  * Use jeos-tool to add repositories
  * Add comments</changelog>
  <changelog author="mkravec@suse.com" date="1474027201">- Update to version 0.0+git20160916.ce20b59:
  * Fix jeos-tool typo</changelog>
  <changelog author="lnussel@suse.de" date="1480507200">- Update to version 0.0+git20161130.db63ad6:
  * Add LICENSE
  * Add README
  * Move ifcfg-eth0 to examples
  * Don't package service symlinks</changelog>
  <changelog author="lnussel@suse.de" date="1484827200">- add license to file list</changelog>
  <changelog author="fvogt@suse.com" date="1488888000">- Update to version 0.0+git20170307.f650718:
  * Add [Install] section to jeos-firstboot.service</changelog>
  <changelog author="fvogt@suse.com" date="1489147200">- Update to version 0.0+git20170310.18283bf:
  * Replace jeos-tool with jeos-add-repos script
  * Move jeos-add-repos to sbin</changelog>
  <changelog author="fvogt@suse.com" date="1489752000">- Update to version 0.0+git20170317.c20e917:
  * Use same dependencies as systemd-firstboot.service</changelog>
  <changelog author="lnussel@suse.de" date="1499169600">- Update to version 0.0+git20170629.77ff28f:
  * Add udev-settle to wait all udev rules to be run
  * Provide default values for LINES and COLUMNS
  * Check if booted through EFI to fix yast bootloader
  * fixes after review</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1508932800">- Update to version 0.0+git20171024.4c4ec65:
  * Add require for snapshots mount point
  * Initial network configuration fixes bsc#1061829</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1510574400">- Update to version 0.0+git20171113.02e973c:
  * change initial snapshot number to 2
  * Run dracut before initial snapshot</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1511524800">- Update to version 0.0+git20171124.eead2bd:
  * Change default values for ifcfg files bsc#1069782</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1515672000">- Update to version 0.0+git20180111.c39e31f:
  * append to vconsole.conf instead of overwriting</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1520942400">- Update to version 0.0+git20180313.313b2ea:
  * Remove dracut initrd regeneration, bsc#1084161
  * Remove obsolete kiwi hook, bsc#1084160</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1523016000">- Update to version 0.0+git20180406.e01f473:
  * Setup quota for btrfs, fix bsc#1087079</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1524744000">- Update to version 0.0+git20180425.76e5ff7:
  * Turn off systemd status output while jeos-firstboot is running</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526472000">- Update to version 0.0+git20180516.d5031a7:
  * Run sevice before systemd-tmpfiles, bsc#1092132</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Update to version 0.0+git20180525.280836a:
  * Rework locale selection
  * Map console fonts for non-latin locale,bsc#1094346
  * Also check for license filenames with the locale's UTF-8 suffix stripped</changelog>
</package>
<package pkgid="3173b051f74238621c9cd77fb74cd2cf81e7a858859859186f2f85c95dd611d7" name="jhead" arch="src">
  <version epoch="0" ver="3.00" rel="lp150.3.3.1"/>
  <changelog author="mcihar@suse.cz" date="1107864000">- update to 2.3</changelog>
  <changelog author="sbrabec@suse.cz" date="1122638400">- Updated to version 2.4.</changelog>
  <changelog author="sbrabec@suse.cz" date="1136894400">- Updated to version 2.5.</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="sbrabec@suse.cz" date="1161345600">- Updated to version 2.6:
  * Compilation and bug fixes
  * Fix shutter speed display in '-c' mode for very long shutter
    speeds
  * Fix a bug in autorot when rotating filenames with spaces in
    them.
  * Improved handling of corrupt exif linkages in exif header.
  * Added -a (rename associated files) options.</changelog>
  <changelog author="prusnak@suse.cz" date="1166270400">- fixed comparison with string literal (strcmp.patch) [#226477]</changelog>
  <changelog author="sbrabec@suse.cz" date="1186401600">- Updated to version 2.7:
  * Remove maximum jpeg sections limit
  * Added -ds option
  * On clearing rotation, clear the image and the optional
    thumbnail rotation tags.
  * Add -mkexif option to make a new exif header.</changelog>
  <changelog author="sbrabec@suse.cz" date="1195214400">- Updated to version 2.8:
  * Added IPTC handling
  * Added -q option
  * Fix handling of corrupted GPS directory.
  * Extract focus distance from canon makernote.
  * Extract subject range (pentax and fuji cameras)</changelog>
  <changelog author="sbrabec@suse.cz" date="1207569600">- Updated to version 2.82:
  * Make jhead aware of XMP data and not delete it.
  * Improve IPTC handling a little.
  * Change how date is encoded with -mkexif section to make it more
    compatible.</changelog>
  <changelog author="sbrabec@suse.cz" date="1224158400">- Updated to version 2.84:
  * Decode more exif tags for '-v' mode.
  * Fix a bunch of potential string overflows (bnc#435979,
    CVE-2008-4575)
  * Fix bug where IPTC sction was not deleted by -purejpg
  * Fix GPS altitude decode bug</changelog>
  <changelog author="sbrabec@suse.cz" date="1231156800">- Fixed arbitrary command vulnerability in DoCommand (bnc#435979,
  CVE-2008-4641).
- Fixed dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 2.87:
  * Added the ability to move files with the -n option.
  * Minor fixes.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899201">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
</package>
<package pkgid="37022a6d8913ddca405ea9738bc1c78910bc3c4c31def157a7d15e06b8421688" name="jhead" arch="x86_64">
  <version epoch="0" ver="3.00" rel="lp150.3.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1231156800">- Fixed arbitrary command vulnerability in DoCommand (bnc#435979,
  CVE-2008-4641).
- Fixed dependencies.</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 2.87:
  * Added the ability to move files with the -n option.
  * Minor fixes.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899200">- Updated to version 2.93: For details please read changes.txt
  * Fixed bug in jhead -cmd that caused metatdata to be deleted.</changelog>
  <changelog author="toganm@opensuse.org" date="1331899201">- Fixed file-contains-date-and-time rpmlint warning. Date is set as
  last date in the changes file.</changelog>
  <changelog author="toganm@opensuse.org" date="1332244800">- Updated to version 2.95
  * Handle very large unsigned rational numbers in exif header</changelog>
  <changelog author="toganm@opensuse.org" date="1341230400">- Update to version 2.96
  * Fix printing file info when -ft option is used
  * Do not skip readonle files with -st option</changelog>
  <changelog author="toganm@opensuse.org" date="1362916800">- Update to version 2.97
  * Add feature to show quality of jpeg, (by Andy Spiegel)
  * Fix crash on some corrupt files bug, clarify time adjustment
    syntax in help</changelog>
  <changelog author="mpluskal@suse.com" date="1430136000">- Update to version 3.00
  * Make max comment size 16000
  * Added "-zt" option to trim 32k of trailing zeroes from Nikon 1
    J2 and J3 images.
  * Add ability to reset invalid rotation tag (from Moultrie
    game cameras)
- Use url for source
- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1517832000">- Added CVE-2018-6612.patch: Fix of a heap-based buffer over-read
  (boo#1079349 CVE-2018-6612)</changelog>
  <changelog author="sbrabec@suse.com" date="1536926400">-  Integer overflow fixes (boo#1108480, CVE-2016-3822,
  CVE-2018-16554, CVE-2016-3822.patch, CVE-2018-16554.patch.</changelog>
</package>
<package pkgid="7dac6e315021accecd7280f0cd7f8a27c6a638ba1d2722512369036295999030" name="kde-l10n" arch="src">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="a54a0fc4e7f16fa59bae75af35ca9f2b37e3f08a848bd455b28351b749180fa8" name="kde-l10n-ar" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4302a9f4cf8d5d551d5887e18171df0ba7368099971393c9da48ae6a9dd20036" name="kde-l10n-ast" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d1a4853679cfe592d1edf5466e8f15a3885d1d240c1829af0aed8f2925b97c7f" name="kde-l10n-bg" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="9d6b0f772602a00e830257bb65d1f5dc1a6233b2b9f0d2fbd4b59731c939c815" name="kde-l10n-bs" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="1c0fa54b02251624689ec33d721bba3efeec82392981b124714921772b78f7f4" name="kde-l10n-ca" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="3eb9a4debbc2932712ca8aa56409915d201a808530189c0312a370900720e74e" name="kde-l10n-caValencia" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="a610966713ec3a69d2f26a818db8a40088cdd783529e5567566ae5af626c0ddb" name="kde-l10n-cs" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e61aa9f12788cfd4354d7a97530877479f75bc76bebcddbf080b111425a2d97a" name="kde-l10n-da" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="01ea65ee5ea2b221cc7468c54ea32c7b4f01092ec5ba8b3aa29b9ebf59630722" name="kde-l10n-da-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="50dbd1e5d738561eae99e234f5d7ae60a873796e458e5d55210bc0bfc6631ee5" name="kde-l10n-da-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7d4a95c0ba2a6fd6779028bc4d73d61cf3ff07e3d4d5a1bd942716846074f6d8" name="kde-l10n-de" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="c18b781f9f29a51c1ed36603152baa1d0bbc95e1dcc865b0843c545ede10b82e" name="kde-l10n-de-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="919dfabd3aa2c3d98a68586b9a9f4b32b2ed7940e1440c6d6866e716825f3141" name="kde-l10n-de-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="810bd25686e6f9732539d1b196534614b2260a843b14d6634dd33b85c9cf822a" name="kde-l10n-el" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="5993ea2b8eaf23361fe75d24f7a13fe38c59fce2fcc074bd6cdfc7d8954c136b" name="kde-l10n-en_GB" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="0fca75cdae3624e12c0e7e1d9a491b3341e654a54b03cbe44ec9f8e4468caac6" name="kde-l10n-en_GB-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d36983a23ab1011f729a5d58cbe22a267f6c14d1b30202b9b0237dae6a7ae72a" name="kde-l10n-en_GB-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="c1049653d148fe606959ce02f5e73c291a517cafcc13444213e1caaf6ad2a115" name="kde-l10n-eo" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ea588ea0b351badb5e262110437ae3f35a7c6069db6da68902d2c54f0b41f636" name="kde-l10n-es" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d702c3110626a59cab62e1a3ebec448d5222e32c24c5b3f5e3244b858937e31e" name="kde-l10n-es-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7f028b381619b1a30c313c14666b3419b04f5e351a409bd7f12ce2ec4f39db18" name="kde-l10n-es-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ac19e7a5531c8c47370cd6a65d809d053cc04e5bbc7a0a9ea01f420775066281" name="kde-l10n-et" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="c51dd27ec95b4bdefb75b72b7239b9f6e4db4163def8aec37c149c880f974595" name="kde-l10n-et-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="6e367f57b3c108d52092f8a3724022eb4d29ad3d830355f0c14aa14bf4f699d0" name="kde-l10n-et-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="285478366cfd3736b629e3e18a2e80670878951811762e638c15d2cb9688afcb" name="kde-l10n-eu" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="6dfc249951cf4b7d9dbb9fb020c3eb8c2d4627bf38ba944e0cf78d43d83d5e45" name="kde-l10n-fa" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="1595df8cb6c3924a5030302ec632d6f4058a96b7119cee34e911a322c48cfcdc" name="kde-l10n-fi" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="22187f660a103b5c9676018ec7c3d3e60584e8a8844e7d79864abc56312aae8b" name="kde-l10n-fr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="34049217206d0db1d591c91189dc670ad2e4b14ec71647351494db955a86a6ba" name="kde-l10n-fr-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7e716cda3141e1f8e767c2bed75221ec863fd7b55f0b027822442202644bc927" name="kde-l10n-fr-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="f79708b6b6a374da8503428a3c526da956926f0bd6db2fe5f25d0e73725deea1" name="kde-l10n-ga" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ced20a4c71aba47bcd1e20d3b2f1e09d783a3e7c466101af1315972646cf9cd3" name="kde-l10n-gl" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="16f90086fbd6b5e16c9cd2f0041cf180a47021e1daa8749d2ad44acb06c7a42a" name="kde-l10n-he" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="3b83de8575945460483470725d3031a62d21dc797e3bb1dab68cd42647f73d77" name="kde-l10n-hi" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="bd625eb952646b404fd4e541a502d7487f75faf663a4a8a2942a7dab6bf04028" name="kde-l10n-hr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="c270ad8b5c06c10c787aaa393f87895b03f7b98aeb26663e286d0af8797fbe85" name="kde-l10n-hu" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="81cb04af2f9233965de6ced51cc966bb6bd962ef8af928bdca3663d20c6a294f" name="kde-l10n-ia" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="3012ba87de1e49f23682e1d10b13ffb2e3cbba0100a288530155ac72eb419a8e" name="kde-l10n-id" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4fc9cde3fd15430a29327f371a71bb3860a10864b56bd83b13b303daca8eae40" name="kde-l10n-is" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="13109dfeca396793d078c021f79956884cbd9145395c788c2079e58deaf120f7" name="kde-l10n-it" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4c10612fe5dfbbb0be0b06dfe8925f9f100289b11468ef66bda29df0f9dacb29" name="kde-l10n-it-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="364c4b15a65f2344f414feedf11f079e6f692bcd5c1017d99e5ac2ca7014a9cb" name="kde-l10n-it-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="79a484f767e96a172c41cfb7455f9f2d8f480d2d5890f6fdb6f0c3597e7e9e26" name="kde-l10n-ja" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="9b88327942cb176fa16d4c2cdb0a0bafcba9bc41a9568423c9c7982291f587f8" name="kde-l10n-kk" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="26ea66ec23a3227b88a40450857f9904bbd9636480b324a1763d9dfcf39ada50" name="kde-l10n-km" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d7637c6c053df5ae99b4fb3a0802b4d2e1a0f79a04df34c0a247950fbb9afa98" name="kde-l10n-ko" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="72420920689e39610e2831e74e9d3791e84f93827cdd5140f490811a542e6429" name="kde-l10n-lt" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e033ec98cda5b7940db0456524932b223c5547f7946ed23f6a9652c7cace6c72" name="kde-l10n-lv" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="6576472101f21cff8363ff4d3a418f5c04abc6def9a9ecad7172d8aa9f9e6ae7" name="kde-l10n-mr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="74fc392a3a7131a094a079c1a73accfcaca7f93bdbadcf662873cbfca556c44e" name="kde-l10n-nb" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="1fb584944b11adc4f742aabed5dce31e42e17420193e6f166f27f2b9e4363af7" name="kde-l10n-nds" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="54dc1cbf0c14a263711c4a48d4833cbadf5df7501a55d2b791ea5e240db6c924" name="kde-l10n-nl" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="12f85add4ba9d203e1dcb627d6b32395374a88edc89799406977199842639d30" name="kde-l10n-nl-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="298d376c3f4ef94933eb6733aaec7c33dce79d39a18e67c8189d13305afa8047" name="kde-l10n-nl-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="f548f46263018669f5c51e67c59ea52a00af514d4ff9af7680e4622f0ec1142d" name="kde-l10n-nn" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="d4af9ea0061e4711a932dcab084fb206537ec0043b22c4fbceff6abf4c55d9bd" name="kde-l10n-pa" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="13e29e979c7b33b33119bf352915076636180a230f3b858239b7c56420b4c388" name="kde-l10n-pl" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e1a689d2c295c64d6e1d1e7096472f325526fc5aea3ef607e38c5b169e166152" name="kde-l10n-pl-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="a00c670369bce1f91fbc38aa1679e40447b2211423000662ad8ade1b3ba8707e" name="kde-l10n-pl-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="eab03924c47a883e32f0c3d4c8f2ff0c8d6a2a3402fcc9c4a600847759748ad6" name="kde-l10n-pt" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="2fa9352256b04dd528dccd1a150478f1241eb62db3fefebd50474d160fe772bc" name="kde-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="80a7b6821e4388ff98f60a76f8d798af6dc60fee8a7d8f0988966cc12112b0c2" name="kde-l10n-pt_BR-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4c1a0280ce3cf9513af9f602ce9b67afe87bab8e2a830fa7bc8a61252ee8797a" name="kde-l10n-pt_BR-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="5f1ffdfb5224380c5c9b0d36b8e164c6bcc6d1fc913dc6c866dec60f3e75033f" name="kde-l10n-ro" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="90d53a6bcf21154ac5088f0ce9e7ed351071efe67d59a3a50297d837da5067b9" name="kde-l10n-ru" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="eea7c23f415b935e02ffdc4b8d3c64b51d899dc5b4fd19725b1f9fa892c1b24b" name="kde-l10n-ru-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e4e09a9c915dbcdc698f6a3a6454b7221af15c677b82e5ae7c0ead0a3565d140" name="kde-l10n-ru-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ad7575706fddbd6b7da86e4e46a9d212db994292a58b784c88e79c24cc4d3073" name="kde-l10n-sk" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="f8ba14c7a61e3652fb1e85dde7fa139c3692536702cdfb65d14b9176fb0eda51" name="kde-l10n-sl" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="be15c3371a521ffd1365f298dd54a61624955f081fb31b1e1e9b4d8175751a1a" name="kde-l10n-sr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="6ea6df2891a6b2c63ecf3eb2589e0e31187aee5d4b66ddbe980bbd10453d6e3a" name="kde-l10n-sv" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7acc3786b7150edd36c67333f15c5cb6390b3cac1607bb607ac2195252c54c0c" name="kde-l10n-sv-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="e0a2b4dffedd0b6e05e6f487220f7eab27709bf06d9d9e9e53ceaf9d2a937db6" name="kde-l10n-sv-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="7f972a309833683bf658e795c505018599aba7b327a41483ae6953ca2581bc0b" name="kde-l10n-tr" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="15e6622eb2bc8313311e7ac0d6f8a75477b0f8cb5d0c238e9fabe78a2cb50eda" name="kde-l10n-ug" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="ed2e38a2b486162dfb7ab09a61000df884c0eaee54cf1506b1c81ce270b42569" name="kde-l10n-uk" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="95552711ef89e7b4f73d3f69f36c351ec272390d3bb3c201151607475031db3a" name="kde-l10n-uk-data" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="1be5820cdd1d7cec76eb23ce7378221b51d8818524ac4cfdf1d3299a7c2f6649" name="kde-l10n-uk-doc" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="f99a10a5aebf739a32a2003f598bb845080dfe2afc6db630ba46c93d8eb03cd0" name="kde-l10n-wa" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="5a66fc38810e7ef7726740868055a372ed326b14519a257a9990e95305584f2d" name="kde-l10n-zh_CN" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="8de5a4c04881edaa5350b117cfca0567a4866c693d8d2451f96d7bb1d703010f" name="kde-l10n-zh_TW" arch="noarch">
  <version epoch="0" ver="17.08.3" rel="lp150.4.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1489060800">- Update to 16.12.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1490529600">* Update to 17.08.80</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">* Update to 17.03.90</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">* Update to 17.04.0</changelog>
  <changelog author="wbauer@tmo.at" date="1493899200">- Do not provide/obsolete kio-extras5-lang and libkgeomap-lang
  anymore, those translations have been split out to said packages
  again in 17.04.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">* Update to 17.04.1</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">* Update to 17.04.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1500120000">* Update to 17.04.3</changelog>
  <changelog author="tchvatal@suse.com" date="1500897600">- Do not rely on recode package, it is not used during build
  fate#323644</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 17.08.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">* Update to 17.08.1</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505736000">- Remove kdesu manpage translations to avoid file conflicts
  with kde-cli-tools &gt;= 5.10.95</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">* Update to 17.08.2</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">* Update to 17.08.3</changelog>
  <changelog author="lbeltrame@kde.org" date="1512907200">- Remove kget.mo to prevent conflicts with the new kget tarball</changelog>
  <changelog author="lbeltrame@kde.org" date="1513339200">- Remove more files conflicting between tarballs</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513339201">- Also remove plasma_runner_kget.mo</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513598400">- Remove even more conflicting files
- Use find -o instead of multiple find calls</changelog>
  <changelog author="lbeltrame@kde.org" date="1524398400">- Remove kopete mo files which are conflicting with the tarball</changelog>
  <changelog author="astieger@suse.com" date="1533729600">- restore kopete translations boo#1103027</changelog>
</package>
<package pkgid="4bf74a34d97fd8d3b861aaf0ad3ef787754dab7dbb9beba9818a3e9f8810ba24" name="kde-user-manager" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1499256000">- Recommend -lang package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Don't show a region selector when selecting avatars from a gallery
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Fix using avatars from the gallery and from local files (kde#385151)
  * User Manager KCM text changes and UI modernization (kde#386635)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Split replaceAccount from addAccountToCache (kde#336994)
  * Enable anti-aliasing for user avatars</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="1251882c0bda5b0f946cf373e8688b6f14c64ee0124222ccb493741f046493d5" name="kde-user-manager" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1499256000">- Recommend -lang package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Don't show a region selector when selecting avatars from a gallery
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Fix using avatars from the gallery and from local files (kde#385151)
  * User Manager KCM text changes and UI modernization (kde#386635)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Split replaceAccount from addAccountToCache (kde#336994)
  * Enable anti-aliasing for user avatars</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="20469f83dd7e054b0e9c8b3da37c58408ac5e92358d77685c622ddfdf7e2225e" name="kde-user-manager-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1499256000">- Recommend -lang package</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Don't show a region selector when selecting avatars from a gallery
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Fix using avatars from the gallery and from local files (kde#385151)
  * User Manager KCM text changes and UI modernization (kde#386635)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Split replaceAccount from addAccountToCache (kde#336994)
  * Enable anti-aliasing for user avatars</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="b20b4ff39ccd07721f27a0603ac4569e8629c879203e63b324daf2b8de362eb7" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="2fc218e0790a01e904f1f485aa619cda24d9871237a8dce6341f6095f87b4c83" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="4fcd580f437b5c00c04c6e8582c4acae16cd6566e8da233c04634c95f035ec04" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="ca3e507157b9007335fab7ea4f5e528b77c363cac847cbe5879d76fa0e186339" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="9817c4fdeee4e55d5d9a119ed244e0bd16101580941de3de0520b9473459c361" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="30e1832510b0b274a7ea44c8e6ddc66ae1aed4e9b1028f556bb1b3f6015a5a72" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="68ff6803e7abbcef187a0bbfe722dae4796853cadf58259229132f466886d43a" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="73a027839ed6ef0d206d733d905d8df6bd9d7204a7990dc893c5e7d6a751d9a2" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="c310e296ee8d7097ad3c07f5ffcc2f17c202897ef79dd4da955c5cf6e3a90e2e" name="kernel-debug" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="a5c38e95e89b929d775862009528c5b760d0a8e3a1b3aa5332d60f439316dcdc" name="kernel-debug" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="98bbf18a716b4862c7069cfaaf841ca22840bf662b814ca9cfe5a11a5696ecdf" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="3d04492637c97b3f9adb37aea559097a4783ddcafd46ed52f9a10946e45a36ed" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="979c1b7d9e84830ed3b03a9f76ec58028485da2a7352ca23ddb08f11bcfc0b40" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="c11ffd05062c36cbbe6b77b797442f774d0512a80125111f187db86af311397b" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="9bd91ce604eae87c5e522cdbd38ebd16e4d834073816f0b37784b4fac0e725aa" name="kernel-debug-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="d7a86049b1a33e625b7b90887dcb795dd856bb3c0c046819f7a9d660d1d01247" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="340c4c4ce3a30801ec0fd9e7f65b57c6f2ccc34f61952d4950de720930c84be0" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="9b82df00e931a3796bca01364cac91dc549e99ac3c60b8635c04b90b33a3704c" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="29201832016855c2070ed3ef098275aac85ddcc4de464010661ef7026be29c83" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="94d90a2e6432fa7c60797c647130c3c921982fde82542721d19a4c7364135cfe" name="kernel-debug-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="efd4c1204dc57022f607f67db760d73dfd5788165d7165c9c274b99e364862b7" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="a8723ab89f510f46d86fb782ecbd7df9a353030748f41bbfc69bd149f6e218c4" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="84f23d1d668ea22f40936d027f6216a2103192f6d0323b48084a6fa7b129e5ff" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="70ed023f05f80888e3c1260eddc3a79be1043b9a6e8710935298bb4c0ecf454e" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="39a13ebd2a63bb6a2e16057d2567f6ff8bbcf9c64595a1ddcf21759ddbbefc66" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="d13d28a145cc34adce60c51776b23cd421ae037d85f0ce04c09658e8350ba3af" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="20dd0eb304d157b225666014836e942ebd8b1a6737b7eca19b671c22fcc4f201" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="052867e5524f536659ead940bb19ab07b5bd9500a96c13fdd9855c68522900ad" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="1a1e119963eb150d34a886375c8753a9724673563a0ed12dbaec34778e3a4116" name="kernel-default" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="73bd7fd48f1631bf74c8d331ee45907a19cffd931337b08bf9aa90927a3e9b93" name="kernel-default" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="fb99ffc090c829ebbd3affadd76b3b084361420781cb7921ff13cd43a2890d9b" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="bbdf08dbee201cb2dee7d91537c500b9f072b989851936f65d547aae92a867aa" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="a8f01cae18af7a8faef5ee3688f7a47cf32ff591e0429bed65de89c79ce075ad" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="4b2c61d23b0b46f5279e17057c58374094a3de5cd61264a69416180895640b3f" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="0e78360eed949542829b4e6fefe135f345cf81cbc68892e3c23d55867fc2e34e" name="kernel-default-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="8798e81c3d48c95bfd050816eada120c0afe54dc0428132d68f0655b562a3027" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="6ca1cba908b331e8c72f8ca38f7fee5d315956db2ede23f2603652cb94c23b3d" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="4342c90bf3d4926d0d48305a107f42a597da78139f726196c2ec70bacececccb" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="44b88d64c4d9ee6e2193cca3aac4bdfd59dec2be99fa2ad54c0dcc0c5ef3d828" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="6836243befacb58d70507ee626d53b2918d64481b3d2d87ac827cc901cf5d417" name="kernel-default-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="8c1bca661858b91176b81f902f2f3569e52bcf97b5eb23c4968c0dd80dcc08be" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="2efe5249c2a680503e15c748a27ecc090cb0f6eef0a45c24f50e6b117f89bf2f" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="d6748260daa8c5aaa2b44adb4a240169830eea81e732dfba9605b29cd7cae091" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="34bed99a1492fbd736ebf32788c4bd513e8cf329ee1cea0aa9f32070618fffb0" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="f08ce9d8f072fdd30ee8a87efc239cc899352d41796182223a02846ba9123d18" name="kernel-devel" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="fd933d6655de0f3c6cd5d799f54fa5a53a94cd0117dd1b1f9dfcb3b6dfa561dd" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="e7e081ba8a745550d9fea99c253352d7617602f2e40b666b4ac59847fb2abef6" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="3539ac7247b1f4f85f18673e43df9d36dcb5d1b3f6174c6fe814e54071e69ff7" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="bafb152120ca2a9ce71f86e1691e6727e230d5c76c49d46f9765fb719f44a0b9" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="9f92e198d38618c8089717888d9c037a4fa90c0cd9b09cdc11eb0a9c32301784" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="13d0c6375668d24f177497d2c444bab6d8cf1cb7f501da5f7538fde5b780cd87" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="aae84ed691e1f525a8e3248b381389f7064a939ff250409cef0cd4095d3e2d45" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="78019ec6d8c5c3fe3c3916b6fdd41e80b51829bdbd7a080e9a3f92a175ac5954" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="8c8bf6bf9a94d2d04fda8c4a94bcc62a6fdf249234360999a343f81489e38d82" name="kernel-docs" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="64b260873fb2b2ff12fad1f0f4e31bcd19fbe982bf44062942973904c14b357d" name="kernel-docs" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="1b073677ad6bfcbb3bdfe7b3d614d8c0a178eabf4a3cf2ccbc907996914bfa51" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="361529478912cbd89f1ef3d1693e23b4032cc295f1f6848bd340a0e8f400082a" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="0aa891860689afe6d4d74104ad2ccd75cd7c1f134d1ca1d1aad8a7e5ae0e0a84" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="a1b9df6a07c263eed8ff11ead2a44288271d378b880f4b1f2599878a29c5a175" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="7d313659362a7d78d8f8c1ce1d4ff5acc5e542848d495bff11a51c4cf1664bc8" name="kernel-docs-html" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="c5c0e356e8678545dc4993afc7267301dd524e2c1ac99debaeeeb99bacf53a5a" name="kernel-firmware" arch="noarch">
  <version epoch="0" ver="20180525" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1511179200">- Remove iwlwifi-*-34.ucode since they seem breaking with 4.13.x
  TW kernel (bsc#1068838)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 20171125:
  * brcm: update firmware for bcm4358
  * brcm: update firmware for bcm4356
  * brcm: update firmware for bcm4354
  * brcm: introduce firmware for bcm43430 revision 0
  * brcm: update firmware for bcm4339
  * Mellanox: Add new mlxsw_spectrum firmware 13.1530.152
  * WHENCE: Add missing entry for mlxsw_spectrum firmware
  * WHENCE: Fix typo in entry for iwlwifi-8265-34.ucode
  * s2255drv: f2255usb: firmware version 1.2.8
  * amdgpu: add new CP firmware for polaris chips
  * qed: Add firmware 8.33.1.0
  * qcom: add venus firmware files for v4.2
  * qcom: add firmware files for Adreno a530
  * iwlwifi: add firmware version 34 for new 9000 series
  * linux-firmware: liquidio: update firmware to v1.7.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * iwlwifi: add firmware version 33 for new 9000 series
  * iwlwifi: add new firmware version 34 for 8000C and 8265
  * iwlwifi: update firmwares for 3160, 3168, 7260, 7265 and 7265D
  * iwlwifi: update firmwares for 3160, 3168, 7265D, 8000C and 8265
  * linux-firmware: DMC firmware for kabylake v1.04
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: GuC firmware for kabylake v9.39
  * linux-firmware: GuC firmware for Broxton v9.29
  * linux-firmware: GuC firmware for Skylake v9.33
  * linux-firmware/i915: Add Cannonlake DMC version 1.06
  * linux-firmware/i915: Add Geminilake DMC version 1.04
  * WHENCE: Add new qed firmware
  * WHENCE: Add new radeon firmware
  * WHENCE: Fix syntax error for iwlwifi-8265-31.ucode entry
  * Revert "ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.63-2"
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00051-QCARMSWP-1
  * cxgb4: update firmware to revision 1.16.63.0
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell PCIe-USB8897-A2 firmware image
  * Drop intel wifi firmwares and WHENCE-iwlwifi-update.patch as
  they are upstreamed</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043201">- Change the shebang of check_whence.py (installed as a
  non-executable) to point to python3.</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to version 20171204:
  * amdgpu: add firmware for Raven
  * amdgpu: update vega10 vce firmware
  * linux-firmware: DMC firmware for skylake v1.27</changelog>
  <changelog author="mpluskal@suse.com" date="1514030400">- Update to version 20171221:
  * nvidia: add GP108 signed firmware
  * linux-firmware: liquidio: add v1.7.0 vswitch firmware
  * brcm: add CYW4373 firmwares and Cypress license file
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * Revert commits a42f895, c113d33, 041aff8, 73d13b5
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * linux-firmware: intel: Add Cannonlake audio firmware
  * nfp: add firmware for tc-flower
  * nfp: change firmware directory layout
  * nfp: update firmware for Agilio CX SmartNICs</changelog>
  <changelog author="meissner@suse.com" date="1514203200">- Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715)</changelog>
  <changelog author="mpluskal@suse.com" date="1515067200">- Update to version 20180104:
  * wl18xx: update firmware file 8.9.0.0.76
  * wl127x/wl128x: update firmwares
  * rtlwifi: rtl8723de: Add firmware for new driver/device
  * linux-firmware: DMC firmware for cannonlake v1.07</changelog>
  <changelog author="mpluskal@suse.com" date="1516622400">- Update to version 20180119:
  * amdgpu: update uvd firmware for polaris asics
  * amdgpu: update vce firmware for Fiji
  * amdgpu: update vcn firmware for raven
  * amdgpu: update vce and uvd firmware for Vega10
  * mediatek: update MT8173 VPU firmware to 1.0.8 [decoder h264] Fix h264 decoder output delay for some low latency bitstreams
  * cxgb4: update firmware to revision 1.17.14.0
  * linux-firmware: update Marvell PCIe-USB8897/8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: intel: Update Geminilake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Update to version 20180201:
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * wl127x/wl128x: update PLT firmwares
  * linux-firmware: intel: Update Kabylake audio firmware
- Mark license files as such</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 20180222:
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9377 hw1.0: update firmware-5.bin to WLAN.TF.1.0-00002-QCATFSWPZ-5
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00079-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * rtl_bt: Add firmware and configuration files for the Bluetooth parts of RTL8821C and RTL8723D
  * qed: Add firmwares 8.30.12.0 and 8.10.9.0
  * nfp: update Agilio SmartNIC firmware to rev 2.0.4</changelog>
  <changelog author="mpluskal@suse.com" date="1521028800">- Update to version 20180312:
  * Mellanox: Add new mlxsw_spectrum firmware 13.1620.192
  * qed: Add firmware 8.33.11.0
  * BCM-0bb4-0306: Cypress Bluetooth firmware for HTC Vive
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qed: Add firmwares 8.20.0.0 8.18.9.0 and 8.14.6.0
  * iwlwifi: update firmware version 34 for 9000 series</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- detect new style modalias too for AMD CPUs in ucode-amd
  (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1521806400">- Update to version 20180320:
  * BCM-0bb4-0306: Update to Cypress license in WHENCE
  * linux-firmware: intel: Update Kabylake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 20180402:
  * amdgpu: update vce firmware for Polaris
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * nfp: update Agilio SmartNIC firmware to rev 2.0.7
  * cxgb4: update firmware to revision 1.18.9.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * linux-firmware: intel: Update Kabylake audio firmware
  * linux-firmware: intel: Update Broxton audio firmware
  * linux-firmware: intel: Update Skylake audio firmware</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- fixed new style modalias detection too for AMD CPUs in ucode-amd,
  it can only use 1 : (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1523966400">- Update to version 20180416:
  * linux-firmware: update wil6210 firmware to 5.2.0.18
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * iwlwifi: update firmwares for 3160, 3168 and 7265
  * iwlwifi: add some new FW versions and update older ones</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 20180507:
  * linux-firmware: update Marvell USB8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: update Marvell SD8897-B0 firmware image to add WPA2 vulnerability fix
  * Update Intel OPA hfi1 firmware
  * qed: Add firmware 8.33.12.0
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * cxgb4: update firmware to revision 1.19.1.0
  * nfp: add symlink for mixed mode Agilio CX 2x25GbE cards
  * nfp: update Agilio SmartNIC flower firmware to rev 5701</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Update to version 20180518:
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B5/B6)
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B3/B4)
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: sync up polaris12 firmware with 18.10 release
  * amdgpu: sync up polaris11 firmware with 18.10 release
  * amdgpu: sync up polaris10 firmware with 18.10 release
  * amdgpu: sync up vega10 firmware with 18.10 release
  * amdgpu: sync up carrizo firmware with 18.10 release
  * amdgpu: sync up topaz firmware with 18.10 release
  * amdgpu: sync up stoney firmware with 18.10 release
  * amdgpu: sync up tonga firmware with 18.10 release
  * amdgpu: sync up fiji firmware with 18.10 release
  * amdgpu: sync up raven firmware with 18.10 release
  * nfp: Add symlink for Agilio CX 1x40GbE flower firmware
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.16
  * linux-firmware: liquidio: update firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
</package>
<package pkgid="88bdf1a70f474f5105d9ef197fe90ed1cd4c0b9cc3cfead6a33d9102f6a8cd35" name="kernel-firmware" arch="src">
  <version epoch="0" ver="20180525" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1511179200">- Remove iwlwifi-*-34.ucode since they seem breaking with 4.13.x
  TW kernel (bsc#1068838)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 20171125:
  * brcm: update firmware for bcm4358
  * brcm: update firmware for bcm4356
  * brcm: update firmware for bcm4354
  * brcm: introduce firmware for bcm43430 revision 0
  * brcm: update firmware for bcm4339
  * Mellanox: Add new mlxsw_spectrum firmware 13.1530.152
  * WHENCE: Add missing entry for mlxsw_spectrum firmware
  * WHENCE: Fix typo in entry for iwlwifi-8265-34.ucode
  * s2255drv: f2255usb: firmware version 1.2.8
  * amdgpu: add new CP firmware for polaris chips
  * qed: Add firmware 8.33.1.0
  * qcom: add venus firmware files for v4.2
  * qcom: add firmware files for Adreno a530
  * iwlwifi: add firmware version 34 for new 9000 series
  * linux-firmware: liquidio: update firmware to v1.7.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * iwlwifi: add firmware version 33 for new 9000 series
  * iwlwifi: add new firmware version 34 for 8000C and 8265
  * iwlwifi: update firmwares for 3160, 3168, 7260, 7265 and 7265D
  * iwlwifi: update firmwares for 3160, 3168, 7265D, 8000C and 8265
  * linux-firmware: DMC firmware for kabylake v1.04
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: GuC firmware for kabylake v9.39
  * linux-firmware: GuC firmware for Broxton v9.29
  * linux-firmware: GuC firmware for Skylake v9.33
  * linux-firmware/i915: Add Cannonlake DMC version 1.06
  * linux-firmware/i915: Add Geminilake DMC version 1.04
  * WHENCE: Add new qed firmware
  * WHENCE: Add new radeon firmware
  * WHENCE: Fix syntax error for iwlwifi-8265-31.ucode entry
  * Revert "ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.63-2"
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00051-QCARMSWP-1
  * cxgb4: update firmware to revision 1.16.63.0
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell PCIe-USB8897-A2 firmware image
  * Drop intel wifi firmwares and WHENCE-iwlwifi-update.patch as
  they are upstreamed</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043201">- Change the shebang of check_whence.py (installed as a
  non-executable) to point to python3.</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to version 20171204:
  * amdgpu: add firmware for Raven
  * amdgpu: update vega10 vce firmware
  * linux-firmware: DMC firmware for skylake v1.27</changelog>
  <changelog author="mpluskal@suse.com" date="1514030400">- Update to version 20171221:
  * nvidia: add GP108 signed firmware
  * linux-firmware: liquidio: add v1.7.0 vswitch firmware
  * brcm: add CYW4373 firmwares and Cypress license file
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * Revert commits a42f895, c113d33, 041aff8, 73d13b5
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * linux-firmware: intel: Add Cannonlake audio firmware
  * nfp: add firmware for tc-flower
  * nfp: change firmware directory layout
  * nfp: update firmware for Agilio CX SmartNICs</changelog>
  <changelog author="meissner@suse.com" date="1514203200">- Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715)</changelog>
  <changelog author="mpluskal@suse.com" date="1515067200">- Update to version 20180104:
  * wl18xx: update firmware file 8.9.0.0.76
  * wl127x/wl128x: update firmwares
  * rtlwifi: rtl8723de: Add firmware for new driver/device
  * linux-firmware: DMC firmware for cannonlake v1.07</changelog>
  <changelog author="mpluskal@suse.com" date="1516622400">- Update to version 20180119:
  * amdgpu: update uvd firmware for polaris asics
  * amdgpu: update vce firmware for Fiji
  * amdgpu: update vcn firmware for raven
  * amdgpu: update vce and uvd firmware for Vega10
  * mediatek: update MT8173 VPU firmware to 1.0.8 [decoder h264] Fix h264 decoder output delay for some low latency bitstreams
  * cxgb4: update firmware to revision 1.17.14.0
  * linux-firmware: update Marvell PCIe-USB8897/8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: intel: Update Geminilake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Update to version 20180201:
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * wl127x/wl128x: update PLT firmwares
  * linux-firmware: intel: Update Kabylake audio firmware
- Mark license files as such</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 20180222:
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9377 hw1.0: update firmware-5.bin to WLAN.TF.1.0-00002-QCATFSWPZ-5
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00079-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * rtl_bt: Add firmware and configuration files for the Bluetooth parts of RTL8821C and RTL8723D
  * qed: Add firmwares 8.30.12.0 and 8.10.9.0
  * nfp: update Agilio SmartNIC firmware to rev 2.0.4</changelog>
  <changelog author="mpluskal@suse.com" date="1521028800">- Update to version 20180312:
  * Mellanox: Add new mlxsw_spectrum firmware 13.1620.192
  * qed: Add firmware 8.33.11.0
  * BCM-0bb4-0306: Cypress Bluetooth firmware for HTC Vive
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qed: Add firmwares 8.20.0.0 8.18.9.0 and 8.14.6.0
  * iwlwifi: update firmware version 34 for 9000 series</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- detect new style modalias too for AMD CPUs in ucode-amd
  (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1521806400">- Update to version 20180320:
  * BCM-0bb4-0306: Update to Cypress license in WHENCE
  * linux-firmware: intel: Update Kabylake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 20180402:
  * amdgpu: update vce firmware for Polaris
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * nfp: update Agilio SmartNIC firmware to rev 2.0.7
  * cxgb4: update firmware to revision 1.18.9.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * linux-firmware: intel: Update Kabylake audio firmware
  * linux-firmware: intel: Update Broxton audio firmware
  * linux-firmware: intel: Update Skylake audio firmware</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- fixed new style modalias detection too for AMD CPUs in ucode-amd,
  it can only use 1 : (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1523966400">- Update to version 20180416:
  * linux-firmware: update wil6210 firmware to 5.2.0.18
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * iwlwifi: update firmwares for 3160, 3168 and 7265
  * iwlwifi: add some new FW versions and update older ones</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 20180507:
  * linux-firmware: update Marvell USB8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: update Marvell SD8897-B0 firmware image to add WPA2 vulnerability fix
  * Update Intel OPA hfi1 firmware
  * qed: Add firmware 8.33.12.0
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * cxgb4: update firmware to revision 1.19.1.0
  * nfp: add symlink for mixed mode Agilio CX 2x25GbE cards
  * nfp: update Agilio SmartNIC flower firmware to rev 5701</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Update to version 20180518:
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B5/B6)
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B3/B4)
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: sync up polaris12 firmware with 18.10 release
  * amdgpu: sync up polaris11 firmware with 18.10 release
  * amdgpu: sync up polaris10 firmware with 18.10 release
  * amdgpu: sync up vega10 firmware with 18.10 release
  * amdgpu: sync up carrizo firmware with 18.10 release
  * amdgpu: sync up topaz firmware with 18.10 release
  * amdgpu: sync up stoney firmware with 18.10 release
  * amdgpu: sync up tonga firmware with 18.10 release
  * amdgpu: sync up fiji firmware with 18.10 release
  * amdgpu: sync up raven firmware with 18.10 release
  * nfp: Add symlink for Agilio CX 1x40GbE flower firmware
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.16
  * linux-firmware: liquidio: update firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
</package>
<package pkgid="7bc4c9e1b8013fa9aad53db41f7a181f15f145c136bf1173d53ec48d5b98beff" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="a3e54afeb40e9595f281d4fc0e3f830dc3dcfba353a2dd413c375d7eafc0715b" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="7d7ccd2a6d29897cf1e5a8b2293e268c1544aade74e8c0bb7c80f091883729cc" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="07ba83ec297c02b8020b2eeec23e0969b02364882fd5b9021d2bb020b13d4794" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="09ef09baa2135219a6e17de953b42c203d40a472fc0ec5395b942752fe3d5315" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="4da10b9add1eaf876ca33270be73991a968c9e23abb398ceebc8440ffff41bfc" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="a489e503f41c8c179b6d0fded78c53a7da07569192d8c3022b8f8146f8821e82" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="0a79ff875507a49f1f5753e5a91b8b0f25ae7e47994a957b0afceefd00aca4a1" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="bf6e5c3d2e636d375719f7c79d6ebaa01b6622fbf623184ec32f04ff6587e8ba" name="kernel-kvmsmall" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="b022535795f95b012c3150a27042edddf20b8ce59d4143355200cf54eaf80673" name="kernel-kvmsmall" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="88a18bfc078143ee63d7141740c5acebf6e059827bd68131a13e50c47a4328a5" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="64d78cbac596f841ef04ee2a9f4f99243e4ff166044dff1ca86c827497bf524a" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="ddfc86fe07013f7f50a06065515afc7034681bfb962dc0bbaf3d6efc3270c02d" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="2440ecc5d7e513caabfe49059d9ff2a29bb9a0ae3245b3003abb9ba5abb71f65" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="652d170f7872c3e2d26c5a5d2631035d1dcda10ee4d53e2b6ada3fd41137a01b" name="kernel-kvmsmall-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="d06ce19808a20883860085dddd28576849212937fa6d8eada7b8c8aa85a8a404" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="49c83f5a7b5f79127610059ef1614f8493851422cec1894b4fe09d27c38f98d9" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="994f45a50300beefe569ca8f32939ad2241dd405682df02773d1c872534dba03" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="292417aa28cf7b26809124f91885caddcbeb707f65bf1c194c6be8dac97cb2e0" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="7b3c82d086b793cbd892e285462df1d3e8f35bd8ce7f02f62b446cb30ebca143" name="kernel-kvmsmall-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="c8773cfb1b47d4cad5e23681d042782ba2b958c9c8014c844fe4fc5dced616be" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="38bf2c0380f11ea732156656d15788b56563f2fbc5a16fde821922e8f62c797e" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="5fbc9c3cbad5d93708d7a1a84621815c02260423b1523b030111481184a92d09" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="1a96f4bcb1451ad3414ccd61d03bbfd3b74e7fcc50f675aa727fbeb92e52e459" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="02748f85f216b9469b1fceb9708342e29ae55967f360ba54748c35769ba1c040" name="kernel-macros" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="1a31f46b9472fb7f393b22bb0ace1813d3305c75ef0db87a77796805d3e861a1" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="ae6b394d5e139d6bf76d5cda69244a7d3e6d256b45c0ef13645c0f8e5e9014c4" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="41a9e20722626830a3bef3602f75fd1defcaa326856dc97d755b1af5b0d2975e" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="47413b37c2a5735a0e72897d4399b1ee22ebcd00990b14fd2a6b9ac4981f04ed" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="a2eab7b9f26f64a095d476a78276165c34492cbccd6e1b0bab14411b56350212" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="1feb991b848325c0fab385adeaeb26ffe0192b582631e78374d06f4f9b99d452" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="bfb8c62b151b3b7b5fd6c9a7903133e4245693f8d3b12c01a597d0c2aa4663e1" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="374663186c03191af7659dbf85a1ffe337e23688762fe0f3493db037965411a6" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="05b306bd79747252bce628e1a7c3d32e3984942ec72b9a705071fef229cb322c" name="kernel-obs-build" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="fbbcd5d573151564fc0e61a353cdd99de7715c0135903c6bceeb8d502b4d5dd6" name="kernel-obs-build" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="c2d2477c9e7baeee6d0cf536d438eb69d62ce709446fb3a27ad8365895e058e7" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="b7a60a4d13ef5b9b9ce827232598c35027a649defa7bcd42cded1e37c43a1be1" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="9899c0d53607df8a425a25de881b7032f4cbce32eb31ca482e6b3014e093471d" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="088428eb44534d064467586cb923f5eb240e63ea827bbd1ea8bee8f7175c5cd7" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="2aeb1373ad75edb39c6b3699adf753c24fde05844d9247d92ef92650a866c8d0" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="85a8ce33423966cb2c7de11c6569073a3451af78a8eea8f258f9872ecd0ebc31" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="d1410adabaacf8b6182f26d3fe5c11172ae34a835897e5ca14d29bdbcdf3734e" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="aed35dc6a158df3d688e40f2202704d7817a7fdfdfee4e89e49ffcf372cb9537" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="a44062cdf2d9701e1d3c63fe88c9054546d3bf78b4a51c0ac38a738ef68240ff" name="kernel-obs-qa" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="7b28719b993c31b9036fed606253bb055915321f018f570d039e4b8e9a3c76e6" name="kernel-obs-qa" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="5843ef5fa8c78d8c35c591aa2a96cd5bf0f0d9e8a600efc6a906cef8490ada26" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="a87d3818729021c6ea2e59573ef8fbc9c1e7cb2cb86003ce0dfb42922c2e34b9" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="739e26f12ff82869b9d5bda3eb0e0a89894ae56a2ebab2a2760abc5c27f85dd7" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="bcb6137cc0fd3a61a9f790fb82165ae4069783c55c6a882571f9a82e08a9c396" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="b34150b8c0df5bc6c52cbeb6ade2276c60cab2f303d182037ff40bf80343ca73" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="bb9a90995ef0bd058f7819f48a46cb0d028af713a4cef23f0698a8e328d63bcf" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="2a93ffafe422098b67c0b3974c22130de1489de3b9e6b33c7efac24b51a1a30e" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="fa95072ddfa8d5e34859405b755a0e313a3a86a37a02425f764fb5e0947e767c" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="e2348e93cd963b6c44b9387ee3385b010dafd58f9e42e38ec71893a3e9dbe612" name="kernel-source" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="43fdc2a7d1ac50fadddb6d676ec6eb2fd686f9e81d64e741b0bccb116e74769c" name="kernel-source" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="8ce990abaf9edea93af98883e0114f1327e0d67caf8d561b9c60bbcc63c0ed26" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="61732a2fe9deacf67323870983b62a4465a73323d65834124705cc65f5ee8da8" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="8bbd7fea38425ec43902dbb4ac1a136c8127ff20a4cec925c1af8c0324df5dbb" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="f4486ff7666471f295463b9642ce836b9a96b2625c19d61a910dd58dc5330b3f" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="c90532e8b4d96ef8ee0819d447444b2e12bca213a0bd3dc56eff1fa56e399f2b" name="kernel-source-vanilla" arch="noarch">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="76a8e4de10012ff5c8eee84ef30b34d9e270b62bcbe77d5f4a6d0c81b9113a7e" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="9a6699114a3e2e175dee50eeda57008ea62889d2d337c9ed97e75c7da4b40178" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="1fd77f1ba88195155d0bc9668785abbb3d59891ac3a9cbfd8af4e76de0029a99" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="f78dced37bf2e03059e6276a5101cef991928e4d45c50d1cff8ae9397463ed77" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="c6993806945bfffb77a01d4703a0e5c8e36efda6f30165d74dd6ace8edea6e56" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="e1ce221c1ec02153213ab61095bb924a6c862844abf5185ecf703a4c4933e986" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="635b86685405bceb3530072f25ad8b63077cb0289721b4156cca77b11a53b3cc" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="7abec3074659ddd1e3841a2d7c4b24692585f6d147459cd2aa9fc28e8cabeb04" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.4.1"/>
  <changelog author="msuchanek@suse.de" date="1525780800">- powerpc/lib: Fix off-by-one in alternate feature patching
  (bsc#1065729).
- commit 64ed10b</changelog>
  <changelog author="nborisov@suse.com" date="1525867200">- Refresh
  patches.suse/revert-btrfs-qgroup-move-half-of-the-qgroup-accounting-time-out-of-commit-trans.patch.
- commit 6bb3a77</changelog>
  <changelog author="msuchanek@suse.de" date="1525867201">- Enable uniput driver (bsc#1092566).
- commit 7e93d22</changelog>
  <changelog author="msuchanek@suse.de" date="1525953600">- powerpc/64s: Enhance the information in cpu_show_spectre_v1()
  (bsc#1068032).
- commit 447e243</changelog>
  <changelog author="jkosina@suse.cz" date="1525953601">- scripts/git_sort/git_sort.py: Remove duplicated repo entry
- commit 5449163</changelog>
  <changelog author="jack@suse.cz" date="1525953602">- ext4: Fix hole length detection in ext4_ind_map_blocks()
  (bsc#1090953).
- commit 6264cfb</changelog>
  <changelog author="jeffm@suse.com" date="1526040000">- Delete
  patches.suse/btrfs-push-relocation-recovery-into-helper-thread.patch.
  Pushing relocation recovery into a thread allowed mounts to proceed
  but the file system would end up being unable to be unmounted for some
  time.
- commit a456afe</changelog>
  <changelog author="jeffm@suse.com" date="1526040001">- Refresh
  patches.suse/btrfs-qgroups-fix-rescan-worker-running-races.patch.
  The previous version reintroduced the race that upstream commit 8d9eddad194
  was intended to fix.  This version addresses that issue as well as fixing
  a separate issue where the rescan worker might not have resumed on mount.
- commit 3847d2d</changelog>
  <changelog author="jeffm@suse.com" date="1526040002">- btrfs: suspend qgroups during relocation recovery (bsc#1086467).
- commit f0b899a</changelog>
  <changelog author="wqu@suse.com" date="1526040003">- btrfs: Fix wrong first_key parameter in replace_path (follow
  up fix for bsc#1084721).
- commit 4346da1</changelog>
  <changelog author="bp@suse.de" date="1526040004">- proc: Use underscores for SSBD in 'status' (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Rename _RDS to _SSBD (bsc#1087082 CVE-2018-3639).
- x86/speculation: Make "seccomp" the default mode for Speculative
  Store Bypass (bsc#1087082 CVE-2018-3639).
- seccomp: Move speculation migitation control to arch code
  (bsc#1087082 CVE-2018-3639).
- seccomp: Add filter flag to opt-out of SSB mitigation
  (bsc#1087082 CVE-2018-3639).
- seccomp: Use PR_SPEC_FORCE_DISABLE (bsc#1087082 CVE-2018-3639).
- prctl: Add force disable speculation (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Make boot modes __ro_after_init (bsc#1087082
  CVE-2018-3639).
- seccomp: Enable speculation flaw mitigations (bsc#1087082
  CVE-2018-3639).
- proc: Provide details on speculation flaw mitigations
  (bsc#1087082 CVE-2018-3639).
- nospec: Allow getting/setting on non-current task (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Add prctl for Speculative Store Bypass
  mitigation (bsc#1087082 CVE-2018-3639).
- x86/process: Allow runtime control of Speculative Store Bypass
  (bsc#1087082 CVE-2018-3639).
- prctl: Add speculation control prctls (bsc#1087082
  CVE-2018-3639).
- x86/speculation: Create spec-ctrl.h to avoid include hell
  (bsc#1087082 CVE-2018-3639).
- x86/KVM/VMX: Expose SPEC_CTRL Bit(2) to the guest (bsc#1087082
  CVE-2018-3639).
- x86/bugs/AMD: Add support to disable RDS on Fam[15,16,17]h if
  requested (bsc#1087082 CVE-2018-3639).
- x86/bugs: Whitelist allowed SPEC_CTRL MSR values (bsc#1087082
  CVE-2018-3639).
- x86/bugs/intel: Set proper CPU features and setup RDS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Provide boot parameters for the
  spec_store_bypass_disable mitigation (bsc#1087082
  CVE-2018-3639).
- x86/cpufeatures: Add X86_FEATURE_RDS (bsc#1087082
  CVE-2018-3639).
- x86/bugs: Expose /sys/../spec_store_bypass (bsc#1087082
  CVE-2018-3639).
- x86/bugs, KVM: Support the combination of guest and host IBRS
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Read SPEC_CTRL MSR during boot and re-use reserved
  bits (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug reporting into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/bugs: Concentrate bug detection into a separate function
  (bsc#1087082 CVE-2018-3639).
- x86/nospec: Simplify alternative_msr_write() (bsc#1087082
  CVE-2018-3639).
- commit 62d3255</changelog>
  <changelog author="msuchanek@suse.de" date="1526299200">- powerpc/64/kexec: fix race in kexec when XIVE is shutdown (bsc#1088273).
  Refresh patchset with upstream patches
- Refresh patches.arch/powerpc-64-kexec-fix-race-in-kexec-when-XIVE-is-shut.patch
- Refresh patches.arch/powerpc-xive-fix-hcall-H_INT_RESET-to-support-long-b.patch.
- Refresh patches.arch/powerpc-xive-prepare-all-hcalls-to-support-long-busy.patch.
- Refresh patches.arch/powerpc-xive-shutdown-XIVE-when-kexec-or-kdump-is-pe.patch.
- commit 39957bd</changelog>
  <changelog author="msuchanek@suse.de" date="1526299201">- Move 0008-kabi-arm64-reserve-space-in-cpu_hwcaps-and-cpu_hwcap.patch
  Patches in patches.kabi are removed when kabi files are deleted.
  This is not wanted for padding patches.
- commit 0ee5d8b</changelog>
  <changelog author="jroedel@suse.de" date="1526385600">- KVM: SVM: Move spec control call after restore of GS
  (bsc#1087082 CVE-2018-3639).
- commit 65e82a4</changelog>
  <changelog author="palcantara@suse.de" date="1526385601">- blacklist.conf: add cifs commit
  RDMA is unsupported in all SLE versions.
- commit 5b79c0d</changelog>
  <changelog author="jeffm@suse.com" date="1526385602">- allow_unsupported: add module tainting on feature use (FATE#323394).
- commit 41cd8e7</changelog>
  <changelog author="jeffm@suse.com" date="1526385603">- reiserfs: mark read-write mode unsupported (FATE#323394).
- commit 0e79976</changelog>
  <changelog author="jeffm@suse.com" date="1526385604">- reiserfs: package in separate KMP (FATE#323394).
- commit 3909bbf</changelog>
  <changelog author="msuchanek@suse.de" date="1526385605">- powerpc/64s: Add support for a store forwarding barrier at
  kernel entry/exit (CVE-2018-3639, bsc#1087082).
- commit 908c138</changelog>
  <changelog author="jkosina@suse.cz" date="1526644800">- bpf: prevent memory disambiguation attack (bsc#1087082
  CVE-2018-3639).
- commit f1ac4a9</changelog>
</package>
<package pkgid="ef854b25879bcda245d87bc0e595c62eae99f31667c29c5ae70e2336356690b6" name="kernel-syms" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="6b9a9195ad5cdabe7f21c4f40a703e531ec7ce50792d4ab92f1bd7e4cceac906" name="kernel-syms" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="a171270b8c1e7f011bf76be6c90baee8071052262cebdd7a6a578e80e34346fe" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="3d5620bd9da7967fb7279ee30e8a1977fa980deb24a64824413c9b4c5f60c330" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="fd5176f9ccb0495d8fd5d01687c683498341d6e449f10f1265194f675826dc76" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="41ab2abe1b17f5bf056032cb77aca69ef3a68fbd8ec70316acc98fde87a8c212" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="80d8fa707e84f3ca908b684739fcc8ecb2dfdc5e0f268e39ee15bd46404f3c39" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="265bc95a3a0d89b81bc801de7fd945b32e8a36562cdc029edc5f13e37c9a3518" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="6b3e79d1562a88048dcc5e7cdf2c772a96ec78c0025fc1c36b9912f3e6394416" name="kernel-vanilla" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="85e8431bc30cb704113aca814b3b315a1b0133c4928c06a245df2bed508199e9" name="kernel-vanilla" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="23f482f086eb7a931e13ecdc97ae6f9e6b888e57ddbdfe78325fffbb0e461a7d" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="0d7ae728aa55016ffc30e8cd9811977facc30e8e095754d464fdf280dd3c8493" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="6e37b79c0f05054ad2e10ff01721b18860e7151abdc99cf669738f0ea4a49a9b" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="a8f2b5c34c5a7b33e5657abf59e043daa78819e01d5d064d3b3324fd14f1e790" name="kernel-vanilla-base" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="7fed59fc3c4b695c49c09ab2d5fd6319a3b7d2cae485e47b1c1ab0d446547480" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.10.1"/>
  <changelog author="tiwai@suse.de" date="1533297600">- ath: Add regulatory mapping for FCC3_ETSIC (bsc#1051510).
- ath: Add regulatory mapping for ETSI8_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL13_WORLD (bsc#1051510).
- ath: Add regulatory mapping for APL2_FCCA (bsc#1051510).
- ath: Add regulatory mapping for Uganda (bsc#1051510).
- ath: Add regulatory mapping for Tanzania (bsc#1051510).
- ath: Add regulatory mapping for Serbia (bsc#1051510).
- ath: Add regulatory mapping for Bermuda (bsc#1051510).
- ath: Add regulatory mapping for Bahamas (bsc#1051510).
- commit ef8a588</changelog>
  <changelog author="tiwai@suse.de" date="1533297601">- backlight: pwm_bl: Don't use GPIOF_* with gpiod_get_direction
  (bsc#1051510).
- commit b690254</changelog>
  <changelog author="tiwai@suse.de" date="1533297602">- Bluetooth: hci_qca: Fix "Sleep inside atomic section" warning
  (bsc#1051510).
- Bluetooth: btusb: Add a new Realtek 8723DE ID 2ff8:b011
  (bsc#1051510).
- Bluetooth: btusb: add ID for LiteOn 04ca:301a (bsc#1051510).
- commit 1558300</changelog>
  <changelog author="tiwai@suse.de" date="1533297603">- brcmfmac: Add support for bcm43364 wireless chipset
  (bsc#1051510).
- commit 0ffea14</changelog>
  <changelog author="tiwai@suse.de" date="1533297604">- drm/nouveau/fifo/gk104-: poll for runlist update completion
  (bsc#1051510).
- drm/radeon: fix mode_valid's return type (bsc#1051510).
- drm/amdgpu: Remove VRAM from shared bo domains (bsc#1051510).
- drm/atomic: Handling the case when setting old crtc for plane
  (bsc#1051510).
- drm: Add DP PSR2 sink enable bit (bsc#1051510).
- drm/gma500: fix psb_intel_lvds_mode_valid()'s return type
  (bsc#1051510).
- drm/atomic-helper: Drop plane-&gt;fb references only for
  drm_atomic_helper_shutdown() (bsc#1051510).
- drm/dp/mst: Fix off-by-one typo when dump payload table
  (bsc#1051510).
- commit 7cea46b</changelog>
  <changelog author="hare@suse.de" date="1533297605">- genirq: Check __free_irq() return value for NULL (bsc#1103517).
- commit 9178bf4</changelog>
  <changelog author="tiwai@suse.de" date="1533297606">- HID: hid-plantronics: Re-resend Update to map button for PTT
  products (bsc#1051510).
- HID: i2c-hid: check if device is there before really probing
  (bsc#1051510).
- commit 5031b8e</changelog>
  <changelog author="tiwai@suse.de" date="1533297607">- iwlwifi: pcie: fix race in Rx buffer allocator (bsc#1051510).
- hippi: Fix a Fix a possible sleep-in-atomic bug in rr_close
  (bsc#1051510).
- commit 4d9f523</changelog>
  <changelog author="tiwai@suse.de" date="1533297608">- mmc: dw_mmc: update actual clock for mmc debugfs (bsc#1051510).
- mmc: pwrseq: Use kmalloc_array instead of stack VLA
  (bsc#1051510).
- commit 9de6ae2</changelog>
  <changelog author="tiwai@suse.de" date="1533297609">- mwifiex: handle race during mwifiex_usb_disconnect
  (bsc#1051510).
- mwifiex: correct histogram data with appropriate index
  (bsc#1051510).
- commit 213b188</changelog>
  <changelog author="tiwai@suse.de" date="1533297610">- PCI: pciehp: Request control of native hotplug only if supported
  (bsc#1051510).
- PCI: Prevent sysfs disable of device while driver is attached
  (bsc#1051510).
- PCI: pciehp: Assume NoCompl+ for Thunderbolt ports
  (bsc#1051510).
- commit fd4b739</changelog>
  <changelog author="tiwai@suse.de" date="1533297611">- pinctrl: at91-pio4: add missing of_node_put (bsc#1051510).
- commit 88447f1</changelog>
  <changelog author="tiwai@suse.de" date="1533297612">- regulator: pfuze100: add .is_enable() for
  pfuze100_swb_regulator_ops (bsc#1051510).
- commit 6fcd164</changelog>
  <changelog author="tiwai@suse.de" date="1533297613">- soc: imx: gpc: restrict register range for regmap access
  (bsc#1051510).
- soc: imx: gpcv2: correct PGC offset (bsc#1051510).
- soc: imx: gpcv2: Do not pass static memory as platform data
  (bsc#1051510).
- soc: rockchip: power-domain: Fix wrong value when power up pd
  with writemask (bsc#1051510).
- soc: bcm2835: Make !RASPBERRYPI_FIRMWARE dummies return failure
  (bsc#1051510).
- soc: bcm: raspberrypi-power: Fix use of __packed (bsc#1051510).
- soc: qcom: wcnss_ctrl: Fix increment in NV upload (bsc#1051510).
- soc: imx: gpc: de-register power domains only if initialized
  (bsc#1051510).
- soc: mediatek: pwrap: fix compiler errors (bsc#1051510).
- drivers: soc: sunxi: fix error processing on base address when
  claiming (bsc#1051510).
- soc/tegra: Fix bad of_node_put() in powergate init
  (bsc#1051510).
- soc: ti: ti_sci_pm_domains: Populate name for genpd
  (bsc#1051510).
- soc: imx: gpcv2: fix regulator deferred probe (bsc#1051510).
- soc: zte: Restrict SOC_ZTE to ARCH_ZX or COMPILE_TEST
  (bsc#1051510).
- soc/tegra: flowctrl: Fix error handling (bsc#1051510).
- commit 9cb4c4a</changelog>
  <changelog author="tiwai@suse.de" date="1533297614">- spi: pxa2xx: check clk_prepare_enable() return value
  (bsc#1051510).
- spi/bcm63xx-hspi: Enable the clock before calling clk_get_rate()
  (bsc#1051510).
- spi: bcm2835aux: ensure interrupts are enabled for shared
  handler (bsc#1051510).
- spi: bcm-qspi: Always read and set BSPI_MAST_N_BOOT_CTRL
  (bsc#1051510).
- spi: bcm-qspi: Avoid setting MSPI_CDRAM_PCS for spi-nor master
  (bsc#1051510).
- spi: pxa2xx: Allow 64-bit DMA (bsc#1051510).
- spi: cadence: Add usleep_range() for cdns_spi_fill_tx_fifo()
  (bsc#1051510).
- commit 3231b87</changelog>
  <changelog author="tiwai@suse.de" date="1533297615">- virtio_balloon: fix another race between migration and
  ballooning (bsc#1051510).
- thermal: exynos: fix setting rising_threshold for Exynos5433
  (bsc#1051510).
- wlcore: sdio: check for valid platform device data before
  suspend (bsc#1051510).
- tty: Fix data race in tty_insert_flip_string_fixed_flag
  (bsc#1051510).
- usbip: usbip_detach: Fix memory, udev context and udev leak
  (bsc#1051510).
- usb: hub: Don't wait for connect state at resume for powered-off
  ports (bsc#1051510).
- commit b882831</changelog>
  <changelog author="mbrugger@suse.com" date="1533297616">- arm64: perf: correct PMUVer probing (bsc#1103727).
- arm64: Disable unhandled signal log messages by default
  (bsc#1103724).
- arm64: spinlock: Fix theoretical trylock() A-B-A with LSE
  atomics (bsc#1103729).
- arm64: Correct type for PUD macros (bsc#1103723).
- arm64: KVM: fix VTTBR_BADDR_MASK BUG_ON off-by-one
  (bsc#1103725).
- arm64: vdso: fix clock_getres for 4GiB-aligned res
  (bsc#1103730).
- arm64: mm: Fix set_memory_valid() declaration (bsc#1103726).
- arm64: ptrace: Avoid setting compat FPR to garbage if get_user
  fails (bsc#1103728).
- commit e9c9c2d</changelog>
  <changelog author="ggherdovich@suse.cz" date="1533297617">- cpufreq: intel_pstate: Limit the scope of HWP dynamic boost
  platforms (bsc#1066110).
- commit fb964ec</changelog>
  <changelog author="tiwai@suse.de" date="1533384000">- drm/atomic: Make async plane update checks work as intended,
  v2 (bsc#1051510).
- Refresh
  patches.drivers/drm-atomic-Check-for-busy-planes-connectors-before-s.
- commit da93c7a</changelog>
  <changelog author="tiwai@suse.de" date="1533384001">- drm/vc4: Reset -&gt;{x, y}_scaling[1] when dealing with uniplanar
  formats (bsc#1051510).
- drm/atomic: Initialize variables in
  drm_atomic_helper_async_check() to make gcc happy (bsc#1051510).
- drm/atomic: Check old_plane_state-&gt;crtc in
  drm_atomic_helper_async_check() (bsc#1051510).
- drm: re-enable error handling (bsc#1051510).
- commit c3cb984</changelog>
</package>
<package pkgid="63e70dd63569d4aa9a5349a3b90c6bd9b7b3b0e0b480617001eb7b81a6d18b83" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.13.1"/>
  <changelog author="jthumshirn@suse.de" date="1533643200">- scsi: hisi_sas: Remove depends on HAS_DMA in case of platform
  dependency (FATE#326253).
- scsi: hisi_sas: add v3 hw MODULE_DEVICE_TABLE() (FATE#326253).
- scsi: hisi_sas: modify some register config for hip08
  (FATE#326253).
- scsi: hisi_sas: Code cleanup and minor bug fixes (FATE#326253).
- scsi: hisi_sas: fix return value of hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: remove unused variable
  hisi_sas_devices.running_req (FATE#326253).
- scsi: hisi_sas: increase timer expire of internal abort task
  (FATE#326253).
- scsi: hisi_sas: fix the issue of setting linkrate register
  (FATE#326253).
- scsi: hisi_sas: fix the issue of link rate inconsistency
  (FATE#326253).
- scsi: hisi_sas: support the property of signal attenuation
  for v2 hw (FATE#326253).
- scsi: hisi_sas: dt-bindings: add an property of signal
  attenuation (FATE#326253).
- commit 7f7691c</changelog>
  <changelog author="neilb@suse.com" date="1533729600">- cachefiles: Wait rather than BUG'ing on "Unexpected object
  collision" (bsc#1099858).
- cachefiles: Fix missing clear of the CACHEFILES_OBJECT_ACTIVE
  flag (bsc#1099858).
- fscache: Fix reference overput in fscache_attach_object()
  error handling (bsc#1099858).
- cachefiles: Fix refcounting bug in backing-file read monitoring
  (bsc#1099858).
- fscache: Allow cancelled operations to be enqueued
  (bsc#1099858).
- commit c298ec1</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729601">- scsi: hisi_sas: Mark PHY as in reset for nexus reset
  (FATE#326253).
- scsi: hisi_sas: Fix return value when get_free_slot() failed
  (FATE#326253).
- scsi: hisi_sas: Terminate STP reject quickly for v2 hw
  (FATE#326253).
- scsi: hisi_sas: Add v2 hw force PHY function for internal ATA
  command (FATE#326253).
- scsi: hisi_sas: Include TMF elements in struct hisi_sas_slot
  (FATE#326253).
- scsi: hisi_sas: Try wait commands before before controller reset
  (FATE#326253).
- scsi: hisi_sas: Init disks after controller reset (FATE#326253).
- scsi: hisi_sas: Create a scsi_host_template per HW module
  (FATE#326253).
- scsi: hisi_sas: Reset disks when discovered (FATE#326253).
- scsi: hisi_sas: Add LED feature for v3 hw (FATE#326253).
- scsi: hisi_sas: Change common allocation mode of device id
  (FATE#326253).
- scsi: hisi_sas: change slot index allocation mode (FATE#326253).
- scsi: hisi_sas: Introduce hisi_sas_phy_set_linkrate()
  (FATE#326253).
- scsi: hisi_sas: fix a typo in hisi_sas_task_prep()
  (FATE#326253).
- scsi: hisi_sas: add check of device in hisi_sas_task_exec()
  (FATE#326253).
- scsi: hisi_sas: Use device lock to protect slot alloc/free
  (FATE#326253).
- scsi: hisi_sas: Don't lock DQ for complete task sending
  (FATE#326253).
- scsi: hisi_sas: allocate slot buffer earlier (FATE#326253).
- scsi: hisi_sas: make return type of prep functions void
  (FATE#326253).
- scsi: hisi_sas: relocate smp sg map (FATE#326253).
- scsi: hisi_sas: workaround a v3 hw hilink bug (FATE#326253).
- scsi: hisi_sas: add readl poll timeout helper wrappers
  (FATE#326253).
- scsi: hisi_sas: remove redundant handling to event95 for v3
  (FATE#326253).
- scsi: hisi_sas: config ATA de-reset as an constrained command
  for v3 hw (FATE#326253).
- scsi: hisi_sas: update PHY linkrate after a controller reset
  (FATE#326253).
- scsi: hisi_sas: stop controller timer for reset (FATE#326253).
- scsi: hisi_sas: check sas_dev gone earlier in
  hisi_sas_abort_task() (FATE#326253).
- scsi: hisi_sas: fix PI memory size (FATE#326253).
- scsi: hisi_sas: check host frozen before calling "done" function
  (FATE#326253).
- scsi: hisi_sas: Add some checks to avoid free'ing a sas_task
  twice (FATE#326253).
- scsi: hisi_sas: optimise the usage of DQ locking (FATE#326253).
- scsi: hisi_sas: remove some unneeded structure members
  (FATE#326253).
- scsi: hisi_sas: print device id for errors (FATE#326253).
- scsi: hisi_sas: check IPTT is valid before using it for v3 hw
  (FATE#326253).
- scsi: hisi_sas: consolidate command check in
  hisi_sas_get_ata_protocol() (FATE#326253).
- scsi: hisi_sas: use dma_zalloc_coherent() (FATE#326253).
- scsi: hisi_sas: delete timer when removing hisi_sas driver
  (FATE#326253).
- scsi: hisi_sas: update RAS feature for later revision of v3 HW
  (FATE#326253).
- scsi: hisi_sas: make SAS address of SATA disks unique
  (FATE#326253).
- commit 159d1e6</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729602">- kabi/severities: don't complain on hisi_sas internal changes (FATE#326253).
- commit 1886299</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729603">- Refresh patches.kabi/kabi-fixup-bdev_dax_supported.patch.
  Fix build with CONFIG_FS_DAX=n
- commit 5e2991a</changelog>
  <changelog author="tiwai@suse.de" date="1533729604">- pinctrl: intel: Add Intel Lewisburg GPIO support (FATE#325120).
- commit 8bbee0b</changelog>
  <changelog author="tiwai@suse.de" date="1533729605">- Enable / support pinctrl-lewisburg (FATE#325120)
- commit a75e7c4</changelog>
  <changelog author="hare@suse.de" date="1533729606">- nvme: fixup crash on failed discovery (bsc#1103920).
- commit 62c671b</changelog>
  <changelog author="tiwai@suse.de" date="1533729607">- Update config files: update vanilla config accordingly, too
- commit 85e24ed</changelog>
  <changelog author="hare@suse.de" date="1533729608">- scsi: lpfc: Revise copyright for new company language
  (bsc#1102658).
- scsi: lpfc: update driver version to 12.0.0.5 (bsc#1102658).
- scsi: lpfc: devloss timeout race condition caused null pointer
  reference (bsc#1102658).
- scsi: lpfc: Fix NVME Target crash in defer rcv logic
  (bsc#1102658).
- scsi: lpfc: Support duration field in Link Cable Beacon V1
  command (bsc#1102658).
- scsi: lpfc: Make PBDE optimizations configurable (bsc#1102658).
- scsi: lpfc: Fix abort error path for NVMET (bsc#1102658).
- scsi: lpfc: Fix panic if driver unloaded when port is offline
  (bsc#1102658).
- scsi: lpfc: Fix driver not setting dpp bits correctly in
  doorbell word (bsc#1102658).
- scsi: lpfc: Add Buffer overflow check, when nvme_info larger
  than PAGE_SIZE (bsc#1102658).
- commit 76d7dc2</changelog>
  <changelog author="hare@suse.de" date="1533729609">- scripts/git_sort/git_sort.py: Update SCSI branches from mkp
- commit 9ef0360</changelog>
  <changelog author="hare@suse.de" date="1533729610">- scsi: lpfc: update driver version to 12.0.0.6 (bsc#1102658).
- scsi: lpfc: Remove lpfc_enable_pbde as module parameter
  (bsc#1102658).
- scsi: lpfc: Correct LCB ACCept payload (bsc#1102658).
- scsi: lpfc: Limit tracking of tgt queue depth in fast path
  (bsc#1102658).
- scsi: lpfc: Fix driver crash when re-registering NVME rports
  (bsc#1102658).
- scsi: lpfc: Fix list corruption on the completion queue
  (bsc#1102658).
- scsi: lpfc: Fix sysfs Speed value on CNA ports (bsc#1102658).
- scsi: lpfc: Fix ELS abort on SLI-3 adapters (bsc#1102658).
- commit 7874701</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729611">- libnvdimm, dimm: fix dpa reservation vs uninitialized label area
  (git-fixes).
- commit 19be07d</changelog>
  <changelog author="hare@suse.de" date="1533729612">- nvme.h: fixup ANA group descriptor format (bsc#1104111).
- commit 8716981</changelog>
  <changelog author="hare@suse.de" date="1533729613">- nvme: use hw qid in trace events (bsc#1102633).
- nvme-fabrics: Ignore nr_io_queues option for discovery
  controllers (bsc#1102633).
- commit 7585e24</changelog>
  <changelog author="hare@suse.de" date="1533729614">- scsi: smartpqi: bump driver version to 1.1.4-130 (bsc#1086274).
- scsi: smartpqi: fix critical ARM issue reading PQI index
  registers (bsc#1086274).
- scsi: smartpqi: add inspur advantech ids (bsc#1086274).
- scsi: smartpqi: improve error checking for sync requests
  (bsc#1086274).
- scsi: smartpqi: improve handling for sync requests
  (bsc#1086274).
- scsi: smartpqi: update driver version (bsc#1086274).
- scsi: smartpqi: workaround fw bug for oq deletion (bsc#1086274).
- scsi: smartpqi: add in new supported controllers (bsc#1086274).
- commit 16b2418</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729615">- linvdimm, pmem: Preserve read-only setting for pmem devices
  (git-fixes).
- commit 4caf4e0</changelog>
  <changelog author="jthumshirn@suse.de" date="1533729616">- Delete
  patches.suse/0201-dax-dm-allow-device-mapper-to-operate-without-dax-su.patch (bsc#1103917).
- commit 34be890</changelog>
  <changelog author="msuchanek@suse.de" date="1533729617">- ibmvnic: Update firmware error reporting with cause string
  (bsc#1104174).
- ibmvnic: Remove code to request error information (bsc#1104174).
- ibmvnic: Revise RX/TX queue error messages (bsc#1101331).
- commit ad29e0c</changelog>
  <changelog author="tiwai@suse.de" date="1533729618">- clk: at91: fix clk-generated compilation (bsc#1051510).
- commit fe89fab</changelog>
</package>
<package pkgid="9f8dcddb138de3e0ba470cb67d03ea6520cea43b681eff522fc3576bacb418d1" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.16.1"/>
  <changelog author="jack@suse.cz" date="1533902400">- ext4: check for allocation block validity with block group
  locked (bsc#1104495).
- commit 687b42e</changelog>
  <changelog author="tiwai@suse.de" date="1533902401">- hwmon: (asus_atk0110) Replace deprecated device register call
  (bsc#1103363).
- commit d786db1</changelog>
  <changelog author="jgross@suse.com" date="1534161600">- xen-netback: fix input validation in xenvif_set_hash_mapping()
  (bnc#1103277).
- commit 6d2d327</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161601">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race'
- commit 777d4c9</changelog>
  <changelog author="tzimmermann@suse.de" date="1534161602">- blacklist.conf: Add 'drm/i915/pmu: Fix PMU enable vs execlists tasklet race' #2
- commit bb04587</changelog>
  <changelog author="jroedel@suse.de" date="1534161603">- x86/kvm: kABI workaround for CVE-2018-10853 fix (CVE-2018-10853
  bsc#1097104).
- kvm: x86: use correct privilege level for
  sgdt/sidt/fxsave/fxrstor access (CVE-2018-10853 bsc#1097104).
- KVM: x86: pass kvm_vcpu to kvm_read_guest_virt and
  kvm_write_guest_virt_system (CVE-2018-10853 bsc#1097104).
- KVM: x86: introduce linear_{read,write}_system (CVE-2018-10853
  bsc#1097104).
- commit 65006cb</changelog>
  <changelog author="oneukum@suse.com" date="1534161604">- net-usb: add qmi_wwan if on lte modem wistron neweb d18q1
  (bsc#1087092).
- commit ec40a3b</changelog>
  <changelog author="oneukum@suse.com" date="1534161605">- net: qmi_wwan: add BroadMobi BM806U 2020:2033 (bsc#1087092).
- commit f2aab4f</changelog>
  <changelog author="oneukum@suse.com" date="1534161606">- net: lan78xx: Fix race in tx pending skb size calculation
  (bsc#1100132).
- commit 748c48c</changelog>
  <changelog author="oneukum@suse.com" date="1534161607">- net: usb: asix: replace mii_nway_restart in resume path
  (bsc#1100132).
- commit 3df7ed3</changelog>
  <changelog author="oneukum@suse.com" date="1534161608">- net: lan78xx: fix rx handling before first packet is send
  (bsc#1100132).
- commit d201338</changelog>
  <changelog author="oneukum@suse.com" date="1534161609">- net: qmi_wwan: Add Netgear Aircard 779S (bsc#1090888).
- commit 8783b64</changelog>
  <changelog author="msuchanek@suse.de" date="1534161610">- powerpc/fadump: merge adjacent memory ranges to reduce PT_LOAD
  segements (bsc#1103269).
- powerpc/fadump: handle crash memory ranges array index overflow
  (bsc#1103269).
- commit 0d8b4a2</changelog>
  <changelog author="agraf@suse.de" date="1534161611">- supported.conf: Enable HiSi v3 SAS adapter (FATE#326253)
- commit 760b46a</changelog>
  <changelog author="ohering@suse.de" date="1534161612">- hv_netvsc: Fix napi reschedule while receive completion is busy
  (fate#323887).
- commit e458677</changelog>
  <changelog author="oneukum@suse.com" date="1534248000">- typec: tcpm: fusb302: Resolve out of order messaging events
  (bsc#1087092).
- commit 2640a76</changelog>
  <changelog author="jgross@suse.com" date="1534248001">- xen/netfront: don't cache skb_shinfo() (bnc#1065600).
- x86/xen: init %gs very early to avoid page faults with stack
  protector (bnc#1104777).
- commit 7fdcb3b</changelog>
  <changelog author="tiwai@suse.de" date="1534248002">- kabi/severities: Relax kvm_vcpu_* kABI breakage
- commit 1763549</changelog>
  <changelog author="tiwai@suse.de" date="1534248003">- Fix kABI breakage of kvm_x86_ops due to L1TF patches
  (bsc#1089343 CVE-2018-3646).
- commit 8a4775d</changelog>
  <changelog author="tiwai@suse.de" date="1534248004">- hv/netvsc: Fix NULL dereference at single queue mode fallback
  (bsc#1104708).
- commit 947aa51</changelog>
</package>
<package pkgid="b7ddbfb023cbd311369145939e2fce308dd42b4e46275ee7776397ed2489572f" name="kernel-vanilla-devel" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.12.7.1"/>
  <changelog author="ydfan@suse.com" date="1531310400">- watchdog: da9063: Fix timeout handling during probe
  (bsc#1100843).
- watchdog: da9063: Fix updating timeout value (bsc#1100843).
- watchdog: da9063: Fix setting/changing timeout (bsc#1100843).
- commit 5377bd8</changelog>
  <changelog author="hare@suse.de" date="1531396800">- nvme-fc: release io queues to allow fast fail (bsc#1098706).
- commit b66476d</changelog>
  <changelog author="hare@suse.de" date="1531396801">- scripts/git_sort/git_sort.py: Update nvme git repository
- commit c956504</changelog>
  <changelog author="hare@suse.de" date="1531396802">- nvme: move init of keep_alive work item to controller
  initialization (bsc#1098706).
- commit 2640b14</changelog>
  <changelog author="hare@suse.de" date="1531396803">- nvme-rdma: don't override opts-&gt;queue_size (bsc#1099041).
- nvme-rdma: Fix command completion race at error recovery
  (bsc#1099041).
- nvme-rdma: fix possible double free condition when failing to
  create a controller (bsc#1099041).
- nvme-rdma: fix error flow during mapping request data
  (bsc#1099041).
- nvme-rdma: correctly check for target keyed sgl support
  (bsc#1099041).
- commit 9801f97</changelog>
  <changelog author="tiwai@suse.de" date="1531483200">- Correct bug reference in the patch (bnc#1095155)
  Refreshed patches.suse/mremap-Remove-LATENCY_LIMIT-from-mremap-to-reduce-the-number-of-TLB-shootdowns.patch
- commit f9d8d21</changelog>
  <changelog author="tiwai@suse.de" date="1531483201">- HID: wacom: Add support for One by Wacom (CTL-472 / CTL-672)
  (bsc#1100633).
- commit e78ab26</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742400">- vfio: Use get_user_pages_longterm correctly (bsc#1095337).
- commit 8e5df06</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742401">- scsi: sg: mitigate read/write abuse (bsc#1101296).
- commit fb00485</changelog>
  <changelog author="tiwai@suse.de" date="1531742402">- Fix the build of da9063_wdt module (bsc#1100843)
  Backport the missing prerequisite commit, move the previous fixes into
  the sorted section and refresh.
- commit b022133</changelog>
  <changelog author="msuchanek@suse.de" date="1531742403">- Pass x86 as architecture on x86_64 and i386 (bsc#1093118).
- commit 5f24fb0</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742404">- dax: check for QUEUE_FLAG_DAX in bdev_dax_supported()
  (bsc#1101315).
- commit a8f6b16</changelog>
  <changelog author="jthumshirn@suse.de" date="1531742405">- blacklist.conf: blacklist 68c59fcea1f2 ("scsi: sg: fix SG_DXFER_FROM_DEV transfers")
- commit 3748a31</changelog>
  <changelog author="tiwai@suse.de" date="1531742406">- vmw_balloon: fix inflation with batching (bsc#1051510).
- commit 6791362</changelog>
  <changelog author="tiwai@suse.de" date="1531742407">- nl80211: relax ht operation checks for mesh (bsc#1051510).
- commit 7bed2e0</changelog>
  <changelog author="tiwai@suse.de" date="1531742408">- HID: add backlight level quirk for Asus ROG laptops
  (bsc#1101324).
- commit bbee3e0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1531742409">- restore cond_resched() in shrink_dcache_parent() (bsc#1098599).
- Refresh patches.fixes/dcache-add-cond_resched-in-shrink_dentry_list.patch.
- commit 460aaf6</changelog>
  <changelog author="nborisov@suse.com" date="1531828800">- kmod: fix wait on recursive loop (bsc#1099792).
- wait: add wait_event_killable_timeout() (bsc#1099792).
- kmod: throttle kmod thread limit (bsc#1099792).
- kmod: reduce atomic operations on kmod_concurrent and simplify
  (bsc#1099792).
- commit d8a7e2c</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828801">- bnxt_en: Always forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Read phy eeprom A2h address only when optical
  diagnostics is supported (bsc#1086282 FATE#324873).
- bnxt_en: Check unsupported speeds in bnxt_update_link() on PF
  only (bsc#1086282 FATE#324873).
- bnxt_en: Fix firmware message delay loop regression (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve rings at driver open if none was reserved at
  probe time (bsc#1086282 FATE#324873).
- bnxt_en: Reserve RSS and L2 contexts for VF (bsc#1086282
  FATE#324873).
- bnxt_en: Don't reserve rings on VF when min rings were not
  provisioned by PF (bsc#1086282 FATE#324873).
- bnxt_en: Reserve rings in bnxt_set_channels() if device is down
  (bsc#1086282 FATE#324873).
- bnxt_en: reduce timeout on initial HWRM calls (bsc#1086282
  FATE#324873).
- bnxt_en: Increase RING_IDLE minimum threshold to 50 (bsc#1086282
  FATE#324873).
- bnxt_en: Do not allow VF to read EEPROM (bsc#1086282
  FATE#324873).
- bnxt_en: Display function level rx/tx_discard_pkts via ethtool
  (bsc#1086282 FATE#324873).
- bnxt_en: Simplify ring alloc/free error messages (bsc#1086282
  FATE#324873).
- bnxt_en: Do not set firmware time from VF driver on older
  firmware (bsc#1086282 FATE#324873).
- bnxt_en: Check the lengths of encapsulated firmware responses
  (bsc#1086282 FATE#324873).
- bnxt_en: Remap TC to hardware queues when configuring PFC
  (bsc#1086282 FATE#324873).
- bnxt_en: Add TC to hardware QoS queue mapping logic (bsc#1086282
  FATE#324873).
- bpf: make bnxt compatible w/ bpf_xdp_adjust_tail (bsc#1086282
  FATE#324873).
- bnxt_en: Fix NULL pointer dereference at bnxt_free_irq()
  (bsc#1086282 FATE#324873).
- bnxt_en: Need to include RDMA rings in bnxt_check_rings()
  (bsc#1086282 FATE#324873).
- bnxt_en: Support max-mtu with VF-reps (bsc#1086282 FATE#324873).
- bnxt_en: Fix ethtool -x crash when device is down (bsc#1086282
  FATE#324873).
- bnxt_en: Add ULP calls to stop and restart IRQs (bsc#1086282
  FATE#324873).
- bnxt_en: Reserve completion rings and MSIX for bnxt_re RDMA
  driver (bsc#1086282 FATE#324873).
- bnxt_en: Refactor bnxt_need_reserve_rings() (bsc#1086282
  FATE#324873).
- bnxt_en: Add IRQ remapping logic (bsc#1086282 FATE#324873).
- bnxt_en: Change IRQ assignment for RDMA driver (bsc#1086282
  FATE#324873).
- bnxt_en: Improve ring allocation logic (bsc#1086282
  FATE#324873).
- bnxt_en: Improve valid bit checking in firmware response message
  (bsc#1086282 FATE#324873).
- bnxt_en: Improve resource accounting for SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Check max_tx_scheduler_inputs value from firmware
  (bsc#1086282 FATE#324873).
- bnxt_en: Add extended port statistics support (bsc#1086282
  FATE#324873).
- bnxt_en: Include additional hardware port statistics in ethtool
  - S (bsc#1086282 FATE#324873).
- bnxt_en: Add support for ndo_set_vf_trust (bsc#1086282
  FATE#324873).
- bnxt_en: Use a dedicated VNIC mode for RDMA (bsc#1086282
  FATE#324873).
- bnxt_en: Adjust default rings for multi-port NICs (bsc#1086282
  FATE#324873).
- bnxt_en: Update firmware interface to 1.9.1.15 (bsc#1086282
  FATE#324873).
- bnxt_en: Eliminate duplicate barriers on weakly-ordered archs
  (bsc#1086282 FATE#324873).
- bnxt_en: close &amp; open NIC, only when the interface is in
  running state (bsc#1086282 FATE#324873).
- bnxt_en: Fix regressions when setting up MQPRIO TX rings
  (bsc#1086282 FATE#324873).
- bnxt_en: Pass complete VLAN TCI to the stack (bsc#1086282
  FATE#324873).
- bnxt_en: Fix vnic accounting in the bnxt_check_rings() path
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor the functions to reserve hardware rings
  (bsc#1086282 FATE#324873).
- bnxt_en: export a common switchdev PARENT_ID for all reps of
  an adapter (bsc#1086282 FATE#324873).
- bnxt_en: Add cache line size setting to optimize performance
  (bsc#1086282 FATE#324873).
- bnxt_en: Forward VF MAC address to the PF (bsc#1086282
  FATE#324873).
- bnxt_en: Add BCM5745X NPAR device IDs (bsc#1086282 FATE#324873).
- bnxt_en: Expand bnxt_check_rings() to check all resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method for the PF to assign SRIOV
  resources (bsc#1086282 FATE#324873).
- bnxt_en: Reserve resources for RFS (bsc#1086282 FATE#324873).
- bnxt_en: Implement new method to reserve rings (bsc#1086282
  FATE#324873).
- bnxt_en: Set initial default RX and TX ring numbers the same
  in combined mode (bsc#1086282 FATE#324873).
- bnxt_en: Add the new firmware API to query hardware resources
  (bsc#1086282 FATE#324873).
- bnxt_en: Refactor hardware resource data structures (bsc#1086282
  FATE#324873).
- bnxt_en: Restore MSIX after disabling SRIOV (bsc#1086282
  FATE#324873).
- bnxt_en: Refactor bnxt_close_nic() (bsc#1086282 FATE#324873).
- bnxt_en: Update firmware interface to 1.9.0 (bsc#1086282
  FATE#324873).
- ethernet/broadcom: Use zeroing memory allocator than
  allocator/memset (bsc#1086282 FATE#324873).
- commit 4f4d8d1</changelog>
  <changelog author="tbogendoerfer@suse.de" date="1531828802">- RDMA/bnxt_re: Fix broken RoCE driver due to recent L2 driver
  changes (bsc#1086283 FATE#324874).
- RDMA/bnxt_re: Remove redundant bnxt_qplib_disable_nq() call
  (bsc#1086283 FATE#324874).
- commit 6b2af6f</changelog>
</package>
<package pkgid="1e3f0dfdf9eac2c6ea13e3fa7088d3d2216bb4d059bd59d8cd0aa74cc04f9d38" name="kglobalaccel" arch="src">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="394d9885ed7dba38df769b5a3f223150081d1a94c6d264921aed453544c7e62b" name="kglobalaccel-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="20e51f62f9917adb3d6a8616be6ce61eda9c900be60e309b9d62d1ff93794c0d" name="kglobalaccel-devel" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="c0687f6b772f4f3837dc25f895fc089d5788a9fb8cfb068eda935ab3254b29da" name="kglobalaccel5" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="4b251155d39cd42836ffed03a3de108c05454be62a4d42495e2e7c3b7b39a782" name="khotkeys5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Add Requires: libqt5-qdbus
- Fix typos in descriptions
- Mention package name in 0001-Use-qdbus-qt5-and-qdbusviewer-qt5.patch</changelog>
  <changelog author="christophe@krop.fr" date="1503144000">- Add 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch.
  Fixes build with CMake &gt;= 3.9</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Make sure the dbus xml interface file exists before it's used
- Remove patches, now upstream:
  * 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * kcm hotkeys: Add space in front of spinbox suffix "ms"
  * Fix double space in UI string</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Remove verbose debugging statement</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="7fbf618ee60633ea76848c9700aa85e082141cd8f7a768acf4e86c16970e9c10" name="khotkeys5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Add Requires: libqt5-qdbus
- Fix typos in descriptions
- Mention package name in 0001-Use-qdbus-qt5-and-qdbusviewer-qt5.patch</changelog>
  <changelog author="christophe@krop.fr" date="1503144000">- Add 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch.
  Fixes build with CMake &gt;= 3.9</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Make sure the dbus xml interface file exists before it's used
- Remove patches, now upstream:
  * 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * kcm hotkeys: Add space in front of spinbox suffix "ms"
  * Fix double space in UI string</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Remove verbose debugging statement</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="5f61cdad238377c3b9db8bdf04a531575165cf436996a9c56788eb544c7c9998" name="khotkeys5-devel" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Add Requires: libqt5-qdbus
- Fix typos in descriptions
- Mention package name in 0001-Use-qdbus-qt5-and-qdbusviewer-qt5.patch</changelog>
  <changelog author="christophe@krop.fr" date="1503144000">- Add 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch.
  Fixes build with CMake &gt;= 3.9</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Make sure the dbus xml interface file exists before it's used
- Remove patches, now upstream:
  * 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * kcm hotkeys: Add space in front of spinbox suffix "ms"
  * Fix double space in UI string</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Remove verbose debugging statement</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="d86352f8cd13a12d39818c6257518904e339405ba3fa44bf795bf9a6d641ce0f" name="khotkeys5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502971200">- Add Requires: libqt5-qdbus
- Fix typos in descriptions
- Mention package name in 0001-Use-qdbus-qt5-and-qdbusviewer-qt5.patch</changelog>
  <changelog author="christophe@krop.fr" date="1503144000">- Add 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch.
  Fixes build with CMake &gt;= 3.9</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Make sure the dbus xml interface file exists before it's used
- Remove patches, now upstream:
  * 0002-Make-sure-the-dbus-xml-interface-file-exists-before-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * kcm hotkeys: Add space in front of spinbox suffix "ms"
  * Fix double space in UI string</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Remove verbose debugging statement</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="9878eccca46355317f2cbaf09ecc7aa5fd9a688536f9d09fde1a898988f484ff" name="kinfocenter5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Allow to select module with keyboard
  * Do not leak XVisualInfo (X11 EGL path)
  * Do not mark {variantLabel} as translatable
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Drop custom app metadata setting, KAboutData::setApplicationData does it
  * Call KLocalizedString::setApplicationDomain before first i18n usage</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Const'ify, initialize variable, minor optimization
  * Update copyright
  * Fix cmake warning
  * Const'ify
  * When we click on "clear search" clear lineedit too
  * Do not leak XVisualInfo (GLX path)
  * Don't build pci module on ARM (kde#335908)
  * Remove obsolete reviewboardrc file
  * const'ify
  * Use isEmpty
  * Port to new connect api
  * Port to new connect api
  * USe nullptr. Clean up. Optimization
  * Add gitignore
  * Reindent it
  * Make as explicit, use nullptr
  * Fix clazy warning
  * Fix some clazy warning
  * simplify check
  * Ise nullptr
  * Modernize code
  * opengl: Dummy string should not be translatable
  * Expose the memory usage percentages to accessibility tools</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Ensure Registry gets destroyed before the Wayland connection (kde#387479)
  * Show high-resolution and vector logos properly in HighDPI mode (kde#388633)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * kcm_energyinfo: Allow changing of the timespan if no data available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * kcm_opengl: Fix EGL info retrieval.</changelog>
  <changelog author="wbauer@tmo.at" date="1525780800">- Add kcm_opengl-Fix-retrieval-of-DRI-information.patch to fix
  displaying 3D acceleration info and kernel module in "OpenGL"
  with kernels &gt;= 3.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kinfocenter docbook to 5.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="0f13bc98e0e16add9135c268930da5074004ad8e86f06f1f53ead1ad658fc2a8" name="kinfocenter5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Allow to select module with keyboard
  * Do not leak XVisualInfo (X11 EGL path)
  * Do not mark {variantLabel} as translatable
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Drop custom app metadata setting, KAboutData::setApplicationData does it
  * Call KLocalizedString::setApplicationDomain before first i18n usage</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Const'ify, initialize variable, minor optimization
  * Update copyright
  * Fix cmake warning
  * Const'ify
  * When we click on "clear search" clear lineedit too
  * Do not leak XVisualInfo (GLX path)
  * Don't build pci module on ARM (kde#335908)
  * Remove obsolete reviewboardrc file
  * const'ify
  * Use isEmpty
  * Port to new connect api
  * Port to new connect api
  * USe nullptr. Clean up. Optimization
  * Add gitignore
  * Reindent it
  * Make as explicit, use nullptr
  * Fix clazy warning
  * Fix some clazy warning
  * simplify check
  * Ise nullptr
  * Modernize code
  * opengl: Dummy string should not be translatable
  * Expose the memory usage percentages to accessibility tools</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Ensure Registry gets destroyed before the Wayland connection (kde#387479)
  * Show high-resolution and vector logos properly in HighDPI mode (kde#388633)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * kcm_energyinfo: Allow changing of the timespan if no data available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * kcm_opengl: Fix EGL info retrieval.</changelog>
  <changelog author="wbauer@tmo.at" date="1525780800">- Add kcm_opengl-Fix-retrieval-of-DRI-information.patch to fix
  displaying 3D acceleration info and kernel module in "OpenGL"
  with kernels &gt;= 3.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kinfocenter docbook to 5.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="ae035b1d52d504962ab3e456c224617b73958e712287b3ae652aa66bcab2c057" name="kinfocenter5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Allow to select module with keyboard
  * Do not leak XVisualInfo (X11 EGL path)
  * Do not mark {variantLabel} as translatable
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Drop custom app metadata setting, KAboutData::setApplicationData does it
  * Call KLocalizedString::setApplicationDomain before first i18n usage</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Const'ify, initialize variable, minor optimization
  * Update copyright
  * Fix cmake warning
  * Const'ify
  * When we click on "clear search" clear lineedit too
  * Do not leak XVisualInfo (GLX path)
  * Don't build pci module on ARM (kde#335908)
  * Remove obsolete reviewboardrc file
  * const'ify
  * Use isEmpty
  * Port to new connect api
  * Port to new connect api
  * USe nullptr. Clean up. Optimization
  * Add gitignore
  * Reindent it
  * Make as explicit, use nullptr
  * Fix clazy warning
  * Fix some clazy warning
  * simplify check
  * Ise nullptr
  * Modernize code
  * opengl: Dummy string should not be translatable
  * Expose the memory usage percentages to accessibility tools</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Ensure Registry gets destroyed before the Wayland connection (kde#387479)
  * Show high-resolution and vector logos properly in HighDPI mode (kde#388633)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * kcm_energyinfo: Allow changing of the timespan if no data available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * kcm_opengl: Fix EGL info retrieval.</changelog>
  <changelog author="wbauer@tmo.at" date="1525780800">- Add kcm_opengl-Fix-retrieval-of-DRI-information.patch to fix
  displaying 3D acceleration info and kernel module in "OpenGL"
  with kernels &gt;= 3.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kinfocenter docbook to 5.12</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="ca9fc831dd7ef2dc524d65ca60805a3c808ff4e4da7fb0e79abdc82245fc2b03" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="ba5927178fb0b044159020cc611700038186d7338975d94dd47c684dfb8e7cf9" name="kiwi-man-pages" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="4eec6b6b24afcd94d710199c85ea2b99772b415872295ac3a60d3f722804904b" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="1e4043934add8c03765193b910b1bffe07c21854302e2e1aff66c485cac9e294" name="kiwi-pxeboot" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="b8707e8b03cb52c012d5159150507388724d43c93bc55fd3fb322a8904206690" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="b7216c037d87c3e071e2dab4964fa696d03ea72f0c334c903ce92b27fcd4a5b7" name="kiwi-tools" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="6e5deb9cd0899e4cd11eaa235a1361ac7eecfee5b275adf5d2c880414ddfbb65" name="kmymoney" arch="src">
  <version epoch="0" ver="5.0.1" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="nico.kruber@gmail.com" date="1430308800">- Update to 4.7.2:
  * fix a crash in the transaction split editor
  * added the monetary symbol of the Turkish lira
  * matching restrictions on an already imported transaction
    were removed</changelog>
  <changelog author="wbauer@tmo.at" date="1464696000">- Only require libakonadiprotocolinternals1 (needed to run kmymoney)
  on Leap and Tumbleweed, not akonadi-runtime, to prevent conflicts
  with KDEPIM5 (boo#982301)</changelog>
  <changelog author="wbauer@tmo.at" date="1464782400">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- Update to 4.8.0
  * Added support for online SEPA transactions
  * Added support for import from Weboob
  * Improved payee matching when importing transactions
  * Supports AqBanking versions 5.5.0 or later
  * Updated Brazilian account templates
  * When an account cannot be closed, a tooltip explains the
    reason
  * Categories no longer have opening date, which caused annoying
    errors both during input and while running the consistency
    check
  * Do not inadvertently modify start date of schedules
  * Solved rounding problems causing reconciliation to fail and
    investment transaction to show missing assignments of 0.00
  * Fixed some annoying consistency check errors</changelog>
  <changelog author="nico.kruber@gmail.com" date="1473940800">- add kmymoney-4.8.0-fix-csv-import-account-type.patch which fixes
  the default CSV import to credit card accounts (kde#364425)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
</package>
<package pkgid="9154e9690a29375e6608e2185e6e9b6bd67170b6f1cfbfc732813520d8a1569b" name="kmymoney" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="nico.kruber@gmail.com" date="1430308800">- Update to 4.7.2:
  * fix a crash in the transaction split editor
  * added the monetary symbol of the Turkish lira
  * matching restrictions on an already imported transaction
    were removed</changelog>
  <changelog author="wbauer@tmo.at" date="1464696000">- Only require libakonadiprotocolinternals1 (needed to run kmymoney)
  on Leap and Tumbleweed, not akonadi-runtime, to prevent conflicts
  with KDEPIM5 (boo#982301)</changelog>
  <changelog author="wbauer@tmo.at" date="1464782400">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- Update to 4.8.0
  * Added support for online SEPA transactions
  * Added support for import from Weboob
  * Improved payee matching when importing transactions
  * Supports AqBanking versions 5.5.0 or later
  * Updated Brazilian account templates
  * When an account cannot be closed, a tooltip explains the
    reason
  * Categories no longer have opening date, which caused annoying
    errors both during input and while running the consistency
    check
  * Do not inadvertently modify start date of schedules
  * Solved rounding problems causing reconciliation to fail and
    investment transaction to show missing assignments of 0.00
  * Fixed some annoying consistency check errors</changelog>
  <changelog author="nico.kruber@gmail.com" date="1473940800">- add kmymoney-4.8.0-fix-csv-import-account-type.patch which fixes
  the default CSV import to credit card accounts (kde#364425)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
</package>
<package pkgid="93592cbd96ed8921980f42e7887fb49c48c135d615636750078a95ffeb9d23b5" name="kmymoney-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="nico.kruber@gmail.com" date="1430308800">- Update to 4.7.2:
  * fix a crash in the transaction split editor
  * added the monetary symbol of the Turkish lira
  * matching restrictions on an already imported transaction
    were removed</changelog>
  <changelog author="wbauer@tmo.at" date="1464696000">- Only require libakonadiprotocolinternals1 (needed to run kmymoney)
  on Leap and Tumbleweed, not akonadi-runtime, to prevent conflicts
  with KDEPIM5 (boo#982301)</changelog>
  <changelog author="wbauer@tmo.at" date="1464782400">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- Update to 4.8.0
  * Added support for online SEPA transactions
  * Added support for import from Weboob
  * Improved payee matching when importing transactions
  * Supports AqBanking versions 5.5.0 or later
  * Updated Brazilian account templates
  * When an account cannot be closed, a tooltip explains the
    reason
  * Categories no longer have opening date, which caused annoying
    errors both during input and while running the consistency
    check
  * Do not inadvertently modify start date of schedules
  * Solved rounding problems causing reconciliation to fail and
    investment transaction to show missing assignments of 0.00
  * Fixed some annoying consistency check errors</changelog>
  <changelog author="nico.kruber@gmail.com" date="1473940800">- add kmymoney-4.8.0-fix-csv-import-account-type.patch which fixes
  the default CSV import to credit card accounts (kde#364425)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
</package>
<package pkgid="bd38a90f97149642ccbb603f0d30f53d47b110c3bb3979829c11789f40e73faf" name="kmymoney-lang" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="lp150.2.3.1"/>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415534400">- fix bashisms in post/postun scripts</changelog>
  <changelog author="nico.kruber@gmail.com" date="1430308800">- Update to 4.7.2:
  * fix a crash in the transaction split editor
  * added the monetary symbol of the Turkish lira
  * matching restrictions on an already imported transaction
    were removed</changelog>
  <changelog author="wbauer@tmo.at" date="1464696000">- Only require libakonadiprotocolinternals1 (needed to run kmymoney)
  on Leap and Tumbleweed, not akonadi-runtime, to prevent conflicts
  with KDEPIM5 (boo#982301)</changelog>
  <changelog author="wbauer@tmo.at" date="1464782400">- Use share-mime-info macros (boo#979301)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1468152000">- Update to 4.8.0
  * Added support for online SEPA transactions
  * Added support for import from Weboob
  * Improved payee matching when importing transactions
  * Supports AqBanking versions 5.5.0 or later
  * Updated Brazilian account templates
  * When an account cannot be closed, a tooltip explains the
    reason
  * Categories no longer have opening date, which caused annoying
    errors both during input and while running the consistency
    check
  * Do not inadvertently modify start date of schedules
  * Solved rounding problems causing reconciliation to fail and
    investment transaction to show missing assignments of 0.00
  * Fixed some annoying consistency check errors</changelog>
  <changelog author="nico.kruber@gmail.com" date="1473940800">- add kmymoney-4.8.0-fix-csv-import-account-type.patch which fixes
  the default CSV import to credit card accounts (kde#364425)</changelog>
  <changelog author="olaf@aepfle.de" date="1480420800">- Expand macro kde4_runtime_requires only when its available
  to fix quilt setup</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1481198400">- Revert kde4_runtime_requires change</changelog>
  <changelog author="adam.majer@suse.de" date="1485950400">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="wbauer@tmo.at" date="1496404800">- Add fix-build.patch to fix build with latest cmake in Factory</changelog>
  <changelog author="wbauer@tmo.at" date="1496836800">- Add aqbanking-5.1-backward-compatibility.patch to make it
  possible to build the kbanking plugin on Leap 42.X (boo#1042760)</changelog>
  <changelog author="wbauer@tmo.at" date="1498046400">- Modify aqbanking-5.1-backward-compatibility.patch to fix online
  SEPA transactions with aqbanking 5.1</changelog>
  <changelog author="wbauer@tmo.at" date="1503748800">- Add fix-build-with-cmake-3.9.patch to fix build with latest
  cmake in Factory (kde#383351)</changelog>
  <changelog author="wbauer@tmo.at" date="1512993600">- BuildIgnore libopenssl-1_0_0-devel to avoid an openssl conflict
  and fix the build on Tumbleweed</changelog>
  <changelog author="wbauer@tmo.at" date="1514376000">- Update to 4.8.1.1
  * Improvements to data import, including:
    + Improved payee matching
    + Avoid crash if you provide an invalid name for the import
    file
    + Resolved numerous issues with importing QIF and CSV files
    + Removed some restrictions on the type of account to which
    data can be imported
    + Allowed OFX import to use Client UID, required by some banks
  * Improvements to the database back end
    + Avoid a crash if the database is not present restoring from
    hibernation
    + Corrected SQL syntax issues causing errors
  * The user is now notified if changing a memo in a transaction
    would make it different from the memo in the other split of the
    transaction (such as in a transfer)
  * Added a setting to configure location of optional log file for
    imported data
  * Removed restriction on configuring VAT assignments for certain
    types of accounts
  * Eliminated false positive errors from Consistency Check
  * Several improvements to importing and exporting templates
  * Eliminated several causes of crashes
- Drop patches that have been merged upstream:
  * kmymoney-4.8.0-fix-csv-import-account-type.patch
  * fix-build.patch
  * fix-build-with-cmake-3.9.patch
- Rebase aqbanking-5.1-backward-compatibility.patch
- Drop BuildIgnore again, no longer necessary as libqt4 uses
  OpenSSL 1.1 now in Tumbleweed
- No longer necessary to change the file permissions of the appdata
  file, this has been fixed upstream
- Adjust package summary and description (for KDE4 -&gt; by KDE)</changelog>
  <changelog author="wbauer@tmo.at" date="1514548800">- Add fix-sepa-plugin.patch to fix the installation of the SEPA
  plugin so that it can actually be loaded (kde#386547)</changelog>
  <changelog author="wbauer@tmo.at" date="1517227200">- Add fix-build-with-libalkimia-7.0.patch to make it build with the
  latest libalkimia (kde#387350)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518782400">- Update to version 5.0.0
  * Ported to KDE Frameworks 5
  * Multiple improvements to reports, including better performance.
  * Allow logarithmic axes in report graphs.
  * When deleting a security, automatically delete its prices.
  * Allow separate beginning balance accounts for different currencies.
  * Added support for several new currencies
  * Major bugs fixed:
    + Elimination of several crashes.
    + Fix problems with report graphs using older data.
    + Fix rounding errors in some investment transactions.
    + Removed Yahoo from stock and currency price sources, as they no
    longer provide this service.
- Drop patches (upstreamed or no longer applicable):
  - aqbanking-5.1-backward-compatibility.patch
  - fix-build-with-libalkimia-7.0.patch
  - fix-sepa-plugin.patch
- Move docs to main subpackage (English) and put translated docs
  in -lang</changelog>
  <changelog author="wbauer@tmo.at" date="1521460800">- Update to version 5.0.1
  * Improvements:
    + Remove old locolor icons
    + Install local icons in the local datadir
    + Fix icon presentation of our own icons
    + Fix build with QtWebEngine
    + Enable investment actions when appropriate
    + Ledger search box now supports the account hierarchy
    character ":"
    + Enable calculator tool button
    + Allow CSV importer to deal with Feb 30th
  * Clicking autocomplete entry crashes application (kde#390264)
  * Kmymoney does not open multiple files correctly (kde#350850)
  * Cannot turn off Outbox tab in 4.8.0. (kde#377760)
  * can't change ledger sort options in configure dialog
    (kde#390042)
  * File/backup give mount/unmount error, even if "mount" is not
    checked (kde#390176)
  * Don't add new payee from new operation panel (kde#390232)
  * QIF Import filter fails (kde#390627)
  * Huge gap in report display screen (kde#390657)
  * Crash &gt; Tools &gt; Currencies (kde#390658)
  * Scheduled transactions: "Enter next transaction" should be
    available in ledger (kde#390834)
  * dollar symbol appears after amount (kde#390873)
  * quantity in Investments view should be right-justified
    (kde#390967)
  * Pre-Fill dialog missing (kde#391048)
  * Show tip of the day (kde#391249)
  * Displaying the ledger without an account having been selected
    displays a closed account (kde#391453)
  * Startup WM Class is wrong (kde#391733)
  * CSV importer ignores last line if not followed by a newline
    (kde#391770)
  * Context does not change to ledger view from the find
    transaction dialog (kde#391773)
  * After completing reconcile, Statement/Cleared/Balance show
    reconcile amounts, not account amounts (kde#390178)
  * switching from Investments page to Ledgers always shows same
    stale closed account ledger (kde#390406)
  * Clearing ledger search box doesn't return to the previous
    position (kde#390593)
  * Ctrl+Shift+Space shortcut no longer available (kde#390249)
  * Save as defaults to encrypted with no way to not encrypt
    (kde#390467)
  * Home page Net Worth Forecast Y axis starts at 0 (kde#391961)
- Drop no longer used Kross build requirement</changelog>
  <changelog author="wbauer@tmo.at" date="1531396800">- Add upstream patches to fix a crash when creating or editing a
  transaction (boo#1100025, kde#392735):
  * Delete-item-after-it-has-been-removed.patch
  * Improve-deletion-of-unused-widgets-in-transaction-editor.patch</changelog>
</package>
<package pkgid="9396cd7ab5922c305dd1bfbb51a2de07a7571aa6c2235348babed0fba2849cb1" name="kscreen5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Also generate default output scale on first run not just new monitors
  * [OutputConfig] Locale-format refresh rate
  * Automatic scaling selection
  * Fix deprecated usage of ecm_install_icons
  * Show UI for per screen scaling options on supported platforms
  * Port OutputConfig away from blockSignals
  * Use Q_DECL_OVERRIDE
  * Get rid of extra margins</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't auto scale outputs where we don't know the physical size
  * Keep monitoring the initial config
  * track the config to monitor, save scale
  * add size hint to KScreen KCM</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't re-align outputs when QMLOutput in clone mode moves
  * Keep the unified QMLOutput always in center</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * Use nullptr here. Use QLatin1Char(...)
  * Minor optimization
  * Const'ify
  * Port to autogenerate logging category
  * Initialize pointer/value. Minor optimization
  * Constify
  * Modernize: use nullptr
  * Delete layout before to recreate new one
  * Fix debug text
  * kcm displayconfiguration scaling: Remove unused text strings
  * Keep monitoring the initial config
  * track the config to monitor, save scale</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * KDED: respond to output being completely removed
  * KDED: restore output scale from config</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use QQuickWidget instead of QQuickView for the main view in the kcm</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Fix-preview-widget-appearing-to-scale-twice.patch (kde#388218)</changelog>
</package>
<package pkgid="6a1536c585d3338e99885cc43dbce3b848f558db467bd99cd4f0484b9fb0528c" name="kscreen5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Also generate default output scale on first run not just new monitors
  * [OutputConfig] Locale-format refresh rate
  * Automatic scaling selection
  * Fix deprecated usage of ecm_install_icons
  * Show UI for per screen scaling options on supported platforms
  * Port OutputConfig away from blockSignals
  * Use Q_DECL_OVERRIDE
  * Get rid of extra margins</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't auto scale outputs where we don't know the physical size
  * Keep monitoring the initial config
  * track the config to monitor, save scale
  * add size hint to KScreen KCM</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't re-align outputs when QMLOutput in clone mode moves
  * Keep the unified QMLOutput always in center</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * Use nullptr here. Use QLatin1Char(...)
  * Minor optimization
  * Const'ify
  * Port to autogenerate logging category
  * Initialize pointer/value. Minor optimization
  * Constify
  * Modernize: use nullptr
  * Delete layout before to recreate new one
  * Fix debug text
  * kcm displayconfiguration scaling: Remove unused text strings
  * Keep monitoring the initial config
  * track the config to monitor, save scale</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * KDED: respond to output being completely removed
  * KDED: restore output scale from config</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use QQuickWidget instead of QQuickView for the main view in the kcm</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Fix-preview-widget-appearing-to-scale-twice.patch (kde#388218)</changelog>
</package>
<package pkgid="9fce45946eb178ffccab36165d4a2cef4192473d2ce17fc27b0dbe6d6c2463eb" name="kscreen5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Also generate default output scale on first run not just new monitors
  * [OutputConfig] Locale-format refresh rate
  * Automatic scaling selection
  * Fix deprecated usage of ecm_install_icons
  * Show UI for per screen scaling options on supported platforms
  * Port OutputConfig away from blockSignals
  * Use Q_DECL_OVERRIDE
  * Get rid of extra margins</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't auto scale outputs where we don't know the physical size
  * Keep monitoring the initial config
  * track the config to monitor, save scale
  * add size hint to KScreen KCM</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't re-align outputs when QMLOutput in clone mode moves
  * Keep the unified QMLOutput always in center</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file
  * Use nullptr here. Use QLatin1Char(...)
  * Minor optimization
  * Const'ify
  * Port to autogenerate logging category
  * Initialize pointer/value. Minor optimization
  * Constify
  * Modernize: use nullptr
  * Delete layout before to recreate new one
  * Fix debug text
  * kcm displayconfiguration scaling: Remove unused text strings
  * Keep monitoring the initial config
  * track the config to monitor, save scale</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * KDED: respond to output being completely removed
  * KDED: restore output scale from config</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use QQuickWidget instead of QQuickView for the main view in the kcm</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Fix-preview-widget-appearing-to-scale-twice.patch (kde#388218)</changelog>
</package>
<package pkgid="9cdaeafa3e64785f73236344983c2ea43898da117e8accf962b0ed3f06a4dfef" name="kscreenlocker" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="c092d869a36587a04e3bc884d7e95907171030c89e7d938702196d924ec649d7" name="kscreenlocker" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="640c504ad0c1561ed4a8353fde24db1641479def04b60b6f4353997ac27d674e" name="kscreenlocker-devel" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="08be0731ea9791dc98f926a5d74b552661961086d90a62d6967df04824368f58" name="kscreenlocker-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="4c9a54ed8b1baa9a8fb26ff64ba5f6c1be3aad3834e63e28ebbd242636a57a4a" name="ksysguard5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * softraid: Remove dead code and associated warning.
  * Properly check if mdraid array is active.
  * FreeBSD build fix, v4.
  * FreeBSD compile fix, try 3.
  * Fix FreeBSD build, try 2.
  * Fix build regression on FreeBSD
  * Fix compilation with strict libc (such as musl).
  * remove extra &lt;nlist.h&gt; include on FreeBSD
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507291200">- Add patch to fix gathering of the CPU clock with kernel &gt;= 4.13
  (boo#1061071, kde#382561):
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Try to read CPU clock from cpufreq/scaling_cur_freq instead of /proc/cpuinfo (kde#382561)
- Remove patches, now upstream:
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * use OCS to retrieve Tabs from the KDE store (kde#338669)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * linux: expand 'arrayDevice' by 1 character more
  * Remove obsolete reviewboardrc file
  * fix warning comparing int with uint
  * fix warning, o is unused
  * fix warning comparing uint to int
  * replace tabs with spaces for style consistency
  * revise the tab upload dialog to direct people at the kde store
  * Add .arcconfig
  * Don't repeat work of KAboutData::setupCommandLine()
  * Group app metadata setting code</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Correction with the &amp; problem in tabs (kde#382512)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None
- Refreshed patches:
  * 0001-Use-run-for-ksysguardd-s-pid-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Explicitly include &lt;QDoubleValidator&gt; to fix build with Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Fix leak of pipe FDs in MD RAID code (kde#378268)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="034a8510f47697dc6fabf4c2a11d4e93b31276bee60facf4a8d7c7d65157f421" name="ksysguard5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * softraid: Remove dead code and associated warning.
  * Properly check if mdraid array is active.
  * FreeBSD build fix, v4.
  * FreeBSD compile fix, try 3.
  * Fix FreeBSD build, try 2.
  * Fix build regression on FreeBSD
  * Fix compilation with strict libc (such as musl).
  * remove extra &lt;nlist.h&gt; include on FreeBSD
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507291200">- Add patch to fix gathering of the CPU clock with kernel &gt;= 4.13
  (boo#1061071, kde#382561):
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Try to read CPU clock from cpufreq/scaling_cur_freq instead of /proc/cpuinfo (kde#382561)
- Remove patches, now upstream:
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * use OCS to retrieve Tabs from the KDE store (kde#338669)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * linux: expand 'arrayDevice' by 1 character more
  * Remove obsolete reviewboardrc file
  * fix warning comparing int with uint
  * fix warning, o is unused
  * fix warning comparing uint to int
  * replace tabs with spaces for style consistency
  * revise the tab upload dialog to direct people at the kde store
  * Add .arcconfig
  * Don't repeat work of KAboutData::setupCommandLine()
  * Group app metadata setting code</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Correction with the &amp; problem in tabs (kde#382512)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None
- Refreshed patches:
  * 0001-Use-run-for-ksysguardd-s-pid-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Explicitly include &lt;QDoubleValidator&gt; to fix build with Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Fix leak of pipe FDs in MD RAID code (kde#378268)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="9f50cadab4922574fda7a7a5fc09beac263c21859910e75a7b6ee77f1e90140e" name="ksysguard5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * softraid: Remove dead code and associated warning.
  * Properly check if mdraid array is active.
  * FreeBSD build fix, v4.
  * FreeBSD compile fix, try 3.
  * Fix FreeBSD build, try 2.
  * Fix build regression on FreeBSD
  * Fix compilation with strict libc (such as musl).
  * remove extra &lt;nlist.h&gt; include on FreeBSD
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507291200">- Add patch to fix gathering of the CPU clock with kernel &gt;= 4.13
  (boo#1061071, kde#382561):
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Try to read CPU clock from cpufreq/scaling_cur_freq instead of /proc/cpuinfo (kde#382561)
- Remove patches, now upstream:
  * 0001-Try-to-read-CPU-clock-from-cpufreq-scaling_cur_freq-.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * use OCS to retrieve Tabs from the KDE store (kde#338669)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * linux: expand 'arrayDevice' by 1 character more
  * Remove obsolete reviewboardrc file
  * fix warning comparing int with uint
  * fix warning, o is unused
  * fix warning comparing uint to int
  * replace tabs with spaces for style consistency
  * revise the tab upload dialog to direct people at the kde store
  * Add .arcconfig
  * Don't repeat work of KAboutData::setupCommandLine()
  * Group app metadata setting code</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Correction with the &amp; problem in tabs (kde#382512)</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None
- Refreshed patches:
  * 0001-Use-run-for-ksysguardd-s-pid-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Explicitly include &lt;QDoubleValidator&gt; to fix build with Qt 5.11</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Fix leak of pipe FDs in MD RAID code (kde#378268)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="775a63ce9dcb2442938d911eb034ea4625b2c17053643663b7ca6d7010d62899" name="kubectl" arch="src">
  <version epoch="0" ver="1.9.8" rel="lp150.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1531742400">- initial commit in order to split kubectl package
  (fix bsc#1097473 and bsc#1101010 and fate#325820)
  add lintrc filter to avoid conflict with kubernetes-client package which is built in SLE12 but not shipped in SLE12</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1532001600">- Get the commit id from the obsinfo file.
  This way this is automatic and we don't have a regression
  of bsc#1065972</changelog>
</package>
<package pkgid="a8fbf670240a49862ae468d02b99adc6d7bcd7c5fbae74450c42f3692c8e50c6" name="kubectl" arch="x86_64">
  <version epoch="0" ver="1.9.8" rel="lp150.3.1"/>
  <changelog author="jmassaguerpla@suse.com" date="1531742400">- initial commit in order to split kubectl package
  (fix bsc#1097473 and bsc#1101010 and fate#325820)
  add lintrc filter to avoid conflict with kubernetes-client package which is built in SLE12 but not shipped in SLE12</changelog>
  <changelog author="jmassaguerpla@suse.com" date="1532001600">- Get the commit id from the obsinfo file.
  This way this is automatic and we don't have a regression
  of bsc#1065972</changelog>
</package>
<package pkgid="98ba368de142ccbceeb39bc613ab485bd2176ddbd2284c0b0282aed7b9043676" name="kwayland-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="3fc04080e46261da230d3330f9c8a936e2dcec8d3520ed607992f83dc9beb926" name="kwayland" arch="src">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="b37df8638f750447ca644908b71ce6dcba1346c539d982442202af52a37e4e31" name="kwayland" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="5b2f10e1af44f6e3f95acee09f06c398813b4badd95669c2fe1e57fcaa8c29fa" name="kwayland-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="431d791b0b21c2a32bdf74be6af859e5e9796a1125e5fcbf6aa54d8e94bf88b1" name="kwayland-devel" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * [client] Fix nullptr dereference in ConfinedPointer
    and LockedPointer
  * [client] Install pointerconstraints.h
  * [server] Fix regression in
    SeatInterface::end/cancelPointerPinchGesture
  * Implementation of PointerConstraints protocol
  * [server] Reduce overhead of pointersForSurface
  * Return SurfaceInterface::size in global compositor space
  * [tools/generator] Generate enum FooInterfaceVersion on
    server side
  * [tools/generator] Wrap wl_fixed request args in
    wl_fixed_from_double
  * [tools/generator] Generate implementation of
    client side requests
  * [tools/generator] Generate client side resource factories
  * [tools/generator] Generate callbacks and listener
    on client side
  * [tools/generator] Pass this as q pointer to
    Client::Resource::Private
  * [tools/generator] Generate Private::setup(wl_foo *arg)
    on client side
  * Implementation of PointerGestures protocol
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="alarrosa@suse.com" date="1491566400">- Drop fix-wayland-1.3-dependency.diff which isn't needed anymore
  since SLE12 SP2.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Add support for wl_shell_surface::set_popup and popup_done
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * Validate surface is valid when sending TextInput leave event
  * Fix autotests on the FreeBSD CI.</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * Autotests: solve warning for QProcess::ProcessState metatype registration
  * Fix for TestQtSurfaceExtension in path with spaces
  * API dox: add some minimal docs to more class to have them covered by doxygen
  * API dox: add some minimal docs to class to have them covered by doxygen
  * API dox: Use doxygen notation to have comments used
  * API dox: fix @link usage
  * add requestToggleKeepAbove/below
  * Keep QIcon::fromTheme in main thread
  * Remove pid changedSignal in Client::PlasmaWindow
  * add pid to plasma window management protocol</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [autotests/server] Check whether test is run as root
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * Make unittest independent from the location of the executable.
  * autotests: prepare for CMAKE_RUNTIME_OUTPUT_DIRECTORY being set
  * Destroy all kwayland objects created by registry when it is destroyed
  * Emit connectionDied if the QPA is destroyed
  * [client] Track all created ConnectionThreads and add API to access them
  * [server] Send text input leave if focused surface gets unbound
  * [server] Send pointer leave if focused surface gets unbound
  * Drop unused variable
  * [client] Properly track enteredSurface in Keyboard
  * [server] Send keyboard leave when client destroys the focused surface (kde#382280)
  * check Buffer validity (kde#381953)</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * Treat input RGB buffers as premultiplied
  * Update SurfaceInterface outputs when an output global gets destroyed
  * KWayland::Client::Surface track output destruction
  * Do not leak symbols of pimpl classes, protect with Q_DECL_HIDDEN
  * Avoid sending data offers from an invalid source. (kde#383054)</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Only send OutputConfig sendApplied / sendFailed to the right resource
  * Add missing command macro
  * Don't crash if a client (legally) uses deleted global contrast manager
  * Don't crash if a client (legally) uses a deleted global
  * Update @since docs
  * Missing licenses
  * Support XDG v6</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * [client] Drop the checks for platformName being "wayland"
  * Don't duplicate connect to wl_display_flush
  * don't qcompare with nullptr
  * Wayland foreign protocol
  * Revert "Expose wl_display_set_global_filter as a virtual method"
  * Expose wl_display_set_global_filter as a virtual method</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Fix testWaylandFullscreenShell.
  * Expose wl_display_set_global_filter as a virtual method
  * Fix kwayland-testXdgShellV6.
  * Add support for zwp_idle_inhibit_manager_v1
  * [server] Support inhibiting the IdleInterface</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Minor doxygen change to group new bind/create methods
  * Fix naming inconsistency
  * Resolve some merge issues
  * Unit test for Server Decoration Palette
  * Create interface for passing server decoration palettes
  * Explicitly include std::bind functions
  * [server] Add a method IdleInterface::simulateUserActivity
  * Fix regression caused by backward compatibility support in data source
  * Fix @since version tags
  * Add support for version 3 of data device manager interface (kde#386993)
  * Scope exported/imported objects to the test
  * Fix ASAN warning on TestXdgForeign
  * Replace QCOMPARE(nullptr) with QVERIFY
  * Fix error in WaylandSurface::testDisconnect
  * Explicit QCOMPARE(QString,QString)
  * Add explicit AppMenu protocol
  * Fix ASAN warnings in XDGForeignV2Interface
  * Fix exlude generated file from automoc feature</changelog>
  <changelog author="lbeltrame@kde.org" date="1517918400">- Add 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch
  * Upstream fix to prevent kwin from crashing when opening
    systemsettings (kde#389231)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Fix typo</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * Implement releasing of client-freed output
  * [server] Properly handle the situation when the DataSource for a drag gets destroyed (kde#389221)
  * [server] Don't crash when a subsurface gets commited whose parent surface got destroyed (kde#389231)
- Dropped patches, now upstream:
  * 0001-server-Don-t-crash-when-a-subsurface-gets-commited-w.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Add Remote Access interface to KWayland
  * [server] Add support for the frame semantics of Pointer version 5 (kde#389189)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1529582400">- Add patch to fix copy-paste from GTK3 applications (boo#1097606):
  * 0001-Do-not-cancel-old-clipboard-selection-if-it-is-same-.patch</changelog>
</package>
<package pkgid="f038323df34c0eb29794c2e9dd0395bbd2cfcf766ce117540cba8da9ced9880d" name="kwin5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix: Missing dependencies for kwin autotests
  * remove xdgv6 use from 5.11 branch
  * Also send Wayland clients to a new desktop if their desktop was removed
  * Don't recreate kwayland blurmanager on screen size changes
  * Don't reload background contrast effect on screen resize
  * [tabbox] Create X11Filter on establishKeyboardGrab (kde#385032)
  * Restore cursors across multiple screens (kde#385003)
  * Properly update the visible (icon) name when the caption changes (kde#384760)
  * Make sure OpenGL Context is valid before deleting shader (kde#384884)
  * Don't scale cursor hotspot differently to cursor (kde#384769)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Ensure leave event is send to decoration when a window maximizes (kde#385140)
  * Update pointer position whenever a window gets (un)minimized (kde#378704)
  * Fix DRM EGL crash regression
  * [autotests] Fix typo
  * [platforms/drm] Use a shared pointer for gbm_surface (kde#385372)
  * Ensure internal Wayland connection is properly setup before creating LockScreen integration (kde#385397)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't use the global KConfig object on the OpenGL freeze detection thread (kde#372114)
  * Fix rendering issues of subsurfaces by using proper clipping (kde#385924)
  * Fix viewport for screenshot on multiple screens
  * Set scale on glScissor calls
  * Fix glScissor calls with y-offset screens
  * Fix viewport on vertically stacked monitors (kde#386099,kde#385655)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Allow glXChooseFBConfig to return sRGB capable fbconfig (kde#387159)
  * Fix leaking of FDs requested from logind
  * Fix race condition with libinput events on startup
  * Fix build with a KWindowSystem framework that doesn't pull QWidget
  * Allow a cross-process check for same applications (kde#386043)
  * Don't use XDGv6 in stable
  * Support modifier+mouse button on window decoration (kde#386708)
  * Remove unnecessary QString::arg call
  * fix occassional crash caused by needlessly delayed signals (bko#363224)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- As permissions now has CAP_SYS_NICE for kwin_wayland,
  enable support here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512907200">- Add parens to fix build for 42.x</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517745600">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [libinput] Ensure Event::device returns a proper Device (kde#389674)
  * Acknowledge the server side deco mode in WaylandServer not ShellClient (kde#389117)
  * From 22% of cpu in hasTransientInternal to 0.2x%
  * [autotests/integration] Add test for broken quick tiling for xdg_shell
  * [effects/blur] Disable texture cache on Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix compilation without libinput
  * Make it possible to compile 5.12 branch with a kdecoration from master
  * [x11] Fix interactive point selection (kde#387720)
  * Block geometry updates on move resize finish and don't configure xdg shell surfaces while blocked (kde#388072)
  * Enable blending if a subsurface has an alpha channel</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Fix the build on armhf/aarch64
  * Convert EffectView to a QQuickWidget
  * Sanity check WindowQuad before trying to create a grid out of it (kde#390953)
  * Fix typo in config group name
  * [kcmkwin/rules] Disable detect button on Wayland
  * Don't crash if the cursor theme fails to create (kde#390314)
  * Support modifier mouse/scroll action on internal decorated windows (kde#374880)
  * Explicitly include &lt;QAction&gt; to fix build with Qt 5.11
  * [autotests] Set breeze icon theme name in integration tests
  * Send hoverLeave or hoverMotion after touch up on decoration (kde#386231)
  * Init the icon in ShellClient::init
  * Disable window rule configuration for Wayland
  * Properly handle move during touch events (kde#390113)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add patch to create Xauthority on wayland, to support connections
  as different user (boo#1084737):
  * 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [colorcorrection] Apply current color temperature on screen hot plug (kde#391623)
  * [effects/coverswitch] Fix broken reflection on multi-monitor setup (kde#378688)
  * [AppMenu] Ignore show request when application menu isn't configured (kde#392012)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Convert JS files to UTF-8 (from ISO-8859-15)
  * [KScreen Effect] Fix fade to black (kde#388384)
  * Reparse the input configuration when we are notified that it changed
  * Don't try to filter null key combinations (kde#390110)
  * drm backend: choose correct EGL config with mesa-18
  * Ensure _NET_CURRENT_DESKTOP is set on startup (kde#391034)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kwindecoration docbook
  * Do not save kwinrulesrc on every window opening/closing (kde#393911)
  * Update seat's timestamp after waking up screen through double tap (kde#392754)
  * Use XdgShell Unstable V6 in nested wayland platform
  * Do not unset cursor image when cursor enters a surface</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="4da57ec6acef58304e0e2772ce45041a0cbdd12a064f0eba20b66bac3b4f2eb5" name="kwin5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix: Missing dependencies for kwin autotests
  * remove xdgv6 use from 5.11 branch
  * Also send Wayland clients to a new desktop if their desktop was removed
  * Don't recreate kwayland blurmanager on screen size changes
  * Don't reload background contrast effect on screen resize
  * [tabbox] Create X11Filter on establishKeyboardGrab (kde#385032)
  * Restore cursors across multiple screens (kde#385003)
  * Properly update the visible (icon) name when the caption changes (kde#384760)
  * Make sure OpenGL Context is valid before deleting shader (kde#384884)
  * Don't scale cursor hotspot differently to cursor (kde#384769)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Ensure leave event is send to decoration when a window maximizes (kde#385140)
  * Update pointer position whenever a window gets (un)minimized (kde#378704)
  * Fix DRM EGL crash regression
  * [autotests] Fix typo
  * [platforms/drm] Use a shared pointer for gbm_surface (kde#385372)
  * Ensure internal Wayland connection is properly setup before creating LockScreen integration (kde#385397)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't use the global KConfig object on the OpenGL freeze detection thread (kde#372114)
  * Fix rendering issues of subsurfaces by using proper clipping (kde#385924)
  * Fix viewport for screenshot on multiple screens
  * Set scale on glScissor calls
  * Fix glScissor calls with y-offset screens
  * Fix viewport on vertically stacked monitors (kde#386099,kde#385655)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Allow glXChooseFBConfig to return sRGB capable fbconfig (kde#387159)
  * Fix leaking of FDs requested from logind
  * Fix race condition with libinput events on startup
  * Fix build with a KWindowSystem framework that doesn't pull QWidget
  * Allow a cross-process check for same applications (kde#386043)
  * Don't use XDGv6 in stable
  * Support modifier+mouse button on window decoration (kde#386708)
  * Remove unnecessary QString::arg call
  * fix occassional crash caused by needlessly delayed signals (bko#363224)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- As permissions now has CAP_SYS_NICE for kwin_wayland,
  enable support here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512907200">- Add parens to fix build for 42.x</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517745600">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [libinput] Ensure Event::device returns a proper Device (kde#389674)
  * Acknowledge the server side deco mode in WaylandServer not ShellClient (kde#389117)
  * From 22% of cpu in hasTransientInternal to 0.2x%
  * [autotests/integration] Add test for broken quick tiling for xdg_shell
  * [effects/blur] Disable texture cache on Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix compilation without libinput
  * Make it possible to compile 5.12 branch with a kdecoration from master
  * [x11] Fix interactive point selection (kde#387720)
  * Block geometry updates on move resize finish and don't configure xdg shell surfaces while blocked (kde#388072)
  * Enable blending if a subsurface has an alpha channel</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Fix the build on armhf/aarch64
  * Convert EffectView to a QQuickWidget
  * Sanity check WindowQuad before trying to create a grid out of it (kde#390953)
  * Fix typo in config group name
  * [kcmkwin/rules] Disable detect button on Wayland
  * Don't crash if the cursor theme fails to create (kde#390314)
  * Support modifier mouse/scroll action on internal decorated windows (kde#374880)
  * Explicitly include &lt;QAction&gt; to fix build with Qt 5.11
  * [autotests] Set breeze icon theme name in integration tests
  * Send hoverLeave or hoverMotion after touch up on decoration (kde#386231)
  * Init the icon in ShellClient::init
  * Disable window rule configuration for Wayland
  * Properly handle move during touch events (kde#390113)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add patch to create Xauthority on wayland, to support connections
  as different user (boo#1084737):
  * 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [colorcorrection] Apply current color temperature on screen hot plug (kde#391623)
  * [effects/coverswitch] Fix broken reflection on multi-monitor setup (kde#378688)
  * [AppMenu] Ignore show request when application menu isn't configured (kde#392012)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Convert JS files to UTF-8 (from ISO-8859-15)
  * [KScreen Effect] Fix fade to black (kde#388384)
  * Reparse the input configuration when we are notified that it changed
  * Don't try to filter null key combinations (kde#390110)
  * drm backend: choose correct EGL config with mesa-18
  * Ensure _NET_CURRENT_DESKTOP is set on startup (kde#391034)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kwindecoration docbook
  * Do not save kwinrulesrc on every window opening/closing (kde#393911)
  * Update seat's timestamp after waking up screen through double tap (kde#392754)
  * Use XdgShell Unstable V6 in nested wayland platform
  * Do not unset cursor image when cursor enters a surface</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="ea768f18f4e99417a707f0b2f3a825638d047d845dfe1ce8e72e282a4beda388" name="kwin5-devel" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix: Missing dependencies for kwin autotests
  * remove xdgv6 use from 5.11 branch
  * Also send Wayland clients to a new desktop if their desktop was removed
  * Don't recreate kwayland blurmanager on screen size changes
  * Don't reload background contrast effect on screen resize
  * [tabbox] Create X11Filter on establishKeyboardGrab (kde#385032)
  * Restore cursors across multiple screens (kde#385003)
  * Properly update the visible (icon) name when the caption changes (kde#384760)
  * Make sure OpenGL Context is valid before deleting shader (kde#384884)
  * Don't scale cursor hotspot differently to cursor (kde#384769)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Ensure leave event is send to decoration when a window maximizes (kde#385140)
  * Update pointer position whenever a window gets (un)minimized (kde#378704)
  * Fix DRM EGL crash regression
  * [autotests] Fix typo
  * [platforms/drm] Use a shared pointer for gbm_surface (kde#385372)
  * Ensure internal Wayland connection is properly setup before creating LockScreen integration (kde#385397)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't use the global KConfig object on the OpenGL freeze detection thread (kde#372114)
  * Fix rendering issues of subsurfaces by using proper clipping (kde#385924)
  * Fix viewport for screenshot on multiple screens
  * Set scale on glScissor calls
  * Fix glScissor calls with y-offset screens
  * Fix viewport on vertically stacked monitors (kde#386099,kde#385655)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Allow glXChooseFBConfig to return sRGB capable fbconfig (kde#387159)
  * Fix leaking of FDs requested from logind
  * Fix race condition with libinput events on startup
  * Fix build with a KWindowSystem framework that doesn't pull QWidget
  * Allow a cross-process check for same applications (kde#386043)
  * Don't use XDGv6 in stable
  * Support modifier+mouse button on window decoration (kde#386708)
  * Remove unnecessary QString::arg call
  * fix occassional crash caused by needlessly delayed signals (bko#363224)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- As permissions now has CAP_SYS_NICE for kwin_wayland,
  enable support here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512907200">- Add parens to fix build for 42.x</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517745600">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [libinput] Ensure Event::device returns a proper Device (kde#389674)
  * Acknowledge the server side deco mode in WaylandServer not ShellClient (kde#389117)
  * From 22% of cpu in hasTransientInternal to 0.2x%
  * [autotests/integration] Add test for broken quick tiling for xdg_shell
  * [effects/blur] Disable texture cache on Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix compilation without libinput
  * Make it possible to compile 5.12 branch with a kdecoration from master
  * [x11] Fix interactive point selection (kde#387720)
  * Block geometry updates on move resize finish and don't configure xdg shell surfaces while blocked (kde#388072)
  * Enable blending if a subsurface has an alpha channel</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Fix the build on armhf/aarch64
  * Convert EffectView to a QQuickWidget
  * Sanity check WindowQuad before trying to create a grid out of it (kde#390953)
  * Fix typo in config group name
  * [kcmkwin/rules] Disable detect button on Wayland
  * Don't crash if the cursor theme fails to create (kde#390314)
  * Support modifier mouse/scroll action on internal decorated windows (kde#374880)
  * Explicitly include &lt;QAction&gt; to fix build with Qt 5.11
  * [autotests] Set breeze icon theme name in integration tests
  * Send hoverLeave or hoverMotion after touch up on decoration (kde#386231)
  * Init the icon in ShellClient::init
  * Disable window rule configuration for Wayland
  * Properly handle move during touch events (kde#390113)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add patch to create Xauthority on wayland, to support connections
  as different user (boo#1084737):
  * 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [colorcorrection] Apply current color temperature on screen hot plug (kde#391623)
  * [effects/coverswitch] Fix broken reflection on multi-monitor setup (kde#378688)
  * [AppMenu] Ignore show request when application menu isn't configured (kde#392012)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Convert JS files to UTF-8 (from ISO-8859-15)
  * [KScreen Effect] Fix fade to black (kde#388384)
  * Reparse the input configuration when we are notified that it changed
  * Don't try to filter null key combinations (kde#390110)
  * drm backend: choose correct EGL config with mesa-18
  * Ensure _NET_CURRENT_DESKTOP is set on startup (kde#391034)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kwindecoration docbook
  * Do not save kwinrulesrc on every window opening/closing (kde#393911)
  * Update seat's timestamp after waking up screen through double tap (kde#392754)
  * Use XdgShell Unstable V6 in nested wayland platform
  * Do not unset cursor image when cursor enters a surface</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="45bd68fb841a82f2d3469db431eb9b0d4a7886ed5935def16defee7a2a8265e1" name="kwin5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix: Missing dependencies for kwin autotests
  * remove xdgv6 use from 5.11 branch
  * Also send Wayland clients to a new desktop if their desktop was removed
  * Don't recreate kwayland blurmanager on screen size changes
  * Don't reload background contrast effect on screen resize
  * [tabbox] Create X11Filter on establishKeyboardGrab (kde#385032)
  * Restore cursors across multiple screens (kde#385003)
  * Properly update the visible (icon) name when the caption changes (kde#384760)
  * Make sure OpenGL Context is valid before deleting shader (kde#384884)
  * Don't scale cursor hotspot differently to cursor (kde#384769)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * Ensure leave event is send to decoration when a window maximizes (kde#385140)
  * Update pointer position whenever a window gets (un)minimized (kde#378704)
  * Fix DRM EGL crash regression
  * [autotests] Fix typo
  * [platforms/drm] Use a shared pointer for gbm_surface (kde#385372)
  * Ensure internal Wayland connection is properly setup before creating LockScreen integration (kde#385397)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Don't use the global KConfig object on the OpenGL freeze detection thread (kde#372114)
  * Fix rendering issues of subsurfaces by using proper clipping (kde#385924)
  * Fix viewport for screenshot on multiple screens
  * Set scale on glScissor calls
  * Fix glScissor calls with y-offset screens
  * Fix viewport on vertically stacked monitors (kde#386099,kde#385655)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Allow glXChooseFBConfig to return sRGB capable fbconfig (kde#387159)
  * Fix leaking of FDs requested from logind
  * Fix race condition with libinput events on startup
  * Fix build with a KWindowSystem framework that doesn't pull QWidget
  * Allow a cross-process check for same applications (kde#386043)
  * Don't use XDGv6 in stable
  * Support modifier+mouse button on window decoration (kde#386708)
  * Remove unnecessary QString::arg call
  * fix occassional crash caused by needlessly delayed signals (bko#363224)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512820800">- As permissions now has CAP_SYS_NICE for kwin_wayland,
  enable support here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512907200">- Add parens to fix build for 42.x</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Add missing include</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="wbauer@tmo.at" date="1516795200">- Build with gcc7 on Leap 42.3, gcc6 no longer works because of a
  change to the default compiler flags in openSUSE:Leap:42.3:Update
  (boo#1077345)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517745600">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [libinput] Ensure Event::device returns a proper Device (kde#389674)
  * Acknowledge the server side deco mode in WaylandServer not ShellClient (kde#389117)
  * From 22% of cpu in hasTransientInternal to 0.2x%
  * [autotests/integration] Add test for broken quick tiling for xdg_shell
  * [effects/blur] Disable texture cache on Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Fix compilation without libinput
  * Make it possible to compile 5.12 branch with a kdecoration from master
  * [x11] Fix interactive point selection (kde#387720)
  * Block geometry updates on move resize finish and don't configure xdg shell surfaces while blocked (kde#388072)
  * Enable blending if a subsurface has an alpha channel</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Fix the build on armhf/aarch64
  * Convert EffectView to a QQuickWidget
  * Sanity check WindowQuad before trying to create a grid out of it (kde#390953)
  * Fix typo in config group name
  * [kcmkwin/rules] Disable detect button on Wayland
  * Don't crash if the cursor theme fails to create (kde#390314)
  * Support modifier mouse/scroll action on internal decorated windows (kde#374880)
  * Explicitly include &lt;QAction&gt; to fix build with Qt 5.11
  * [autotests] Set breeze icon theme name in integration tests
  * Send hoverLeave or hoverMotion after touch up on decoration (kde#386231)
  * Init the icon in ShellClient::init
  * Disable window rule configuration for Wayland
  * Properly handle move during touch events (kde#390113)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add patch to create Xauthority on wayland, to support connections
  as different user (boo#1084737):
  * 0001-Use-Xauthority-for-Xwayland.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [colorcorrection] Apply current color temperature on screen hot plug (kde#391623)
  * [effects/coverswitch] Fix broken reflection on multi-monitor setup (kde#378688)
  * [AppMenu] Ignore show request when application menu isn't configured (kde#392012)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Convert JS files to UTF-8 (from ISO-8859-15)
  * [KScreen Effect] Fix fade to black (kde#388384)
  * Reparse the input configuration when we are notified that it changed
  * Don't try to filter null key combinations (kde#390110)
  * drm backend: choose correct EGL config with mesa-18
  * Ensure _NET_CURRENT_DESKTOP is set on startup (kde#391034)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Update kwindecoration docbook
  * Do not save kwinrulesrc on every window opening/closing (kde#393911)
  * Update seat's timestamp after waking up screen through double tap (kde#392754)
  * Use XdgShell Unstable V6 in nested wayland platform
  * Do not unset cursor image when cursor enters a surface</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="d76387ee195d178865754e0a240a90d3d91a0ce1da5aabb172040d3f80763e69" name="lapack" arch="src">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="38a14965023c80e6ae37e2daa73c7c4ad9482abd2562fba682b9c15c6b2a7e83" name="lapack-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="286bfa5d8319191a31f4435517512cc9a24cd642a708903b9d25e8e0b99b91f4" name="lapack-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="757ce540a5fc6bf5d4932586fb2a6b42a05a6313aee8492414b05e2d1fa0147e" name="lapack-devel-static" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="1ae432d40980e174f1406014d2898b1fc593538f02fcc18ab350dbb7cb0b785a" name="lapack-man" arch="noarch">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
</package>
<package pkgid="a4af84d30d6e5989f151029465bdc0ffee687c9ef151ed9856257a86835027db" name="lapack-man" arch="src">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1333108800">- Fixed building on openSUSE 11.4 by fixing defattr
- Made the package groups consistent: Development/Libraries/Parallel
- Cleaned up spec file formatting
- Made all requires use the new package naming</changelog>
  <changelog author="rguenther@suse.com" date="1333368000">- Undo spec file obfuscation</changelog>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
</package>
<package pkgid="ae2b9efbc121b46528a6793285df7899c14dd7002e5054c869e8e3dbff7287c9" name="lapacke-devel" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="8cfabb8167f8204322b17e9a3d4e3ad1aa1e38f5396311c16eff236209ac099b" name="lapacke-devel-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="60edf8eae9305b4eb320984b4da51c5afe3622937de44b9193e6db178c31b1d9" name="lapacke-devel-static" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="218f85c07ffc72aaaf39decfe3b64ac51f2d5e3ce952bb7e56c49bfea99e8cf4" name="lastpass-cli" arch="src">
  <version epoch="0" ver="1.3.1" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1460808000">- Initial package for version 0.9.0</changelog>
  <changelog author="mpluskal@suse.com" date="1469966400">- Update to version 1.0.0:
  * New command lpass status shows whether or not the user is
    logged in with agent, from Nick Knudson
  * lpass add can now be passed --note-type=X in order to add a
    secure note using a template. Specifying an unknown note
    template will list the available templates.
  * lpass ls now shows username with --long, from Alli Witheford
  * Bash completions are now installed with make install, from
    Eli Schwartz
  * Fish shell completions supplied by Joar Wanboarg
  * Initial support for adding (lpass add --app) and editing
    applications
  * Updates to manpage for ls, passwd, add, and basic usage
    examples
  * lpass now follows XDG base directory specifications for its
    files on platforms that use it. Set LP_HOME to ~/.lpass to
    keep the previous location
  * Bugfix: resolved syncing problems on some platforms
    (notably RHEL/CentOS) related to improper multiprocess usage
    of libcurl (github #166)
  * Bugfix: lpass show no longer crashes when a searched-for field
    is not found (github #167)
  * Bugfix: lpass no longer exits with an error if the blob is
    empty but otherwise without parsing errors. This fixes the case
    where a new user could not use the application without first
    adding a site elsewhere.
  * LPASS_LOG_LEVEL learned level=8 with which lpass will also dump
    libcurl verbose logs showing all traffic for debugging (not
    recommended for general use due to potentially sensitive
    headers being logged).</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 1.1.2:
  * Bugfix: crash with lpass logout --color=never fixed
  * Bugfix: lpass add with secure notes works again
  * Bugfix: sort order in lpass ls is now consistent whether or not
    colors are used
  * Documentation has been enhanced to describe aliases and more
    options, with patches by Eric B. Hymowitz.
- Changes for version 1.1.1:
  * Bugfix: fix crash in lpass show for secure notes without
    attachments
  * Build: fix build on OpenBSD, from Björn Ketelaars
  * Build: fix build when using LibreSSL, from Björn Ketelaars
- Changes for version 1.1.0:
  * New command lpass import can import an existing csv file (or
    output from lpass export) into the vault lpass show and lpass
    ls learned a --format argument to enable user-specified
    printf-style formats
  * Bash completions will now complete field names if --field is
    specified after the account name
  * Build: cmake now used for building, by Filippo Cucchetto and
    with fixes by Eli Schwartz
  * Build: lpass has been updated to work with OpenSSL 1.1
  * Bugfix: crash in lpass ls -l with no last_modified_gmt fixed
  * Bugfix: secure notes editing with "Name" fields now works
    properly
  * Bugfix: editing secure note names now works (github #106)
  * Bugfix: lpass-created server secure notes are now compatible
    with the plugin
  * Bugfix: generate now uses all defined characters, by Ignat
    Korchagin
  * Bugfix: lpass show for ssh-key secure notes no longer corrupts
  * password-protected ssh keys (github #232)</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update to version 1.2.0:
  * lpass show now supports new-style multiline ssh keys
  * lpass export now supports --fields=FIELDLIST argument to
  * control output, with patches from Kyle Burton
  * lpass ls now always shows empty shared folders
  * lpass edit can now set the 'master password reprompt' field in
    sites
  * lpass share create now shows the created share name
  * Bugfix: crash in lpass show fixed by Kyle Burton
  * build fixes for termux and documentation updates, from
    Christian Rondeau
  * documentation updates for Ubuntu from Craig Menning and Glenn
    Oppegard
  * Test suite now included covering basic operations
- Enable tests</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 1.2.1:
  * fix regression with lpass show not displaying all fields for
    secure notes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.2.2:
  * lpass ls --format now supports "%al" to show URL
  * $VISUAL can be used in preference to $EDITOR
  * lpass edit can now directly edit multiline ssh keys
  * fields are now preserved when edited with lpass edit
  * Bugfix: use-after-free in http.c fixed
  * Bugfix: command-line completion now works for names with spaces
  * Bugfix: loading attachments from shared folders now works
  * Documentation updates</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 1.3.0:
  * lpass show now supports --json format
  * lpass show now supports --quiet flag to suppress prompts
  * lpass import has --keep-dupes flag which will preserve
    duplicate accounts on import
  * LPASS_PINENTRY environment variable may now be used to set
    custom path to pinentry
  * Build fix for aarch64 and others
  * New fish completions
  * Zsh completions
  * bugfix: site notes now show up in notes textarea instead of
    fields
  * spelling fixes
- Modernise spec file
- Install autocompletions</changelog>
  <changelog author="ggkioulis@suse.com" date="1528804800">- Update to version 1.3.1:
  * Revert "pins: remove GlobalSign R1/R3 pins" from Robert Copeland
  * Readme update from Wesley Schwengle
  * Add Dockerfile to create a clean build environment from Wesley Schwengle
  * Missing dependencies in readme
  * Added CLion project files to ignore list</changelog>
</package>
<package pkgid="ace58727b823036b4798dba914321feb884d08bc9af945c3f5c2728af85dbfd7" name="lastpass-cli" arch="x86_64">
  <version epoch="0" ver="1.3.1" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1460808000">- Initial package for version 0.9.0</changelog>
  <changelog author="mpluskal@suse.com" date="1469966400">- Update to version 1.0.0:
  * New command lpass status shows whether or not the user is
    logged in with agent, from Nick Knudson
  * lpass add can now be passed --note-type=X in order to add a
    secure note using a template. Specifying an unknown note
    template will list the available templates.
  * lpass ls now shows username with --long, from Alli Witheford
  * Bash completions are now installed with make install, from
    Eli Schwartz
  * Fish shell completions supplied by Joar Wanboarg
  * Initial support for adding (lpass add --app) and editing
    applications
  * Updates to manpage for ls, passwd, add, and basic usage
    examples
  * lpass now follows XDG base directory specifications for its
    files on platforms that use it. Set LP_HOME to ~/.lpass to
    keep the previous location
  * Bugfix: resolved syncing problems on some platforms
    (notably RHEL/CentOS) related to improper multiprocess usage
    of libcurl (github #166)
  * Bugfix: lpass show no longer crashes when a searched-for field
    is not found (github #167)
  * Bugfix: lpass no longer exits with an error if the blob is
    empty but otherwise without parsing errors. This fixes the case
    where a new user could not use the application without first
    adding a site elsewhere.
  * LPASS_LOG_LEVEL learned level=8 with which lpass will also dump
    libcurl verbose logs showing all traffic for debugging (not
    recommended for general use due to potentially sensitive
    headers being logged).</changelog>
  <changelog author="mpluskal@suse.com" date="1487332800">- Update to version 1.1.2:
  * Bugfix: crash with lpass logout --color=never fixed
  * Bugfix: lpass add with secure notes works again
  * Bugfix: sort order in lpass ls is now consistent whether or not
    colors are used
  * Documentation has been enhanced to describe aliases and more
    options, with patches by Eric B. Hymowitz.
- Changes for version 1.1.1:
  * Bugfix: fix crash in lpass show for secure notes without
    attachments
  * Build: fix build on OpenBSD, from Björn Ketelaars
  * Build: fix build when using LibreSSL, from Björn Ketelaars
- Changes for version 1.1.0:
  * New command lpass import can import an existing csv file (or
    output from lpass export) into the vault lpass show and lpass
    ls learned a --format argument to enable user-specified
    printf-style formats
  * Bash completions will now complete field names if --field is
    specified after the account name
  * Build: cmake now used for building, by Filippo Cucchetto and
    with fixes by Eli Schwartz
  * Build: lpass has been updated to work with OpenSSL 1.1
  * Bugfix: crash in lpass ls -l with no last_modified_gmt fixed
  * Bugfix: secure notes editing with "Name" fields now works
    properly
  * Bugfix: editing secure note names now works (github #106)
  * Bugfix: lpass-created server secure notes are now compatible
    with the plugin
  * Bugfix: generate now uses all defined characters, by Ignat
    Korchagin
  * Bugfix: lpass show for ssh-key secure notes no longer corrupts
  * password-protected ssh keys (github #232)</changelog>
  <changelog author="mpluskal@suse.com" date="1496923200">- Update to version 1.2.0:
  * lpass show now supports new-style multiline ssh keys
  * lpass export now supports --fields=FIELDLIST argument to
  * control output, with patches from Kyle Burton
  * lpass ls now always shows empty shared folders
  * lpass edit can now set the 'master password reprompt' field in
    sites
  * lpass share create now shows the created share name
  * Bugfix: crash in lpass show fixed by Kyle Burton
  * build fixes for termux and documentation updates, from
    Christian Rondeau
  * documentation updates for Ubuntu from Craig Menning and Glenn
    Oppegard
  * Test suite now included covering basic operations
- Enable tests</changelog>
  <changelog author="mpluskal@suse.com" date="1499774400">- Update to version 1.2.1:
  * fix regression with lpass show not displaying all fields for
    secure notes</changelog>
  <changelog author="mpluskal@suse.com" date="1509019200">- Update to version 1.2.2:
  * lpass ls --format now supports "%al" to show URL
  * $VISUAL can be used in preference to $EDITOR
  * lpass edit can now directly edit multiline ssh keys
  * fields are now preserved when edited with lpass edit
  * Bugfix: use-after-free in http.c fixed
  * Bugfix: command-line completion now works for names with spaces
  * Bugfix: loading attachments from shared folders now works
  * Documentation updates</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 1.3.0:
  * lpass show now supports --json format
  * lpass show now supports --quiet flag to suppress prompts
  * lpass import has --keep-dupes flag which will preserve
    duplicate accounts on import
  * LPASS_PINENTRY environment variable may now be used to set
    custom path to pinentry
  * Build fix for aarch64 and others
  * New fish completions
  * Zsh completions
  * bugfix: site notes now show up in notes textarea instead of
    fields
  * spelling fixes
- Modernise spec file
- Install autocompletions</changelog>
  <changelog author="ggkioulis@suse.com" date="1528804800">- Update to version 1.3.1:
  * Revert "pins: remove GlobalSign R1/R3 pins" from Robert Copeland
  * Readme update from Wesley Schwengle
  * Add Dockerfile to create a clean build environment from Wesley Schwengle
  * Missing dependencies in readme
  * Added CLion project files to ignore list</changelog>
</package>
<package pkgid="f7ca1cbe9ee67b3f1860e6f92880e0c165cbfb95190315f63fb5d4882d524d2e" name="ldirectord" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.5a1edf2b" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
  <changelog author="zlliu@suse.com" date="1500033600">- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500206400">- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.1+git.1503904762.b4582bdb:
  * Low: mysql: Fixed bug where crm_admin is never called, leaving master scores to -1 in certain conditions.
  * Low: exportfs: check fsid parameter for not containing a comma
  * Low: mysql: don't run ocf_is_ms check in a subshell
  * Low: redis: add check for redis-check-rdb
  * Low: redis: wait for pid file to appear after start
  * High: pgsql: Allow dynamic membership
  * Medium: CTDB: fix issue with --logfile being replace with --logging
  * Medium: oraasm: new resource agent for Oracle ASM Disk Groups
  * Medium: rabbitmq-cluster: Backup and restore policies
  * Low: Raid1: Clean up spelling and whitespace
  * Medium: LVM: use vgscan --cache to update metadata during start/relocate
  * Medium: LVM: warn when cache mode is not writethrough
  * Medium: iSCSILogicalUnit: add emulate parameters
  * Medium: mysql: Properly Detect read_only State
  * Medium: anything: Allow multiple instances of binfiles to be run (pidfile will be unique)
  * Medium: anything: Start should return OCF_RUNNING if monitor succeeds
  * Medium: anything: Attempt to fix missing PID directory before starting
  * Medium: kamailio fixes and enhancements for v5.0
  * Low: portblock: dont log dd "0+0 records in/out"
  * Medium: Raid1: Handle case when mddev is a symlink
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Medium: VirtualDomain: new attributes migrateuri, remoteuri, migration_user
  * Low: sapdb: Add hdbnameserver to monitor services
  * High: CTDB: Don't fail on empty directory (bsc#1052577)
  * High: minio: Resource agent for the minio storage server
  * High: ZFS: Add ZFS Resource Agent
  * High: awseip/awsvip: fixes and improvements
  * Medium: VirtualDomain: new configuration option shutdown_mode
  * Medium: Route: Resource key for the address family (ip4, ip6 or detect)
  * Low: aws-vpc-route53: Fix missing ocf_log in log message
- Remove patches merged upstream:
  * Remove 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * Remove 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * Remove 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * Remove 0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504180800">- Update to version 4.0.1+git.1504170332.70fbcd8a:
  * Medium: ocf-shellfuncs: improve locking (ocf_take_lock)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * High: lvmlockd: add resource agent for lvmlockd daemon (fate#323822)
  * High: rkt: Add agent for managing rkt containers
  * Medium: varnish: Compatibility for version 4.0</changelog>
  <changelog author="kgronlund@suse.com" date="1504180801">- Update to version 4.0.1+git.1504207605.22ac330c: (bsc#1053207)
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)</changelog>
  <changelog author="kgronlund@suse.com" date="1504526400">- Update to version 4.0.1+git.1504527822.722ffb5b:
  * High: ovsmonitor: Add OpenvSwitch monitor agent (fate#323276)</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.1+git.1508859013.2b3cb4a6:
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: pgsql: Support PG10: Following the change of the PostgreSQL function name.
  * High: pgsql: Support PG10: Following the change of the default action of "pg_ctl start" and "pg_ctl promote".</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Update to version 4.0.1+git.1509705432.020b5b34:
  * LVM-activate: add new RA for LVM activation (fate#323822)
  * nfsserver: allow stop to timeout
  * adding docker-native healthcheck query to docker</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version v4.1.0rc1~git8.2900c751:
  * Drop libnet dependency (bsc#1069596)
  * db2: fix HADR promote when master failed
  * Add resource agent for IPSEC tunnels
  * Mid: apache: Move the stop judgment last.
  * Mid: apache: Eliminate wasteful TERM transmission, correct the waiting time correctly.
  * galera: recover from empty gvwstate.dat
  * Revert "LVM: use vgscan --cache to update metadata during start/relocate"
  * Medium: IPaddr2: do not send Gratuitous ARPs in the Cluster IP configuration
  * Medium: IPaddr2: add send_arp_opts parameter
  * Medium: IPaddr2: allow to choose arping instead of send_arp binary
  * Low: send_arp.linux: print proper usage
  * Low: IPaddr2: document arp_interval as deprecated
  * Low: IPaddr2: remove metadata of an unused parameter arp_mac
  * Low: IPaddr2: always remove orphan pidfile
  * Low: IPaddr2: use ocf_log for an output from send_arp</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.1.0+git54.b264e401:
  * mpathpersist: New agent (fate#324044)
  * jira: New resource agent
  * azure-lb: New resource agent
  * lxc-info/machine-info: New agents for monitoring containers/machines
  * Low: redis: Check read bit on redis config
  * Low: IPsrcaddr: Only check for ifconfig on BSD/solaris
  * Medium: CTDB: Cope with deprecated "idmap backend" smb.conf option
  * Medium: oracle: Fix alter user syntax for set_mon_user_profile
  * Medium: db2: improve monitor and simplify STANDBY/.../DISCONNECTED
  * Medium: CTDB: fix initial probe
  * Medium: ethmonitor: add intel omnipath support
  * Medium: LVM-activate: avoid unnecessary validation in stop action
  * Medium: IPsrcaddr: match exact route to avoid failing</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.1.0+git59.a0452207:
  * lvmlockd: auto change lvm config to use lvmlockd (fate#323822)
  * LVM-activate: put all validations into lvm_validate (fate#323822)
  * mariadb: GTID/semi-sync based MariaDB Master/Slave resource-agent</changelog>
  <changelog author="kgronlund@suse.com" date="1516190400">- Use python3 (bsc#1076413)</changelog>
  <changelog author="kgronlund@suse.com" date="1516190401">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="dakechi@suse.com" date="1533729600">- Implements the reload operation on the SAPInstance RA (bsc#1096744)
- Include the enq_server and enq_replicator on the default service list
  to be monitored for the new S/4 HANA Enq. Services 2. (bsc#1092384)
- Improved SAPInstance START profile detection, avoiding the need of
  setting the START_PROFILE parameter. (bsc#1096744)
- Included the following patches:
  * 0007-SAPInstance-implemeted-reload-method.patch
  * 0008-SAPInstance-Improved-indents.patch
  * 0009-Medium-SAPInstance-Add-monitored-services-for-ENSA2-.patch
  * 0010-SAPInstance-Improved-SAP-instance-profile-detection.patch</changelog>
</package>
<package pkgid="8b283f96e06e3656410f16e06d4df8d95a3a22e264d0df01a49db926ffaed149" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="9b38767a0dff2f8784b352415f278e0859971928ce30f672eef3c25a23ac241a" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="14cf463aa8a9c970f79d554bc3899ba50586d65d2cfe5f19b351a4d9bf2e9be3" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="2d770e2d9aa0b4692920fc02637dd1b24fba56dd318943d23f181f4d74ff4768" name="libGraphicsMagick++-Q16-12" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="93ce46e6b004bf449dbcf1e617824adf8b3a398b5f5fdde903d4bf12ddf70338" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="c54c6e6bfb3bf6cebadc25969426c846df7eb38f73fa1a79c91692f7dd1cc799" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="85902e1bdcdd15b705886c2746f9bf0e8ab51a810c510a029ae3f3cad09ca75b" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="df4385621ec7faf3e5e09f62f179be06ca300634ba9a5e652ba30f9b8c3208d2" name="libGraphicsMagick++-devel" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="d5b9dc6b64bc2be504b7c565cbdf94b5f25b5fa2ed48e50c8f75d1227aabd4b7" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="480cb1c7a40e2b2b7266d9407841b87fa670cf52c0bedc33c2bd72516cda814d" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="db19587df818fd7cdc192e63f807d099ec52f850ebb7568adba945d7aae93c5e" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="7318151e383059b6953e394d8a7c48cb5e20590074c0da84100377a71c1c4f71" name="libGraphicsMagick-Q16-3" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="3f837173680819d95278a01e69a77d59aa3cb15e1bbb838eda21e46c56b8b7e0" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="315ef7c28a7c0fc220b27e27eefc75bc80b8dbf7a2abf8f4d118a51c4db79476" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="0e254d37d7f1b747de5647f38bf591e74d47033d731561e9be36331e096f3c7b" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="05416ea441a66c63cf12b0384511178c59b757aa05e90f811a95a1b1396d249a" name="libGraphicsMagick3-config" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="7bc3c95fa15da3da20bfbef3c1e9ad960ad9c75dce7022e50fd911ef825002cd" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="494d566dbfa5a4fb3fbea097616a6b4684ff6b3a06f4a2cd4d10c6c69d8c1055" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="664b41d0bcefd707335eeef9bb87a87c9331cb715820d1edf117e0f93f9e92e5" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="14ff634c15e073260104de84d2c4e45066b88400fd8f06471bc6b11e01b5652f" name="libGraphicsMagickWand-Q16-2" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="e6997bf215895f7e527c2ecb88a1c27e3770ef976fbecd92b022904720d8305f" name="libKF5GlobalAccel5-32bit" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="6ca592fd06a0e83b4f6d9d0614c39ec8d29fbf64aa60784e1282b2ee40ed10cc" name="libKF5GlobalAccel5" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="1fffc0d90dd5fd58ffc4b355144242b944392d8d535ec849968f730fcdf3ec05" name="libKF5GlobalAccel5-lang" arch="noarch">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="b5625f5a5d71b05fb3658c512cb5d7e16fba553076ced36a2c3623bb3e887aac" name="libKF5GlobalAccelPrivate5" arch="x86_64">
  <version epoch="0" ver="5.45.0" rel="lp150.2.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1480852800">- Update to 5.29.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.29.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1483876800">- Update to 5.30.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.30.0.php</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1486641600">- Update to 5.31.0
  * For more details please see:
    https://www.kde.org/announcements/kde-frameworks-5.31.0.php</changelog>
  <changelog author="lbeltrame@kde.org" date="1489924800">- Update to 5.32.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.32.0.php
- Changes since 5.31.0:
  * Commit translations from l10n-kf5
  * Upgrade ECM and KF5 version requirements for 5.32.0 release.
  * Upgrade KF5 version to 5.32.0.</changelog>
  <changelog author="lbeltrame@kde.org" date="1492257600">- Update to 5.33.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.33.0.php
- Changes since 5.32.0:
  * Upgrade ECM and KF5 version requirements for 5.33.0 release.
  * Upgrade KF5 version to 5.33.0.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1494849600">- Update to 5.34.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.34.0.php
- Changes since 5.33.0:
  * build: Remove KService dependency</changelog>
  <changelog author="wbauer@tmo.at" date="1494849601">- Remove unnecessary kservice-devel build requirement
- Drop no longer useful
  0001-Make-kglobalaccel5-properly-killable-fixing-super-sl.patch
- No point to delete the kglobalaccel5.po files, they are not
  included any more since 5.11.0</changelog>
  <changelog author="lbeltrame@kde.org" date="1497182400">- Update to 5.35.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.35.0.php
- Changes since 5.34.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1499860800">- Update to 5.36.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.36.0.php
- Changes since 5.35.0:
  * [FEATURE] Option to build &amp; install QCH file with the public API dox</changelog>
  <changelog author="christophe@krop.fr" date="1502539200">- Update to 5.37.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.37.0.php
- Changes since 5.36.0 :
  * kglobalaccel5: Mark as nongui exe</changelog>
  <changelog author="lbeltrame@kde.org" date="1505217600">- Update to 5.38.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.38.0.php
- Changes since 5.37.0:
  * KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys (kde#183458)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Revert upstream commit to avoid major regressions (kde#384597):
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1508760000">- Update to 5.39.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.39.0.php
- Changes since 5.38.0:
  * Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys" (kde#384597)
- Dropped patches, now usptream:
  * 0001-Revert-KGlobalAccel-port-to-KKeyServer-s-new-method-.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1510574400">- Update to 5.40.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.40.0.php
- Changes since 5.39.0:
  * Revert "Revert "KGlobalAccel: port to KKeyServer's new method symXModXToKeyQt, to fix numpad keys""
  * Component can't be null (tested line before it).
  * Add .arcconfig</changelog>
  <changelog author="lbeltrame@kde.org" date="1513512000">- Update to 5.41.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.41.0.php
- Changes since 5.40.0:
  * Remove double look-up
  * Group some blocking dbus calls
  * We depend against 5.7
  * kglobalacceld: Avoid loading an icon loader for no reason
  * generate correct shortcut strings
  * Port to debug category</changelog>
  <changelog author="lbeltrame@kde.org" date="1516104000">- Update to 5.42.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.42.0.php
- Changes since 5.41.0:
  * Remove obsolete reviewboardrc file
  * Remove unused, duplicated file</changelog>
  <changelog author="lbeltrame@kde.org" date="1518436800">- Update to 5.43.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.43.0.php
- Changes since 5.42.0:
  * Use cmake function 'kdbusaddons_generate_dbus_service_file' from kdbusaddons to generate dbus service file (kde#382460)</changelog>
  <changelog author="lbeltrame@kde.org" date="1520856000">- Update to 5.44.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.44.0.php
- Changes since 5.43.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1523707200">- Update to 5.45.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/kde-frameworks-5.45.0.php
- Changes since 5.44.0:
  * Remove not necessary QtCore and co
  * Don't assert if used incorrectly from dbus (kde#389375)</changelog>
  <changelog author="lbeltrame@kde.org" date="1527681600">- Add upstream patch 0001-Make-sure-ungrab-keyboard-request-is-processed-befor.patch:
  * Fixes Alt-Tab being randomly ignored (kde#394689, boo#1094931)</changelog>
</package>
<package pkgid="5c14f27aaf663377341d7f84d8b21601e90ee173131cc6e001580d8eabefd649" name="libKPimGAPIBlogger5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="2def3cf0c12dac99e4ec2d113d64110f18ce3aefb4a97e70f3aea9c953873b51" name="libKPimGAPICalendar5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="253824d7c071803c4d5f7a75c62ed9d6d915c0601d90c0799dafa36d0ec4ce86" name="libKPimGAPIContacts5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="82150311318b5ecd1258f26ff0e8dc7e68747a149e0d7db12ed29aec4f06997b" name="libKPimGAPICore5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="993273ca158b2975f70a3d60d49dcb19f6545fe595a6c1eb00ab2e546523ece0" name="libKPimGAPIDrive5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="0c43aadab2ee5957ba93f1f2d4efca981cd70080275919315d0daafafc0f5dfb" name="libKPimGAPILatitude5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="ba64801e56f32875b7eb12feae97a382c011577d7a113a70d6c2f83641d06502" name="libKPimGAPIMaps5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="6ee397fb15299f35cda59bdd5513038d0a2ea5df70fb7ab399ff342256e263f1" name="libKPimGAPITasks5" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="7b3110d7b98795163d8edf803d1c37f1b9944cd21042320a98a563ca2c4b309d" name="libKScreenLocker5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504180800">- Add patch to allow the NVIDIA driver to poke through seccomp and
  thus not crashing (kde#384005):
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * seccomp filter: Handle openat as well (kde#384651)
  * Don't dissallow open with write flag syscall on NVIDIA (kde#384005)
  * Tell user to unlock his session only
  * Use Q_DECL_OVERRIDE
  * Fix detection of sys/event.h on FreeBSD &lt; 12
  * include &lt;signal.h&gt; for kill(2)
- Remove patches, now upstream:
  * 0001-Don-t-dissallow-open-with-write-flag-syscall-on-NVID.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Workaround crash on lockscreen close</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Adjust kwinglplatform.cpp for Mesa renderer string changes
  * Fix greeter crashing with software rendering on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove double margin in KCM UI
  * Load config specified by the LnF theme (kde#384264)
  * Remove unused class SelectImageButton
  * Remove obsolete reviewboardrc file
  * Bump KF5 required version to 5.42
  * Whitelist Switch keyboard layout to shortcuts (kde#378531)
  * port to Package::fileUrl
  * Forbid more syscalls which could modify the filesystem
  * Screenlocker KCM text improvements
  * Change kcm header "Screen Locking Timeouts" to "Configure Screen Locking"</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Fix brightness shortcuts in the whitelist
  * Add touchpad shortcuts to the whitelist
  * Fix building autotest on platforms where syscalls are not available</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Require Qt 5.9</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Update size hint of lnf config widget (kde#389483)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="f8ffe6cd559637551ee7912a1f693bbb2925688d58128be07a2b38ab88136962" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="622c5724d0c34eccac3a908f48c92e21a63b3250918791d91b2bf991a9852991" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="0927b9974c9396211277f8be19b898f12acb32dded7a1d8694e2998396ad2d2d" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="6731312f5e9bb38b8f58b559b004e116ac38d7ffda5c9f044b2a6f63934eeb10" name="libMagick++-7_Q16HDRI4-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="e9270fe38790c79baa2d0b7df845ae3b3ade8df99e7d3443a018541efc95d2f4" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="da8aa18e7f28e3ef2126a229cf1c0182be70561e57e50e502da2011fd035a581" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="12273043ba69e1ee921d06ee7a06ed9982d1f0b044a7298122d4df9e4a512dac" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="71a0adcc8fce04509f7928dcd96f1b3a13bcf7528b284382918bf7c4efe45d72" name="libMagick++-7_Q16HDRI4" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="327520dd7a51cb64fdd0c82aa7b3a4397fa5564393177463f511c42c68d65ed1" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="727ab295af0f7413eee323f14a7a4c4bc90d3924fe7b217de8962ba81cfb881f" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="01d5424b13b3f8b100792247538f4bc0f53aaaa077e8bff81b3eba22cc7fb50f" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="7cc8f6929144f99e5f16bcc0c27e304b887df278d977ddab7ceacd02eefab02d" name="libMagick++-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="42596f10870f9dd4cef4e78e5a6e7e5ffd5851b052e3c39c1a1c1a5c67f80171" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="7b74cd706d495073a79febd32986768c956341a9fbc5f3799af790359a836162" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="2e623e08230300e5bc177514e0c73bb8f7aab98ecf588702a5f5522ea0fa07c2" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="180ab67cc031ee12663b24a6ef3a7c2cb48ff61bb3cd8cea4e0ebaf71b72e410" name="libMagick++-devel" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="5f3ff6d0c9a2e92c046ab48f5c2223e61870dd4fbc60ff3c0952bb83b5aa21d0" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="e4b7704ca0bab5662054fcfdbe0c6f086f116d19914fe5898ce18eb24f9de86e" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="469777bd82c2e88b72f2cb71c134fb5a14e3c7fa31a798303b7369e34ffda8e3" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="0f1445b066340edd3814f6cc4990fa6c80d14f242591876a9f5ed2d934c66ea5" name="libMagickCore-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="deebbeb291ad529ab16eb4cf42828a0a84bb4e1cf958c212c7f48dbcf21d6f6d" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="8b07db68e0870ac9107ad713ad490535a950231df2110c8ad462e62d205dcb5a" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="7ad9243fd26d6a9d94d7330355d48c2547d58055029b4110061850732aaf5f20" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="c494633b71071f9193f6b22e03ba17df15f27b71a5a3a3318d409a495f6fa219" name="libMagickCore-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="04f853fa0c44d3de39c8b9142e474c6fd964325fc64a8b0215337197cde561c2" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="6796a0fb2beaf9a9f621ca7ad90575481d7604b32b47e854b7ec5155e97d86e7" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="3cc53d8d24795cdb8e4393270cbd1f7d0ed4d8533920f7c2a3ff662b0fa546a2" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="898c75bee162b71733015492adf3b279174e61d85eb3f278d0e3ced3f9fd3bfa" name="libMagickWand-7_Q16HDRI6-32bit" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="4ff9140716348c39bf93019103ca84d6d030b4578a7c795a95d648e98cdef01d" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="7f4490cac0cf6925c82bce312312ad93cf7d49e62d681f3790af6196f3d800d2" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="a7c15238c4b6ae41cbec5c3fd4e277851f71383c303c6b48a4b106bfc978a65d" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="3cd9955c90cfc2fbeaa24893f2b0f2ae066887c1e44f454a6e57125f2eb9c607" name="libMagickWand-7_Q16HDRI6" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="4f44670427eddaccb4713c955603858ee5ec916aaad82b36efedbf037089c910" name="libXaw" arch="src">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="23787001f60fd7542e18ccab9fcbdfe0ba27577ebe7d70dac0fb5d04ac4d5c79" name="libXaw-devel" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="e069ee78c7c950ad4b737017fb5b04342a32533e5d5dd107abbc5527037d13c4" name="libXaw-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="b9a0a941bca01b8192a7344948a375bb6f7763565f890ae4f4b4e13c4eb60392" name="libXaw6" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="20f6f83ed4fa635dab1d27b86408d750f65d3a224525906d42328e4b79a3c11c" name="libXaw6-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="56b538b1e1b470e06c39dea3183ff0b1c7b4518bba944e50fe8aa49d5f8df280" name="libXaw7" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="4304e916bf548801113dab24fab0c2a858bcc6f6517362933955cf14306384e0" name="libXaw7-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="08065f25e072bd687263b1b87df5bdca652f00f55b8beb252b2e724acc0e1ab1" name="libXaw8" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="ada46166cc9389dfbe08c2b7de029ffb37d54c340bfac930aad26c8f1fc68b14" name="libXaw8-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.13" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1328616000">- Split xorg-x11-libs into separate packages</changelog>
  <changelog author="vuntz@opensuse.org" date="1334232000">- Update to version 1.0.10:
  + Fix potential infinte loop in XawBoxQueryGeometry()
  + Fixes for compiler warnings
  + General cleanups
  + Build configuration and documentation improvements
- Changes from version 1.0.9:
  + Fix build issues
  + Minor documentation cleanups
  + Build configuration improvements</changelog>
  <changelog author="zaitor@opensuse.org" date="1348056000">- Update to version 1.0.11:
  + Only call XawStackFree if XawStackAlloc was used for allocation
  + Correct order of arguments to XawStackFree()
  + Correct undefined behavior access to out of scope pointer
    contents</changelog>
  <changelog author="jengelh@inai.de" date="1361102400">- Use more robust make install call</changelog>
  <changelog author="jengelh@inai.de" date="1371211200">- Add proper bit-type symbols for sparc64</changelog>
  <changelog author="zaitor@opensuse.org" date="1378987200">- Update to version 1.0.12:
  + Replace TXT16 with XChar2b inline.
  + Remove CRAY/WORD64 support.
  + Fix fd leak when write() fails in WriteToFile().
  + Fix fd leak when fdopen() fails in InitStringOrFile().
  + Include winsock header on WIN32 to provide fd_set etc.</changelog>
  <changelog author="sndirsch@suse.com" date="1430740800">- Update to version 1.0.13
  * Fix build with gcc -Werror=format-security
  * configure: Drop AM_MAINTAINER_MODE
  * autogen.sh: Honor NOCONFIGURE=1
  * Use autoconf HAVE_UNISTD_H instead of imake X_NOT_POSIX to find &lt;unistd.h&gt;
  * Just use C89 size_t instead of rolling our own Size_t
  * Use SEEK_* names instead of raw numbers for fseek whence argument
  * Makefile: use AM_V_GEN and AM_V_at to implement automake silent rules
  * Makefile: use $(LN_S) for better code portability
  * Include &lt;unistd.h&gt;
  * Fix abs() usage.</changelog>
  <changelog author="msrb@suse.com" date="1529582400">- U_NULL-pointer-dereference-in-XawAsciiSinkInitialize.patch
  * Fix crash when required font is not installed. (bsc#1098411)</changelog>
</package>
<package pkgid="a9e5cc935bc3d8ee3d09feb0143bf1d8286248f428a8e59065cdeba7c24b7480" name="libXvnc-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="80ecf1dc4d6e0ee00c408bfd8dc5bb9b8e1c1870c398d4b8a7ac8a444f493750" name="libXvnc1" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="8eb15717e07110dafe38547223f1444083287aa9a19e65f258d35f5f5f55a172" name="libaubio-devel" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="44362a8deca0e9e82bfe9b633ae52312506996a86c279163ae2d937e2ae7055c" name="libaubio-devel" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="03447dba2e15bc015787c3fbe50a8ad0b9d1629199492236f92562ee5d449a68" name="libaubio5" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="7f6c2e3b4bf4e1b17fff36cc6d2b0fcee7c6f1c896a2e0d52c8e0f95174a39c0" name="libaubio5" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="3ff94b4378b69881e16ee7a4ac05cedddc4752eb83080115edcc363313c24a0b" name="libaubio5-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="860691b8bbe0d997acf9f177fb4aa93a91ff8051cb93e1e8897cd17908066347" name="libaubio5-32bit" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="toddrme2178@gmail.com" date="1303646400">- Add 32bit compatibility libraries</changelog>
  <changelog author="coolo@suse.com" date="1317384000">- add libtool as buildrequire to make the spec file more reliable</changelog>
  <changelog author="coolo@suse.com" date="1407067200">- update to 0.4.1 (to fix build in Factory):
  * The most interesting feature in this release concerns aubiocut.
  Thanks to the sponsoring of Mark Suppes, the python script to slice
  sound streams was extended to be sample accurate, cut overlapping
  segments, and work on multiple channels.
  * New source and sink objects have been added to let aubio read and
  write WAV files, even when built with no external libraries.
  This should simplify the use of aubio on platforms such as Android or Windows.
  * Existing sources and sinks have been extended to read and write from
  and to multiple channels. This makes python-aubio one of the fastest
  and most versatile Python module to read and write media files.
  This release also comes with a stack of bug fixes and code clean-ups.
- 0.4 is a huge step in this library, as:
  * more portable: with no required dependencies, the core of aubio library,
  written in ANSI C, is known to compile and run on most modern platforms
  (Linux, Windows, Mac OS X, Android, iOS, ...).
  * more stable: several bugs fixes and a battery of tests make this new
  release more robust and less prone to errors.
  * faster: several enhancements to the C library and a brand new Python
  interface help make this release orders of magnitude faster than the
  previous ones.
- switched from autotools to waf</changelog>
  <changelog author="p.drouand@gmail.com" date="1445947200">- Update to version 0.4.2
  * src/onset/onset.h: add aubio_onset_get_silence(), fix description of
  aubio_onset_get/set_delay functions
  * src/tempo/tempo.h: add aubio_tempo_get_silence and aubio_tempo_get_threshold
  * src/io/audio_unit.c: fix deprecation warning (closes #16)
  * src/io/sink_apple_audio.c: avoid opening null path
  * src/io/sink_sndfile.c: improve error messages, set nsamples after write
  * src/io/sink_wavwrite.c: fail if samplerate is way too large, assume
  windows is little endian to build with mingw32
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_avcodec.c: update to libav10, libavcodec 55.34.1
  * src/io/source_sndfile.c: cast to uint_t for now, clarify some variables
  names, fix crash, zero-pad output vector when upsampling, improve
    seek errors and strings
  * src/io/source_wavread.c: avoid orphan parenthesis , cast size_t to int to
  avoid warning on win64 , improve seek errors processing , sync error message
  * src/onset/onset.c: avoid doubled onset at start, check parameters
  * src/pitch/pitch.c: add Hertz as valid unit string, check parameters
  * src/pitch/pitchyin.c, src/pitch/pitchyinfft.c: avoid producing
    NaN on silence (closes #7)
  * src/pitch/pitchyin.{c,h}: fix typo, developed
  * src/spectral/phasevoc.c: fix argument checks, improve error messages
  * src/synth/sampler.c: make sure blocksize &gt; 0
  * src/tempo/beattracking.c: avoid segfault on silence (closes #24)
  * src/tempo/tempo.c: add silence detection (closes #23), add old behavior in
  examples/aubiotrack.c, check parameters
  * src/*.c: fix some useless float conversion
  * python/ext/aubiomodule.c: improve documentation
  * python/ext/py-musicutils.c: add silence_detection (closes #21),
  level_detection, db_spl, level_lin, complete window implementation
  * python/ext/py-source.c: add channels, add seek (closes #9)
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_sink_multi.py: add multi channel version
  * python/demos/, python/demos/: minor improvements, improve syntax (closes #19)
  * python/setup.py: use setuptools, add numpy to install_requires
  * waf: removed, now automatically downloaded with make, updated to 1.8.12
  * Makefile: add target to fetch waf and basic instructions
  * .travis.yml: added template for travis continuous integration
  * {examples,src,tests}/wscript_build: add external libs and uselib to targets
  * src/wscript_build: do not hardocode install path
  * wscript, src/io/*.c: use custom defines instead of __APPLE__
  * wscript: make fat build optional, remove iOS sdk versioning
  * examples/: use outmsg to print notes (fixes #8)
  * examples/parse_args.h: improve short documentation (closes #12)
  * doc/*.cfg: remove html timestamps to make build reproducible
    (see debian bug #779216)
  * doc/aubiocut.txt: improve documentation
  * doc/*.rst: add sphinx documentation basis with Makefile and conf.py
  * README.md: minor updates
  * python.old: removed old code
  * tests/: minor bug fixing
- Add doxygen, ffmpeg-devel and txt2man dependencies
- Replace python with python-devel</changelog>
  <changelog author="olaf@aepfle.de" date="1460894400">- Use pkgconfig instead of libffmpeg-devel</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Update soname and generate libaubio5 package
- Update to version 0.4.5
  * src/io/source_avcodec.c: add support for libswresample
  * aubio: new python command line tool to extract information
  * src/onset/onset.c: add spectral whitening and compression, improve default
  parameters
  * this_version.py: use centralized script to get current version, adding git
  sha when building from git repo (thanks to MartinHN)
  * src/spectral/awhithening.h: add adaptive whitening
  * src/{cvec,mathutils,musicutils}.h: add cvec_logmag, fvec_logmag, and fvec_push
  * src/onset/onset.h: add aubio_onset_set_default_parameters to load optimal
  parameters of each novelty function, _{set,get}_compression and
  _{set,get}_awhitening to turn on/off compression and adaptive whitening
  * src/spectral/specdesc.h: add weighted phase
  * src/onset/onset.c: improve default onset parameters (thanks to @superbock
  for access to his evaluation database), see commit dccfad2 for more details
  * src/pitch/pitch.c: avoid segfault when using invalid parameters
  * src/temporal/biquad.c: fix biquad parameters initialization (thanks to
  @jurlhardt)
  * examples/aubio{onset,track}.c: add options --miditap-note and
  - -miditap-velo to set which midi note is triggered at onset/beat (thanks to
  @tseaver)
  * examples/aubioonset.c: show actual parameters in verbose mode
  * examples/utils.c: improve memory usage to emit midi notes
  * python/ext/py-source.c: add with (PEP 343) and iter (PEP 234) interface
  * python/ext/py-sink.c: add with interface (PEP 343)
  * python/lib/aubio/cmd.py: new `aubio` command line tool
  * python/lib/aubio/cut.py: moved from python/scripts/aubiocut
  * doc/*.rst: reorganize and improve sphinx manual
  * doc/*.txt: update manpages, add simple manpage for aubio command line
  * doc/full.cfg: derive from doc/web.cfg
  * README.md: simplify and add contribute information
  * wscript: prefer libswresample over libavsamplerate when available, use
  current version in manpages, doxygen, and sphinx, update to newest waf
  * setup.py: use entry_points console_scripts to generate scripts, use
  centralized version from this_version.py, clean up
  * python/lib/moresetuptools.py: detect if libswresample is available
- Update to version 0.4.4
  * src/utils/log.h: new function to redirect log, error, and warnings
  * python/: AUBIO_ERR raises python exception, AUBIO_WRN to emit py warning
  * doc/: add some documentation, fix errors in manpages
  * wscript: new rules to build 'manpages', 'doxygen', and 'sphinx', new
  - -build-type=&lt;release|debug&gt; option (thanks to Eduard Mueller)
  * src/notes/notes.h: add minioi and silence methods
  * examples/: add --minioi (minimum inter-onset interval) option
  * src/pitch/pitchyin.c: improve msvc compiler optimisations (thanks to
  Eduard Mueller)
  * python/, src/: improve error messages, fix minor memory leaks
  * src/io/source_avcodec.c: improve compatibility with latest ffmpeg and with
  older libav/ffmpeg versions
  * python/demos/: new demos to capture microphone in real time
  * src/aubio.h: include utils/log.h
  * src/utils/log.h: add new aubio_log_set_function to redirect log messages
  * src/notes/notes.h: add aubio_notes_{get,set}_minioi_ms, add
  _{get,set}_silence methods
  * src/aubio_priv.h: add AUBIO_INF to print to stdout with header, use new
  logging function, add ATAN alias, add stdarg.h, move #include "config.h"
  * src/{fmat,fvec}.c: avoid integer division
  * src/pitch/pitchyin.c: [msvc] help compiler to optimize aubio_pitchyin_do
  by giving it addresses for all arrays which are referenced in inner loops,
  thanks to Eduard Mueller.
  * src/pitch/pitch.c: declare internal functions as static, fail on wrong
  method, warn on wrong unit, improve error messages, fix error string
  * src/spectral/specdesc.c: return NULL if wrong mode asked, remove trailing
  spaces
  * src/onset/onset.c: return null and clean-up if new_aubio_specdesc failed,
  fix error message
  * src/notes/notes.c: use midi note to store pitch candidate, round to
  nearest note, add a variable to define precision, fix out-of-bound write,
  fix unset silence_threshold, fix error message
  * src/spectral/ooura_fft8g.c: add cast to avoid conversion warnings, prefix
  public function with aubio_ooura_ to avoid with other apps using ooura (e.g.
  puredata), make internal functions static,
  * src/spectral/fft.c: add message about fftw3 being able to do non-power of
  two sizes, make calls to fftw_destroy_plan thread-safe, use prefixed
  aubio_ooura_rdft
  * src/spectral/phasevoc.c: fix error string
  * src/temporal/resampler.c: throw an error when using libsamplerate with doubles
  * src/io/ioutils.h: add functions to check samplerate and channels, use in sink_*.c
  * src/io/source.c: add error message when aubio was compiled with no source,
  only show error message from last child source_
  * src/io/source_avcodec.c: call avformat_free_context after
  avformat_close_input, keep a reference to packet to remove it when closing
  file, avoid deprecation warnings with ffmpeg 3.2, add backward compatibility
  for libavcodec55, fix for old libavcodec54, use AV_SAMPLE_FMT_DBL when
  compiling with HAVE_AUBIO_DOUBLE, fix missing samples in eof block, avoid
  function calls before declarations, improve error messages, replace with new
  context before closing old one, make sure s-&gt;path is set to null
  * src/io/{source_wavread,sink_wavwrite}.c: declare internal functions as static
  * src/io/source_wavread.c: fix bytes_read for JUNK headers, improve error
  messages, initialize buffer, skip chunks until data is found, or abort, skip
  junk chunk
  * src/io/source_sndfile.c: add support for multi-channel resampling, set
  handle to null after sucessful close, add missing floor in ratio comparison,
  improve formatting
  * src/io/sink.c: only show error message from last child sink_
  * src/io/sink_apple_audio.c: avoid crash on empty file name
  * src/io/sink_sndfile.c: improve error message
  * src/io/sink_{sndfile,wavwrite}.c: use AUBIO_MAX_CHANNELS, fix error message
  * README.md: update copyright dates, use https
  * src/aubio.h: add some links to examples, use https
  * src/pitch/pitch.h: add aubio_pitch_get_tolerance, add basic description of
  unit modes
  * src/notes/notes.h: add doxygen header
  * src/spectral/fft.h: strip example path
  * doc/*.rst: improve sphinx documentation
  * doc/android.rst: add reference to it scripts/build_android
  * doc/debian_packages.rst: added page on debian packages
  * doc/python_module.rst: add demo_source_simple.py, add note on pip, add
  `print(aubio.version)`
  * doc/cli.rst: include command line manpages
  * doc/cli_features.rst: add matrix of command line features
  * doc/requirements.rst: add a note about --notests (closes #77), document
  - -msvc options, improve description of options
  * doc/download.rst: added page on download
  * doc/installing.rst: update
  * doc/xcode_frameworks.rst: added page on xcode frameworks
  * doc/**: use https://aubio.org
  * doc/conf.py: use pyramid theme, update copyright, remove hardcoded path
  * doc/web.cfg: exclude ioutils from doc
  * doc/aubionotes.txt: document -M option (see #18),
  * doc/aubioonset.txt: add documentation for -M, --minioi, improve threshold
  description (thanks to Peter Parker), fix typo (onset, not pitch)
  * doc/aubio*.txt: document -T/--timeformat option
  * Makefile: add a brief intro, avoid offline operations, add html and dist
  targets, add rules for documentation, simplify listing, avoid offline
  operations, bump waf to 1.9.6, check for waf before clean, chmod go-w
  waflib, improve clean, use pip to install, factorise pip options, generate
  more test sounds, improve test_python and test_pure_python, pass build_ext
  in test_pure_python{,_wheel}, quieten uninstall_python if already
  uninstalled, improve test targets, use bdist_wheel in test_pure_python,
  build_ext only for --enable-double, verbose waf rules, add cleanwaf
  * wscript: added debug/release build type configurations release (default)
  enables optimizations, debug symbols are enabled in both configurations,
  thanks to Eduard Mueller.
  * wscript: add options to disable source_wavread/sink_wavwrite, add check
  for stdarg.h, new rules 'manpages', 'sphinx', and 'doxygen' to build
  documentation, add version to sphinx and manpages, disable libsamplerate
  if double precision enabled (libsamplerate only supports float), fix typos,
  remove trailing spaces, improve tarball creation (./waf dist), remove
  full.cfg from tarball, prepend to CFLAGS to honor user cflags
  * wscript, src/wscript_build: improve install locations using DATAROOTDIR,
  MANDIR, INCLUDEDIR
  * wscript: default to no atlas for now
  * src/wscript_build: always build static library
  * scripts/build_android: add an example script to build aubio on android,
  * examples/aubionotes.c: use new notes, set minioi, send last note off when
  needed, add warning for missing options
  * examples/aubioonset.c: add minioi option, in seconds
  * examples/: only send a last note off when using jack
  * examples/: return 1 if object creation failed
  * examples/: use PROG_HAS_OUTPUT, add PROG_HAS_SILENCE
  * tests/src/spectral/test-fft.c: fix default size
  * tests/src/spectral/test-phasevoc.c: fix typos
  * tests/src/utils/test-log.c: add AUBIO_INF, add example for
  aubio_log_set_function, improve messages
  * python/ext/aubiomodule.c: add aubio._aubio.__version__ and import it as
  aubio.version, use custom logging function for errors and warnings, remove
  duplicated add_generated_objects, use &lt;&gt; for non local aubio
  * python/ext/py-cvec.c: use NPY_INTP_FMT
  * python/ext/py-fft.c: use error string set in src/spectral/fft.c
  * python/ext/py-phasevoc.c: use error string set in src/spectral/phasevoc.c
  * python/ext/py-sink.c: always set samplerate and channels in init
  * python/ext/py-source.c: use error string set in src/io/source.c
  * python/lib/aubio/midiconv.py: add unicode double sharp and double flat,
  improve unicode handling, skip UnicodeEncodeError on python 2.x
  * MANIFEST.in: add src/**.c, exclude full.cfg, include waflib, remove
  python/ext/config.h
  * setup.py: define AUBIO_VERSION use sorted glob.glob to improve
  reproducibility, remove extra quotes, remove status from version string,
  update description, use custom build_ext instead of 'generate' command,
  define HAVE_AUBIO_DOUBLE to 1 if needed
  * python/lib/gen_code.py: add support for multiple _do outputs, fix number
  of output, improve del_ function, safer DECREF, fix indentation, emit RuntimeError
  * python/lib/gen_external.py: clean-up, enable tss, remove duplicate,
  sort generated files
  * python/lib/moresetuptools.py: add HAVE_STDARG_H, also check for
  HAVE_AUBIO_DOUBLE, cleaner clean, look first for system library, then for
  local build, then local sources, mo nore fake config.h here, use
  samplerate in single precision only
  * python/README.md: add a note about nose2 for python tests (closes #74)
  * scripts/setenv_local.sh: python3 compat
  * python/demos/demo_alsa.py: add example using alsaaudio (closes #72)
  * python/demos/demo_mfcc.py: add options to plot first and second
  derivatives, and set samplerate/win_s/hop_s, thanks to @jhoelzl (closes #68)
  * python/demos/demo_notes.py: add simple notes demos
  * python/demos/demo_pyaudio.py: added simple demo for pyaudio, see #6,
  closes #78, thanks to @jhoelzl and @notalentgeek, add some comments, avoid
  overwriting aubio.pitch
  * python/demos/demo_source_simple.py: fix indentation, make executable
  * python/demos/demo_timestretch{,_online}.py: fix usage string, remove
  unused import, use // to yield an integer (closes #71)
  * python/demos/demo_timestretch_online.py: use 512, fix block counter
  * python/demos/demo_tss.py: improve default parameters, exit before plotting
  * python/tests/: use local import, add __init__.py
  * python/tests/test_cvec.py: simplify
  * python/tests/test_fft.py: skip test fft(zeros).phas == 0 if needed, expected powerpc
  * python/tests/test_fvec.py: reduce alpha norm precision to 10.-4
  * python/tests/test_{midi2note,note2midi}.py: use nose2.params, add unicode tests
  * python/tests/test_notes.py: add basic tests
  * python/tests/test_notes.py: test results are correct for 44100Hz_44100f_sine441.wav
  * python/tests/test_sink.py: add more tests, quiet warnings
  * python/tests/test_source.py: break long line, check the tail of the file
  is non-zero on non silent test files, filter user warnings to avoid spamming
  the console, only check if last frames are non silent on brownnoise (weak),
  remove fragile brownnoise test, check duration on short files, use nose2
  params to process one sound file per test
  * python/tests/test_specdesc.py: RuntimeError is now raised on wrong mode
  * python/tests/utils.py: by default, use 5 seconds brownoise
- Update to version 0.4.3
  * src/io/source.h, src/io/source_*.h: add _get_duration
  * src/notes/notes.h: add basic notes object
  * src/tempo/beattracking.{c,h}: add _get_period and _get_period_s
  * src/mathutils.h: add fvec_ishift
  * src/fvec.{c,h}: add fvec_weighted_copy
  * src/tempo/tempo.{c,h}: add _get_period and _get_period_s, also add tatum,
  a subdivision of the beat period, default to 4, implement get/set_delay
  * src/**.{c,h}: use #ifdef HAVE_FOO, not #if _HAVE_FOO, add const qualifiers
  to unmodified pointers (see #35)
  * src/{fmat,fvec,mathutils}.c: optimisations (using atlas or Accelerate when
  available) for fvec_sum, fvec_mean, fvec_shift, aubio_level_lin,
  fvec_set_all, fvec_zeros, fvec_weight, fvec_copy, fvec_weighted_copy,
  fmat_vecmul
  * src/aubio_priv.h: check for atlas cblas, use cblas_xswap, vDSP_dotpr,
  protect SQR parameters, avoid redefining MIN/MAX, define PATH_MAX and PI
  when needed, use _isnan on windows msvc 9 to avoid linking error, more
  windows hacks
  * src/mathutils.c: avoid for loop initial declarations [gcc], use
  HAVE_ATLAS, use smpl_t for constants
  * src/fmat.c: skip asserts
  * src/spectral/{filterbank,mfcc}.c: use accelerated fmat_vecmul
  * src/spectral/fft.c: fftw can be used odd length sizes, not Ooura,
  factorise double / single flags, use memcpy
  * src/spectral/phasevoc.c: fix arguments checks, return NULL when fft
  creation failed , apply windowing for resynthesized grain, use ishift for
  odd windows, fix scaling factors for correct reconstruction at 50 and 75%
  overlap
  * src/pitch/pitch.c: allow for silence == 0, improve error messages
  * src/pitch/pitchmcomb.c: fix candidates sorting function, really comparing
  current to next
  * src/notes/notes.c: equivalent to previous examples/aubionotes.c results
  * src/onset/onset.c: simplify selection of first onset, fix for "conversion
  from 'smpl_t' to 'uint_t', possible loss of data" with msvc
  * src/pitch/pitchmcomb.c: scan across all spectrum
  * src/pitch/pitchyinfft.c: use fvec_weighted_copy
  * src/{spectral/*.c,onset/*.c,tempo/*.c}: make sure win_size &gt; 1
  * src/io/*.c: use custom defines for {source,sink}_apple_audio, take a copy
  of const char* path
  * src/io/source_avcodec.c:
  - update to libav10, libavcodec 55.34.1
  - avoid deprecation warning, detect if we use ffmpeg or libav version
  - check if the uri is a network stream using av_url_split, call
  avformat_network_init() if needed
  - check if we still need max_analyze_duration2 (closes #53, thanks to
  @anthonylauzon)
  * src/io/source_{avcodec,sndfile}.c: avoid modifying input param
  * src/io/{sink,source,utils}_apple_audio.c: fix memory leak calling
  CFRelease (closes #26, closes #27, and closes #28)
  * src/io/sink_apple_audio.c: disable async mode for now, factorise code
  * src/io/source_apple_audio.c: check out of bounds _seek, set s-&gt;path, quiet
  * src/io/source_sndfile.c: fix crash, zero-pad output vector when
  upsampling, use sf_read_double when compiling with AUBIO_DOUBLE, approximate
  duration when resampling
  * src/io/sink_sndfile.c: fix for double precision
  * src/synth/sampler.c: fix typo, keeps a copy of uri
  * src/tempo/tempo.c: do not write novelty function in output[1]
  * src/temporal/resampler.c: make msvc happier adding a dummy variable
  * src/temporal/filter.c: check parameters, fix filter_do_outplace to really
  avoid modifying input
  * src/utils/windll.c: add dll main entry point
  * General:
  - new build system, new code generator
  - Python 3 compatibility (#33), thanks to Nils Philippsen (@nphilipp)
  - double precision compatibility
  - simplify memory allocations, removed unneeded malloc/free calls
  - fix memory leak (#49), check input sizes (#63) and output sizes (#60)
  - improve indentation, clean up unused imports and variables
  - fix comparison to None and to False
  * setup.py: move from python/setup.py, add option to build libaubio inside
  python-aubio (for instance with pip), add command 'generate' with option
  '--enable-double', build with -Wdeclaration-after-statement -Werror
  * python/ext/aubiomodule.c: fix PyMethodDef sentinel
  * python/ext/aubioproxy.c: factorize input checks into
  PyAubio_IsValidVector, fix windows c89 compilation, use npy_intp, not long
  * python/ext: rewrite and simplify, safer and improved memory usage (#49),
  improve error strings, verify actual object creation
  * python/ext/py-source.c: added duration, check seek is not negative
  * python/ext/py-musicutils.c: do not overwrite PyArg_ParseTuple messages
  * python/lib/gen_code.py: new generator, switch to using custom PyObjects
  instead of fvec, cvec, fmat, ready for double precision (defaults to single)
  * python/lib/aubio__init__.py: use new aubio.float_type, make sure length is
  not zero and float_type is imported
  * python/lib/aubio/midiconv.py: fix instance checks, make sure midi2note
  uses midi int (#33)
  * python/lib/aubio/slicing.py: fix samplerate
  * python/ext/aubio-types.h: add new_py_ functions to create PyObjects
  instead of fvec_t, apply to generated and hard-coded objects
  * python/lib/gen_external.py: improve compiler detection, fixes build on
  windows (#55)
  * python/lib/moresetuptools.py: helpers for windows and macos compilations
  * python/demos/demo_reading_speed.py: new reading speed tests, external
  packages disabled by default
  * python/demos/demo_timestretch.py: new timescale algorithm
  * python/demos/demo_timestretch_online.py: new timescale algorithm (online
  version)
  * python/demos/demo_create_test_sounds.py: add script to create simple sound
  files to test on using sox
  * python/demos/demo_a_weighting.py: add simple demo for a_weighting
  * python/demos/demo_filter.py: moved from _a_weighting
  * python/demos/demo_mfcc.py: use n_coeffs
  * python/demos/demo_bpm_extract.py: add exception type, avoid {} as default
  argument value
  * python/demos/demo_pysoundcard_*: update to pysoundcard 0.5.2 (closes #42)
  * python/scripts/aubiocut: fix usage string output
  * python/tests/run_all_tests,*.py: switch to nose2, fix most prospect warnings
  * python/tests/test_fvec.py: add test_pass_to_numpy, cope with accumulated
  errors
  * python/tests/test_cvec.py: simplify, add more tests
  * python/tests/test_fft.py: more tests, fft.do to clash on wrong size
  inputs, f.rdo input size, cvec is large enough, memory tests, avoid
  VisibleDeprecationWarning
  * python/tests/test_filterbank.py: check for wrong values, ValueError raised
  * python/tests/test_filter.py: add tests
  * python/tests/test_musicutils.py: simplify, check TypeError is raised
  * python/tests/test_mfcc.py: more tests, check for wrong input size (see #63)
  * python/tests/test_mathutils: fix test_miditobin test, can also raise
  NotImplementedError (darwin)
  * python/tests/test_note2midi.py: more tests, use unicode_literals
  * python/tests/test_phasevoc.py: add a note about ocasional crash check
  perfect reconstruction for overlap &gt; 75% add 50% overlap test, fix duplicate
  test name, add wrong sized input tests
  * python/tests/test_sink.py: remove useless many_sinks_not_closed and cruft
  * python/tests/test_source.py: simplify, quieten, skip tests if no test sounds
  * python/tests/test_specdesc.py: check for wrong values, skip wrong name
  test, use correct input size (see #63)
  * python/tests/utils.py: try reopening the file is deleting it fails on windows
  * python/VERSION: removed, use same VERSION file for libaubio and python-aubio
  * MANIFEST.in: move from python/, update contents
  * nose2.cfg: add minimal config, set multiprocess always-on=false (fixes
  coverage, pass -N to speed up the tests)
  * examples/*.c: add time format option
  * examples/{aubioonset,aubiotrack}.c: also emit midi note, thanks to
  @topas-rec (closes #62)
  * examples/: use outmsg to print notes (fixes #8)
  * examples/aubionotes.c: use new aubio_notes object
  * examples/aubiotrack.c: enable -O and -t options, fix is_beat/is_silence
  types
  * examples/{parse_args,utils}.h: check in config.h if getopt.h was found, or
  build without for msvc, more windows hacks
  * examples/utils.c: change send_noteon to accept floating point midi note number
  * tests/src/io/test-source_apple_audio.c: shorten long line
  * tests/src/io/test-source_avcodec.c: use HAVE_LIBAV, closes #10
  * tests/src/temporal: avoid crash, clarify
  * tests/src/tempo/test-tempo.c: tempo back to only one output
  * tests/src/test-delnull.c: improve test, avoid segfaults
  * tests/src/test-lvec.c: use AUBIO_LSMP_FMT
  * tests/utils_tests.h: add VA_ARGS versions of variadic macros
  * tests/utils_tests.h: also use custom srandom/random when compiling with
  - std=c99
  * tests/utils_tests.h: make sure M_PI and RAND_MAX are defined
  * Makefile: set waf to 1.8.22 for now, new targets create_test_sounds,
  build_python, test_python, clean_python, build_python3, clean_python3,
  test_pure_python, test_pure_python_wheel, (use test_pure_* targets to build
  without libaubio), use 'HAVE_DOUBLE=1 make' to build in double precision
  * scripts/build_apple_frameworks: add script to build macosx and ios
  frameworks (see #34, #43)
  * scripts/build_emscripten: add script to build with emcc and co
  * scripts/build_mingw: add script to cross-compile using mingw
  * scripts/get_waf.sh: added simple script to fetch latest waf
  * scripts/setenv_local.sh: set environment to run from built source tree
  * scripts/setenv_local.sh: update to new python-aubio build location
  * tests/wscript_build: do not install test programs
  * tests/wscript_build, src/wscript_build: use 'use =', simplify
  * src/wscript_build: enable shared lib on ios, static lib on windows
  * wscript:
  - update --enable-foo to fail if foo is not found
  - add -mmacosx-version-min=10.4 on darwin
  - add '-fembed-bitcode' on ios (closes #31), min to 6.1
  - make fat build, add option to not build with Accelerate framework
  - add option to not build with CoreAudio/AudioToolbox
  - add --disable-docs option
  - add -lm detection
  - pass HAVE_AUBIO_DOUBLE in compiler arguments
  - first check for headers, make getopt.h and unistd.h optional
  - check HAVE_AV* from ctx.env
  - make msvc compiler quieter, add /MD and /D_CRT_SECURE_NO_WARNINGS
  - check if we find atlas/cblas.h
  - new build platform emscripten
  - more cleanups and updates
  * src/: remove trailing spaces, improve doxygen strings, update copyrights,
  fix typos
  * src/onset/onset.h: fix description of get/set_delay functions
  * src/spectral/mfcc.h: add link to reference implementation
  * src/spectral/filterbank_mel.h: update reference url
  * src/musicutils.h: update link to Bernardini's paper, improve doc
  * doc/aubiomfcc.txt: add a note about the output
  * doc/*.cfg: update to Doxygen 1.8.8
  * python/README.md: fix typo (thanks to Sam Alexander), document how to
  build in a virtualenv (see #2)
  * README.md: minor updates, link to python/README.md, switch to https</changelog>
  <changelog author="alarrosa@suse.com" date="1493380800">- Do not install libaubio.a</changelog>
  <changelog author="tiwai@suse.de" date="1495108800">- Correct the license tag to GPL-3.0+</changelog>
  <changelog author="jengelh@inai.de" date="1495800000">- Rectify RPM groups.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
  <changelog author="tiwai@suse.de" date="1521806400">- Fix divide-by-zero at wavread (CVE-2017-17054, bsc#1070399):
  aubio-wavread-input-validation.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix segfault with malformed input file (CVE-2017-17554,
  bsc#1072317):
  aubio-resampler-NULL-deref-fix.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1533643200">- Fix minor security issues leading to segfault or buffer overread
  (CVE-2018-14522, bsc#1102359, CVE-2018-14523, bsc#1102364):
  0001-src-pitch-pitchyinfft.c-fix-out-of-bound-read-when-s.patch
  0002-src-pitch-pitchyinfft.c-comment-out-debug-output.patch
  0001-src-notes-notes.c-bail-out-if-pitch-creation-failed-.patch
  0002-src-io-source_wavread.c-also-exit-if-samplerate-is-n.patch
- Refresh the previous fixes from the upstream version
  aubio-wavread-input-validation.patch
  aubio-resampler-NULL-deref-fix.patch</changelog>
</package>
<package pkgid="b3c2659d64c180ff8fc4f762505afabe7d98f61630cbfdbd8f05e3ab7f22e685" name="libavcodec57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="4c5452689a3824321c4aa2feaa3c976f1f439c87eded5397ac1ef2aa56c05da7" name="libavcodec57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="62a6c45665da34e60940776cf1080a1069e8783f9fb3b5c62fa8d4b7f622e767" name="libavcodec58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="113b565e43ad1598f73d44f0f13292cad9be449dc2675bbb35c3163050685ef2" name="libavcodec58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="af0186d3ed2a5468e0ae3f86249d003755aaea3b69686e433e36485d45c50987" name="libavcodec58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="9682b0c8c304900e3136b307bc4b685e48d3a5a1387435f59f1bbae64aa95cea" name="libavcodec58" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="d6b0533d7c9eefd0c3bfaed3bee43b10770a284b0f5997a73fff39efcbf2c7b0" name="libavdevice57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="eb3585f4060ab6cf4a956ecda26559052efa0c52feb3f3b33b7bad612f59bc1a" name="libavdevice57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="39009557a559d044381caaeed3f7874800d5c96aa51803d8d36b2ae92272f753" name="libavdevice58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="f1feae1e969486d44c678979a740b3e0ca6e149863d61922d2b196ea4f5a4b2f" name="libavdevice58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="51f22ffcf4c635a8cc065a12eecdd347be4e92aaa3297f5fe8904cdf5bc8ebc8" name="libavdevice58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="592dac622ebda48d1d408c9057d19f29ea17e9688d309d88bd2763e5465363e8" name="libavdevice58" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="852cfc1add0e67560e523491f357359babdf9b7158860753a772db736d7a20f5" name="libavfilter6" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="ac247b52fc0c079a32bfb98772b752cc9ef5bc0dabe9cf8c6184bd11b4ed9575" name="libavfilter6" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="496a6334831364a634f3f215f62db4630aab8f950438955c87addf37e4cf2133" name="libavfilter7" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7c544dd5a7dc6ac99735b4ff8f82f28a4ccda9760b3b2add6e9044bbb5499052" name="libavfilter7" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="9af126b0abed666cef88e634b9373195fbfceeaa06b0ede86464d8bf7d83ee95" name="libavfilter7" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="8d3db9a9ff170ab62843ae2867d16bb23a993ebf1c06ea170e0eb3c5b85d3d4c" name="libavfilter7" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="f0fcaf3ce2d0a5fc319533fef8fc91864ba94e3d0d24461c6b0125e5e3b4424e" name="libavformat57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="dc764470a6d8d3a6ef0ec4f634b45abc87f14d9e271c420888461fb6bf293ed5" name="libavformat57" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="4c57bff851f0f061f66b9a1496867ba47f3038dfb187dde04edf75a03e25142d" name="libavformat58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="fcf03dbec9350e9453589cebfe93cefd3d64294499fd6a6a22bfbb4c50bb3e46" name="libavformat58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="f4429b227b308157a7cb179fd327039318996d2465dbe293dbe76bde93c78d62" name="libavformat58" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="fe7b878d79a316561eacf6863c81253091fc15e830bd9e59bd7f595cfdcf2780" name="libavformat58" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="63beb98d87223faa906aa10039967d4bfe3e5cb95679bf3d64379e98ad23a2b4" name="libavresample3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="3b0a85af4ade845e2c10ff5b5645613f99898b6e7b9e66fe9cf57e4cacfbc74e" name="libavresample3" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="42f244cb6c57f9a6b2763a3a16d3cbf847bcae269575f75586f8caa2197a4999" name="libavresample4" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="443e527d0c73b21e61fca683b38c27056c993f02d780d93f60043d425fa43bee" name="libavresample4" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="6aa76f36e97bc613ee61348a1c92862d5913947bb177f28758e7534b2f286708" name="libavresample4" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="7f3bdd887ac6e0526a81e085707adf96e3d18e984e8f277d0ac27757b9e7f513" name="libavresample4" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="c6334ec6d10e5294c38d760bb211f7252242f9bee3adcb469cf41a50ed170460" name="libavutil55" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="a230a8f017e5de311654fc5e964f21599fbc6cf6c163aff6f04cf04e146846d0" name="libavutil55" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="74a2593db9e974a6f22b85bbabc1d64f994c3a317702d31fab4d90c3f7b75b45" name="libavutil56" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="0e6ab578605d9bf3e8a1deb0b8e576641a2ee672eeae1019ae63426c01ac1ced" name="libavutil56" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="755b860e59eae9ce0c279ec486aaa06859ae8240e90d7e45b9d49bf99459d071" name="libavutil56" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="2237ca72c20a39f88b1e0576e96a4bac4c2fdbb44b1095f5fd24c6c6d7c96f40" name="libavutil56" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="1a56a91e0ba84f1f33de62c9708a9594682a00e4f907b34622d6537bbe55a429" name="libbind9-160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="a5ea1692ac6ba510431441871a662abcf5cf159fba94a8545977d52fc4f459b2" name="libbind9-160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="73cd182cbd381d8f66c5ce2d7ce56a7ed5f0a1dbfe8192efbe7bc8257db16142" name="libbind9-160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="35ac05114d1bca6f5fd230a83d7c6c50d1851254d86be6e957e58a1e58136440" name="libbind9-160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="be6c1bbf4af96667b66047134eb23c84d92e77df8fb36cdd50b35c1b9c79a13a" name="libblas3" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="2bfbb1da8d54a7ec64b966827bb477d48d1db392c78ab173550be156d38af954" name="libblas3-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="1082fedbd629810254830bf791d9367b49e2d7f84e9f2ef3e9fe3cef0bfcaed4" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="937692fc6df53b1a525e7a794ae998501af48f2c541738930143c0946446e4c6" name="libblkid-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="6921d1de46fe334ef2197486888a365cfa0f5baf3d18cac37e01a5ef0cda2e6b" name="libblkid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="320697d4ff35c99341734b4a2d0fdd83cd018b08d1cb1c008df32fe40c54a101" name="libblkid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="97568f6434887d48239a6c51aff55c8b0446774a1c723260080f84489688c15e" name="libblkid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="7aaa17aaed0f31fe9eae03b12f11c91c211b7865cc8db7baa7d1eddbd7dc883a" name="libblkid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="a3b352f7a4035dd84575cdb518cad92250e0baa76fe5bc30aed291d6d71e8cf6" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="cc791a054d405549647918c55c5a71f3fc2e7853f98842d0599ea5f7e5cfa9c7" name="libblkid1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="2088b860442f15019e2d40f930cefbeb3838318221136b28f1df8367986d7605" name="libblkid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="bb76def43f78096d5fee68f4f118f8bc036de1a43479ab172e99b289b3284dc2" name="libblkid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="8625caac648f4008dc94096e5e8eb77f4ddc897fc053497932b4f871742328ab" name="libbluetooth3-32bit" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="99de84c7b5e6ed5d6702c220a2f8ad7f6c253e1122a9e6c3b5846ca29129ce4b" name="libbluetooth3" arch="x86_64">
  <version epoch="0" ver="5.48" rel="lp150.4.3.1"/>
  <changelog author="seife+obs@b1-systems.com" date="1469016000">- update to version 5.41:
  BlueZ 5.41 is purely a bug-fix release targeting areas such as
  GATT, AVRCP, OBEX and device discovery filters. The GATT D-Bus
  API is now starting to be stable enough that this will likely be
  the last release where it is flagged as experimental.
- fix build with older distributions that don't have %_userunitdir
  ins systemd-rpm-macros</changelog>
  <changelog author="jengelh@inai.de" date="1469966400">- Update descriptions a bit. Adjust RPM groups for what is used
  in openSUSE normally. Drop archaic %clean section.
  Drop --with-pic which is only for (unbuilt) static libs.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1474891200">- update to version 5.42:
  The major API change with this release is that the GATT D-Bus API
  is no longer marked as experimental.This should hopefully
  encourage the creation of more applications using it. Feature-
  wise, btmon received support for decoding full mgmt message
  traces - a feature that is available in the bluetooth-next kernel
  tree, i.e. on its way to the 4.9 kernel release. In addition to
  these changes, this release contains also fixes in areas such as
  PBAP, transport selection (BR/EDR vs LE), ATT and A2DP.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1477742400">- update to version 5.43:
  This is almost purely a bug-fix release with fixes to HoG, ATT
  and PAN. There?s also a fix for a regression in 5.42 that caused
  connection failures for external profiles like OBEX.
  Feature-wise there?s one notable addition: LE privacy. By
  enabling this in main.conf it?s now possible to make BlueZ
  generate a local Identity Resolving Key (IRK) and use Resolvable
  Private Addresses (RPAs) for itself.</changelog>
  <changelog author="tchvatal@suse.com" date="1488369600">- Set the cupsdir directly with patch instead of mv and seds:
  * bluez-cups-libexec.patch
- Replace requirements by the pkgconfig counterparts
  * this should solve out the problem with builcycle on Factory
- Ran over with spec-cleaner</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488369601">- update to version 5.44:
  Most fixes are LE (specifically GATT) related, however some other
  areas are affected as well.
  Feature-wise, there?s a new MIDI plugin and support for using
  single-mode (LE-only) controllers that lack a public address.
  E.g. any nRF5x controller running a MyNewt or Zephyr based
  firmware falls into this category.
- packaging: add "--enable-midi", "--enable-deprecated"
  TODO: package deprecated tools into separate package to prepare
  removal some time in the future
- rebase bluez-cups-libexec.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1488542400">- make testsuite run non-parallel (it has problems with running
  parallel checks) and quiet</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1494072000">- update to version 5.45:
  This is mostly a bugfix release with fixes in ATT, GATT, OBEX
  and AVDTP.
  Feature-wise there are some new things as well, such as btmon
  support decoding Bluetooth 5.0 HCI commands and events.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1495800000">- add bluez-5.45-disable-broken-tests.diff to disable two broken
  tests (reported upstream but not yet fixed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1496923200">- add bluez-auto-enable-devices subpackage with main.conf which
  auto-enables all devices (boo#1039476)</changelog>
  <changelog author="msuchanek@suse.com" date="1498392000">- Add %post/%postun to bluez-auto-enable-devices so the settings
  change takes effect (boo#1039476)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1499428800">- enable sixaxis plugin</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1500120000">- update to version 5.46:
  * Fix issue with handling ATT over BR/EDR connections.
  * Fix issue with SDP browsing cleanup after connection.
  * Fix issue with pointer dereference and OPP Put request.
  * Fix issue with identity address updates during pairing.
  * Fix issue with not removing services that had disappeared.
  * Add support for improved discovery of included services.
  * Add support for simplified characteristics discovery.
  * Add support for GATT caching configuration option.
  * Add experimental support for AcquireWrite and AcquireNotify.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1505649600">- update to version 5.47:
  This release contains various fixes to GATT, A2DP and BR/EDR vs
  LE bearer handling. There?s also a notable SDP fix for CVE-2017-
  1000250 (part of the recently announced BlueBorne vulnerabilities).
  Feature-wise, there?s now support for adding the appearance and
  local name to advertising data through the Advertising D-Bus
  interface. The btmon tool is now also able to better decode most
  Bluetooth 5.0 HCI commands and events.
  The Bluetooth Mesh Profile specification was released recently,
  and this BlueZ release comes with initial support for it in the
  form of a new meshctl tool. Using this tool it?s possible to
  provision mesh devices through the GATT Provisioning Bearer
  (PB-GATT), as well as communicate with them (e.g. configure them)
  using the GATT Proxy protocol.</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1513080000">- add 0001-obexd-use-AM_LDFLAGS-for-linking.patch
- document systemd dependency during %post</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514548800">- update to version 5.48:
  This release brings many fixes and feature enhancements.
  Some notable enhancements include support for devices with the
  BLE battery service, as well as improved Mesh support in the
  meshctl tool. Several previously experimental D-Bus APIs have now
  been marked as stable, notably the Advertising Manager API as
  well as the AquireWrite &amp; AquireNotify GATT APIs.
  As far as fixes go, these can be found in many areas of the stack,
  including A2DP, AVCTP, device discovery, Mesh, and GATT.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1517313600">- Add disable_some_obex_tests.patch bypass boo#1078285 for PowerPC</changelog>
  <changelog author="acho@suse.com" date="1525435200">- Add
  CVE-2016-9800-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump memory leak in pin_code_reply_dump().
  (bsc#1013721)(CVE-2016-9800)
  CVE-2016-9804-tool-hcidump-Fix-memory-leak-with-malformed-packet.patch
  * Fix hcidump buffer overflow in commands_dump().
  (bsc#1013877)(CVE-2016-9804)</changelog>
  <changelog author="acho@suse.com" date="1530187200">- Add lost patches for RPi3 bluetooth support (bsc#995059)(bsc#1094902)
  0001-rpi3-bcm43xx-The-UART-speed-must-be-reset-after-the-firmw.patch
  0002-rpi3-Move-the-43xx-firmware-into-lib-firmware.patch</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1531483200">- add 0001-core-Fixes-order-InterfaceAdded.patch (boo#1101119)
  to fix headset connect after suspend/resume</changelog>
</package>
<package pkgid="d6b3ad65f34bc294beddc2d7a54e67abd86cca2b9c6e81a8e47801d1af0b191e" name="libcairo-gobject2" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="e8b11ba7d3938c8698554c65a291b2c144169d8b705ffa9f47102c61f5c1fc76" name="libcairo-gobject2-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="7b8aa851c06ff649cfab3d62a1d7c834464011e71dcf934fa77c92dad7427282" name="libcairo-script-interpreter2" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="e738103e349df4d4d968f90233bcb11cb2adadca3cadf67bcb6ad221608783c7" name="libcairo-script-interpreter2-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="b3318b05ed8e532f414bacecb8fffa209ed7dbf39b4290a0497f14a7bc973b8a" name="libcairo2" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="a3ef50dea784f513ec42d6f6bfb3423b5938365fe2beb876e07c6703cc333f1f" name="libcairo2-32bit" arch="x86_64">
  <version epoch="0" ver="1.15.10" rel="lp150.3.3.1"/>
  <changelog author="ro@suse.de" date="1431777600">- drop cairo-disable-lto.patch: lto was dropped upstream</changelog>
  <changelog author="zaitor@opensuse.org" date="1446465600">- Update to version 1.14.4:
  + Avoid appending empty slots to user data arrays. Fixes a memory
    consumption regression since commit 9341c254a.
  + Return a better error (file-not-found) when setting up pango on
    devices where the font files don't have read permissions.
  + Fix regression in the font size of canvas text in Inkscape when
    compiled with the Quartz backend (fdo#84324).
  + Fix _cairo_gl_shader_bind_matrix() to maintain compatibility
    with OpenGL ES 2.0. Manually transpose the matrix.
  + Fix incorrect font descriptor conversion when the font matrix
    yy is negative (fdo#90538).
  + Fix crash when using a complex path for clip and stroke due to
    discarding the intersection exactly at the top edge
    (fdo#74779).
  + Fix cairo_get_locale_decimal_point() on Android.
  + Fix compilation problem on AIX due to conflicting usage of
    symbol 'jmpbuf' (fdo#89339).
  + Fix broken rendering with XCB due to snapshotting of uploaded
    part of surfaces (fdo#67505).
  + Fix loss of alpha when copying a mask for a cairo recording
    surface, resulting in a double copy (fdo#73038, fdo#73901).
  + Fix incorrect recording of certain paths with script surfaces
    (fdo#91054).
  + Fix typo in definition of MAYBE_WARN in configure script
    (fdo#89750).
  + Fix use of filename variable after it's been freed (fdo#91206).
  + Fix out of bounds access when printing pattern (fdo#91266).
  + Fix incorrect size calculation in glyph cache unlocking for
    Cairo GL compositor (fdo#91321).
  + Fix memory leak in _cairo_gl_pattern_texture_setup()
    (fdo#91537).
  + Fix transparent images in win32-print (fdo#91835).
  + Fix _put_shm_image_boxes and _put_image_boxes when no SHM
    available with XCB.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008000">- Update to version 1.14.6:
  + Simple bugfix release to fix one Windows issue.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450008001">- Update to version 1.15.2:
  + Fix xcb/xlib compilation and calls. Make image boxes behave
    when SHM is not available.
  + Fix various issues with printing and transparent images on
    Win32.
  + Fix thin lines that don't show up when printing in Inkscape due
    to overly aggressive culling (fdo#77298).
  + Fix broken printing via pdf when glyph 0 is used for rendering,
    resulting in missing spaces and letters (fdo#89082).
  + Fix crash for certain glyphs in opentype fonts (fdo#91902).
  + Fix incorrect rendering of SVG paths with more than one
    subpath. If more than one trap is passed in then it's
    guaranteed that the returned traps will have their left edge to
    the left of their right edge, but if only one trap is passed in
    then the function always returns without doing anything
    (fdo#90984).
  + Improve rendering with Quarts to better match pixman's blending
    and filtering behavior.
- Drop cairo-render-thin-lines.patch: Fixed upstream.</changelog>
  <changelog author="hpj@suse.com" date="1450699200">- Add cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  to fix mutex deadlocks on certain documents (bsc#958844).</changelog>
  <changelog author="idonmez@suse.com" date="1460548800">- Update to GNOME 3.20  Fate#318572
- Remove patch:
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch.</changelog>
  <changelog author="hpj@suse.com" date="1469016000">- Add back cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch
  (bsc#958844, fdo#93891). This is still not fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1473076800">- Add cairo-xlib-double-free.patch to fix double free in
  _get_image_surface(); patch taken from upstream git (fdo#91967,
  boo#997189).</changelog>
  <changelog author="zaitor@opensuse.org" date="1481457600">- Update to version 1.15.4:
  + The PDF backend has gained support for a range of widely used
    features, including thumbnails, page labels, metadata, document
    outlines, structured text, hyperlinks, and tags. Tags permit
    adding logical info such as headings, tables, figures, etc.
    that facilitates indexing, accessibility, text reflow,
    searching, and extraction of the tagged items to other
    software.
  + API Changes:
  - Added a cairo API to set up Win32 surfaces for HDC with alpha
    channels.
  - New API for added PDF functionality (see above), and new
    error status item for problems relating to PDF tagging.
  - New error status items for handling of GDI, libfreetype, and
    libpng errors, respectively.
  + Fix playback of recording surfaces into PDF surfaces, where
    objects with negative coordinates were not getting drawn. To
    address this, the coordinate systems for PDF and PS have been
    changed to match cairo's coordinate system. This allows
    recording surfaces to be emitted in cairo coordinates, and
    results in the same origin being used for all operations when
    using the recording surface XObject. Test cases for PDF and PS
    have also been updated accordingly (fdo#89232).
  + Fix "invalidfont" error on some printers when printing PDFs
    with embedded fonts that have glyphs (such as spaces) with
    num_contours == 0 (fdo#79897).
  + Fix missing glyphs such as thin dashes, which get scaled to 0
    in userspace and thus have their drawing operations culled
    (fdo#94615).
  + Fix other oddities caused by variously idiosyncratic fonts.
  + Fix deadlock when destruction of a scaled font indirectly
    triggers destruction of a second scaled font, causing the
    global cache to be locked twice (fdo#93891).
  + Fix X errors reported to applications when shmdt() is called
    before the Attach request is processed, due to missing xcb and
    xlib calls.
  + Fix random failure in record-paint-alpha-clip-mast test case,
    caused by an incorrect assumption that a deferred clear can be
    skipped (fdo#84330).
  + Fix crash when dealing with an XShmGetImage() failure, caused
    by a double free in _get_image_surface() (fdo#91967).
  + Fix invalid execution of ASCII85 data by the PS interpreter
    that the image operator didn't use, by flushing the extraneous
    data after drawing the image (fdo#84811).
  + Fix decoding of Adobe Photoshop's inverted CMYK JPEG files in
    PDF export.
  + Fix unbounded surface assertion in win32-print code.
  + Fix a data race in freed_pool discovered by Firefox's cairo
    usage. The patch adads atomic int load and store functions,
    with relaxed memory ordering (fdo#90318).
  + Cleanup debugging text sent to stdout instead of log
    (fdo#95227).
  + Fix build issue when using non-GNU strings utility (fdo#88639).
  + Fix build of cairo modules as regular modules, not as versioned
    shared libaries (fdo#29319).
  + Fix build on win32 using gcc 5.4.
  + Fix build of script backend to require zlib.
  + Update test suite reference images using Debian Jessie 64-bit
    and poppler current as of June, 2016.
  + Various improvements to documentation and tests, compiler
    warning fixes, and an assortment of code refactoring and
    cleanup.
- Drop cairo-modules-no-version.patch,
  cairo-bsc958844-deadlock-on-scaled-font-cache-reset.patch and
  cairo-xlib-double-free.patch: Fixed upstream.
- Drop libtool BuildRequires and stop passing autoreconf, we no
  longer have any patches touching the buildsystem.</changelog>
  <changelog author="jengelh@inai.de" date="1486814400">- Fix RPM groups; update summaries.
  Remove useless --with-pic which is only for static libs.</changelog>
  <changelog author="zaitor@opensuse.org" date="1486987200">- Add cairo-pdf-fixes.patch: Three minor pdf fixes from upstream
  git (fdo#99630).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488974400">- Rebase cairo-pdf-fixes.patch: Add commit to fix fdo#100029.</changelog>
  <changelog author="alarrosa@suse.com" date="1496836800">- Add cairo-get_bitmap_surface-bsc1036789-CVE-2017-7475.diff to
  fix a segfault in get_bitmap_surface due to malformed font
  (bsc#1036789, fdo#100763, CVE-2017-7475).</changelog>
  <changelog author="zaitor@opensuse.org" date="1497614400">- Update to version 1.15.6:
  + Detect if variable fonts have synthesized bold/italic or
    non-default variants, and use a fallback font where needed.
  + Restore MacOSX 10.4 support. Cairo had dropped 10.4 support
    when moving to the CoreText API.  Now we automatically detect
    which API to use via dynamic linking, so can resume supporting
    this older version of MacOSX.
  + Fix error reporting in the xcb backend if fallback fails.
    Instead of returning NULL when the X11 server can't do some
    operation, return a surface in an error state.
  + Call XSync in the xlib backend before setting the error handler
    to ignore errors for certain requests, to make sure all pending
    errors are handled first.
  + Fix text-glyph-range for quartz-font.  Use 0xFFFF instead of 0
    for invalid index tracking.
  + Fix handling of Supplementary Multilingual Plane (SMP) Unicode
    characters in quartz-font.
  + Fix various issues in the drm backend including updating API
    usage and general code cleanup.
  + Clarify documentation regarding device scale inheritance and
    the units used in cairo_surface_create_similar_image
    (fdo#99094).
- Drop cairo-pdf-fixes.patch: Fixed upstream.
- Add cairo-fix-off-by-one-check.patch: Fix off by one check in
  cairo-image-info.c (fdo#101427).</changelog>
  <changelog author="alarrosa@suse.com" date="1497960000">- Add 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch to
  fix a segfault when using &gt;4GB images since int values were used
  for pointer operations (bsc#1007255, fdo#98165, CVE-2016-9082).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504094400">- Update to version 1.15.8:
  + This small snapshot provides new colored emoji glyph support,
    and a handful of minor fixes. For a complete log of changes,
    please see
    http://cairographics.org/releases/ChangeLog.1.15.8
  + Features and Enhancements: Support colored emoji glyphs, stored
    as PNG images in OpenType fonts.
  + Bug Fixes:
  - pdf:
    . Fix internal links pointing to other pages, by
    pre-calculating page heights so that link positions can be
    calculated more accurately.
    . Don't emit /PageLabel dict when no labels defined.
  - image: Fix crash on negative lengths.
  - win32: Fix initialization of mutexes for static builds.
  - font:
    . Fix color font loading on big-endian systems.
    . Fix color font support infinite-loop with empty glyphs.
  - Fix off by one check in cairo-image-info.c.
- Drop cairo-fix-off-by-one-check.patch: Fixed upstream.
- Run spec-cleaner, modernize spec.
- Rename 0001-image-prevent-invalid-ptr-access-for-4GB-images.patch
  to cairo-image-prevent-invalid-ptr-access.patch.
- Pass enable-gtk-doc instead of disable-gtk-doc to configure, we
  already have the gtk-doc BuildRequires in place so I can only
  assume that this was an honest error.</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig(gl) and pkgconfig(egl) instead of Mesa-devel.
  * The pkgconfig(gl) and pkgconfig(egl) are what cairo really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="zaitor@opensuse.org" date="1513598400">- Update to version 1.15.10:
  + Features and Enhancements:
  - Add support for OpenGL ES 3.0 to the gl backend.
  - Use Reusable streams for forms in Level 3 Postscript.
  - Add CAIRO_MIME_TYPE_EPS mime type for embedding EPS files.
  - Add CCITT_FAX mime type for PDF and PS surfaces.
  - svg: add a new function to specify the SVG document unit
    (fdo#90166).
  - Use UTF-8 filenames on Windows.
  + API Changes: cairo_svg_surface_set_document_unit() and
    cairo_svg_surface_get_document_unit().
  + Bugs fixed:
  - Fix regression in gles version detection.
  - Fix undefined-behavior with integer math.
  - Handle SOURCE and CLEAR operators when painting color glyphs
    (fdo#102661).
  - Convert images to rgba or a8 formats when uploading with
    GLESv2.
  - Use _WIN32 instead of windows.h to check for windows build.
  - Fix sigabrt printing documents with fonts lacking the
    mandatory .nodef glyph (fdo#102922).
  - Prevent curved strokes in small ctms from being culled from
    vector surfaces (fdo#103071).
  - Fix painting an unbounded recording surface with the SVG
    backend.
  - Fix falling back to system font with PDFs using certain
    embedded fonts, due to truncated font names (fdo#103249).
  - Fix handling of truetype fonts with excessively long font
    names (fdo#103249).
  - Fix race conditions with cairo_mask_compositor_t
    (fdo#103037).
  - Fix build error with util/font-view.
  - Fix assertion hit with PDFs using Type 4 fonts rendered with
    user fonts, due to error when destroying glyph page
    (fdo#103335).
  - Set default creation date for PDFs.
  - Prevent invalid ptr access for &gt; 4GB images (fdo#98165).
  - Prevent self-copy infinite loop in Postscript surface.
  - Fix padded image crash in Postscript surface.
  - Fix annotation bugs in PDFs and related memory leaks.
  - Fix test failures and other assorted issues in ps and pdf
    code.
  - Fix code generation when using GCC legacy atomic operations
    (fdo#103559).
  - Fix various compilation warnings and errors.
  - Fix various distcheck errors with private symbols, doxygen
    formatting etc.
- Drop cairo-image-prevent-invalid-ptr-access.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518782400">- Add explicit pkgconfig(zlib) and (conditionalized on
  build_xcb_backend) pkgconfig(xcb-render) BuildRequires: closer
  alignment with what configure checks for.</changelog>
  <changelog author="qzheng@suse.com" date="1529409600">- Add cairo-CVE-2017-9814.patch: Replace malloc with_cairo_malloc
  and check cmap size before allocating (boo#1049092,
  CVE-2017-9814, fdo#101547).</changelog>
</package>
<package pkgid="ce0c6049ff4aa83f18b2d8019004324e38dc9ef7c5378c617057e55da278c086" name="libcdio++0" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="178d5cf878750576458a8e0c4ad243a2b4228f0836e0b459489ecef12f874ab7" name="libcdio++0-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="2b139b115e38527284d36ac6df0a2d8517e3910244b6d5f4352c5e5d54d0f6fc" name="libcdio" arch="src">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="9c6df49d2940434b20fc04e797583dd3b2c913d3bd1d3c3b543a9b98dca0868d" name="libcdio-devel" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="0516e3f14deee2e485bbbd345a5326e2e41d05ade1e1af96fe3eecf85f69a45d" name="libcdio16" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="927ceff055aec31a37db60f56d0123c07a6da7174f5b7fff1121a8663c719797" name="libcdio16-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="3be51ae333528dedadb3c3fd3f77efa5965e4de1b5b4369d2425bd05613f71e3" name="libclamav7" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="c5adac779c96bf855c4270ea82e8b1a8f72cff8037b8289d99efd7a8128d1253" name="libclammspack0" arch="x86_64">
  <version epoch="0" ver="0.100.1" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1457006400">- Update to version 0.99.1
  * hwp5.x: fix for streams without names
  * libclamav: yara: avoid unaliged access to 64bit variable
  * patch by Mark Allan to add show-progress option to freshclam.
  * added 'CustomXML' as trigger for likely OOXML
  * ClamAV 0.99.1 beta1 release.
  * add scanning options for scanning xml-based documents
  (MSXML, OOXML, HWPML) and HWP3
  * add dconfs for XDP, MBR, GPT, APM, OOXML, MSXML, and HWP formats
  * hwp: scan decompressed data on limits exceeded
  * Fix for signature name length&lt;3 in .ign &amp; .ign2 CVD files.
  * Change RTF file magic from '{\rtf' to '{\rt'
  * zeroing out buffer at allocation to avoid writing uninitialized
  bytes to a file
  * adding check for compressed input stream
  * clean up and boost accuracy to detecting OOXML documents
  * Fix crash when using pcre statistics due to inconsistent memory
  management function calls
  * adding check to verify a valid number of rounds for rijndael aes
  encryption/decryption
  * fixing edge case revealed by unit testing
  * let html be scanned raw when --scan-html=no is in effect.
  * fix crash due to memory overlay with crafted 7z files.
  * fixing off by one OOB write in htmlnorm
  * fixing autoit OOB bufferread
  * sigtool: adding support for decoding cdb sigs
  * fix embedded http links.
  * fix regression crash on sid 1005597703 due to uninitialzed
  (i.e., garbage initialized) structure.
  * corrects mso stream prefix value for big endian processors.
  * ooxml_hwp: add support for filetyping and preclassification
  * hwpole2: new filetype and handler for hwp embedded ole2 files
  * fixing possible oob dereference when parsing mbox files
  * adding explicit wwunpack oob checks
  * fixing edge case where a null terminator was unintentionally
  written into an adjacent buffer.
  * hwpml: use msxml_parser callback scanner for binary data
  * msxml_parser: add callback-based scanning mechanism
  * HWPML: added hwpml_keys for hwpml parsing
  * add HMPML filetype, tab fixes in filetype.c
  * Hwp3.x: inflate compressed segment and offset tracking
  * Hwp3.x file header parsing and preclass
  * pcre: fixed minimum pcre version check
  * fix detection of libcheck without pkg-config file
  * add HWP5 filetype tracking to preclassification
  * add HWP 3.x internal filetypes
  * add hwp5 contents to preclass set
  * proper identification of HWP file format
  * strengthen file typing for OOXML.
  * normalization of whitelist signatures
  * github issue #9 - wrong length &amp; offset.</changelog>
  <changelog author="martin.liska@suse.com" date="1466164800">- Change default C++ std to -std=gnu++98.</changelog>
  <changelog author="fweiss@suse.com" date="1466683200">- Update to version 0.99.2 (bsc#978459)
  * 7z: fix for FolderStartPackStreamIndex array index heck
  * print all CDBNAME entries for a zip file when using the -z
    flag.
  * try to minimize the err cleanup path
  * clamunrar: notice if unpacking comment failed
  * signature manual update.
  * use temp var for realloc to prevent pointer loss.
  * fix debug VI hex truncation
  * freshclam: avoid random data in mirrors.dat.
  * libclamav: print raw certificate metadata
  * freshclam manager check return code of strdup.
  * additional suppress IP notification when using proxy
  * fix download and verification of *.cld through PrivateMirrors
  * suppress IP notification when using proxy
  * remove redundant mempool assignment
  * divide out dumpcerts output for better readability
  * fix dconf and option handling for nocert and dumpcert
  * patch by Jim Morris to increase clamd's soft file descriptor to
    its potential maximum on 64-bit systems
  * Move libfreshclam config to m4/reorganization.
  * adding libfreshclam
  * Add 'cdb' datafile to sigtools list of datafile types.
  * NULL pointer check.
  * malloc() NULL pointer check.
  * clamscan 'block-macros' option.
  * initialize cpio name buffer
  * initialize mspack decompression buffers
  * prevent memory allocations on used pointers (folder objects)
  * prevent memory allocations on used pointers (boolvectors)
  * initialize ARJ metadata structures
  * change cli_malloc with cli_calloc
  * check packSizes prior to dereference
  * fixed inconsistent folder state on failure
  * pre-check on (*unpackSizes) dereference
  * fix on pre-checks on dereferenced array
  * pre-checks on dereferenced array size values (not =0)
  * adding sanity checks to 7z header parsing
  * fixed mew source read issue
  * documentation update on targets
  * filetype consistency
  * move llvm option flag handling to new m4 file
  * hwp5.x: fix for streams without names
- bsc#958451: Remove updateclamconf, because it breaks
  configurations that have multiple occurances of the same keyword.
  Henceforth the configuration files have to be merged manually, if
  a ClamAV update adds or removs options.</changelog>
  <changelog author="fweiss@suse.com" date="1467288000">- Added BuildRequires systemd-rpm-macros
- Added %ghost entry for /run/clamav
- Use /run instead of /var/run because it is a symlink nowadays
  (clamav-tmpfiles.conf)</changelog>
  <changelog author="jengelh@inai.de" date="1469102400">- Trim useless words from description and fix spellos.
  Test for user/group existence before adding and always show
  errors when they occur.</changelog>
  <changelog author="max@suse.com" date="1470225600">- boo#991812: Remove obsolete dependency on latex2html-pngicons.</changelog>
  <changelog author="fweiss@suse.com" date="1476360000">- Add enable-timestamps option to disable time
  dependent macros if passed to configure.
  (bsc#1001154, clamav-disable-timestamps.patch)</changelog>
  <changelog author="astieger@suse.com" date="1496059200">- provide and obsolete clamav-nodb to trigger it's removal in Leap
  bsc#1040662</changelog>
  <changelog author="ro@suse.de" date="1501588800">- pass --disable-zlib-vcheck to fix build in factory</changelog>
  <changelog author="fvogt@suse.com" date="1503316800">- Add clamav-fix_newer_zlib.patch from ubuntu packages to fix build with
  zlib 1.2.11 (boo#1041201)</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Implement shared library guideline.</changelog>
  <changelog author="meissner@suse.com" date="1511870400">- clamav-0.99.2-openssl-1.1.patch: fixed build against openssl 1.1</changelog>
  <changelog author="vcizek@suse.com" date="1516968000">- Update to security release 0.99.3 (bsc#1077732)
  * CVE-2017-12376 (ClamAV Buffer Overflow in handle_pdfname Vulnerability)
  * CVE-2017-12377 (ClamAV Mew Packet Heap Overflow Vulnerability)
  * CVE-2017-12379 (ClamAV Buffer Overflow in messageAddArgument Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition
    or potentially execute arbitrary code on an affected device.
  * CVE-2017-12374 (ClamAV use-after-free Vulnerabilities)
  * CVE-2017-12375 (ClamAV Buffer Overflow Vulnerability)
  * CVE-2017-12378 (ClamAV Buffer Over Read Vulnerability)
  * CVE-2017-12380 (ClamAV Null Dereference Vulnerability)
  - these vulnerabilities could have allowed an unauthenticated,
    remote attacker to cause a denial of service (DoS) condition on an affected device.
  * CVE-2017-6420 (bsc#1052448)
  - this vulnerability allowed remote attackers to cause a denial of service
    (use-after-free) via a crafted PE file with WWPack compression.
  * CVE-2017-6419 (bsc#1052449)
  - ClamAV allowed remote attackers to cause a denial of service
    (heap-based buffer overflow and application crash) or possibly
    have unspecified other impact via a crafted CHM file.
  * CVE-2017-11423 (bsc#1049423)
  - The cabd_read_string function in mspack/cabd.c in libmspack 0.5alpha
    allowed remote attackers to cause a denial of service
    (stack-based buffer over-read and application crash) via a crafted CAB file.
  * CVE-2017-6418 (bsc#1052466)
  - ClamAV 0.99.2 allowed remote attackers to cause a denial
    of service (out-of-bounds read) via a crafted e-mail message.
- drop clamav-0.99.2-openssl-1.1.patch (upstream)</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc=983938 `After=syslog.target` left-overs in several unit files</changelog>
  <changelog author="max@suse.com" date="1518609600">- bsc#1045490, CVE-2012-6706: VMSF_DELTA filter in libclamunrar
  allows arbitrary memory write (clamav-CVE-2012-6706.patch).
- Buildrequire curl-devel to enable clamsubmit.</changelog>
  <changelog author="max@suse.com" date="1520424000">- Update to security release 0.99.4 (bsc#1083915):
  * CVE-2012-6706
  * CVE-2017-6419
  * CVE-2017-11423
  * CVE-2018-1000085 (bsc#1082858)
  * CVE-2018-0202
- Obsolete patches:
  * clamav-CVE-2012-6706.patch
  * clamav-gcc47.patch</changelog>
  <changelog author="max@suse.com" date="1524744000">- Update to version 0.100.0 (bsc#1089502):
  * Add interfaces to the Prelude SIEM open source package for
    collecting ClamAV virus events.
  * Support libmspack internal code or as a shared object
    library. The internal library is the default and includes
    modifications to enable parsing of CAB files that do not
    entirely adhere to the CAB file format.
  * Link with OpenSSL 1.1.0.
  * Deprecate of the AllowSupplementaryGroups parameter
    statement in clamd, clamav-milter, and freshclam.
    Use of supplementary is now in effect by default.
  * Deprecate internal LLVM code support.
  * Compute and check PE import table hash (a.k.a. "imphash")
    signatures.
  * Support file property collection and analysis for MHTML files.
  * Raw scanning of PostScript files.
  * Fix clamsubmit to use the new virus and false positive
    submission web interface.
  * Optionally, flag files with the virus
    "Heuristic.Limits.Exceeded" when size limitations are exceeded.
  * Improved decoders for PDF files.
  * Reduced number of compile time warnings.
  * Improved support for C++11.
  * Improved detection of system installed libraries.
  * Fixes to ClamAV's Container system and the introduction of
    Intermediates for more descriptive signatures.
  * Improvements to clamd's On-Access scanning capabilities
    for Linux.
  * Obsoletes clamav-fix_newer_zlib.patch
- Update key ring and add signature file.
- Turn off LLVM for now, because the bundled copy is deprecated,
  the versions we have are too new and the performance gain over
  the  byte code interpreter are negligable, according to upstream.
- Move pkgconfig stuff from main to devel package.
- Re-introduce removed options as deprecated, so that clamd and
  freshclam don't exit on startup with an old config file
  (clamav-obsolete-config.patch).
- Put libclammspack0 into its own subpackage to follow the letter
  of the shlib packaging policy, even though it really makes no
  sense here.</changelog>
  <changelog author="egdfree@opensuse.org" date="1531224000">- Update to version 0.100.1
  * CVE-2018-0360: HWP integer overflow, infinite loop
    vulnerability (bsc#1101410)
  * CVE-2018-0361: PDF object length check, unreasonably long time
    to parse relatively small file (bsc#1101412)
  * Buffer over-read in unRAR code due to missing max value checks
    in table initialization
  * Libmspack heap buffer over-read in CHM parser
  * PDF parser bugs
  * Add HTTPS support for clamsubmit
  * Fix for DNS resolution for users on IPv4-only machines where
    IPv6 is not available or is link-local only</changelog>
  <changelog author="security@suse.com" date="1531828800">- fix library-without-ldconfig warnings on libclammspack</changelog>
  <changelog author="max@suse.com" date="1532952000">- Disable YARA support for licensing reasons (bsc#1101654).
  clamav-disable-yara.patch</changelog>
</package>
<package pkgid="f487d13373d27cce43c8e75924832a4b9fac89cbae1df4f97a6ebb1536cd00ef" name="libcodec2-0_6" arch="x86_64">
  <version epoch="0" ver="0.6" rel="lp150.2.3.2"/>
  <changelog author="dl8fcl@darc.de" date="1367236800">- first try</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1424001600">- version 0.3svn1917
- mods based on Fedora package</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899200">- version 0.4</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1439899201">- patch to install copm_prim.h needed by freedv2</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1442577600">- version 0.4.1</changelog>
  <changelog author="wk@ire.pw.edu.pl" date="1444564800">- version 0.5</changelog>
  <changelog author="aloisio@gmx.com" date="1484395200">- Version 0.5.1
  * Updated golay
- Spec cleanup
- Added codec2-rpmlintrc</changelog>
  <changelog author="dl8fcl@darc.de" date="1484654400">- Copyrigth information of spec file removed</changelog>
  <changelog author="mpluskal@suse.com" date="1489492800">- Cleanup spec file with spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update description with new bit rates from homepage.</changelog>
  <changelog author="mardnh@gmx.de" date="1492344000">- Update to version 0.6:
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1496145600">- Update licensing information</changelog>
  <changelog author="mpluskal@suse.com" date="1531828800">- Add baselibs.conf</changelog>
</package>
<package pkgid="d5fa840e8691ae0f220994f369b86c192101169f32ffe95ff7c1400f56bbf168" name="libcom_err-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="2783edca5c5db0fa0f1b099f79887df2814121215d53a961ce0b7b8743e53579" name="libcom_err-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="280a0f22ca517f0414a0d32b4cbc1ccc30b7bef7bc96789b3f6fbd12aa3222e0" name="libcom_err-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="eb4c8749c8c9ba6b84d93bbaf41d7bc378ea392534cda89208f197500292f961" name="libcom_err2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="40dc57d3cc751723fe9521658f038f3be69e2b098d29b81972daa5cec5612896" name="libcom_err2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="f79ce1c2893c24fb046f4f7686ec998da0fec7192148a88ed14c59349bbc5b70" name="libcrypto43" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="c0a935058d1cabc87363be52423b20da8f9f908b075fdbac58a1d03a96514eb4" name="libcrypto43-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="6dc6f671d2cfab13ca4b648e206da5535d6a909ccd0d40802577fabd147e4127" name="libcups2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="81220bed811733e36ffdd12b0ce2bebb0d52464247d2ddce2e9277ed094d5790" name="libcups2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="4c138078ce942a87189f1fe99a10d224740818b9c4f6838c140d45c9328b51e9" name="libcupscgi1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="dca8f85fec37f9f734ef8ac45a2c0901099710bd479f3e1ecb4243487102e38d" name="libcupscgi1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="5d306bcbc78d60c50e7a51839e7a05d0f920f3f49c0dd7f77a6f6d3b67be884e" name="libcupsimage2" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="2ef53c3e8bc59ca2ab86833aabe3b9bd28ef60b030afabe2b000cc75eb4af09b" name="libcupsimage2-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="41ccf39ba8d5d499878448cefd6ef351cef61fb037889322f6750a965ad3401f" name="libcupsmime1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="8854ef90323ee9e2eb3b994423574cb1cc9d07690f5ce7e235ce1642d5c8875e" name="libcupsmime1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="9abcd4f35f7f957d32670b4cc9c3dd444d3c98e68f7cccc7211662ca59af21da" name="libcupsppdc1" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="4546660b78019d2a50a7837b33c4dac9710e097466907735d2d017c45a7c9a93" name="libcupsppdc1-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.7" rel="lp150.2.3.1"/>
  <changelog author="jsmeix@suse.de" date="1441108800">- Version upgrade to 2.1.0:
  CUPS 2.1.0 offers improved support for IPP Everywhere,
  adds support for advanced logging using journald on Linux, and
  includes new security features for encrypted printing and
  reduced network visibility in the default configuration.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Added support for 3D printers (basic types only,
    no built-in filters) based on PWG white paper.
  * The IPP backend now stops sending print data
    if the printer indicates the job has been aborted
    or canceled (&lt;rdar://problem/17837631&gt;)
  * The IPP backend now sends the job-pages-per-set
    attribute when printing multiple copy jobs with
    finishings (&lt;rdar://problem/16792757&gt;)
  * The IPP backend now updates the cupsMandatory values when the
    printer configuration changes (&lt;rdar://problem/18126570&gt;)
  * No longer install banner files since third-party banner
    filters now supply their own (STR #4518)
  * The scheduler no longer listens on the loopback
    interface unless the web interface or printer sharing
    are enabled (&lt;rdar://problem/9136448&gt;)
  * Added a PPD generator for IPP Everywhere printers (STR #4258)
  * Now install "default" versions of more configuration
    files (&lt;rdar://problem/19024491&gt;) in particular
    cups-files.conf.default and snmp.conf.default
  * Added SSLOptions values to allow Diffie-Hellman key exchange
    and disable TLS/1.0 support.
  * Updated the scheduler to support more IPP Everywhere
    attributes (STR #4630)
  * The scheduler now supports advanced ASL and journald logging
    when "syslog" output is configured (STR #4474)
  * The scheduler now supports logging to stderr when running
    in the foreground (STR #4505)
- Adapted patches so that they apply to CUPS 2.1.0 sources:
  * cups-2.1.0-choose-uri-template.patch replaces
    cups-1.2rc1-template.patch
  * cups-2.1.0-default-webcontent-path.patch replaces
    cups-1.4.3-default-webcontent-path.patch
  * cups-2.1.0-cups-systemd-socket.patch replaces
    cups-systemd-socket.patch</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to build a 32bit wine on 64bit only Leap systems.</changelog>
  <changelog author="michael@stroeder.com" date="1456747200">- Version upgrade to 2.1.3:
  CUPS 2.1.3 fixes some issues in the scheduler, sample drivers,
  and user commands.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * The scheduler should not exit under memory pressure
    (&lt;rdar://problem/23255001&gt;)
  * Fixed some issues in ipptool for skipped tests
    (&lt;rdar://problem/24137160&gt;)
  * The "lp -H resume" command did not reset the
    "job-state-reasons" attribute value (STR #4752)
  * The scheduler did not allow access to resource files
    (icons, etc.) when the web interface was disabled (STR #4755)
- Version upgrade to 2.1.2:
  CUPS 2.1.2 fixes an issue in the 2.1.1 source archives which
  actually contained a current 2.2 snapshot.
  There are no other changes.
- Version upgrade to 2.1.1:
  CUPS 2.1.1 fixes a number of USB and IPP printing issues,
  addresses some error reporting and hardening issues in
  the scheduler, and updates some localizations.
  A detailed list of changes can be found in the CHANGES.txt file.
  Changes include (excerpt):
  * Security hardening fixes (&lt;rdar://problem/23131948&gt;,
    &lt;rdar://problem/23132108&gt;, &lt;rdar://problem/23132353&gt;,
    &lt;rdar://problem/23132803&gt;, &lt;rdar://problem/23133230&gt;,
    &lt;rdar://problem/23133393&gt;, &lt;rdar://problem/23133466&gt;,
    &lt;rdar://problem/23133833&gt;, &lt;rdar://problem/23133998&gt;,
    &lt;rdar://problem/23134228&gt;, &lt;rdar://problem/23134299&gt;,
    &lt;rdar://problem/23134356&gt;, &lt;rdar://problem/23134415&gt;,
    &lt;rdar://problem/23134506&gt;, &lt;rdar://problem/23135066&gt;,
    &lt;rdar://problem/23135122&gt;, &lt;rdar://problem/23135207&gt;,
    &lt;rdar://problem/23144290&gt;, &lt;rdar://problem/23144358&gt;,
    &lt;rdar://problem/23144461&gt;)
  * The cupsGetPPD* functions did not work with IPP printers
    (STR #4725)
  * Some older HP LaserJet printers need a delayed close when
    printing using the libusb-based USB backend (STR #4549)
  * The libusb-based USB backend did not unload the kernel usblp
    module if it was preventing the backend from accessing the
    printer (STR #4707)
  * Current Primera printers were incorrectly reported as Fargo
    printers (STR #4708)
  * The IPP backend did not always handle jobs getting canceled
    at the printer (&lt;rdar://problem/22716820&gt;)
  * Added USB quirk for Canon MP530 (STR #4730)
  * The scheduler did not deliver job notifications for jobs
    submitted to classes (STR #4733)
  * Changing the printer-is-shared value for a remote queue
    did not produce an error (STR #4738)
  * The IPP backend incorrectly included the job-password
    attribute in Validate-Job requests (&lt;rdar://problem/23531939&gt;)</changelog>
  <changelog author="kamikazow@web.de" date="1467115200">- Remove CUPS.desktop and pixmap
  * Obsoletes patch cups-1.3.9-desktop_file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-daemon) BuildRequires with
  pkgconfig(libsystemd) on openSUSE 13.2 and newer: the various
  sub-libraries have been merged into libsystemd since version 209.
  openSUSE 13.1 was the last product to ship systemd 208.</changelog>
  <changelog author="kukuk@suse.com" date="1490788800">- Add /etc/cups to cups-libs package [bsc#1025689]</changelog>
  <changelog author="alarrosa@suse.com" date="1491825600">- Add cups-2.1.3-cupsEnumDests-react-to-all-for-now.diff .
  Avahi sends an ALL_FOR_NOW event when it finishes sending
  its cache contents. This patch makes cupsEnumDests finish
  when the signal is received so it doesn't block the caller
  doing nothing until the timeout finishes (related to bsc#955432,
  submitted upstream at https://github.com/apple/cups/pull/4989)</changelog>
  <changelog author="alarrosa@suse.com" date="1492689600">- Drop cups-1.7.5-cupsEnumDests-react-to-all-for-now.diff and add
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch,
  0002-Save-work-on-Avahi-code.patch and
  0003-Avahi-fixes-for-cupsEnumDests.patch which is what upstream
  finally commited to cups 2.2 sources in response to
  https://github.com/apple/cups/pull/4989 in order to fix cupsEnumDests
  to react to the ALL_FOR_NOW avahi event (and also include a similar
  fix for the dnssd case). Related to bsc#955432.</changelog>
  <changelog author="dimstar@opensuse.org" date="1495281600">- Replace krb5-devel BuildRequires with pkgconfig(krb5) on
  suse_version &gt;= 1315: give OBS a better chance to break up build
  cycles.</changelog>
  <changelog author="jsmeix@suse.de" date="1496404800">- Major backward incompatible change since CUPS 2.2.0:
  There is no longer the directory /etc/cups/interfaces because
  since CUPS 2.2.0 so called "System V style Interface Scripts"
  are no longer supported for security reasons (see below the
  entry about the changes included in CUPS 2.2.0).
- Disabled cups-2.1.0-cups-systemd-socket.patch
  because it does no longer apply which needs to be examined
  and decided by someone who knows about systemd internals.
- Disabled
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because they do no longer apply which needs to be examined
  and decided by someone who knows about Avahi internals.
- Version upgrade to 2.2.3:
  CUPS 2.2.3 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * The IPP backend could get into an infinite loop for certain
    errors, causing a hung queue (rdar://problem/28008717)
  * The scheduler could pause responding to client requests in
    order to save state changes to disk (rdar://problem/28690656)
  * Added support for PPD finishing keywords
    (Issue #4960, Issue #4961, Issue #4962)
  * The IPP backend did not send a media-col attribute for just
    the source or type (Issue #4963)
  * IPP Everywhere print queues did not always support all print
    qualities supported by the printer (Issue #4953)
  * IPP Everywhere print queues did not always support all media
    types supported by the printer (Issue #4953)
  * The IPP Everywhere PPD generator did not return useful error
    messages (Issue #4954)
  * The IPP Everywhere finishings support did not work correctly
    with common UI or command-line options (Issue #4976)
  * Fixed an error handling issue for the network backends
    (Issue #4979)
  * The "reprint job" option was not available for some canceled
    jobs (Issue #4915)
  * Updated the job listing in the web interface (Issue #4978)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.2:
  CUPS 2.2.2 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed some issues with IPP Everywhere printer support
    (Issue #4893, Issue #4909, Issue #4916, Issue #4921,
    Issue #4923, Issue #4932, Issue #4933, Issue #4938)
  * The rastertopwg filter could crash with certain input
    (Issue #4942)
  * The scheduler did not detect when an encrypted connection
    was closed by the client on Linux (Issue #4901)
  * The cups-lpd program did not catch all legacy usage
    of ISO-8859-1 (Issue #4899)
  * The scheduler no longer creates log files on startup
    (&lt;rdar://problem/28332470&gt;)
  * The ippContainsString function now uses case-insensitive
    comparisons for mimeMediaType, name, and text values in
    conformance with RFC 2911.
  * The network backends now log the addresses that were found
    for a printer (&lt;rdar://problem/29268474&gt;)
  * Let's Encrypt certificates did not work when the hostname
    contained uppercase letters (Issue #4919)
  * Fixed reporting of printed pages in the web interface
    (Issue #4924)
  * Updated systemd config files (Issue #4935)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.1:
  CUPS 2.2.1 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Added "CreateSelfSignedCerts" directive for cups-files.conf
    to control whether the scheduler automatically creates
    its own self-signed X.509 certificates for TLS connections
    (Issue #4876)
  * http*Connect did not handle partial failures (Issue #4870)
  * cupsHashData did not use the correct hashing algorithm
    (&lt;rdar://problem/28209220&gt;)
  * Updated man pages (PR #4885)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.2.0:
  CUPS 2.2.0 adds support for local IPP Everywhere print queues
  and includes several performance and security improvements.
  See https://github.com/apple/cups/releases
  Changes include:
  * Normalized the TLS certificate validation code and added
    additional error messages to aid troubleshooting.
  * http*Connect did not work on Linux when cupsd was not running
    (Issue #4870)
  * The --no-remote-any option of cupsctl had no effect
    (Issue #4866)
  * http*Connect did not return early when all addresses failed
    (Issue #4870)
  * The IPP backend did not validate TLS credentials properly.
  * The printer-state-message attribute was not cleared after a
    print job with no errors (Issue #4851)
  * The CUPS-Add-Modify-Class and CUPS-Add-Modify-Printer
    operations did not always return an error for failed
    adds (Issue #4854)
  * PPD files with names longer than 127 bytes did not work
    (Issue #4860)
  * CUPS now supports Let's Encrypt certificates on Linux.
  * All CUPS commands now support POSIX options (Issue #4813)
  * The scheduler now restarts faster (Issue #4760)
  * Improved performance of web interface with large numbers
    of jobs (Issue #3819)
  * Encrypted printing can now be limited to only trusted
    printers and servers (&lt;rdar://problem/25711658&gt;)
  * The scheduler now advertises PWG Raster attributes for
    IPP Everywhere clients (Issue #4428)
  * The scheduler now logs informational messages for jobs
    at LogLevel "info" (Issue #4815)
  * The scheduler now uses the getgrouplist function
    when available (Issue #4611)
  * The IPP backend no longer enables compression by default
    except for certain raster formats that generally benefit
    from it (&lt;rdar://problem/25166952&gt;)
  * The scheduler did not handle out-of-disk situations
    gracefully (Issue #4742)
  * The LPD mini-daemon now detects invalid UTF-8 sequences
    in job, document, and user names (Issue #4748)
  * The IPP backend now continues on to the next job
    when the remote server/printer puts the job on hold
    (&lt;rdar://problem/24858548&gt;)
  * The scheduler did not cancel multi-document jobs immediately
    (&lt;rdar://problem/24854834&gt;)
  * The scheduler did not return non-shared printers to local
    clients unless they connected to the domain socket
    (&lt;rdar://problem/24566996&gt;)
  * The scheduler now reads the spool directory if one or more
    job cache entries point to deleted jobs
    (&lt;rdar://problem/24048846&gt;)
  * Added support for disc media sizes (&lt;rdar://problem/20219536&gt;)
  * The httpAddrConnect and httpConnect* APIs now try connecting
    to multiple addresses in parallel (&lt;rdar://problem/20643153&gt;)
  * Interface scripts are no longer supported for security reasons
    (&lt;rdar://problem/23135640&gt;)
  A detailed list of changes can be found in the CHANGES.txt file.
- Version upgrade to 2.1.4:
  CUPS 2.1.4 is a general bug fix release.
  See https://github.com/apple/cups/releases
  Changes include:
  * Fixed reporting of 1284 Device IDs (Issue #3835, PR #3836)
  * Fixed printing of multiple files to raw queues (Issue #4782)
  * The scheduler did not implement the Hold-New-Jobs opertion
    correctly (Issue #4767)
  * The cups-lpd mini-daemon incorrectly included the document-name
    attribute when creating a job.  It should only be included when
    sending a job (Issue #4790)
  A detailed list of changes can be found in the CHANGES.txt file.</changelog>
  <changelog author="jsmeix@suse.de" date="1496923200">- In /usr/lib/tmpfiles.d/cups.conf use
  group 'root' for /run/cups/certs (boo#1042916).</changelog>
  <changelog author="schwab@suse.de" date="1505908800">- Pre-require user(lp) in cups-libs</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Remove redundant Requires(pre) line? the use of %post -p
  already implies it.</changelog>
  <changelog author="jengelh@inai.de" date="1507896000">- Implement shared library packaging guideline [boo#862112]
- Update package descriptions.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1508328000">- Fix typo in requires</changelog>
  <changelog author="jsmeix@suse.de" date="1508500800">- Use again the baselibs.conf from Fri Oct 13 11:11:10 UTC 2017
  that got broken by the change on Wed Oct 18 06:11:10 UTC 2017.
- Version upgrade to 2.2.5:
  CUPS 2.2.5 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Version upgrade to 2.2.4:
  CUPS 2.2.4 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
- Removed
  0001-Update-cupsEnumDests-implementation-to-return-early-if-all.patch
  0002-Save-work-on-Avahi-code.patch
  0003-Avahi-fixes-for-cupsEnumDests.patch
  because since CUPS 2.2.4 it is fixed in the upstream code
  via https://github.com/apple/cups/pull/4989 more precisely via
  https://github.com/apple/cups/commit/a2187a63425a3d6c05de1e1cbf8c26fd39a1aced
  https://github.com/apple/cups/commit/657c5b5f91e6d5120c4ad7b118cf9098dd27f03d
  https://github.com/apple/cups/commit/3fae3b337df0be1a766857be741173d8a9915da7</changelog>
  <changelog author="jsmeix@suse.de" date="1510056000">- Version upgrade to 2.2.6:
  CUPS 2.2.6 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  Changes include:
  * DBUS notifications could crash the scheduler (Issue #5143)
    (see also bsc#1061066 "DBUS library aborts caller process")</changelog>
  <changelog author="christophe@krop.fr" date="1510660800">- Make sure cups-libs-&lt;targettype&gt; is removed</changelog>
  <changelog author="jsmeix@suse.de" date="1522238400">- Version upgrade to 2.2.7:
  CUPS 2.2.7 is a general bug fix release.
  For details see https://github.com/apple/cups/releases
  or the CHANGES.md file.
  Changes include:
  * Additional security fixes for:
    bsc#1061066 DBUS library aborts caller process
    in _dbus_check_is_valid_utf8 (in particular that aborts cupsd)
    and
    bsc#1087018 CVE-2017-18248: cups: The add_job function in
    scheduler/ipp.c in CUPS before 2.2.6, when D-Bus support is
    enabled, can be crashed by remote attackers by sending print
    jobs with an invalid username, related to a D-Bus notification
    which are the CUPS upstream issues
    https://github.com/apple/cups/issues/5143
    Remote DoS attack against cupsd via invalid username
    and malicious D-Bus library
    and
    https://github.com/apple/cups/issues/5186
    squash non-UTF-8 strings into ASCII on plain IPP level
    and
    https://github.com/apple/cups/issues/5229
    persistently substitute invalid job attributes
    with default values - not only in add_job
    see also
    bsc#1087072 dbus-1:
    Disable assertions to prevent un-expected DDoS attacks
  * NOTICE: Raw print queues are now deprecated (Issue #5269)
    so that now there is a warning message when you
    add or modify a queue to use the "raw driver" but
    raw printing will continue to work through CUPS 2.3.x, cf.
    https://lists.cups.org/pipermail/cups/2018-March/074060.html
  * Fixed an Avahi crash bug in the scheduler (Issue #5268)
  * Systemd did not restart cupsd when configuration changes
    were made that required a restart (Issue #5263)
  * The scheduler could crash while adding an IPP Everywhere
    printer (Issue #5258)
  * The scheduler now supports using temporary print queues
    for older IPP/1.1 print queues like those shared by CUPS 1.3
    and earlier (Issue #5241)
  * Kerberized printing to another CUPS server did not work
    correctly (Issue #5233)
  * More fixes for printing to old CUPS servers (Issue #5211)
  * The scheduler now substitutes default values for invalid
    job attributes when running in "relaxed conformance"
    mode (Issue #5186)
  * The cups-driverd program incorrectly stopped scanning PPDs
    as soon as a loop was seen (Issue #5170)
  * The `SSLOptions` directive now supports `MinTLS` and `MaxTLS`
    options to control the minimum and maximum TLS versions
    that will be allowed, respectively (Issue #5119)
  * The scheduler did not write out dirty configuration and
    state files if there were open client connections (Issue #5118)
  * The `lpadmin` command now provides a better error message when
    an unsupported System V interface script is used (Issue #5111)
  * No longer support backslash, question mark, or quotes
    in printer names (Issue #4966)
  * The CUPS library now supports the latest HTTP Digest
    authentication specification including support
    for SHA-256 (Issue #4862)
  * TLS connections now properly timeout (rdar://34938533)</changelog>
  <changelog author="jsmeix@suse.de" date="1529323200">- cups-branch-2.2-commit-97cb566568a8c3a9c07c7ccec09f28f5c5015954.diff
  is 'git show 97cb566568a8c3a9c07c7ccec09f28f5c5015954' for
  https://github.com/apple/cups/commit/97cb566568a8c3a9c07c7ccec09f28f5c5015954
  (except the not needed hunk for patching CHANGES.md which fails)
  that fixes local privilege escalation to root and sandbox
  bypasses in scheduler (Apple's internal issues rdar://37836779,
  rdar://37836995, rdar://37837252, rdar://37837581)
  in the CUPS 2.2 branch
  bsc#1096405 CVE-2018-4180:
  Local Privilege Escalation to Root in dnssd Backend (CUPS_SERVERBIN)
  bsc#1096406 CVE-2018-4181:
  Limited Local File Reads as Root via cupsd.conf Include Directive
  bsc#1096407 CVE-2018-4182:
  cups-exec Sandbox Bypass Due to Insecure Error Handling
  bsc#1096408 CVE-2018-4183:
  cups-exec Sandbox Bypass Due to Profile Misconfiguration</changelog>
</package>
<package pkgid="01509a8b8b9d422ae70193a6e3c79934ecf8adb7461fdf5a11cd3bf508d8ff93" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="730d9f306bc27ace510a956c7e99e113207757b9ac7473b52ea4303481e5f1c9" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="a942cccecd934c5ff0df7e7e59c146703abd01dbd748dc7880a5cc9ba42fa7fb" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="1f5c8443c5bf7db43fa42b4209d7ec4aa93d640cfc4164887e50e6ec10938f1d" name="libcurl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="df010b19e3d6f215fe918f4a203a7bda53035bb5676795b8dee4497adc48c7a4" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="b9b2bee4c5ca8f898e3bf1ba5f6f5041459aad615609775e92310702d7fcfbcb" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="d0caf96b94fe0f89260e49ee5df739f959fcccf3230e1207e8ef12b682b88232" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="0e52f6a8217d4544d823f661fb4085f459f5159e1ac3827548002026d9d3f24e" name="libcurl-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="c0641aef470c1159d5f223ef0db42bd412900a6ef66ee95a555c8dbd9b9e83b9" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="6f942e43107035efe43322324a1ae986a48c067b8164f7d3f36585369e7217c0" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="8b3cbda10b2d829af36bcb68a53aae5304cf6e2c2008c5dd5678625fd7e0aaad" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="11948f4d3285438431c8145d1a769b00cc7a35b6c5d825c67d14941e9a4ef944" name="libcurl-mini-devel" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="145e1310e6b947cd9ed17477c380dce517bc8ae77e47f6139b004903fcadc5ca" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="d11499bb5c8194989ba9a4666732dc06e0dd6b9decc4dfdade9fca8a6e563100" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="a8928751fda8b5f23ff88407fd0115a1322af5cfca4df1ea94d1be522e64cced" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="3bfa232c86333f9cb02800a64bb61d416f9195d3e92fec71efc13f4ee8e92206" name="libcurl4-32bit" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="e04b5bb2fbe9fefc1a99b75f17d893eb9f29e1d3b0250c1f6670897fc070f6ca" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="5df9a58a9463e0060f9f9ff1b762a02880472432024c71129af9b51aea465592" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="331f864baa232f7690e30ae9af5c728a606e95648e976a85b3b812b77e008999" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
</package>
<package pkgid="4878fa90c58ce2d96e73e7b5f579d1a400d75da67d6216ca047fdcfc6783bdb1" name="libcurl4" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="e2c7396aab87b54f7136549ec77773e224edf37387c33eaa6c58ed9d583d1735" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.12.1"/>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="vcizek@suse.com" date="1526644800">- Use OPENSSL_config instead of CONF_modules_load_file() to avoid
  crashes due to openssl engines conflicts (bsc#1086367)
  * add curl-use_OPENSSL_config.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1536148800">- Security fix [CVE-2018-14618, bsc#1106019]
  * NTLM password overflow via integer overflow
  * Added patch curl-CVE-2018-14618.patch</changelog>
</package>
<package pkgid="b854b1c140a8adb5ac40fe51831fc094bdad410f984266ad402b2a688f378745" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="db92cbca0c77c7b62f39777b940d6135f256ccf35dc39238109d853ce9bcc5d9" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1497441600">- Update to 7.54.1
  Changes:
  * curl now shows release date in --version output
  Bugfixes:
  * Fixes CVE-2017-9502: default protocol drive letter
    buffer overflow bsc#1044243
  * openssl: fix memory leak in servercert
  * curl: set a 100K buffer size by default
  * nss: do not leak PKCS #11 slot while loading a key
  * nss: load libnssckbi.so if no other trust is specified
  * curl: use utimes instead of obsolescent utime when available
  * url: fixed a memory leak on OOM while setting CURLOPT_BUFFERSIZE
  * CURLOPT_BUFFERSIZE: 1024 bytes is now the minimum size
  * curl: non-boolean command line args reject --no- prefixes
  * telnet: Write full buffer instead of byte-by-byte
  * curl: remove --environment and tool_writeenv.c
  * curl: generate the --help output
  * curl.1: clarify --config
  * curl.1: mention --oauth2-bearer's argument
  * ssh: fix memory leak in disconnect due to timeout
  * redirect: store the "would redirect to" URL when max redirs is reached
  * file: make speedcheck use current time for checks
  * urlglob: fix division by zero</changelog>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
</package>
<package pkgid="9cd019c79371c1e104b904b7d1b8131b2118624752f8369336b821608c4b276f" name="libcurl4-mini" arch="x86_64">
  <version epoch="0" ver="7.60.0" rel="lp150.2.9.1"/>
  <changelog author="idonmez@suse.com" date="1497960000">- Add curl-invalid-free.patch to fix an invalid free in
  curl_multi_setopt function.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498219200">- Have the -mini packages conflict the real ones.</changelog>
  <changelog author="dimstar@opensuse.org" date="1498651200">- Update License to 'curl' as per review on OBS sr#505976.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502280000">- Update to 7.55.0
  Changes:
  * curl: allow --header and --proxy-header read from file
  * getinfo: provide sizes as curl_off_t
  * curl: prevent binary output spewed to terminal
  * curl: added --request-target
  * curl: added --socks5-{basic,gssapi}: control socks5 auth
  * libcurl: added CURLOPT_REQUEST_TARGET
  * libcurl: added CURLOPT_SOCKS5_AUTH
  Bugfixes:
  * Security Fixes:
  - glob: do not parse after a strtoul() overflow range
    (CVE-2017-1000101, bsc#1051643)
  - tftp: reject file name lengths that don't fit
    (CVE-2017-1000100, bsc#1051644)
  - file: output the correct buffer to the user
    (CVE-2017-1000099, bsc#1051645)
  * includes: remove curl/curlbuild.h and curl/curlrules.h
  * dist: make the hugehelp.c not get regenerated unnecessarily
  * timers: store internal time stamps as time_t instead of doubles
  * progress: let "current speed" be UL + DL speeds combined
  * http-proxy: do the HTTP CONNECT process entirely non-blocking
  * lib/curl_setup.h: remove CURL_WANTS_CA_BUNDLE_ENV
  * fuzz: bring oss-fuzz initial code converted to C89
  * configure: disable nghttp2 too if HTTP has been disabled
  * mk-ca-bundle.pl: Check curl's exit code after certdata download
  * test1148: verify the -# progressbar
  * tests: stabilize test 2032 and 2033
  * HTTPS-Proxy: don't offer h2 for https proxy connections
  * http-proxy: only attempt FTP over HTTP proxy
  * curl-compilers.m4: enable vla warning for clang
  * curl-compilers.m4: enable double-promotion warning
  * curl-compilers.m4: enable missing-variable-declarations clang
    warning
  * curl-compilers.m4: enable comma clang warning
  * CURLOPT_PREQUOTE: not supported for SFTP
  * http2: fix OOM crash
  * PIPELINING_SERVER_BL: cleanup the internal list use
  * mkhelp.pl: fix script name in usage text
  * lib1521: add curl_easy_getinfo calls to the test set
  * travis: do the distcheck test build out-of-tree as well
  * if2ip: fix compiler warning in ISO C90 mode
  * lib: fix the djgpp build
  * typecheck-gcc: add support for CURLINFO_OFF_T
  * travis: enable typecheck-gcc warnings
  * maketgz: switch to xz instead of lzma
  * CURLINFO_REDIRECT_URL.3: mention the CURLOPT_MAXREDIRS case
  * curl/system.h: add check for XTENSA for 32bit gcc
  * test1537: fixed memory leak on OOM
  * test1521: fix compiler warnings
  * curl: fix memory leak on test 1147 OOM
  * libtest/make: generate lib1521.c dynamically at build-time
  * curl_strequal.3: fix typo in SYNOPSIS
  * progress: prevent resetting t_starttransfer
  * openssl: improve fallback seed of PRNG with a time based hash
  * http2: improved PING frame handling
  * test1450: add simple testing for DICT
  * make: build the docs subdir only from within src
  * gtls: fix build when sizeof(long) &lt; sizeof(void *)
  * url: make the original string get used on subsequent transfers
  * timeval.c: Use long long constant type for timeval assignment
  * tool_sleep: typecast to avoid macos compiler warning
  * travis.yml: use --enable-werror on debug builds
  * test1451: add SMB support to the testbed
  * configure: remove checks for 5 functions never used
  * configure: try ldap/lber in reversed order first
  * smb: fix build for djgpp/MSDOS
  * travis: install nghttp2 on linux builds
  * smb: add support for CURLOPT_FILETIME
  * select.h: avoid macro redefinition harder
  * runtests: support "threaded-resolver" as a feature
  * test506: skip if threaded-resolver
  * cmake: remove spurious "-l" from linker flags
  * cmake: add CURL_WERROR for enabling "warning as errors"
  * memdebug: don't setbuf() if the file open failed
  * curl_easy_escape.3: mention the (lack of) encoding
  * test1452: add telnet negotiation
  * CURLOPT_POSTFIELDS.3: explain the 100-continue magic better
  * cmake: offer CMAKE_DEBUG_POSTFIX when building with MSVC
  * tests/valgrind.supp: supress OpenSSL false positive seen on
    travis
  * curl_setup_once: Remove ERRNO/SET_ERRNO macros
  * rtspd: fix MSVC level 4 warning
  * sockfilt: suppress conversion warning with explicit cast
  * libtest: fix MSVC warning C4706
  * tests/server/resolve.c: fix deprecation warning
  * nss: fix a possible use-after-free in SelectClientCert()
  * checksrc: escape open brace in regex
  * multi: mention integer overflow risk if using &gt; 500 million
    sockets
  * timeval: struct curltime is a struct timeval replacement
  * curl_rtmp: fix a compiler warning
  * include.d: clarify that it concerns the response headers
  * cmake: support make uninstall
  * include.d: clarify --include is only for response headers
  * libcurl: Stop using error codes defined under CURL_NO_OLDIES
  * http: fix response code parser to avoid integer overflow
  * configure: fix the check for IdnToUnicode
  * multi: fix request timer management
  * curl_threads: fix MSVC compiler warning
  * cmake: set MSVC warning level to 4
  * netrc: skip lines starting with '#'
  * FTP: skip unnecessary CWD when in nocwd mode
  * gssapi: fix memory leak of output token in multi round context
  * getparameter: avoid returning uninitialized 'usedarg'
  * curl (debug build) easy_events: make event data static
  * curl: detect and bail out early on parameter integer overflows
- Removed patch curl-invalid-free.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366400">- Disabled test1425 that fails in i586 architecture
  * Added patch curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1502366401">- Upstream fix to build libcurl man3 pages
  * Added patch curl-man3.patch</changelog>
  <changelog author="schwab@suse.de" date="1503921600">- ppc-build.patch: Fix build for powerpc</changelog>
  <changelog author="zaitor@opensuse.org" date="1504008000">- Add curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch:
  Fix NetworkManagers connectivity test.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1507204800">- Update to 7.56.0 [bsc#1061876, CVE-2017-1000254]
  Changes:
  * curl: enable compression for SCP/SFTP with --compressed-ssh
  * libcurl: enable compression for SCP/SFTP with CURLOPT_SSH_COMPRESSION
  * vtls: added dynamic changing SSL backend with curl_global_sslset()
  * new MIME API, curl_mime_init() and friends
  * openssl: initial SSLKEYLOGFILE implementation
  Security fixes:
  * CVE-2017-1000254 FTP PWD response parser out of bounds read
  Bugfixes:
  * FTP: zero terminate the entry path even on bad input
  * examples/ftpuploadresume.c: use portable code
  * runtests: match keywords case insensitively
  * strtoofft: reduce integer overflow risks globally
  * zsh.pl: produce a working completion script again
  * cmake: remove dead code for CURL_DISABLE_RTMP
  * progress: Track total times following redirects
  * configure: fix --disable-threaded-resolver
  * configure: fix clang version detection
  * darwinssi: fix error: variable length array used
  * configure: check for __builtin_available() availability
  * http_proxy: fix build error for CURL_DOES_CONVERSIONS
  * examples/ftpuploadresume: checksrc compliance
  * ftp: fix CWD when doing multicwd then nocwd on same connection
  * system.h: remove all CURL_SIZEOF_* defines
  * http: Don't wait on CONNECT when there is no proxy
  * system.h: check for __ppc__ as well
  * http2_recv: return error better on fatal h2 errors
  * tftp: fix memory leak on too long filename
  * system.h: fix build for hppa
  * cmake: enable picky compiler options with clang and gcc
  * makefile.m32: add support for libidn2
  * curl: shorten and clean up CA cert verification error message
  * imap: support PREAUTH
  * CURLOPT_USERPWD.3: see also CURLOPT_PROXYUSERPWD
  * examples/threaded-ssl: mention that this is for openssl before 1.1
  * tests: Make sure libtests &amp; unittests call curl_global_cleanup()
  * system.h: include sys/poll.h for AIX
  * darwinssl: handle long strings in TLS certs
  * strtooff: fix build for systems with long long but no strtoll
  * asyn-thread: Improved cleanup after OOM situations
  * curl.h: CURLSSLBACKEND_WOLFSSL used wrong value
  * unit1301: fix error message on first test
  * ossfuzz: moving towards the ideal integration
  * http: fix a memory leakage in checkrtspprefix()
  * examples/post-callback: stop returning one byte at a time
  * schannel: return CURLE_SSL_CACERT on failed verification
  * http-proxy: treat all 2xx as CONNECT success
  * openssl: use OpenSSL's default ciphers by default
  * runtests.pl: support attribute "nonewline" in part verify/upload
  * configure: remove --enable-soname-bump and SONAME_BUMP
  * vtls: fix WolfSSL 3.12 build problems
  * http-proxy: when not doing CONNECT, that phase is done immediately
  * configure: fix curl_off_t check's include order
  * configure: use -Wno-varargs on clang 3.9[.X] debug builds
  * rtsp: do not call fwrite() with NULL pointer FILE *
  * mbedtls: enable CA path processing
  * checksrc: verify more code style rules
  * HTTP proxy: on connection re-use, still use the new remote port
  * tests: add initial gssapi test using stub implementation
  * rtsp: Segfault when using WRITEDATA
  * docs: clarify the CURLOPT_INTERLEAVE* options behavior
  * non-ascii: use iconv() with 'char **' argument
  * server/getpart: provide dummy function to build conversion enabled
  * conversions: fix several compiler warnings
  * openssl: add missing includes
  * schannel: Support partial send for when data is too large
  * socks: fix incorrect port number in SOCKS4 error message
  * curl: fix integer overflow in timeout options
  * cookies: reject oversized cookies instead of truncating
  * cookies: use lock when using CURLINFO_COOKIELIST
  * curl: check fseek() return code and bail on error
  * examples/post-callback: use long for CURLOPT_POSTFIELDSIZE
  * openssl: only verify RSA private key if supported
  * tests: make the imap server not verify user+password
  * imap: quote atoms properly when escaping characters
  * tests: fix a compiler warning in test 643
  * file_range: avoid integer overflow when figuring out byte range
  * reuse_conn: don't copy flags that are known to be equal
  * http: fix adding custom empty headers to repeated requests
  * docs: link CURLOPT_CONNECTTIMEOUT and CURLOPT_CONNECTTIMEOUT_MS
  * connect: fix race condition with happy eyeballs timeout
  * cookie: fix memory leak if path was set twice in header
  * vtls: compare and clone ssl configs properly
  * proxy: read the "no_proxy" variable only if necessary
- Refreshed patches:
  * libcurl-ocloexec.patch
- Removed patches fixed upstream:
  * curl-man3.patch
  * ppc-build.patch
  * curl-http-Don-t-wait-on-CONNECT-when-there-is-no-proxy.patch
  * curl-disable-test1427-i586.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1508760000">- Update to version 7.56.1 [bsc#1063824]
  Bugfixes:
  * imap: if a FETCH response has no size, don't call write
    callback [CVE-2017-1000257]
  * ftp: UBsan fixup 'pointer index expression overflowed
  * failf: skip the sprintf() if there are no consumers
  * fuzzer: move to using external curl-fuzzer
  * lib/Makefile.m32: allow customizing dll suffixes
  * docs: fix typo in curl_mime_data_cb man page
  * darwinssl: add support for TLSv1.3
  * build: fix --disable-crypto-auth
  * openssl: fix build without HAVE_OPAQUE_EVP_PKEY
  * strtoofft: Remove extraneous null check
  * multi_cleanup: call DONE on handles that never got that
  * tests: added flaky keyword to tests 587 and 644
  * pingpong: return error when trying to send without connection
  * remove_handle: call multi_done() first, then clear dns cache pointer
  * mime: be tolerant about setting the same header list twice in a part
  * mime: improve unbinding top multipart from easy handle
  * mime: avoid resetting a part's encoder when part's contents change
  * mime: refuse to add subparts to one of their own descendants
  * RTSP: avoid integer overflow on funny RTSP responses
  * curl: don't pass semicolons when parsing Content-Disposition
  * openssl: enable PKCS12 support for !BoringSSL
  * FAQ: s/CURLOPT_PROGRESSFUNCTION/CURLOPT_XFERINFOFUNCTION
  * CURLOPT_NOPROGRESS.3: also refer to xferinfofunction
  * CURLOPT_XFERINFODATA.3: fix duplicate see also
  * test298: verify --ftp-method nowcwd with URL encoded path
  * FTP: URL decode path for dir listing in nocwd mode
  * smtp_done: fix memory leak on send failure
  * ftpserver: support case insensitive commands
  * test950; verify SMTP with custom request
  * openssl: don't use old BORINGSSL_YYYYMM macros
  * setopt: update current connection SSL verify params
  * curl: reimplement stdin buffering in -F option
  * mime: keep "text/plain" content type if user-specified
  * mime: fix the content reader to handle &gt;16K data properly
  * configure: remove the C++ compiler check
  * memdebug: trace send, recv and socket
  * runtests: use valgrind for torture as well
  * ldap: silence clang warning
  * makefile.m32: allow to override gcc, ar and ranlib
  * setopt: avoid integer overflows when setting millsecond values
  * setopt: range check most long options
  * ftp: reject illegal IP/port in PASV 227 response
  * mime: do not reuse previously computed multipart size
  * vtls: change struct Curl_ssl `close' field name to `close_one'
  * os400: add missing symbols in config file
  * mime: limit bas64-encoded lines length to 76 characters
  * mk-ca-bundle: Remove URL for aurora
  * mk-ca-bundle: Fix URL for NSS</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1511956800">- Update to version 7.57.0  [bsc#1069226, CVE-2017-8816]
  [bsc#1069222, CVE-2017-8817] [bsc#1069714, CVE-2017-8818]
  Changes:
  * auth: add support for RFC7616 - HTTP Digest access authentication
  * share: add support for sharing the connection cache
  * HTTP: implement Brotli content encoding
  Bugfixes:
  * CVE-2017-8816: NTLM buffer overflow via integer overflow
  * CVE-2017-8817: FTP wildcard out of bounds read
  * CVE-2017-8818: SSL out of buffer access
  * curl_mime_filedata.3: fix typos
  * libtest: Add required test libraries for lib1552 and lib1553
  * fix time diffs for systems using unsigned time_t
  * ftplistparser: memory leak fix: free temporary memory always
  * multi: allow table handle sizes to be overridden
  * wildcards: don't use with non-supported protocols
  * curl_fnmatch: return error on illegal wildcard pattern
  * transfer: Fix chunked-encoding upload too early exit
  * resolvers: only include anything if needed
  * setopt: fix CURLOPT_SSH_AUTH_TYPES option read
  * Curl_timeleft: change return type to timediff_t
  * cmake: Export libcurl and curl targets to use by other cmake projects
  * curl: in -F option arg, comma is a delimiter for files only
  * curl: improved ";type=" handling in -F option arguments
  * timeval: use mach_absolute_time() on MacOS
  * curlx: the timeval functions are no longer provided as curlx_*
  * mkhelp.pl: do not generate comment with current date
  * memdebug: use send/recv signature for curl_dosend/curl_dorecv
  * cookie: avoid NULL dereference
  * url: fix CURLOPT_POSTFIELDSIZE arg value check to allow -1
  * include: remove conncache.h inclusion from where its not needed
  * CURLOPT_MAXREDIRS: allow -1 as a value
  * tests: Fixed torture tests on tests 556 and 650
  * http2: Fixed OOM handling in upgrade request
  * url: fix CURLOPT_DNS_CACHE_TIMEOUT arg value check to allow -1
  * CURLOPT_INFILESIZE: accept -1
  * curl: pass through [] in URLs instead of calling globbing error
  * curl: speed up handling of many URLs
  * ntlm: avoid malloc(0) for zero length passwords
  * url: remove faulty arg value check from CURLOPT_SSH_AUTH_TYPES
  * HTTP: support multiple Content-Encodings
  * travis: add a job with brotli enabled
  * url: remove unncessary NULL-check
  * fnmatch: remove dead code
  * connect: store IPv6 connection status after valid connection
  * imap: deal with commands case insensitively
  * --interface: add support for Linux VRF
  * content_encoding: fix inflate_stream for no bytes available
  * cmake: Add missing setmode check
  * connect.c: remove executable bit on file
  * SMB: fix uninitialized local variable
  * zlib/brotli: only include header files in modules needing them
  * URL: return error on malformed URLs with junk after IPv6 bracket
  * openssl: fix too broad use of HAVE_OPAQUE_EVP_PKEY
  * macOS: Fix missing connectx function with Xcode version older than 9.0
  * --resolve: allow IP address within [] brackets
  * examples/curlx: Fix code style
  * ntlm: remove unnecessary NULL-check to please scan-build
  * Curl_llist_remove: fix potential NULL pointer deref
  * mime: fix "Value stored to 'sz' is never read" scan-build error
  * openssl: fix "Value stored to 'rc' is never read" scan-build error
  * http2: fix "Value stored to 'hdbuf' is never read" scan-build error
  * http2: fix "Value stored to 'end' is never read" scan-build error
  * Curl_open: fix OOM return error correctly
  * url: reject ASCII control characters and space in host names
  * examples/rtsp: clear RANGE again after use
  * connect: improve the bind error message
  * make: fix "make distclean"
  * connect: add support for new TCP Fast Open API on Linux
  * metalink: fix memory-leak and NULL pointer dereference
  * URL: update "file:" URL handling
  * ssh: remove check for a NULL pointer
  * global_init: ignore CURL_GLOBAL_SSL's absense</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515499200">- disable 1501 test for PowerPC as byass boo#1075219</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1516795200">- Update to version 7.58.0
  [bsc#1076360,CVE-2018-1000005][bsc#1077001,CVE-2018-1000007]
  Changes:
  * new libssh-powered SSH SCP/SFTP back-end
  * curl-config: add --ssl-backends
  Bugfixes:
  * http2: fix incorrect trailer buffer size
  * http: prevent custom Authorization headers in redirects
  * travis: add boringssl build
  * examples/xmlstream.c: don't switch off CURL_GLOBAL_SSL
  * SSL: Avoid magic allocation of SSL backend specific data
  * lib: don't export all symbols, just everything curl_*
  * libssh2: send the correct CURLE error code on scp file not found
  * libssh2: return CURLE_UPLOAD_FAILED on failure to upload
  * openssl: enable pkcs12 in boringssl builds
  * libssh2: remove dead code from SSH_SFTP_QUOTE
  * sasl_getmesssage: make sure we have a long enough string to pass
  * conncache: fix several lock issues
  * threaded-shared-conn.c: new example
  * conncache: only allow multiplexing within same multi handle
  * configure: check for netinet/in6.h
  * URL: tolerate backslash after drive letter for FILE:
  * openldap: add commented out debug possibilities
  * include: get netinet/in.h before linux/tcp.h
  * CONNECT: keep close connection flag in http_connect_state struct
  * BINDINGS: another PostgreSQL client
  * curl: limit -# update frequency for unknown total size
  * configure: add AX_CODE_COVERAGE only if using gcc
  * curl.h: remove incorrect comment about ERRORBUFFER
  * openssl: improve data-pending check for https proxy
  * curl: remove __EMX__ #ifdefs
  * CURLOPT_PRIVATE.3: fix grammar
  * sftp: allow quoted commands to use relative paths
  * CURLOPT_DNS_CACHE_TIMEOUT.3: see also CURLOPT_RESOLVE
  * RESOLVE: output verbose text when trying to set a duplicate name
  * multi_done: prune DNS cache
  * tests: update .gitignore for libtests
  * tests: mark data files as non-executable in git
  * CURLOPT_DNS_LOCAL_IP4.3: fixed the "SEE ALSO" to not self-reference
  * curl.1: documented two missing valid exit codes
  * curl.1: mention http:// and https:// as valid proxy prefixes
  * vtls: replaced getenv() with curl_getenv()
  * setopt: less *or equal* than INT_MAX/1000 should be fine
  * examples/smtp-mail.c: use separate defines for options and mail
  * curl: support &gt;256 bytes warning messsages
  * conncache: fix a return code
  * krb5: fix a potential access of uninitialized memory
  * rand: add a clang-analyzer work-around
  * CURLOPT_READFUNCTION.3: refer to argument with correct name
  * brotli: allow compiling with version 0.6.0
  * content_encoding: rework zlib_inflate
  * curl_easy_reset: release mime-related data
  * examples/rtsp: fix error handling macros
  * curl: Support size modifiers for --max-filesize
  * examples/cacertinmem: ignore cert-already-exists error
  * brotli: data at the end of content can be lost
  * curl_version_info.3: call the argument 'age'
  * openssl: fix memory leak of SSLKEYLOGFILE filename
  * build: remove HAVE_LIMITS_H check
  * --mail-rcpt: fix short-text description
  * scripts: allow all perl scripts to be run directly
  * progress: calculate transfer speed on milliseconds if possible
  * system.h: check __LONG_MAX__ for defining curl_off_t
  * easy: fix connection ownership in curl_easy_pause
  * setopt: reintroduce non-static Curl_vsetopt() for OS400 support
  * setopt: fix SSLVERSION to allow CURL_SSLVERSION_MAX_ values
  * configure.ac: append extra linker flags instead of prepending them
  * HTTP: bail out on negative Content-Length: values
  * docs: comment about CURLE_READ_ERROR returned by curl_mime_filedata
  * mime: clone mime tree upon easy handle duplication
  * openssl: enable SSLKEYLOGFILE support by default
  * smtp/pop3/imap_get_message: decrease the data length too...
  * CURLOPT_TCP_NODELAY.3: fix typo
  * SMB: fix numeric constant suffix and variable types
  * ftp-wildcard: fix matching an empty string with "*[^a]"
  * curl_fnmatch: only allow 5 '*' sections in a single pattern
  * openssl: fix potential memory leak in SSLKEYLOGFILE logic
  * SSH: Fix state machine for ssh-agent authentication
  * examples/url2file.c: add missing curl_global_cleanup() call
  * http2: don't close connection when single transfer is stopped
  * libcurl-env.3: first version
  * curl: progress bar refresh, get width using ioctl()
  * CONNECT_TO: fail attempt to set an IPv6 numerical without IPv6 support</changelog>
  <changelog author="asn@cryptomilk.org" date="1516795201">- Build curl with libssh.org
  libssh offers a lot more features than libssh2, for example:
  * Key Exchange Methods: curve25519-sha256@libssh.org
  * Hostkey Types: ssh-ed25519
  * Authentication: gssapi-with-mic</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516881600">- ignore all test failures for PowerPC as bypass boo#1075219
  (not only the 1501 previously skipped)
  * Added patch ignore_runtests_failure.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1519128000">- Sort a bit with spec-cleaner
- Install license with the library</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028800">- Update to version 7.59.0
  [bsc#1084521, CVE-2018-1000120][bsc#1084524, CVE-2018-1000121]
  [bsc#1084532, CVE-2018-1000122]
  Changes:
  * curl: add --proxy-pinnedpubkey
  * added: CURLOPT_TIMEVALUE_LARGE and CURLINFO_FILETIME_T
  * CURLOPT_RESOLVE: Add support for multiple IP addresses per entry
  * Add option CURLOPT_HAPPY_EYEBALLS_TIMEOUT_MS
  * Add new tool option --happy-eyeballs-timeout-ms
  * Add CURLOPT_RESOLVER_START_FUNCTION and CURLOPT_RESOLVER_START_DATA
  Bugfixes:
  * openldap: check ldap_get_attribute_ber() results for NULL before using
  * FTP: reject path components with control codes
  * readwrite: make sure excess reads don't go beyond buffer end
  * lib555: drop text conversion and encode data as ascii codes
  * lib517: make variable static to avoid compiler warning
  * lib544: sync ascii code data with textual data
  * GSKit: restore pinnedpubkey functionality
  * darwinssl: Don't import client certificates into Keychain on macOS
  * parsedate: fix date parsing for systems with 32 bit long
  * openssl: fix pinned public key build error in FIPS mode
  * SChannel/WinSSL: Implement public key pinning
  * cookies: remove verbose "cookie size:" output
  * progress-bar: don't use stderr explicitly, use bar-&gt;out
  * build: open VC15 projects with VS 2017
  * curl_ctype: private is*() type macros and functions
  * configure: set PATH_SEPARATOR to colon for PATH w/o separator
  * curl_easy_reset: clear digest auth state
  * curl/curl.h: fix comment typo for CURLOPT_DNS_LOCAL_IP6
  * range: commonize FTP and FILE range handling
  * progress-bar docs: update to match implementation
  * fnmatch: do not match the empty string with a character set
  * fnmatch: accept an alphanum to be followed by a non-alphanum in char set
  * build: fix termios issue on android cross-compile
  * getdate: return -1 for out of range
  * formdata: use the mime-content type function
  * openssl: Don't add verify locations when verifypeer==0
  * fnmatch: optimize processing of consecutive *s and ?s pattern characters
  * schannel: fix compiler warnings
  * content_encoding: Add "none" alias to "identity"
  * get_posix_time: only check for overflows if they can happen
  * http_chunks: don't write chunks twice with CURLOPT_HTTP_TRANSFER_DECODING
  * README: language fix
  * sha256: build with OpenSSL &lt; 0.9.8
  * smtp: fix processing of initial dot in data
  * --tlsauthtype: works only if libcurl is built with TLS-SRP support
  * tests: new tests for http raw mode
  * libcurl-security.3: man page discussion security concerns when using libcurl
  * curl_gssapi: make sure this file too uses our *printf()
  * BINDINGS: fix curb link (and remove ruby-curl-multi)
  * nss: use PK11_CreateManagedGenericObject() if available
  * travis: add build with iconv enabled
  * ssh: add two missing state names
  * CURLOPT_HEADERFUNCTION.3: mention folded headers
  * http: fix the max header length detection logic
  * header callback: don't chop headers into smaller pieces
  * CURLOPT_HEADER.3: clarify problems with different data sizes
  * curl --version: show PSL if the run-time lib has it enabled
  * examples/sftpuploadresume: resume upload via CURLOPT_APPEND
  * Return error if called recursively from within callbacks
  * sasl: prefer PLAIN mechanism over LOGIN
  * winbuild: Use CALL to run batch scripts
  * curl_share_setopt.3: connection cache is shared within multi handles
  * projects/README: remove reference to dead IDN link/package
  * lib655: silence compiler warning
  * configure: Fix version check for OpenSSL 1.1.1
  * docs/MANUAL: formfind.pl is not accessible on the site anymore
  * unit1307: proper cleanup on OOM to fix torture tests
  * curl_ctype: fix macro redefinition warnings
  * build: get CFLAGS (including -werror) used for examples and tests
  * NO_PROXY: fix for IPv6 numericals in the URL
  * krb5: use nondeprecated functions
  * http2: mark the connection for close on GOAWAY
  * limit-rate: kick in even before "limit" data has been received
  * HTTP: allow "header;" to replace an internal header with a blank one
  * http2: verbose output new MAX_CONCURRENT_STREAMS values
  * SECURITY: distros' max embargo time is 14 days
  * curl tool: accept --compressed also if Brotli is enabled and zlib is not
  * WolfSSL: adding TLSv1.3
  * checksrc.pl: add -i and -m options
  * CURLOPT_COOKIEFILE.3: "-" as file name means stdin
- Refreshed patch libcurl-ocloexec.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1521028801">- Added message about protocol redirection not supported or
  disabled to the function findprotocol() [bsc#1076446]
  * Added curl-disabled-redirect-protocol-message.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526472000">- Update to version 7.60.0
  [bsc#1092094, CVE-2018-1000300][bsc#1092098, CVE-2018-1000301]
  Changes:
  * Add CURLOPT_HAPROXYPROTOCOL, support for the HAProxy PROXY protocol
  * Add --haproxy-protocol for the command line tool
  * Add CURLOPT_DNS_SHUFFLE_ADDRESSES, shuffle returned IP addresses
  Bugfixes:
  * FTP: shutdown response buffer overflow CVE-2018-1000300
  * RTSP: bad headers buffer over-read CVE-2018-1000301
  * FTP: fix typo in recursive callback detection for seeking
  * test1208: marked flaky
  * HTTP: make header-less responses still count correct body size
  * user-agent.d:: mention --proxy-header as well
  * http2: fixes typo
  * cleanup: misc typos in strings and comments
  * rate-limit: use three second window to better handle high speeds
  * examples/hiperfifo.c: improved
  * pause: when changing pause state, update socket state
  * multi: improved pending transfers handling =&gt; improved performance
  * curl_version_info.3: fix ssl_version description
  * add_handle/easy_perform: clear errorbuffer on start if set
  * cmake: add support for brotli
  * parsedate: support UT timezone
  * vauth/ntlm.h: fix the #ifdef header guard
  * lib/curl_path.h: added #ifdef header guard
  * vauth/cleartext: fix integer overflow check
  * CURLINFO_COOKIELIST.3: made the example not leak memory
  * cookie.d: mention that "-" as filename means stdin
  * CURLINFO_SSL_VERIFYRESULT.3: fixed the example
  * http2: read pending frames (including GOAWAY) in connection-check
  * timeval: remove compilation warning by casting
  * cmake: avoid warn-as-error during config checks
  * travis-ci: enable -Werror for CMake builds
  * openldap: fix for NULL return from ldap_get_attribute_ber()
  * threaded resolver: track resolver time and set suitable timeout values
  * cmake: Add advapi32 as explicit link library for win32
  * docs: fix CURLINFO_*_T examples use of CURL_FORMAT_CURL_OFF_T
  * test1148: set a fixed locale for the test
  * cookies: when reading from a file, only remove_expired once
  * cookie: store cookies per top-level-domain-specific hash table
  * openssl: fix build with LibreSSL 2.7
  * tls: fix mbedTLS 2.7.0 build + handle sha256 failures
  * openssl: RESTORED verify locations when verifypeer==0
  * file: restore old behavior for file:////foo/bar URLs
  * FTP: allow PASV on IPv6 connections when a proxy is being used
  * build-openssl.bat: allow custom paths for VS and perl
  * winbuild: make the clean target work without build-type
  * build-openssl.bat: Refer to VS2017 as VC14.1 instead of VC15
  * curl: retry on FTP 4xx, ignore other protocols
  * configure: detect (and use) sa_family_t
  * examples/sftpuploadresume: Fix Windows large file seek
  * build: cleanup to fix clang warnings/errors
  * winbuild: updated the documentation
  * lib: silence null-dereference warnings
  * travis: bump to clang 6 and gcc 7
  * travis: build libpsl and make builds use it
  * proxy: show getenv proxy use in verbose output
  * duphandle: make sure CURLOPT_RESOLVE is duplicated
  * all: Refactor malloc+memset to use calloc
  * checksrc: Fix typo
  * system.h: Add sparcv8plus to oracle/sunpro 32-bit detection
  * vauth: Fix typo
  * ssh: show libSSH2 error code when closing fails
  * test1148: tolerate progress updates better
  * urldata: make service names unconditional
  * configure: keep LD_LIBRARY_PATH changes local
  * ntlm_sspi: fix authentication using Credential Manager
  * schannel: add client certificate authentication
  * winbuild: Support custom devel paths for each dependency
  * schannel: add support for CURLOPT_CAINFO
  * http2: handle on_begin_headers() called more than once
  * openssl: support OpenSSL 1.1.1 verbose-mode trace messages
  * openssl: fix subjectAltName check on non-ASCII platforms
  * http2: avoid strstr() on data not zero terminated
  * http2: clear the "drain counter" when a stream is closed
  * http2: handle GOAWAY properly
  * tool_help: clarify --max-time unit of time is seconds
  * curl.1: clarify that options and URLs can be mixed
  * http2: convert an assert to run-time check
  * curl_global_sslset: always provide available backends
  * ftplistparser: keep state between invokes
  * Curl_memchr: zero length input can't match
  * examples/sftpuploadresume: typecast fseek argument to long
  * examples/http2-upload: expand buffer to avoid silly warning
  * ctype: restore character classification for non-ASCII platforms
  * mime: avoid NULL pointer dereference risk
  * cookies: ensure that we have cookies before writing jar
  * os400.c: fix checksrc warnings
  * configure: provide --with-wolfssl as an alias for --with-cyassl
  * cyassl: adapt to libraries without TLS 1.0 support built-in
  * http2: get rid of another strstr
  * checksrc: force indentation of lines after an else
  * cookies: remove unused macro
  * CURLINFO_PROTOCOL.3: mention the existing defined names
  * tests: provide 'manual' as a feature to optionally require
  * travis: enable libssh2 on both macos and Linux
  * CURLOPT_URL.3: added ENCODING section
  * wolfssl: Fix non-blocking connect
  * vtls: don't define MD5_DIGEST_LENGTH for wolfssl
  * docs: remove extraneous commas in man pages
  * URL: fix ASCII dependency in strcpy_url and strlen_url
  * ssh-libssh.c: fix left shift compiler warning
  * configure: only check for CA bundle for file-using SSL backends
  * travis: add an mbedtls build
  * http: don't set the "rewind" flag when not uploading anything
  * configure: put CURLDEBUG and DEBUGBUILD in lib/curl_config.h
  * transfer: don't unset writesockfd on setup of multiplexed conns
  * vtls: use unified "supports" bitfield member in backends
  * URLs: fix one more http url
  * travis: add a build using WolfSSL
  * openssl: change FILE ops to BIO ops
  * travis: add build using NSS
  * smb: reject negative file sizes
  * cookies: accept parameter names as cookie name
  * http2: getsock fix for uploads
  * all over: fixed format specifiers
  * http2: use the correct function pointer typedef</changelog>
  <changelog author="pgajdos@suse.com" date="1531915200">- security update
  * CVE-2018-0500 [bsc#1099793]
    + curl-CVE-2018-0500.patch</changelog>
</package>
<package pkgid="b645ebe8e27766527248a7810a0e427bcc5e65032ee49e9f6a4beb43e18e63ff" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="40ab394373b3cd1669c4f49f06110b8c03f207540e6c43a7fceaae5a552a688a" name="libdcerpc-binding0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="88d67628f714d49460015983bc769068637ae99270a744f0fef5592bb8c8a7af" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="6f40acd0c093a59269b1b76944492a44137240249d501c0134b203c83652eb5a" name="libdcerpc-binding0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="0f29385ae996eb1807d3a1464e9b2693ee6bc751e7cf2d1e4527f6616750dc86" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="6d2d0071d454705914458f9b9b5f40ea091328cbf1f01378b16cce6f3bd3e254" name="libdcerpc-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="a9e54d7cdb50e31b23345c7d9506303668850a0bdd5e05be2c264a7fa0910d77" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="553ed421b409755bd0cd290d969806d76170e633a2c134755cf2db5290f7dafc" name="libdcerpc-samr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="6e2c68d1e893b1a2f2123bca14d375745f709f76f430d384e3dce7744c863f84" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="60ad9e65374756fdf828f036790ab88d513e6f21c0c3971c62a338b0da0b2b1d" name="libdcerpc-samr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="e4bc6a261791de0a0b5f506d01659a8316502e033e6e65d598bc8c50a1db8db3" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="43fc6c64b0933b3fa3d43d096dc449d15d99095582493dc1fcae7fde4b970c10" name="libdcerpc-samr0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="36acb3976aac759bf29c8c697087844f4b654569d94fd59c4dda4adcce47837e" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="bc54adb01aef35ae3878534b4e632c1b1960a085e65ec1a54c4d61befe2620d9" name="libdcerpc0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="b3c4b9f43e57afdecd98e8ce52f54e813dc9024d529c3ff9a3dc363307512fae" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="7212870e7338e7b204a40a3cc33889811d03af4001fa9ed866408699c96e7e09" name="libdcerpc0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="c394a699aa978edc0987b9f96c7569e4a54e991d1a1ac56ca5086ae99a122a0f" name="libdns169-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="3dafab5c41025ce260d3fce737790a688e7cb4af143d11db3c8a7667e9399503" name="libdns169-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="d6193dba2bea070a08f21286d13a45abef3c856e997bba72756c0e206e9a7f83" name="libdns169" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="5cb5ab152a300f00f38403acc680984710fb16cf16da80b8c132b363a11481fb" name="libdns169" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="46a2a4e134936b416e15ee5198ed0e30cef03030cad623e670fa7d730d980899" name="libdpdk-17_11-0" arch="x86_64">
  <version epoch="0" ver="17.11.2" rel="lp150.2.2.1"/>
  <changelog author="ndas@suse.de" date="1488542400">- Upgrade to LTS release of 16.11 which contains fixes below(fate#321541):
  * app/test: fix symmetric session free in crypto perf tests
  * app/testpmd: fix check for invalid ports
  * app/testpmd: fix static build link ordering
  * crypto/aesni_gcm: fix IV size in capabilities
  * crypto/aesni_gcm: fix J0 padding bytes
  * crypto/aesni_mb: fix incorrect crypto session
  * crypto/openssl: fix extra bytes written at end of data
  * crypto/openssl: fix indentation in guide
  * crypto/qat: fix IV size in capabilities
  * crypto/qat: fix to avoid buffer overwrite in OOP case
  * cryptodev: fix crash on null dereference
  * cryptodev: fix loop in device query
  * devargs: reset driver name pointer on parsing failure
  * drivers/crypto: fix different auth/cipher keys
  * ethdev: check maximum number of queues for statistics
  * ethdev: fix extended statistics name index
  * ethdev: fix port data mismatched in multiple process model
  * ethdev: fix port lookup if none
  * ethdev: remove invalid function from version map
  * examples/ethtool: fix driver information
  * examples/ethtool: fix querying non-PCI devices
  * examples/ip_pipeline: fix coremask limitation
  * examples/ip_pipeline: fix parsing of pass-through pipeline
  * examples/l2fwd-crypto: fix overflow
  * examples/vhost: fix calculation of mbuf count
  * examples/vhost: fix lcore initialization
  * mempool: fix API documentation
  * mempool: fix stack handler dequeue
  * net/af_packet: fix fd use after free
  * net/bnx2x: fix Rx mode configuration
  * net/cxgbe/base: initialize variable before reading EEPROM
  * net/cxgbe: fix parenthesis on bitwise operation
  * net/ena: fix setting host attributes
  * net/enic: fix hardcoding of some flow director masks
  * net/enic: fix memory leak with oversized Tx packets
  * net/enic: remove unnecessary function parameter attributes
  * net/i40e: enable auto link update for 25G
  * net/i40e: fix Rx checksum flag
  * net/i40e: fix TC bandwidth definition
  * net/i40e: fix VF reset flow
  * net/i40e: fix checksum flag in x86 vector Rx
  * net/i40e: fix crash in close
  * net/i40e: fix deletion of all macvlan filters
  * net/i40e: fix ethertype filter on X722
  * net/i40e: fix link update delay
  * net/i40e: fix logging for Tx free threshold check
  * net/i40e: fix segment number in reassemble process
  * net/i40e: fix wrong return value when handling PF message
  * net/i40e: fix xstats value mapping
  * net/i40evf: fix casting between structs
  * net/i40evf: fix reporting of imissed packets
  * net/ixgbe: fix blocked interrupts
  * net/ixgbe: fix received packets number for ARM
  * net/ixgbe: fix received packets number for ARM NEON
  * net/ixgbevf: fix max packet length
  * net/mlx5: fix RSS hash result for flows
  * net/mlx5: fix Rx packet validation and type
  * net/mlx5: fix Tx doorbell
  * net/mlx5: fix endianness in Tx completion queue
  * net/mlx5: fix inconsistent link status
  * net/mlx5: fix leak when starvation occurs
  * net/mlx5: fix link status query
  * net/mlx5: fix memory leak when parsing device params
  * net/mlx5: fix missing inline attributes
  * net/mlx5: fix updating total length of multi-packet send
  * net/mlx: fix IPv4 and IPv6 packet type
  * net/nfp: fix VLAN offload flags check
  * net/nfp: fix typo in Tx offload capabilities
  * net/pcap: fix timestamps in output pcap file
  * net/qede/base: fix FreeBSD build
  * net/qede: add vendor/device id info
  * net/qede: fix PF fastpath status block index
  * net/qede: fix filtering code
  * net/qede: fix function declaration
  * net/qede: fix per queue statisitics
  * net/qede: fix resource leak
  * net/vhost: fix socket file deleted on stop
  * net/vhost: fix unix socket not removed as closing
  * net/virtio-user: fix not properly reset device
  * net/virtio-user: fix wrongly get/set features
  * net/virtio: fix build without virtio-user
  * net/virtio: fix crash when number of virtio devices &gt; 1
  * net/virtio: fix multiple process support
  * net/virtio: fix performance regression due to TSO
  * net/virtio: fix rewriting LSC flag
  * net/virtio: fix wrong Rx/Tx method for secondary process
  * net/virtio: optimize header reset on any layout
  * net/virtio: store IO port info locally
  * net/virtio: store PCI operators pointer locally
  * net/vmxnet3: fix Rx deadlock
  * pci: fix check of mknod
  * pmdinfogen: fix endianness with cross-compilation
  * pmdinfogen: fix null dereference
  * sched: fix crash when freeing port
  * usertools: fix active interface detection when binding
  * vdev: fix detaching with alias
  * vfio: fix file descriptor leak in multi-process
  * vhost: allow many vhost-user ports
  * vhost: do not GSO when no header is present
  * vhost: fix dead loop in enqueue path
  * vhost: fix guest/host physical address mapping
  * vhost: fix long stall of negotiation
  * vhost: fix memory leak</changelog>
  <changelog author="ndas@suse.de" date="1490011200">- Disable dpdk-kmp package for ix86.</changelog>
  <changelog author="ndas@suse.de" date="1490875200">- Enable HAVE_VF_VLAN_PROTO for SLE12SP3(bsc#1031705).
  [+0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1491307200">- Fix dpdk KMP build fails(bsc#1031750)
- enable igb_uio kernel module(fate#322394)
- update kernel version for SLES12SP3 4.4.59 for bsc#1031705
  [*0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1492516800">- Enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch]</changelog>
  <changelog author="ndas@suse.de" date="1493121600">- sync mailbox definitions with Linux PF driver(bsc#1035993)
  [+0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1495627200">- Add upstream patch to fix building against linux kernel 4.11
  [+0005-kni-fix-build-with-kernel-4.11.patch]</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- Updated to 16.11.2 which provide bug fixes as below(fate#321541):
  * mbuf: fix missing includes in exported header
  * eal: fix debug macro redefinition
  * net/nfp: fix packet/data length conversion
  * net/i40e: fix setup when bulk is disabled
  * pci: fix device registration on FreeBSD
  * net/i40e: ensure vector mode is not used with QinQ
  * nic_uio: fix device binding at boot
  * net/bnx2x: fix transmit queue free threshold
  * net/vmxnet3: fix queue size changes
  * kni: fix build with kernel 4.11
  * kni: fix possible memory leak
  * kni: fix crash caused by freeing mempool
  * net/i40e: fix allocation check
  * net/virtio: fix crash when closing twice
  * net/ixgbevf: set xstats id values
  * net/i40e: fix hash input set on X722
  * eal/linux: fix build with glibc 2.25
  * net/i40e: fix incorrect packet index reference
  * net/thunderx: fix 32-bit build
  * net/thunderx: fix build on FreeBSD
  * net/thunderx: fix deadlock in Rx path
  * net/ixgbe: fix setting MTU on stopped device
  * vfio: fix secondary process start
  * net/virtio-user: fix address on 32-bit system
  * net/virtio: fix MSI-X for modern devices
  * net/virtio: fix link status always down
  * net/ixgbe: fix multi-queue mode check in SRIOV mode
  * net/i40e/base: fix potential out of bound array access
  * vhost: fix false sharing
  * net/thunderx: fix stats access out of bounds
  * net/virtio: disable LSC interrupt if MSIX not enabled
  * net/i40e: fix mbuf alloc failed counter
  * net: fix stripped VLAN flag for offload emulation
  * vfio: fix disabling INTx
  * net/igb: fix VF MAC address setting
  * net/igb: fix VF MAC address setting
  * net/ixgbe: fix VF Rx mode for allmulticast disabled
  * net/bonding: fix updating slave link status
  * net/virtio-user: fix overflow
  * net/i40e: fix TC bitmap of VEB
  * net/ixgbe/base: fix build error
  * net/ixgbe: fix Rx queue blocking issue
  * net/ixgbe: fix all queues drop setting of DCB
  * net/ixgbe: fix TC bandwidth setting
  more details can be found in
  http://dpdk.org/ml/archives/stable/2017-May/001809.html
  [- 0005-kni-fix-build-with-kernel-4.11.patch]
- use default gcc which is now gcc7 (bsc#1042372)
  [+0005-kni-fix-build-with-gcc-7.1.patch]</changelog>
  <changelog author="ndas@suse.de" date="1500379200">- Do not use obsolete pci_enable_msix for() kernel &gt; 4.8
  [+0006-kni-fix-ethtool-build-with-kernel-4.11.patch,
  +0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]</changelog>
  <changelog author="marco.varlese@suse.com" date="1503057600">- Split libs into a subpackage to provide multiple installable versions on same sytem</changelog>
  <changelog author="marco.varlese@suse.com" date="1503662400">- Enabled CONFIG_RTE_MAJOR_ABI: libs SONAME equal the DPDK release version</changelog>
  <changelog author="ndas@suse.de" date="1504526400">- Updated to 17.08(bsc#1050250, bsc#1046598, fate#322913, fate#322608)
  Some of the new features are listed below:
  * Increase minimum x86 ISA version to SSE4.2
  * Added Fail-Safe PMD
  * Added support for generic flow API (rte_flow) on igb NICs
  * Added support for generic flow API (rte_flow) on enic
  * Added support for Chelsio T6 family of adapters
  * Added latency and performance improvements for cxgbe
  * Updated mlx5 driver
  * Added NXP DPAA2 Eventdev PMD
  * Added dpdk-test-eventdev test application
  * from 17.05:
  * Added mbuf raw free API
  * Added free Tx mbuf on demand API
  * Added VFIO hotplug support
  * Added PowerPC support for i40e and its vector PMD
  * Added VF max bandwidth setting in i40e
  * Added LiquidIO network PMD
  * Added support for NXP DPAA2 Network PMD
  * Added support for NXP DPAA2 - FSLMC bus
  * Added support for the Wind River Systems AVP PMD
  * Added vmxnet3 version 3 support
  * Added MTU feature support to Virtio and Vhost
  * Added event driven programming model library (rte_eventdev)
  * Added Software Eventdev PMD
  * Added Cavium OCTEONTX Eventdev PMD
  * Added NXP DPAA2 SEC crypto PMD
  * from 17.02:
  * Added generic EAL API for I/O device memory read/write operations
  * Added VF Daemon (VFD) for i40e. - EXPERIMENTAL
  * Added generic flow API (rte_flow)
  * Added APIs for MACsec offload support to the ixgbe PMD
  * Added Solarflare libefx-based network PMD.
  * Added support for Mellanox ConnectX-5 adapters (mlx5)
  * Added ARMv8 crypto PMD
  * Added crypto performance test application
  * more details can be found in
    http://dpdk.org/doc/guides/rel_notes/release_17_08.html
    http://dpdk.org/doc/guides/rel_notes/release_17_05.html
    http://dpdk.org/doc/guides/rel_notes/release_17_02.html
    [-0002-kni-define-HAVE_VF_VLAN_PROTO-for-SLES12SP3.patch
  - 0003-kni-define-HAVE_TRANS_START_HELPER-for-SLES12SP3.patch
  - 0004-net-thunderx-sync-mailbox-definitions-with-Linux-PF-.patch
  - 0005-kni-fix-build-with-gcc-7.1.patch
  - 0006-kni-fix-ethtool-build-with-kernel-4.11.patch
  - 0007-igb_uio-switch-to-new-irq-function-for-MSI-X.patch]
- Use updated patch to enable HAVE_TRANS_START_HELPER for SLE12SP3(bsc#1031705).
  [+ 0002-kni-fix-build-on-SLE12-SP3.patch]</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Add missing libelf-devel dependency</changelog>
  <changelog author="marco.varlese@suse.de" date="1512993600">- Upgraded to latest stable 17.08.1; some of the fixes include:
  * net/qede: disable per-VF Tx switching feature
  * revert "net/virtio: flush Rx queues on start"
  * various fixes for mlx5 PMD drivers
  * various fixes for bnxt PMD drivers
  * various fixes for i40e PMD drivers
  * various fixes for crypto PMD drivers
  * testpmd: fix for non-consecutive ports
  * ethdev: fix ABI version</changelog>
  <changelog author="marco.varlese@suse.de" date="1513944000">- Added missing supported broadcom chipset family Broadcom NetXtreme II BCM57810</changelog>
  <changelog author="marco.varlese@suse.de" date="1515499200">- Upgraded to latest major 17.11(fate#322609); some of the fixes include:
  * Extended port_id range from uint8_t to uint16_t
  * Added a new driver for Marvell Armada 7k/8k devices
  * Updated mlx4 driver
  * Updated mlx5 driver
  * Added SoftNIC PMD
  * Added support for NXP DPAA Devices
  * Updated support for Cavium OCTEONTX Device
  * Added PF support to the Netronome NFP PMD
  * Updated bnxt PMD
  * Added bus agnostic functions to cryptodev for PMD initialization
  * Updated QAT crypto PMD
  * Updated the AESNI MB PMD
  * Updated the OpenSSL PMD
  * Added NXP DPAA SEC crypto PMD
  * Add new benchmarking mode to dpdk-test-crypto-perf application
  * Added IOMMU support to libvhost-user
  * Added the Generic Segmentation Offload Library
  * Added the Flow Classification Library
- Removed 0002-kni-fix-build-on-SLE12-SP3.patch since patch merged upstream and available in 17.11</changelog>
  <changelog author="ndas@suse.de" date="1516017600">- Enable(disabled by default) MLX4 and MLX5 pmd(fate#322609)</changelog>
  <changelog author="marco.varlese@suse.de" date="1519732800">- Upgraded to latest stable release 17.11.1 (LTS): some of the fixes include:
  * location changes of the GPL and LGPL licenses;
  * net/mlx4:
  - fix drop flow resources leak
  * net/bnxt:
  - double increment of idx during Tx ring alloc
  - group info usage
  - check for ether type
  - size of Tx ring in HW
  - number of pools for RSS
  - return code in MAC address set
  - link speed setting with autoneg off
  * net/nfp:
  - MTU settings
  - jumbo settings
  - CRC strip check behaviour
  * net/sfc:
  - multicast address list copy memory leak
  - DMA memory leak after kvarg processing failure
  - fix label name to be consistent
  * net/i40e:
  - VLAN offload setting issue
  - FDIR input set conflict
  - FDIR rule confiliction issue
  - setting MAC address of VF
  - flow director Rx resource defect
  - warn when writing global registers
  - multiple driver support
  - interrupt conflict with multi-driver
  - Rx interrupt
  - check multi-driver option parsing
  - flow director filter
  * net/qede:
  - enable LRO over tunnels
  - reject config with no Rx queue
  - check tunnel L3 header
  - tunnel header size in Tx BD configuration
  - VF LRO tunnel configuration
  * net/mlx5:
  - Tx checksum offloads
  - un-supported RSS hash fields use
  - device operation type
  - pedantic compilation
  - fix pedantic compilation
  - flow item validation
  - flow RSS configuration
  - UAR remapping on non configured queues
  - secondary process verification
  - port stop by verify flows are still present
  - flow priority on queue action</changelog>
  <changelog author="marco.varlese@suse.de" date="1519819200">- The vm_power example does not work for ppc64le since it uses the
  IXGBE PMD driver which is not available for that platform(bsc#1082154):
  * Disable CONFIG_RTE_LIBRTE_POWER for the sample application;
  * Disable CONFIG_RTE_LIBRTE_IXGBE_PMD for the actual PMD driver;</changelog>
  <changelog author="ndas@suse.de" date="1524484800">- Update to 17.11.2
  restrict untrusted guest to misuse virtio to corrupt
  host application(ovs-dpdk) memory which can lead all VM to lose
  connectivity(CVE-2018-1059,bsc#1089638).
  Changes:
  * Add deprecation notice for rte_vhost_gpa_to_vva()
  * Patch vhost-net and vhost-scsi examples
  * Fixes checkpatch warnings
  * Take VIRTIO_RING_F_EVENT_IDX into account when ring size (Tiwei)
  * Fix next chuncks translation access rights in Rx paths (Tiwei)
  * vhost: fix indirect descriptors table translation size
  * vhost: check all range is mapped when translating GPAs
  * vhost: introduce safe API for GPA translation
  * vhost: ensure all range is mapped when translating QVAs
  * vhost: add support for non-contiguous indirect descs tables
  * vhost: handle virtually non-contiguous buffers in Tx
  * vhost: handle virtually non-contiguous buffers in Rx
  * vhost: handle virtually non-contiguous buffers in Rx-mrg
  * examples/vhost: move to safe GPA translation API
  * examples/vhost_scsi: move to safe GPA translation API
  * vhost/crypto: move to safe GPA translation API
  * vhost: deprecate unsafe GPA translation API</changelog>
</package>
<package pkgid="fa1b0bf0180f8fef2464651c4cbe808163b3f1a9acc74e8cb6fbf6f25099b468" name="libebml" arch="src">
  <version epoch="0" ver="1.3.6" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
  <changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
</package>
<package pkgid="52af250597aaf896ca3fb8659b3d524bbebd4512a62f32be634b59ee1b8b185e" name="libebml-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
  <changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
</package>
<package pkgid="fdac832582458d15fc712a3d41d312cf0f60927c93137ac62c074842c96296ff" name="libebml4" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
  <changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
</package>
<package pkgid="8e8c5d61456b9ddf0dbe1a0fef71ebd7119094a302b65ce765b4a5f33dd12c63" name="libebml4-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1291809600">- fix -devel package dependencies</changelog>
  <changelog author="reddwarf@opensuse.org" date="1296388800">- update to version 1.2.0
  - no need to put the internal code of EbmlCrc32 in the public header
  - more safety on the Binary buffer handling in case we run out of memory
  - fix CRC32 detection in master elements
  - fix compilation under gcc 4.5
  - Fixed handling of UTF-8 strings with characters encoded in more than three bytes
  - Increased library .so name to .3 due to binary incompatible changes</changelog>
  <changelog author="ro@suse.de" date="1303128000">- update baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1309435200">- Update to version 1.2.1:
  + fix the constructor of CRTError in StdIOCallback
  + fix the size returned by MemIOCallback::read() when reaching
    the end of the buffer
  + add a macro to define signed integer elements that have a
    default value
  + fix compilation of debug builds on win32
  + fix for Sun Studio C compiler
- Stop source service usage: Factory is moving to a slightly
  different approch to verify source authenticity. Cconsequently,
  specify a full URL as Source.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1316952000">- Update to version 1.2.2
  + fix usage of the DEBUG #define (use LIBEBML_DEBUG instead)
  + The EbmlCodeVersion variable now resides in the library instead of being declared static in the header file.
  + only use the test element to read once in the loop</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1336651200">- Do not use gcc -ansi flag.</changelog>
  <changelog author="zaitor@opensuse.org" date="1364040000">- Update to version 1.3.0:
  + Compilation warning fixes
  + GetValue() and SetValue() functions for
    EbmlFloat/EbmlSInteger/EbmlUInteger
  + GetValue(), SetValue(), GetValueUTF8(), SetValueUTF8()
    functions for EbmlString/EbmlUnicodeString
  + Date values use 64bit integers
  + Integer conversion operators were made 'const'
  + GetElementList() function for EbmlMaster providing a
    reference to the underlying std::vector&lt;&gt; for better
    interaction with the C++ standard library
  + New constructor for UTFstring taking a single std::wstring
  + Increased library .so name to .4 due to binary incompatible
    changes.
  + Removed the Debian build files from our package.
- Bump soname following upstream code changes.</changelog>
  <changelog author="reddwarf@opensuse.org" date="1369137600">- Add libebml-1.3.0-6efcb74d1e.patch
- Simplify make calls</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389528000">- Support C++ visibility by reusing win32 code for the same
  purpose.
- added patches:
  * libebml-visibility.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1389873600">- revert last change, breaks mkvtoolnix that uses
  internal and symbols that are not annotated as public :(
  keep inlines-hidden though.</changelog>
  <changelog author="dimstar@opensuse.org" date="1392120000">- Also revert inlines-hidden: still breaks mkvtoolnix on i586.</changelog>
  <changelog author="jengelh@inai.de" date="1407326400">- Set RPM groups</changelog>
  <changelog author="jengelh@inai.de" date="1422792000">- Update to new upstream release 1.3.1
  * EbmlMaster: Fixed read() trying to calculate the end position of
  elements with an unknown size. This avoids endless loops and
  assertions in certain cases.
  * EbmlElement::Render(): does not catch exceptions anymore.
  Instead, exceptions generated from the IOCallback class (e.g.
  if a write failed) are propagated to the caller.
- Drop libebml-1.3.0-6efcb74d1e.patch (no longer relevant)</changelog>
  <changelog author="dimstar@opensuse.org" date="1423656000">- Add back BuildRoot: the rpm version of SLE11 still requires this
  and libebml is linked to 3rd party Build Servers, where building
  for SLE11 is still enabled.</changelog>
  <changelog author="jengelh@inai.de" date="1430481600">- Update package descriptions a bit</changelog>
  <changelog author="rpm@fthiessen.de" date="1445515200">- Update to new upstream release 1.3.3 (security fixes!):
  * EbmlUnicodeString::UpdateFromUTF8(): Fixed an invalid memory
  access. When reading from a UTF-8 string in which the length
  indicated by a UTF-8 character's first byte exceeds the string's
  actual number of bytes the parser would access beyond the end of
  the string resulting in a heap information leak. Fixes the issue
  reported as Cisco TALOS-CAN-0036.
  * EbmlElement::ReadCodedSizeValue(): Fixed an invalid memory
  access. When reading a EBML variable length integer value a read
  access beyond the end of the available buffer was possible if
  fewer bytes were available than indicated by the first byte
  resulting in a heap information leak.
  * EbmlMaster::Read(): When the parser encountered a deeply nested
  element with an infinite size then a following element of an upper
  level was not propagated correctly. Instead the element with the
  infinite size was added into the EBML element tree a second time
  resulting in memory access after freeing it and multiple attempts
  to free the same memory address during destruction. Fixes the
  issue reported as Cisco TALOS-CAN-0037.
  * EbmlElement::FindNextElement(): Handle EOF when reading the
  element size properly.</changelog>
  <changelog author="rpm@fthiessen.de" date="1468584000">- Update to new upstream release 1.3.4
  * Some minor changes required for clang
  * Some minor changes for C99 support
  * Required for mkvtoolnix &gt;= 9.3.0</changelog>
  <changelog author="rpm@fthiessen.de" date="1503662400">- Update to 1.3.5
  * The function EbmlMaster::CheckMandatory() will now only return
    false if a mandatory element is missing for which there's no
    default value in the specifications. This means that callers
    such as EbmlMaster::UpdateSize() and by extension
    EbmlMaster::Render() will not insist on all mandatory elements
    being present anymore, but only those for which there's
    no default value.
  * Added a template function `FindNextChild`.
  * Fix reading and EBML element even though the ID was not found
    within the allowed reading limit.
  * Fixed an instance of undefined behavior in
    EbmlElement::GetSemantic() due to binding a dereferenced null
    pointer to a reference.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952000">- Update to 1.3.6:
  * Fixed boo#1104354
  * Fixed undefined behavior when reading signed integers with
    negative values from files.
  * Fixed a small memory leak when reading an element runs into an
    I/O exception (e.g. due to having reached the end of the file).
  * Fixed the EbmlMaster::GetDataStart() function returning wrong
    values for elements with an infinite/unknown size.
  * Fixed finding the next element ID when garbage data is
    encountered during the scan for the ID.
  * Fixed several potential situations where reading child element
    data could exceed the parent element's size.</changelog>
  <changelog author="rpm@fthiessen.de" date="1532952001">- Added fix-EbmlSInteger-limits.patch from upstream.
  * Fixes build with openSUSE &lt;= 42.3</changelog>
</package>
<package pkgid="6eb81d3b13513c7f06121ad9b460e80913ec12720588344b01b0f439f8350c31" name="libecpg6" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="7d55962610f00c3d882775126d07cd94606726cd272fbbb9129fb93630441805" name="libecpg6-32bit" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="1cf9617f85a3251415e401e1d87b575fd30128fca8a74bfd8f8c6e7c5f318886" name="libevtlog-3_14-0" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="e0a77cd5dd6b701a3128eca21baab0547b1101468e28f11bab73c3d8af369ada" name="libexiv2-26" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="a030c328c7b36e4a1ddbb1a0a92ae55822b8b536c4218f0cbaa42add1609768a" name="libexiv2-26-32bit" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="740147e9cce3987d0e7cc2865a8488db443e31a3be573bba76b96f0e095b39eb" name="libexiv2-devel" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="2a06261ce8ecb5520a680b132e8e7dc91cb8bde0d1bc251fc725394fc343d45a" name="libexiv2-doc" arch="x86_64">
  <version epoch="0" ver="0.26" rel="lp150.5.3.1"/>
  <changelog author="fcrozat@suse.com" date="1348056000">- Add 90_changeset_r2743.diff: add support for additional Samgsung
  EXIF tags (backport for upstream)
- Add 90_changeset_r2744.diff: add support for additional Pentax
  EXIF tags (backport for upstream)
- Add more Canon models (5D Mark III, 600D, 60D, 1100D, WFT-E2 II,
  WFT-E4 II, 650D)
- Add 90_changeset_r2756.diff: add support for EOS-M Sigma 12-24mm
  f/4.5-5.6 DG HSM II lens (backport from upstream)
- Add 90_changeset_r2818_partial.diff: add support for additional
  Canon camera (5D Mark III, 600D, 60D, 1100D, WFT-E2 II, WFT-E4
  II, 650D) and EF/EF-M lenses. (backport from upstream)
- Add 99_pending_canon_eos_m.diff: add support for some Canon EOS-M
  lenses (pending upstream merge)
- Add 99_pending_minolta_manual_lens.diff: add support for Minolta
  manual lens (pending upstream merge)
- Add 99_pending_pentax_da_35.diff: add support for PENTAX-DA 35mm
  F2.4 AL lens (pending upstream merge)
- Add 99_pending_zeiss_planar_35_ze.diff: add support for Carl
  Zeiss Planar T* 50mm f/1.4 ZE lens (pending upstream merge)</changelog>
  <changelog author="fcrozat@suse.com" date="1370260800">- Remove pending patches with upstream versions :
  + 99_pending_canon_eos_m.diff (replaced by
    90_changeset_r2993.diff).
  + 99_pending_minolta_manual_lens.diff (replaced by
    90_changeset_r2989.diff).
  + 99_pending_pentax_da_35.diff (replaced by
    90_changeset_r2860.diff).
  + 99_pending_zeiss_planar_35_ze.diff (replaced by
    90_changeset_r3011.diff).
- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  + 90_changeset_r2889.diff, 90_changeset_r2985.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2958.diff: additional lenses for Samsung body
  + 90_changeset_r2959.diff, 90_changeset_r2961.diff,
    90_changeset_r2985.diff, 90_changeset_r3003.diff,
    90_changeset_r3016.diff, 90_changeset_r3017.diff: additional
    lenses for Pentax body.
  + 90_changeset_r2963.diff, 90_changeset_r2994.diff,
    90_changeset_r3004.diff, 90_changeset_r3023.diff,
    90_changeset_r3026.diff: additional lenses for Canon body.
  + 90_changeset_r2968.diff, 90_changeset_r2969.diff,
    90_changeset_r2995.diff, 90_changeset_r3005.diff,
    90_changeset_r3006.diff: additional lenses for Minolta body.
  + 90_changeset_r2970.diff, 90_changeset_r2975.diff,
    90_changeset_r2978.diff, 90_changeset_r2981.diff,
    90_changeset_r2982.diff, 90_changeset_r2992.diff: additional
    lenses for Olympus body.
  + 90_changeset_r2998.diff: add support for FocusDistance data
    from Olympus EXIF tags.
  + 90_changeset_r2984.diff, 90_changeset_r2986.diff,
    90_changeset_r3002.diff: additional lenses for Nikon body.
  + 90_changeset_r2988.diff: add support for Exif.Photo.LensModel
    EXIF tag.
  + 90_changeset_r2990.diff: prevent double variable creation.
  + 90_changeset_r2991.diff: fix memory corruption.
  + 95_post_r3026_cleanup.diff: cleanup lenses names.</changelog>
  <changelog author="mrueckert@suse.de" date="1374840000">- Backport patches from upstream (cherry-picking courtesy of Pascal
  de Bruijn):
  * 90_changeset_r3036.diff: Canon EF-S 55-250mm f/4-5.6 IS II
  * 90_changeset_r3037.diff: A few more Pentax lenses
  * 90_changeset_r3038.diff: Updates for the Minolta Bodies
  * 90_changeset_r3039.diff: Added 18-55mm f/3.5-5.6 IS STM
  * 90_changeset_r3047.diff: Added Sigma 60mm to the Olympus list
  * 90_changeset_r3048.diff: Added Sigma 19 and 30m to the Olympus
    list
  * 90_changeset_r3051.diff: Added a lot more canon compacts
  * 90_changeset_r3052.diff: Sigma 17-50mm F2.8 EX DC HSM
  * 90_changeset_r3053.diff: Removed Optio M30 from the Pentax list
  * 90_changeset_r3054.diff: Added Samsung NX 45mm F1.8
  * 90_changeset_r3055.diff: Added Samsung NX 45mm F1.8 2D/3D
  * 90_changeset_r3060.diff: Renamed LensModel to LensType in the
    Olympus struct.
  * 90_changeset_r3061.diff: Fixes Issue# 908
  * 90_changeset_r3062.diff: More entries for Pentax
  * 90_changeset_r3063.diff: Do not try to guess lenses when it is
    undefined
  * 90_changeset_r3066.diff: Lumix G Vario 14-140mm F3.5-5.6 Asph.
    Power OIS
  * 90_changeset_r3067.diff: Lumix G Vario 14-42mm F3.5-5.6 II
    Asph. Mega OIS
  * 90_changeset_r3068.diff: Added EOS 70D</changelog>
  <changelog author="ctrippe@opensuse.org" date="1397476800">- Update to version 0.24
  * exiv2 (0.19-1) 00_hyphens_used_as_minus.diff
  * (Reported with patch by Mark Purcell, fixed by Niels Kristian Bech Jensen)
  * Video metadata support (Abhinav Badola for GSoC 2012)
  * Samsung NX100 JPG exports have broken EXIF (Reported by Pascal de Bruijn)
  * Warnings while compiling with g++4.5
  * (Reported by Sebastien Gilles, fixed by Robin Mills)
  * For TIFF-like images, non-intrusive writing is not used when it should
  * (Reported by Thomas Lotze)
  * Patch to detect Carl Zeiss Planar T* 50mm f/1.4 ZE on Canon
  * (Reported with patch by Stian Grindvoll)
  * Exiv2 fails to compile under Linux (Volker Grabsch)
  * example1.cpp clang Mac OS X warnings (Reported by Jerry Jacobs)
  * Exiv2 crashes on input (Reported by Christian Grothoff)
  * Complete Samsung NX lenses portfolio recognition
  * (Reported with patch by Jaroslav Stepanek, updates by Pascal de Bruijn)
  * Porting the Video Code to MSVC (umbrella)
  * (Robin Mills, Abhinav Badola, Shawn Xiong)
  * Photoshop doesn't recognize its own EPS files after modification by Exiv2
  * (Volker Grabsch)
  * autotools build (make config ; ./configure ; make) is broken
  * (Robin Mills)
  * Sigma 50mm f/1.4 on Canon not detected correctly
  * (Reported by Rick Gabriel, patch by Aakash Goenka)
  * PENTAX-DA 18-135mm F3.5-5.6 not detected correctly
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Sigma 18-250mm not properly recognised on Pentax
  * (Reported by S. Verdoold, patch by Pascal de Bruijn)
  * Video code is failing the test suite (on all plaforms)
  * (Robin Mills, Abhinav Badola)
  * Patches for locale and boost issue (Patches by Mario anyc)
  * Support for two lens for sony mount
  * (Patch by Michal Babej)
  * Exif.OlympusEq.0x0403 tag
  * (Christoph Anton Mitterer, Robin Mills)
  * New Samsung NX 12-24mm f/4-5.6 ED
  * (Jaroslav Stepanek)
  * New lens "Tamron SP 24-70mm F/2.8 Di VC USD"
  * (Reported by Jean-Pierre Verrue, patch by Niels Kristian Bech Jensen)
  * New lens: Canon EF 35mm f/2 IS USM
  * (markus kanet, Robin Mills)
  * New camera: Canon EOS 6D
  * (markus kanet)
  * Update list of lenses for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Add another lens for Olympus cameras.
  * (Niels Kristian Bech Jensen)
  * Another bunch of Olympus lens updates.
  * (Niels Kristian Bech Jensen)
  * One more Olympus lens - the list is complete.
  * (Niels Kristian Bech Jensen)
  * Nikon AF-S Nikkor 28mm f/1.8G not recognized
  * (Reported by Philip Johnsson, patch by Niels Kristian Bech Jensen)
  * Missing lenses reported by Paul Bissonnette
  * (Robin Mills)
  * Samsung D-Xenon 12-24mm not recognized
  * (Reported by Romain Henriet, patch by S. Verdoold)
  * (near-)infinite loop in video decoders
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * ASF: heap overflow
  * (Reported by Alyssa Milburn, patch by Abhinav Badola)
  * Sigma 30mm f/1.4 on Canon not detected correctly
  * (Reported by Christian Roumano, patch by Aakash Goenka)
  * User-readable output of Olympus' FocusDistance
  * (Patch by Teemu Rytilahti)
  * New Compilation Warnings
  * New lens: Pentax smc DA 18-135mm f/3.5-5.6 ED AL [IF] DC WR
  * (Reported by Matthieu Volat, patch by Pascal de Bruijn)
  * New Lens: Canon EF-S 55-250mm f/4-5.6 IS II
  * (Patch by Andrew Aylett)
  * Exiv2: lensName misreporting for some CR2s
  * (Reported by Pascal de Bruijn, patch by Niels Kristian Bech Jensen)
  * Mountain Lion Plugin crashes when setxattr called
  * (Robin Mills)
  * New Lens: Samsung NX 45mm f1.8
  * (Pascal de Bruijn)
  * strerror_r gives no error message back
  * (Reported by Ákos Sz?ts, patch by Robin Mills)
  * New Lens: Samsung NX 45mm f1.8 2D/3D
  * (Pascal de Bruijn)
  * New Lens: Sigma 150-500mm f/5-6.3 APO DG OS HSM on Canon (Steve Fosdick)
  * Maintenance of Sony Makernote (Patch by Thomas Beutlich)
- Removed patches included in the new release
  * 90_changeset_r2743.diff
  * 90_changeset_r2744.diff
  * 90_changeset_r2756.diff
  * 90_changeset_r2818_partial.dif
  * 90_changeset_r2860.diff
  * 90_changeset_r2889.diff
  * 90_changeset_r2958.diff
  * 90_changeset_r2959.diff
  * 90_changeset_r2961.diff
  * 90_changeset_r2963.diff
  * 90_changeset_r2968.diff
  * 90_changeset_r2969.diff
  * 90_changeset_r2970.diff
  * 90_changeset_r2975.diff
  * 90_changeset_r2978.diff
  * 90_changeset_r2981.diff
  * 90_changeset_r2982.diff
  * 90_changeset_r2984.diff
  * 90_changeset_r2985.diff
  * 90_changeset_r2986.diff
  * 90_changeset_r2988.diff
  * 90_changeset_r2989.diff
  * 90_changeset_r2990.diff
  * 90_changeset_r2991.diff
  * 90_changeset_r2992.diff
  * 90_changeset_r2993.diff
  * 90_changeset_r2994.diff
  * 90_changeset_r2995.diff
  * 90_changeset_r2998.diff
  * 90_changeset_r3002.diff
  * 90_changeset_r3003.diff
  * 90_changeset_r3004.diff
  * 90_changeset_r3005.diff
  * 90_changeset_r3006.diff
  * 90_changeset_r3011.diff
  * 90_changeset_r3016.diff
  * 90_changeset_r3017.diff
  * 90_changeset_r3023.diff
  * 90_changeset_r3026.diff
  * 90_changeset_r3036.diff
  * 90_changeset_r3037.diff
  * 90_changeset_r3038.diff
  * 90_changeset_r3039.diff
  * 90_changeset_r3047.diff
  * 90_changeset_r3048.diff
  * 90_changeset_r3051.diff
  * 90_changeset_r3052.diff
  * 90_changeset_r3053.diff
  * 90_changeset_r3054.diff
  * 90_changeset_r3055.diff
  * 90_changeset_r3060.diff
  * 90_changeset_r3061.diff
  * 90_changeset_r3062.diff
  * 90_changeset_r3063.diff
  * 90_changeset_r3066.diff
  * 90_changeset_r3067.diff
  * 90_changeset_r3068.diff
  * 95_post_r3026_cleanup.diff
- Rename libexiv2-12 subpackage to libexiv2-13 following upstream
  soversion change.</changelog>
  <changelog author="coolo@suse.com" date="1399291200">- add fix-parallel-build.patch to fix -j, notified upstream about it</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401105600">- Build with large file support in 32 bit systems.
- Ensure we do not use __DATE__ or __TIME__ anywhere
  (exiv2-build-date.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1423483200">- fix a Buffer Overflow in INFO tags of RIFFVIDEO.CPP
  (fix-overflow-in-info-tags-r3264.patch) (CVE-2014-9449).</changelog>
  <changelog author="dmueller@suse.com" date="1431432000">- add parallel-build-dep.patch: Fix build dependencies</changelog>
  <changelog author="gernot@hillier.de" date="1432468800">- add fix-video-timescale-handling.patch: Fix crash when scanning mp4 videos.</changelog>
  <changelog author="dimstar@opensuse.org" date="1434628800">- Switch to cmake build system: there are various code snips that
  use variables that are only defined in the cmake build system
  (e.g. src/utils.cpp uses EXV_HAVE_UNISTD_H to include unistd.h,
  which is not done with configure. With gcc5 this results now in
  a failure, as unistd.h is no longer implicit).
- Add exiv2-cmake-libsuffix.patch: Install the library to lib64 on
  the respective archs.</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1434974400">- Update to version 0.25
  * exivsimple has array index errors when stripping quotes form
    trivial input strings
  * Use SVN eol-style LF on all files
  * Access violation on IptcData::operator[] when key is invalid
  * PNG images with tiff tags throw exceptions
  * Plasma kde crashes when specific jpeg is on the Desktop
  * TIFF parser,Binary array elements should be decoded using the
    Makernote's endianness, not that of the image
  * Coverity scan : Issue CID 981992 , 981993
  * Wrong key name in output of addmodel sample
  * Printing tags does not honor multi-byte label widths correctly
  * Wrong ApertureValue written
  * pyexiv2 fails on cifs shares on an Ubuntu client
  * TIFF parser,Parse TIFF PageNumber
  * Add new sample applications exifdata and exivvalue
  * Add option -K Key (--key Key) to specify one or more keys to
    output
  * "exiv2 -eX" followed by "exiv2 -iX" produces invalid XMP
    metadata packet
  * Sony NEX Lens Information
  * Handle Pentax makernotes in samsung-rebranded cameras
  * Olympus XZ-1 FocusDistance incorrect
  * Support Panasonic Makernote
  * detection of Pentax DA 35/2.4 lens
  * Canon EOS M EF-M lenses
  * Lens matching on Canon
  * Tamron 18-270 is not detected anymore
  * Wrong aperture for Tamron 70-300?
  * Recognize Samsung NX 10mm Fisheye
  * Pentax/Sigma 24-70mm F2.8 IF EX DG HSM data
  * See also http://www.exiv2.org/changelog.html
- Dropped the following upstreamed patches:
  * fix-overflow-in-info-tags-r3264.patch
  * fix-video-timescale-handling.patch
  * parallel-build-dep.patch
  * fix-parallel-build.patch</changelog>
  <changelog author="dmueller@suse.com" date="1435060800">- readd parallel-build-dep.patch</changelog>
  <changelog author="jengelh@inai.de" date="1436961600">- Adjust RPM groups
- Put manpage in proper subpackage</changelog>
  <changelog author="suse-beta@cboltz.de" date="1462449600">- add exiv2_r3889_r3890_fix_boo964344.diff (taken from revisions linked
  in http://dev.exiv2.org/issues/1106) to fix crash in darktable (boo#964344)</changelog>
  <changelog author="wbauer@tmo.at" date="1498824000">- Update to version 0.26
  * See http://www.exiv2.org/changelog.html
- Add gcc-version-check.patch to fix build on Tumbleweed
- Dropped the following upstreamed patches:
  * exiv2-cmake-libsuffix.patch
  * exiv2_r3889_r3890_fix_boo964344.diff</changelog>
  <changelog author="wbauer@tmo.at" date="1499169600">- Fix baselibs.conf</changelog>
  <changelog author="wbauer@tmo.at" date="1502280000">- Add fix-crash.patch to prevent crashes in gwenview with certain
  images (boo#1051782)
- Update source tarball to the fixed upstream re-release and remove
  the workaround in the spec file
- Replace gcc-version-check.patch with the version committed
  upstream</changelog>
  <changelog author="dmueller@suse.com" date="1508241600">- add 0001-Use-more-GNUInstallDirs.patch (bsc#938600)
- add d4e4288d839d0d9546a05986771f8738c382060c.patch (
    CVE-2017-14864 bsc#1060995,
    CVE-2017-14862 bsc#1060996,
    CVE-2017-14859 bsc#1061000)</changelog>
  <changelog author="cfeck@kde.org" date="1511524800">- split developer documentation into separate package</changelog>
  <changelog author="dmueller@suse.com" date="1527681600">- update to latest 0.26 branch:
  * obsoletes 0001-Use-more-GNUInstallDirs.patch
  d4e4288d839d0d9546a05986771f8738c382060c.patch
  gcc-version-check.patch
  7f5b0778fa301b68c1c88e3820ec3afbd09dd0a5.patch
  fix-crash.patch
  * adds exiv2-update-to-0.26-branch.patch
  * Fixes CVE-2017-14864 (bsc#1060995),
  CVE-2017-14862 (bsc#1060996), CVE-2017-14859 (bsc#1061000)
  CVE-2017-14860 (bsc#1048883), CVE-2017-11337 (bsc#1048883),
  CVE-2017-11338 (bsc#1048883), CVE-2017-11339 (bsc#1048883),
  CVE-2017-11340 (bsc#1048883), CVE-2017-11553,
  CVE-2017-12955 (bsc#1054593), CVE-2017-12956,
  CVE-2017-12957, CVE-2017-11683, CVE-2017-11592,
  CVE-2017-11591 (bsc#1050257)</changelog>
</package>
<package pkgid="0497128293340c0ab7b793d5f35e4eddaa6846280e09d659d172f222ce47e949" name="libext2fs-devel" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="084256b4f2ad544c655a1613184e47fb91d1606ef341af03d6f16ae2b721fb08" name="libext2fs-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="06ce9a1d1fde6fc9454072bdf04ad3c0be009d01dc6ab8628544c55ad451c9b7" name="libext2fs-devel-static" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="aac36386497d4eae1308018f0f3cd195898b2c32ab051b7da443d0547dd95149" name="libext2fs2" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="cfd8eb7297d9ebb8294e81ab71e285b529268af0a0f6dee398a13f303d1bf473" name="libext2fs2-32bit" arch="x86_64">
  <version epoch="0" ver="1.43.8" rel="lp150.3.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1434801600">- e2fsprogs-1.41.1-splash_support.patch: Drop it, this patch
  depends on the old in kernel "bootsplash" patches that were
  removed after the introduction of plymouth.</changelog>
  <changelog author="dsterba@suse.com" date="1437912000">- enable static build and package static libraries</changelog>
  <changelog author="dsterba@suse.com" date="1438862400">- spec: add static library dependencies</changelog>
  <changelog author="jack@suse.cz" date="1466424000">- Update to 1.43.1
  * Add support for the ext4 metadata checksum, checksum seed, inline data,
    encryption, project quota, and read-only features
  * Support for the very old, experimental, and never-added-to-mainline
    compression feature has been removed
  * Mke2fs will now create file systems with the metadata_csum and 64bit
    features enabled by default
  * The tune2fs program will ask the user for confirmation before starting
    dangerous operations if the terminal is available, and it will replay
    the journal if necessary
  * Add an ext2/3/4 FUSE server
  * The resize2fs command can now convert file systems between 64-bit and
    32-bit mode
  * We now use a new e2undo file format which is much more efficient and
    faster than the old tdb-based scheme. Since it so much faster, e2fsck,
    tune2fs, debugfs, and resize2fs now also can support using creating an
    undo file.
  * Multiple e2fsck fixes
  * Multiple mke2fs improvements
  * Multiple debugfs improvements</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1469275200">- Rebuild the initrd if this package changes (and we are not
  building the -mini version)</changelog>
  <changelog author="dmueller@suse.com" date="1473681600">- fix last change</changelog>
  <changelog author="jack@suse.cz" date="1474891200">- Update to 1.43.3
  * mke2fs will use larger journal for large filesystems by default
  * e2fsck journal replay bugfixes
  * debugfs improvements and fixes
  * fix resize2fs migration of attribute blocks
- fuse2fs manpage is no longer installed when fuse2fs is not built</changelog>
  <changelog author="jack@suse.cz" date="1474977600">- Update download URL to poing to ftp.kernel.org which is more reliable</changelog>
  <changelog author="jack@suse.cz" date="1475496000">- Remove suse-module-tools dependency as it creates cycle in dependency list</changelog>
  <changelog author="jack@suse.cz" date="1488542400">- Update to 1.43.4
  * fix e2fsck handling of system.data extended attributes for small files
  * fixes in mke2fs -d
  * make mke2fs refuse absurdly large devices
  * make mke2fs properly report IO errors
  * clarify default in mke2fs questions
  * re-add uninit_bg to mke2fs.conf
  * add support for project quota to debugfs
  * improve xattr support in debugfs
  * remove mkfs.ext4dev and fsck.ext4dev</changelog>
  <changelog author="jack@suse.cz" date="1503316800">- Update to 1.43.5
  * fix e2fsck infinite loop when rebuilding encrypted directories
  * fix tune2fs support for enabling /disabling project quota
  * fixes in debugfs, dumpe2fs, e2fsck, tune2fs, and resize2fs for maliciously
  corrupted filesystems
  * fix e2fsck to verify invalid quota inode numbers
  * fix byte-swapping of backup superblocks
  * fix e2fsck -E bmap2extent to work for sparse files
  * fix e2fsck to correctly handle quota accounting for multiply claimed blocks
  * lots of other fixes</changelog>
  <changelog author="mmarek@suse.com" date="1503921600">- Add missing coreutils dependency for initrd macros (bsc#1055492).</changelog>
  <changelog author="jack@suse.cz" date="1504612800">- Update to 1.43.6
  * fix printing of quota inconsistency messages
  * fix out of bounds checks in e2fsck
  * optimize e2fsck CPU usage for large sparse files
  * increase inode size to 256 bytes if features require it
  * various UI fixes
  * updated translations</changelog>
  <changelog author="ro@suse.de" date="1505736000">- ignore errors for install-info calls in post scripts,
  otherwise installing with "--excludedocs" fails</changelog>
  <changelog author="jack@suse.cz" date="1510056000">- Update to 1.43.7
  * debugfs, tune2fs, fuse2fs fixes of error handling in journal replay
  * e2fsck and debugfs fixes so that malicious filesystems do not cause
  buffer overflows
  * fix corner cases in offline resizing in resize2fs
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1510660800">- Added %license tag to specfile</changelog>
  <changelog author="jack@suse.cz" date="1515499200">- Update to 1.43.8
  * add forgotten byteswap of some new superblock fields
  * fix use-after-free in e2fsck for corrupted root inode
  * fix floating point exception due to corrupted superblock in e2fsck
  * fix resize2fs's free block sanity checks
  * updated translations</changelog>
  <changelog author="jack@suse.cz" date="1516795200">- libext2fs-fix-build-failure-in-swapfs.c-on-big-endia.patch:
  libext2fs: fix build failure in swapfs.c on big-endian systems (bsc#1077420)</changelog>
  <changelog author="jack@suse.cz" date="1527854400">- Add references from old package:
  Fix resize2fs-Fix-32-64-bit-overflow-when-multiplying-by-blocks-cl.patch
  in 1.42.12 (bsc#1009532)
  Fix libext2fs-fix-potential-buffer-overflow-in-closefs.patch
  in 1.42.13 (bsc#918346 CVE-2015-1572)
  Fix libext2fs-avoid-buffer-overflow-if-s_first_meta_bg-i.patch
  in 1.42.12 (bsc#915402 CVE-2015-0247)
  Got specfile fix through Factory (bsc#960273)
  Fix libext2fs-don-t-ignore-fsync-errors.patch in 1.43.4 (bsc#1038194)</changelog>
  <changelog author="jack@suse.cz" date="1527854401">- libext2fs-Fix-fsync-2-detection.patch: libext2fs: Fix fsync(2) detection
  (bsc#1038194)</changelog>
</package>
<package pkgid="ae602fe7e1a691cf066736768ee92acf96ae8ab49bff570450c1cd27fe80e817" name="libfaxutil5_5_9" arch="x86_64">
  <version epoch="0" ver="5.5.9" rel="lp150.5.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1424260800">- dependency on tiff added
- build dependency on ghostscript</changelog>
  <changelog author="axel.braun@gmx.de" date="1424779200">- fix for bnc#856906 also for client package</changelog>
  <changelog author="pth@suse.de" date="1426161600">- Move libfaxutil into its own sub package (bnc#922017).</changelog>
  <changelog author="hpj@urpla.net" date="1426161601">- fix standalone hylafax+-client fallout</changelog>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
</package>
<package pkgid="75dcebb6476d65e981366fb9f260569bfa2cfd8c4c6e6c0fce5afc924495ce43" name="libfaxutil5_6_1" arch="x86_64">
  <version epoch="0" ver="5.6.1" rel="lp150.5.6.1"/>
  <changelog author="axel.braun@gmx.de" date="1430740800">- bnc#922402 update overwrites send-only settings to systemd config</changelog>
  <changelog author="axel.braun@gmx.de" date="1436875200">- release 5.5.6
  * add typerules suggestion for PNG conversion (19 Mar 2015)
  * support more than 256 pages in Class 1 ECM (26 Feb 2015)
  * cope with application/pdf being encoded with quoted-printable
  in faxmail (13 Feb 2015)
  * fix npages and totpages recording in sendq when proxied (31 Jan 2015)
  * fix EOF reading fault on badly-formatted MIME in faxmail (12 Jan 2015)
  * fix hi-res tagline imaging on 64-bit systems (10 Dec 2014)
  * add support for seqf.increment files to indicate seqf
  incrementation (14 Nov 2014)
  * add support to faxmail to decode long-wrapped base64 (11, 14-15 Oct 2014)
  * fix proxy setting of null taglines (16 Sep 2014)
  * fix ModemWaitForConnect configuration setting (16 Sep 2014)
  * add debug messages for the attempt to locate a suitable modem
  for jobs (12 Aug 2014)
  * fix missed data type for libtiff v4 (31 Jul, 11 Aug 2014)
  * fix faxsend segfault caused by an empty TagLine field introduced in
  alignment features added in 5.5.5 (25 Jul 2014)
  * pass job priority to the proxy server (21 Jul 2014)
  * add JobHostID feature (16, 29-31 Jul 2014)
  * fix instances where a NULL return of crypt() is ignored (13 Jul 2014)
  * improve support for utmpx on BSD (10 Jul 2014)
  * apply some downstream patches from FreeBSD ports (10 Jul 2014)
  * use ps2write in faxmail pdf converter if pswrite is missing (6 Jul 2014)
  * modify FIFO usage and remove CONFIG_FIFOBUG and CONFIG_OPENFIFO (5 Jul 2014)</changelog>
  <changelog author="pth@suse.de" date="1449835200">- Only run cron jobs if hylafax is configured (boo#958150)
- Clean up the spec file a bit.
- Fix build.
- Export CFLAGS and CXXFLAGS so that the flags are imported by
  configure.
- Use 'make -j1' to prevent parallel building.
- post and postun sections are always need.</changelog>
  <changelog author="pth@suse.de" date="1450094400">- Guard the inclusion of rchylafax+.</changelog>
  <changelog author="pth@suse.de" date="1450267200">- the proper name of the symlink is rchylafax.</changelog>
  <changelog author="axel.braun@gmx.de" date="1451390400">- hylafax 5.5.7
  * fix ntries counter to apply to pages instead of documents (5 Dec 2015)
  * reject jobs rejected by the proxy (18-19 Nov 2015)
  * add RewriteFaxName and RewriteFaxNumber jobcontrol features (14 Nov 2015)
  * improve Chinese translation (7 Oct 2015)
  * make faxsetup fix blind references in Fontmap.HylaFAX (3 Oct 2015)
  * use the remote time on proxy job submisisons (17 Sep 2015)
  * create more-secure hosts.hfaxd passwords by default (28 Aug 2015)
  * add admin login feature for faxstat (27 Aug 2015)
  * add ProxyJobTag jobcontrol feature (26 Aug 2015)
  * fix grevious calculation problem with Class1RestrictPoorSenders and
  Class1RestrictPoorDestinations (20 Aug 2015)
  * add application/binary MIMEConverter (17 Jul 2015)
  * fix DynamicConfig for Class 1 modem data format support (15 Jul 2015)
  * fix crash in tagline imaging due to glyph ascent (23 Jun 2015)
  * stop messing with the FIFO during installs and uninstalls (16 Jun 2015)
  * avoid conflicts with a TTY environment variable (15 Jun 2015)
  * fix dataTimeout esp for modems with large buffers in non-ECM (22 May 2015)
  * fix dataTimeout primarily affecting 7200 bps ECM sending (15 May 2015)</changelog>
  <changelog author="axel.braun@gmx.de" date="1454760000">- put texfmt manpage into the right package</changelog>
  <changelog author="axel.braun@gmx.de" date="1454846400">- Fixed file list entry for faxcron</changelog>
  <changelog author="axel.braun@gmx.de" date="1459684800">- hylafax+ 5.5.8
  * stop using mktemp() (5 Feb 2016)
  * fix LDAP authentication broken in 5.5.4 (24-26 Jan 2016)
  * reset senderinfo properly when receiving faxes (22 Jan 2016)
  * cope with V.21 HDLC carrier loss following +FRH:3 better (22, 26 Jan 2016)
  * increase the time Class1SwitchingCmd will wait for a response (14 Jan 2016)
  * undo faulty/incorrect previous "fix" to ntries/npages (13 Jan 2016)
  * fix short blocking problems in reading from the device (12 Jan 2016)</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- hylafax+ 5.5.9
  * fix a handful of compiler warnings for gcc v7 (13, 17 Feb 2017)
  * fix job rescheduling if the proxy connection attempt fails (13 Jul 2016)
  * increase the maximum number of triggers from 1024 to 4096 (13 Jul 2016)
  * eliminate faxq job priority "bounding" (13 Jul 2016)
  * attempt to detect premature non-ECM Phase C carrier loss (15 Jun 2016)
  * add missing recvq error message indications (6 May 2016)
  * fix tagtest support for multi-strip images (25 Mar 2016)
  * enhance textfmt wrapping to occur on word boundaries (24 Feb 2016)</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Drop hylafax+_rh.init
- Drop conditionals for distros we never build against in OBS
- Switch to LCMS2
- Add jbikgit-devel dependency so it is detected by configure</changelog>
  <changelog author="axel.braun@gmx.de" date="1509796800">- bnc1052195 localized Email notification chops german Umlauts
  correction in bin/notify common_functions dictionary
  * notification.diff</changelog>
  <changelog author="axel.braun@gmx.de" date="1519214400">- create user/group uucp
  adapt services to use uucp
  boo#1081899</changelog>
  <changelog author="jengelh@inai.de" date="1520164800">- Remove uucp user creation for pre-1500: aaa_base provides
  this user/group already.</changelog>
  <changelog author="axel.braun@gmx.de" date="1525867200">- boo#1091476: faxq must always run as real user root</changelog>
  <changelog author="axel.braun@gmx.de" date="1529236800">- boo#1091476: hfaxd needs to run as root
  otherwise error message '550 Cannot set privileges'</changelog>
  <changelog author="axel.braun@gmx.de" date="1534334400">- version 5.6.0
  * notification.diff removed (part of 5.6.0 now)
  * some adjustments to assist AIX 6.1 builds (29 Jun 2018)
  * initial support for systemd in faxsetup (29 Jun 2018)
  * fix RFC2047 encoding by notify (27 Jun, 3 Jul 2018)
  * add jobcontrol PageSize feature (27 Jun 2018)
  * fix various compiler warnings (27 Jun 2018)
  * fix build on musl-based distribution (27 Jun 2018)
  * don't wait forever after +FRH:3 (18 Jun 2018)
  * add -A and -B options to tagtest (22 Feb 2018)
  * make tagtest use the TSI and CallerID data, if available (21 Feb 2018)
  * make tagtest use the date from the TIFF tags, if available,
  instead of "now" (20 Feb 2018)
  * pass Content-Type name and Content-Disposition filename
  information to faxmail MIMEHandlers (15 Jan 2018)
  * fix faxmail transition between a message and external types (15 Jan 2018)
  * fix warning for major and minor macros move to sysmacros.h (19 Dec 2017)
  * avoid pagehandling from introducing some unnecessary EOM signals (15 Dec 2017)
  * improve proxy connection error handling and logging (5 Dec 2017)
  * fix for reproducible builds (11 Sep 2017)
  * fix quote escaping in client apps (5 Sep 2017)
  * treat callingnumber  as null (25, 31 Aug 2017)
  * add initial ModemGroup limits feature (24 Aug 2017)
  * add CLEANFAXDATA and BADFAXLINES TIFF tags for ECM receptions (10 Aug 2017)
  * pass the user's uid onto the session log file for sent faxes (25 Jul 2017)
  * improve job waits to minimize triggers (30 May 2017)
  * increase FIFO read size and add logging information (25 May 2017)
  * add ProxyTaglineFormat and ProxyTSI features (13 Mar 2017)</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Trim "enterprise" nonsense marketing.</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537185600">- use systemd template unit file for hylafax-faxgetty services
- fix services</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1537272000">- version 5.6.1:
  * CVE-2018-17141: fixes multiple JPEG vulnerabilities affecting
    fax page reception in JPEG format. Specially crafted input may
    have allowed remote execution of arbitrary code (boo#1109084)</changelog>
</package>
<package pkgid="f989e640f3c1737c9d7f407ef947b6159333bbb1710a89b598bb4ca234b490a7" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="b26e2ad96f50a10234504145f16093d6f16f7c71c54c4b7e7bf3e3a4355b6bc8" name="libfdisk-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="75ba1135d839810582147c3c544fc4fb34f2b31bdf2f18c204f10d1f132f730e" name="libfdisk-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="caea56a6919009cee07051d89a7047f39af845209885bf16ff670277ea9a8c5b" name="libfdisk-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="b9e7b4467dc25f7f42004e5d66b4c20687b19c25efb2d5d46048003c20f07e5c" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="f230bdf342a7ecbc54400c09601fc270fd283fab6604272160067b4fbdcc54da" name="libfdisk1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="7ce29b0b328aec482462b22f74996af51e3f44f49ffae6071e4343fa55da727f" name="libfreebl3" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="1c59ce4cc1d9abb4793d998ead543084b7428a03dcd3bfea8e4951a1de3cf2fa" name="libfreebl3-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="928f468aaac7b8e1255451ef8af9478fade494b78e358788bbd21bc5461a188c" name="libgarcon-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="57f8204a8482ab733885ae505e59c0525b26a89910902ec0c362663b07147f30" name="libgcrypt" arch="src">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="1e265e7e40f59956a7f755c82fe622bf3e0f6612140ddbb7ae876f97c65e7c27" name="libgcrypt-cavs" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="3ca20010c99914c6fdf6a78a1643fb92dc7377b28c9d10a1b0c9874fc11230a2" name="libgcrypt-devel" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="abe477879fadb68d039778192dbd26f46a503c145dd40defd4b8e00e70e4ad7e" name="libgcrypt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="bf6768bbaddcbf3b98d9cd5256a0aacb69375f3fbddfa44c2263a6191b86854d" name="libgcrypt20" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="3cbc8571cfe785d5ae7d5356d676160a4f5eb36c42fb7c9781d4718ae36a3264" name="libgcrypt20-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="afa3272c332600114bbf8c5f0ccdbd401051de395ae035940bc158608420fcad" name="libgcrypt20-hmac" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="d8f6f090b8c14e0f73b7bbe9eed6a205a19a26fe351043d5fab281c49c98da2e" name="libgcrypt20-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.8.2" rel="lp150.5.3.1"/>
  <changelog author="astieger@suse.com" date="1444478400">- follow-up to libgcrypt 1.6.4 update: sosuffix is 20.0.4</changelog>
  <changelog author="astieger@suse.com" date="1455019200">- update to 1.6.5:
  * CVE-2015-7511: Mitigate side-channel attack on ECDH with
    Weierstrass curves (boo#965902)</changelog>
  <changelog author="pjanouch@suse.de" date="1463400000">- make the -hmac package depend on the same version of the library,
  fixing bsc#979629 FIPS: system fails to reboot after installing
  fips pattern</changelog>
  <changelog author="pjanouch@suse.de" date="1463400001">- remove conditionals for unsupported distributions (before 13.2),
  it would not build anyway because of new dependencies</changelog>
  <changelog author="astieger@suse.com" date="1471435200">- libgcrypt 1.6.6:
  * fix CVE-2016-6313: Issue in the mixing functions of the random
    number generators allowed an attacker who obtained a number of
    bytes from the standard RNG to predict some of the next ouput.
    (bsc#994157)</changelog>
  <changelog author="mpluskal,vcizek,astieger}@suse.com" date="1471694400">- libgcrypt 1.7.3:
  * security issue already fixes with 1.6.6
  * Fix building of some asm modules with older compilers and CPUs.
  * ARMv8/AArch32 improvements for AES, GCM, SHA-256, and SHA-1.
- includes changes from libgcrypt 1.7.2:
  * Bug fixes:
  - Fix setting of the ECC cofactor if parameters are specified.
  - Fix memory leak in the ECC code.
  - Remove debug message about unsupported getrandom syscall.
  - Fix build problems related to AVX use.
  - Fix bus errors on ARM for Poly1305, ChaCha20, AES, and SHA-512.
  * Internal changes:
  - Improved fatal error message for wrong use of gcry_md_read.
  - Disallow symmetric encryption/decryption if key is not set.
- includes changes from 1.7.1:
  * Bug fixes:
  - Fix ecc_verify for cofactor support.
  - Fix portability bug when using gcc with Solaris 9 SPARC.
  - Build fix for OpenBSD/amd64
  - Add OIDs to the Serpent ciphers.
  * Internal changes:
  - Use getrandom system call on Linux if available.
  - Blinding is now also used for RSA signature creation.
  - Changed names of debug envvars
- includes changes from 1.7.0:
  * New algorithms and modes:
  - SHA3-224, SHA3-256, SHA3-384, SHA3-512, and MD2 hash algorithms.
  - SHAKE128 and SHAKE256 extendable-output hash algorithms.
  - ChaCha20 stream cipher.
  - Poly1305 message authentication algorithm
  - ChaCha20-Poly1305 Authenticated Encryption with Associated Data
    mode.
  - OCB mode.
  - HMAC-MD2 for use by legacy applications.
  * New curves for ECC:
  - Curve25519.
  - sec256k1.
  - GOST R 34.10-2001 and GOST R 34.10-2012.
  * Performance:
  - Improved performance of KDF functions.
  - Assembler optimized implementations of Blowfish and Serpent on
    ARM.
  - Assembler optimized implementation of 3DES on x86.
  - Improved AES using the SSSE3 based vector permutation method by
    Mike Hamburg.
  - AVX/BMI is used for SHA-1 and SHA-256 on x86.  This is for SHA-1
    about 20% faster than SSSE3 and more than 100% faster than the
    generic C implementation.
  - 40% speedup for SHA-512 and 72% for SHA-1 on ARM Cortex-A8.
  - 60-90% speedup for Whirlpool on x86.
  - 300% speedup for RIPE MD-160.
  - Up to 11 times speedup for CRC functions on x86.
  * Other features:
  - Improved ECDSA and FIPS 186-4 compliance.
  - Support for Montgomery curves.
  - gcry_cipher_set_sbox to tweak S-boxes of the gost28147 cipher
    algorithm.
  - gcry_mpi_ec_sub to subtract two points on a curve.
  - gcry_mpi_ec_decode_point to decode an MPI into a point object.
  - Emulation for broken Whirlpool code prior to 1.6.0.  [from 1.6.1]
  - Flag "pkcs1-raw" to enable PCKS#1 padding with a user supplied
    hash part.
  - Parameter "saltlen" to set a non-default salt length for RSA PSS.
  - A SP800-90A conforming DRNG replaces the former X9.31 alternative
    random number generator.
  - Map deprecated RSA algo number to the RSA algo number for better
    backward compatibility. [from 1.6.2]
  - Use ciphertext blinding for Elgamal decryption [CVE-2014-3591].
    See http://www.cs.tau.ac.il/~tromer/radioexp/ for details.
    [from 1.6.3]
  - Fixed data-dependent timing variations in modular exponentiation
    [related to CVE-2015-0837, Last-Level Cache Side-Channel Attacks
    are Practical]. [from 1.6.3]
  - Flag "no-keytest" for ECC key generation.  Due to a bug in
    the parser that flag will also be accepted but ignored by older
    version of Libgcrypt. [from 1.6.4]
  - Speed up the random number generator by requiring less extra
    seeding. [from 1.6.4]
  - Always verify a created RSA signature to avoid private key leaks
    due to hardware failures. [from 1.6.4]
  - Mitigate side-channel attack on ECDH with Weierstrass curves
    [CVE-2015-7511].  See http://www.cs.tau.ac.IL/~tromer/ecdh/ for
    details. [from 1.6.5]
  * Internal changes:
  - Moved locking out to libgpg-error.
  - Support of the SYSROOT envvar in the build system.
  - Refactor some code.
  - The availability of a 64 bit integer type is now mandatory.
  * Bug fixes:
  - Fixed message digest lookup by OID (regression in 1.6.0).
  - Fixed a build problem on NetBSD
  - Fixed some asm build problems and feature detection bugs.
  * Interface changes relative to the 1.6.0 release:
  gcry_cipher_final               NEW macro.
  GCRY_CIPHER_MODE_CFB8           NEW constant.
  GCRY_CIPHER_MODE_OCB            NEW.
  GCRY_CIPHER_MODE_POLY1305       NEW.
  gcry_cipher_set_sbox            NEW macro.
  gcry_mac_get_algo               NEW.
  GCRY_MAC_HMAC_MD2               NEW.
  GCRY_MAC_HMAC_SHA3_224          NEW.
  GCRY_MAC_HMAC_SHA3_256          NEW.
  GCRY_MAC_HMAC_SHA3_384          NEW.
  GCRY_MAC_HMAC_SHA3_512          NEW.
  GCRY_MAC_POLY1305               NEW.
  GCRY_MAC_POLY1305_AES           NEW.
  GCRY_MAC_POLY1305_CAMELLIA      NEW.
  GCRY_MAC_POLY1305_SEED          NEW.
  GCRY_MAC_POLY1305_SERPENT       NEW.
  GCRY_MAC_POLY1305_TWOFISH       NEW.
  gcry_md_extract                 NEW.
  GCRY_MD_FLAG_BUGEMU1            NEW [from 1.6.1].
  GCRY_MD_GOSTR3411_CP            NEW.
  GCRY_MD_SHA3_224                NEW.
  GCRY_MD_SHA3_256                NEW.
  GCRY_MD_SHA3_384                NEW.
  GCRY_MD_SHA3_512                NEW.
  GCRY_MD_SHAKE128                NEW.
  GCRY_MD_SHAKE256                NEW.
  gcry_mpi_ec_decode_point        NEW.
  gcry_mpi_ec_sub                 NEW.
  GCRY_PK_EDDSA                   NEW constant.
  GCRYCTL_GET_TAGLEN              NEW.
  GCRYCTL_SET_SBOX                NEW.
  GCRYCTL_SET_TAGLEN              NEW.
- Apply libgcrypt-1.6.3-aliasing.patch only on big-endian
  architectures
- update drbg_test.patch and install cavs testing directory again
- As DRBG is upstream, drop pateches:
  v9-0001-SP800-90A-Deterministic-Random-Bit-Generator.patch
  0002-Compile-DRBG.patch
  0003-Function-definitions-of-interfaces-for-random.c.patch
  0004-Invoke-DRBG-from-common-libgcrypt-RNG-code.patch
  0005-Function-definitions-for-gcry_control-callbacks.patch
  0006-DRBG-specific-gcry_control-requests.patch
  v9-0007-User-interface-to-DRBG.patch
  libgcrypt-fix-rng.patch
- drop obsolete:
  libgcrypt-fips-dsa.patch
  libgcrypt-fips_ecdsa.patch</changelog>
  <changelog author="astieger@suse.com" date="1481630400">- libgcrypt 1.7.4:
  * ARMv8/AArch32 performance improvements for AES, GCM, SHA-256,
    and SHA-1.
  * Add ARMv8/AArch32 assembly implementation for Twofish and
    Camellia.
  * Add bulk processing implementation for ARMv8/AArch32.
  * Add Stribog OIDs.
  * Improve the DRBG performance and sync the code with the Linux
    version.
  * When secure memory is requested by the MPI functions or by
    gcry_xmalloc_secure, they do not anymore lead to a fatal error
    if the secure memory pool is used up.  Instead new pools are
    allocated as needed.  These new pools are not protected against
    being swapped out (mlock can't be used). Mitigation for
    minor confidentiality issues is encryption swap space.
  * Fix GOST 28147 CryptoPro-B S-box.
  * Fix error code handling of mlock calls.</changelog>
  <changelog author="astieger@suse.com" date="1481803200">- libgcrypt 1.7.5:
  * Fix regression in mlock detection introduced with 1.7.4</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- libgcrypt 1.7.6:
  * Fix counter operand from read-only to read/write
  * Fix too large jump alignment in mpih-rshift</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1496404800">- Added libgcrypt-secure-EdDSA-session-key.patch [bsc#1042326]
  * Store the session key in secure memory to ensure that constant
    time point operations are used in the MPI library.</changelog>
  <changelog author="astieger@suse.com" date="1496577600">- libgcrypt 1.7.7:
  * Fix possible timing attack on EdDSA session key (previously
    patched, drop libgcrypt-secure-EdDSA-session-key.patch)
  * Fix long standing bug in secure memory implementation which
    could lead to a segv on free</changelog>
  <changelog author="astieger@suse.com" date="1498737600">- libgcrypt 1.7.8:
  * CVE-2017-7526: Mitigate a flush+reload side-channel attack on
    RSA secret keys (bsc#1046607)</changelog>
  <changelog author="astieger@suse.com" date="1500638400">- libgcrypt 1.8.0:
  * New cipher mode XTS
  * New hash function Blake-2
  * New function gcry_mpi_point_copy.
  * New function gcry_get_config.
  * GCRYCTL_REINIT_SYSCALL_CLAMP allows to init nPth after Libgcrypt.
  * New gobal configuration file /etc/gcrypt/random.conf.
  * GCRYCTL_PRINT_CONFIG does now also print build information for
    libgpg-error and the used compiler version.
  * GCRY_CIPHER_MODE_CFB8 is now supported.
  * A jitter based entropy collector is now used in addition to the
    other entropy collectors.
  * Optimized gcry_md_hash_buffers for SHA-256 and SHA-512.
    random pool lock).
  * Interface changes relative to the 1.7.0 release:
    gcry_get_config                 NEW function.
    gcry_mpi_point_copy             NEW function.
    GCRYCTL_REINIT_SYSCALL_CLAMP    NEW macro.
    GCRY_MD_BLAKE2B_512             NEW constant.
    GCRY_MD_BLAKE2B_384             NEW constant.
    GCRY_MD_BLAKE2B_256             NEW constant.
    GCRY_MD_BLAKE2B_160             NEW constant.
    GCRY_MD_BLAKE2S_256             NEW constant.
    GCRY_MD_BLAKE2S_224             NEW constant.
    GCRY_MD_BLAKE2S_160             NEW constant.
    GCRY_MD_BLAKE2S_128             NEW constant.
    GCRY_CIPHER_MODE_XTS            NEW constant.
    gcry_md_info                    DEPRECATED.
- Refresh patch libgcrypt-1.6.3-aliasing.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- RPM group fixes.</changelog>
  <changelog author="astieger@suse.com" date="1503921600">- libgcrypt 1.8.1:
  * Mitigate a local side-channel attack on Curve25519 dubbed "May
    the Fourth be With You" CVE-2017-0379 bsc#1055837
  * Add more extra bytes to the pool after reading a seed file
  * Add the OID SHA384WithECDSA from RFC-7427 to SHA-384
  * Fix build problems with the Jitter RNG
  * Fix assembler code build problems on Rasbian (ARMv8/AArch32-CE)</changelog>
  <changelog author="astieger@suse.com" date="1513166400">- libgcrypt 1.8.2:
  * Fix fatal out of secure memory status in the s-expression
    parser on heavy loaded systems.
  * Add auto expand secmem feature or use by GnuPG 2.2.4</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1522324800">- Extended the fipsdrv dsa-sign and dsa-verify commands with the
  - -algo parameter for the FIPS testing of DSA SigVer and SigGen
  (bsc#1064455).
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-sign.patch
  * Added libgcrypt-fipsdrv-enable-algo-for-dsa-verify.patch</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1525262400">- Suggest libgcrypt20-hmac for package libgcrypt20 to ensure they
  are installed in the right order. [bsc#1090766]</changelog>
  <changelog author="psimons@suse.com" date="1529496000">- Apply "CVE-2018-0495.patch" from upstream to enable blinding for
  ECDSA signing. This change mitigates a novel side-channel attack.
  [CVE-2018-0495, bsc#1097410]</changelog>
</package>
<package pkgid="0eff066e37298f0926d6ec06ef25575d9a91f5ca72cd3f57e42d1a00364e1af1" name="libgd3" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="be6599339e5818198f4e074fddeb1e53101fa548bf50e8cc81d8d4769fcc3fa0" name="libgd3-32bit" arch="x86_64">
  <version epoch="0" ver="2.2.5" rel="lp150.3.3.1"/>
  <changelog author="pgajdos@suse.com" date="1397131200">- build against libtiff and libvpx</changelog>
  <changelog author="tchvatal@suse.com" date="1397736000">- Add tiff and vpx to the devel deps as it is in .pc file.</changelog>
  <changelog author="meissner@suse.com" date="1403870400">- split out libgd3, so libgd2 could be installed in parallel.</changelog>
  <changelog author="jengelh@inai.de" date="1409054400">- Resolve build failure with automake-1.14</changelog>
  <changelog author="mpluskal@suse.com" date="1425124800">- Cleanup spec file with spec-cleaner
- No longer needed patches
  * gd-2.1.0-CVE-2014-2497.patch
  * gd-autoconf.patch
- Update to 2.1.1
  * changelog provided only as commit log (see Changelog)
  * fix for CVE-2014-2497</changelog>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1431432000">- Added patch gd-libvpx.patch to enable build against libvpx &gt;= 1.4,
  new VPX_ prefixed namespaces are available since libvpx = 0.9.1.</changelog>
  <changelog author="pgajdos@suse.com" date="1456833600">- add missing config/getver.pl [bsc#965190]</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5116 [bsc#982176]
    + gd-CVE-2016-5116.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1471953600">- security update:
  * CVE-2016-6132 [bsc#987577]
    + gd-CVE-2016-6132.patch
  * CVE-2016-6214 [bsc#991436]
    + gd-CVE-2016-6214.patch
  * CVE-2016-6905 [bsc#995034]
    + gd-CVE-2016-6905.patch</changelog>
  <changelog author="badshah400@gmail.com" date="1475150400">- Add gd-disable-freetype27-failed-tests.patch: Disable for now
  tests failing against freetype &gt;= 2.7 for being too exact
  (gh#libgd/libgd#302). The failures have been understood by
  upstream to be due to minor differences between test images and
  those generated when freeetype &gt;= 2.7 is used to build gd.</changelog>
  <changelog author="badshah400@gmail.com" date="1475236800">- Update to version 2.2.3:
  + Security fixes:
  - Php bug#72339, Integer Overflow in _gd2GetHeader
    (CVE-2016-5766)
  - Issue gh/libgd/libgd#247: A read out-of-bands was found in
    the parsing of TGA files (CVE-2016-6132)
  - Issue gh/libgd/libgd#247: Buffer over-read issue when
    parsing crafted TGA file (CVE-2016-6214)
  - Issue gh/libgd/libgd#248: fix Out-Of-Bounds Read in
    read_image_tga
  - Integer overflow error within _gdContributionsAlloc()
    (CVE-2016-6207)
  - Fix php bug#72494, invalid color index not handled, can lead
    to crash (CVE-2016-6128)
  + Improve color check for CropThreshold
  + gdImageCopyResampled has been improved. Better handling of
    images with alpha channel, also brings libgd in sync with
    php's bundled gd.
- Drop patches:
  + gd-CVE-2016-5116.patch: upstreamed
  + gd-CVE-2016-6132.patch: upstreamed
  + gd-CVE-2016-6214.patch: upstreamed
  + gd-CVE-2016-6905.patch: upstreamed
  + gd-libvpx.patch: vpx support dropped.
- Add BuildRequires for automake and autoconf since
  gd-disable-freetype27-failed-tests.patch touches makefiles.
- Drop getver.pl from source: included in upstream tarball.
- Add "-msse -mfpmath=sse" to CFLAGS to fix tests on ix86
  architectures.
- Add "-ffp-contract=off" to CFLAGS for non-ix86 arch (ppc, arm)
  to fix a test: see gh#libgd/libgd#278.
- Add gd-test-unintialized-var.patch to fix an uninitialised
  variable in tests/gd2/gd2_read.c to prevent it from compiling
  with -Werror (only causes problems in no ix86 arch
  surprisingly); patch sent upstream.
- Rebase gd-disable-freetype27-failed-tests.patch for updated
  version.
- Update URL and Source to project's new github URL's.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198400">- Honour %optflags correctly.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1481198401">- Support webp format, BuildRequires libwebp-devel</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- devel package also require libwebp-devel</changelog>
  <changelog author="tchvatal@suse.com" date="1499428800">- Version update to 2.2.4:
  * gdImageCreate() doesn't check for oversized images and as such is prone
    to DoS vulnerabilities. (CVE-2016-9317) bsc#1022283
  * double-free in gdImageWebPtr() (CVE-2016-6912) bsc#1022284
  * potential unsigned underflow in gd_interpolation.c (CVE-2016-10166)
    bsc#1022263
  * DOS vulnerability in gdImageCreateFromGd2Ctx() (CVE-2016-10167)
    bsc#1022264
  * Signed Integer Overflow gd_io.c (CVE-2016-10168) bsc#1022265
- Remove patches merged/obsoleted by upstream:
  * gd-config.patch
  * gd-disable-freetype27-failed-tests.patch
  * gd-test-unintialized-var.patch
- Add patch gd-freetype.patch taking patch from upstream for
  freetype 2.7</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Add patch gd-rounding.patch
- Set again the cflags so other archs do not fail testsuite</changelog>
  <changelog author="lnussel@suse.de" date="1502798400">- Don't fail gdimagegrayscale/basic on SLE15 (boo#1053825)</changelog>
  <changelog author="pgajdos@suse.com" date="1504612800">- Version update to 2.2.5:
  [#]## Security
  - Double-free in gdImagePngPtr(). (CVE-2017-6362)
  - Buffer over-read into uninitialized memory. (CVE-2017-7890)
  [#]## Fixed
  - Fix #109: XBM reading fails with printed error
  - Fix #338: Fatal and normal libjpeg/ibpng errors not distinguishable
  - Fix #357: 2.2.4: Segfault in test suite
  - Fix #386: gdImageGrayScale() may produce colors
  - Fix #406: webpng -i removes the transparent color
  - Fix Coverity #155475: Failure to restore alphaBlendingFlag
  - Fix Coverity #155476: potential resource leak
  - Fix several build issues and test failures
  - Fix and reenable optimized support for reading 1 bps TIFFs
  [#]## Added
  - The native MSVC buildchain now supports libtiff and most executables
- removed patches (upstreamed):
  . gd-freetype.patch
  . gd-rounding.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516622400">- security update:
  * CVE-2018-5711 [bsc#1076391]
    + gd-CVE-2018-5711.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + gd-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="d8f55a65bd21726d818e5b2a42646c3e6fd1233270e30a97c19ee94dd0e87413" name="libgdm1" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="5204355783b8e45baf1a23be2eee90ce7ba8bd96d04dadd05d25e18a814d0535" name="libgeotiff2" arch="x86_64">
  <version epoch="0" ver="1.4.2" rel="lp150.2.3.1"/>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.2.5" date="1246017600">- Updated to 1.2.5
- Using parts of spec file from PackMan for improved quality</changelog>
  <changelog author="Dirk St&#xF6;cker &lt;opensuse@dstoecker.de&gt; 1.3.0" date="1278590400">- Updated to 1.3.0</changelog>
  <changelog author="Hans-Peter Jansen &lt;hpj@urpla.net&gt;" date="1302350400">- fix 64 bit issues, enable debug</changelog>
  <changelog author="Rene van Paassen&lt;rene.vanpaassen@gmail.com&gt;" date="1302523200">- removed now superfluous "%exclude %{_libdir}/debug" for i586</changelog>
  <changelog author="Michael Behrisch &lt;behrisch@users.sf.net&gt;" date="1332417600">- added gcc build dependency
- removed unneeded data dir fix for non-Suse</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1338033600">- Updated to 1.4.0</changelog>
  <changelog author="Angelos Tzotsos &lt;tzotsos@opensuse.org&gt;" date="1339761600">- Fix in pkgconfig file</changelog>
  <changelog author="mpluskal@suse.com" date="1422705600">- Cleanup spec file using spec-cleaner
- Remove commented out patch
- Add build dependency on graphviz to enable images in
  documentation
- Add build dependency on pkg-config to enable dependency generation
  of .pc file
- Update to 1.4.1
  * CMake: Fix up SONAME and VERSION to better
    match configure.ac
  * csv/datum_shift_pref.csv: revert change in preferred datum shift
    for Pulkovo 1942(58) related to ticket #1851 - not appropriate.
  * Preparing 1.4.1 release.
  * csv/datum_shift_pref.csv: Update Pulkova 1942(58) to use a
    particular transformation (#52).
  * bin/geotifcp.c: added B, L, C and M flags from tiffcp (#68)"
  * geo_print.c: clarify that the buffer passed to read methods is only
    guaranteed to be 1024 bytes long (#62).
  * CMake: Support for INCODE build. If you need INCODE support,
    with the definitions compiled into headers, use CMake as your
    configuration/build platform.
  * csv: Override three Brazilian datum shifts on behalf of Daniel
    Miranda and the OSGeo Brazilian Chapter.
  * csv: Upgrade to EPSG 8.5
  * INCODE: Adapt Ben Adler's patch in #66 to add INCODE support to the
    CMake configuration
  * geo_normalize.c: #59, better Mercator_2SP support
  * geotifcp: Do not segfault when a TIFF file has WhitePoint set #65
  * geo_names.c: fix #67 -- add VerticalUnitsGeoKey
  * add_esri_column.py: manually replace D_SIRGAS-Chile by D_Peru96 for GCS_Peru96. Likely an error in the FileGDB SDK db (#63)
  * csv: Upgrade to EPSG 8.4
  * tiffcp: Add bigtiff output support with the -8 flag like tiffcp.  Contributed by
    Mohannad Al-Durgham (nwgeo.com).
  * csv: Upgrade to EPSG 8.2
  * csv/datum_shift_pref.csv: Force OSGB 1936 preferred datum shift.
    (http://trac.osgeo.org/gdal/ticket/4597)</changelog>
  <changelog author="mpluskal@suse.com" date="1431172800">- Do not build or ship static libraries and .la files
- Remove useless conditions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475236800">- Switched download link to OSGeo server</changelog>
  <changelog author="tzotsos@opensuse.org" date="1475323200">- Update to 1.4.2
  * update to EPSG v8.9 database
  * cleanups and security fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1489320000">- Small packaging cleanup
- Prepare version update for Leap and backports (boo#1029595)</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Fix incorrect library (boo#1094802)</changelog>
</package>
<package pkgid="2e02212323a3431fc3d686c39d6ea57c2ee00b1ccb2bdea42e7d09f169e43c3d" name="libgit2" arch="src">
  <version epoch="0" ver="0.26.6" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.21.1:
  + Added a new config snapshotting API to fix race issues when
    different applications (e.g. Git and a libgit2 client) access
    the same repository simultaneously.
  + Added reflog support to all APIs that could alter a reference.
  + Avoided race conditions when updating references.
  + Converted all APIs that output string data to use git_buf
    objects for the return value.
  + Added standard git_&lt;object&gt;_init_options functions to
    initialize options structures when static initialization is not
    possible, and renamed options structures to standard
    git_&lt;object&gt;_options (replacing _opts suffix used in some
    places).
  + Improved use of const on pointers in many APIs (which may
    affect some bindings).
  + Replaced use of oid with simply id for references to
    git_oid value.s
  + Previously, when a callback function returned an error value
    (i.e. non-zero), libgit2 converted it to GIT_EUSER for the
    parent function's return value. Now, libgit2 tries to pass
    through the callback's return value all the way back to the
    caller.
  + All inline functions were eliminated from the public libgit2
    API.
  + Removed all Apache licensed code from library.
  + For more changes, please see detailed ChangeLog in package.
- Rename libgit2-0 subpackage to libgit2-21, following upstreams
  soname change (another project believing the soname should match
  the version).
- Enable SSH Support:
  + Add pkgconfig(libssh2) BuildRequires.
  + Pass -DUSE_SSH:BOOL=ON to cmake call in order to enable SSH
    support.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Add baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 0.22.1:
  + The following (critical) fixes have been backported to this
    maintenance release:
  - checkout: introduce git_checkout_perfdata.
  - git_path_join_unrooted: return base len.
  - checkout: don't recreate previous directory.
  - checkout tests: nasty symlinks.
  - checkout: drop newline in error message.
  - checkout: remove files before writing new ones.
  - checkout tests: emulate p_realpath poorly on Win32.
  - checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
  + git_signature_new() now requires a non-empty email address.
  + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
  + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
    TLSv1 in OpenSSL.
  + The fetch behavior of remotes with autotag set to
    GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
    1.9.0 and later. In this mode, libgit2 now fetches all tags in
    addition to whatever else needs to be fetched.
  + git_checkout() now handles case-changing renames correctly on
    case-insensitive filesystems; for example renaming "readme" to
    "README".
  + The search for libssh2 is now done via pkg-config instead of a
    custom search of a few directories.
  + Add support for core.protectHFS and core.protectNTFS. Add more
    validation for filenames which we write such as references.
  + The local transport now generates textual progress output like
    git-upload-pack does ("counting objects").
  + git_checkout_index() can now check out an in-memory index that
    is not necessarily the repository's index, so you may check out
    an index that was produced by git_merge and friends while
    retaining the cached information.
  + Remove the default timeout for receiving / sending data over
    HTTP using the WinHTTP transport layer.
  + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
    systems.
  + Provide built-in objects for the empty blob (e69de29) and empty
    tree (4b825dc) objects.
  + The index' tree cache is now filled upon read-tree and
    write-tree and the cache is written to disk.
  + LF -&gt; CRLF filter refuses to handle mixed-EOL files.
  + LF -&gt; CRLF filter now runs when * text = auto (with Git for
    Windows 1.9.4).
  + File unlocks are atomic again via rename. Read-only files on
    Windows are made read-write if necessary.
  + Share open packfiles across repositories to share descriptors
    and mmaps.
  + Use a map for the treebuilder, making insertion O(1).
  + The build system now accepts an option EMBED_SSH_PATH which
    when set tells it to include a copy of libssh2 at the given
    location. This is enabled for MSVC.
  + Add support for refspecs with the asterisk in the middle of a
    pattern.
  + Fetching now performs opportunistic updates. To achieve this,
    we introduce a difference between active and passive refspecs,
    which make git_remote_download() and git_remote_fetch() to take
    a list of resfpecs to be the active list, similarly to how git
    fetch accepts a list on the command-line.
  + The THREADSAFE option to build libgit2 with threading support
    has been flipped to be on by default.
  + The remote object has learnt to prune remote-tracking branches.
    If the remote is configured to do so, this will happen via
    git_remote_fetch(). You can also call git_remote_prune() after
    connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="dimstar@opensuse.org" date="1438084800">- Update to version 0.23.0:
  + Changes or improvements:
  - Patience and minimal diff drivers can now be used for merges.
  - Merges can now ignore whitespace changes.
  - Updated binary identification in CRLF filtering to avoid
    false positives in UTF-8 files.
  - Rename and copy detection is enabled for small files.
  - Checkout can now handle an initial checkout of a repository,
    making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
    clone.
  - The signature parameter in the ref-modifying functions has
    been removed. Use git_repository_set_ident() and
    git_repository_ident() to override the signature to be used.
  - The local transport now auto-scales the number of threads to
    use when creating the packfile instead of sticking to one.
  - Reference renaming now uses the right id for the old value.
  - The annotated version of branch creation, HEAD detaching and
    reset allow for specifying the expression from the user to be
    put into the reflog.
  - git_rebase_commit now returns GIT_EUNMERGED when you attempt
    to commit with unstaged changes.
  - On Mac OS X, we now use SecureTransport to provide the
    cryptographic support for HTTPS connections insead of
    OpenSSL.
  - Checkout can now accept an index for the baseline
    computations via the baseline_index member.
  - The configuration for fetching is no longer stored inside the
    git_remote struct but has been moved to a git_fetch_options.
    The remote functions now take these options or the callbacks
    instead of setting them beforehand.
  - git_submodule instances are no longer cached or shared across
    lookup. Each submodule represents the configuration at the
    time of loading.
  - The index now uses diffs for add_all() and update_all() which
    gives it a speed boost and closer semantics to git.
  - The ssh transport now reports the stderr output from the
    server as the error message, which allows you to get the
    "repository not found" messages.
  - git_index_conflict_add() will remove staged entries that
    exist for conflicted paths.
  - The flags for a git_diff_file will now have the
    GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
    of the diff. This is useful for understanding whether a side
    of the diff exists in the presence of a conflict.
  - The constructor for a write-stream into the odb now takes
    git_off_t instead of size_t for the size of the blob, which
    allows putting large files into the odb on 32-bit systems.
  - The remote's push and pull URLs now honor the
    url.$URL.insteadOf configuration. This allows modifying URL
    prefixes to a custom value via gitconfig.
  - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
    and git_diff_buffers now accept a new binary callback of type
    git_diff_binary_cb that includes the binary diff information.
  - The race condition mitigations described in racy-git.txt have
    been implemented.
  - If libcurl is installed, we will use it to connect to HTTP(S)
    servers.
  + Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libgit2 0.23.2:
  * documentation fixes
  * diff: don't error out on an invalid regex
  * http: propagate the credentials callback's error code
  * Fix bug in git_smart__push: push_transfer_progress cb is never called
  * remote: don't confuse tag auto-follow rules with refspec matching
  * curl: use the most secure auth method for the proxy
  * Forcing libssh2 lib location
  * fix duplicate basenames to support older VS
- includes changes from 0.23.1:
  * Stage an unregistered submodule in _add_bypath()
  * filebuf: remove lockfile upon rename errors
  * Increase required version of cmake to 2.8
  * Handle ssh:// and git:// urls containing a '~' character.
  * documentation updates
  * submodule URL handling fixes
  * index: allow add_bypath to update submodules
  * blob: fail to create a blob from a dir with EDIRECTORY
  * submodule: lookup the submodule by path if available
  * submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc.</changelog>
  <changelog author="astieger@suse.com" date="1444219200">- libgit2 0.23.3, containing critical fixes:
  * blame: guard xdiff calls for large files
  * diff: don't feed large files to xdiff
  * merge_file: treat large files as binary
  * xdiff: convert size variables to size_t
  * GITERR_CHECK_ALLOC_ADDn: multi-arg adders</changelog>
  <changelog author="astieger@suse.com" date="1448884800">- libgit2 0.23.4:
  * various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 0.24.0:
  + Custom filters can now be registered with wildcard attributes,
    for example filter=*. Consumers should examine the attributes
    parameter of the check function for details.
  + Symlinks are now followed when locking a file, which can be
    necessary when multiple worktrees share a base repository.
  + You can now set your own user-agent to be sent for HTTP
    requests by using the GIT_OPT_SET_USER_AGENT with
    git_libgit2_opts().
  + You can set custom HTTP header fields to be sent along with
    requests by passing them in the fetch and push options.
  + Tree objects are now assumed to be sorted. If a tree is not
    correctly formed, it will give bad results. This is the git
    approach and cuts a significant amount of time when reading the
    trees.
  + Filter registration is now protected against concurrent
    registration.
  + Filenames which are not valid on Windows in an index no longer
    cause to fail to parse it on that OS.
  + Rebases can now be performed purely in-memory, without touching
    the repository's workdir.
  + When adding objects to the index, or when creating new tree or
    commit objects, the inputs are validated to ensure that the
    dependent objects exist and are of the correct type. This
    object validation can be disabled with the
    GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
  + The WinHTTP transport's handling of bad credentials now behaves
    like the others, asking for credentials again.
  + Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1461153600">- libgit2 0.24.1:
  + various compatible backported bug fixes</changelog>
  <changelog author="sreeves@suse.com" date="1462795200">- Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- libgit2 0.24.3, fixing the following vulnerabilities:
  * CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
    object files (bsc#1003810)
  * various bug fixes from the 0.24.2 release</changelog>
  <changelog author="astieger@suse.com" date="1484136000">- libgit2 0.24.6, including the following security fixes:
  * bsc#1019036: edge cases in the Git Smart Protocol can lead to
    attempting to parse outside of the buffer
    CVE-2016-10128,CVE-2016-10129
  * bsc#1019037: MITM possible due to lack of parameter for
    certificate parameter
    CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
  * add support for OpenSSL 1.1.0 for BIO filter</changelog>
  <changelog author="astieger@suse.com" date="1484136001">- libgit2 0.25.1
- New features and functionality:
  * repository discovery features
  * Support for reading and writing git index v4 files
  * Improve the performance of the revwalk
  * reference db concurrency improvements
  * Nanosecond resolution is now activated by default
  * restrict the set of ciphers used with OpenSSL by default.
  * user-registered merge drivers
  * built-in support for the union merge driver
  * callers can now specify proxy settings
  * New API for creating signed commits
  * New API for creating blobs from streams
  * New flags for opening repositories
  * New functions for various git operations
- Removed API:
  * git_blob_create_fromchunks() has been removed in  favour of
    git_blob_create_fromstream()
- Changed API:
  * git_packbuilder_object_count and git_packbuilder_written now
    return a size_t instead of a uint32_t for more thorough
    compatibility with the rest of the library.
  * git_packbuiler_progress now provides explicitly sized uint32_t
    values instead of unsigned int.
  * git_diff_file now includes an id_abbrev field that reflects the
    number of nibbles set in the id field.
  * git_odb_backend now has a freshen function pointer
  * git_remote_connect() now accepts proxy options.</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- libgit2 0.26.0:
  * Support for opening, creating and modifying worktrees.
  * Can now detect SHA1 collisions resulting from the SHAttered
    attack CVE-2005-4900
  * Fix for missing implementation of `git_merge_driver_source` getters
  * Fix for installed pkg-config file being broken when the prefix
    contains spaces
  * Can now detect when the hashsum of on-disk objects does not
    match their expected hashsum.
  * Support open-ended ranges (e.g. "master..", "...master") in
    revision range parsing code.
  * Correctly compute ignores with leading "/" in subdirectories.
  * Optionally call `fsync` on loose objects, packfiles and their
    indexes, loose references and packed reference files.
  * Builds against OpenSSL v1.1 and against LibreSSL.
  * Improvements for reading index v4 files.
  * API additions and incompatible API changes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510574400">- remove unneeded dependency (python is used only for testsuite, which
    isn't used during build)</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 0.26.3:
  * Fix cloning of the libgit2 project with git clone --recursive by removing an
    invalid submodule from our testing data.
  * Fix endianness of the port in p_getaddrinfo().
  * Fix handling of negative gitignore rules with wildcards.
  * Fix handling of case-insensitive negative gitignore rules.
  * Fix resolving references to a tag if the reference is stored with its fully
    resolved OID in the packed-refs file.
  * Fix checkout not treating worktree files as modified when only their mode has
    changed.
  * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
  * Fixes memory handling issues when reading crafted repository index files.
    The issues allow for possible denial of service due to allocation of large
    memory and out-of-bound reads.
    (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
  * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
    vulnerable to security issues in the prior version.</changelog>
  <changelog author="mgorse@suse.com" date="1532606400">- Update to version 0.26.5 (boo#1095219 boo#1100612 boo#1100613):
  * This is a security release fixing out-of-bounds reads when
    reading objects from a packfile. This corresponds to
    CVE-2018-10887 and CVE-2018-10888, which were both reported by
    Riccardo Schirone.
  * Changes in v0.26.4:
  * This is a security release fixing insufficient validation of
    submodule names (CVE-2018-11235, reported by Etienne
    Stalmans) and disallows `.gitmodules` files as symlinks.</changelog>
  <changelog author="astieger@suse.com" date="1534161600">- libgit2 0.26.6:
  * fix out-of-bounds reads when processing smart-protocol "ng"
    packets (bsc#1104641)</changelog>
</package>
<package pkgid="dfcf9970390abae10c0788646023cefdd60e7350a8d845cf4386b2fcfe0ec41c" name="libgit2-26" arch="x86_64">
  <version epoch="0" ver="0.26.6" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.21.1:
  + Added a new config snapshotting API to fix race issues when
    different applications (e.g. Git and a libgit2 client) access
    the same repository simultaneously.
  + Added reflog support to all APIs that could alter a reference.
  + Avoided race conditions when updating references.
  + Converted all APIs that output string data to use git_buf
    objects for the return value.
  + Added standard git_&lt;object&gt;_init_options functions to
    initialize options structures when static initialization is not
    possible, and renamed options structures to standard
    git_&lt;object&gt;_options (replacing _opts suffix used in some
    places).
  + Improved use of const on pointers in many APIs (which may
    affect some bindings).
  + Replaced use of oid with simply id for references to
    git_oid value.s
  + Previously, when a callback function returned an error value
    (i.e. non-zero), libgit2 converted it to GIT_EUSER for the
    parent function's return value. Now, libgit2 tries to pass
    through the callback's return value all the way back to the
    caller.
  + All inline functions were eliminated from the public libgit2
    API.
  + Removed all Apache licensed code from library.
  + For more changes, please see detailed ChangeLog in package.
- Rename libgit2-0 subpackage to libgit2-21, following upstreams
  soname change (another project believing the soname should match
  the version).
- Enable SSH Support:
  + Add pkgconfig(libssh2) BuildRequires.
  + Pass -DUSE_SSH:BOOL=ON to cmake call in order to enable SSH
    support.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Add baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 0.22.1:
  + The following (critical) fixes have been backported to this
    maintenance release:
  - checkout: introduce git_checkout_perfdata.
  - git_path_join_unrooted: return base len.
  - checkout: don't recreate previous directory.
  - checkout tests: nasty symlinks.
  - checkout: drop newline in error message.
  - checkout: remove files before writing new ones.
  - checkout tests: emulate p_realpath poorly on Win32.
  - checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
  + git_signature_new() now requires a non-empty email address.
  + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
  + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
    TLSv1 in OpenSSL.
  + The fetch behavior of remotes with autotag set to
    GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
    1.9.0 and later. In this mode, libgit2 now fetches all tags in
    addition to whatever else needs to be fetched.
  + git_checkout() now handles case-changing renames correctly on
    case-insensitive filesystems; for example renaming "readme" to
    "README".
  + The search for libssh2 is now done via pkg-config instead of a
    custom search of a few directories.
  + Add support for core.protectHFS and core.protectNTFS. Add more
    validation for filenames which we write such as references.
  + The local transport now generates textual progress output like
    git-upload-pack does ("counting objects").
  + git_checkout_index() can now check out an in-memory index that
    is not necessarily the repository's index, so you may check out
    an index that was produced by git_merge and friends while
    retaining the cached information.
  + Remove the default timeout for receiving / sending data over
    HTTP using the WinHTTP transport layer.
  + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
    systems.
  + Provide built-in objects for the empty blob (e69de29) and empty
    tree (4b825dc) objects.
  + The index' tree cache is now filled upon read-tree and
    write-tree and the cache is written to disk.
  + LF -&gt; CRLF filter refuses to handle mixed-EOL files.
  + LF -&gt; CRLF filter now runs when * text = auto (with Git for
    Windows 1.9.4).
  + File unlocks are atomic again via rename. Read-only files on
    Windows are made read-write if necessary.
  + Share open packfiles across repositories to share descriptors
    and mmaps.
  + Use a map for the treebuilder, making insertion O(1).
  + The build system now accepts an option EMBED_SSH_PATH which
    when set tells it to include a copy of libssh2 at the given
    location. This is enabled for MSVC.
  + Add support for refspecs with the asterisk in the middle of a
    pattern.
  + Fetching now performs opportunistic updates. To achieve this,
    we introduce a difference between active and passive refspecs,
    which make git_remote_download() and git_remote_fetch() to take
    a list of resfpecs to be the active list, similarly to how git
    fetch accepts a list on the command-line.
  + The THREADSAFE option to build libgit2 with threading support
    has been flipped to be on by default.
  + The remote object has learnt to prune remote-tracking branches.
    If the remote is configured to do so, this will happen via
    git_remote_fetch(). You can also call git_remote_prune() after
    connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="dimstar@opensuse.org" date="1438084800">- Update to version 0.23.0:
  + Changes or improvements:
  - Patience and minimal diff drivers can now be used for merges.
  - Merges can now ignore whitespace changes.
  - Updated binary identification in CRLF filtering to avoid
    false positives in UTF-8 files.
  - Rename and copy detection is enabled for small files.
  - Checkout can now handle an initial checkout of a repository,
    making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
    clone.
  - The signature parameter in the ref-modifying functions has
    been removed. Use git_repository_set_ident() and
    git_repository_ident() to override the signature to be used.
  - The local transport now auto-scales the number of threads to
    use when creating the packfile instead of sticking to one.
  - Reference renaming now uses the right id for the old value.
  - The annotated version of branch creation, HEAD detaching and
    reset allow for specifying the expression from the user to be
    put into the reflog.
  - git_rebase_commit now returns GIT_EUNMERGED when you attempt
    to commit with unstaged changes.
  - On Mac OS X, we now use SecureTransport to provide the
    cryptographic support for HTTPS connections insead of
    OpenSSL.
  - Checkout can now accept an index for the baseline
    computations via the baseline_index member.
  - The configuration for fetching is no longer stored inside the
    git_remote struct but has been moved to a git_fetch_options.
    The remote functions now take these options or the callbacks
    instead of setting them beforehand.
  - git_submodule instances are no longer cached or shared across
    lookup. Each submodule represents the configuration at the
    time of loading.
  - The index now uses diffs for add_all() and update_all() which
    gives it a speed boost and closer semantics to git.
  - The ssh transport now reports the stderr output from the
    server as the error message, which allows you to get the
    "repository not found" messages.
  - git_index_conflict_add() will remove staged entries that
    exist for conflicted paths.
  - The flags for a git_diff_file will now have the
    GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
    of the diff. This is useful for understanding whether a side
    of the diff exists in the presence of a conflict.
  - The constructor for a write-stream into the odb now takes
    git_off_t instead of size_t for the size of the blob, which
    allows putting large files into the odb on 32-bit systems.
  - The remote's push and pull URLs now honor the
    url.$URL.insteadOf configuration. This allows modifying URL
    prefixes to a custom value via gitconfig.
  - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
    and git_diff_buffers now accept a new binary callback of type
    git_diff_binary_cb that includes the binary diff information.
  - The race condition mitigations described in racy-git.txt have
    been implemented.
  - If libcurl is installed, we will use it to connect to HTTP(S)
    servers.
  + Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libgit2 0.23.2:
  * documentation fixes
  * diff: don't error out on an invalid regex
  * http: propagate the credentials callback's error code
  * Fix bug in git_smart__push: push_transfer_progress cb is never called
  * remote: don't confuse tag auto-follow rules with refspec matching
  * curl: use the most secure auth method for the proxy
  * Forcing libssh2 lib location
  * fix duplicate basenames to support older VS
- includes changes from 0.23.1:
  * Stage an unregistered submodule in _add_bypath()
  * filebuf: remove lockfile upon rename errors
  * Increase required version of cmake to 2.8
  * Handle ssh:// and git:// urls containing a '~' character.
  * documentation updates
  * submodule URL handling fixes
  * index: allow add_bypath to update submodules
  * blob: fail to create a blob from a dir with EDIRECTORY
  * submodule: lookup the submodule by path if available
  * submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc.</changelog>
  <changelog author="astieger@suse.com" date="1444219200">- libgit2 0.23.3, containing critical fixes:
  * blame: guard xdiff calls for large files
  * diff: don't feed large files to xdiff
  * merge_file: treat large files as binary
  * xdiff: convert size variables to size_t
  * GITERR_CHECK_ALLOC_ADDn: multi-arg adders</changelog>
  <changelog author="astieger@suse.com" date="1448884800">- libgit2 0.23.4:
  * various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 0.24.0:
  + Custom filters can now be registered with wildcard attributes,
    for example filter=*. Consumers should examine the attributes
    parameter of the check function for details.
  + Symlinks are now followed when locking a file, which can be
    necessary when multiple worktrees share a base repository.
  + You can now set your own user-agent to be sent for HTTP
    requests by using the GIT_OPT_SET_USER_AGENT with
    git_libgit2_opts().
  + You can set custom HTTP header fields to be sent along with
    requests by passing them in the fetch and push options.
  + Tree objects are now assumed to be sorted. If a tree is not
    correctly formed, it will give bad results. This is the git
    approach and cuts a significant amount of time when reading the
    trees.
  + Filter registration is now protected against concurrent
    registration.
  + Filenames which are not valid on Windows in an index no longer
    cause to fail to parse it on that OS.
  + Rebases can now be performed purely in-memory, without touching
    the repository's workdir.
  + When adding objects to the index, or when creating new tree or
    commit objects, the inputs are validated to ensure that the
    dependent objects exist and are of the correct type. This
    object validation can be disabled with the
    GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
  + The WinHTTP transport's handling of bad credentials now behaves
    like the others, asking for credentials again.
  + Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1461153600">- libgit2 0.24.1:
  + various compatible backported bug fixes</changelog>
  <changelog author="sreeves@suse.com" date="1462795200">- Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- libgit2 0.24.3, fixing the following vulnerabilities:
  * CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
    object files (bsc#1003810)
  * various bug fixes from the 0.24.2 release</changelog>
  <changelog author="astieger@suse.com" date="1484136000">- libgit2 0.24.6, including the following security fixes:
  * bsc#1019036: edge cases in the Git Smart Protocol can lead to
    attempting to parse outside of the buffer
    CVE-2016-10128,CVE-2016-10129
  * bsc#1019037: MITM possible due to lack of parameter for
    certificate parameter
    CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
  * add support for OpenSSL 1.1.0 for BIO filter</changelog>
  <changelog author="astieger@suse.com" date="1484136001">- libgit2 0.25.1
- New features and functionality:
  * repository discovery features
  * Support for reading and writing git index v4 files
  * Improve the performance of the revwalk
  * reference db concurrency improvements
  * Nanosecond resolution is now activated by default
  * restrict the set of ciphers used with OpenSSL by default.
  * user-registered merge drivers
  * built-in support for the union merge driver
  * callers can now specify proxy settings
  * New API for creating signed commits
  * New API for creating blobs from streams
  * New flags for opening repositories
  * New functions for various git operations
- Removed API:
  * git_blob_create_fromchunks() has been removed in  favour of
    git_blob_create_fromstream()
- Changed API:
  * git_packbuilder_object_count and git_packbuilder_written now
    return a size_t instead of a uint32_t for more thorough
    compatibility with the rest of the library.
  * git_packbuiler_progress now provides explicitly sized uint32_t
    values instead of unsigned int.
  * git_diff_file now includes an id_abbrev field that reflects the
    number of nibbles set in the id field.
  * git_odb_backend now has a freshen function pointer
  * git_remote_connect() now accepts proxy options.</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- libgit2 0.26.0:
  * Support for opening, creating and modifying worktrees.
  * Can now detect SHA1 collisions resulting from the SHAttered
    attack CVE-2005-4900
  * Fix for missing implementation of `git_merge_driver_source` getters
  * Fix for installed pkg-config file being broken when the prefix
    contains spaces
  * Can now detect when the hashsum of on-disk objects does not
    match their expected hashsum.
  * Support open-ended ranges (e.g. "master..", "...master") in
    revision range parsing code.
  * Correctly compute ignores with leading "/" in subdirectories.
  * Optionally call `fsync` on loose objects, packfiles and their
    indexes, loose references and packed reference files.
  * Builds against OpenSSL v1.1 and against LibreSSL.
  * Improvements for reading index v4 files.
  * API additions and incompatible API changes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510574400">- remove unneeded dependency (python is used only for testsuite, which
    isn't used during build)</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 0.26.3:
  * Fix cloning of the libgit2 project with git clone --recursive by removing an
    invalid submodule from our testing data.
  * Fix endianness of the port in p_getaddrinfo().
  * Fix handling of negative gitignore rules with wildcards.
  * Fix handling of case-insensitive negative gitignore rules.
  * Fix resolving references to a tag if the reference is stored with its fully
    resolved OID in the packed-refs file.
  * Fix checkout not treating worktree files as modified when only their mode has
    changed.
  * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
  * Fixes memory handling issues when reading crafted repository index files.
    The issues allow for possible denial of service due to allocation of large
    memory and out-of-bound reads.
    (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
  * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
    vulnerable to security issues in the prior version.</changelog>
  <changelog author="mgorse@suse.com" date="1532606400">- Update to version 0.26.5 (boo#1095219 boo#1100612 boo#1100613):
  * This is a security release fixing out-of-bounds reads when
    reading objects from a packfile. This corresponds to
    CVE-2018-10887 and CVE-2018-10888, which were both reported by
    Riccardo Schirone.
  * Changes in v0.26.4:
  * This is a security release fixing insufficient validation of
    submodule names (CVE-2018-11235, reported by Etienne
    Stalmans) and disallows `.gitmodules` files as symlinks.</changelog>
  <changelog author="astieger@suse.com" date="1534161600">- libgit2 0.26.6:
  * fix out-of-bounds reads when processing smart-protocol "ng"
    packets (bsc#1104641)</changelog>
</package>
<package pkgid="f90a3107fd8a762da008c5a342271583e9fed6d24e0de3c25b2afbd7610394dd" name="libgit2-26-32bit" arch="x86_64">
  <version epoch="0" ver="0.26.6" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.21.1:
  + Added a new config snapshotting API to fix race issues when
    different applications (e.g. Git and a libgit2 client) access
    the same repository simultaneously.
  + Added reflog support to all APIs that could alter a reference.
  + Avoided race conditions when updating references.
  + Converted all APIs that output string data to use git_buf
    objects for the return value.
  + Added standard git_&lt;object&gt;_init_options functions to
    initialize options structures when static initialization is not
    possible, and renamed options structures to standard
    git_&lt;object&gt;_options (replacing _opts suffix used in some
    places).
  + Improved use of const on pointers in many APIs (which may
    affect some bindings).
  + Replaced use of oid with simply id for references to
    git_oid value.s
  + Previously, when a callback function returned an error value
    (i.e. non-zero), libgit2 converted it to GIT_EUSER for the
    parent function's return value. Now, libgit2 tries to pass
    through the callback's return value all the way back to the
    caller.
  + All inline functions were eliminated from the public libgit2
    API.
  + Removed all Apache licensed code from library.
  + For more changes, please see detailed ChangeLog in package.
- Rename libgit2-0 subpackage to libgit2-21, following upstreams
  soname change (another project believing the soname should match
  the version).
- Enable SSH Support:
  + Add pkgconfig(libssh2) BuildRequires.
  + Pass -DUSE_SSH:BOOL=ON to cmake call in order to enable SSH
    support.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Add baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 0.22.1:
  + The following (critical) fixes have been backported to this
    maintenance release:
  - checkout: introduce git_checkout_perfdata.
  - git_path_join_unrooted: return base len.
  - checkout: don't recreate previous directory.
  - checkout tests: nasty symlinks.
  - checkout: drop newline in error message.
  - checkout: remove files before writing new ones.
  - checkout tests: emulate p_realpath poorly on Win32.
  - checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
  + git_signature_new() now requires a non-empty email address.
  + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
  + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
    TLSv1 in OpenSSL.
  + The fetch behavior of remotes with autotag set to
    GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
    1.9.0 and later. In this mode, libgit2 now fetches all tags in
    addition to whatever else needs to be fetched.
  + git_checkout() now handles case-changing renames correctly on
    case-insensitive filesystems; for example renaming "readme" to
    "README".
  + The search for libssh2 is now done via pkg-config instead of a
    custom search of a few directories.
  + Add support for core.protectHFS and core.protectNTFS. Add more
    validation for filenames which we write such as references.
  + The local transport now generates textual progress output like
    git-upload-pack does ("counting objects").
  + git_checkout_index() can now check out an in-memory index that
    is not necessarily the repository's index, so you may check out
    an index that was produced by git_merge and friends while
    retaining the cached information.
  + Remove the default timeout for receiving / sending data over
    HTTP using the WinHTTP transport layer.
  + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
    systems.
  + Provide built-in objects for the empty blob (e69de29) and empty
    tree (4b825dc) objects.
  + The index' tree cache is now filled upon read-tree and
    write-tree and the cache is written to disk.
  + LF -&gt; CRLF filter refuses to handle mixed-EOL files.
  + LF -&gt; CRLF filter now runs when * text = auto (with Git for
    Windows 1.9.4).
  + File unlocks are atomic again via rename. Read-only files on
    Windows are made read-write if necessary.
  + Share open packfiles across repositories to share descriptors
    and mmaps.
  + Use a map for the treebuilder, making insertion O(1).
  + The build system now accepts an option EMBED_SSH_PATH which
    when set tells it to include a copy of libssh2 at the given
    location. This is enabled for MSVC.
  + Add support for refspecs with the asterisk in the middle of a
    pattern.
  + Fetching now performs opportunistic updates. To achieve this,
    we introduce a difference between active and passive refspecs,
    which make git_remote_download() and git_remote_fetch() to take
    a list of resfpecs to be the active list, similarly to how git
    fetch accepts a list on the command-line.
  + The THREADSAFE option to build libgit2 with threading support
    has been flipped to be on by default.
  + The remote object has learnt to prune remote-tracking branches.
    If the remote is configured to do so, this will happen via
    git_remote_fetch(). You can also call git_remote_prune() after
    connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="dimstar@opensuse.org" date="1438084800">- Update to version 0.23.0:
  + Changes or improvements:
  - Patience and minimal diff drivers can now be used for merges.
  - Merges can now ignore whitespace changes.
  - Updated binary identification in CRLF filtering to avoid
    false positives in UTF-8 files.
  - Rename and copy detection is enabled for small files.
  - Checkout can now handle an initial checkout of a repository,
    making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
    clone.
  - The signature parameter in the ref-modifying functions has
    been removed. Use git_repository_set_ident() and
    git_repository_ident() to override the signature to be used.
  - The local transport now auto-scales the number of threads to
    use when creating the packfile instead of sticking to one.
  - Reference renaming now uses the right id for the old value.
  - The annotated version of branch creation, HEAD detaching and
    reset allow for specifying the expression from the user to be
    put into the reflog.
  - git_rebase_commit now returns GIT_EUNMERGED when you attempt
    to commit with unstaged changes.
  - On Mac OS X, we now use SecureTransport to provide the
    cryptographic support for HTTPS connections insead of
    OpenSSL.
  - Checkout can now accept an index for the baseline
    computations via the baseline_index member.
  - The configuration for fetching is no longer stored inside the
    git_remote struct but has been moved to a git_fetch_options.
    The remote functions now take these options or the callbacks
    instead of setting them beforehand.
  - git_submodule instances are no longer cached or shared across
    lookup. Each submodule represents the configuration at the
    time of loading.
  - The index now uses diffs for add_all() and update_all() which
    gives it a speed boost and closer semantics to git.
  - The ssh transport now reports the stderr output from the
    server as the error message, which allows you to get the
    "repository not found" messages.
  - git_index_conflict_add() will remove staged entries that
    exist for conflicted paths.
  - The flags for a git_diff_file will now have the
    GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
    of the diff. This is useful for understanding whether a side
    of the diff exists in the presence of a conflict.
  - The constructor for a write-stream into the odb now takes
    git_off_t instead of size_t for the size of the blob, which
    allows putting large files into the odb on 32-bit systems.
  - The remote's push and pull URLs now honor the
    url.$URL.insteadOf configuration. This allows modifying URL
    prefixes to a custom value via gitconfig.
  - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
    and git_diff_buffers now accept a new binary callback of type
    git_diff_binary_cb that includes the binary diff information.
  - The race condition mitigations described in racy-git.txt have
    been implemented.
  - If libcurl is installed, we will use it to connect to HTTP(S)
    servers.
  + Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libgit2 0.23.2:
  * documentation fixes
  * diff: don't error out on an invalid regex
  * http: propagate the credentials callback's error code
  * Fix bug in git_smart__push: push_transfer_progress cb is never called
  * remote: don't confuse tag auto-follow rules with refspec matching
  * curl: use the most secure auth method for the proxy
  * Forcing libssh2 lib location
  * fix duplicate basenames to support older VS
- includes changes from 0.23.1:
  * Stage an unregistered submodule in _add_bypath()
  * filebuf: remove lockfile upon rename errors
  * Increase required version of cmake to 2.8
  * Handle ssh:// and git:// urls containing a '~' character.
  * documentation updates
  * submodule URL handling fixes
  * index: allow add_bypath to update submodules
  * blob: fail to create a blob from a dir with EDIRECTORY
  * submodule: lookup the submodule by path if available
  * submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc.</changelog>
  <changelog author="astieger@suse.com" date="1444219200">- libgit2 0.23.3, containing critical fixes:
  * blame: guard xdiff calls for large files
  * diff: don't feed large files to xdiff
  * merge_file: treat large files as binary
  * xdiff: convert size variables to size_t
  * GITERR_CHECK_ALLOC_ADDn: multi-arg adders</changelog>
  <changelog author="astieger@suse.com" date="1448884800">- libgit2 0.23.4:
  * various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 0.24.0:
  + Custom filters can now be registered with wildcard attributes,
    for example filter=*. Consumers should examine the attributes
    parameter of the check function for details.
  + Symlinks are now followed when locking a file, which can be
    necessary when multiple worktrees share a base repository.
  + You can now set your own user-agent to be sent for HTTP
    requests by using the GIT_OPT_SET_USER_AGENT with
    git_libgit2_opts().
  + You can set custom HTTP header fields to be sent along with
    requests by passing them in the fetch and push options.
  + Tree objects are now assumed to be sorted. If a tree is not
    correctly formed, it will give bad results. This is the git
    approach and cuts a significant amount of time when reading the
    trees.
  + Filter registration is now protected against concurrent
    registration.
  + Filenames which are not valid on Windows in an index no longer
    cause to fail to parse it on that OS.
  + Rebases can now be performed purely in-memory, without touching
    the repository's workdir.
  + When adding objects to the index, or when creating new tree or
    commit objects, the inputs are validated to ensure that the
    dependent objects exist and are of the correct type. This
    object validation can be disabled with the
    GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
  + The WinHTTP transport's handling of bad credentials now behaves
    like the others, asking for credentials again.
  + Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1461153600">- libgit2 0.24.1:
  + various compatible backported bug fixes</changelog>
  <changelog author="sreeves@suse.com" date="1462795200">- Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- libgit2 0.24.3, fixing the following vulnerabilities:
  * CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
    object files (bsc#1003810)
  * various bug fixes from the 0.24.2 release</changelog>
  <changelog author="astieger@suse.com" date="1484136000">- libgit2 0.24.6, including the following security fixes:
  * bsc#1019036: edge cases in the Git Smart Protocol can lead to
    attempting to parse outside of the buffer
    CVE-2016-10128,CVE-2016-10129
  * bsc#1019037: MITM possible due to lack of parameter for
    certificate parameter
    CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
  * add support for OpenSSL 1.1.0 for BIO filter</changelog>
  <changelog author="astieger@suse.com" date="1484136001">- libgit2 0.25.1
- New features and functionality:
  * repository discovery features
  * Support for reading and writing git index v4 files
  * Improve the performance of the revwalk
  * reference db concurrency improvements
  * Nanosecond resolution is now activated by default
  * restrict the set of ciphers used with OpenSSL by default.
  * user-registered merge drivers
  * built-in support for the union merge driver
  * callers can now specify proxy settings
  * New API for creating signed commits
  * New API for creating blobs from streams
  * New flags for opening repositories
  * New functions for various git operations
- Removed API:
  * git_blob_create_fromchunks() has been removed in  favour of
    git_blob_create_fromstream()
- Changed API:
  * git_packbuilder_object_count and git_packbuilder_written now
    return a size_t instead of a uint32_t for more thorough
    compatibility with the rest of the library.
  * git_packbuiler_progress now provides explicitly sized uint32_t
    values instead of unsigned int.
  * git_diff_file now includes an id_abbrev field that reflects the
    number of nibbles set in the id field.
  * git_odb_backend now has a freshen function pointer
  * git_remote_connect() now accepts proxy options.</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- libgit2 0.26.0:
  * Support for opening, creating and modifying worktrees.
  * Can now detect SHA1 collisions resulting from the SHAttered
    attack CVE-2005-4900
  * Fix for missing implementation of `git_merge_driver_source` getters
  * Fix for installed pkg-config file being broken when the prefix
    contains spaces
  * Can now detect when the hashsum of on-disk objects does not
    match their expected hashsum.
  * Support open-ended ranges (e.g. "master..", "...master") in
    revision range parsing code.
  * Correctly compute ignores with leading "/" in subdirectories.
  * Optionally call `fsync` on loose objects, packfiles and their
    indexes, loose references and packed reference files.
  * Builds against OpenSSL v1.1 and against LibreSSL.
  * Improvements for reading index v4 files.
  * API additions and incompatible API changes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510574400">- remove unneeded dependency (python is used only for testsuite, which
    isn't used during build)</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 0.26.3:
  * Fix cloning of the libgit2 project with git clone --recursive by removing an
    invalid submodule from our testing data.
  * Fix endianness of the port in p_getaddrinfo().
  * Fix handling of negative gitignore rules with wildcards.
  * Fix handling of case-insensitive negative gitignore rules.
  * Fix resolving references to a tag if the reference is stored with its fully
    resolved OID in the packed-refs file.
  * Fix checkout not treating worktree files as modified when only their mode has
    changed.
  * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
  * Fixes memory handling issues when reading crafted repository index files.
    The issues allow for possible denial of service due to allocation of large
    memory and out-of-bound reads.
    (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
  * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
    vulnerable to security issues in the prior version.</changelog>
  <changelog author="mgorse@suse.com" date="1532606400">- Update to version 0.26.5 (boo#1095219 boo#1100612 boo#1100613):
  * This is a security release fixing out-of-bounds reads when
    reading objects from a packfile. This corresponds to
    CVE-2018-10887 and CVE-2018-10888, which were both reported by
    Riccardo Schirone.
  * Changes in v0.26.4:
  * This is a security release fixing insufficient validation of
    submodule names (CVE-2018-11235, reported by Etienne
    Stalmans) and disallows `.gitmodules` files as symlinks.</changelog>
  <changelog author="astieger@suse.com" date="1534161600">- libgit2 0.26.6:
  * fix out-of-bounds reads when processing smart-protocol "ng"
    packets (bsc#1104641)</changelog>
</package>
<package pkgid="ba96bc3a57d5811ea28b0d1c30f837d55d4f46671f725868ada74d5d496279f3" name="libgit2-devel" arch="x86_64">
  <version epoch="0" ver="0.26.6" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1404993600">- Update to version 0.21.1:
  + Added a new config snapshotting API to fix race issues when
    different applications (e.g. Git and a libgit2 client) access
    the same repository simultaneously.
  + Added reflog support to all APIs that could alter a reference.
  + Avoided race conditions when updating references.
  + Converted all APIs that output string data to use git_buf
    objects for the return value.
  + Added standard git_&lt;object&gt;_init_options functions to
    initialize options structures when static initialization is not
    possible, and renamed options structures to standard
    git_&lt;object&gt;_options (replacing _opts suffix used in some
    places).
  + Improved use of const on pointers in many APIs (which may
    affect some bindings).
  + Replaced use of oid with simply id for references to
    git_oid value.s
  + Previously, when a callback function returned an error value
    (i.e. non-zero), libgit2 converted it to GIT_EUSER for the
    parent function's return value. Now, libgit2 tries to pass
    through the callback's return value all the way back to the
    caller.
  + All inline functions were eliminated from the public libgit2
    API.
  + Removed all Apache licensed code from library.
  + For more changes, please see detailed ChangeLog in package.
- Rename libgit2-0 subpackage to libgit2-21, following upstreams
  soname change (another project believing the soname should match
  the version).
- Enable SSH Support:
  + Add pkgconfig(libssh2) BuildRequires.
  + Pass -DUSE_SSH:BOOL=ON to cmake call in order to enable SSH
    support.</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1413460800">- Add baselibs.conf</changelog>
  <changelog author="dimstar@opensuse.org" date="1422360000">- Update to version 0.22.1:
  + The following (critical) fixes have been backported to this
    maintenance release:
  - checkout: introduce git_checkout_perfdata.
  - git_path_join_unrooted: return base len.
  - checkout: don't recreate previous directory.
  - checkout tests: nasty symlinks.
  - checkout: drop newline in error message.
  - checkout: remove files before writing new ones.
  - checkout tests: emulate p_realpath poorly on Win32.
  - checkout tests: cleanup realpath impl on Win32.
- Changes from version 0.22.0:
  + git_signature_new() now requires a non-empty email address.
  + Use CommonCrypto libraries for SHA-1 calculation on Mac OS X.
  + Disable SSL compression and SSLv2 and SSLv3 ciphers in favor of
    TLSv1 in OpenSSL.
  + The fetch behavior of remotes with autotag set to
    GIT_REMOTE_DOWNLOAD_TAGS_ALL has been changed to match git
    1.9.0 and later. In this mode, libgit2 now fetches all tags in
    addition to whatever else needs to be fetched.
  + git_checkout() now handles case-changing renames correctly on
    case-insensitive filesystems; for example renaming "readme" to
    "README".
  + The search for libssh2 is now done via pkg-config instead of a
    custom search of a few directories.
  + Add support for core.protectHFS and core.protectNTFS. Add more
    validation for filenames which we write such as references.
  + The local transport now generates textual progress output like
    git-upload-pack does ("counting objects").
  + git_checkout_index() can now check out an in-memory index that
    is not necessarily the repository's index, so you may check out
    an index that was produced by git_merge and friends while
    retaining the cached information.
  + Remove the default timeout for receiving / sending data over
    HTTP using the WinHTTP transport layer.
  + Add SPNEGO (Kerberos) authentication using GSSAPI on Unix
    systems.
  + Provide built-in objects for the empty blob (e69de29) and empty
    tree (4b825dc) objects.
  + The index' tree cache is now filled upon read-tree and
    write-tree and the cache is written to disk.
  + LF -&gt; CRLF filter refuses to handle mixed-EOL files.
  + LF -&gt; CRLF filter now runs when * text = auto (with Git for
    Windows 1.9.4).
  + File unlocks are atomic again via rename. Read-only files on
    Windows are made read-write if necessary.
  + Share open packfiles across repositories to share descriptors
    and mmaps.
  + Use a map for the treebuilder, making insertion O(1).
  + The build system now accepts an option EMBED_SSH_PATH which
    when set tells it to include a copy of libssh2 at the given
    location. This is enabled for MSVC.
  + Add support for refspecs with the asterisk in the middle of a
    pattern.
  + Fetching now performs opportunistic updates. To achieve this,
    we introduce a difference between active and passive refspecs,
    which make git_remote_download() and git_remote_fetch() to take
    a list of resfpecs to be the active list, similarly to how git
    fetch accepts a list on the command-line.
  + The THREADSAFE option to build libgit2 with threading support
    has been flipped to be on by default.
  + The remote object has learnt to prune remote-tracking branches.
    If the remote is configured to do so, this will happen via
    git_remote_fetch(). You can also call git_remote_prune() after
    connecting or fetching to perform the prune.
- Rename libgit2-21 subpackage to libgit2-22, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="dimstar@opensuse.org" date="1438084800">- Update to version 0.23.0:
  + Changes or improvements:
  - Patience and minimal diff drivers can now be used for merges.
  - Merges can now ignore whitespace changes.
  - Updated binary identification in CRLF filtering to avoid
    false positives in UTF-8 files.
  - Rename and copy detection is enabled for small files.
  - Checkout can now handle an initial checkout of a repository,
    making GIT_CHECKOUT_SAFE_CREATE unnecessary for users of
    clone.
  - The signature parameter in the ref-modifying functions has
    been removed. Use git_repository_set_ident() and
    git_repository_ident() to override the signature to be used.
  - The local transport now auto-scales the number of threads to
    use when creating the packfile instead of sticking to one.
  - Reference renaming now uses the right id for the old value.
  - The annotated version of branch creation, HEAD detaching and
    reset allow for specifying the expression from the user to be
    put into the reflog.
  - git_rebase_commit now returns GIT_EUNMERGED when you attempt
    to commit with unstaged changes.
  - On Mac OS X, we now use SecureTransport to provide the
    cryptographic support for HTTPS connections insead of
    OpenSSL.
  - Checkout can now accept an index for the baseline
    computations via the baseline_index member.
  - The configuration for fetching is no longer stored inside the
    git_remote struct but has been moved to a git_fetch_options.
    The remote functions now take these options or the callbacks
    instead of setting them beforehand.
  - git_submodule instances are no longer cached or shared across
    lookup. Each submodule represents the configuration at the
    time of loading.
  - The index now uses diffs for add_all() and update_all() which
    gives it a speed boost and closer semantics to git.
  - The ssh transport now reports the stderr output from the
    server as the error message, which allows you to get the
    "repository not found" messages.
  - git_index_conflict_add() will remove staged entries that
    exist for conflicted paths.
  - The flags for a git_diff_file will now have the
    GIT_DIFF_FLAG_EXISTS bit set when a file exists on that side
    of the diff. This is useful for understanding whether a side
    of the diff exists in the presence of a conflict.
  - The constructor for a write-stream into the odb now takes
    git_off_t instead of size_t for the size of the blob, which
    allows putting large files into the odb on 32-bit systems.
  - The remote's push and pull URLs now honor the
    url.$URL.insteadOf configuration. This allows modifying URL
    prefixes to a custom value via gitconfig.
  - git_diff_foreach, git_diff_blobs, git_diff_blob_to_buffer,
    and git_diff_buffers now accept a new binary callback of type
    git_diff_binary_cb that includes the binary diff information.
  - The race condition mitigations described in racy-git.txt have
    been implemented.
  - If libcurl is installed, we will use it to connect to HTTP(S)
    servers.
  + Various API changes (incl. breaking changes).
- Rename libgit2-22 subpackage to libgit2-23, following upstreams
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1441627200">- libgit2 0.23.2:
  * documentation fixes
  * diff: don't error out on an invalid regex
  * http: propagate the credentials callback's error code
  * Fix bug in git_smart__push: push_transfer_progress cb is never called
  * remote: don't confuse tag auto-follow rules with refspec matching
  * curl: use the most secure auth method for the proxy
  * Forcing libssh2 lib location
  * fix duplicate basenames to support older VS
- includes changes from 0.23.1:
  * Stage an unregistered submodule in _add_bypath()
  * filebuf: remove lockfile upon rename errors
  * Increase required version of cmake to 2.8
  * Handle ssh:// and git:// urls containing a '~' character.
  * documentation updates
  * submodule URL handling fixes
  * index: allow add_bypath to update submodules
  * blob: fail to create a blob from a dir with EDIRECTORY
  * submodule: lookup the submodule by path if available
  * submdule: reproduce double-reporting of a submodule in foreach
- note cmake requirement and use cmake makros
- build with system libcurl
- build with system http-parser</changelog>
  <changelog author="dimstar@opensuse.org" date="1441886400">- Add libgit2-fix-.pc-file.patch: Fix paths written in libgit2.pc.</changelog>
  <changelog author="astieger@suse.com" date="1444219200">- libgit2 0.23.3, containing critical fixes:
  * blame: guard xdiff calls for large files
  * diff: don't feed large files to xdiff
  * merge_file: treat large files as binary
  * xdiff: convert size variables to size_t
  * GITERR_CHECK_ALLOC_ADDn: multi-arg adders</changelog>
  <changelog author="astieger@suse.com" date="1448884800">- libgit2 0.23.4:
  * various bug fixes and improvements
- drop upstreamed libgit2-fix-.pc-file.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1458129600">- Update to version 0.24.0:
  + Custom filters can now be registered with wildcard attributes,
    for example filter=*. Consumers should examine the attributes
    parameter of the check function for details.
  + Symlinks are now followed when locking a file, which can be
    necessary when multiple worktrees share a base repository.
  + You can now set your own user-agent to be sent for HTTP
    requests by using the GIT_OPT_SET_USER_AGENT with
    git_libgit2_opts().
  + You can set custom HTTP header fields to be sent along with
    requests by passing them in the fetch and push options.
  + Tree objects are now assumed to be sorted. If a tree is not
    correctly formed, it will give bad results. This is the git
    approach and cuts a significant amount of time when reading the
    trees.
  + Filter registration is now protected against concurrent
    registration.
  + Filenames which are not valid on Windows in an index no longer
    cause to fail to parse it on that OS.
  + Rebases can now be performed purely in-memory, without touching
    the repository's workdir.
  + When adding objects to the index, or when creating new tree or
    commit objects, the inputs are validated to ensure that the
    dependent objects exist and are of the correct type. This
    object validation can be disabled with the
    GIT_OPT_ENABLE_STRICT_OBJECT_CREATION option.
  + The WinHTTP transport's handling of bad credentials now behaves
    like the others, asking for credentials again.
  + Various API changes (additions AND removals).
- Rename libgit2-23 subpackage to libgit2-24, following upstraems
  soname bump (also in baselibs.conf).</changelog>
  <changelog author="astieger@suse.com" date="1461153600">- libgit2 0.24.1:
  + various compatible backported bug fixes</changelog>
  <changelog author="sreeves@suse.com" date="1462795200">- Add to the SDK. Fate#319349
- Update license to GPL-2.0 WITH GCC-exception-2.0</changelog>
  <changelog author="astieger@suse.com" date="1480593600">- libgit2 0.24.3, fixing the following vulnerabilities:
  * CVE-2016-8568, CVE-2016-8569: invalid memory accesses parsing
    object files (bsc#1003810)
  * various bug fixes from the 0.24.2 release</changelog>
  <changelog author="astieger@suse.com" date="1484136000">- libgit2 0.24.6, including the following security fixes:
  * bsc#1019036: edge cases in the Git Smart Protocol can lead to
    attempting to parse outside of the buffer
    CVE-2016-10128,CVE-2016-10129
  * bsc#1019037: MITM possible due to lack of parameter for
    certificate parameter
    CVE-2016-10130,CVE-2017-5338,CVE-2017-5339
- includes changes from 0.24.5:
  * add support for OpenSSL 1.1.0 for BIO filter</changelog>
  <changelog author="astieger@suse.com" date="1484136001">- libgit2 0.25.1
- New features and functionality:
  * repository discovery features
  * Support for reading and writing git index v4 files
  * Improve the performance of the revwalk
  * reference db concurrency improvements
  * Nanosecond resolution is now activated by default
  * restrict the set of ciphers used with OpenSSL by default.
  * user-registered merge drivers
  * built-in support for the union merge driver
  * callers can now specify proxy settings
  * New API for creating signed commits
  * New API for creating blobs from streams
  * New flags for opening repositories
  * New functions for various git operations
- Removed API:
  * git_blob_create_fromchunks() has been removed in  favour of
    git_blob_create_fromstream()
- Changed API:
  * git_packbuilder_object_count and git_packbuilder_written now
    return a size_t instead of a uint32_t for more thorough
    compatibility with the rest of the library.
  * git_packbuiler_progress now provides explicitly sized uint32_t
    values instead of unsigned int.
  * git_diff_file now includes an id_abbrev field that reflects the
    number of nibbles set in the id field.
  * git_odb_backend now has a freshen function pointer
  * git_remote_connect() now accepts proxy options.</changelog>
  <changelog author="astieger@suse.com" date="1501934400">- libgit2 0.26.0:
  * Support for opening, creating and modifying worktrees.
  * Can now detect SHA1 collisions resulting from the SHAttered
    attack CVE-2005-4900
  * Fix for missing implementation of `git_merge_driver_source` getters
  * Fix for installed pkg-config file being broken when the prefix
    contains spaces
  * Can now detect when the hashsum of on-disk objects does not
    match their expected hashsum.
  * Support open-ended ranges (e.g. "master..", "...master") in
    revision range parsing code.
  * Correctly compute ignores with leading "/" in subdirectories.
  * Optionally call `fsync` on loose objects, packfiles and their
    indexes, loose references and packed reference files.
  * Builds against OpenSSL v1.1 and against LibreSSL.
  * Improvements for reading index v4 files.
  * API additions and incompatible API changes</changelog>
  <changelog author="mimi.vx@gmail.com" date="1510574400">- remove unneeded dependency (python is used only for testsuite, which
    isn't used during build)</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1521028800">- Update to 0.26.3:
  * Fix cloning of the libgit2 project with git clone --recursive by removing an
    invalid submodule from our testing data.
  * Fix endianness of the port in p_getaddrinfo().
  * Fix handling of negative gitignore rules with wildcards.
  * Fix handling of case-insensitive negative gitignore rules.
  * Fix resolving references to a tag if the reference is stored with its fully
    resolved OID in the packed-refs file.
  * Fix checkout not treating worktree files as modified when only their mode has
    changed.
  * Fix rename detection with GIT_DIFF_FIND_RENAMES_FROM_REWRITES.
  * Fixes memory handling issues when reading crafted repository index files.
    The issues allow for possible denial of service due to allocation of large
    memory and out-of-bound reads.
    (CVE-2018-8098 bnc#1085257 CVE-2018-8099 bnc#1085256)
  * Updates the bundled zlib to 1.2.11. Users who build the bundled zlib are
    vulnerable to security issues in the prior version.</changelog>
  <changelog author="mgorse@suse.com" date="1532606400">- Update to version 0.26.5 (boo#1095219 boo#1100612 boo#1100613):
  * This is a security release fixing out-of-bounds reads when
    reading objects from a packfile. This corresponds to
    CVE-2018-10887 and CVE-2018-10888, which were both reported by
    Riccardo Schirone.
  * Changes in v0.26.4:
  * This is a security release fixing insufficient validation of
    submodule names (CVE-2018-11235, reported by Etienne
    Stalmans) and disallows `.gitmodules` files as symlinks.</changelog>
  <changelog author="astieger@suse.com" date="1534161600">- libgit2 0.26.6:
  * fix out-of-bounds reads when processing smart-protocol "ng"
    packets (bsc#1104641)</changelog>
</package>
<package pkgid="ce603fafc7b74a16f0f6e2e550caacd2dd79b1b0ba73e761eafc98ae8ab01c2f" name="libgphoto2" arch="src">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="6f9eb7464233b7671c2e34b06512a2a79a4a14fed706d515438f6b4857bebf64" name="libgphoto2-6" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="8987de0b9f6e2cd38d2ef73fa2a7b1613d40f7fefbdebc5aabe3685c17c05b26" name="libgphoto2-6-32bit" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="55307632893684d93bcbf9cb3d35f1ead7fa1fa705eb4d35aaa6aed41c2d294e" name="libgphoto2-6-lang" arch="noarch">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="055c5aa69539e7a566950a6fb7064ec19e2d688343079f5e1429a1dec6aca580" name="libgphoto2-devel" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="75dedab59e6d65649d78947d4c6c1537b4a13f0d1290909841c997d5f24209a6" name="libgphoto2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="179d429b55b88dada0e9469ba53e6bafa01d2b77477fa69318be20c006c1a6f2" name="libgphoto2-devel-doc" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="04d0cb9af3c474ff5accaed3c8c0dea6ce1892ab602411cb06667bf00b523cc9" name="libgphoto2-doc" arch="x86_64">
  <version epoch="0" ver="2.5.18" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1436097600">- updated to 2.5.8 release
- all:
  * Missing COPYRIGHT headers added.
  * Bug fixes for issues detected by Coverity.
- ptp2:
  * Canon Powershot/IXUS CHDK support
    Install the CHDK firmware and then use "gphoto2 --set-config chdk=On" to enable.
  * Canon EOS: Implemented new capture method for new Canon EOS to avoid hangs.
  * Canon EOS: New configuration variable: continuousaf
  * Canon EOS: event output for focusinfo / focusmask
  * Nikon DSLR: New configuration variables: movieiso, movieshutterspeed, moviehighisonr
  * Nikon Coolpix A: also manually add override opcodes for capture (please report if it works)
  * New USB ids:
  Sony: DSC-HX60V, Alpha-A7S, Alpha-A77 M2, Alpha A5100
  Panasonic: DMC-LS2
  Canon EOS 7D Mark II, Canon EOS M3
  Canon Powershot SX520 HS
  Fuji Fujifilm X-E2
  Samsung NX1
  * Media Player IDs synced with the libmtp ID database.
  * Lots of bugfixes.
- libgphoto2_port/libusb1:
  * Prefer libusb1 over libusb0 if both are present.
  * Asynchronous interrupt handling, to avoid losing usb interrupts during other
    operations.
- libgphoto2.keyring: replaced by my new 4096 bit key</changelog>
  <changelog author="dimstar@opensuse.org" date="1438948800">- Change udev BuildRequires for pkgconfig(udev)
- use pkg-config --modversion udev instead of querying the package
  database. udev is often installed as udev-mini in OBS' build env,
  which the rpm -q udev call could not find.</changelog>
  <changelog author="meissner@suse.com" date="1442750400">- add -devel to baselibs for use to build wine in 64bit environments</changelog>
  <changelog author="meissner@suse.com" date="1447848000">- updated to 2.5.9 release
  Now maintained (source and issue tracker) in GIT at https://github.com/gphoto/libgphoto2
  ptp2:
  * PTP/IP: fixes to support Ricoh Theta and Sony Alpha over WLAN better
  * unification of timeout with backoff handling
  * Canon EOS: fixed a timeout bug on wait_event
  * Canon EOS: report protection status correctly
  * Canon EOS: unlock the ui on close
  * Sony: bulb mode support (in manual mode, shutterspeed and bulb option)
  * Hook up PTP OpenCapture opcode
  * Nikon J5 support. Nikon now hides prop and opcodes even differently.
  * Added USB IDs:
  - Sony SLT A77V, A7R2, HDR-PJ260VE
  - Nikon DSLR D5500
  - Canon EOS 760D, 5Ds, 5Ds R
  - Nikon Coolpix AW110, S6300, S6800, S3700, S2900
  - Nikon 1 S2, J5
  - Ricoh Theta m15 (USB and WLAN)
  - GoProp Hero 4
  canon: readd old Canon IXUS 30.
  translations: updated ukrainian, vietnamese, polish, italian</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1451390400">- Several changes/fixes to packaging:
  * API documentation was packaged twice, once in the -devel package
    and once in the main package (under different paths), split off
    to separate libgphoto2-devel-doc package
  * Use apidocs from source tar instead of using doxygen
  * package user documentation in separate libgphoto2-doc package
  * remove obsolete hotplug scripts</changelog>
  <changelog author="meissner@suse.com" date="1458734400">- updated to 2.5.10 release
  libgphoto2:
  * added gp_camera_list_config, gp_camera_get_single_config, gp_camera_set_single_config
    additional configuration APIs for faster access to single configuration values.
  ptp2:
  * allow generic opcode commands with parameters, config variable "opcode"
  * fixed pretending that Nikon Coolpix S series is a Nikon 1 S.
  * Nikon: fixed problem with SDRAM capture
  * Canon EOS: handle "no focus" during capture
  * Canon EOS: handle --new correctly
  * Canon Powershot: handle lack of object protection setting
  * Ricoh Theta: support shutterspeed configuration
  * added size checking to PTP unpacking primitives
  * various bugfixes
  * New ids:
  * Imported Media Players and Android phones from libmtp
  * Sony Alpha A7S II, ILCE 7M2
  * Kodak Z990
  * Nikon Coolpix L840, S3600
  * Leica SL
  * Olympus TG-620, E-M5 Mark 2
  * Canon EOS 1D C, 750D
  * Canon IXUS 160
  * Fuji Film X-T1, X-T10, A-610
  pentax:
  * fixed some crashes on non-existing config variables
  * use portable directory api (helps Visual Studio)
  libgphoto2_port/vusb:
  * Implemented a virtual PTP camera for test purposes.
  libgphoto2_port/disk:
  * Support exfat fuse filesystems.
  all:
  * fixed various issues found by Coverity static analyzer
  * removed unistd.h headers where not needed to help Visual Studio
  translations:
  * updated swedish, brazilian portuguese, danish, polish, ukrainian, vietnamese</changelog>
  <changelog author="meissner@suse.com" date="1465473600">- libgphoto2-newjpeg.patch: jpeg_mem_src gets a const buffer now
  in new libjpeg-turbo.</changelog>
  <changelog author="meissner@suse.com" date="1465473601">- require: udev in the library package for the hwdb refresher
  bsc#982339</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="meissner@suse.com" date="1479643200">- updated to 2.5.11 release
  * canon:
  * not experimental anymore, for some years
  * some bugfixes in configuration handling
  * ptp2:
  * canon: EOS capture improvements, also supporting new EOS
  * sony: tethering and trigger capture implemented, capture stability improvements
  * sony: exposure compensation setting fixed
  * sony: capture and autofocus configurations, similar to eosremoterelease
  * generic: fixed serialnumber retrieval
  * nikon: "autofocus" config variable for global autofocus enable/disable (default on, default liveview off)
  * various bugs fixed, stability improved
  * ptpip: allow different event ports. --port ptpip:IP:dataport:eventport
  * New ids reported:
  - Sony Alpha 7, DSC-RX100M4, NEX-7, DSC-HX20V, Alpha 6300, A7S II, A7,
  - Nikon DSC Df, D7200, D5, D810A, 1 V3
  - Canon EOS 1Dx Mark 3, 80D, 5D Mark IV
  - Canon Digital IXUS 180
  - various music players / android phones imported from libmtp
  * libgphoto2:
  * Speed up initial startup.
  * Win32: store settings in the "User Profile\.gphoto\settings" and not in C:\\Windows anymore.
  * gp_widget_changed() no longer clears the "changed" state to make this API more consistent.
    Use gp_widget_set_changed(widget,FALSE) to do so.
  * examples:
  * sample-photobooth: a sample program handling tethering, SIGUSR1 driven capture and SIGUSR2
    based configuration reading.
  * sample-afl: code to inject afl fuzzing data
  * translations:
  * updated swedish, ukrainian, polish, finnish, russian, danish, polish, brazilian, serbian, dutch, chinese
- libgphoto2-newjpeg.patch: removed, upstream</changelog>
  <changelog author="meissner@suse.com" date="1483617600">- updated to 2.5.12 release
  ptp2:
  * Canon EOS: more fixes for Canon EOS 5D Mark IV and Canon EOS 80D.
  * Parrot Sequoia support and property decoding
  * Nikon 1: Fixed Nikon 1 capture
  * Sony Alpha: various bugfixes.
  * New USB IDs:
  * Nikon Coolpix AW130
  * Nikon DSC D3400
  * Parrot Sequoia
  * GoPro Hero, Hero4 Silver, Hero +
  * bugfixes and cleanups
  canon:
  * fixed zoom on some older Canon Powershots
  translations:
  * updated polish, ukrainian, vietnamese, danish, french, svensk</changelog>
  <changelog author="meissner@suse.com" date="1490097600">- updated to 2.5.12.1 temporary snapshot
  ptp2:
  * iPhone iOS 10.2 storage handling fixed, added dynamic storage handling
  * Sony Alpha Live View support.
  * Canon EOS M series capture enabled. (might not fully work yet)
  * Various crashes and endless loops fixed that were found by the AFL fuzzer.
  * Various bugfixes in Nikon, Canon capture
  * New USB Ids:
  * Sony: SLT A37, DSC-RX100M5
  * Nikon KeyMission 360
  * Canon PowerShot G16
  * Canon EOS M5
  * Fuji Fujifilm XT-2
  * GoPro Hero 5 Black</changelog>
  <changelog author="meissner@suse.com" date="1491652800">- updated to 2.5.13 release
  See below in 2.5.12.1 pre relase, also:
  pentax:
  * Now using the pktriggercord codebase
  * lots of improvements
  * Please report missing Pentax K USB ids that are supported by pktriggercord!</changelog>
  <changelog author="meissner@suse.com" date="1496664000">- updated to 2.5.14 release
  * ptp2:
  * Canon EOS M remote control / capture support (M3, M5, M10 ... but not the original EOS M currently)
  * fix for Canon EOS camera crash bug introduced in 2.5.13.
  * Fuji XT-2 capture support (firmware update needed, might work for other Fuji XT too)
  * Canon EOS 77D added.
  * various bugfixes
  * added USB IDs:
  * Sony DSC-RX10M3, DSC-HX90V
  * Sony UMC-R10C
  * Nikon D5600,
  * Canon EOS 77D
  * Fuji XT-20
  * synced MTP device ids from libmtp
  * more issues fixed that were found by the AFL fuzzer
  * pentax:
  * Added Pentax K5-II, Pentax K3-II
  * libgphoto2_port:
  * fixed gp_log_remove_func
  * libgphoto2_port/vusb:
  * support f-number, shutterspeed, and exposurebias in the virtual PTP camera
  * all:
  * several issues found by gcc 7 fixed
  * translations:
  * updated ukrainian, polish, vietnamese, french, swedish</changelog>
  <changelog author="meissner@suse.com" date="1500206400">- libgphoto2-fix-fuji.patch: check before using a ptp property that
  is only available in some updated Fuji cameras (bsc#1048853)</changelog>
  <changelog author="meissner@suse.com" date="1506945600">- updated to 2.5.15 release
  - ptp2:
  * fuji: Fix cameras without new capture properties.
  * Canon EOS: config aspectratio, highisonr
  * Canon EOS: emit CAPTURECOMPLETE event
  * Canon EOS: whitebalanaceadjustment is 32bit signed, not 16bit signed
  * usb: better error feedback
  * fixed some bugs found by AFL fuzzing
  * Added USB ids:
  * Sony: A6500, HX400V
  * Nikon: D500, D7500
  * Olympus: VR360
  * Canon PowerShot: ELPH 350 HS
  * Canon EOS: 200D, Rebel T7i
  * Fuji: GFX 50 S
  * Ricoh Theta S, Theta SC
  - libgphoto2_port/vusb:
  * now default disabled as it confused people, enable with --enable-vusb
- libgphoto2-fix-fuji.patch: upstreamed</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Avoid running fdupes across partitions. Replace old tar
  options, old RPM shell variables by new constructs.
  Rectify RPM groups. Make macro style consistent again.</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- updated to 2.5.16 release
  - ptp2: emergency bugfix as a previous bugfix broke some detection features</changelog>
  <changelog author="meissner@suse.com" date="1523880000">- updated to 2.5.17 release
  - ptp2:
  * Apple iOSX: handle root directory objects that have ParentObject==StorageID instead of 0
  * implement PTP 1.1 Manifest reading and hook into filesystem. currently only supported by Apple iOS.
  * Canon PowerShot CHDK live view support.
  * Canon EOS: prepare capture needs to wait a bit on a crucial place to get all events.
    might fix some PTP Device Busy reports.
  * Canon EOS: split bulk downloads into pieces of partial downloads. This might cure the Error 70.
  * Canon EOS: Improved EOS M capture
  * Canon CHDK: live preview capture support added
  * Added USB IDs:
  * Sony A7r III
  * Nikon CoolPix L430
  * Nikon D850
  * Canon EOS M2, M6, M100
  * Canon EOS 6D Mark II
  * Fuji Film X-Pro 2
  - pentax:
  * Code updates imported from pkremote
  - libgphoto2:
  * Report file changes via GP_EVENT_FILE_CHANGED (hooked up for Canon EOS currently)
  - translations:
  * updates spanish, chinese</changelog>
  <changelog author="meissner@suse.com" date="1526212800">- updated to 2.5.18 release (bsc#1091309)
  - ptp2:
    Canon EOS: Fixed file download on several EOS brands, broken by 2.5.17 release.
  - pentax:
    Added K01 and K70 models.</changelog>
</package>
<package pkgid="9cf190678ddb307853282a003d39db592eb44f2ce192bae910692dbc347b3012" name="libipa_hbac-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="5ecfbecec3c8db09f8539235df01aea46010fa055e838b124ce235a247f61f2b" name="libipa_hbac0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="a8c72467d952f7f7584e47f72da0b46cdfa31adf3a1448b6c4b9aaca8c4ce93b" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="23849aff178c5f8c3a58673e8e49584ffc9808550a2b017c918fadfc9a148115" name="libirs-devel" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="a6a7ae35ebd38e5b7ba47c585c60da42448513fa3fc46160c8f783ad34d62ff8" name="libirs160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="b40bc73b7c9b4843f845915744d1ffa1e05435e3fcd0e1ef82c80ff082c1f192" name="libirs160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="7a728e6acaf3b7e2c2103a4e10958fe03f861d408daa3e1da0d00239f2022224" name="libirs160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="8e6ba3bd744a0b129b4c553936069c1f208c0531148f448e3d23180a86e98f89" name="libirs160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="6d7d1302eca9c75241c92fde16c04c7eaba8becd6aa777b03d24503c62e68798" name="libisc166-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="20042745b1447ae46571d25d09ecc33e4467a829e334407f4540539b87b7835b" name="libisc166-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="f1f1b7ed0513fd3445ad4e1600413d0cd926d9f2e411ee4cd74b2873eca31415" name="libisc166" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="eb1a35c5e2aad57b6a6d158f073cbc484e1c0ec5a276ff957872ffb47763052f" name="libisc166" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="3c837869c6991db32ed2cd9ca577552b2c99d3562e103dca522e2f9da64aed78" name="libisccc160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="9f2e6de19fe9230487023261ede9bca9c21f9541a3924e3b37fb8ee3e3e6918a" name="libisccc160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="2c763d856748180334fecc357e6fdc35baea666440cb621d24a9bff86903794d" name="libisccc160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="084bb14317b5c81e4fb1765a59e923f2c0f912d4fd9b8753efdad2d40799eac2" name="libisccc160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="60f225f9e5dd15f344529812d4af1a716c5490a696221f5f4aea80b3fc765977" name="libisccfg160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="da4e9b83fa500b82b0c8b42d38c36c08b1b36525abb92a5718d3b59d5b28f146" name="libisccfg160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="4017b3dacae22d3be9ee7e40b9e5e28d761a12996b00a15beb269fff71d71547" name="libisccfg160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="d04ec6d167346fdf9d18e6ce11388db7cb8e8ef441ca26909afbef706a046062" name="libisccfg160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="6a21ea8baf344688904cdc377fe17f92b57815e5d89ee2ea55d5fde34d7b81d9" name="libisds" arch="src">
  <version epoch="0" ver="0.10.8" rel="lp150.2.3.1"/>
  <changelog author="ppisar@redhat.com" date="1277812800">- 0.3.1 version bump
- Create ~/.gnupg to workaround bug in gnupg2-smime</changelog>
  <changelog author="ppisar@redhat.com" date="1292846400">- 0.4 bump, it breaks ABI
- Use smaller xz archive instead of bzip2
- Do tests in parallel</changelog>
  <changelog author="ppisar@redhat.com" date="1297425600">- Rebuild with GCC 4.6
- Remove BuildRoot stuff
- Make devel subpackage dependencies ISA specific</changelog>
  <changelog author="ppisar@redhat.com" date="1299153600">- 0.5 bump (breaks ABI, API preserved)
- Remove aplied patch and GPG hack</changelog>
  <changelog author="ppisar@redhat.com" date="1351598400">- 0.6.1 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1351684800">- 0.6.2 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1357214400">- 0.7 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1364385600">- Update config.sub to support aarch64 (bug #925782)</changelog>
  <changelog author="ppisar@redhat.com" date="1382356800">- 0.8 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1396440000">- Use _DEFAULT_SOURCE where _BSD_SOURCE macro presents to satisfy glibc-2.19.90</changelog>
  <changelog author="ppisar@redhat.com" date="1407844800">- 0.9 bump</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Cleanup for openSUSE
- Version bump to 0.10:
  * A new ISDSSearch2 service was implemented by an isds_find_box_by_fulltext()
    function.
  * The OpenSSL library can be used instead of the default GPGme library by
    specifying --enable-openssl-backend option to the configure script.
  * When parsing ISO 8601 date-time strings from a server response, microsecond
    fractions are properly rounded (half up) now.
  * An use-after-free bug in parsing SOAP response has been fixed.
  * Handling su_seconds_t type used in the timeval structure was corrected to
    enable flawless compilation with Mac OS X standard library.
  * Various signedness mismataches which could lead to an undefined behaviour
    were fixed.
  * A work-around for accessing the strdup(3) function in Mac OS X standard
    library was applied.</changelog>
  <changelog author="tchvatal@suse.com" date="1441627200">- Version bump to 0.10.1:
  * Fix expired certificates so the testsuite pass again</changelog>
  <changelog author="jslaby@suse.com" date="1460376000">- Version bump to 0.10.3:
  * l10n: Update translation catalogues
  * Correct _isds_build_url_from_context() documentation
  * Do not use dolar in formatting strings
  * Fixed a potential bug when printing debugging information.
  * Fix building without libcurl</changelog>
  <changelog author="mpluskal@suse.com" date="1460376001">- Add gpg signature
- Small cleanup with spec-cleaner
  * use valid rpm category
  * use pkgconfig() style dependencies
-Update build dependencies
  * add gpgme-devel</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version bump to 0.10.5:
  * l10n: Update translation catalogues
  * Added a new value into isds_DbState.
  * Fixed a bug. User identification didn't work properly.</changelog>
  <changelog author="jslaby@suse.com" date="1476964800">- Version bump to 0.10.6:
  * l10n: Update translation catalogues
  * Adapt to OpenSSL 1.1.0</changelog>
  <changelog author="tchvatal@suse.com" date="1496577600">- Disable werror</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version bump to 0.10.7:
  * l10n: Update translation catalogues
  * doc: Annotate documentation for new box types
  * Added OVM_FO, OVM_PFO and OVM_PO box types.
  * Add missing user and sender types to example client...
  * Added PFO_AUDITOR box type.
  * Added RECEIVER and GUARDIAN user types.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Version bump to 0.10.8:
  * Various memory leaks fixed
  * Recognise EV8</changelog>
</package>
<package pkgid="94957d0ec09a85e75c86f77857d2fa517f8cac9a825db66d3e4125417855c204" name="libisds-devel" arch="x86_64">
  <version epoch="0" ver="0.10.8" rel="lp150.2.3.1"/>
  <changelog author="ppisar@redhat.com" date="1277812800">- 0.3.1 version bump
- Create ~/.gnupg to workaround bug in gnupg2-smime</changelog>
  <changelog author="ppisar@redhat.com" date="1292846400">- 0.4 bump, it breaks ABI
- Use smaller xz archive instead of bzip2
- Do tests in parallel</changelog>
  <changelog author="ppisar@redhat.com" date="1297425600">- Rebuild with GCC 4.6
- Remove BuildRoot stuff
- Make devel subpackage dependencies ISA specific</changelog>
  <changelog author="ppisar@redhat.com" date="1299153600">- 0.5 bump (breaks ABI, API preserved)
- Remove aplied patch and GPG hack</changelog>
  <changelog author="ppisar@redhat.com" date="1351598400">- 0.6.1 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1351684800">- 0.6.2 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1357214400">- 0.7 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1364385600">- Update config.sub to support aarch64 (bug #925782)</changelog>
  <changelog author="ppisar@redhat.com" date="1382356800">- 0.8 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1396440000">- Use _DEFAULT_SOURCE where _BSD_SOURCE macro presents to satisfy glibc-2.19.90</changelog>
  <changelog author="ppisar@redhat.com" date="1407844800">- 0.9 bump</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Cleanup for openSUSE
- Version bump to 0.10:
  * A new ISDSSearch2 service was implemented by an isds_find_box_by_fulltext()
    function.
  * The OpenSSL library can be used instead of the default GPGme library by
    specifying --enable-openssl-backend option to the configure script.
  * When parsing ISO 8601 date-time strings from a server response, microsecond
    fractions are properly rounded (half up) now.
  * An use-after-free bug in parsing SOAP response has been fixed.
  * Handling su_seconds_t type used in the timeval structure was corrected to
    enable flawless compilation with Mac OS X standard library.
  * Various signedness mismataches which could lead to an undefined behaviour
    were fixed.
  * A work-around for accessing the strdup(3) function in Mac OS X standard
    library was applied.</changelog>
  <changelog author="tchvatal@suse.com" date="1441627200">- Version bump to 0.10.1:
  * Fix expired certificates so the testsuite pass again</changelog>
  <changelog author="jslaby@suse.com" date="1460376000">- Version bump to 0.10.3:
  * l10n: Update translation catalogues
  * Correct _isds_build_url_from_context() documentation
  * Do not use dolar in formatting strings
  * Fixed a potential bug when printing debugging information.
  * Fix building without libcurl</changelog>
  <changelog author="mpluskal@suse.com" date="1460376001">- Add gpg signature
- Small cleanup with spec-cleaner
  * use valid rpm category
  * use pkgconfig() style dependencies
-Update build dependencies
  * add gpgme-devel</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version bump to 0.10.5:
  * l10n: Update translation catalogues
  * Added a new value into isds_DbState.
  * Fixed a bug. User identification didn't work properly.</changelog>
  <changelog author="jslaby@suse.com" date="1476964800">- Version bump to 0.10.6:
  * l10n: Update translation catalogues
  * Adapt to OpenSSL 1.1.0</changelog>
  <changelog author="tchvatal@suse.com" date="1496577600">- Disable werror</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version bump to 0.10.7:
  * l10n: Update translation catalogues
  * doc: Annotate documentation for new box types
  * Added OVM_FO, OVM_PFO and OVM_PO box types.
  * Add missing user and sender types to example client...
  * Added PFO_AUDITOR box type.
  * Added RECEIVER and GUARDIAN user types.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Version bump to 0.10.8:
  * Various memory leaks fixed
  * Recognise EV8</changelog>
</package>
<package pkgid="4463dafcbe0c4afd0c5ceb823fa7869861a3323248b6a562dfbfba769beeb5a8" name="libisds5" arch="x86_64">
  <version epoch="0" ver="0.10.8" rel="lp150.2.3.1"/>
  <changelog author="ppisar@redhat.com" date="1277812800">- 0.3.1 version bump
- Create ~/.gnupg to workaround bug in gnupg2-smime</changelog>
  <changelog author="ppisar@redhat.com" date="1292846400">- 0.4 bump, it breaks ABI
- Use smaller xz archive instead of bzip2
- Do tests in parallel</changelog>
  <changelog author="ppisar@redhat.com" date="1297425600">- Rebuild with GCC 4.6
- Remove BuildRoot stuff
- Make devel subpackage dependencies ISA specific</changelog>
  <changelog author="ppisar@redhat.com" date="1299153600">- 0.5 bump (breaks ABI, API preserved)
- Remove aplied patch and GPG hack</changelog>
  <changelog author="ppisar@redhat.com" date="1351598400">- 0.6.1 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1351684800">- 0.6.2 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1357214400">- 0.7 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1364385600">- Update config.sub to support aarch64 (bug #925782)</changelog>
  <changelog author="ppisar@redhat.com" date="1382356800">- 0.8 bump</changelog>
  <changelog author="ppisar@redhat.com" date="1396440000">- Use _DEFAULT_SOURCE where _BSD_SOURCE macro presents to satisfy glibc-2.19.90</changelog>
  <changelog author="ppisar@redhat.com" date="1407844800">- 0.9 bump</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Cleanup for openSUSE
- Version bump to 0.10:
  * A new ISDSSearch2 service was implemented by an isds_find_box_by_fulltext()
    function.
  * The OpenSSL library can be used instead of the default GPGme library by
    specifying --enable-openssl-backend option to the configure script.
  * When parsing ISO 8601 date-time strings from a server response, microsecond
    fractions are properly rounded (half up) now.
  * An use-after-free bug in parsing SOAP response has been fixed.
  * Handling su_seconds_t type used in the timeval structure was corrected to
    enable flawless compilation with Mac OS X standard library.
  * Various signedness mismataches which could lead to an undefined behaviour
    were fixed.
  * A work-around for accessing the strdup(3) function in Mac OS X standard
    library was applied.</changelog>
  <changelog author="tchvatal@suse.com" date="1441627200">- Version bump to 0.10.1:
  * Fix expired certificates so the testsuite pass again</changelog>
  <changelog author="jslaby@suse.com" date="1460376000">- Version bump to 0.10.3:
  * l10n: Update translation catalogues
  * Correct _isds_build_url_from_context() documentation
  * Do not use dolar in formatting strings
  * Fixed a potential bug when printing debugging information.
  * Fix building without libcurl</changelog>
  <changelog author="mpluskal@suse.com" date="1460376001">- Add gpg signature
- Small cleanup with spec-cleaner
  * use valid rpm category
  * use pkgconfig() style dependencies
-Update build dependencies
  * add gpgme-devel</changelog>
  <changelog author="jslaby@suse.com" date="1476100800">- Version bump to 0.10.5:
  * l10n: Update translation catalogues
  * Added a new value into isds_DbState.
  * Fixed a bug. User identification didn't work properly.</changelog>
  <changelog author="jslaby@suse.com" date="1476964800">- Version bump to 0.10.6:
  * l10n: Update translation catalogues
  * Adapt to OpenSSL 1.1.0</changelog>
  <changelog author="tchvatal@suse.com" date="1496577600">- Disable werror</changelog>
  <changelog author="jslaby@suse.com" date="1500465600">- Version bump to 0.10.7:
  * l10n: Update translation catalogues
  * doc: Annotate documentation for new box types
  * Added OVM_FO, OVM_PFO and OVM_PO box types.
  * Add missing user and sender types to example client...
  * Added PFO_AUDITOR box type.
  * Added RECEIVER and GUARDIAN user types.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Version bump to 0.10.8:
  * Various memory leaks fixed
  * Recognise EV8</changelog>
</package>
<package pkgid="5b3fe42fb05faa1d285bf9d9340327b1c4eb2b7778444548cc6999e686704437" name="libiso9660-10" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="f7e21f2df69d5d05a71b3a4c3a3d5710eb5e35ff07ad857d51d5211052d640c8" name="libiso9660-10-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="93e3dec991d4e57f2e79454c987108f90e444580fb44bbce5940e61cff5a007a" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="ea2919dcc6b077602ff044167d1897e09a18f0fdc7eca23456bfc484837594f3" name="libjavascriptcoregtk-4_0-18" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="bea220db89ca9513cbdabd41d6cf1cfd754f547fea0755468340e1f02b4a72bc" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="099f13176a59b414967ed06324c99709a98da6abf49dc3bbd48c59380e88f2b0" name="libjavascriptcoregtk-4_0-18-32bit" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="d81373313983d69fe0e2e838dad297703afac6f4ebfab37c24ea9318050112b4" name="libkgapi" arch="src">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="7de62c544b8f386b1dc80002f8d2d39aca17c0975b11a3a3b58866e30e9a0a53" name="libkgapi-devel" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="4047c633bb72e2263ac529720c90d8f91004c847fe4c0dd9b1e009fdbd36de1e" name="libkgapi-lang" arch="noarch">
  <version epoch="0" ver="17.12.3" rel="lp150.2.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix some clazy warning</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776000">- Make libKPimGAPICore5 provide libkgapi, so that instaling
  languages (which use a single file) will work</changelog>
  <changelog author="lbeltrame@kde.org" date="1492776001">- Remove all Recommends on non-core packages, since they will
  require the core one</changelog>
  <changelog author="lbeltrame@kde.org" date="1493294400">- Add upstream patch adapt-to-changes-in-google-oauth.patch:
  * Fix for changes in Google OAuth process</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Prepare 5.5.1
  * Auth: add URL bar and SSL indicator to the authentication page
  * Auth: don't store cookies
  * Auth: Adapt to changes in Google OAuth token retrieval process
  * Use same variable as other lib. It's more easy to upgrade version
  * Fix some clazy warning
- Drop upstreamed patches:
  * adapt-to-changes-in-google-oauth.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * None</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * Update version
  * Revert "Try to fix build on windows"
  * Try to fix build on windows
  * Fix compile on windows
  * Use isEmpty() here
  * Add more definitions QT_NO_URL_CAST_FROM_STRING
  * Remove Qt module from include
  * Remove module name
  * Use nullptr
  * use nullptr
  * Pedantic
  * Use qCDebug
  * Fix indent
  * Port to for(...:...)
  * Port some others Q_FOREACH
  * Remove more q_foreach
  * Convert some Q_FOREACH
  * not necessary
  * Port to for(...:...)
  * We depend against qt5.7
  * Increase version
  * Fix dependancies</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * lintcmake https://build.neon.kde.org/job/xenial_stable_applications_libkgapi_lintcmake/21/console Unknown CMake command "find_dependency".
  * Fix version</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Port to new connect api
  * Port to new connect api
  * Port to new connect api
  * Remove project here
  * not necessary to have project here
  * Fix merge conflict
  * Add parent
  * Fix includes
  * Adapt to KCalCore API changes
  * Port Period and Duration to QDateTime
  * Adapt to KCalCore lastModified/created API changes
  * We can remove this compatibility now
  * Make run without install them
  * Remove unused line</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Contacts: fix sync of alternative URL types (kde#387344)</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1515844800">- Add Fix-token-page-URL.patch to make authentification with
  Google services work again after a change by Google (kde#388483)</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Fix oauth focus (kde#389263)
  * Reenable setting the authentication URL
  * Retrieve OAuth2 token with HTTP socket
  * Check for the correct "kind" strings
  * Fix token page URL (kde#388483)
- Dropped patches, now upstream:
  * Fix-token-page-URL.patch</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1532088000">- Add patch 0001-Use-QtInfoMsg-as-for-other-repo.patch from upstream:
  * Convert all messages to use QtInfoMsg so they can be properly
    filtered and don't reach the logs by default (boo#1101938)</changelog>
</package>
<package pkgid="acd9a2dbd856a88914452a741678f35c1a0542bb1156dfe22bd974e0fb26637b" name="libkpathsea6" arch="x86_64">
  <version epoch="0" ver="6.2.3" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d83009fb275c6175936c39932d7d7066c7c2b532142a39633c01122f0338ed9d" name="libksysguard5-32bit" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="c7d4a3c3a756426ed601a6279603f6b14a0c140556f13e8def76d9d231983481" name="libksysguard5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="c2f7b245ac6d1ab8bafc20f79f1a561437a540374e1abfc11e19584339495617" name="libksysguard5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="8c85a2939516407a4c2b27e2c7ab0a8c2798133e80ef49c3ceca74923e01870e" name="libksysguard5-devel-32bit" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="0dee3e388d5b1afea4f96c4f950e4f4c17af2cae1ab1d0ed4f9bfa237a185223" name="libksysguard5-devel" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="5e8af75e71a46a3ac1f064b0caaa7b61cf2b0e41cf3d5b112ad12dae469d4a1b" name="libksysguard5-helper" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="fae08770e1a9d1c4fb0c9df3a89868a6af4d7feb4eb477c21faa61f6f12cc6aa" name="libksysguard5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * libksysguard does not appear to use QtScript, but just includes it.
  * Inject custom style sheet with system colors (kde#360214)
  * Use Q_DECL_OVERRIDE
  * Fix compilation on CentOS 6</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Add a per-process CPU usage graph shown in the process list
  * Remove obsolete reviewboardrc file
  * Only initialize variable if we are going to use it
  * Modernize: Use nullptr where possible
  * Modernize: Q_DECL_OVERRIDE -&gt; override
  * Modernize: Use override everywhere
  * Minor: Fix compiler warning</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Remove usage of deprecated QString::null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ProcessModel] Return invalid QVariant() for when window is not known</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [ProcessModel] Center more column headings (kde#394467)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="3b4b50ec2651faa8ef363e6493798643c3e0ebb6a4ede9cf6d078df827b3aea8" name="liblapack3" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="4d227b2d26535b07e52abe4137244caa42294c51b91ad40022df22143ed906bf" name="liblapack3-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="8fa7dd436acb3dac5ec1676e6f2e0bc59ede64810ec872ab3c861c572c07cc53" name="liblapacke3" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="c536d8bab5d332089fd45073d2c2c66fb2d494994a51355da215bcabb8b2ddfd" name="liblapacke3-32bit" arch="x86_64">
  <version epoch="0" ver="3.5.0" rel="lp150.3.3.1"/>
  <changelog author="burnus@net-b.de" date="1336132800">- Update to 3.4.1
  * Bug fixes</changelog>
  <changelog author="coolo@suse.com" date="1336564800">- fixing dependencies for devel-32bit</changelog>
  <changelog author="saschpe@suse.de" date="1337601600">- Change obsoletes '&lt;=' for lapack and blas back to '&lt;', there was a
  version update in between
- Remove psfig.tex (bnc#757332)</changelog>
  <changelog author="kukuk@suse.de" date="1338465600">- doxygen &gt;= 1.7 is required for building docu</changelog>
  <changelog author="scorot@free.fr" date="1342353600">- build the c interface lapacke</changelog>
  <changelog author="scorot@free.fr" date="1342699200">- update baselibs.conf</changelog>
  <changelog author="idonmez@suse.com" date="1343217600">- Fix bnc#772628</changelog>
  <changelog author="burnus@net-b.de" date="1352203200">- Update to 3.4.2
  * Bug fixes</changelog>
  <changelog author="scorot@free.fr" date="1358078400">- add update-alternative support to allow user to easily switch
  between several blas and lapack libraries</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1363348800">- Split devel packages into devel and devel-static</changelog>
  <changelog author="lnt-sysadmin@lists.lrz.de" date="1383048000">- packaged symlinks created by update-alternative as %ghost files
- removed quotes from update-alternative command to silence rpmlint warning</changelog>
  <changelog author="burnus@net-b.de" date="1385035200">- Update to 3.5.0
  * Added Hermitian LDLT factorization routines with rook pivoting
    algorithm
  * 2-by-1 CSD to be used for tall and skinny matrix with orthonormal
    columns
  * New stopping criteria for balancing
  * New complex division algorithm
  * Various improvements
- No longer removing files due to license reasons as one file is
  no longer part of Lapack and the others have been replaced by
  new ones under the normal LAPACK license</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1403092800">- Move blas and lapack libraries to subdirectories for fixing
  update-alternatives [bnc#861081]
- Add %posttrans scripts for fixing migration problems.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Include update-alternatives dependency in subpackages that use it
  to guarantee it will be available.</changelog>
  <changelog author="idonmez@suse.com" date="1405512000">- Add baselibs.conf to sources</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1431086400">- Fix static libraries list</changelog>
  <changelog author="dimstar@opensuse.org" date="1495022400">- Build the man pages in a separate .spec file (lapack-man). The
  resulting rpm names are kept identical. This allows us to drop
  doxygen out of lapack's main package buildroot, thus eliminating
  a build cycle.</changelog>
  <changelog author="jengelh@inai.de" date="1496232000">- Correct RPM groups</changelog>
  <changelog author="rguenther@suse.com" date="1515758400">- Package lapack_testing.py from lapack 3.8.0 with adjusted interpreter
  and adjust BuildRequires to python3.  [bnc#1075766]</changelog>
  <changelog author="rguenther@suse.com" date="1523275200">- Build tmglib and fold contents into existing liblapack{.a,.so.3}.
  [bnc#1087426]</changelog>
</package>
<package pkgid="709940f3902e4b553dcdca65df3bb8326de7d689865a4868f374639964c40e6d" name="libldap-2_4-2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="91198b4168365a4b9d14ccd74a9dab4ab950e7263f4dcb44806df2d21214d97d" name="libldap-2_4-2-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="379d5b6b6336ad9b3e888c227e6b49fe6455a057d7c139aa88a01bee02d9586d" name="libldap-data" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="2767913fff08dbf454deb6c7e8d3c50d4d423897ea6d7133fb2e891fd64b69d0" name="liblwres160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="675c63092863e1f73fc3c1c206d16f9dce5177bb8990f9c5e7a294b0a4960a67" name="liblwres160-32bit" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="5d15e6af832365999ce4799c60926053c32ee3a397025882a119b8e26f01e8ae" name="liblwres160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="0edc6745a185493e21f53c0de29b04b32efe42fc8e0a05c2c05a182844cd549f" name="liblwres160" arch="x86_64">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="591f6fdbeffbb499932f29607adc5935ce992f9024a6c81a60050e6aaf6d1699" name="liblxc-devel" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.3.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- Split into packages to follow best practice.
  * lxc
  * liblxc1
  * liblxc-devel
  Also, we need liblxc1 to be separately installable from LXC for LXD.
- Tweak descriptions.</changelog>
  <changelog author="cbrauner@suse.de" date="1468065601">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
</package>
<package pkgid="d5c778ee427ecf9ff7bf4229d8712872daa14405fb91a2e8c89efb132069f182" name="liblxc-devel" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.6.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533556800">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
</package>
<package pkgid="cb277cb66f985a2bfffc91b3a3585f0383dab1a08861aa1a33088ee7aab126e2" name="liblxc1" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.3.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- Split into packages to follow best practice.
  * lxc
  * liblxc1
  * liblxc-devel
  Also, we need liblxc1 to be separately installable from LXC for LXD.
- Tweak descriptions.</changelog>
  <changelog author="cbrauner@suse.de" date="1468065601">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
</package>
<package pkgid="0fa78f9c769ca70bfe8698088146e78aaa241fa8ca227cd3431c252afb8b4f42" name="liblxc1" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.6.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533556800">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
</package>
<package pkgid="8c9142e7c10bf7e8ead28c9dd69e154ef2696f28ce6690dc3b9be4306055522e" name="libmetrics-devel" arch="x86_64">
  <version epoch="0" ver="0.4" rel="lp150.2.3.1"/>
  <changelog author="jfehlig@novell.com" date="1245412800">- vhostmd is currently only used with Xen so make it
  ExclusiveArch x86 and x86_64</changelog>
  <changelog author="jfehlig@novell.com" date="1246017600">- Add metric type 'XML'</changelog>
  <changelog author="jfehlig@novell.com" date="1246017601">- Allow larger buffer for 'xml' type</changelog>
  <changelog author="jfehlig@novell.com" date="1246276800">- Validate XML returned by 'action' for metric type 'xml'
- Do not convert metrics values internally in vhostmd.  Treat
  all metric values as strings and leave it to consumers to do
  any conversion.</changelog>
  <changelog author="dmueller@suse.de" date="1253102400">- fix devel package requires</changelog>
  <changelog author="aj@suse.de" date="1254225600">- Fix devel package requires.</changelog>
  <changelog author="jfehlig@novell.com" date="1256904000">- Release of version 0.3
  - change default disk location to /dev/shm/vhostmd0
  - open metrics disk with O_DIRECT
  - Fixes for '--with{,out}-xenstore' option
  - Allow gcc to check calls to vu_log* printf-like functions
  - Always connect to libvirt read-only
  - Add '-u user' command line option to drop root privs
  - Add '-c uri' command line option to specify libvirt connection
    URI
  - Add CONNECT substitution &lt;action&gt;s
  - vm-dump-metrics: On error, exit with status code 1</changelog>
  <changelog author="jfehlig@novell.com" date="1260360000">- Release of version 0.4
  - configure.ac: Fix C compiler detection to be compatible with
    automake
  - chdir ("/") when daemonizing self</changelog>
  <changelog author="jfehlig@novell.com" date="1269950400">- Fixed vm-dump-metrics man page
  bnc#592242
  manpage.patch
- Build vhostmd without xenstore support since it is not well
  tested on SuSE distributions.  Additionally, it can be confusing
  when used in context of KVM where xenstore does not exist.
- Strip 's' (seconds) from metrics that contain a time value
  vhostmd-conf.patch
- Remove stray newline from metric values to improve XML readability
  value-newline.patch</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jfehlig@suse.com" date="1386676800">- link libmetrics with libxml to fix Factory build</changelog>
  <changelog author="mlatimer@suse.com" date="1402488000">- Various updates to vmhostd.xml
  - Replace xm commands with xl commands
  - Add /sbin and /bin to &lt;path&gt;
  - Use xen_version for VirtualizationProductInfo
  vhostmd-conf.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1402660800">- Further updates to vmhostd.xml
  - Support both xen and non-xen hypervisors (kvm)
  - Document reserved characters in 'action' field
  - Revert xen_version back to major/minor/extra to maintain compatability
    with xend
  - Minor syntax and legibility cleanup
  vhostmd-conf.patch
  bnc#872736</changelog>
  <changelog author="jfehlig@suse.com" date="1415016000">- Fix Factory build
  build-fix.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1415707200">- Improve build scripts
  Replace build-fix.patch with build-improvements.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1421236800">- Build vhostmd for all architectures</changelog>
  <changelog author="jfehlig@suse.com" date="1493294400">- Add systemd service file
  add-systemd-service.patch
  bsc#1036427
- Replace build-improvements.patch with
  modernize-build-files.patch sent upstream</changelog>
  <changelog author="jengelh@inai.de" date="1493467200">- Fix RPM group for libmetrics0
- Replace old RPM shell vars in %install
- Author lists do not belong into the description
- Use macros in file list to compact paths</changelog>
  <changelog author="jfehlig@suse.com" date="1525089600">- vhostmd.service: fix typo and move Documentation from [Service]
  to [Unit] section (changed add-systemd-service.patch)
  bsc#1090769</changelog>
  <changelog author="jfehlig@suse.com" date="1529928000">- Handle SIGPIPE and reconnect to libvirtd
  c7646e32-handle-sigpipe-reconnect.patch,
  03dc9982-fix-deallocation.patch
  bsc#1098804</changelog>
</package>
<package pkgid="2e9dc2795f019fb83e0fa503886cd82429191125a47c5afa08b77715c71a67e0" name="libmetrics0" arch="x86_64">
  <version epoch="0" ver="0.4" rel="lp150.2.3.1"/>
  <changelog author="jfehlig@novell.com" date="1245412800">- vhostmd is currently only used with Xen so make it
  ExclusiveArch x86 and x86_64</changelog>
  <changelog author="jfehlig@novell.com" date="1246017600">- Add metric type 'XML'</changelog>
  <changelog author="jfehlig@novell.com" date="1246017601">- Allow larger buffer for 'xml' type</changelog>
  <changelog author="jfehlig@novell.com" date="1246276800">- Validate XML returned by 'action' for metric type 'xml'
- Do not convert metrics values internally in vhostmd.  Treat
  all metric values as strings and leave it to consumers to do
  any conversion.</changelog>
  <changelog author="dmueller@suse.de" date="1253102400">- fix devel package requires</changelog>
  <changelog author="aj@suse.de" date="1254225600">- Fix devel package requires.</changelog>
  <changelog author="jfehlig@novell.com" date="1256904000">- Release of version 0.3
  - change default disk location to /dev/shm/vhostmd0
  - open metrics disk with O_DIRECT
  - Fixes for '--with{,out}-xenstore' option
  - Allow gcc to check calls to vu_log* printf-like functions
  - Always connect to libvirt read-only
  - Add '-u user' command line option to drop root privs
  - Add '-c uri' command line option to specify libvirt connection
    URI
  - Add CONNECT substitution &lt;action&gt;s
  - vm-dump-metrics: On error, exit with status code 1</changelog>
  <changelog author="jfehlig@novell.com" date="1260360000">- Release of version 0.4
  - configure.ac: Fix C compiler detection to be compatible with
    automake
  - chdir ("/") when daemonizing self</changelog>
  <changelog author="jfehlig@novell.com" date="1269950400">- Fixed vm-dump-metrics man page
  bnc#592242
  manpage.patch
- Build vhostmd without xenstore support since it is not well
  tested on SuSE distributions.  Additionally, it can be confusing
  when used in context of KVM where xenstore does not exist.
- Strip 's' (seconds) from metrics that contain a time value
  vhostmd-conf.patch
- Remove stray newline from metric values to improve XML readability
  value-newline.patch</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jfehlig@suse.com" date="1386676800">- link libmetrics with libxml to fix Factory build</changelog>
  <changelog author="mlatimer@suse.com" date="1402488000">- Various updates to vmhostd.xml
  - Replace xm commands with xl commands
  - Add /sbin and /bin to &lt;path&gt;
  - Use xen_version for VirtualizationProductInfo
  vhostmd-conf.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1402660800">- Further updates to vmhostd.xml
  - Support both xen and non-xen hypervisors (kvm)
  - Document reserved characters in 'action' field
  - Revert xen_version back to major/minor/extra to maintain compatability
    with xend
  - Minor syntax and legibility cleanup
  vhostmd-conf.patch
  bnc#872736</changelog>
  <changelog author="jfehlig@suse.com" date="1415016000">- Fix Factory build
  build-fix.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1415707200">- Improve build scripts
  Replace build-fix.patch with build-improvements.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1421236800">- Build vhostmd for all architectures</changelog>
  <changelog author="jfehlig@suse.com" date="1493294400">- Add systemd service file
  add-systemd-service.patch
  bsc#1036427
- Replace build-improvements.patch with
  modernize-build-files.patch sent upstream</changelog>
  <changelog author="jengelh@inai.de" date="1493467200">- Fix RPM group for libmetrics0
- Replace old RPM shell vars in %install
- Author lists do not belong into the description
- Use macros in file list to compact paths</changelog>
  <changelog author="jfehlig@suse.com" date="1525089600">- vhostmd.service: fix typo and move Documentation from [Service]
  to [Unit] section (changed add-systemd-service.patch)
  bsc#1090769</changelog>
  <changelog author="jfehlig@suse.com" date="1529928000">- Handle SIGPIPE and reconnect to libvirtd
  c7646e32-handle-sigpipe-reconnect.patch,
  03dc9982-fix-deallocation.patch
  bsc#1098804</changelog>
</package>
<package pkgid="4ca0c3aca7782ea941f1478169417dc738a8c9ad37372c310d3b02777b32f259" name="libminizip1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="076dd00ced45e2e9380d797c0ea22da4fb9e91e3b073ee1475f755ea16a383ba" name="libminizip1-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="be94cadebebc996cdd8c68ec1ce90f4f6509b31bfb1cb7643c77fcf43dab5e86" name="libmodplug-devel" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="8b8db825bcde24afcebb1647d075e2b14007fbb8246b04f3aeb88679d34f7b3d" name="libmodplug1" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="091a087a71ab0552e8249aa5f653f921f06eb4de695bf6ef5bb4da2326510aa2" name="libmodplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="d2f9f7109c96a8d2ac958a99a46fb3db16de84892585afb928983e44f478a2a3" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="c18859c54d33843e847b437079d8fb55250f9261a16abb802a562ecffbd11208" name="libmount-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="be5e5ef689462a3ab18c6cf01e62091a23b5d82de9f387d2cf3b6fc32173c7a1" name="libmount-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="f95b21cbb844bd5bf5411e41469ec280bc8b8dc33bd84f8301b544063c6c2cba" name="libmount-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="ac5d3deb96ef41b8b40d2079a5cf8ae47ae3fb148002004a18d37e2a4bea8dba" name="libmount-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="574e8f41f939622627b82365659a12cdec347666631fb5f0fe7fa47d49721190" name="libmount-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="48efe2334de1477569eca64177ab5db555cfbfdf3a203620391a222ba934e311" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="497261497672b8f094f434c0e4e6bf2b51e2f4a23209b3acba8b57c7f97f0864" name="libmount1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="8d051e9aff3791199b8adffe38ad8e4c3f1b758b4f4190f888dff71610985476" name="libmount1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="2bbb1c173a614109fa392e41349808d34174c6ac222c03809feae3badd4c3c89" name="libmount1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="a15393ab9982ab478738a3e953271557e10c5bdd7ebd5845e6735f01de0cea7c" name="libmozjs-52" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- initial mozjs52 package
  (roughly based on previous mozjs* packages)</changelog>
  <changelog author="wr@rosenauer.org" date="1503921600">- update to 52.3.0
- added bmo1176787.patch to disable MOZ_GLUE_IN_PROGRAM
- added bmo1379539.patch to remove NSPR dependency while
  - -enable-posix-nspr-emulation is used</changelog>
  <changelog author="wr@rosenauer.org" date="1504008000">- try to use ION everywhere
- removed obsolete NSPR build dependency</changelog>
  <changelog author="cgrobertson@suse.com" date="1507291200">- Added additional compiler flags on the condition
  of building for ppc64le using gcc7 or newer.
  (see bmo#1399248)</changelog>
  <changelog author="jones_ld@protonmail.com" date="1511006400">- Enable Internationalization required by GJS
- Disable running tests due to broken toLocaleDateString_timeZone test</changelog>
  <changelog author="cgrobertson@suse.com" date="1512129600">- Added support for ICU and data file.
- Added mozilla-s390-bigendian.patch to enable bigendian support
  for s390 machines.
- Added xulrunner-24.0-s390-inlines.patch for s390 builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517227200">- Update to 52.6.0
- Drop fix-64bit-archs.patch and bmo1379539.patch, fixed upstream
- Update Source url.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519905600">- Actually remove bundled zlib and use system zlib. Avoids potential
  problems when trying to use system zlib while mozjs52-devel is
  installed (two zlib.h instances with conflicting definitions).
  Likewise fix for boo#1082720.
- Drop unused zip BuildRequires.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526990400">- Fix armv6 build by fixing armv6 detection:
  * fix_armv6_build.patch</changelog>
  <changelog author="schwab@suse.de" date="1527681600">- No JIT on ppc, don't run jit test</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1527681601">- for ppc64 (BE) use same patches as s390x
  (mozilla-s390-bigendian.patch xulrunner-24.0-s390-inlines.patch)
- This change is sufficient to solve boo#1093033</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1529323200">- update _constraints file for ppc64/ppc64le to avoid
  "Out of memory" build failure on some PowerPC workers.</changelog>
  <changelog author="msuchanek@suse.com" date="1532433600">- Remove trailing backslash (https://build.suse.de/request/show/168818)</changelog>
</package>
<package pkgid="ce40bfdd2cd02a0ff03e7ecc2ac86c24e822ee1d78fc256ec05c89d369f53bea" name="libmysqld-devel" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="7c0ee8be6763337e96815eefa423edb3924153c07af8bc9574e3de63b803080e" name="libmysqld19" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="5f7353c9aa3ca63baf04c899e4deb46174da95fe419f64a728b0a07af0b942eb" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="d20ae3546e5b9a87b5517638c245f433e9bdd13198d9a38f3ff030c5d55597d5" name="libndr-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="055b71872a5198da771c348575240318d8372e5176e2012701c21f1eb4b9726d" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="5a84bc0cd4b99debfeec3074d7d78cf921d7e5474de11e3451f4b346e268452f" name="libndr-krb5pac-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="1b792f812917750cf6adae13f78f379292ecdf0305bba86ecf08d660e06aae7c" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="9ff8fdf899875f0f8c373674565c62f4c12d218437965dee5fb88da75f3e82d2" name="libndr-krb5pac0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="0361567a5f5272617363e2a1ab6e496808673799ab70b31839ee21ae7651e563" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="e7ebfed96dbf8f003e60eef576bb618782e60f19a785fab3050f8dce11043fa8" name="libndr-krb5pac0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="ac06a614b44a75afa7636534c8dac87d2cea28ed7a01b79b2a3ee84be52c06bd" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="aa3b3586a9ac99a9e7f11d0bb2db54c29e6aa71ca150054c2fe591ff2c4d28b8" name="libndr-nbt-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="ea529f9f6d78a681bdfbcdb3420a84f78ea87ccdf57fe6990e382b71204bb6f1" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c79a3636b4990f76f31f774c5090eb68a3b8aa045d5b96c278daa5c9f9c29705" name="libndr-nbt0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="6453ec9460982521debf1bc20b89d5bae022cf27162af7a9c59a500790c113d3" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="22c6b74eda0de3120b5e7f37115417a8714d55c3772bbfdec3828b200e254f2b" name="libndr-nbt0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="906f41f8044ab3b24d193f63caa3ea7d94cbd0a852817c5065414d9efe6c980d" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="bbe8bf278e887fc8cd15de63723c600b1274f399e30ebe959f2437eff6e155f3" name="libndr-standard-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="cbde5700e5aa6c260d264e1a104f6e0aa97684300f93ef4e4204dd4aaf879615" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="746bb42018ec6a66c4cf9a8fe6ef77c04e166d319baa15b9d1cdec455985ffab" name="libndr-standard0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="a181d9b73d5ad127526b6406a920f56c2c895859185bab26376d2188a61edd93" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="d9a4ad0d59becd8c6671174d54e3811690bb236f8e4eecf2dcc335c1a0d3e4a8" name="libndr-standard0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="8ba26472bcacc7923bfbb9ca0421e8bae8abdd21eaafa81e1167a41725983da4" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="10ae9e4bccfff9a4f3322752613234b49b82e8fe50aa360293331d142497b26d" name="libndr0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="767fb968a24f523241ec5cc436735d283e635d7b5c8596469686cedbf7693180" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="949ccd4acdedb62e1673a46b99f0c120974bdea948ccef128eebc98659c4382c" name="libndr0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="7743443e835b7315a11f0c361bcf1f80821105f6028d73cd926570d4cd28f4b7" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="b0d392cbe4fc96ede8eeee2709e9f64e580ad4b2d6cb221b49b01f80bed5be81" name="libnetapi-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="fbb092175537e49ff5efa9c28df3acf59e5c9db9a36f0d84468c7876d5418fad" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="7347615a103fc92b2febeab91fd1fb3300d1f40d9c149215afe397dc68b5fc11" name="libnetapi0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="e9eee449b42a783faedfcdc309feb71d758fe17877cbfc3a20514e49848cf7dd" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="7ad741fe5d4046e5e4bbe0a3b69786b0c7f686c488c94908b680754e35ebc624" name="libnetapi0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="433fb5b24a07512bb5f8e46cc2aea61feb877a9dddfd592710bcd28b274900ae" name="libnfsidmap-sss" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="46a913f32be1d6903868bb20b4d00869394feba4dbed794325b791684c6d1545" name="libopencv3_3" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456660800">- Added _constraints file to avoid random failures on small workers
  (at least for builds on PMBS)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Added opencv_contrib_face-3.1.0.tar.bz2
  * This tarball is created to take only the face module from the
    contrib package. The Face module is required by libkface, which
    in its turn is required by digikam.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Add python 3 support</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458561600">- Test for python versions greater than or equal to the current
  version.</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Apply upstream patch opencv-gcc6-disable-pch.patch to disable
  PCH for GCC6.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465300800">- In case we build using GCC6 (or newer), add -mlra to CFLAGS to
  workaround gcc bug
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71294.</changelog>
  <changelog author="olaf@aepfle.de" date="1469102400">- Enable ffmpeg support unconditional</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1495972800">- Update to OpenCV 3.2.0
  - Results from 11 GSoC 2016 projects have been submitted to the library:
    + sinusoidal patterns for structured light and phase unwrapping module
    [Ambroise Moreau (Delia Passalacqua)]
    + DIS optical flow (excellent dense optical flow algorithm that is both
    significantly better and significantly faster than Farneback?s algorithm ?
    our baseline), and learning-based color constancy algorithms implementation
    [Alexander Bokov (Maksim Shabunin)]
    + CNN based tracking algorithm (GOTURN) [Tyan Vladimir (Antonella Cascitelli)]
    + PCAFlow and Global Patch Collider algorithms implementation
    [Vladislav Samsonov (Ethan Rublee)]
    + Multi-language OpenCV Tutorials in Python, C++ and Java
    [João Cartucho (Vincent Rabaud)]
    + New camera model and parallel processing for stitching pipeline
    [Jiri Horner (Bo Li)]
    + Optimizations and improvements of dnn module
    [Vitaliy Lyudvichenko (Anatoly Baksheev)]
    + Base64 and JSON support for file storage. Use names like
    ?myfilestorage.xml?base64? when writing file storage to store big chunks of
    numerical data in base64-encoded form.  [Iric Wu (Vadim Pisarevsky)]
    + tiny_dnn improvements and integration
    [Edgar Riba (Manuele Tamburrano, Stefano Fabri)]
    + Quantization and semantic saliency detection with tiny_dnn
    [Yida Wang (Manuele Tamburrano, Stefano Fabri)]
    + Word-spotting CNN based algorithm
    [Anguelos Nicolaou (Lluis Gomez)]
  - Contributions besides GSoC:
    + Greatly improved and accelerated dnn module in opencv_contrib:
  - Many new layers, including deconvolution, LSTM etc.
  - Support for semantic segmentation and SSD networks with samples.
  - TensorFlow importer + sample that runs Inception net by Google.
    + More image formats and camera backends supported
    + Interactive camera calibration app
    + Multiple algorithms implemented in opencv_contrib
    + Supported latest OSes, including Ubuntu 16.04 LTS and OSX 10.12
    + Lot?s of optimizations for IA and ARM archs using parallelism, vector
    instructions and new OpenCL kernels.
    + OpenCV now can use vendor-provided OpenVX and LAPACK/BLAS (including Intel MKL,
    Apple?s Accelerate, OpenBLAS and Atlas) for acceleration
- Refreshed opencv-build-compare.patch
- Dropped upstream opencv-gcc5.patch
- Replace opencv-gcc6-disable-pch.patch with upstream patch
  opencv-gcc6-fix-pch-support-PR8345.patch
- Enable TBB support (C++ threading library)
- Add dependency on openBLAS</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Use %cmake macros
- Remove the conditions that are not really needed
- Add tests conditional disabled by default
  * Many tests fail and there are missing testdata
- Switch to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1496664001">- Add conditional for the qt5/qt4 integration
  * This is used only for gui tools, library is not affected
- Add provides/obsoletes for the qt5 packages to allow migration
- Drop patch opencv-qt5-sobump.diff
  * Used only by the obsoleted qt5 variant</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500120000">- Add 0001-Do-not-include-glx.h-when-using-GLES.patch
  Fix build for 32bit ARM, including both GLES and desktop GL headers
  causes incompatible pointer type errors</changelog>
  <changelog author="kah0922@gmail.com" date="1507550400">- Update to 3.3
- Dropped obsolete patches
  * opencv-gcc6-fix-pch-support-PR8345.patch
  * opencv-gles.patch
- Updated opencv-build-compare.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Rename python subpackage to python2
- Do not explicitly require python-base for python subpackages</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 3.3.1:
  * Lots of various bugfixes
- Update source url</changelog>
  <changelog author="ecsos@opensuse.org" date="1509796800">- fix build error/unresolvable for Leap 42.2 and 42.3</changelog>
  <changelog author="ecsos@opensuse.org" date="1510142400">- change requires of python-numpy-devel to build in Leap and
  to not break factory in future</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update licensing information</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511611200">- Readd opencv-gles.patch, it is *not* included upstream; otherwise
  build breaks on all GLES Qt5 platforms (armv6l, armv7l, aarch64)
- add fix_processor_detection_for_32bit_on_64bit.patch
- Correctly set optimizations and dynamic dispatch on ARM, use
  OpenCV 3.3 syntax on x86.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditionals for python2 and python3 to allow us enabling
  only desired python variants when needed
- Do not depend on sphinx as py2 and py3 seem to collide there</changelog>
  <changelog author="qzheng@suse.com" date="1526904000">- Add opencv-imgproc-fix-bounds-check.patch:
  make backport from commit 4ca89db to fix imgproc(hdr)
  bounds check in HdrDecoder::checkSignature ( bsc#1074312,
  CVE-2017-18009 ).</changelog>
</package>
<package pkgid="8ebb6c093108bf8cb80f93c43cd82cd04cd53434b4e4f1c3fe5ec0963cb83d53" name="libopenmpi2-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="44051707e02fc2f14817bbc8aeeff17d084b961c5498f926fee24fded92201c0" name="libopenmpi_2_1_3-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="8ea50768c45f00c98c518014ccf2fb40385898a07a7100355e8e0829511c46ea" name="libopenmpt" arch="src">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="899f4bd46576ad07c7ec69ff0041736595810f93bcea2a0a484be5df845c2c61" name="libopenmpt-devel" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="dea984a4d239efea7a2c171db15605f0a918ddf32fbd69d21b4a1a0917a38491" name="libopenmpt0" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="c11362967c5bd963b12fae2f38152199fde024cf35f2cf97dd7900492ef7f2cf" name="libopenmpt0-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="f26b53aded53974961d5d0a92966b697b80355e5b5386e1c3f905eb2273de20a" name="libopenmpt_modplug1" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="ca5e5e14f25d305c7afab140cf35f09bd305b0bd96b3f363c20e3c4d9702c215" name="libopenmpt_modplug1-32bit" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="30f99e049fc079669ba4282673e0baa88643483435468edcf69895cdcf0563dc" name="libopenssl-1_0_0-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="1f082cbdd8f551ab5f1eb47a8b9528c1bf1635dc500c05620d299a6e9e61f10d" name="libopenssl-1_0_0-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="1019a48a8acfeb65a12b82f3c0ea390b11fd5d9c59fc30fbf9fcb8e13e2ed527" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="e63ad46e75ff30d432b0f56b29a214648e042854d23491ab916b3a18c1160d70" name="libopenssl-1_1-devel" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="b0944da6a11f3e441ceec4f0a1f74fdaed819883e0e21e44d248b411ac5c8d99" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="6a6c748e24d0f1f72161bb248f8569d8e6824fbc74fc5c23bacd8b83dbd33264" name="libopenssl-1_1-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="ca8bd0845bd0598ea4814b5c9fb3d74eba9e9a956c2cd0e0d126450c2d018d50" name="libopenssl1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="a91ad347c26e70ca8cb5713fdc6325eb3f76412fc6a410dedd69f480fd9c970f" name="libopenssl1_0_0-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="fd4b70ef373531e911683382d5a77d7792f3d472fe1530d7dc7c41d17f443884" name="libopenssl1_0_0-hmac" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="bbe903e9a2e8dc2caabe2169373c20b7b59fe5a58b0134e3d1d7c80a4299e13d" name="libopenssl1_0_0-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="8cdfe22ff6a01f696b9c87a17dac9d1ce1074d2637588e31d521f405716f7d75" name="libopenssl1_0_0-steam" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="a2a221d1e1704524985b6dcf172f4a6acffcca491be8f9da1a248e366f62f060" name="libopenssl1_0_0-steam-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="3c14bd93ab3733d5dd1aaa8d37acd3bb474cb085b56cd29ef0d1f2a27b6eac49" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="194f6833e39316c0ebb92d49561be4deb5d519026210dd964facc3c15534fa2d" name="libopenssl1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="da39fcda2810d43b595bc6a9a5030950902ba89250763d52f663f30cf7ed548d" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="0896891ce3982d276f4ac86b1b7ba885c11aef83a581cc4e1eb20daf0bc945fa" name="libopenssl1_1-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="1aafae02d3bebcaca4635d850784a9c046313c54bd9bc3d08d15c90e284fa6fb" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="7bb64d98826c4b60a294bd397779977eb7f9d9e67ab522c762c4cf4113bae5bc" name="libopenssl1_1-hmac" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="3247e953fea823158826a5185f8f879406a5e07b5c5ff3a3625540a3a5c85bcd" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="d3f156e4c3927e27eecfa29157d097005983320651de2b13b7e3db850e946757" name="libopenssl1_1-hmac-32bit" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="dd1d7eb1306d6d405e42f1e941a01eff9533f15d981d4f4ca34a5585f2fea472" name="libopenvswitch-2_8-0" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="a536fe43012f0d3b7442a71dec531979e7d2544dd59ee1626b674499fb341266" name="libowncloudsync-devel" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="e8fba8bd6074ab46e938e52d8335b5cd995662fda9b5ae1fd1179ab973281a85" name="libowncloudsync0" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="f48eeea457724fe5ba1f534aeacdd4a0922b902e1b6139a868a5afb554f3f52c" name="libpango-1_0-0" arch="x86_64">
  <version epoch="0" ver="1.40.14" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 1.38.1:
  + Require Harfbuzz 0.9.30.
  + Fix make check with --enable-debug=no.
  + Win32 build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 1.39.0:
  + Update PangoScript to Unicode 8.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 1.40.0:
  + Fix typos.
  + Don't treat OGHAM SPACE MARK as whitespace.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.40.1 (Fate#318572):
  + Use $PKG_CONFIG consistently (bgo#764191).
  + Fix a PangoWin32FontMap memory leak (bgo#764089).</changelog>
  <changelog author="hpj@suse.com" date="1470225600">- Make libpango obsolete/provide pango-modules bsc#978972. Change
  by idonmez@suse.com.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.40.2:
  + Improve introspection builds in msvc (bgo#764984).
  + Properly handle UTF32 chars in coretext.
  + Add rebeccapurple to list of colors.
  + Correct font weight mapping in coretext (bgo#766148).
  + Use version macros for exports (bgo#767587).</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 1.40.3:
  + Fix export of pango_cairo_win32_font_map_get_type (bgo#771004).
  + Fix build on OS X (bgo#770729).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 1.40.4:
  + Fix introspection annotation of pango_lkayout_get_size
    (bgo#779232).
  + Fix some Coverity findings: bgo#778601, bgo#778602, bgo#778654,
    bgo#778656.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.40.5:
  + Add missing introspection annotations (bgo#778663).
  + Fix line-end handling in pango_read_line (bgo#778816).
  + Make alpha attribute work without color (bgo#773767).
  + win32: Enable rendering colored texti and underlines
    (bgo#768779).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 1.40.6:
  + Don't use deprecated harfbuzz api.
  + Correctly implement min-required/max-allowed support.
  + Avoid compiler warnings.
  + Drop -uninstalled.pd files.
  + Add support for building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.40.7:
  + Some fixes for meson build support.
  + Don't change fonts for variation selectors (bgo#781123).
  + Fix some bugs in the libthai glue layer.
  + Pass text along when calling into cairo (bgo#784394).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.40.8:
  + Support emoji sequences in boundary determination.
  + Choose emoji font for color emoji.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.40.9:
  + Build and dist fixes.
  + Fix build on Windows with MSVC (bgo#783274).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.40.10:
  + Update Emoji data to version 5.
  + Apply gravity across spans in markup (bgo#784243).
  + Support variation selectors for shaping.
  + CoreText: Rely on CGFont for scaling (bgo#782393).
  + Fix grapheme breaks and backspacing for Emoji.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Add help2man BuildRequires, needed to build manpages.
- Minor spec file cleanup.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 1.40.11:
  + Fix backspacing for more Emoji sequences.
  + Make tests run faster.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504180800">- Add pango-fix-default-break-function.patch: Fix
  pango_default_break function for sentence start/end (bgo#785978).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.40.12:
  + Fix pango_default_break for sentence start/end (bgo#785978).
  + Fix multilib issue in pango-enum-types.h (bgo#786887).
- Drop pango-fix-default-break-function.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 1.40.13:
  + Some performance improvements (bgo#788643).
  + Update pango_default_break for line breaks (bgo#788115).
  + Fix an introspection warning (bgo#781857).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 1.40.14:
  + Fix char break problem introduced in 1.40.13 (bgo#789625).
  + Add tests for char breaking.</changelog>
  <changelog author="sreeves@suse.com" date="1534593600">- Add pango-emoji-bsc1103877.patch: Fix denial of service
  when parsing emoji (bsc#1103877, CVE-2018-15120)</changelog>
</package>
<package pkgid="c18e547ff8920c5e2d0eba7a339c8e88d4d83460904ba031132375c924bc7cd5" name="libpango-1_0-0-32bit" arch="x86_64">
  <version epoch="0" ver="1.40.14" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 1.38.1:
  + Require Harfbuzz 0.9.30.
  + Fix make check with --enable-debug=no.
  + Win32 build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 1.39.0:
  + Update PangoScript to Unicode 8.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 1.40.0:
  + Fix typos.
  + Don't treat OGHAM SPACE MARK as whitespace.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.40.1 (Fate#318572):
  + Use $PKG_CONFIG consistently (bgo#764191).
  + Fix a PangoWin32FontMap memory leak (bgo#764089).</changelog>
  <changelog author="hpj@suse.com" date="1470225600">- Make libpango obsolete/provide pango-modules bsc#978972. Change
  by idonmez@suse.com.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.40.2:
  + Improve introspection builds in msvc (bgo#764984).
  + Properly handle UTF32 chars in coretext.
  + Add rebeccapurple to list of colors.
  + Correct font weight mapping in coretext (bgo#766148).
  + Use version macros for exports (bgo#767587).</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 1.40.3:
  + Fix export of pango_cairo_win32_font_map_get_type (bgo#771004).
  + Fix build on OS X (bgo#770729).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 1.40.4:
  + Fix introspection annotation of pango_lkayout_get_size
    (bgo#779232).
  + Fix some Coverity findings: bgo#778601, bgo#778602, bgo#778654,
    bgo#778656.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.40.5:
  + Add missing introspection annotations (bgo#778663).
  + Fix line-end handling in pango_read_line (bgo#778816).
  + Make alpha attribute work without color (bgo#773767).
  + win32: Enable rendering colored texti and underlines
    (bgo#768779).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 1.40.6:
  + Don't use deprecated harfbuzz api.
  + Correctly implement min-required/max-allowed support.
  + Avoid compiler warnings.
  + Drop -uninstalled.pd files.
  + Add support for building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.40.7:
  + Some fixes for meson build support.
  + Don't change fonts for variation selectors (bgo#781123).
  + Fix some bugs in the libthai glue layer.
  + Pass text along when calling into cairo (bgo#784394).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.40.8:
  + Support emoji sequences in boundary determination.
  + Choose emoji font for color emoji.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.40.9:
  + Build and dist fixes.
  + Fix build on Windows with MSVC (bgo#783274).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.40.10:
  + Update Emoji data to version 5.
  + Apply gravity across spans in markup (bgo#784243).
  + Support variation selectors for shaping.
  + CoreText: Rely on CGFont for scaling (bgo#782393).
  + Fix grapheme breaks and backspacing for Emoji.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Add help2man BuildRequires, needed to build manpages.
- Minor spec file cleanup.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 1.40.11:
  + Fix backspacing for more Emoji sequences.
  + Make tests run faster.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504180800">- Add pango-fix-default-break-function.patch: Fix
  pango_default_break function for sentence start/end (bgo#785978).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.40.12:
  + Fix pango_default_break for sentence start/end (bgo#785978).
  + Fix multilib issue in pango-enum-types.h (bgo#786887).
- Drop pango-fix-default-break-function.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 1.40.13:
  + Some performance improvements (bgo#788643).
  + Update pango_default_break for line breaks (bgo#788115).
  + Fix an introspection warning (bgo#781857).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 1.40.14:
  + Fix char break problem introduced in 1.40.13 (bgo#789625).
  + Add tests for char breaking.</changelog>
  <changelog author="sreeves@suse.com" date="1534593600">- Add pango-emoji-bsc1103877.patch: Fix denial of service
  when parsing emoji (bsc#1103877, CVE-2018-15120)</changelog>
</package>
<package pkgid="8cf009240d3b49e0ce13e559c67af57f8afdf49b80954b44dcec427ce0287796" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="3f846fe3cc95cd00149b1147f9b555853253e23025f94eca7d6993c5a44ec35a" name="libpmi0" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="1418223cd39e8e133534499e2d62d9db79ff0848f384eae2745edff455476e85" name="libpolkit0" arch="x86_64">
  <version epoch="0" ver="0.114" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
  <changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
  <changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
  <changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
</package>
<package pkgid="e613f1092a3f21997679996fa3c3d948d1b876d208aa2bab5966cf324ea26ed3" name="libpolkit0-32bit" arch="x86_64">
  <version epoch="0" ver="0.114" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
  <changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
  <changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
  <changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
</package>
<package pkgid="f78e438d82e9b33085acef95e403e491764c9490ec9c8e331c66cfffcc0db098" name="libpostproc54" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="dc3095d13ed16507d63bbb8392cbf361755628e8d54a01c07140ea83292a8152" name="libpostproc54" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="327378a9c12b7e9b55a6c9a2853ff9d42db83dc8f6bde435af8dc44f12880e2b" name="libpostproc55" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="cb9d66f5e862cadec85069005c53e1802d1faf172b114226b331a7f3a34a3655" name="libpostproc55" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="d234f8636bcd3a2dc448bd5ff75ca71f3efea77c6d934304e3e22f975b80c435" name="libpostproc55" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="6170a60b2d0776202a34c5792d252eef8393ce5a056acfe94d6b07129301a4ba" name="libpostproc55" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="1243c14b18e09fa6a8e219c2073f4a3340489f615b5e7364087347ac33c24ff2" name="libpq5" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="eccb62e881f7251e5b6778feef00bc33181cf748c81ccd53180303849d8a7604" name="libpq5-32bit" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="b3ef6d8767c58307e7d6185d72382b4c84ecd6b5a80ad51d859cddc3815879ec" name="libptexenc1" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4dbaf19176d12858a5229f1a2d1919dab1c2f4ad7d94bace5d1633f4ec861d6f" name="libre2-0" arch="x86_64">
  <version epoch="0" ver="20180901" rel="lp150.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1477137600">- Fixup group and avoid rm indirection</changelog>
  <changelog author="mpluskal@suse.com" date="1480766400">- Update to version 2016-11-01:
  * No upstream changelog available
- Drop no longer needed re2-gcc61.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1484395200">- Update to version 2017-01-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1489665600">- Update to version 2017-03-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 2017-04-01
  * No upstream changelog available</changelog>
  <changelog author="vsistek@suse.com" date="1495195200">- Update to version 2017-05-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1497182400">- Update to version 2017-06-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1501329600">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 2017-11-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 2017-12-01
  * No upstream changelog available</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libre2-0-32bit, dependency to
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1514980801">- Update to version 2018-01-01
  * No upstream changelog available</changelog>
  <changelog author="astieger@suse.com" date="1517572800">- update to 2018-02-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- update to 2018-03-01:
  * no longer linking against librd and libm
  * other developer visible changes</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 2018-04-01
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2018-07-01:
  * Fix a "DFA out of memory" error
  * Update Unicode data to 11.0.0
  * Fix `-Wclass-memaccess' warnings and fallthrough macros
  * Use the standard first-byte analysis for the DFA too</changelog>
  <changelog author="mpluskal@suse.com" date="1532088001">- Simplify spec file a bit</changelog>
  <changelog author="astieger@suse.com" date="1535025600">- update to 2018-08-01:
  * Fix the "DFA out of memory" error for the reverse Prog</changelog>
  <changelog author="astieger@suse.com" date="1536148800">- update to 2018-09-01:
  * developer visible changes only</changelog>
</package>
<package pkgid="e57492c68c3efae691c28a8d53b204b1ed9e8e66938f03db72e0ebfb4f19557b" name="libre2-0-32bit" arch="x86_64">
  <version epoch="0" ver="20180901" rel="lp150.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1477137600">- Fixup group and avoid rm indirection</changelog>
  <changelog author="mpluskal@suse.com" date="1480766400">- Update to version 2016-11-01:
  * No upstream changelog available
- Drop no longer needed re2-gcc61.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1484395200">- Update to version 2017-01-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1489665600">- Update to version 2017-03-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 2017-04-01
  * No upstream changelog available</changelog>
  <changelog author="vsistek@suse.com" date="1495195200">- Update to version 2017-05-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1497182400">- Update to version 2017-06-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1501329600">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 2017-11-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 2017-12-01
  * No upstream changelog available</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libre2-0-32bit, dependency to
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1514980801">- Update to version 2018-01-01
  * No upstream changelog available</changelog>
  <changelog author="astieger@suse.com" date="1517572800">- update to 2018-02-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- update to 2018-03-01:
  * no longer linking against librd and libm
  * other developer visible changes</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 2018-04-01
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2018-07-01:
  * Fix a "DFA out of memory" error
  * Update Unicode data to 11.0.0
  * Fix `-Wclass-memaccess' warnings and fallthrough macros
  * Use the standard first-byte analysis for the DFA too</changelog>
  <changelog author="mpluskal@suse.com" date="1532088001">- Simplify spec file a bit</changelog>
  <changelog author="astieger@suse.com" date="1535025600">- update to 2018-08-01:
  * Fix the "DFA out of memory" error for the reverse Prog</changelog>
  <changelog author="astieger@suse.com" date="1536148800">- update to 2018-09-01:
  * developer visible changes only</changelog>
</package>
<package pkgid="cadd3e6f9ad95ffbdb11478aae9ec93ba3fbb1a4cd0da8ad53b3033565eb6c58" name="libreoffice" arch="src">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6df4abe902e412ebdd089e67b1cf2b9169511d3e79baf78d0d55268bb86a09ea" name="libreoffice" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="f3ed092551b26227043530f0100a6a55567e2a1a3ed11cd391a4b05b3e6466db" name="libreoffice-base" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="778bd5ae5cec72a5769f0615e24e59f5bba18f009ac552b2a03b0439c195944f" name="libreoffice-base-drivers-firebird" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="3843d8cbc49ffae456e7259ec1304c0e855817bd77d191be2026a76e99ce41f3" name="libreoffice-base-drivers-mysql" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="0a850d15444a88b550783399aa4583044ef7083b104d6993ec7b419d2e472a2a" name="libreoffice-base-drivers-postgresql" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b5a6a185c9d4ab3d58f7eaaad3c967f224ffae10aa02e64534cbefd43f54de1a" name="libreoffice-branding-upstream" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="aa594cb8d56e3beec957d7710c8a3232314361c290486d79c9579c70fe098fac" name="libreoffice-calc" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="3c23c960395b26813b9c8b22f0e44e442a4feee9764c5509e7e9dbad4ac987cd" name="libreoffice-calc-extensions" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="a9a059d68414d46568515112d34684912416e04d814bdb464029558fba4e355c" name="libreoffice-draw" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="9688bd6bf040c69cd2cad9b8cf54000de8c274a573e25a1e47591b90903b1f1c" name="libreoffice-filters-optional" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="894ce03682543f37b4f06a795e862cf80b082e06d431e6822e3386bbbf8e4934" name="libreoffice-gdb-pretty-printers" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="9c6631c0639b3e250f17161c728181054f9d02720e402a72e5776a9979bed988" name="libreoffice-glade" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="2014f29168fba576532e2ba529a01461e555511454732c3b0aed3fb71c4577eb" name="libreoffice-gnome" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="f877653313948af7f9a4c368f5b0fa51fd53082eef874ddbe187c90ec33e2fae" name="libreoffice-gtk2" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="77f929097e4a282d0e0332a1fa4ff555c1ee5e20dff38f4558467ccd85d3317b" name="libreoffice-gtk3" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="1b6dea36e4a54dc755de4959d8cf7668b8d16dd37da52d64a7d409a35527b696" name="libreoffice-icon-themes" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c9d340073bde115d70523d235ee14154b550c2fbafd96907c0f4fabc9bf31d40" name="libreoffice-impress" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="4e2fd9798c2c33877d7e31fe6526f8c320a33895f0a0a0e5e36f74ac05fa9fdb" name="libreoffice-kde4" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="f4b849bb5e41fdc0abdb33d11df1c392112c052c04ca92a387a6952ab9a6eabd" name="libreoffice-l10n-af" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="ce8d1946cd97593671319482fac0d98e176ee45e123a7c7b717a4b52ff0fde65" name="libreoffice-l10n-ar" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="11d4ae6a448717de7c04b0b7043b427fef939b00310e2cc3dc536ada4f416e51" name="libreoffice-l10n-as" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="26e678850651950d133e8ecbfd4b6f93ddc30678a2ffb37304a34057f50234b9" name="libreoffice-l10n-bg" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="52e389286fe401522cd510e91cf51cbb9e785235c5c07098e0ab0601f2f58589" name="libreoffice-l10n-bn" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="13869fdf13d8c00dfe956a5ef33ab1b2afab78900aa4cf87500010310d08f2e7" name="libreoffice-l10n-br" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="48130dc1bacde8145a77a14f1072b5d6d98bcd2a242c58e10b82913bc01c0249" name="libreoffice-l10n-ca" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="43c2bbf47a7e97b742eea625a91fbe793af063aeee3168b04067ae94ed862055" name="libreoffice-l10n-cs" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="2350e0b15028619c11ab31c4721434da154fd2ce0f226a57967ae7df524e5c15" name="libreoffice-l10n-cy" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="5147689dac37886d07bacaba226a7c2771b7f625a12ad6417390b178399c68ca" name="libreoffice-l10n-da" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="f140fc6b455986ea4cba5c95c408cf176c16939a24549d8b123d645526dcdf29" name="libreoffice-l10n-de" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d55d4789c2cf6e74967b52807adc76d087c309606a45d5b0162720e3aaa5e87b" name="libreoffice-l10n-dz" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c0fa95c423d2e29d3156bea2dd6268e55d40334edf202106d9fd2fa1c20d9aff" name="libreoffice-l10n-el" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="63362d007a50e7768d47148ca6d6eb04cb7b46c6b9d749ca3e6fafdbdf6448a1" name="libreoffice-l10n-en" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="7461dc169e45a54040bdcb140f875ec3f09422746773e7946b8edc678e79b6ff" name="libreoffice-l10n-eo" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="4f3d8ac899b35b7877d03f9421f8881ccca30ae138994420dd43aa1027ead914" name="libreoffice-l10n-es" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c3ec09bb4c73a8527dfb89196a889a5a6caded5e275afdbdfaef3564f761574c" name="libreoffice-l10n-et" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="f82580076f63190e8e540bb8a68b1975f12a089c20d26e42822fb05a3b9c2e27" name="libreoffice-l10n-eu" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="608bd3348f3d814b4e7780803a0997bbc9b6f4aeae716121f05b9082981b6a7d" name="libreoffice-l10n-fa" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="617182aa9a83295e3feb9d8ca5cd5c4e2bc135a8003ecf1df2e030d584a530ee" name="libreoffice-l10n-fi" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d5b16a39c91f1329929b11b64a2519e0cf176a062f95d5326322903fe982757d" name="libreoffice-l10n-fr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6946ca6201e20e8def70a6502430b347b6321e63c0a66bfc506fa38c252715b1" name="libreoffice-l10n-ga" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="884ceed2547cc82a710a244dc8c504c6e443e243254259f93020a29a38bb6efb" name="libreoffice-l10n-gl" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="b1823287397e652dbfcc195faca0b0c27ae1954a81897319140e510576642111" name="libreoffice-l10n-gu" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="9a5ee229473b8b7de42c4e069f73548ca7676f41fc5ae5d600adbd4550078a19" name="libreoffice-l10n-he" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="1d8eda5f72fcad4a9a41da77c9b202cb9529821e821d739c479b227d50f335ea" name="libreoffice-l10n-hi" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="0db9a2c3c8d71e39e032a1be2cbbe71be0ff91ac1f2bc7ca4c670111b1342bbd" name="libreoffice-l10n-hr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="7a1f56ea7252ded34d9a646b379ad9deaa547485fe0cd341ca969d63c043f17e" name="libreoffice-l10n-hu" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="da1036a1a20ab7248a29d79b1dc023cdbb29f93c711d87e6eb5bd08e722d9710" name="libreoffice-l10n-it" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="ffa801de50ee8b5c95043639c0d6302473a90d31d26a91089a786e21ed835fd2" name="libreoffice-l10n-ja" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="bd16805704b394180dd0e34330483f2e3f4a4ca06de0a7694a02548f9378f5b1" name="libreoffice-l10n-kk" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="397c76851a8be8bd77b02a4825e0860174f7394c0348516774e7a26cad7a3e8a" name="libreoffice-l10n-kn" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d5ff26c95dd77e82a9fcb2d82c9967e68b6ef9b4e2ec881d4e0381a08d581bad" name="libreoffice-l10n-ko" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="71cc917d346ba755824675f461aa08bf866e3f47d37f3181ae87e8980af0df2e" name="libreoffice-l10n-lt" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="20de39dd94d52be03b430e4a26002443443405804b1a7ec1ca908173a14d93c3" name="libreoffice-l10n-lv" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="5c7fed59470fca3d624afb5cd3d6016b3f64c9ec54e3c666648b9c23f3583c13" name="libreoffice-l10n-mai" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="0ef32fd3052a04ea9a3b3c7f9217112d433d800becf0cb2c712ce2c08402c749" name="libreoffice-l10n-ml" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="274c1cc5c83fb9dcb73f4886db6a784c5b153792be99db3a02aea5a7f834963b" name="libreoffice-l10n-mr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="e6cf858f21a820fab16700018c94b186b1147389e5699d5d0b54bfc0d1b18f9f" name="libreoffice-l10n-nb" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c11501435aafc9e4872f83a21bf211857bfafc317a3ff43d220ae41d0b12e107" name="libreoffice-l10n-nl" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="be497ea14d1a24bb101ae0710797fc4f991bc35751c3d33041eeb12dd6462780" name="libreoffice-l10n-nn" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="7a83460c4a55967cda256129febedf7c171b11259b0aa4ec77f1ef726b88e0cb" name="libreoffice-l10n-nr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="ce61c56959cc1e08743d27ded9d715972a652a2808971f993a6cb3426a470856" name="libreoffice-l10n-nso" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="fbf9a460ca29050e58c3964bd9189d5a4a68b132e0487f74cc4fc3df29164e52" name="libreoffice-l10n-or" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="5f50745d5a1a6fe8ac23c274d7de9d4d9aec79fb6cbd141f40ceef2462bf4592" name="libreoffice-l10n-pa" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="7a2d57024a5c5b2fa0a8d33e9bcb8cbb763330641f3034795031871fcf8164ce" name="libreoffice-l10n-pl" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="e04b1db25dac594018c137083a62ea1bfd49f0c1f0d09c6ceed42d83650c9e71" name="libreoffice-l10n-pt_BR" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="4dce0400b4adc5f4367ed5476b06f492c625e44e052e1d3ff0f67703af628a68" name="libreoffice-l10n-pt_PT" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="06541ab3c436240c986d0a049d224ade9641861212429e0164d6895de81e3475" name="libreoffice-l10n-ro" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="99ce5e1a7aa3fc2b3086f752684295d52829d6f637837bf4b55b5e51023d43c2" name="libreoffice-l10n-ru" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="aba2ef1fa485d3bf39b06064b79c95a47df9f19a2393fb368afa8becce8894a9" name="libreoffice-l10n-si" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="a0b269ba4f25921b7822207f0824128bc97299665aefb8d7f359f0f00db13420" name="libreoffice-l10n-sk" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="2dcb73cfbb14c00d8b9ba164fd50167c223e079b4ae933a9ef2165f1f326004b" name="libreoffice-l10n-sl" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="05ba53e3e5f4065f796da0690fce976cb04be85f792f4acd9d9d6b4fd8d40543" name="libreoffice-l10n-sr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="8a203d355a4fa4fdedc10d48ca238ef6d231940d6c0811a71f4b8a2ec0edc994" name="libreoffice-l10n-ss" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="cd62672aa008771b709c940e3d0cc6b8cf74d882522f3b40a299a3a5835df599" name="libreoffice-l10n-st" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="31ac1019bcb2c07758b4769830eaf5f008ad64df887a048706bdcdfc99127779" name="libreoffice-l10n-sv" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6480ac86c3a7b9f2d0bc8f71915acba9a072439ff3531a1d400fff018a3fe1f8" name="libreoffice-l10n-ta" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="2c87053b73b220b3d70235a9402518ff64133c35b1c4de0d15c8e0b1fcd530b6" name="libreoffice-l10n-te" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6fb2b0eff9b171bb7aebca111bcad21865598f5fbb2040ea720dae72d3e26bda" name="libreoffice-l10n-th" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="e7ab162d2390ba459ff1a217085b4fc92e0fdf228e714c7add3fcf37f091ef6b" name="libreoffice-l10n-tn" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="2dd1db9f7e67b23819f50351ecd72b25c2480cb10bc9757d71673f6d269979e2" name="libreoffice-l10n-tr" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="d89f53306f73c2be870c0e60782ee5e9434cc874f053be2e51f36babf2430ca4" name="libreoffice-l10n-ts" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="a98b589e5fd2d725424889379e4e28a883028b574b03409022d9e9b10a93b735" name="libreoffice-l10n-uk" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="736306b31a5f8921728179971778faad30426d77f948093c70696027e69e164c" name="libreoffice-l10n-ve" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="65b3c593afd54f377e1d32127ef4cd1f477a6a374f12e331993562fb13bdae4f" name="libreoffice-l10n-xh" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="bb1631c2d3a4e823652cba98a0f328f1eaab51929fb4fd29f91fb41c6ae91181" name="libreoffice-l10n-zh_CN" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="ecdfa3ef01ec3341941778d6f85178bfb671ad0be53a8b267bd63fa7cfe48392" name="libreoffice-l10n-zh_TW" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="e1872e7ebcadb8c0421fd0667626e4bc023ca98ac3ce577f0e2a1ea84a291278" name="libreoffice-l10n-zu" arch="noarch">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="5cbd7450758e1d62f88f5166ed3a04bd41305f650da107a568c9d9fb9bad2431" name="libreoffice-mailmerge" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="8fcf17c1ba8dcfff9adcefb1d3110d5f21e187c1e825a17d46c307e351243926" name="libreoffice-math" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="43be8ae329b467e771c2d6ad5bb15432583ccc0d366a733ff61ce26241cec48b" name="libreoffice-officebean" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="7861617c5c52783aaea866a04f6047052b2a2c94a72c92bc063e0ed816b56489" name="libreoffice-pyuno" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="e5d8d741d25eb1bcfdd0f9354ddb7b7ea7b84cd44dff8fa8fe3cac39d81acaff" name="libreoffice-sdk" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="6bd651db4cac49cdd2e24a6ac63ff1afb93de8a548cfe2efd956f2e7933200d8" name="libreoffice-sdk-doc" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c20b5ad30766418498331264553e80573cdd764c09b752c7e6aba600d2c2ce04" name="libreoffice-writer" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="598fbebc17937728126ba003255c2acfea794ca1c6c2aa7bae7d5ffc477d74d3" name="libreoffice-writer-extensions" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="c16854e0cdfe058a0ce32c263e384e437d64b13368460e4c81728a69af450f6f" name="libreofficekit" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="4441cb9bfc48f278497dd0b0ecd5b58dcbfc35fe7c0165d3ac68dc2edc1abcd2" name="libreofficekit-devel" arch="x86_64">
  <version epoch="0" ver="6.0.5.2" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1523448000">- Use pkgconfig(libpg) instead of posgresql-devel dependency</changelog>
  <changelog author="tchvatal@suse.com" date="1523448001">- Provide and obsolete also libreoffice-branding-SLE</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Drop patch libreoffice-lto-failtest.patch as the problem was with
  memcpy in wrong phases, fixed by cflag -flifetime-dse=1</changelog>
  <changelog author="tchvatal@suse.com" date="1523620800">- Provide and obsolete all the gtk3 disabled stuff if we disable
  gtk3 to ease migration</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Do not enable LTO on older codestreams, too old toolchain</changelog>
  <changelog author="andras.timar@collabora.com" date="1523966401">- LO-L3: DOCX import: missing table background color
  * bnc1083525.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524225600">- Version update to 6.0.4.1:
  * Another bugfix update containing &gt;60 bugfixes</changelog>
  <changelog author="tchvatal@suse.com" date="1524225601">- Fix build with new icu 61+ bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1524484800">- Drop patch bnc1083525.patch merged upstream</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1524657600">- Remove aarch64 condition in _constraints</changelog>
  <changelog author="tchvatal@suse.com" date="1524657601">- Do not require update-desktop-files on 15+ bsc#1090737</changelog>
  <changelog author="tchvatal@suse.com" date="1525867200">- Bump to 6.0.4.2:
  * 2 more fixes on top of 6.0.4.1</changelog>
  <changelog author="tchvatal@suse.com" date="1525867201">- Extend the icu patch with more patches wrt bsc#1091772
  * libreoffice-icu61.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1526472000">- Add condtional for Libreoffice Supplement in libreoffice-base, no
  longer install libreoffice-base by default for future versions of
  openSUSE.</changelog>
  <changelog author="bosim@opensuse.org" date="1526558400">- Add supplements for xfce4-session for libreoffice-gtk3 to install
  that package when xfce is present (boo#1092699).</changelog>
  <changelog author="andras.timar@collabora.com" date="1527768000">- bnc#1094359 LO-L3: LO Writer: Text in boxes not visible
  * bnc1094359.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1528459200">- Conflict with gnome subpackage on the gtk2 subpkg as it was split
  of from there bsc#1096673</changelog>
  <changelog author="tchvatal@suse.com" date="1529582400">- Version bump to 6.0.5.2:
  * Bunch of fixes from the upstream
- Try to implement safeguarding to avoid bsc#1050305</changelog>
  <changelog author="tchvatal@suse.com" date="1529582401">- Drop merged patch bnc1094359.patch</changelog>
  <changelog author="andras.timar@collabora.com" date="1530100800">-  bnc#1088262 LO-L3: Table borders appear black in LibreOffice (while white in PowerPoint)
  * bnc1088262.patch</changelog>
</package>
<package pkgid="84491ccea22c12bc7d026ee5ec8a8c7ce909b59f30d95ac93a59c6beee6a7831" name="libressl" arch="src">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="9836c50d89bbd65a295a420d8bd198203029776cd81aa2e02d2e2dbceb443461" name="libressl" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="3346cb1b71566d2860f19e68c9dac7b5dcc2b74cab88f19f9b3a94b42802634b" name="libressl-devel" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="a26f7899dab0cb5ce512dafa6b7030a56380e7ce685302b0d7494843c82306da" name="libressl-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="75670f7793c8a97c7af9c8798537850807f9707f469ac5cc0031483de25121e2" name="libressl-devel-doc" arch="noarch">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="be25925a2861f73e5ba0ac9a016b349f4c16ff513e70fe77ec82782709d710cf" name="libsamba-credentials-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="e12d46b1bd9f379ee5eee60e21b946d2e2192a964da2ec40d66c58d857b871a8" name="libsamba-credentials-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="3b2e5c874554493e622860806328a0671af61576dcd24a9faa27d88b2203aac9" name="libsamba-credentials0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c38f3deec8a626122d11d668a11f588f0c551f72bc0165beea78859d9ac1d362" name="libsamba-credentials0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="a5676b52233aef9e7edd84be4e0f61507b011c4883aba867a0505ae5cf119574" name="libsamba-credentials0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="24aa5bccfadd34a24bb0e161c0966eb05530b92aed400a5a465f5eb174840a69" name="libsamba-credentials0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="13fd1d0234fc80b47ff1e384cf6d63380ea52f4cf8be935c7713dd5b6cb9a8f5" name="libsamba-errors-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="9dc373c91ac3fd1f3400db9949e5dff3c56a67e5b76de03c77b7b0038b5f1530" name="libsamba-errors-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="07a5e9478de1399447682efb5f4ad718d86e1b85b5558ce3506c9a94f0b1212b" name="libsamba-errors0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="fc4b307061ed62a87a3750e0745c25f1a258ce8b774e23b7aaad4936c8b2e72f" name="libsamba-errors0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="ae53c02207f133dd2bda0de70a71a1854fbfe46f4944a19fecc634d01a6598a5" name="libsamba-errors0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="38106aae9d8f3cf53fb8e0170b3f38675da83306034dafb951e1ef9c4b8fbe01" name="libsamba-errors0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="3ff4b46b2c559d3c1249bc2edf33a08d352ff3ce8921432895bf5c6164d7ff38" name="libsamba-hostconfig-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="05a78be4e9c5a46c70daf056bd83d0968a7fb0d9e7eba7652838983f1f9f43cf" name="libsamba-hostconfig-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="ac4545ff25e17823dbddd87ba4b7424a0c513942a165bd9777344925815e3347" name="libsamba-hostconfig0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="683cff05abfa75968a1a3b4b306d48a54a58c3b086ef551846c515d52219f300" name="libsamba-hostconfig0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="fcad73a44c4c8683403282d8c579ccd533521a43cc95cc325e2d57fae81b82b2" name="libsamba-hostconfig0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="17f0de5ad823009a9b449bc6e77c8d8cb9c851e0b1d76b128d6770a7190aa39b" name="libsamba-hostconfig0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="7a19a49d024021f6203307661e13430a65393dfa00cd97c6361a79581a479dc3" name="libsamba-passdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="5d1db4821b44e6599ea10dbfc6acc9d02aadb9a563ab18df94fde964b2a859ce" name="libsamba-passdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="bd37ee43cffcf3a93e74baca5007850e0d9a5c7186b411b7bba30a5ee430596c" name="libsamba-passdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="78c21f292ddd7e38b89068f83e6329082fa8e6e0d372e19bc3bfd8d6527896d2" name="libsamba-passdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="bfcb80daf768bac3e3ce9f21d2999480aba2380481d2b17966f4d7b4045ad6c0" name="libsamba-passdb0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="65f6d8d01b94b66e1baa113b9c6a1456aa51e856ebb1cc3217bb5c27f8b9d4b6" name="libsamba-passdb0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="113c3ebafacc3dba6ca9b044c9232a4409507c3b4a7167d78c0347976d6841dd" name="libsamba-policy-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="5d97d847b6298321a0bb9e57481834b54a426098b150535dad0a9c3785e3adcb" name="libsamba-policy-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="2a1f0f8c5c4ff4bd07cd6635cc83776d2d119af6c7431bf493b07ee516e9368e" name="libsamba-policy0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="46b215d70d51b08559006328671c6b96b39fba6e9ad749e5c6a2e9e51d5b5a7b" name="libsamba-policy0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="adce8048b99fec9fffc3c7f96dbebfa7a47858348c3d5c08d3fc932fa393bdde" name="libsamba-policy0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="0a2e8367c56c8a82f76ac56a6118e5df767bac1c7221b6a27d4717cee9c465db" name="libsamba-policy0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="89b73fc7afc476abd6bc9cdeab3ce7e563ec05669baad1ff2339752f87ddc6d2" name="libsamba-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="dddceaf8cca41d20c920eb046e5969be1c2bfc5c2cf645419e8d606b39d46710" name="libsamba-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="4a5d9e2b5a0e650cf8889e470655c2c5f80d2139c464fb42577da33d580cfa82" name="libsamba-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="db85e9b930c056b45686c441cc5700ef301708b2286360415bdd24104796b3cc" name="libsamba-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="9c45cdb6e17c7b3bd78458a8e75a019b76a97fe23ac9f4ba972425e456fc53e4" name="libsamba-util0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="104a315c518aafecd67a866fe7d247ffab579d301a79631a93be4444249a5c70" name="libsamba-util0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="ea26ce91646746a21c76b6422ab41e49d611639017337aebea79052b6e35cd75" name="libsamdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="6562e3d2f7795c344a36d06d25c0d7c3f137a13d611869d8b48b931316624939" name="libsamdb-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="efa57907b8adfefe6e5e833de0f81299818944ec799803f8289651f33737115e" name="libsamdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="4a846aab58738276cd991a2996293c1620792708c20a83d7e945908d3f7e15db" name="libsamdb0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="8085216a9ea5647040da52421adda59648de66c2ee6483774a656926392005ea" name="libsamdb0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="8ee22bcc272d600c3f64cb3dae945bbfce36e0d809021ddeeaa5cbf8d3922a55" name="libsamdb0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="c106555a1c05f15bb679cd7b1e0fdf2e773d0162060e0d2d44ebfadf25b241ed" name="libslurm32" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="7125e77b2a43d4651ce2a7b586c08772265092e829ce2d94fe3ff07a54b3834f" name="libslurm32" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="018cbd32674e18cc06aad4af19fc4dd4fda7298e126c217cbb0cdcc79ab2802f" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="47685b616bf3c50da85301a7f12210c8bfae0dd41affa2c78b7044cddc5dd7d6" name="libsmartcols-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="5c68a3ea42bb8dd8a96923fe26a5d0c69cb085eb2cbc464905813073e2f7d913" name="libsmartcols-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="114c07992dc51f876414769bcbf1cc542ba37f69dcc1c497901b652ed7cb6222" name="libsmartcols-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="81c2a1369b5450e307f535fca702c9c1dfbe469b2da2fdb6989632d8e47c906d" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="b6c0f3bc67d71e7a37e47d1fe66e30a4bbaf99c748d6ddb26b994854815b12c8" name="libsmartcols1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="631556050fe8b78214bdbee96d534f13e8857089ea8816edf433a9e1afd9e7a0" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="8e3dee64bd09a931d975079a0e630090278f499a0b4ad14be44f6e09ebfd45f9" name="libsmbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="50b1992a8ba83b57186a1245cdd67404ec8f409027e8ec8784e46e951eb1c471" name="libsmbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="b011d3306413174979648d1c3a0d43ef61983adc847b5fa111808fa247e8d6ff" name="libsmbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="28c0b4dffa552a8b25604bba463fb95fb6233eb56532be6fd2ad828723a33fe4" name="libsmbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="f07bb95e4bd8f7e24c32413a1ae27ad40a3e94e2753c8656e26fe1e38630590a" name="libsmbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="c169441f82623a145d484f79952b2802682f9769805329eb74e7c68c978de079" name="libsmbconf-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="e7dd5f73cff3c5fc3e079da2de2b4a777155afb933f81fe6740d211e6fb3b0ff" name="libsmbconf-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="1371b85ad0b99852da0783f886534e3d2e7168d2d684ef15d6da4183c1a21b72" name="libsmbconf0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="d2964f8e28890b8943cd13c86f01a4c11376ddcac4a4ced441f9f18fdadcaa85" name="libsmbconf0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="3f097b419415f5b664c96cd2199de6b7974426a8332c9a3a28338b876622f654" name="libsmbconf0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c6ff501b500d20c5301c45f17493ff129e7f8172a68c22e3a88546807d73fe86" name="libsmbconf0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="47f193dd34683f5c646017fdb919879422c48357c52106e563e55d0334eba16e" name="libsmbldap-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="8ca3f32fd5b6039f78fe7676ccb36cf4b301817f265ee269877dd406fa3cf126" name="libsmbldap-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="7c4e6bf8af1b000f65594a981768b713eca42c97c27dae6f88f5eeddd283c9d6" name="libsmbldap2-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="6535051451bb58964d63ef4cd50ec257d6d00895dbd188693c21c4940a9116db" name="libsmbldap2-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="1b4794cc36509233f80d9e5148df834ba7d1b9ada7477d5e0fee7cc89b748232" name="libsmbldap2" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="ad6cf53edb78273dc3b551d321ca310ff18499c0d0c845a267d4c9f2bfb63e82" name="libsmbldap2" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="53beb545253af84d47199d94f2b03e6903bd2d6065eb927caadd8c2f2e571bb2" name="libsnapper-devel" arch="x86_64">
  <version epoch="0" ver="0.5.4" rel="lp150.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1470657600">- better messages for some btrfs quota errors
  (gh#openSUSE/snapper#257)</changelog>
  <changelog author="aschnell@suse.com" date="1470744000">- merged patch to fix order of object destruction on shutdown
  (gh#openSUSE/snapper#258)</changelog>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
</package>
<package pkgid="b54b027ef6165452ba76a06bb873314ffc8d1599ecbbbcc1751ee17a5f057b7d" name="libsnapper-devel" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="lp150.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
  <changelog author="aschnell@suse.com" date="1527508800">- merged (gh#openSUSE/snapper#409) to build with boost 1.67.0
  (bsc#1096208)
- version 0.5.5</changelog>
  <changelog author="aschnell@suse.com" date="1532347200">- fixed logging during shutdown of snapperd to avoid core dumps
  (bsc#1096401 and others)
- version 0.5.6</changelog>
</package>
<package pkgid="f447977114e6a0cbad30744318130dca1f8155352db27df69399cbf14bbeac1e" name="libsnapper4" arch="x86_64">
  <version epoch="0" ver="0.5.4" rel="lp150.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1470657600">- better messages for some btrfs quota errors
  (gh#openSUSE/snapper#257)</changelog>
  <changelog author="aschnell@suse.com" date="1470744000">- merged patch to fix order of object destruction on shutdown
  (gh#openSUSE/snapper#258)</changelog>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
</package>
<package pkgid="f46f8be2da8de7a95460e0a8df4b3f57cbdd30089958933988e7e11b67d6ed21" name="libsnapper4" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="lp150.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
  <changelog author="aschnell@suse.com" date="1527508800">- merged (gh#openSUSE/snapper#409) to build with boost 1.67.0
  (bsc#1096208)
- version 0.5.5</changelog>
  <changelog author="aschnell@suse.com" date="1532347200">- fixed logging during shutdown of snapperd to avoid core dumps
  (bsc#1096401 and others)
- version 0.5.6</changelog>
</package>
<package pkgid="fee05e98fc278a67b6e9770b6454ca08b4da118837e957c965b4979cd13a7ecb" name="libsndfile" arch="src">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- fix devel dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- use O_CLOEXEC in library code.</changelog>
  <changelog author="tiwai@suse.de" date="1322136001">- add missing provides/obsoletes for libsndfile -&gt; libsndfile1
  rename (bnc#732565)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterlace, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139):
  sndfile-deinterlace-channels-check.patch</changelog>
</package>
<package pkgid="e273a6fcc3dc5c1dad9ac0b954f98b75dee90b0b3d3a68f9f8db6c91c4d96d51" name="libsndfile-devel" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- fix devel dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- use O_CLOEXEC in library code.</changelog>
  <changelog author="tiwai@suse.de" date="1322136001">- add missing provides/obsoletes for libsndfile -&gt; libsndfile1
  rename (bnc#732565)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterlace, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139):
  sndfile-deinterlace-channels-check.patch</changelog>
</package>
<package pkgid="777b39ae09326a059741187cb8de6105eb88db09ec529003d00e061699de563d" name="libsndfile-progs" arch="src">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="meissner@suse.de" date="1223985600">- prototype for memset</changelog>
  <changelog author="olh@suse.de" date="1231329600">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="tiwai@suse.de" date="1234180800">- updated to version 1.0.18
  * Add Ogg/Vorbis support (disabled right now due to vorbis
    version mismatch; SVN version is required)
  * Remove captive FLAC library.
  * Many new features and bug fixes.
  * Generate Win32 and Win64 pre-compiled binaries.
- Dropped libsndfile-octave subpackage (as octave itself is
  dropped from FACTORY)</changelog>
  <changelog author="tiwai@suse.de" date="1236168000">- updated to version 1.0.19:
  * Fix for CVE-2009-0186 (bnc#481769 - VUL-0: libsndfile CAF
    Processing Integer Overflow Vulnerability)
  * Huge number of minor fixes as a result of static analysis
- remove INSTALL file from filelist</changelog>
  <changelog author="tiwai@suse.de" date="1240574400">- built progs subpackage from an individual spec file to cut the
  circular dependency with jack.</changelog>
  <changelog author="ro@suse.de" date="1240833600">- buildfix: tar basedir is libsndfile not libsndfile-progs</changelog>
  <changelog author="tiwai@suse.de" date="1242388800">- updated to version 1.0.20:
  * Fix for potential heap overflow
- enable ogg/vorbis support</changelog>
  <changelog author="dmueller@suse.de" date="1244030400">- explicitely enable sqlite support to avoid random flipping</changelog>
  <changelog author="tiwai@suse.de" date="1281960000">- updated to version 1.0.21:
  * Bunch of minor bug fixes.
  * including VUL-1 divide-by-zero fix (bnc#631379)</changelog>
  <changelog author="davejplater@gmail.com" date="1286539200">- Update to version 1.0.22
- Upstream changes :
  * Bunch of minor bug fixes.</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1286798400">- Update to version 1.0.23:
- Upstream changes :
  * configure.ac src/version-metadata.rc.in src/Makefile.am
    Add version string resources to the windows DLL.
  * doc/api.html
    Update to add missing SF_FORMAT_* values. Closed Debian bug #545257.
  * NEWS README configure.ac doc/*.html
    Updates for 1.0.23 release.
  * Other minor bug fixes</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1300881600">- Update to version 1.0.24
- Upstream changes :
  * WAV files are now written with an 18 byte u-law and A-law fmt chunk
  * A document on virtual I/O functionality was added
  * Two new methods were added in sndfile.hh
  * A fix was made for a non-zero SSND offset values on AIFF
  * Minor bug fixes and improvements were done</changelog>
  <changelog author="tiwai@suse.de" date="1310990400">- updated to version 1.0.25:
  Fix for Secunia Advisory SA45125 (CVE-2011-2696, bnc#705681)
  Minor bug fixes and improvements</changelog>
  <changelog author="tiwai@suse.de" date="1311940800">- Fix zero-division in PAF parser (bnc#708988)</changelog>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Drop libsndfile-example-fix.diff</changelog>
  <changelog author="idonmez@suse.com" date="1448366400">- Remove documentation, it belongs to the libsndfile package.</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
</package>
<package pkgid="e788106d3908d2ca7d2366497bdf708d3ebcf632b1046c2e62b8702eba2551f7" name="libsndfile-progs" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1236168000">- updated to version 1.0.19:
  * Fix for CVE-2009-0186 (bnc#481769 - VUL-0: libsndfile CAF
    Processing Integer Overflow Vulnerability)
  * Huge number of minor fixes as a result of static analysis
- remove INSTALL file from filelist</changelog>
  <changelog author="tiwai@suse.de" date="1240574400">- built progs subpackage from an individual spec file to cut the
  circular dependency with jack.</changelog>
  <changelog author="ro@suse.de" date="1240833600">- buildfix: tar basedir is libsndfile not libsndfile-progs</changelog>
  <changelog author="tiwai@suse.de" date="1242388800">- updated to version 1.0.20:
  * Fix for potential heap overflow
- enable ogg/vorbis support</changelog>
  <changelog author="dmueller@suse.de" date="1244030400">- explicitely enable sqlite support to avoid random flipping</changelog>
  <changelog author="tiwai@suse.de" date="1281960000">- updated to version 1.0.21:
  * Bunch of minor bug fixes.
  * including VUL-1 divide-by-zero fix (bnc#631379)</changelog>
  <changelog author="davejplater@gmail.com" date="1286539200">- Update to version 1.0.22
- Upstream changes :
  * Bunch of minor bug fixes.</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1286798400">- Update to version 1.0.23:
- Upstream changes :
  * configure.ac src/version-metadata.rc.in src/Makefile.am
    Add version string resources to the windows DLL.
  * doc/api.html
    Update to add missing SF_FORMAT_* values. Closed Debian bug #545257.
  * NEWS README configure.ac doc/*.html
    Updates for 1.0.23 release.
  * Other minor bug fixes</changelog>
  <changelog author="oliver.bengs@opensuse.org" date="1300881600">- Update to version 1.0.24
- Upstream changes :
  * WAV files are now written with an 18 byte u-law and A-law fmt chunk
  * A document on virtual I/O functionality was added
  * Two new methods were added in sndfile.hh
  * A fix was made for a non-zero SSND offset values on AIFF
  * Minor bug fixes and improvements were done</changelog>
  <changelog author="tiwai@suse.de" date="1310990400">- updated to version 1.0.25:
  Fix for Secunia Advisory SA45125 (CVE-2011-2696, bnc#705681)
  Minor bug fixes and improvements</changelog>
  <changelog author="tiwai@suse.de" date="1311940800">- Fix zero-division in PAF parser (bnc#708988)</changelog>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Drop libsndfile-example-fix.diff</changelog>
  <changelog author="idonmez@suse.com" date="1448366400">- Remove documentation, it belongs to the libsndfile package.</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
</package>
<package pkgid="e4811d8f3e49ce787cb1d4d72bb23975d2d6cf8f0efabc1aebae698c838d37b6" name="libsndfile1" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- fix devel dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- use O_CLOEXEC in library code.</changelog>
  <changelog author="tiwai@suse.de" date="1322136001">- add missing provides/obsoletes for libsndfile -&gt; libsndfile1
  rename (bnc#732565)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterlace, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139):
  sndfile-deinterlace-channels-check.patch</changelog>
</package>
<package pkgid="c77ba95ec60be202941799304f75ece4feeef7a956d2c58fa5eec78281b229ff" name="libsndfile1-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.28" rel="lp150.3.3.1"/>
  <changelog author="jengelh@medozas.de" date="1321876800">- Remove redundant/unwanted tags/section (cf. specfile guidelines)</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- fix devel dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322136000">- use O_CLOEXEC in library code.</changelog>
  <changelog author="tiwai@suse.de" date="1322136001">- add missing provides/obsoletes for libsndfile -&gt; libsndfile1
  rename (bnc#732565)</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="mmeister@suse.com" date="1366027200">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="tiwai@suse.de" date="1420632000">- VUL-0: two buffer read overflows in sd2_parse_rsrc_fork()
  (CVE-2014-9496, bnc#911796): backported upstream fix patches
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1426939200">- Cleanup spec file with spec-cleaner
- Add gpg signature
- Remove old ppc provides/obsoletes</changelog>
  <changelog author="tiwai@suse.de" date="1446638400">- VUL-1: libsndfile DoS/divide-by-zero (CVE-2014-9756, bsc#953521):
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch</changelog>
  <changelog author="tiwai@suse.de" date="1446638401">- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-7805, bsc#953516)
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-fix-header-read-CVE-2015-7805.patch
- VUL-0: libsndfile 1.0.25 heap overflow (CVE-2015-8075, bsc#953519)
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Fix the build with SLE11-SP3 due to AM_SILENT_RULE macro</changelog>
  <changelog author="tiwai@suse.de" date="1448280000">- Update to version 1.0.26:
  * Fix for CVE-2014-9496, CVE-2014-9756 and CVE-2015-7805.
  * Add ALAC/CAF support. Minor bug fixes and improvements.
- Refreshed patches:
  sndfile-ocloexec.patch
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch
- Removed obsoleted patches:
  libsndfile-example-fix.diff
  libsndfile-fix-header-read-CVE-2015-7805.patch
  libsndfile-paf-zero-division-fix.diff
  libsndfile-src-common.c-Fix-a-header-parsing-bug.patch
  libsndfile-src-file_io.c-Prevent-potential-divide-by-zero.patch
  sndfile-src-sd2.c-Fix-segfault-in-SD2-RSRC-parser.patch
  sndfile-src-sd2.c-Fix-two-potential-buffer-read-overflows.patch</changelog>
  <changelog author="tom.mbrt@googlemail.com" date="1462881600">- Fix spec file to enable builds on non opensuse OS</changelog>
  <changelog author="tiwai@suse.de" date="1491825600">- Update to version 1.0.27:
  * Fix a seek regression in 1.0.26
  * Add metadata read/write for CAF and RF64
  * FIx PAF endian-ness issue
- Update to version 1.0.28
  * Fix buffer overruns in FLAC and ID3 handling code
  (CVE-2017-7585, CVE-2017-7586, bsc#1033054, bsc#1033053)
  * Reduce default header memory requirements
  * Fix detection of Large File Support for 32 bit systems.
- Obsoleted patch:
  libsndfile-psf_strlcpy_crlf-fix-CVE-2015-8075.patch</changelog>
  <changelog author="tiwai@suse.de" date="1493726400">- Fix FLAC buffer overflows (CVE-2017-8361 CVE-2017-8363
  CVE-2017-8365 CVE-2017-8362 bsc#1036944 bsc#1036945 bsc#1036946
  bsc#1036943):
  0001-FLAC-Fix-a-buffer-read-overrun.patch
  0002-src-flac.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1497355200">- Fix out-of-bounds read memory access in the aiff_read_chanmap()
  (CVE-2017-6892, bsc#1043978):
  0010-src-aiff.c-Fix-a-buffer-read-overflow.patch</changelog>
  <changelog author="tiwai@suse.de" date="1502193600">- Fix Heap-based Buffer Overflow in the psf_binheader_writef
  (CVE-2017-12562, bsc#1052476):
  0020-src-common.c-Fix-heap-buffer-overflows-when-writing-.patch</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: divide-by-zero error exists in the function
  double64_init() in double64.c (CVE-2017-14634, bsc#1059911):
  0030-double64_init-Check-psf-sf.channels-against-upper-bo.patch
- Tentative fix for VUL-0: out of bounds read in the function
  d2alaw_array() in alaw.c (CVE-2017-14245, bsc#1059912) and
  VUL-0: out of bounds read in the function d2ulaw_array() in
  ulaw.c (CVE-2017-14246, bsc#1059913):
  0031-sfe_copy_data_fp-check-value-of-max-variable.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459200">- Fix potential overflow in d2alaw_array() (CVE-2017-17456,
  bsc#1071777):
  libsndfile-CVE-2017-17456-alaw-range-check.patch
- Fix potential overflow in d2ulaw_array() (CVE-2017-17457,
  bsc#1071767):
  libsndfile-CVE-2017-17457-ulaw-range-check.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528459201">- Use license file tag</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix buffer overflow in sndfile-deinterlace, which isn't really a
  security issue (bsc#1100167, CVE-2018-13139):
  sndfile-deinterlace-channels-check.patch</changelog>
</package>
<package pkgid="dcc4832ac47df68f001cdf8713cf15d70eabdaa9aadaab0f943e9a887bab614b" name="libsodium" arch="src">
  <version epoch="0" ver="1.0.16" rel="lp150.3.5.1"/>
  <changelog author="idonmez@suse.com" date="1409227200">- Update to version 0.7.0
  * Added sodium_malloc() and sodium_allocarray() for secure memory
    allocation.
  * ed25519 keys can be converted to curve25519 keys with
    crypto_sign_ed25519_pk_to_curve25519() and
    crypto_sign_ed25519_sk_to_curve25519().
  * aes256 was removed.</changelog>
  <changelog author="idonmez@suse.com" date="1411560000">- Update to version 1.0.0
  * The API and ABI are now stable.
  * crypto_sign() properly works with overlapping regions again.
  * The test suite has been extended.</changelog>
  <changelog author="idonmez@suse.com" date="1421409600">- Update to version 1.0.2
  * The _easy and _detached APIs now support precalculated keys
  * sodium_free() can now be called on regions with PROT_NONE
    protection.
  * Memory allocation functions can now be used on operating systems
    with no memory protection.</changelog>
  <changelog author="mpluskal@suse.com" date="1431518400">- Update to 1.0.3
  * In addition to sodium_bin2hex(), sodium_hex2bin() is now a
    constant-time function.
  * crypto_stream_xsalsa20_ic() has been added.
  * crypto_generichash_statebytes(), crypto_auth_*_statebytes()
    and crypto_hash_*_statebytes() have been added in order to
    retrieve the size of structures keeping states from foreign
    languages.
  * The JavaScript target doesn't require /dev/urandom or an
    external randombytes() implementation any more. Other minor
    Emscripten-related improvements have been made in order to
    support libsodium.js
  * Custom randombytes implementations do not need to provide
    their own implementation of randombytes_uniform() any more.
    randombytes_stir() and randombytes_close() can also be NULL
    pointers if they are not required.
  * On Linux, getrandom(2) is being used instead of directly
    accessing /dev/urandom, if the kernel supports this system
    call.
  * crypto_box_seal() and crypto_box_seal_open() have been added.
  * A solutions for Visual Studio 2015 was added.</changelog>
  <changelog author="idonmez@suse.com" date="1445169600">- Update to 1.0.4
  * Support for AES256-GCM has been added. This requires a CPU with
    the aesni and pclmul extensions, and is accessible via the
    crypto_aead_aes256gcm_*() functions.
  * ChaCha20 with an extended (96 bit) nonce and a 32-bit counter has
    been implemented as crypto_stream_chacha20_ietf(),
    crypto_stream_chacha20_ietf_xor() and crypto_stream_chacha20_ietf_xor_ic().
    An IETF-compatible version of ChaCha20Poly1305 is available as
    crypto_aead_chacha20poly1305_ietf_npubbytes(),
    crypto_aead_chacha20poly1305_ietf_encrypt() and
    crypto_aead_chacha20poly1305_ietf_decrypt().
  * The sodium_increment() helper function has been added, to increment
    an arbitrary large number (such as a nonce).
  * The sodium_compare() helper function has been added, to compare
    arbitrary large numbers (such as nonces, in order to prevent replay attacks).</changelog>
  <changelog author="idonmez@suse.com" date="1445428800">- Now that gcc 5.2 is available on TW, remove the ARMv7 workaround.</changelog>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
</package>
<package pkgid="8e5b666773648f3481a677a9ee75a5809c7444823c74d17428b8efcd5d7b6044" name="libsodium-devel" arch="x86_64">
  <version epoch="0" ver="1.0.16" rel="lp150.3.5.1"/>
  <changelog author="idonmez@suse.com" date="1409227200">- Update to version 0.7.0
  * Added sodium_malloc() and sodium_allocarray() for secure memory
    allocation.
  * ed25519 keys can be converted to curve25519 keys with
    crypto_sign_ed25519_pk_to_curve25519() and
    crypto_sign_ed25519_sk_to_curve25519().
  * aes256 was removed.</changelog>
  <changelog author="idonmez@suse.com" date="1411560000">- Update to version 1.0.0
  * The API and ABI are now stable.
  * crypto_sign() properly works with overlapping regions again.
  * The test suite has been extended.</changelog>
  <changelog author="idonmez@suse.com" date="1421409600">- Update to version 1.0.2
  * The _easy and _detached APIs now support precalculated keys
  * sodium_free() can now be called on regions with PROT_NONE
    protection.
  * Memory allocation functions can now be used on operating systems
    with no memory protection.</changelog>
  <changelog author="mpluskal@suse.com" date="1431518400">- Update to 1.0.3
  * In addition to sodium_bin2hex(), sodium_hex2bin() is now a
    constant-time function.
  * crypto_stream_xsalsa20_ic() has been added.
  * crypto_generichash_statebytes(), crypto_auth_*_statebytes()
    and crypto_hash_*_statebytes() have been added in order to
    retrieve the size of structures keeping states from foreign
    languages.
  * The JavaScript target doesn't require /dev/urandom or an
    external randombytes() implementation any more. Other minor
    Emscripten-related improvements have been made in order to
    support libsodium.js
  * Custom randombytes implementations do not need to provide
    their own implementation of randombytes_uniform() any more.
    randombytes_stir() and randombytes_close() can also be NULL
    pointers if they are not required.
  * On Linux, getrandom(2) is being used instead of directly
    accessing /dev/urandom, if the kernel supports this system
    call.
  * crypto_box_seal() and crypto_box_seal_open() have been added.
  * A solutions for Visual Studio 2015 was added.</changelog>
  <changelog author="idonmez@suse.com" date="1445169600">- Update to 1.0.4
  * Support for AES256-GCM has been added. This requires a CPU with
    the aesni and pclmul extensions, and is accessible via the
    crypto_aead_aes256gcm_*() functions.
  * ChaCha20 with an extended (96 bit) nonce and a 32-bit counter has
    been implemented as crypto_stream_chacha20_ietf(),
    crypto_stream_chacha20_ietf_xor() and crypto_stream_chacha20_ietf_xor_ic().
    An IETF-compatible version of ChaCha20Poly1305 is available as
    crypto_aead_chacha20poly1305_ietf_npubbytes(),
    crypto_aead_chacha20poly1305_ietf_encrypt() and
    crypto_aead_chacha20poly1305_ietf_decrypt().
  * The sodium_increment() helper function has been added, to increment
    an arbitrary large number (such as a nonce).
  * The sodium_compare() helper function has been added, to compare
    arbitrary large numbers (such as nonces, in order to prevent replay attacks).</changelog>
  <changelog author="idonmez@suse.com" date="1445428800">- Now that gcc 5.2 is available on TW, remove the ARMv7 workaround.</changelog>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
</package>
<package pkgid="c194fc225f1a9304c6fa86c6f8c2ff6d445582585bf930f02f6cd9fd0050f47e" name="libsodium23" arch="x86_64">
  <version epoch="0" ver="1.0.16" rel="lp150.3.5.1"/>
  <changelog author="idonmez@suse.com" date="1409227200">- Update to version 0.7.0
  * Added sodium_malloc() and sodium_allocarray() for secure memory
    allocation.
  * ed25519 keys can be converted to curve25519 keys with
    crypto_sign_ed25519_pk_to_curve25519() and
    crypto_sign_ed25519_sk_to_curve25519().
  * aes256 was removed.</changelog>
  <changelog author="idonmez@suse.com" date="1411560000">- Update to version 1.0.0
  * The API and ABI are now stable.
  * crypto_sign() properly works with overlapping regions again.
  * The test suite has been extended.</changelog>
  <changelog author="idonmez@suse.com" date="1421409600">- Update to version 1.0.2
  * The _easy and _detached APIs now support precalculated keys
  * sodium_free() can now be called on regions with PROT_NONE
    protection.
  * Memory allocation functions can now be used on operating systems
    with no memory protection.</changelog>
  <changelog author="mpluskal@suse.com" date="1431518400">- Update to 1.0.3
  * In addition to sodium_bin2hex(), sodium_hex2bin() is now a
    constant-time function.
  * crypto_stream_xsalsa20_ic() has been added.
  * crypto_generichash_statebytes(), crypto_auth_*_statebytes()
    and crypto_hash_*_statebytes() have been added in order to
    retrieve the size of structures keeping states from foreign
    languages.
  * The JavaScript target doesn't require /dev/urandom or an
    external randombytes() implementation any more. Other minor
    Emscripten-related improvements have been made in order to
    support libsodium.js
  * Custom randombytes implementations do not need to provide
    their own implementation of randombytes_uniform() any more.
    randombytes_stir() and randombytes_close() can also be NULL
    pointers if they are not required.
  * On Linux, getrandom(2) is being used instead of directly
    accessing /dev/urandom, if the kernel supports this system
    call.
  * crypto_box_seal() and crypto_box_seal_open() have been added.
  * A solutions for Visual Studio 2015 was added.</changelog>
  <changelog author="idonmez@suse.com" date="1445169600">- Update to 1.0.4
  * Support for AES256-GCM has been added. This requires a CPU with
    the aesni and pclmul extensions, and is accessible via the
    crypto_aead_aes256gcm_*() functions.
  * ChaCha20 with an extended (96 bit) nonce and a 32-bit counter has
    been implemented as crypto_stream_chacha20_ietf(),
    crypto_stream_chacha20_ietf_xor() and crypto_stream_chacha20_ietf_xor_ic().
    An IETF-compatible version of ChaCha20Poly1305 is available as
    crypto_aead_chacha20poly1305_ietf_npubbytes(),
    crypto_aead_chacha20poly1305_ietf_encrypt() and
    crypto_aead_chacha20poly1305_ietf_decrypt().
  * The sodium_increment() helper function has been added, to increment
    an arbitrary large number (such as a nonce).
  * The sodium_compare() helper function has been added, to compare
    arbitrary large numbers (such as nonces, in order to prevent replay attacks).</changelog>
  <changelog author="idonmez@suse.com" date="1445428800">- Now that gcc 5.2 is available on TW, remove the ARMv7 workaround.</changelog>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
</package>
<package pkgid="0df4ba4205852ed74dbe3da38f51ccb8e4510800291739774ac18d02a42b74dc" name="libsodium23-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.16" rel="lp150.3.5.1"/>
  <changelog author="idonmez@suse.com" date="1409227200">- Update to version 0.7.0
  * Added sodium_malloc() and sodium_allocarray() for secure memory
    allocation.
  * ed25519 keys can be converted to curve25519 keys with
    crypto_sign_ed25519_pk_to_curve25519() and
    crypto_sign_ed25519_sk_to_curve25519().
  * aes256 was removed.</changelog>
  <changelog author="idonmez@suse.com" date="1411560000">- Update to version 1.0.0
  * The API and ABI are now stable.
  * crypto_sign() properly works with overlapping regions again.
  * The test suite has been extended.</changelog>
  <changelog author="idonmez@suse.com" date="1421409600">- Update to version 1.0.2
  * The _easy and _detached APIs now support precalculated keys
  * sodium_free() can now be called on regions with PROT_NONE
    protection.
  * Memory allocation functions can now be used on operating systems
    with no memory protection.</changelog>
  <changelog author="mpluskal@suse.com" date="1431518400">- Update to 1.0.3
  * In addition to sodium_bin2hex(), sodium_hex2bin() is now a
    constant-time function.
  * crypto_stream_xsalsa20_ic() has been added.
  * crypto_generichash_statebytes(), crypto_auth_*_statebytes()
    and crypto_hash_*_statebytes() have been added in order to
    retrieve the size of structures keeping states from foreign
    languages.
  * The JavaScript target doesn't require /dev/urandom or an
    external randombytes() implementation any more. Other minor
    Emscripten-related improvements have been made in order to
    support libsodium.js
  * Custom randombytes implementations do not need to provide
    their own implementation of randombytes_uniform() any more.
    randombytes_stir() and randombytes_close() can also be NULL
    pointers if they are not required.
  * On Linux, getrandom(2) is being used instead of directly
    accessing /dev/urandom, if the kernel supports this system
    call.
  * crypto_box_seal() and crypto_box_seal_open() have been added.
  * A solutions for Visual Studio 2015 was added.</changelog>
  <changelog author="idonmez@suse.com" date="1445169600">- Update to 1.0.4
  * Support for AES256-GCM has been added. This requires a CPU with
    the aesni and pclmul extensions, and is accessible via the
    crypto_aead_aes256gcm_*() functions.
  * ChaCha20 with an extended (96 bit) nonce and a 32-bit counter has
    been implemented as crypto_stream_chacha20_ietf(),
    crypto_stream_chacha20_ietf_xor() and crypto_stream_chacha20_ietf_xor_ic().
    An IETF-compatible version of ChaCha20Poly1305 is available as
    crypto_aead_chacha20poly1305_ietf_npubbytes(),
    crypto_aead_chacha20poly1305_ietf_encrypt() and
    crypto_aead_chacha20poly1305_ietf_decrypt().
  * The sodium_increment() helper function has been added, to increment
    an arbitrary large number (such as a nonce).
  * The sodium_compare() helper function has been added, to compare
    arbitrary large numbers (such as nonces, in order to prevent replay attacks).</changelog>
  <changelog author="idonmez@suse.com" date="1445428800">- Now that gcc 5.2 is available on TW, remove the ARMv7 workaround.</changelog>
  <changelog author="idonmez@suse.com" date="1446465600">- Update to 1.0.6
  * Optimized implementations of Blake2 have been added for modern
    Intel platforms. crypto_generichash() is now faster than MD5 and
    SHA1 implementations while being far more secure.
  * The crypto_sign_edwards25519sha512batch_*() functions have been
    tagged as deprecated.
  * sodium_compare() now works as documented, and compares numbers
    in little-endian format instead of behaving like memcmp().
  * sodium_runtime_has_ssse3() and sodium_runtime_has_sse41() have
    been added.</changelog>
  <changelog author="idonmez@suse.com" date="1448971200">- Follow upstream's lead and compile with -flto for &gt; 13.2 on x86
  and x86-64.</changelog>
  <changelog author="idonmez@suse.com" date="1449576000">- Update to version 1.0.7
  * Sandy2x, the fastest Curve25519 implementation ever,
    has been merged in, and is automatically used on CPUs
    supporting the AVX instructions set.
  * An SSE2 optimized implementation of Poly1305 was added,
    and is twice as fast as the portable one.
  * An SSSE3 optimized implementation of ChaCha20 was added,
    and is twice as fast as the portable one.
  * Faster sodium_increment() for common nonce sizes.
  * New helper functions have been added: sodium_is_zero()
    and sodium_add().</changelog>
  <changelog author="idonmez@suse.com" date="1451044800">- Update to version 1.0.8
  * Handle the case where the CPU supports AVX, but we are running
    on an hypervisor with AVX disabled/not supported.
  * Faster (2x) scalarmult_base() when using the ref10 implementation.</changelog>
  <changelog author="idonmez@suse.com" date="1459598400">- Update to version 1.0.9
  * A detached API was added to the ChaCha20-Poly1305 and AES256-GCM
    implementations.
  * The Argon2i password hashing function was added, and is accessible
    directly and through a new, high-level crypto_pwhash API.
    The scrypt function remains available as well.
  * A speed-record AVX2 implementation of BLAKE2b was added.
  * Countermeasures for Ed25519 signatures malleability have been
    added to match the irtf-cfrg-eddsa draft.
  * The HChaCha20 core function was implemented (crypto_core_hchacha20()).
  * No-op stubs were added for all AES256-GCM public functions even
    when compiled on non-Intel platforms.
  * crypt_generichash_blake2b_statebytes() was added.
  * New macros were added for the IETF variant of the ChaCha20-Poly1305
    construction.</changelog>
  <changelog author="idonmez@suse.com" date="1459857600">- Update to version 1.0.10
  * Compile fix update for older GCCs</changelog>
  <changelog author="i@marguerite.su" date="1470484800">- update version 1.0.11
  * sodium_init() is now thread-safe, and can be safely called
    multiple times.
  * Better support for old gcc versions.
  * AVX2 detection was fixed, resulting in faster BLAKE2b hashing
    on platforms where it was not properly detected.
  * The Sandy2x Curve25519 implementation was not as fast as
    expected on some platforms. This has been fixed.
  * The NativeClient target was improved. Most notably, it now
    supports optimized implementations, and uses pepper_49 by default.
  * The library can be compiled with recent Emscripten versions.
    Changes have been made to produce smaller code, and the default
    heap size was reduced in the standard version.
  * Decryption functions can now accept a NULL pointer for the output.
    This checks the MAC without writing the decrypted message.
  * crypto_generichash_final() now returns -1 if called twice.</changelog>
  <changelog author="idonmez@suse.com" date="1489406400">- Update to version 1.0.12
  * Ed25519ph was implemented, adding a multi-part signature API
    (crypto_sign_init(), crypto_sign_update(), crypto_sign_final_*()).
  * New constants and related accessors have been added for Scrypt
    and Argon2.
  * XChaCha20 has been implemented. Like XSalsa20, this construction
    extends the ChaCha20 cipher to accept a 192-bit nonce. This
    makes it safe to use ChaCha20 with random nonces.
  * crypto_secretbox, crypto_box and crypto_aead now offer variants
    leveraging XChaCha20.
  * SHA-2 is about 20% faster, which also gives a speed boost to
    signature and signature verification.
  * AVX2 implementations of Salsa20 and ChaCha20 have been added.
    They are twice as fast as the SSE2 implementations. The speed
    gain is even more significant on Windows, that previously
    didn't use vectorized implementations.
  * New high-level API: crypto_kdf, to easily derive one or more
    subkeys from a master key.
  * Siphash with a 128-bit output has been implemented, and is
    available as crypto_shorthash_siphashx_*.
  * New *_keygen() helpers functions have been added to create
    secret keys for all constructions. This improves code clarity
    and can prevent keys from being partially initialized.
  * A new randombytes_buf_deterministic() function was added to
    deterministically fill a memory region with pseudorandom data.
    This function can especially be useful to write reproducible tests.
  * A preliminary crypto_kx_*() API was added to compute shared
    session keys.
  * AVX2 detection is more reliable.</changelog>
  <changelog author="idonmez@suse.com" date="1506600000">- Update to version 1.0.14
  * Internal consistency checks failing and primitives used with
    dangerous/out-of-bounds/invalid parameters used to call abort(3).
    Now, a custom handler that doesn't return can be set with the
    set_sodium_misuse() function. It still aborts by default or if
    the handler ever returns. This is not a replacement for non-fatal,
    expected runtime errors. This handler will be only called in
    unexpected situations due to potential bugs in the library or in
    language bindings.
  * *_MESSAGEBYTES_MAX macros (and the corresponding _messagebytes_max()
    symbols) have been added to represent the maximum message size that
    can be safely handled by a primitive. Language bindings are
    encouraged to check user inputs against these maximum lengths.
  * The test suite has been extended to cover more edge cases.
  * crypto_sign_ed25519_pk_to_curve25519() now rejects points that
    are not on the curve, or not in the main subgroup.
  * Further changes have been made to ensure that smart compilers
    will not optimize out code that we don't want to be optimized.
  * The sodium_runtime_has_* symbols for CPU features detection are
    now defined as weak symbols, i.e. they can be replaced with an
    application-defined implementation. This can be useful to
    disable AVX* when temperature/power consumption is a concern.
  * crypto_kx_*() now aborts if called with no non-NULL pointers
    to store keys to.
  * SSE2 implementations of crypto_verify_*() have been added.
  * Passwords can be hashed using a specific algorithm with the new
    crypto_pwhash_str_alg() function.
  * Due to popular demand, base64 encoding (sodium_bin2base64())
    and decoding (sodium_base642bin()) have been implemented.
  * A new crypto_secretstream_*() API was added to safely encrypt
    files and multi-part messages.
  * The sodium_pad() and sodium_unpad() helper functions have been
    added in order to add &amp; remove padding.
  * An AVX512 optimized implementation of Argon2 has been added.
  * The crypto_pwhash_str_needs_rehash() function was added to check
    if a password hash string matches the given parameters, or if it
    needs an update.
  Updates from 1.0.13
  * An AVX2 optimized implementation of the Argon2 round function was added.
  * The Argon2id variant of Argon2 has been implemented. The high-level
    crypto_pwhash_str_verify() function automatically detects the
    algorithm and can verify both Argon2i and Argon2id hashed passwords.
    The default algorithm for newly hashed passwords remains Argon2i
    in this version to avoid breaking compatibility with verifiers
    running libsodium &lt;= 1.0.12.
  * A crypto_box_curve25519xchacha20poly1305_seal*() function set was implemented.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Refresh spec-file.
- Update to 1.0.15.
  * Release notes: https://github.com/jedisct1/libsodium/releases/tag/1.0.15
  * The default password hashing algorithm is now Argon2id.
  * The pwhash_str_verify() function can still verify Argon2i hashes without any changes,
    and pwhash() can still compute Argon2i hashes as well.
  * The aes128ctr primitive was removed. It was slow, non-standard, not authenticated,
    and didn't seem to be used by any opensource project.
  * Argon2id required at least 3 passes like Argon2i, despite a minimum of 1
    as defined by the OPSLIMIT_MIN constant. This has been fixed.
  * The secretstream construction was slightly changed to be consistent with forthcoming variants.
  * The Javascript and Webassembly versions have been merged, and the module now returns
    a .ready promise that will resolve after the Webassembly code is loaded and compiled.
  * Note that due to these incompatible changes, the library version major was bumped up.</changelog>
  <changelog author="idonmez@suse.com" date="1513166400">- Update to 1.0.16
  * Signatures computations and verifications are now way faster
    on 64-bit platforms with compilers supporting 128-bit
    arithmetic (gcc, clang, icc). This includes the WebAssembly
    target.
  * New low-level APIs for computations over edwards25519:
    crypto_scalarmult_ed25519(), crypto_scalarmult_ed25519_base(),
    crypto_core_ed25519_is_valid_point(), crypto_core_ed25519_add(),
    crypto_core_ed25519_sub() and crypto_core_ed25519_from_uniform()
    (elligator representative to point).
  * crypto_sign_open(), crypto_sign_verify_detached() and
    crypto_sign_edwards25519sha512batch_open` now reject public
    keys in non-canonical form in addition to low-order points.
  * The library can be built with ED25519_NONDETERMINISTIC defined
    in order to use synthetic nonces for EdDSA. This is disabled
    by default.
  * sodium_stackzero() was added to wipe content off the stack.
  * The Salsa20-based PRNG example is now thread-safe on platforms
    with support for thread-local storage, optionally mixes bits
    from RDRAND.
  * Argon2 and scrypt are slightly faster on Linux.</changelog>
  <changelog author="adam.majer@suse.de" date="1514548800">- Enable verbose make output when building tests</changelog>
  <changelog author="mpluskal@suse.com" date="1531396800">- Add gpg signature
- Modernise spec file with spec-cleaner</changelog>
  <changelog author="dimstar@opensuse.org" date="1531483200">- Add baselibs.conf: build libsodium23-32bit, which is required by
  zeromq's -32bit packages.</changelog>
</package>
<package pkgid="efda77092c37c236aefd100eda4c89684c2d60e09848c37e2e28972a5f2dcd5a" name="libsoftokn3" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="27162d1989e3daa24d87eef368469cac4ece5bcc14726528b768a6bc23ecf20c" name="libsoftokn3-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="ce115e7ac96db36147c32b1328a3ec1728f5c2bb994680613b9849026c0d3626" name="libsolv" arch="src">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="4901822e87e7eebf3bb94071802820784e2172340a9b38cff55a3f1466527249" name="libsolv-demo" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="c924a675af85b79ab3716625c1985e3c63212caffbcb0d1529195953a556af30" name="libsolv-devel" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="07daa3e9b749d2b9c897cb3e99efd0f056ab6508b047bdefb7b6fe16679efeb0" name="libsolv-tools" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="e6d7c9e60d4d028835974e3a1acb7554382d7fe1f4e7922db4bd829787e7f407" name="libspice-client-glib-2_0-8" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="8de97bc0c5fb18a84ce6bf0e61a3e5e415de9dd8c5ba97c89122c95cb0d63009" name="libspice-client-glib-helper" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="9a51dc407f176c629b58760caef0704a6297a3975ead3e0a38e153938d9cbf1e" name="libspice-client-gtk-3_0-5" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="ae767fab7acb5eac3f286f59c260c157658425e70a87466edd0151e77c7c6088" name="libspice-controller0" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="78ce988c8e675c20f362da5f88b39919c5d31e45f573a650e35faae56350301b" name="libspice-server-devel" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.12.2:
  + Skipped 0.12.1, it existed in git but was never released.
  + spice-server now requires glib2 (like qemu does).
  + More robust ssl error and certificate handling.
  + Added support for websockets.
  + Tons of seamless migration bugfixes.
  + Also some none seamless migration bugfixes.
- Clean spec file using spec-cleaner.
- Rebase spice-glibc217.patch.
- Add pkgconfig(glib-2.0) BuildRequires: new dependency.
- Pass --enable-client and --enable-smartcard to configure in
  order to ensure the client and smartcard support are built (SC
  only on openSUSE &gt;= 12.2).</changelog>
  <changelog author="aevseev@gmail.com" date="1375099200">- Update to version 0.12.4:
  + log actual address spice-server binds to
  + main_channel: fix double release of migration target data (rhbz#859027)
  + red_channel: replace an assert upon threads mismatch with a warning (rhbz#823472)
  + support for filtering out agent file-xfer msgs (rhbz#961848)
  ++ new library export spice_server_set_agent_file_xfer
  + mjpeg encoder statistics (mjpeg_encoder_get_stats)
  + improve stream stats readability and ease of parsing
  + fix for stuck display_channel over WAN (jpeg_enabled=true) (rhbz#977998)
  + Use RING_FOREACH_SAFE and other SAFE macros (rhbz#887775)
  + Some server/tests fixes.
- New features from 0.12.3:
  + monitor client bandwidth and latency.
  + dynamically adjust video stream quality based on client bandwidth &amp; latency.
  ++ new SPICE_MSGC_DISPLAY_STREAM_REPORT
  ++ can also set SPICE_BIT_RATE environment variable to override.
  + support arbitrary latency of audio stream wrt video stream:
  ++ new SPICE_MSG_PLAYBACK_LATENCY
  + notify agent on client disconnection
  ++ new VD_AGENT_CLIENT_DISCONNECTED message
  + better support for switching from qxl to vga mode
  ++ new library export spice_qxl_driver_unload
  + multiple monitor support in single channel fixes.
  + stop streams before migration.
  + don't send empty volume messages.
  + Bugs fixed: rhbz#891326, rhbz#958276, rhbz#956345
  + fixes to inputs, chardev, build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 0.12.5:
  + Added Opus support. Celt support will be obsoleted in a future
    release.
  + Addition of webdav channel.
  + Force use of TLS 1.0 or newer for TLS connections.
  + Reference manual.
  + Some optimizations improving CPU use.
  + Various bug fixes for race conditions, memory corruption, which
    could be triggered on client disconnections, migration, and
    cause spice-server to misbehave.
  + Portability fixes.
  + Code cleanups.
  + bsc#848279: fix CVE-2013-4282.
- Add pkconfig(opus) BuildRequires: Needed to build new opus
  support.
- Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch:
  Fix advertised sound playback/recording rates in public headers
  (rh#1129961).
- Drop spice-glibc217.patch: No longer needed.
- Run spec-clean on spec file, remove conditionals for obsolete
  versions of openSUSE, enable parallel build and drop obsolete
  clean section.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Don't allow setting password longer than what the spice protocol
  allows. password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1441627200">- bsc#944460: fix CVE-2015-3247.
  cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1444132800">- Update to version 0.12.6
  + Removed spicec client code, it has been superseded by remote-viewer
    and other spice-gtk based clients
  + Unix socket support
  + LZ4 support
  + Let clients specify their preferred image compression format
  + Allow to record and replay a spice-server session
  + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261
    bsc#944787, bsc#948976
  + spice-protocol submodule has been removed, spice-protocol must
    now be installed when building spice-server
  + Remove write polling in chardevs to reduce wakeups
- Remove upstream merged patches:
  + spice-Don-t-use-48kHz-for-playback-recording-rates.patch
  + password-length-check.patch
  + cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Update to version 0.12.7 (fate#320079)
  + spice-server will now send TCP keepalive probes on the TCP connections it
    uses. This can prevent unwanted idle disconnections if proxies are used
    between the client and the host.
  + Fix important memory usage when the webdav channel is used
  + Do not disconnect when the client requests an unsupported compression type
  + Fix a few race conditions
  + Fix display glitch when using XSpice
  + Improve help string for 'replay -s'
  + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port
    configured, USB webcam redirection over a slow link)
  + Fix various compilation warning when building on 32 bit machines
  + Some fixes for big-endian machines, more work is likely to be needed
  + Do not build static libraries by default, this can be reenabled with --enable-static
  + Fix small leak in MJPEG code</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.12.8:
  + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.</changelog>
  <changelog author="msuchanek@suse.com" date="1478779200">- remove ExclusiveArch (boo#1009438)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Obsolete spice-client (bsc#1013916)</changelog>
  <changelog author="astieger@suse.com" date="1482408000">- restrict suppression of obsoletes-not-provided warning to
  spice-client bsc#1013916</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Synchronize with SLES (fate#322402):
  + bnc#894069: disable smartcard support for SLES
  + merge changelog</changelog>
  <changelog author="psimons@suse.com" date="1486036801">- Added patches to fix two security vulnerabilities.
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
    [CVE-2016-9577, bsc#1023078]
  * CVE-2016-9578-remote-dos-via-crafted-message.patch
    [CVE-2016-9578, bsc#1023079]</changelog>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="aeace29d8e4f736490a25d4e250d81bda6606f6d2477588179cfaa8e7113da3e" name="libspice-server1" arch="x86_64">
  <version epoch="0" ver="0.14.0" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.12.2:
  + Skipped 0.12.1, it existed in git but was never released.
  + spice-server now requires glib2 (like qemu does).
  + More robust ssl error and certificate handling.
  + Added support for websockets.
  + Tons of seamless migration bugfixes.
  + Also some none seamless migration bugfixes.
- Clean spec file using spec-cleaner.
- Rebase spice-glibc217.patch.
- Add pkgconfig(glib-2.0) BuildRequires: new dependency.
- Pass --enable-client and --enable-smartcard to configure in
  order to ensure the client and smartcard support are built (SC
  only on openSUSE &gt;= 12.2).</changelog>
  <changelog author="aevseev@gmail.com" date="1375099200">- Update to version 0.12.4:
  + log actual address spice-server binds to
  + main_channel: fix double release of migration target data (rhbz#859027)
  + red_channel: replace an assert upon threads mismatch with a warning (rhbz#823472)
  + support for filtering out agent file-xfer msgs (rhbz#961848)
  ++ new library export spice_server_set_agent_file_xfer
  + mjpeg encoder statistics (mjpeg_encoder_get_stats)
  + improve stream stats readability and ease of parsing
  + fix for stuck display_channel over WAN (jpeg_enabled=true) (rhbz#977998)
  + Use RING_FOREACH_SAFE and other SAFE macros (rhbz#887775)
  + Some server/tests fixes.
- New features from 0.12.3:
  + monitor client bandwidth and latency.
  + dynamically adjust video stream quality based on client bandwidth &amp; latency.
  ++ new SPICE_MSGC_DISPLAY_STREAM_REPORT
  ++ can also set SPICE_BIT_RATE environment variable to override.
  + support arbitrary latency of audio stream wrt video stream:
  ++ new SPICE_MSG_PLAYBACK_LATENCY
  + notify agent on client disconnection
  ++ new VD_AGENT_CLIENT_DISCONNECTED message
  + better support for switching from qxl to vga mode
  ++ new library export spice_qxl_driver_unload
  + multiple monitor support in single channel fixes.
  + stop streams before migration.
  + don't send empty volume messages.
  + Bugs fixed: rhbz#891326, rhbz#958276, rhbz#956345
  + fixes to inputs, chardev, build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 0.12.5:
  + Added Opus support. Celt support will be obsoleted in a future
    release.
  + Addition of webdav channel.
  + Force use of TLS 1.0 or newer for TLS connections.
  + Reference manual.
  + Some optimizations improving CPU use.
  + Various bug fixes for race conditions, memory corruption, which
    could be triggered on client disconnections, migration, and
    cause spice-server to misbehave.
  + Portability fixes.
  + Code cleanups.
  + bsc#848279: fix CVE-2013-4282.
- Add pkconfig(opus) BuildRequires: Needed to build new opus
  support.
- Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch:
  Fix advertised sound playback/recording rates in public headers
  (rh#1129961).
- Drop spice-glibc217.patch: No longer needed.
- Run spec-clean on spec file, remove conditionals for obsolete
  versions of openSUSE, enable parallel build and drop obsolete
  clean section.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Don't allow setting password longer than what the spice protocol
  allows. password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1441627200">- bsc#944460: fix CVE-2015-3247.
  cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1444132800">- Update to version 0.12.6
  + Removed spicec client code, it has been superseded by remote-viewer
    and other spice-gtk based clients
  + Unix socket support
  + LZ4 support
  + Let clients specify their preferred image compression format
  + Allow to record and replay a spice-server session
  + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261
    bsc#944787, bsc#948976
  + spice-protocol submodule has been removed, spice-protocol must
    now be installed when building spice-server
  + Remove write polling in chardevs to reduce wakeups
- Remove upstream merged patches:
  + spice-Don-t-use-48kHz-for-playback-recording-rates.patch
  + password-length-check.patch
  + cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Update to version 0.12.7 (fate#320079)
  + spice-server will now send TCP keepalive probes on the TCP connections it
    uses. This can prevent unwanted idle disconnections if proxies are used
    between the client and the host.
  + Fix important memory usage when the webdav channel is used
  + Do not disconnect when the client requests an unsupported compression type
  + Fix a few race conditions
  + Fix display glitch when using XSpice
  + Improve help string for 'replay -s'
  + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port
    configured, USB webcam redirection over a slow link)
  + Fix various compilation warning when building on 32 bit machines
  + Some fixes for big-endian machines, more work is likely to be needed
  + Do not build static libraries by default, this can be reenabled with --enable-static
  + Fix small leak in MJPEG code</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.12.8:
  + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.</changelog>
  <changelog author="msuchanek@suse.com" date="1478779200">- remove ExclusiveArch (boo#1009438)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Obsolete spice-client (bsc#1013916)</changelog>
  <changelog author="astieger@suse.com" date="1482408000">- restrict suppression of obsoletes-not-provided warning to
  spice-client bsc#1013916</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Synchronize with SLES (fate#322402):
  + bnc#894069: disable smartcard support for SLES
  + merge changelog</changelog>
  <changelog author="psimons@suse.com" date="1486036801">- Added patches to fix two security vulnerabilities.
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
    [CVE-2016-9577, bsc#1023078]
  * CVE-2016-9578-remote-dos-via-crafted-message.patch
    [CVE-2016-9578, bsc#1023079]</changelog>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="12ed8bac029699425de6eba005bf8346a1b9cee5c93e2eeac8af799ddeb2e339" name="libssl45" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="f4196a995352c354a84e887352aadfc7ba0c3ba3ac3cefac1369bdc9a9064756" name="libssl45-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="712fb8b9aa107d4126f70b8f823b5b318048e7c56744e67c7cd12561ce578086" name="libsss_certmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="f927897699fc360a04e095dd155f386142ff7318404b29882e94695d012ab8aa" name="libsss_certmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="b492e5c51a75b6301bf2b0781a783dd8409fe8bbb78408587a80c0adde08e27d" name="libsss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="d55d1fafa4abea85668abeaedba3dde3fb123a09a4da5dc474778e8f7acb8026" name="libsss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="f07b23395df1869bcd727138c4a7c8062aed8ac54a06bcdd8e53cf718150aed3" name="libsss_nss_idmap-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="23f814e47f378a4f651735a8c43daa09d7f04fd0527cf5288e4740318d33d358" name="libsss_nss_idmap0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="34f81184dbd77decb62cd2962cc15b45e18eb409a8b8f7bad44ed84e3ec63883" name="libsss_simpleifp-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="ab6512087a93abb63d7c2033b4038fef22ecd5e38537b935de3e8be8996fb851" name="libsss_simpleifp0" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="d82c509b6b2fcfa46bcdf993b4c5f2246d521609d0cf052bd80248eb0d865576" name="libstorage-ng" arch="src">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="ac11dacf227dcda387fcd04c78ce6dbfa79ac70649f5bb4e8f46c110e679658e" name="libstorage-ng" arch="src">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="663dd63ac7442a7e39cb80b6416a17d02c276cf14c7312875d171c0415bc21ad" name="libstorage-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="03e4187d358b328150ddebd2378203077cee99ee146d6aa338ac1feb215f973d" name="libstorage-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="0740108f9d7dc8818d5c00b09045a44776db67926fc01fcc51ed2149e14f6bc7" name="libstorage-ng-integration-tests" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="945686b961cc98c475c201caa92dae22a0bcffa17b1dbc279decb19770375a4e" name="libstorage-ng-integration-tests" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="39e4618e2555c294ed604db46404bbaaca3ef7b77097ce1b7d978ac42db11d9a" name="libstorage-ng-lang" arch="noarch">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="524de9a53b546dc600b85bfb2b183e4f8aadb0a9b34aa1892fcd9e70e5259d65" name="libstorage-ng-lang" arch="noarch">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="d5cb7a70632a252aae83a3efb8a07fbfbf27d877ee93d7bd0425023338ea52df" name="libstorage-ng-python3" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="a5f09a731c867b8e7e6086a1d2d7b93d740d21a341464298f9df3ea86d69aec4" name="libstorage-ng-python3" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="cbe7159200eae77e64f97290739d4157857cbfd44ca40d1df4ead6b70a8d23ac" name="libstorage-ng-ruby" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="8a61c70a4e6beb66de1367f4e4b76f7864597211db3c66802c47d3de2070eebd" name="libstorage-ng-ruby" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="e1c4f62ea9e16828c5b9b72cbf01e6ba82caed974b58574f392588dd7a7cbf65" name="libstorage-ng-utils" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="a06d40b0e12afb5b49bb592e49a111ee2234e19d06704bd542852bade58327fd" name="libstorage-ng-utils" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="9cda7debbaf434c4768ed274ffd8ca1e26e8cafaea913ccea2ee91424ad36d40" name="libstorage-ng1" arch="x86_64">
  <version epoch="0" ver="3.3.300" rel="lp150.2.3.2"/>
  <changelog author="freek@opensuse.org" date="1526558400">- Translated using Weblate (Dutch)
- 3.3.281</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1526558401">- Translated using Weblate (Czech)
- 3.3.282</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558402">- Translated using Weblate (Italian)
- 3.3.283</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558403">- Translated using Weblate (French)
- 3.3.284</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526558404">- Translated using Weblate (Portuguese (Brazil))
- 3.3.285</changelog>
  <changelog author="aschnell@suse.de" date="1526644800">- merge gh#openSUSE/libstorage-ng#529
- fix probing of certain nvme systems (bsc#1093684)
- 3.3.286</changelog>
  <changelog author="jlopez@suse.com" date="1526644801">- merge gh#openSUSE/libstorage-ng#530
- Add conflict with old libdmraid (bsc#1088570)
- 3.3.287</changelog>
  <changelog author="aschnell@suse.de" date="1526644802">- merge gh#openSUSE/libstorage-ng#531
- added helper functions
- place repair action before partition actions
- insert action to repair GPTs if needed (bsc#1092193)
- added unit test
- 3.3.288</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817600">- Translated using Weblate (Chinese (Taiwan))
- 3.3.289</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526817601">- Translated using Weblate (Chinese (Taiwan))
- 3.3.290</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1526990400">- Translated using Weblate (Spanish)
- 3.3.291</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527076800">- Translated using Weblate (Slovak)
- 3.3.292</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527163200">- Translated using Weblate (Slovak)
- 3.3.293</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527249600">- Translated using Weblate (Russian)
- 3.3.294</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1527854400">- Translated using Weblate (Italian)
- 3.3.295</changelog>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#532
- improved error handling during probing partitions (see
  bsc#1095168)
- 3.3.296</changelog>
  <changelog author="aschnell@suse.de" date="1528113601">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113602">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113603">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113604">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
</package>
<package pkgid="9ae9fe1062c7434659cdc4632567d5fc63a56e3b82b4484d37dc4376034b0bdb" name="libstorage-ng1" arch="x86_64">
  <version epoch="0" ver="3.3.312" rel="lp150.2.6.1"/>
  <changelog author="aschnell@suse.de" date="1528113600">- merge gh#openSUSE/libstorage-ng#533
- merged po files
- 3.3.297</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113601">- Translated using Weblate (Japanese)
- 3.3.298</changelog>
  <changelog author="aschnell@suse.de" date="1528113602">- merge gh#openSUSE/libstorage-ng#534
- handle exception (see bsc#1073633)
- 3.3.299</changelog>
  <changelog author="freek@opensuse.org" date="1528113603">- Translated using Weblate (Dutch)
- 3.3.300</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113604">- Translated using Weblate (Catalan)
- 3.3.301</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113605">- Translated using Weblate (Italian)
- 3.3.302</changelog>
  <changelog author="Vojtech.Zeisek@opensuse.org" date="1528113606">- Translated using Weblate (Czech)
- 3.3.303</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113607">- Translated using Weblate (Slovak)
- 3.3.304</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113608">- Translated using Weblate (Spanish)</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528113609">- Translated using Weblate (Portuguese (Brazil))</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- merge gh#openSUSE/libstorage-ng#535
- Return better exception (related to bsc#1094963)
- Fix project name</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372801">- Translated using Weblate (Chinese (Taiwan))</changelog>
  <changelog author="ancor@suse.de" date="1528372802">- merge gh#openSUSE/libstorage-ng#536
- Expose Device#devicegraph (needed for bsc#1094157)
- Encryption#set_dm_table_name adjusts #name (for bsc#1094157 and
  bsc#1094963)
- Code improvement from code review
- More code improvements from code review
- 3.3.305</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372803">- Translated using Weblate (French)
- 3.3.306</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528372804">- Translated using Weblate (Russian)
- 3.3.307</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1528804800">- Translated using Weblate (Indonesian)
- 3.3.308</changelog>
  <changelog author="aschnell@suse.de" date="1528804801">- merge gh#openSUSE/libstorage-ng#537
- updated unit test
- extended unit test
- fixed exception logging
- 3.3.309</changelog>
  <changelog author="jlopez@suse.com" date="1529323200">- merge gh#openSUSE/libstorage-ng#538
- Add method BlkDevice#is_active
- 3.3.310</changelog>
  <changelog author="aschnell@suse.de" date="1529496000">- merge gh#openSUSE/libstorage-ng#539
- handle device type attribute of udevadm info output
- removed unused and obsolete file
- do not try to activate LUKS on devices used by multipath (bsc#1089699)
- improved explanation
- 3.3.311</changelog>
  <changelog author="wfeldt@opensuse.org" date="1532347200">- merge gh#openSUSE/libstorage-ng#547
- document package version scheme
- 3.3.312</changelog>
</package>
<package pkgid="2fbbcbef7ce7f3d7b603179f592d98a5c1e42db31d36bc17334effa8bd12523c" name="libswresample2" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="9773ad574cd0f94132ea2840f84f4c7672c624fccf8b313b48611252db149587" name="libswresample2" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="bd0128e416b4879d289a080b9d9d2d3bd44e546f2f0a4cd6e01270d85a24ee23" name="libswresample3" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="7db071d886716a3d356902379ebdcc8e17affb373a80afe4ca61f9494039aea5" name="libswresample3" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="01df34f4f23e84d5164d53544549ead90277eb2344e7441ff3f795719cd611ee" name="libswresample3" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="0fe6279d413ba11c78666a9ee7023668f85fb404bc31db7d850709fcb9d61336" name="libswresample3" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="1a58541845155b5b13088b94cc043bc9672e876658579652d87818e82fa1b61d" name="libswscale4" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.3.1"/>
  <changelog author="jslaby@suse.com" date="1512043200">- install also doc/ffserver.conf</changelog>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
</package>
<package pkgid="9282f57c970c21412bd0d5ed9103a82d32f25d3a2ad58cc91517b8b3742919ef" name="libswscale4" arch="x86_64">
  <version epoch="0" ver="3.4.4" rel="lp150.6.1"/>
  <changelog author="jengelh@inai.de" date="1512129600">- Add 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  [boo#1070762]</changelog>
  <changelog author="jengelh@inai.de" date="1512993600">- Update to new bugfix release 3.4.1
  * Fixed integer overflows, division by zero, illegal bit shifts
  * Fixed the gmc_mmx function which failed to validate width
    and height [boo#1070762, CVE-2017-17081]
  * Fixed out-of-bounds in VC-2 encoder [boo#1069407, CVE-2017-16840]
  * ffplay: use SDL2 audio API
- Removed 0001-avcodec-x86-mpegvideodsp-Fix-signedness-bug-in-need_.patch
  (upstreamed).</changelog>
  <changelog author="jengelh@inai.de" date="1518436800">- Update to new bugfix release 3.4.2
  * Fix integer overflows, multiplication overflows, undefined
    shifts, and verify buffer lengths.
  * avfilter/vf_transpose: Fix used plane count
    [boo#1078488, CVE-2018-6392]
  * avcodec/utvideodec: Fix bytes left check in decode_frame()
    [boo#1079368, CVE-2018-6621]
- Enable use of libzvbi for displaying teletext subtitles.
- Fixed a DoS in swri_audio_convert(), added cve-2017-17555.diff
  [boo#1072366, CVE-2017-17555].</changelog>
  <changelog author="nico.kruber@gmail.com" date="1518523200">- enable video stabilization/deshaking via libvidstab (optional)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1519128000">- Enable mpeg1video and mpeg2video in enable_decoders, and remove
  it from disable-decoders call given to configure, mpeg2 now
  available in openSUSE.</changelog>
  <changelog author="alarrosa@suse.com" date="1521633600">- Build and install also the sidxindex tool</changelog>
  <changelog author="alarrosa@suse.com" date="1521806400">- Create a new package ffmpeg-private-devel which contains some
  headers under /usr/include/ffmpeg/private that were not installed
  by upstream. Those headers are needed by the libav package in order
  to build avconv and other tools using the libav* libraries generated
  by ffmpeg instead of its own. No other package should require
  ffmpeg-private-devel.</changelog>
  <changelog author="jengelh@inai.de" date="1522152000">- Add 0001-opusenc-psy-disable-stereo-searches.patch
  to fix a crash in the Opus encoder when outputting mono.
- Enable FFmpeg Opus encoder as a selectable runtime alternative
  to Xiph libopus.</changelog>
  <changelog author="enzokiel@kabelmail.de" date="1523275200">- Enable build against libzimg.</changelog>
  <changelog author="jengelh@inai.de" date="1524744000">- Add 0001-avformat-img2dec-fix-infinite-loop.patch [boo#1090826]</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Sync with ffmpeg-4</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Split out the develpkgs again
- Use %autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg for Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529755200">- Conditionalize pkgconfig(libopenjpeg) and pkgconfig(sdl2)
  BuildRequires: Fix build for SLE 12 SP3.
- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Enable vidstab on tumbleweed</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize vidstab so it gets working on Leap
- full_build only on Leap 42 and 15, not on TW</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1532260800">- Version update to 3.4.4:
  * avcodec/dvdsub_parser: Allocate input padding
  * avcodec/dvdsub_parser: Init output buf/size
  * avcodec/dirac_dwt_template: Fix signedness regression in interleave()
  * avformat/movenc: Write version 2 of audio atom if channels is not known
  * swresample/arm: rename labels to fix xcode build error
  * avcodec/imgconvert: fix possible null pointer dereference
  * avformat/movenc: Check input sample count
  * avcodec/mjpegdec: Check for odd progressive RGB
  * avformat/movenc: Check that frame_types other than EAC3_FRAME_TYPE_INDEPENDENT have a supported substream id
  * avcodec/vp8_parser: Do not leave data/size uninitialized
  * avformat/mms: Add missing chunksize check
  * avformat/pva: Check for EOF before retrying in read_part_of_packet()
  * avformat/rmdec: Do not pass mime type in rm_read_multi() to ff_rm_read_mdpr_codecdata()
  * avformat/asfdec_o: Check size_bmp more fully
  * avcodec/indeo4: Check for end of bitstream in decode_mb_info()
  * avcodec/shorten: Fix undefined addition in shorten_decode_frame()
  * avcodec/shorten: Fix undefined integer overflow
  * avcodec/jpeg2000dec: Fixes invalid shifts in jpeg2000_decode_packets_po_iteration()
  * avcodec/jpeg2000dec: Check that there are enough bytes for all tiles
  * avformat/movenc: Do not pass AVCodecParameters in avpriv_request_sample
  * avcodec/escape124: Fix spelling errors in comment
  * avcodec/ra144: Fix integer overflow in ff_eval_refl()
  * avcodec/cscd: Check output buffer size for lzo.
  * avcodec/escape124: Check buf_size against num_superblocks
  * avcodec/h264_parser: Reduce needed history for parsing mb index
  * avcodec/magicyuv: Check bits left in flags&amp;1 branch
  * avcodec/mjpegdec: Check for end of bitstream in ljpeg_decode_rgb_scan()
  * avcodec/aacdec_fixed: Fix undefined integer overflow in apply_independent_coupling_fixed()
  * avcodec/dirac_dwt_template: Fix undefined behavior in interleave()
  * avutil/common: Fix undefined behavior in av_clip_uintp2_c()
  * fftools/ffmpeg: Fallback to duration if sample rate is unavailable
  * avformat/mov: Only set pkt-&gt;duration to non negative values
  * avcodec/h264_slice: Fix overflow in recovery_frame computation
  * avcodec/h264_ps: Move MAX_LOG2_MAX_FRAME_NUM to header so it can be used in h264_sei
  * avcodec/h264_mc_template: Only prefetch motion if the list is used.
  * avcodec/xwddec: Use ff_set_dimensions()
  * avcodec/wavpack: Fix overflow in adding tail
  * avcodec/shorten: Fix multiple integer overflows
  * avcodec/shorten: Fix undefined shift in fix_bitshift()
  * avcodec/shorten: Fix a negative left shift in shorten_decode_frame()
  * avcodec/shorten: Sanity check nmeans
  * avcodec/shorten: Check non COMM chunk len before skip in decode_aiff_header()
  * avcodec/mjpegdec: Fix integer overflow in ljpeg_decode_rgb_scan()
  * avcodec/truemotion2: Fix overflow in tm2_apply_deltas()
  * avcodec/opus_silk: Change silk_lsf2lpc() slightly toward silk/NLSF2A.c
  * avcodec/amrwbdec: Fix division by 0 in find_hb_gain()
  * avformat/mov: replace a value error by clipping into valid range in mov_read_stsc()
  * avformat/mov: Break out early if chunk_count is 0 in mov_build_index()
  * avcodec/fic: Avoid some magic numbers related to cursors
  * avcodec/g2meet: ask for sample with overflowing RGB
  * avcodec/aacdec_fixed: use 64bit to avoid overflow in rounding in apply_dependent_coupling_fixed()
  * oavcodec/aacpsdsp_template: Use unsigned for hs0X to prevent undefined behavior
  * avcodec/g723_1dec: Clip bits2 in both directions
  * avcodec/mpeg4videoenc: Use 64 bit for times in mpeg4_encode_gop_header()
  * avcodec/mlpdec: Only change noise_type if the related fields are valid
  * indeo4: Decode all or nothing of a band header.
  * avformat/mov: Only fail for STCO/STSC contradictions if both exist
  * avcodec/dirac_dwt: Fix integer overflow in COMPOSE_DD97iH0 / COMPOSE_DD137iL0
  * avcodec/fic: Check available input space for cursor
  * avcodec/g2meet: Check RGB upper limit
  * avcodec/jpeg2000dec: Fix undefined shift in the jpeg2000_decode_packets_po_iteration() CPRL case
  * avcodec/jpeg2000dec: Skip init for component in CPRL if nothing is to be done
  * avcodec/g2meet: Change order of operations to avoid undefined behavior
  * avcodec/flac_parser: Fix infinite loop
  * avcodec/wavpack: Fix integer overflow in DEC_MED() / INC_MED()
  * avcodec/wavpack: Fix integer overflow in wv_unpack_stereo()
  * avcodec/error_resilience: Fix integer overflow in filter181()
  * avcodec/h263dec: Check slice_ret in mspeg4 slice loop
  * avcodec/elsdec: Fix memleaks
  * avcodec/vc1_block: simplify ac_val computation
  * avcodec/ffv1enc: Check that the crc + version combination is supported
  * lavf/http.c: Free allocated client URLContext in case of error.
  * avcodec/dsicinvideo: Fail if there is only a small fraction of the data available that comprises a full frame
  * avcodec/dsicinvideo: Propagate errors from cin_decode_rle()
  * avcodec/dfa: Check dimension against maximum
  * avcodec/cinepak: Skip empty frames
  * avcodec/cinepak: move some checks prior to frame allocation
  * swresample/arm: remove unintentional relocation.
  * doc/APIchanges: Fix typos in hashes
  * avformat/utils: Check cur_dts in update_initial_timestamps() more
  * avcodec/utils: Enforce minimum width also for VP5/6
  * avcodec/truemotion2: Propagate out of bounds error from GET_TOK()
  * avformat/utils: Fix integer overflow in end time calculation in update_stream_timings()
  * avcodec/mjpegdec: Check input buffer size.
  * avcodec/h264_slice: Fix integer overflow with last_poc
  * avformat/mov: Fix extradata memleak
  * lavc/libopusdec: Allow avcodec_open2 to call .close
  * avcodec/movtextdec: Check style_start/end
  * avcodec/aacsbr_fixed: Fix integer overflow in sbr_hf_assemble()
  * libavcodec/rv34: error out earlier on missing references
  * swresample/swresample: Fix for seg fault in swr_convert_internal() -&gt; sum2_float during dithering.
  * avcodec/aacdec_fixed: Fix integer overflow in apply_independent_coupling_fixed()
  * avcodec/cscd: Error out when LZ* decompression fails
  * avcodec/imgconvert: Fix loss mask bug in avcodec_find_best_pix_fmt_of_list()
  * avfilter/vf_signature: use av_strlcpy()
  * avcodec/utvideodec: Set pro flag based on fourcc
  * avcodec/wmalosslessdec: Fix null pointer dereference in decode_frame()
  * avcodec/tableprint_vlc: Fix build failure with --enable-hardcoded-tables
  * avformat/mov: Move +1 in check to avoid hypothetical overflow in add_ctts_entry()
  * avcodec/get_bits: Make sure the input bitstream with padding can be addressed
  * avformat/mov: Check STSC and remove invalid entries
  * avcodec/nuv: rtjpeg with dimensions less than 16 would result in no decoded pixels thus reject it
  * avcodec/nuv: Check for minimum input size for uncomprssed and rtjpeg
  * avcodec/wmalosslessdec: Reset num_saved_bits on error path
  * avformat/mov: Fix integer overflows related to sample_duration
  * avformat/img2dec: fix infinite loop
  * avformat/oggparsedaala: Do not adjust AV_NOPTS_VALUE
  * avformat/oggparseogm: Check lb against psize
  * avformat/oggparseogm: Fix undefined shift in ogm_packet()
  * avformat/avidec: Fix integer overflow in cum_len check
  * avformat/oggparsetheora: Do not adjust AV_NOPTS_VALUE
  * avformat/utils: Fix integer overflow of fps_first/last_dts
  * avformat/oggdec: Fix metadata memleak on multiple headers
  * libavformat/oggparsevorbis: Fix memleak on multiple headers
  * avformat/mov: Fix integer overflow in mov_get_stsc_samples()
  * avcodec/truemotion2rt: Check input buffer size
  * avcodec/g2meet: Check tile dimensions with av_image_check_size2()
  * avcodec/exr: fix invalid shift in unpack_14()
  * avcodec/bintext: sanity check dimensions
  * avcodec/utvideodec: Check subsample factors
  * avcodec/smc: Check input packet size
  * avcodec/cavsdec: Check alpha/beta offset
  * avcodec/diracdec: Fix integer overflow in mv computation
  * avcodec/h264_parse: Clear invalid chroma weights in ff_h264_pred_weight_table()
  * avcodec/aacdec_templat: Fix integer overflow in apply_ltp()
  * avcodec/jpeg2000dwt: Fix integer overflows in sr_1d53()
  * avcodec/diracdec: Use int64 in global mv to prevent overflow
  * avcodec/dxtory: Remove code that corrupts dimensions
  * avcodec/dirac_dwt_template: Fix Integer overflow in horizontal_compose_dd137i()
  * avcodec/hevcdec: Check luma/chroma_log2_weight_denom
  * avcodec/jpeg2000dec: Use av_image_check_size2()
  * avcodec/vp8: Check for bitstream end before vp7_fade_frame()
  * avcodec/exr: Check remaining bits in last get code loop
  * avutil/common: Fix integer overflow in av_clip_uint8_c() and av_clip_uint16_c()
  * avcodec/h264_cabac: Tighten allowed coeff_abs range
  * avcodec/h264_cavlc: Set valid qscale value in ff_h264_decode_mb_cavlc()
  * avdevice/iec61883: free the private context at the end
  * avdevice/iec61883: return reference counted packets
  * configure: add nvcc to CMDLINE_SET
  * avcodec/mpeg4_unpack_bframes: make sure the packet is writable when data needs to be changed
  * avcodec/mp3_header_decompress: don't free the user provided packet on error
  * avcodec/extract_extradata: zero initalize the padding bytes in all allocated buffers
  * avformat/hvcc: zero initialize the nal buffers past the last written byte
  * swresample/rematrix: fix update of channel matrix if input or output layout is undefined
  * avformat/matroskadec: ignore CodecPrivate if the stream is VP9
- drop patch merged upstream:
  * 0001-avformat-img2dec-fix-infinite-loop.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="e1e276cce1c0a74912162067b310b65a2505bc7691c9d92a6f4e413298c6a1b1" name="libswscale5" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.10.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
</package>
<package pkgid="3da38eb980cfbe0d506a244cde31e4c5eacf73df0531cf294720e7a646fad822" name="libswscale5" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.2"/>
  <changelog author="jengelh@inai.de" date="1527508800">- Avoid double-nesting BUILD_ORIG with %withs.
  (Reintroduces with_opencore)</changelog>
  <changelog author="9+suse@cirno.systems" date="1527940800">- Reintroduce conditional libxvid support since FFmpeg?s
  MPEG4-ASP encoder is not quite up to par</changelog>
  <changelog author="tchvatal@suse.com" date="1528891200">- Move license markings to the libs itself
- Add condition to switch between full build and lib only one
- Add provides/obsoletes on the ffmpeg private headers</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Conflict with other ffmpeg-devel packages, simply always pull
  one of them</changelog>
  <changelog author="tchvatal@suse.com" date="1528891202">- Fix setup call to enter to proper folder</changelog>
  <changelog author="tchvatal@suse.com" date="1528891203">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891204">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
</package>
<package pkgid="69941ad3139b342639fcb885c1cb52d899a24d3fbb8a8ee00fcf668d03a47852" name="libswscale5" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.7.1"/>
  <changelog author="tchvatal@suse.com" date="1528891200">- Prefix all the devel packages and conflict between releases
  * Provide always the %version-%release of the respective build</changelog>
  <changelog author="tchvatal@suse.com" date="1528891201">- Provide ffmpeg symbol without version on main package too</changelog>
  <changelog author="tchvatal@suse.com" date="1528977600">- Use autopatch</changelog>
  <changelog author="tchvatal@suse.com" date="1528977601">- Conditionalize zimg to build on Leap 42.3</changelog>
  <changelog author="tchvatal@suse.com" date="1528977602">- Conditionalize mysofa build to be resolvable on Leap 15</changelog>
  <changelog author="tchvatal@suse.com" date="1528977603">- Conditionalize openmpt build to be resolvable on Leap 42.3</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1529323200">- Enable pkgconfig(vidstab) BuildRequires unconditionally, now
  available in openSUSE.</changelog>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
</package>
<package pkgid="85d7c9fecd47c82f8c83815950c1c7e1dc36ff89d285f9d48fd3f6c494710082" name="libswscale5" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.13.1"/>
  <changelog author="jengelh@inai.de" date="1530100800">- Update to new upstream release 4.0.1
  * Fixed some integer overflows, undefined shifts, negative
    shifts, division by 0, and a null pointer deref.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273600">- Enable libxml2 (used by MPEG DASH demuxer)</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1530273601">- Add pkgconfig(srt) BuildRequires and pass --enable-libsrt to
  configure, enable srt support.
- Refresh patches with quilt:
  * cve-2017-17555.diff
  * ffmpeg-codec-choice.diff
  * ffmpeg-libcdio_cdda-pkgconfig.patch
  * ffmpeg-new-coder-errors.diff</changelog>
  <changelog author="9+suse@cirno.systems" date="1530273602">- Enable ffnvcodec when building with NVIDIA support</changelog>
  <changelog author="tchvatal@suse.com" date="1530360000">- Conditionalize the vidstab build to not pull it on old releases
- Conditionalize srt support to not pull it on older releases
  - ------------------------------------------------------------------</changelog>
  <changelog author="tchvatal@suse.com" date="1530619200">- Add macros to allow conflicting with all other devel projects
  to ensure we always install only one specific ffmpeg</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Conditionalize full build to be primary only on Leap15+</changelog>
  <changelog author="tchvatal@suse.com" date="1530878400">- Fix typo in swresample name</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Add new bconds to build on SLE12 backports project without
  requiring extra packages:
  * %bcond_without codec2
  * %bcond_without bs2b
  * %bcond_without lv2
  * %bcond_without rubberband
  * %bcond_without soxr
  * %bcond_without zmq</changelog>
  <changelog author="tchvatal@suse.com" date="1532520000">- Do not condition nvidia based on BUILD_ORIG all the support is in
  TW only and not on different instances as such safeguard it with
  version check only bsc#1102532</changelog>
  <changelog author="tchvatal@suse.com" date="1532606400">- Redo the nvidia condition based on review feeback</changelog>
  <changelog author="jengelh@inai.de" date="1532692800">- Enable "kmsgrab" input device</changelog>
  <changelog author="tchvatal@suse.com" date="1532692801">- Reduce the optional conditional for the SLE12 backports to
  cover everything, most of the packages in old codestreams were
  not really ready as they need additional baselibs/etc.
  * Since these are new features user will simply wait or use TW</changelog>
  <changelog author="tchvatal@suse.com" date="1533038400">- bsc#1103064 attempt to allow migration from the unprefixed devel
  packages cleanly</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533470400">- Add conditional pkgconfig(aom) BuildRequires and pass
  - -enable-libaom to configure as well as add libaom and libaom_av1
  to enable_decoders and enable_encoders: Build AOMedia Video 1
  (AV1) support.</changelog>
  <changelog author="davejplater@gmail.com" date="1533556800">- Enable mpeg 1 and 2 encoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Build codec2 encoder and decoder, add libcodec2 to
  enable_decoders and enable_encoders.</changelog>
  <changelog author="carmen@carmenbianca.eu" date="1533988800">- bsc#1092241 Enable webvtt encoders and decoders.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 4.0.2:
  * CVE-2018-13300: out of array read (boo#1100348, CVE-2018-13300)
  * Various bugfixes and a revert</changelog>
  <changelog author="jengelh@inai.de" date="1535112000">- Add 0001-avformat-flvenc-Check-audio-packet-size.patch
  [CVE-2018-15822, boo#1105869]</changelog>
</package>
<package pkgid="55a08f93626072acbddda73d7f577fbcf8b7005b01edca4836a356e1d1456737" name="libsynctex1" arch="x86_64">
  <version epoch="0" ver="1.18" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d52125e02b0e61d94dafb03b01530687fc1fb3b93a8dedd335be54671765d9a6" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="63a6abf78e9c318ac06c6ef9301ac611881fc73cb07c48539c11173d7070f815" name="libsystemd0" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="e65297bf6e11013dd257132bf21689ad37f302355ebae7182eae0a277450b2fe" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="4cc9591159e17157310d1f11d74670c490b007a49a116941e1c6e60fcb5a6438" name="libsystemd0-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="7c045ccd651be82ba9670980ef92db727a33c04471b73aa0ecee11332b575642" name="libsystemd0-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="771ea621e1b253358e156f3176ad66ea545e80fbcaff8de985e5961c6612b1a7" name="libsystemd0-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="88f5e15fa043527891833818ad810670eabb2237234badf27a873b01f4218fbf" name="libtag-devel" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="dbdc2361f234429f74b4cfbf3662e2fe32bd93993111cdd3413f1240c169d5b3" name="libtag1" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="f22506a5c87af745f0cd8b4729a4e8b4ce04b38048f4893a6121168e4c094d22" name="libtag1-32bit" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="2cc178643bf5ecd1c78582b25acb882918759c1fd8d57e66580a0bbda4a963af" name="libtag_c0" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="183fa0b94c850b4cdb5e2781ceab7d8f8e02e5afa48f21be34f2918462a89c95" name="libtag_c0-32bit" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="238b286a5193c3ea409dd7a2438e7186cc163e9893ab93c958893fc3d9cd851e" name="libtalloc-devel" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="6fe8e2baf12551c8822a398e659130e02a2d7e27e0bdbbbc1f2f32526b15b3c8" name="libtalloc2" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="ee3e6e4bd6a5b049483e308414b3d46df3f58b8309962531bbf1fd62482e31c0" name="libtalloc2-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="e8720af6f9c6d15704f49b9cf05deec9e8207bce8dea8565d05b4cc795ae00d8" name="libtevent-devel" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="e09eff2ce5c8882c87e921fb06e149d1c781680fc9f6d20278a2780c7063f6dc" name="libtevent-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="39f86a7451ae98460aa344eb5065d57e27b416452dfa84b4bec76517f5fdcfec" name="libtevent-util-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="87395db4f998067157286f4f8399e885e4f765fa1a75c0dda9d9df4b8eb14043" name="libtevent-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="626f7b03cb8ca48769461f0a0c133074b932657eb5a62f325e349388108f242a" name="libtevent-util0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="d1aa20bf56b3ce4ab37e965b77d32a58d0cd43dc7cf5aeb827eca04efeb5a45f" name="libtevent-util0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="46f91824d3dd252d98d08db4e82bf233736cb5c26817ed6d93beac6032d0c3bf" name="libtevent-util0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="e9f16d25350cb274e0ed1c4358bc064e198e92f8e5a086ea9e1f32be2668f704" name="libtevent0" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="fbc4265663fd60ede604fd658b04319126aff5020b96b9e4fbffa495a008c293" name="libtevent0-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="4649a6cc5387bddd303c3833dacf967a018237fedafdb2e9ad310475376cfff1" name="libtexlua52-5" arch="x86_64">
  <version epoch="0" ver="5.2.4" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="43a8a43a39eca95a8df84f59622a08491fe83815a8bd90e569cdc7e3c652d793" name="libtexluajit2" arch="x86_64">
  <version epoch="0" ver="2.1.0beta2" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="6aafde7653d90ba310acb99e5d2f85b2611689cc6ed82c68880a18ff5a495634" name="libtiff-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="e6429c9a51d7f6c7334881f29e8beb5797f0be8abef501848370c5e10a844c4d" name="libtiff-devel" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="8fadc384a2079208df21bac651d3964cbf5bf7b1bcab5f1291bd04acb9b4b157" name="libtiff5-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="7bde6da53c6b1e266b16a93a32533b47168a42584d74b7e5ef9e0d121a177d58" name="libtiff5" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="e6d01f4d6e92b7341e777b43abd2f78903b56d8f1a216b5fc48d5fa9e78eb517" name="libtirpc" arch="src">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="a5494cb8347181a569a6ff1935be864f867f474742ec203207f94b41979d7717" name="libtirpc-devel" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="4c0eaa5e031b83efeb317b077ee581da94becd85eb693819f7a1e8acdd9d5b81" name="libtirpc-netconfig" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="ba26eba6ba95e274b865cbe6276ae8014a64df7256a3050210220d13e0590101" name="libtirpc3" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="721d35549e699190e04d19f750a216456a109ee1c8d216bf4b7621992056a148" name="libtirpc3-32bit" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp150.2.3.1"/>
  <changelog author="kukuk@suse.com" date="1435320000">- Add 009-authdes_pk_create.patch (missing SunRPC compat function)</changelog>
  <changelog author="kukuk@suse.com" date="1435406400">- Add 010-xdr_sizeof.patch (enable xdr_sizeof)</changelog>
  <changelog author="kukuk@suse.de" date="1435838400">- Update 009-authdes_pk_create.patch (fix syncaddr handling)
- Add 011-authdes_create.patch (fix syncaddr handling)</changelog>
  <changelog author="kukuk@suse.de" date="1436443200">- Add 012-xp_sock.patch: add sunrpc compatibility define</changelog>
  <changelog author="kukuk@suse.de" date="1436529600">- Add 099-poll.patch: change svc_run from select() to poll().</changelog>
  <changelog author="kukuk@suse.de" date="1437048000">- Update 099-poll.patch with newest version send upstream.</changelog>
  <changelog author="okir@suse.com" date="1437652800">- Fix public xdr.h header - xdr_rpcvers() were broken (bsc#902439)
  Added: libtirpc-xdr-header.patch</changelog>
  <changelog author="kukuk@suse.de" date="1447761600">- Update to libtirpc-1.0.1
  - new major soname
  - Adjust auth code to match other RPC implementations
  - Implement more gss auth stuff
  - use poll() instead of select() in svc_run()
  - Add more sunrpc compat functions
  - Sync compat headers with real functions
- Drop 005-missing-symvers.patch (upstream)
- Drop 006-memleak1.patch (upstream)
- Drop 007-memleak2.patch (upstream)
- Drop 008-fix-undef-ref.patch (upstream)
- Drop 009-authdes_pk_create.patch (upstream)
- Drop 010-xdr_sizeof.patch (upstream)
- Drop 011-authdes_create.patch (upstream)
- Drop 012-xp_sock.patch (upstream)
- Drop 099-poll.patch (upstream)
- Drop libtirpc-xdr-header.patch (was backport)
- Add 005-libtirpc-1.0.2-rc1.patch (fixes deadlock)</changelog>
  <changelog author="kukuk@suse.de" date="1453291200">- Split the netconfig configuration file and manual page off into
  an own RPM. Else it is not possible to install the old and new
  libtirpc libraries in parallel.</changelog>
  <changelog author="kukuk@suse.de" date="1453377600">- Remove 004-netconfig-prefer-IPv6.patch for SLES12.
- Remove libtirpc-getnetconfig-races.patch (was backport).
  [FATE#320393]</changelog>
  <changelog author="kukuk@suse.de" date="1456401600">- Add the following patches to fix some bugs from the poll()
  port and an endless loop:
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch</changelog>
  <changelog author="kukuk@suse.de" date="1457956800">- Add 011-Fix-typo-in-src-libtirpc.map-which-prevents-that-key.patch
  (fix export of key_secretkey_is_set)</changelog>
  <changelog author="kukuk@suse.de" date="1457956801">- Add some patches to get libtirpc compiled without needing glibc
  deprecated functions:
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch
- Add 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch
  to allow bootstrapping of libtirpc without glibc sunrpc code or
  libnsl NIS+ code.</changelog>
  <changelog author="schwab@suse.de" date="1499256000">- decls.patch: fix missing declarations
- explicit_bzero.patch: use explicit_bzero if available</changelog>
  <changelog author="jengelh@inai.de" date="1506772800">- Rectify RPM groups and summaries,
  and update old macro/variable constructs.</changelog>
  <changelog author="kukuk@suse.de" date="1510574400">- 003-rpc-types.patch: Add some typedefs to rpc/types.h to allow
  applications be compiled with -std=iso9899:1990</changelog>
  <changelog author="kukuk@suse.de" date="1510574401">- Update to version 1.0.2
  - 002-old-automake.patch: not needed anymore
  - 005-libtirpc-1.0.2-rc1.patch: dropped
  - 006-Remove-old-meanwhile-wrong-comment-about-FD_SETSIZE-.patch:
    removed, merged upstream
  - 007-Change-rtime-function-to-use-poll-instead-of-select.patch:
    removed, merged upstream
  - 008-Add-parameters-to-local-prototypes-to-fix-compiler-w.patch:
    removed, merged upstream
  - 009-makefd_xprt-checks-that-the-filedesriptor-is-lower-t.patch:
    removed, merged upstream
  - 010-The-goto-again-statement-was-an-left-over-from-the-p.patch:
    removed, merged upstream
  - 012-libtirpc-needs-rpcsvc-nis.h-for-compiling-but-does-n.patch:
    removed, merged upstream
  - 013-If-we-don-t-compile-in-YP-support-don-t-include-YP-h.patch:
    removed, merged upstream
  - 014-Add-des_crypt.c-and-des_impl.c-to-become-independent.patch:
    removed, merged upstream
  - 015-Fix-includes-to-compile-without-deprecated-glibc-fun.patch:
    removed, merged upstream
  - patch6_7.diff: obsolete
  - Replace explicit_bzero.patch with
    004-replace-bzero-with-memset.patch from git
  - Rename libtirpc-new-path-rpcbindsock.patch to
    001-new-rpcbindsock-path.patch</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- 005-missing-includes.patch: add missing includes to make headers
  compatible to sunrpc.</changelog>
  <changelog author="kukuk@suse.de" date="1511784000">- Add COPYING.GPLv2 and install Licenses for GPLv2 code.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529928000">- rpcinfo: send RPC getport call as specified via parameter (bsc#1072183)
  - Add upstream patches:
    0003-rpcb_clnt.c-pass-the-version-argument-to-__try_proto.patch
    0002-Fix-regression-introduced-by-change-rpc-version-orde.patch
    0001-rpcinfo-change-order-of-version-to-be-tried-to-4-3-2.patch</changelog>
</package>
<package pkgid="0edfc0bc4cda0bb26e715b77efd8fee0e749a99f2b59bc529a7face239184ddf" name="libtls17" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="9e1fa472a472b366c7a8e62f6232ee4564853a8d8acaad5c62c99daa4aa846f5" name="libtls17-32bit" arch="x86_64">
  <version epoch="0" ver="2.8.0" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1465560000">- Update to new upstream release 2.4.1
  * Correct a problem that prevents the DSA signing algorithm from
  running in constant time even if the flag BN_FLG_CONSTTIME is
  set.</changelog>
  <changelog author="jengelh@inai.de" date="1470225600">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.</changelog>
  <changelog author="jengelh@inai.de" date="1470225601">- Update to new upstream release 2.4.2
  * Ensured OSCP only uses and compares GENERALIZEDTIME values as
  per RFC6960. Also added fixes for OCSP to work with
  intermediate certificates provided in responses.
  * Fixed incorrect results from BN_mod_word() when the modulus is
  too large.
  * Correctly handle an EOF prior to completing the TLS handshake
  in libtls.
  * Removed flags for disabling constant-time operations. This
  removes support for DSA_FLAG_NO_EXP_CONSTTIME,
  DH_FLAG_NO_EXP_CONSTTIME, and RSA_FLAG_NO_CONSTTIME flags,
  making all of these operations unconditionally constant-time.</changelog>
  <changelog author="jengelh@inai.de" date="1475150400">- Update to new upstream release 2.5.0
  * libtls now supports ALPN and SNI
  * libtls adds a new callback interface for integrating custom IO
  functions.
  * libtls now handles 4 cipher suite groups: "secure"
  (TLSv1.2+AEAD+PFS), "compat" (HIGH:!aNULL), "legacy"
  (HIGH:MEDIUM:!aNULL), "insecure" (ALL:!aNULL:!eNULL). This
  allows for flexibility and finer grained control, rather than
  having two extremes.
  * libtls now always loads CA, key and certificate files at the
  time the configuration function is called.
  * Add support for OCSP intermediate certificates.
  * Added functions used by stunnel and exim from BoringSSL - this
  brings in X509_check_host, X509_check_email, X509_check_ip, and
  X509_check_ip_asc.
  * Improved behavior of arc4random on Windows when using memory
  leak analysis software.
  * Correctly handle an EOF that occurs prior to the TLS handshake
  completing.
  * Limit the support of the "backward compatible" ssl2 handshake
  to only be used if TLS 1.0 is enabled.
  * Fix incorrect results in certain cases on 64-bit systems when
  BN_mod_word() can return incorrect results. BN_mod_word() now
  can return an error condition.
  * Added constant-time updates to address CVE-2016-0702
  * Fixed undefined behavior in BN_GF2m_mod_arr()
  * Removed unused Cryptographic Message Support (CMS)
  * More conversions of long long idioms to time_t
  * Reverted change that cleans up the EVP cipher context in
  EVP_EncryptFinal() and EVP_DecryptFinal(). Some software relies
  on the previous behaviour.
  * Avoid unbounded memory growth in libssl, which can be triggered
  by a TLS client repeatedly renegotiating and sending OCSP
  Status Request TLS extensions.
  * Avoid falling back to a weak digest for (EC)DH when using SNI
  with libssl.</changelog>
  <changelog author="jengelh@inai.de" date="1485172800">- Add ecs.diff [bnc#1019334]</changelog>
  <changelog author="jengelh@inai.de" date="1491998400">- Update to new upstream release 2.5.1
  * Avoid a side-channel cache-timing attack that can leak the ECDSA
    private keys when signing. [bnc#1019334]
  * Detect zero-length encrypted session data early
  * Curve25519 Key Exchange support.
  * Support for alternate chains for certificate verification.
- Update to new upstream release 2.5.2
  * Added EVP interface for MD5+SHA1 hashes
  * Fixed DTLS client failures when the server sends a certificate
    request.
  * Corrected handling of padding when upgrading an SSLv2 challenge
    into an SSLv3/TLS connection.
  * Allowed protocols and ciphers to be set on a TLS config object
    in libtls.
- Update to new upstream release 2.5.3
  * Documentation updates
- Remove ecs.diff (merged)</changelog>
  <changelog author="jengelh@inai.de" date="1493899200">- Update to new upstream release 2.5.4
  * Reverted a previous change that forced consistency between
    return value and error code when specifing a certificate
    verification callback, since this breaks the documented API.
  * Switched Linux getrandom() usage to non-blocking mode,
    continuing to use fallback mechanims if unsuccessful.
  * Fixed a bug caused by the return value being set early to
    signal successful DTLS cookie validation.</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict for split openssl packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494331200">- Add conflict between libressl and the main versioned packages too</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Update to new upstream release 2.5.5
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.</changelog>
  <changelog author="jengelh@inai.de" date="1504267200">- Update to new upstream release 2.6.0
  * Added support for providing CRLs to libtls. Once a CRL is
    provided, we enable CRL checking for the full certificate
    chain.
  * Allow non-compliant clients using IP literal addresses with
    SNI to connect to a server using libtls.
  * Avoid a potential NULL pointer dereference in
    d2i_ECPrivateKey().
  * Added definitions for three OIDs used in EV certificates.
  * Plugged a memory leak in tls_ocsp_free.
  * Added tls_peer_cert_chain_pem, tls_cert_hash, and
    tls_hex_string to libtls, useful in private certificate
    validation callbacks.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Added tls_keypair_clear_key for clearing key material.
  * Removed inconsistent IPv6 handling from
    BIO_get_accept_socket, simplified BIO_get_host_ip and
    BIO_accept.
  * Fixed the openssl(1) ca command so that is generates
    certificates with RFC 5280-conformant time.
  * Added ASN1_TIME_set_tm to set an asn1 from a struct tm *.
  * Added SSL{,_CTX}_set_{min,max}_proto_version() functions.
  * Added HKDF (HMAC Key Derivation Function) from BoringSSL
  * Providea a tls_unload_file() function that frees the memory
    returned from a tls_load_file() call, ensuring that it the
    contents become inaccessible. This is specifically needed on
    platforms where the library allocators may be different from
    the application allocator.
  * Perform reference counting for tls_config. This allows
    tls_config_free() to be called as soon as it has been passed
    to the final tls_configure() call, simplifying lifetime
    tracking for the application.
  * Moved internal state of SSL and other structures to be
    opaque.
  * Dropped cipher suites with DSS authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Update to new upstream release 2.6.2
  * Provide a useful error with libtls if there are no OCSP URLs
    in a peer certificate.
  * Keep track of which keypair is in use by a TLS context,
    fixing a bug where a TLS server with SNI would only return
    the OCSP staple for the default keypair.
- Update to new upstream release 2.6.1
  * Added tls_config_set_ecdhecurves() to libtls, which allows
    the names of the eliptical curves that may be used during
    client and server key exchange to be specified.
  * Removed support for DSS/DSA, since we removed the cipher
    suites a while back.
  * Removed NPN support. NPN was never standardised and the last
    draft expired in October 2012. ALPN was standardised.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS
    termintation.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Implemented the SSL_CTX_set_min_proto_version(3) API.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.</changelog>
  <changelog author="jengelh@inai.de" date="1510056000">- Update to new upstream release 2.6.3
  * Added support for providing CRLs to libtls - once a CRL is
    provided via tls_config_set_crl_file(3) or
    tls_config_set_crl_mem(3), CRL checking is enabled and
    required for the full certificate chain.
  * Reworked TLS certificate name verification code to more
    strictly follow RFC 6125.
  * Relaxed SNI validation to allow non-RFC-compliant clients
    using literal IP addresses with SNI to connect to a
    libtls-based TLS server.
  * Added tls_peer_cert_chain_pem() to libtls, useful in private
    certificate validation callbacks such as those in relayd.
  * Added SSL{,_CTX}_set_{min,max}_proto_version(3) functions.
  * Imported HKDF (HMAC Key Derivation Function) from BoringSSL.
  * Dropped cipher suites using DSS authentication.
  * Removed support for DSS/DSA from libssl.
  * Distinguish between self-issued certificates and self-signed
    certificates. The certificate verification code has special
    cases for self-signed certificates and without this change,
    self-issued certificates (which it seems are common place
    with openvpn/easyrsa) were also being included in this
    category.
  * Removed NPN support - NPN was never standardised and the last
    draft expired in October 2012.
  * Removed SSL_OP_CRYPTOPRO_TLSEXT_BUG workaround for old/broken
    CryptoPro clients.
  * Removed support for the TLS padding extension, which was
    added as a workaround for an old bug in F5's TLS termination.
  * Added ability to clamp notafter values in certificates for
    systems with 32-bit time_t. This is necessary to conform to
    RFC 5280 4.1.2.5.
  * Removed the original (pre-IETF) chacha20-poly1305 cipher
    suites.
  * Reclassified ECDHE-RSA-DES-CBC3-SHA from HIGH to MEDIUM.
- Add des-fcrypt.diff [boo#1065363]</changelog>
  <changelog author="jengelh@inai.de" date="1512388800">- Add extra-symver.diff</changelog>
  <changelog author="jengelh@inai.de" date="1513857600">- Update to new upstream release 2.6.4
  * Make tls_config_parse_protocols() work correctly when passed
    a NULL pointer for a protocol string.
  * Correct TLS extensions handling when no extensions are
    present.</changelog>
  <changelog author="jengelh@inai.de" date="1521806400">- Update to new upstream release 2.7.0
  * Added support for many OpenSSL 1.0.2 and 1.1 APIs.
  * Added support for automatic library initialization in
    libcrypto, libssl, and libtls.
  * Converted more packet handling methods to CBB, which improves
    resiliency when generating TLS messages.
  * Completed TLS extension handling rewrite, improving consistency
    of checks for malformed and duplicate extensions.
  * Rewrote ASN1_TYPE_ get,set _octetstring() using templated
    ASN.1. This removes the last remaining use of the old M_ASN1_
    macros (asn1_mac.h) from API that needs to continue to exist.
  * Added support for client-side session resumption in libtls.
  * A libtls client can specify a session file descriptor (a
    regular file with appropriate ownership and permissions) and
    libtls will manage reading and writing of session data across
    TLS handshakes.
  * Merged more DTLS support into the regular TLS code path.</changelog>
  <changelog author="jengelh@inai.de" date="1522065600">- Update to new upstream release 2.7.1
  * Fixed a bug in int_x509_param_set_hosts, calling strlen() if
    name length provided is 0 to match the OpenSSL behaviour.
    [CVE-2018-8970, boo#1086778]</changelog>
  <changelog author="jengelh@inai.de" date="1522670400">- Update to new upstream release 2.7.2
  * Updated and added extensive new HISTORY sections to
    the API manuals.</changelog>
  <changelog author="jengelh@inai.de" date="1525694400">- Update to new upstream release 2.7.3
  * Removed incorrect NULL checks in DH_set0_key().
  * Limited tls_config_clear_keys() to only clear private keys.</changelog>
  <changelog author="jengelh@inai.de" date="1533729600">- Update to new upstream release 2.8.0
  * Fixed a pair of 20+ year-old bugs in X509_NAME_add_entry.
  * Tighten up checks for various X509_VERIFY_PARAM functions,
    'poisoning' parameters so that an unverified certificate
    cannot be used if it fails verification.
  * Fixed a potential memory leak on failure in ASN1_item_digest.
  * Fixed a potential memory alignment crash in
    asn1_item_combine_free.
  * Removed unused SSL3_FLAGS_DELAY_CLIENT_FINISHED and
    SSL3_FLAGS_POP_BUFFER flags in write path, simplifying IO
    paths.
  * Removed SSL_OP_TLS_ROLLBACK_BUG buggy client workarounds.
  * Added const annotations to many existing APIs from OpenSSL,
    making interoperability easier for downstream applications.
  * Added a missing bounds check in c2i_ASN1_BIT_STRING.
  * Removed three remaining single DES cipher suites.
  * Fixed a potential leak/incorrect return value in DSA
    signature generation.
  * Added a blinding value when generating DSA and ECDSA
    signatures, in order to reduce the possibility of a
    side-channel attack leaking the private key.
  * Added ECC constant time scalar multiplication support.
  * Revised the implementation of RSASSA-PKCS1-v1_5 to match the
    specification in RFC 8017.
  * Changes from 2.7.4:
  * Avoid a timing side-channel leak when generating DSA and ECDSA
    signatures. [CVE-2018-12434, boo#1097779]
  * Reject excessively large primes in DH key generation.</changelog>
</package>
<package pkgid="97fdd7fe162872cb13061f68df7e7de5019d39abd0f131df61e3079d18e3b3e3" name="libtss0" arch="x86_64">
  <version epoch="0" ver="1045" rel="lp150.3.3.1"/>
  <changelog author="msuchanek@suse.com" date="1485518400">- Import v713 (FATE#321601)
- Move to libdir and add wrapper script.
- repack source without makefile-beam which has incompatible
  license and is not used in build anyway</changelog>
  <changelog author="jengelh@inai.de" date="1486555200">- Wrap description and spell out TSS.
- Move package description up before any build recipes,
  this is the more usual layout.
- Drop unusable "return" command; %build already executes with
  sh -e.</changelog>
  <changelog author="meissner@suse.com" date="1488369600">- update to v755 (FATE#321601)
  - This is the version prefered by IBM.</changelog>
  <changelog author="msuchanek@suse.com" date="1488456000">- fix description of -devel package</changelog>
  <changelog author="msuchanek@suse.com" date="1510142400">- Update to upstream version 1045 - works with OpenSSL 1.1 (bsc#1066914)</changelog>
  <changelog author="msuchanek@suse.com" date="1516276800">- Enable test on BE</changelog>
  <changelog author="msuchanek@suse.com" date="1526558400">- Split off library, spec-clean (bsc#1093612)</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Fix RPM groups</changelog>
  <changelog author="msuchanek@suse.com" date="1526990400">- Add post/postun ldconfig call</changelog>
</package>
<package pkgid="e56bcffa57f43e01fdeb951c7a9dae208c182c1c6ce4e216f7a34b924788e20a" name="libu2f-host" arch="src">
  <version epoch="0" ver="1.1.6" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
</package>
<package pkgid="8f922aba4f3439a8052f6fc8f4604ef61238aaa8b5917521b765c640622fa1d6" name="libu2f-host-devel" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
</package>
<package pkgid="ae6c019504b5535f52d11a0bed67fe234bf6673a27418c54c7792006f4abd1b3" name="libu2f-host-doc" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
</package>
<package pkgid="43fa37e0e7aa3068dfc0ce0c26b2d151725ae7ac0a7d08cd737816cc4fb6c67a" name="libu2f-host0" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
</package>
<package pkgid="97c35e5be31851e5185d35fced209d38df1342411ff3c41b8f1818e280687861" name="libu2f-server" arch="src">
  <version epoch="0" ver="1.0.1" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1420545600">- Version 0.0.0 (released 2014-11-25)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- update to Version 1.0.0 (released 2015-07-01)
  - Improved compatibility for other architectures.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437134400">- Version 1.0.1 (released 2015-07-09)
  - General fixes and improvements.
  - Changed pkg-config settings to accommodate changes in OpenSSL.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444305600">- Change license to BSD-2-Clause
- Cleanup .spec file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1530187200">- 0001-valgrind-shows-memory-errors-around-this-code-becaus.patch: fix memory
  corruption resulting in SEGFAULT, SIGBUS or an assertion in users of
  libu2f-server, most prominently in pam_u2f (bnc#1099232)</changelog>
</package>
<package pkgid="a8ce0c51944680790339ba75b8e7c2b43bbb28e0f1fd64bab4a8fb69a14a04e3" name="libu2f-server-devel" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1420545600">- Version 0.0.0 (released 2014-11-25)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- update to Version 1.0.0 (released 2015-07-01)
  - Improved compatibility for other architectures.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437134400">- Version 1.0.1 (released 2015-07-09)
  - General fixes and improvements.
  - Changed pkg-config settings to accommodate changes in OpenSSL.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444305600">- Change license to BSD-2-Clause
- Cleanup .spec file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1530187200">- 0001-valgrind-shows-memory-errors-around-this-code-becaus.patch: fix memory
  corruption resulting in SEGFAULT, SIGBUS or an assertion in users of
  libu2f-server, most prominently in pam_u2f (bnc#1099232)</changelog>
</package>
<package pkgid="e65990dc6b024b9fce74a749c27dc4f6101b0196fbef2e5453ca1c76058d8b92" name="libu2f-server-doc" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1420545600">- Version 0.0.0 (released 2014-11-25)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- update to Version 1.0.0 (released 2015-07-01)
  - Improved compatibility for other architectures.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437134400">- Version 1.0.1 (released 2015-07-09)
  - General fixes and improvements.
  - Changed pkg-config settings to accommodate changes in OpenSSL.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444305600">- Change license to BSD-2-Clause
- Cleanup .spec file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1530187200">- 0001-valgrind-shows-memory-errors-around-this-code-becaus.patch: fix memory
  corruption resulting in SEGFAULT, SIGBUS or an assertion in users of
  libu2f-server, most prominently in pam_u2f (bnc#1099232)</changelog>
</package>
<package pkgid="5cea3f3b95cf2e9c36a9878305ef1b86cc1e23de3a9269da1598f1c777a3dfb9" name="libu2f-server0" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1420545600">- Version 0.0.0 (released 2014-11-25)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- update to Version 1.0.0 (released 2015-07-01)
  - Improved compatibility for other architectures.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437134400">- Version 1.0.1 (released 2015-07-09)
  - General fixes and improvements.
  - Changed pkg-config settings to accommodate changes in OpenSSL.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444305600">- Change license to BSD-2-Clause
- Cleanup .spec file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1530187200">- 0001-valgrind-shows-memory-errors-around-this-code-becaus.patch: fix memory
  corruption resulting in SEGFAULT, SIGBUS or an assertion in users of
  libu2f-server, most prominently in pam_u2f (bnc#1099232)</changelog>
</package>
<package pkgid="6968a5a463f4cb65e34970a6e202e8b0042d086f275ccc71a9453a77e674aab0" name="libudev-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="b5d7b74c1ce964c91721ec85d1ddfec8aec4f6f5eb868742f616aa7f29fba9c6" name="libudev-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="2fddbdc6e3c7765e9111fe9769e64d544b76b0b05161a28f5c76bb3f93344c86" name="libudev-devel-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="a68b7280e6fa7f393a716664d04ec0a5d77ab40f17ad6f0e818e668b8952fcba" name="libudev-devel-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="d8b067f337db8be9279655e23bce7fcca1c2c6c12a8ab296deb8460a7123ebb0" name="libudev-mini-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="5d228f19bd26887ab077f41ce4984e72c4b28c1d226950fb6c5b57ef28d60c28" name="libudev-mini-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="492f7cd3f16a88bdd61176c3268071fbcff2849583cc2b2881af620b876ff5a7" name="libudev-mini1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="dc1daf77ae99f2439cf1226a24df140ccbaf7e206d7266ee3ced13d8432f4563" name="libudev-mini1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="3244817a48692cf85bc3d392e96124acbdeb82775b23feb1582309dc7788df86" name="libudev1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="53d42ebca20feec5f206adfc8375e08d249828487a1d81957d10c9dd848e0850" name="libudev1" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="4eb4f5a5f6a8d302e6cafe8c9175de5ed8b11f0657ac7b2d161be2890a039d83" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="a42f0ce91693b6ea6938907982feca7e971322509b76cc0966fae42f90b7447e" name="libudev1-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="eefa35bbfd00e0457d36e405ce0424684470a511d226bed42a2f93db28ffc6f0" name="libudf0" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="cf809b3066d048e1e2cfbde957716f2753a9d88da86bba028521ccd36f3d03ea" name="libudf0-32bit" arch="x86_64">
  <version epoch="0" ver="0.94" rel="lp150.5.3.1"/>
  <changelog author="sagiben@gmail.com" date="1296388800">- Updated to version 0.82
- Upstream changes :
  * Remove all uses of CDIO_MIN_DRIVER,
  CDIO_MAX_DRIVER, CDIO_MIN_DEVICE_DRIVER or CDIO_MAX_DEVICE_DRIVER.
  * FreeBSD get_media_changed fixes
  * MingGW/Msys compilation issues
  * Add OS/2 driver
  * Cross compilations fixes and uclinix is like GNU/Linux
  * Numerous other bug fixes</changelog>
  <changelog author="dimstar@opensuse.org" date="1297166400">- Rename Shared Object package to libcdio12, conforming the
  libraries name.
- Adjust rpmlintrc to only ignore shared lib names of the -mini
  packages. This avoids missing shlib renames for the 'main'
  package.</changelog>
  <changelog author="coolo@novell.com" date="1300708800">- licenses package is about to die</changelog>
  <changelog author="coolo@suse.com" date="1321185600">- one less _service file for factory</changelog>
  <changelog author="coolo@suse.com" date="1321185601">- add libtool as buildrequire</changelog>
  <changelog author="davejplater@gmail.com" date="1333713600">- Update to libcdio-0.83, removed need for libcdio-mini by adding
  linker library paths to sources in the spec file build section.
- Upstream changes:
  * Add retrieval SCSI sense reply from the most-recent MMC command.
  * Add exclusive read/write access for devices which is used for
  experimental writing/burning. Currently only on GNU/Linux and FreeBSD.
  * MMC bug fixes
  * FreeBSD drive list now shows empty drives.
  * Add ability to retrieve SCSI tuple for a name and/or fake one up for
  programs that wanto to cd-record compatible.
  * Tolerance for OS's without timezone in their struct tm (e.g. Solaris)
  added iso9660_set_{d,l}time_with_timezone
  * Add mmc_get_disk_erasable
  * Update MMC Feature Profile list, DVD Book types
  * Reduce range of seek in paranoia_seek to be int32_t
  * Remove some potential flaws found by Coverty's static analysis tool
  * Add ISRC track info to cd-info output.
  * Don't wrap-around volume adjustment for cdda-player.
  * Handle double-byte strings in CD-text
  * --no-header on cd-info omits copyright and warranty</changelog>
  <changelog author="davejplater@gmail.com" date="1334491200">- Update to 0.83.git from 14/04/2012 git head.
- libcdio-paranoia separated from libcdio due to license issues
  see bnc#756564</changelog>
  <changelog author="davejplater@gmail.com" date="1337342400">- Split cdio-utils to a linked package to prevent cycles due to
  utils dependancy on libvcdinfo and vcdimagers dependency on
  libcdio.</changelog>
  <changelog author="coolo@suse.com" date="1337947200">- enable rock support - for some bizzare reason it's not default
  (the help is saying otherwise, but it's obvious if you try to
  read from kiwi live cds)</changelog>
  <changelog author="coolo@suse.com" date="1347019200">- add makeinfo as explicit buildrequires</changelog>
  <changelog author="reddwarf@opensuse.org" date="1361102400">- Update to 0.90
  * CD-Text overhaul and API change (Leon Merten Lohse)
  * Works again (somewhat) on MinGW; tolerence for Microsoft's C compiler (Pete Batard)
  * UDF, Joliet and Rock-Ridge fixes (Pete Batard)
  * OSX fixes (Natalia Portillo and Robert William Fuller)
  * paranoia library removed as that is GPL 2-ish. This is now a separate project
  * file names in cue files are relative to the cue file rather than cwd.
  * Update mmc.h to include MMC-5 commands. (Or MMC-6 since it adds nothing new)
  * Add mmc_cmd2str() to show MMC command name. Show that in some errors
  * Add UDF reading to iso-read and iso-info via --udf or -U (Christophe Fergeau)
  * bug fixes, more tests, update documentation</changelog>
  <changelog author="davejplater@gmail.com" date="1364904000">- Add url to spec source field to enable local source service.</changelog>
  <changelog author="p.drouand@gmail.com" date="1422705600">- Update to version 0.93
  * Add cdio_free, iso9660_stat_free, and iso9660_xa_free functions.
  * Deprecate mmc_isrc_track_read_subchannel
  * Add mmc_get_track_isrc function.
  * Update OS versions we recognize
  * OSX, and MS Windows, ISO 9660 and other bug fixes
  * Remove Coverty scan warnins and errors
  * OS/2 driver performance update - KO Myung-Hun
- Bump so versions
  * libcdio14 to libcdio16
  * libiso9660-8 to libiso9660-10
- Update baselibs.conf
- Remove depreciated AUTHORS section</changelog>
  <changelog author="mpluskal@suse.com" date="1434456000">- Add gpg signature
- Remove ppc obsoletes/provides as it affects unsupported releases
- Cleanup spec file with spec-cleaner
- Add missing info dependencies, use preun instead of postun for
  scriplet</changelog>
  <changelog author="astieger@suse.com" date="1504440000">- update to 0.94:
  * CD-TEXT fixes and improvements
  * eject fixes
  * various bug fixes</changelog>
  <changelog author="jengelh@inai.de" date="1504612800">- Remove %package libcdio_{cdda,paranoia} since they are always
  produced by a separate SRPM.
- Remove --with-pic (only useful for static libs) and compact
  - -enable-static=n.
- Adjust RPM groups. Diversify descriptions for the subpackages.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1507204800">- Fix symbol versioning, some symbols where no longer exported with a
  version, thus the library inadvertently broke ABI between version
  0.93 and 0.94. Fixes https://savannah.gnu.org/bugs/index.php?49907
  * add 0001-Fix-symbol-versioning-for-exported-symbols.patch</changelog>
  <changelog author="schwab@linux-m68k.org" date="1509796800">- 0001-Fix-symbol-versioning-for-exported-symbols.patch: Remove broken
  patch
- 0001-Savannah-Bug-49907.patch: Fix symbol versioning for real</changelog>
  <changelog author="sbrabec@suse.com" date="1519732800">- Fix double free vulnerability (bsc#1082877, CVE-2017-18201,
  CVE-2017-18201.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1528804800">- Fix NULL Pointer Dereference (bsc#1082821, CVE-2017-18199,
  CVE-2017-18199.patch).
- Memory leak fixes (bsc#1082821, libcdio-0.94-leak-01.patch,
  libcdio-0.94-leak-02.patch, libcdio-0.94-leak-03.patch,
  libcdio-0.94-leak-04.patch, libcdio-0.94-leak-05.patch,
  libcdio-0.94-leak-06.patch, libcdio-0.94-leak-07.patch,
  libcdio-0.94-leak-08.patch, libcdio-0.94-leak-09.patch,
  libcdio-0.94-leak-10.patch, libcdio-0.94-leak-11.patch,
  libcdio-0.94-leak-12.patch, libcdio-0.94-leak-13.patch,
  libcdio-0.94-leak-14.patch, libcdio-0.94-leak-15.patch,
  libcdio-0.94-leak-16.patch, libcdio-0.94-leak-17.patch,
  libcdio-0.94-leak-18.patch, libcdio-0.94-leak-19.patch,
  libcdio-0.94-leak-20.patch).</changelog>
</package>
<package pkgid="1813f51c43c3bedd83080eee09a0c1a535dab4857efed4bbfa062a1a2e911d7a" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="4a6951144f7de18a988750a257c0c5db72126483d82775cfb5cba5ddfe54832d" name="libuuid-devel" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="04c234073d9557515470c77e2d41f39e7f8053aacbd2213b08198b5f537b23e7" name="libuuid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="5265d44bc42be720b51d8b9ad7fefd9a569b4eb2f4139fa662c46070b9aa27e4" name="libuuid-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="82c5bc07e75d32a90005606cc6c59283acb49b4afd59ed7e4f1437cfd4f23823" name="libuuid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="78ae89df210bf2457bb96ec986809dd77734db217c023d0eaee135858c7ed4d4" name="libuuid-devel-static" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="179f75a2141f391cdd8185e61f7c0f51e5e19e8a4d3b6db1873b78500d23af81" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="4093cab647440cfda991dcfa2040d2bc1cbd5e9880084ee8e045055a6d0029df" name="libuuid1" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="9141165055bdba863f21ddedf4de35f1ed2c41bb30464337e7f6da100d43d3b8" name="libuuid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="f2d0b4adee1517bcdfc2fb91d5c1170f279d39980a3deb678473a1747f6ac8ee" name="libuuid1-32bit" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="c276e9a2a190614299209173c77880b5cdefddd9ac48dc3f2e83dd7d1c2d0191" name="libvirt" arch="src">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="e891dc7adb39890b118b82b0d25cd692997af555e28f91b3fcac8fb5fe05b360" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="2927c4e941bac7e82269b7b95f5475e970a865e984b0e6932059efcda09a397a" name="libvirt" arch="src">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="900318980ecf9dc4d1962d67f17bf1916abf34fba49e33f2c9fd46229dbce465" name="libvirt" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="e60bc59be4244b837a62b20c6ccc5a3a94ab67894c110e4083facd9c6c0c2be6" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="b6d2b157f2edada02701692de4c65d2d6491bec6b5c6055870315f66faaeb5f5" name="libvirt-admin" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="8be05f5bdcd43f8f0fb19ae9590134331d94314b733bdb01efa42eeec60e3b91" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="68a5bd3e85b4bdbbc6c31054330f6cf35e4bd7d23e6c900630ebf6f3d4626c4f" name="libvirt-client" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="94ae3e33e86afce2ccf0165fcc83cb7099d2806624e0f66124cc6ca1f95301d0" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="c9a972abe8cb629cea54d711993df9f2a684df38ed5e769024114b531947e4ed" name="libvirt-daemon" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="6f2a9e7a7e1cd0cefcf9ecf8a0680d48d83edee86a98b457bb88189fc8f7a5bc" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="31d90e3a1351975573696c63edc68c89dac5b06463f6586314aec64741a96831" name="libvirt-daemon-config-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="69b9feeceedaeebaea45f26a896db7e00e13beead274c7f3953c7fc975cf1e1e" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="4bdc8a8f98e88ff5988b871b4de989f2dad13c171a95c815ed43c75a71944b1b" name="libvirt-daemon-config-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="9f460e99590a2dd883238463903f71c0554b99a6b1490aed63ac0fec68176386" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="681604c2ec663709d953938c3fa5a5fbbbd2b24c6247eb514542ca892beeec49" name="libvirt-daemon-driver-interface" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="c63bd18b6e5726f4a34615800ce19089b90a58c65667f3c837310c68820f3107" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="ee325dbb6258eab451bf01d94831ca51872e70a36bfd3743628392e30c88634f" name="libvirt-daemon-driver-libxl" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="cb78db8ff640a5fc52045a734b4afe24a56870fffae013be0d97cb15be6aced8" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="a7ce85f77a2135a84c5db899496eedecc7a6be57ac5eae7b8c0afd95c0402e21" name="libvirt-daemon-driver-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="82d3f4418dbaab1c64881bd43ed8cf723a45c859c7fda2f8df20ee770b6e572a" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="b6dc44cfde9d804708c7181be2bdfb81fc5cb214334712627370b6e1dfdf6d4a" name="libvirt-daemon-driver-network" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="4e57f03ef2746aa3350d52f2da7082df7b69f846a08e91656fdb2de1afd936bf" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="c9b7d6aa10295ef4e764ab51e4548a3577fc834e1c94f4fed3a39a684cb9d039" name="libvirt-daemon-driver-nodedev" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="598e5b1326a805cb926ccbe0d09410b371d4229c292648bb26625ed94bd81ca8" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="5c13420ceb521cc774aad0549c9b511b8602da04ae76cb65cba8d22bbbc8fdef" name="libvirt-daemon-driver-nwfilter" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="71306474cfbd527274505fc7b1c0ad6c8be536bd84a4b519a1215fa5b6db32fd" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="a6f675246c2a9a8a5f59c337580887b85f2194eea004bc248253bad8badaf516" name="libvirt-daemon-driver-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="3f99cffb127b7203e051701d74daddffd8630f551400aee3f584d0b7549f47c4" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="cac119bc2700ef32444d31a2bfa8afb2626ad0f8ed3f8d0b1ed65adb6d123ef8" name="libvirt-daemon-driver-secret" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="54bd2d818f8dbc41fa0b6fea7cdf88a1eb86ab9d83a7f97593291406e0a7b9b5" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="9a91da6ca4e13dad4f150d370804286ed8da5b5daf580b204757c1dd8251a20f" name="libvirt-daemon-driver-storage" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="30a4c0a6af33e9015b40ad75bfc18c81ab7d4988ddf9e9ed5b3ed64cecd6bf7e" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="aa14d31df61c730684db174eea157048997b72fcbbfd689f901afd73b0ae27a1" name="libvirt-daemon-driver-storage-core" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="8314a0f7fce0d4fafec94e078a7f42a363c86a97bbea66b62fa8bd190c8c7a4f" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="e8e73ab3caf382d7e994f5812c48820e0ecb564b396b4066870aa52ef74013b1" name="libvirt-daemon-driver-storage-disk" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="a5eba931cf8fedacd662556a50864be12ad0ab16c87db4f1f0d3f4b106669af2" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="54ef1aa652d4025fb6b4586736a03e65fdc3764f8f5965f0959601e92279d517" name="libvirt-daemon-driver-storage-iscsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="04ce6078e9aa48c46e398231fb3923cfae966346af532868de4977d67c7f597a" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="c588d535ff71e23ea3185ff529d1be8e67b174770f665ab4b5356946d556ce7b" name="libvirt-daemon-driver-storage-logical" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="092cfddd890c31cefdc96f60607feaac12bd029472bc98af26a50107ff499e79" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="8ae5edbe1e5b1e09ad7e366e66c656048f264387a63590842ae1af96a223dc85" name="libvirt-daemon-driver-storage-mpath" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="104326ee973695b2633af8a8db5c2f78f0c14acc692e93bb6078a4c90cdbe96d" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="51af5f98eb60fa831d988e0ea278546381cf3fba2d0d542f8a18bffcdb121fa0" name="libvirt-daemon-driver-storage-rbd" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="2a149582857490602c52e167b0062112f77697bdb05c388989166d86c45aba98" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="3afc50c24cb842ffdb76f349b7fe8c81bcba7ad83444589ed5afc025a10b8c8f" name="libvirt-daemon-driver-storage-scsi" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="51fb56631680ce393d6cb09286847faee4c08a3d74e9499095784f06f72a666b" name="libvirt-daemon-driver-uml" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="66cce69d24d6400b8c3f019498b7996e5bb451419e94d38b64e87aecf0116d05" name="libvirt-daemon-driver-uml" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="d81854c5d88edd65a478a948d70934580ceecbfb850c1e8990c37334518895d3" name="libvirt-daemon-driver-vbox" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="73dca8bfcf693cd24380f7f7df57591eacb49efbe105a287c1b37401963ff690" name="libvirt-daemon-driver-vbox" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="121e3b0b9967a325fb1f98c3b4707f6495bfefdb28af2adb18921eaca28fe210" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="48c2ddf196743066e217a0a192efd8ce8c9ea412979aea3af97f51a4348659d4" name="libvirt-daemon-hooks" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="c55f7be9ee88286b9f495941c7bdb337b09fe362c876b7bfd6ad63584dc24859" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="9c28322361cad0842e1d617496667af21c5322842df7e13614ec11c3194e4a41" name="libvirt-daemon-lxc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="7ccb1f8bbc7da5501140b5f3a74fa0b407f30a711cf0bd67807468bf3c7beeab" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="4f4e2b74e3ea5a6bab7f3a50b38965c644479d844a10c29b5452f28d6d5849f0" name="libvirt-daemon-qemu" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="70a2eca29fb8cfd9bb7115e435e75b4e26da6a324722fd353057177bd9c9644f" name="libvirt-daemon-uml" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="3cf25f9578c8059dad0e42bd67acf7171f0b09b9cc0635e1cc17e0cdb72595b9" name="libvirt-daemon-uml" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="1d8e010b4cbb110b5479e8bb54d1b9c56b09008e124f6db3604032f72d752f14" name="libvirt-daemon-vbox" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="20fb76126a24c65fa350daaf5530e053f45b12f90eb6c11cce1e97ae65c21cb9" name="libvirt-daemon-vbox" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="5015c878f68f07781c120eb02c07c4fb4f8894e6a7d6fd4684af37c82ca14492" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="b308b5473018509e1f7a4d2e8c8b0e45bf71cbd1c0d628d57e1e05fd0a02f7f5" name="libvirt-daemon-xen" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="b25ad5286a23d2d129d9205b146e6c1f9a8ef7e9a87581585f9077e2c6126562" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="2d1352ee966716c2febe2ab276e11e56ea40cb7c4bc96d7f880f74e815c3c1dc" name="libvirt-devel-32bit" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="ef49851d37f37baf48588443bf6bd795010d58b3cac066055256aff2a166d7cf" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="ad24fe4b98d7fee0061a5b656856eb03977fb91aa19566a1e3c748399f1fb179" name="libvirt-devel" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="b105f2552470bb6085eddf5211f8c72cf2455136e2070830f489e47f12f922bc" name="libvirt-doc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="c28901a0047348c1f6d209304d37c28ce9146610fbb763269333a895636f03ee" name="libvirt-doc" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="d4c7389adc6921d682b30cc5cd6ef60fd63e47341c770a50bfc8eaeee1b6a131" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="59c0b9165724aa3b7c219a2fe2caeef1c3fbce505a9f3bcc07e8f9c63bb11a95" name="libvirt-libs" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="bcdb3c1ee019302a95b509fd2bb46977d29851d5b56df21650133cbb74858db8" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="5bcc4620ec7c343c2ddfc8cb0e6c83af53195226161de149e9fd52bae77698a5" name="libvirt-lock-sanlock" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="654631bc8daf25644be2d89ed1eb7b766f3b6171ba6d29e740cef6ba3647ac35" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="a2d75848d8577ba82f467aa3c9925fbb749f07a37deca5e453c8be31f1ab52b9" name="libvirt-nss" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="db459a4e94a2961cde47ca18e33b9c1f1bb39e105195ef19db8ee3f362a853f9" name="libvorbis" arch="src">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="5f8d3bc8a3a01a025f39beb260be654cc263cdb58309a8bcad6963901f6f004a" name="libvorbis-devel" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="ab437a50376012b3c3c02e406b0daa402914e607167e53113b1d66519efa652b" name="libvorbis-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="4bd78cdbbc49ca899ca392214afb1b940c54a8975aa20f703ba0fcf1fb33b894" name="libvorbis-doc" arch="noarch">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1521288000">- Split from libvorbis.spec to reduce the build dependencies</changelog>
</package>
<package pkgid="f21447a292c9deb6dd754d87b25df1b45ef9627522023e21df9cf327e067c0b7" name="libvorbis-doc" arch="src">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="tiwai@suse.de" date="1521288000">- Split from libvorbis.spec to reduce the build dependencies</changelog>
</package>
<package pkgid="a68d32c1dab22acb6a40cc70b81e5535ff52f970f2d75a10bc1768e29fc629a0" name="libvorbis0" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="afbd6ca346fec9665c593db3562b6dd00360158d1c28936c22daeb1c10143d17" name="libvorbis0-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="07cc65191f5ac706a3397b64fde80decde291b91ae4fb8c8bebc8a183833dfe9" name="libvorbisenc2" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="df1638af578aaec3ac350ff05ac13787424a27010d121b09c93c355a673c7ff1" name="libvorbisenc2-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="901cb466164915028d9cf842b5375ea89099452bcf627ac1d866bcaefe91b8a5" name="libvorbisfile3" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="331d79544f41fba8746e4ffba94bfab7cdfd89ff17a84691812dec5153041bb7" name="libvorbisfile3-32bit" arch="x86_64">
  <version epoch="0" ver="1.3.6" rel="lp150.3.3.1"/>
  <changelog author="davejplater@gmail.com" date="1291982400">- Split libvorbisenc2 and libvorbisfile3 from libvorbis0
- Removed services.</changelog>
  <changelog author="dmueller@suse.de" date="1304596800">- fix provides/obsoletes in baselibs</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1314619200">- Fix build with no-add-needed</changelog>
  <changelog author="coolo@suse.com" date="1321963200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1322222400">- open files with O_CLOEXEC, in order to avoid fd leaks
  when calling applications fork() ..execve()...
  This patch does not cover the executable tools since
  it is not critical for them.</changelog>
  <changelog author="idonmez@suse.com" date="1324814400">- -O20 optimization level doesn't exist, use -O3</changelog>
  <changelog author="tiwai@suse.de" date="1329825600">- VUL-0: CVE-2012-0444: libvorbis: heap-based buffer overflow
  (bnc#747912)</changelog>
  <changelog author="ftake@geeko.jp" date="1340193600">- updated to 1.3.3
  * vorbis: additional proofing against invalid/malicious
  streams in decode (see SVN for details).
  * vorbis: fix a memory leak in vorbis_commentheader_out().
  * updates, corrections and clarifications in the Vorbis I
  specification document
  * build warning fixes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1362225600">- fix build with automake-1.13.1</changelog>
  <changelog author="mmeister@suse.com" date="1366113600">- Added url as source.
  Please see http://en.opensuse.org/SourceUrls</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1393156800">- Xiph libvorbis 1.3.4
  * reduced static data size in libvorbisenc
  * associated minor changes required to libvorbis and libvorbisfile
  * minor build fixes and build system updates
  * no functional changes over the previous 1.3.3 release
- removed libvorbis-pkgconfig.patch, in upstream
- updated vorbis-fix-linking.patch for context changes</changelog>
  <changelog author="fcrozat@suse.com" date="1408363200">- Fix obsoletes and provides in baselibs.conf.</changelog>
  <changelog author="mpluskal@suse.com" date="1425643200">- Cleanup spec file with spec-cleaner
- Update to 1.3.5
  * Tolerate single-entry codebooks.
  * Fix decoder crash with invalid input.
  * Fix encoder crash with non-positive sample rates.
  * Fix issues in vorbisfile's seek bisection code.
  * Spec errata.
  * Reject multiple headers of the same type.
  * Various build fixes and code cleanup.</changelog>
  <changelog author="aloisio@gmx.com" date="1480420800">- Added 32bit libvorbis-devel in baselibs.conf</changelog>
  <changelog author="tiwai@suse.de" date="1513684800">- Fix VUL-0: out-of-bounds array read vulnerability exists in
  function mapping0_forward() (CVE-2017-14633, bsc#1059811):
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
- Fix VUL-0: Remote Code Execution upon freeing uninitialized
  memory in function vorbis_analysis_headerout(CVE-2017-14632,
  bsc#1059809):
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201600">- Fix VUL-0: libvorbis: Out of bounds memory write while processing
  Vorbis audio data (CVE-2018-5146, bsc#1085687):
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521201601">- Update to version 1.3.6:
  * Fix CVE-2018-5146 - out-of-bounds write on codebook decoding.
  * Fix CVE-2017-14632 - free() on unitialized data
  * Fix CVE-2017-14633 - out-of-bounds read
  * Fix bitrate metadata parsing.
  * Fix out-of-bounds read in codebook parsing.
  * Fix residue vector size in Vorbis I spec.
  * Appveyor support
  * Travis CI support
  * Add secondary CMake build system.
  * Build system fixes
- Build documents with doxygen, and many tex stuff;
  this requires to disable parallel builds partially
- Move COPYING to license directory
- Drop obsoleted patches:
  vorbis-fix-linking.patch
  0001-CVE-2017-14633-Don-t-allow-for-more-than-256-channel.patch
  0002-CVE-2017-14632-vorbis_analysis_header_out-Don-t-clea.patch
  libvorbis-CVE-2018-5146.patch</changelog>
  <changelog author="tiwai@suse.de" date="1521288000">- Split libvorbis-doc subpackage to a separate spec file for
  reducing the dependencies</changelog>
  <changelog author="tiwai@suse.de" date="1525348800">- Fix out-of-bounds access inside bark_noise_hybridmp function
  (CVE-2017-14160, bsc#1059812):
  downstream fix: vorbis-CVE-2017-14160.patch
- Fix stack-basedbuffer over-read in bark_noise_hybridm
  (CVE-2018-10393, bsc#1091072):
  downstream fix: vorbis-CVE-2018-10393.patch</changelog>
  <changelog author="tiwai@suse.de" date="1528200000">- Replace vorbis-CVE-2017-14160.patch with the upstream fix
  (commit 018ca26dece6), refresh vorbis-CVE-2018-10393.patch
- Fix the validation of channels in mapping0_forward()
  (CVE-2018-10392, bsc#1091070):
  vorbis-CVE-2018-10392.patch</changelog>
</package>
<package pkgid="36b08959c5d1abc40cc7439a07e0a275b83d5a93ee98afcb2f2c8656d3d6350f" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="735728d6e97a27828a9eeb848e999e8bc4c70e5c497093e1a5406cca6bf7325e" name="libwbclient-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="c2cb0a68a322008c695419d9db16a72dddd9777a63b0544dbad1351e659cd409" name="libwbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="784a7c106cf791b3b39016060298b699ac7c452ddeaafa1c9a4965b05b42f7cc" name="libwbclient0-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="021fc2c3e53012b5f9aecc10fd3299b93997f6a9256d37857587bf4b7d8bfa88" name="libwbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="60baba21c7383c6558638fb5a35c673f7a0da50e21e51ee12999ecd5d0edddc6" name="libwbclient0" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="00bdcc6bd00f3db0edf11a22ed2b12b882872dabe58589dfcfa9a8729cd16417" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="f745b0b72834a44867353440f6bbccad38e996470f49af4337af5bf9012ff5a6" name="libwebkit2gtk-4_0-37" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="9218e3d030ea2e577ae599d088273d3526209f00a7a2823d414554290100eb66" name="libwebkit2gtk-4_0-37-32bit" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="90f0ce37b1fa44b96dc1b227ac08554422bec5eb9e034c6b24a83181959cd916" name="libwebkit2gtk-4_0-37-32bit" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="6d40b832a981246471f725729b06ec956aba1d0ba429c7dc146d5e8a0c3a9d9d" name="libwebkit2gtk3-lang" arch="noarch">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="bed5c2391dcb2f09d7dabf0bb55dc69cacf91f36c60c4a030c52aa7b918a7474" name="libwebkit2gtk3-lang" arch="noarch">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="45c45aa2bb58bb0fed898e2b763c837dc645f50390ddefd60a4d9c95097e2e55" name="libwireshark9" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="afc8f7c2df8fed3a36511e6a50ee3e1a6bc32f043b8006906c3f5c5368922cf6" name="libwireshark9" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="9c8ec80fc3abcf8abdd77834251666486bc76361c68e645a7d1d359043def080" name="libwireshark9" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="fe638b3b2d9758994578f747d61951c0db9c13a6de4d1367689c34d19cd3ed17" name="libwiretap7" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="2128715a48edc747c717f230ae14567dcf7bb2ab70ac553a5a490e282fc553e8" name="libwiretap7" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="6cf1aee7661ceda3eeecf7b85fa57a60001c8eabbe9d48e4798214093c257f91" name="libwiretap7" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="5672535bfc656f34bbef618b9cf3789bd37e7baa8eb053f9b387179482219446" name="libwscodecs1" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="f48d65fd4ef33766ab033acf9918ecf528c37b9ce42869dc8b6baecfb76705f8" name="libwscodecs1" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="5f41ffceff6258deb4d8e1b43a96512258f318761fe9ae9b9e688b89661cd826" name="libwscodecs1" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="4efc6caa843443bc2928812506c8fbfb7f784bf62de5b9d156111adc495c871c" name="libwsutil8" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="2b7f1684a7698a0088e233cddb03131b7a8fccfbb6f479bf6e31a860c88d5e5e" name="libwsutil8" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="27651a54e4c289d08968db876803ff7a29b78bdf24f28488f30b2627d786c5d0" name="libwsutil8" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="7361d6564929903f758dfb0e83e3b5ac5ac6ee1e438c39b4efb10ffa49116d89" name="libxfce4ui-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="1d57d271b55bf9886ce9f450c118e7a810b304c394fd7fff57cb719fe2c69388" name="libyui-ncurses-pkg" arch="src">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1367928000">- Cast return of setCandidate() to bool (due to libzypp changes)</changelog>
  <changelog author="bjoern.esser@gmail.com" date="1368187200">- use a common toplevel CMakeLists.txt
- fix building *-doc pkgs
- introduce bootstrap.sh
- Version 2.43.6</changelog>
  <changelog author="gs@suse.de" date="1372334400">- Show and handle multiple versions of packages correctly
  (bnc #822962)
- Version 2.44.0</changelog>
  <changelog author="gs@suse.de" date="1372852800">- remove webpin search from configuration menu (bnc#821866),
  catch exception of sysconfig write (bnc #827608)
- Version 2.44.1</changelog>
  <changelog author="gs@suse.de" date="1373544000">- Online Update: show irrelevant patches only in list 'All Patches',
  improve handling of the patch status, enhance help text
- Version 2.44.2</changelog>
  <changelog author="gs@suse.de" date="1374667200">- Online Update: improve help, show column 'Kind' beside 'Name',
  Package Selector: get lists of orphaned, suggested, recommended
  and unneeded packages correctly
- Version 2.44.3</changelog>
  <changelog author="gs@suse.de" date="1375272000">- Online Update: show multi version packages correctly
- Version 2.44.4</changelog>
  <changelog author="gs@suse.de" date="1384948800">- Fixed typos in help text, rephrase text (bnc #839689)
- Version 2.45.0</changelog>
  <changelog author="mvidner@suse.com" date="1389182400">- adjusted to libyui so version 6
- 2.46.0</changelog>
  <changelog author="mvidner@suse.com" date="1406548800">- Recommend this package when yast2-packager and libyui-ncurses are
  installed (bnc#888300)
- 2.46.1</changelog>
  <changelog author="mvidner@suse.com" date="1421755200">- Fixed building with cmake 3.1 (PREFIX in spec, boo#911875).
- 2.46.2</changelog>
  <changelog author="mvidner@suse.com" date="1436356800">- Added option "Dependencies/Install Recommended Packages",
  (PKGMGR_RECOMMENDED) (boo#900853).
- Changed "Dependencies/Install Recommeded Packages for Already
  Installed Packages" from an option to a command (boo#902394).
- 2.47.0</changelog>
  <changelog author="schubi@suse.com" date="1441886400">- Handle mixed multiversion packages (fate#318778)
- Allow to delete single versions of multiversion packages.
  (bsc#943870)
- 2.48.0</changelog>
  <changelog author="mvidner@suse.com" date="1442404800">- Reorganized git for easier tarball creation:
  - RPM spec files are kept in git verbatim, not as templates
  - no longer call PREP_SPEC_FILES in CMakeLists.common
- No functional change but version bumped to push the package
  down the pipeline (boo#946079).</changelog>
  <changelog author="jreidinger@suse.com" date="1444219200">- Fix unselecting patterns for installation (unify behavior with
  qt packager) (bnc#916568)
- 2.48.2</changelog>
  <changelog author="shundhammer@suse.de" date="1480420800">- Made menu hotkey unique for QA (bsc#1012604)
- 2.48.3</changelog>
  <changelog author="cwh@suse.com" date="1481025600">- Sort pkg list case-insensitively (bsc#1012294)
- Prevent double sorting (widget sorts by itself)
- 2.48.4</changelog>
  <changelog author="mvidner@suse.com" date="1502107200">- Adjusted to increased so version of the base library (bsc#1052217)
- Reduce build dependencies: Use individual libboost-*-devel
  packages instead of boost-devel (amajer)
- 2.48.5</changelog>
  <changelog author="mvidner@suse.com" date="1530273600">- Added new "Services" filter, displayed only when at least one
  repository service is present (FATE#321043)
- 2.48.5.1</changelog>
  <changelog author="lslezak@suse.cz" date="1530619200">- Fixes for file systems &gt;8EiB (bsc#991090):
  - Do not display "out of disk space" error at start when such
    a large disk is present in the system
  - Fixed displaying negative disk sizes in the disk usage dialog
- 2.48.5.2</changelog>
</package>
<package pkgid="5c8605c84b59f3fe273578b2c9668d4d2c86174543ff76e7f2778ffa6850db70" name="libyui-ncurses-pkg-devel" arch="x86_64">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1367928000">- Cast return of setCandidate() to bool (due to libzypp changes)</changelog>
  <changelog author="bjoern.esser@gmail.com" date="1368187200">- use a common toplevel CMakeLists.txt
- fix building *-doc pkgs
- introduce bootstrap.sh
- Version 2.43.6</changelog>
  <changelog author="gs@suse.de" date="1372334400">- Show and handle multiple versions of packages correctly
  (bnc #822962)
- Version 2.44.0</changelog>
  <changelog author="gs@suse.de" date="1372852800">- remove webpin search from configuration menu (bnc#821866),
  catch exception of sysconfig write (bnc #827608)
- Version 2.44.1</changelog>
  <changelog author="gs@suse.de" date="1373544000">- Online Update: show irrelevant patches only in list 'All Patches',
  improve handling of the patch status, enhance help text
- Version 2.44.2</changelog>
  <changelog author="gs@suse.de" date="1374667200">- Online Update: improve help, show column 'Kind' beside 'Name',
  Package Selector: get lists of orphaned, suggested, recommended
  and unneeded packages correctly
- Version 2.44.3</changelog>
  <changelog author="gs@suse.de" date="1375272000">- Online Update: show multi version packages correctly
- Version 2.44.4</changelog>
  <changelog author="gs@suse.de" date="1384948800">- Fixed typos in help text, rephrase text (bnc #839689)
- Version 2.45.0</changelog>
  <changelog author="mvidner@suse.com" date="1389182400">- adjusted to libyui so version 6
- 2.46.0</changelog>
  <changelog author="mvidner@suse.com" date="1406548800">- Recommend this package when yast2-packager and libyui-ncurses are
  installed (bnc#888300)
- 2.46.1</changelog>
  <changelog author="mvidner@suse.com" date="1421755200">- Fixed building with cmake 3.1 (PREFIX in spec, boo#911875).
- 2.46.2</changelog>
  <changelog author="mvidner@suse.com" date="1436356800">- Added option "Dependencies/Install Recommended Packages",
  (PKGMGR_RECOMMENDED) (boo#900853).
- Changed "Dependencies/Install Recommeded Packages for Already
  Installed Packages" from an option to a command (boo#902394).
- 2.47.0</changelog>
  <changelog author="schubi@suse.com" date="1441886400">- Handle mixed multiversion packages (fate#318778)
- Allow to delete single versions of multiversion packages.
  (bsc#943870)
- 2.48.0</changelog>
  <changelog author="mvidner@suse.com" date="1442404800">- Reorganized git for easier tarball creation:
  - RPM spec files are kept in git verbatim, not as templates
  - no longer call PREP_SPEC_FILES in CMakeLists.common
- No functional change but version bumped to push the package
  down the pipeline (boo#946079).</changelog>
  <changelog author="jreidinger@suse.com" date="1444219200">- Fix unselecting patterns for installation (unify behavior with
  qt packager) (bnc#916568)
- 2.48.2</changelog>
  <changelog author="shundhammer@suse.de" date="1480420800">- Made menu hotkey unique for QA (bsc#1012604)
- 2.48.3</changelog>
  <changelog author="cwh@suse.com" date="1481025600">- Sort pkg list case-insensitively (bsc#1012294)
- Prevent double sorting (widget sorts by itself)
- 2.48.4</changelog>
  <changelog author="mvidner@suse.com" date="1502107200">- Adjusted to increased so version of the base library (bsc#1052217)
- Reduce build dependencies: Use individual libboost-*-devel
  packages instead of boost-devel (amajer)
- 2.48.5</changelog>
  <changelog author="mvidner@suse.com" date="1530273600">- Added new "Services" filter, displayed only when at least one
  repository service is present (FATE#321043)
- 2.48.5.1</changelog>
  <changelog author="lslezak@suse.cz" date="1530619200">- Fixes for file systems &gt;8EiB (bsc#991090):
  - Do not display "out of disk space" error at start when such
    a large disk is present in the system
  - Fixed displaying negative disk sizes in the disk usage dialog
- 2.48.5.2</changelog>
</package>
<package pkgid="a7c443aa2795895b80f200ef9541781d80189a4cf261a57c8977d2b9cd062473" name="libyui-ncurses-pkg-doc" arch="noarch">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="bjoern.esser@gmail.com" date="1339502400">- initial package</changelog>
</package>
<package pkgid="54cf3142df2e1baf00efba2c6597f4a694b4aa2d5dfe967370a8f17f0a700009" name="libyui-ncurses-pkg-doc" arch="src">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="bjoern.esser@gmail.com" date="1339502400">- initial package</changelog>
</package>
<package pkgid="f9a54402296cc3cf6957f7bc2cef4e2927c0a5862be52e097f19d267ce537bd1" name="libyui-ncurses-pkg8" arch="x86_64">
  <version epoch="0" ver="2.48.5.2" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1367928000">- Cast return of setCandidate() to bool (due to libzypp changes)</changelog>
  <changelog author="bjoern.esser@gmail.com" date="1368187200">- use a common toplevel CMakeLists.txt
- fix building *-doc pkgs
- introduce bootstrap.sh
- Version 2.43.6</changelog>
  <changelog author="gs@suse.de" date="1372334400">- Show and handle multiple versions of packages correctly
  (bnc #822962)
- Version 2.44.0</changelog>
  <changelog author="gs@suse.de" date="1372852800">- remove webpin search from configuration menu (bnc#821866),
  catch exception of sysconfig write (bnc #827608)
- Version 2.44.1</changelog>
  <changelog author="gs@suse.de" date="1373544000">- Online Update: show irrelevant patches only in list 'All Patches',
  improve handling of the patch status, enhance help text
- Version 2.44.2</changelog>
  <changelog author="gs@suse.de" date="1374667200">- Online Update: improve help, show column 'Kind' beside 'Name',
  Package Selector: get lists of orphaned, suggested, recommended
  and unneeded packages correctly
- Version 2.44.3</changelog>
  <changelog author="gs@suse.de" date="1375272000">- Online Update: show multi version packages correctly
- Version 2.44.4</changelog>
  <changelog author="gs@suse.de" date="1384948800">- Fixed typos in help text, rephrase text (bnc #839689)
- Version 2.45.0</changelog>
  <changelog author="mvidner@suse.com" date="1389182400">- adjusted to libyui so version 6
- 2.46.0</changelog>
  <changelog author="mvidner@suse.com" date="1406548800">- Recommend this package when yast2-packager and libyui-ncurses are
  installed (bnc#888300)
- 2.46.1</changelog>
  <changelog author="mvidner@suse.com" date="1421755200">- Fixed building with cmake 3.1 (PREFIX in spec, boo#911875).
- 2.46.2</changelog>
  <changelog author="mvidner@suse.com" date="1436356800">- Added option "Dependencies/Install Recommended Packages",
  (PKGMGR_RECOMMENDED) (boo#900853).
- Changed "Dependencies/Install Recommeded Packages for Already
  Installed Packages" from an option to a command (boo#902394).
- 2.47.0</changelog>
  <changelog author="schubi@suse.com" date="1441886400">- Handle mixed multiversion packages (fate#318778)
- Allow to delete single versions of multiversion packages.
  (bsc#943870)
- 2.48.0</changelog>
  <changelog author="mvidner@suse.com" date="1442404800">- Reorganized git for easier tarball creation:
  - RPM spec files are kept in git verbatim, not as templates
  - no longer call PREP_SPEC_FILES in CMakeLists.common
- No functional change but version bumped to push the package
  down the pipeline (boo#946079).</changelog>
  <changelog author="jreidinger@suse.com" date="1444219200">- Fix unselecting patterns for installation (unify behavior with
  qt packager) (bnc#916568)
- 2.48.2</changelog>
  <changelog author="shundhammer@suse.de" date="1480420800">- Made menu hotkey unique for QA (bsc#1012604)
- 2.48.3</changelog>
  <changelog author="cwh@suse.com" date="1481025600">- Sort pkg list case-insensitively (bsc#1012294)
- Prevent double sorting (widget sorts by itself)
- 2.48.4</changelog>
  <changelog author="mvidner@suse.com" date="1502107200">- Adjusted to increased so version of the base library (bsc#1052217)
- Reduce build dependencies: Use individual libboost-*-devel
  packages instead of boost-devel (amajer)
- 2.48.5</changelog>
  <changelog author="mvidner@suse.com" date="1530273600">- Added new "Services" filter, displayed only when at least one
  repository service is present (FATE#321043)
- 2.48.5.1</changelog>
  <changelog author="lslezak@suse.cz" date="1530619200">- Fixes for file systems &gt;8EiB (bsc#991090):
  - Do not display "out of disk space" error at start when such
    a large disk is present in the system
  - Fixed displaying negative disk sizes in the disk usage dialog
- 2.48.5.2</changelog>
</package>
<package pkgid="349da135774d2e5b4bc75727a40d0b57bd0f5a1c4db22376336a24e73a4df889" name="libz1" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="be1008cb2fafc32f68cb9bb7f5831caefbef8858715dea80f40db33b92382d4b" name="libz1-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="e6af9f5a2b8d141685ac24571d5f9d2f1069298c689b8052a9e27bd7b17791ee" name="libzmq5" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="lp150.2.5.2"/>
  <changelog author="mvyskocil@opensuse.org" date="1434456000">- Add pkgconfig(libsodium) as mandatory build dependency
- Change libuuid-devel to pkgconfig style</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 4.1.2 bnc#937912:
  * Added explicit reference to static link exception in every source file.
  * Bumped ABI version to 5:0:0 since 4.1.x changed the ABI.
  * Fixed STDINT event interface macros to work with CZMQ 3.0.
  * Fixed installation of man pages when BUILD_DOC is not set.
  * Fixed #1428 - regression on single-socket proxies.</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923200">- Conditionally use the pkgconfig style, to support SLE11</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923201">- Fix the conditionals on the previous commit</changelog>
  <changelog author="stephan.barth@suse.com" date="1443441600">- update to version 4.1.3.
  Changes from upstream:
  * Fixed #1532 - getsockopt ZMQ_RCVMORE now resets all bits instead of only
    32
  * Fixed #1445 - zmq::socket_base_t::connect fails on tcp ipv6 address</changelog>
  <changelog author="idonmez@suse.com" date="1444132800">- Re-enable %check</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Add libsodium-init.patch to handle sodium_init() error.</changelog>
  <changelog author="adam.majer@suse.de" date="1464609600">- Update to 4.1.4
  * fixed build failure with latest libsodium
  * handle IPv6 link local addresses
  * fixed assertion failure in msg.cpp:390 on STREAM sockets
  * fixed assertion failure in tcp.cpp after network reconnect
  * fixed socket monitor hang
- Remove libsodium-init.patch - upstreamed
- Run %check rule sequentially to prevent assert failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609601">- Append test_log in build output if there are failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609602">- Added patch 3ad076.patch
  * based on https://github.com/zeromq/zeromq4-1/commit/3ad076.patch
  * refreshed and removed NEWS section
  * fixes unbinding when IPv6 is available
- Add '--disable-dependency-tracking' since we are not rebuilding
- Re-enable concurrent check target, but fall back to sequential on
  failure. This allows quick test building, while allows
  sequential unit test run. Run tests 3x before 'official' failure as
  some are a little flaky (upstream acknowledges this)</changelog>
  <changelog author="adam.majer@suse.de" date="1466164800">- New upstream version 4.1.5
  * Fixed #1806 - uninitialised read in curve getsockopt.
  * Fixed #1807 - build broken with GCC 6.
  * Fixed #1831 - potential assertion failure with latest libsodium.
  * Fixed #1850 - detection issues with tweetnacl/libsodium.
  * Fixed #1877 - Avoid terminating connections prematurely
  * fixes some IPv6 related issues
- Removed 3ad076.patch, upstreamed</changelog>
  <changelog author="dmueller@suse.com" date="1467115200">- skip testsuite on qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Remove useless --with-pic, it's only for (non-built) static libs</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1478347200">- New upstream version 4.2.0
  * For Pieter. Thanks for making all of this possible.
  * This release introduces new APIs, but it is ABI compatible with
    libzmq 4.1.2 and up.
  * Fixed alignment problem on arm and sparc, need to rebuild
    against 4.2.0
  * New Context option ZMQ_MAX_MSGSZ
  * New Socket options:
  - ZMQ_HANDSHAKE_IVL
  - ZMQ_SOCKS_PROXY
  - ZMQ_XPUB_NODROP
  - ZMQ_BLOCKY
  - ZMQ_XPUB_MANUAL
  - ZMQ_XPUB_WELCOME_MSG
  - ZMQ_STREAM_NOTIFY
  - ZMQ_INVERT_MATCHING
  - ZMQ_HEARTBEAT_IVL
  - ZMQ_HEARTBEAT_TTL
  - ZMQ_HEARTBEAT_TIMEOUT
    ....
  * see NEWS for all changes
- Packaging
  * add --with-libsodium to link against libsodium and not internal
    tweetnacl
  * remove disable-silent-rules
  * add --enable-curve to build curve_keygen tool
    https://github.com/zeromq/libzmq/pull/2195
  * add libunwind to build dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1483185600">- New upstream version 4.2.1
  * Bugfix release. For complete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.1</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
</package>
<package pkgid="490edba181f5c9967e5ee95a5af21bf2f4fc92134c93cf213a43589342caeee7" name="libzypp" arch="src">
  <version epoch="0" ver="17.6.4" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1512388800">- Stop BuildRequire dropped boost-devel (bsc#1062782)
- version 17.0.4 (0)</changelog>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
</package>
<package pkgid="1d6e480e2645c6cbf9c52fa531e2c4b19d70883ac03a40f681055b59c73bc219" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.6.4" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1512388800">- Stop BuildRequire dropped boost-devel (bsc#1062782)
- version 17.0.4 (0)</changelog>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
</package>
<package pkgid="bab36d616822f3da752d27977c700dc2eb9bb538d92f7c1d5e9c2ae607625e03" name="libzypp" arch="src">
  <version epoch="0" ver="17.7.0" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
</package>
<package pkgid="bbff8462eef5d9e06a72adf3df01832c497d6ea64bde9c1c06768603e2b984ef" name="libzypp" arch="x86_64">
  <version epoch="0" ver="17.7.0" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
</package>
<package pkgid="4d4c62f98682b481013000f2c479097c6858ff529a439881cd72562a7da3909a" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.6.4" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1512388800">- Stop BuildRequire dropped boost-devel (bsc#1062782)
- version 17.0.4 (0)</changelog>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
</package>
<package pkgid="a015d97b8a3356f135ee98004f1eeb81a58263c8e36c5b134080803677a4d189" name="libzypp-devel" arch="x86_64">
  <version epoch="0" ver="17.7.0" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
</package>
<package pkgid="67a3778e826dbea2d97bc085a939fd9ff84eed4dbb22a98056de2d3383972776" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.6.4" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1512388800">- Stop BuildRequire dropped boost-devel (bsc#1062782)
- version 17.0.4 (0)</changelog>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
</package>
<package pkgid="582d857750d68f08eb2519a0d314b4a17e4c9dbf1d67960f4202b8519df10d39" name="libzypp-devel-doc" arch="x86_64">
  <version epoch="0" ver="17.7.0" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1512561600">- Fix default for solver.allowNameChange (bsc#1071466)
- version 17.0.5 (0)</changelog>
  <changelog author="ma@suse.de" date="1515067200">- plugin: don't reject header values containing a ':' (bsc#1074687)
- Locks: Don't store duplicate locks (bsc#969569)
- version 17.1.0 (0)</changelog>
  <changelog author="ma@suse.de" date="1516017600">- Adapt rpm package verification to changes in rpm-4.14 (bsc#1076018)
- version 17.1.1 (0)</changelog>
  <changelog author="ma@suse.de" date="1517572800">- Fix crash when installing broken rpm packages (bsc#1078284)
- Testcase: Minor fix writing update testcases
- version 17.1.2 (0)</changelog>
  <changelog author="ma@suse.de" date="1519128000">- RpmDb::checkPackage: fix parsing localized rpm output (bsc#1076415)
- Replace libexpat with libxml
- Fix libzypp tests failing with `-Wp,-D_GLIBCXX_ASSERTIONS`
  compiler flag (fixes #84)
- BuildRequire gpg2 as testcases need it (fixes #84)
- version 17.1.3 (0)</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Add /var/lib/gdm to CheckAccessDeleted blacklist (bsc#1079991)
- Use gpgme instead of calling gpg2 binary directly
- Fix leak in Digest.cc (bsc#1075978)
- version 17.2.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1520424000">- PoolQuery::addDependency add overload to define an individual
  Match::Mode (bsc#1043166)
- version 17.2.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- Deprecate the use of asciidoc for new releases
- version 17.2.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1523275200">- Show progressbar when running posttrans scripts
- Execute service plugin script chrooted to the RepoManagers root
  (bsc#1080693)
- Make sure the product file comes from /etc/products.d for the
  fallback product search (bsc#1086602)
- Introduce ZConfig::repoManagerRoot to support having diverging
  target and repomanager root paths
- Rename `stderr` as it can be a macro (fixes #102)
- version 17.3.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1524744000">- Avoid zombie tar processes (bsc#1076192)
- Replace the terminology 'uninstallable' with 'not installable'
  (bsc#1029392)
- version 17.3.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1529928000">- Flags: make it std=c++14 ready
- Replace 'redhat-release' with generic 'system-release' (#120)
- Ignore /var, /tmp and /proc in zypper ps (bsc#1096617)
- Show GPGME version in log
- version 17.4.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531137600">- HardLocksFile: Prevent against empty commit without Target having
  been been loaded (bsc#1096803)
- lsof: use '-K i' if lsof supports it (bsc#1099847)
- PackageProvider: Validate deta rpms before caching (bsc#1091624,
  bsc#1088705, CVE-2018-7685)
- PackageProvider: Validate downloaded rpm package signatures
  before caching (bsc#1091624, bsc#1088705, CVE-2018-7685)
- version 17.5.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1531915200">- libzypp-devel should not require cmake (bsc#1101349)
- Avoid zombies from ExternalProgram
- Update ApiConfig
- fix typo
- version 17.5.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1532001600">- Prevent the system from sleeping during a commit
  (fixes openSUSE/zypper#135)
- RepoManager: Explicitly request repo2solv to generate application
  pseudo packages.
- version 17.5.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1533297600">- RepoInfo::provideKey: add report telling where we look for missing
  keys.
- Support listing gpgkey URLs in repo files (bsc#1088037)
- Add new report to request user approval for importing a package key
- Handle http error 502 Bad Gateway in curl backend (bsc #1070851)
  (fixes openSUSE/zypper#177)
- Add filesize check for downloads with known size (bsc#408814)
- Removed superfluous space in translation (bsc#1102019)
- version 17.6.0 (2)</changelog>
  <changelog author="ma@suse.de" date="1534507200">- Adapt to changes in libgpgme11-11.1.0 breaking the signature
  verification (bsc#1100427)
- Use %license (bsc#1082318)
- BuildRequires:  libsolv-devel &gt;= 0.6.35 (for bsc#1100095)
- changes: add CVE numbers
- version 17.6.1 (2)</changelog>
  <changelog author="ma@suse.de" date="1534852800">- fixup! Add filesize check for downloads with known size (bsc#408814)
  Fix detetction of metalink downloads and prevent aborting if
  a metalink file is larger than the expected data file.
- version 17.6.2 (2)</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Check for not imported keys after multi key import from rpmdb
  (bsc#1096217)
- version 17.6.3 (2)</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Automatically fetch repository signing key from gpgkey url
  (bsc#1088037)
- lsof: use '-K i' if lsof supports it (bsc#1099847,bsc#1036304)
- version 17.6.4 (2)</changelog>
  <changelog author="ma@suse.de" date="1536321600">- Drop type application due to poor metadata support (bsc#1100095,
  bsc#1104415)
- version 17.7.0 (2)</changelog>
</package>
<package pkgid="599b1ff24841caed4635a3b92dc2b273190fcd0f55f3ab2973be427d246ee67a" name="linphone" arch="x86_64">
  <version epoch="0" ver="4.1.1" rel="lp150.3.5.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add linphoneqt-fix-cmake-i18n.patch: Support new CMake versions
  for translations (commit e70c077).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044801">- Add the missing libqt5-qtquickcontrols dependency (boo#1065173).
- Install the appstream file to the /usr/share/metainfo/ directory
  on openSUSE Leap 15.x or newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520510400">- Add linphoneqt-fix-qt-5.10.patch: Rename the icon property of
  TabButton to iconName (an issue with Qt 5.10 and the new icon
  property, commit ecaab0f, boo#1083654).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533211200">- Replace linphoneqt-fix-qt-5.10.patch with
  linphoneqt-fix-qt-5.11.patch, adding more fixes:
  * Try to support menu bar on Qt 5.10 (commit 5dd0161).
  * Fix ComboBox by importing named QtQuick.Controls (commit
    7f62ae9).
  * Do not use SignalSpy as click is emitted twice instead of one
    in Qt 5.11 (commit 8720931),
  * Avoid a crash in Calls with a bad binding (Qt 5.11) on
    ConferenceControls (commit 4f908ef).
- Do not bother installing the appstream file to
  /usr/share/appdata/ on openSUSE Leap 42.x or older.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533384000">- Add linphoneqt-qt-5.9-fix-buttons.patch: Fix button invisibility
  with Qt 5.9 (boo#1095273).
- Improve linphoneqt-fix-qt-5.11.patch: Add a fix for
  DefaultTranslator dealing with Qt 5.9 (commit d95f523).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534075200">- Add linphoneqt-force-default-style.patch: Force default theme
  style (commit 313aa68).
  This fixes issues with tabs reported in boo#1095273.</changelog>
</package>
<package pkgid="52fab36b14aeeb3118be397f4aa46d8a92cb519fe1b530f51a7c4354852156a9" name="linphoneqt" arch="src">
  <version epoch="0" ver="4.1.1" rel="lp150.3.5.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Initial package.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add linphoneqt-fix-cmake-i18n.patch: Support new CMake versions
  for translations (commit e70c077).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044801">- Add the missing libqt5-qtquickcontrols dependency (boo#1065173).
- Install the appstream file to the /usr/share/metainfo/ directory
  on openSUSE Leap 15.x or newer.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520510400">- Add linphoneqt-fix-qt-5.10.patch: Rename the icon property of
  TabButton to iconName (an issue with Qt 5.10 and the new icon
  property, commit ecaab0f, boo#1083654).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533211200">- Replace linphoneqt-fix-qt-5.10.patch with
  linphoneqt-fix-qt-5.11.patch, adding more fixes:
  * Try to support menu bar on Qt 5.10 (commit 5dd0161).
  * Fix ComboBox by importing named QtQuick.Controls (commit
    7f62ae9).
  * Do not use SignalSpy as click is emitted twice instead of one
    in Qt 5.11 (commit 8720931),
  * Avoid a crash in Calls with a bad binding (Qt 5.11) on
    ConferenceControls (commit 4f908ef).
- Do not bother installing the appstream file to
  /usr/share/appdata/ on openSUSE Leap 42.x or older.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533384000">- Add linphoneqt-qt-5.9-fix-buttons.patch: Fix button invisibility
  with Qt 5.9 (boo#1095273).
- Improve linphoneqt-fix-qt-5.11.patch: Add a fix for
  DefaultTranslator dealing with Qt 5.9 (commit d95f523).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1534075200">- Add linphoneqt-force-default-style.patch: Force default theme
  style (commit 313aa68).
  This fixes issues with tabs reported in boo#1095273.</changelog>
</package>
<package pkgid="deac102ed42817ddb54f54554f496184db077b553eb6f775ee8889a0cafadbc6" name="live-net-installer" arch="noarch">
  <version epoch="0" ver="1.0" rel="lp150.3.3.1"/>
  <changelog author="fvogt@suse.com" date="1502193600">- Initial package, separated from kiwi-config-openSUSE</changelog>
  <changelog author="fvogt@suse.com" date="1506600000">- Change cmdline entry generation in start-install.sh:
  * No useless use of cat ~(=^?^)
  * Strip parameters that the dracut-based boot injects to prevent
    them from getting added to the installed system (boo#1059298)</changelog>
  <changelog author="fvogt@suse.com" date="1515672000">- Support Leap 15.0 by detecting the OS and setting the RepoUrl
  appropriately</changelog>
  <changelog author="fvogt@suse.com" date="1525348800">- Move start-install.sh to /usr/sbin
- Add extend script to fake extension rpm loading (boo#1013206)</changelog>
  <changelog author="fvogt@suse.com" date="1527508800">- Add /sbin:/usr/sbin to $PATH to workaround boo#1094842</changelog>
</package>
<package pkgid="2ee594707bbffb39a975154b94cbe9194a02fbf9de77e5ee95ec1c810f240914" name="live-net-installer" arch="src">
  <version epoch="0" ver="1.0" rel="lp150.3.3.1"/>
  <changelog author="fvogt@suse.com" date="1502193600">- Initial package, separated from kiwi-config-openSUSE</changelog>
  <changelog author="fvogt@suse.com" date="1506600000">- Change cmdline entry generation in start-install.sh:
  * No useless use of cat ~(=^?^)
  * Strip parameters that the dracut-based boot injects to prevent
    them from getting added to the installed system (boo#1059298)</changelog>
  <changelog author="fvogt@suse.com" date="1515672000">- Support Leap 15.0 by detecting the OS and setting the RepoUrl
  appropriately</changelog>
  <changelog author="fvogt@suse.com" date="1525348800">- Move start-install.sh to /usr/sbin
- Add extend script to fake extension rpm loading (boo#1013206)</changelog>
  <changelog author="fvogt@suse.com" date="1527508800">- Add /sbin:/usr/sbin to $PATH to workaround boo#1094842</changelog>
</package>
<package pkgid="fcbd17c75272fae0a355584685c9b0cb66202106d0df49a3d89811529dcbac0e" name="lld" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="91c38f17d8c5525c831161a7b251a0e8141a0bd5ffcf3d467f7ba8265bba10bc" name="lldb" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="54a459dbf9c73442d1f1167dc78b947160136562ab5d0b5c6a661a9a79765b42" name="lldb-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="eb7edcd63c84601e1ffa67732d90592b1993df80beaa94240ce17c5b473c57c9" name="llvm" arch="src">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="ed9a285a8b62fb95ff6f73afe6d9d61b72d3c842b3c7bd1c3ab6fa0badfe6348" name="llvm" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="26d230f4ccb0ab56bd962191d3b1e009a7945acbe53cfd49a7620b40f86af24e" name="llvm-LTO-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="96729f163ab834a70ec54984bb394bfef69a2e7267e63917ffaea79a520bbe17" name="llvm-devel" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="de5bdee24aa1e4402065679d3b112e95b1878bc93835ed5689434d6a900a079d" name="llvm-emacs-plugins" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="a57101d9a69af3185a60107d7ef2a5d23b2d9a0e266c6f73f4ec04cae78cd64b" name="llvm-gold" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="e69701664fa0adc2d969ef0d212f8b1b8d76f1d549165f93b30a8a6bc956c64b" name="llvm-vim-plugins" arch="noarch">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="7ecdd175083ccc9b3972d79d6a5da9701e41f27fc5d89129e521d2e945961a3c" name="lttng-modules" arch="src">
  <version epoch="0" ver="2.10.0" rel="lp150.4.2.1"/>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.4.1
  Changelog:
  * Fix: rcu instrumentation: add const qualifier to char pointers
  * Fix: add missing module version information
  * Fix: block instrumentation: &lt; 3.14 don't have bi_iter
  * Fix: update btrfs instrumentation to kernel 3.14
  * Fix: update block layer instrumentation to kernel 3.14
  * Fix file permissions for lttng-statedump-impl.c
- Correct supported module paths (bnc#872683)</changelog>
  <changelog author="tonyj@suse.com" date="1400587200">- Update mm_compaction_migratepages trace-event to reflect kernel commit
  ddc38a292 (mm/compaction: do not count migratepages when unnecessary)</changelog>
  <changelog author="tonyj@suse.com" date="1401883200">- Fix build errors resulting from block_rq_complete trace event changes
  (3.12.21 stable kernel update)
- Previous fix (update mm_compaction_migratepages) generated build warnings
  as code-change introduced was dead,  correct via static function called
  from input parameter.
- Build against full kernel sources thus enabling kvm, btrfs and ext4 probes.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="meissner@suse.com" date="1423483200">- rebuild to follow the kabi change in bsc#916842</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Drop patch: fix-mm_compaction_migratepages-tp.diff
  Drop patch: fix-update-block-instrumentation-to-3.15-kernel.patch
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=c103647d3a1a5090737a4339c584ac294b4ab676</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  See http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  for changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="jcheung@suse.com" date="1444305600">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="tonyj@suse.com" date="1453377600">- Upgrade to 2.7.1 bugfix release to correct v4.4 build failures (bsc#962719)
- Add preventative fix for cve-2016-0728
  new patch: cve-2016-0728-check-reference-counts-for-overflow.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="tonyj@suse.com" date="1488974400">- Resolve build errors in staging due to kernel block layer API FATE.
  (bsc#1020989,fate#322379) currently applying only to !RT kernels.
  new patch: tracepoint-event-add-tp_code_post.patch
  new patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch</changelog>
  <changelog author="tonyj@suse.com" date="1489492800">- Make previous change (bsc#1020989,fate#322379) apply to RT kernels</changelog>
  <changelog author="tonyj@suse.com" date="1493294400">- Update lttng for btrfs_sync_fs change (bsc#1036276)
  New patch: fix-btrfs-instrumentation-for-4.8-kernel.patch</changelog>
  <changelog author="lnussel@suse.de" date="1494244800">- Don't build for rt flavor on openSUSE. Doesn't exist there. (bsc#1013845)</changelog>
  <changelog author="tonyj@suse.com" date="1497960000">- Constify btrfs tracepoints to resolve build failures (bsc#1044912)
  New patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
  Temp disable RT builds
  Drop patch: cve-2016-0728-check-reference-counts-for-overflow.patch
  Drop patch: fix-btrfs-instrumentation-for-4.8-kernel.patch
  Drop patch: tracepoint-event-add-tp_code_post.patch
  Drop patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch
  Modify patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1512388800">- Remove cold parameter from mm_page_free_batched (bsc#1070529)
  New patch: mm_remove_cold_parameter_from_free_hot_cold_page.patch</changelog>
  <changelog author="tonyj@suse.com" date="1513684800">- Update block instrumentation for kernel 4.14. Change is already
  upstream in 2.10.3 but we are not taking updates into SLE at this
  point in beta cycle.. Also fix needs rework to map to SLE15 (v4.12.x)
  New patch: fix-update-block-instrumentation-for-4.14-kernel.patch</changelog>
  <changelog author="tonyj@suse.com" date="1517659200">- Update for kvm build errors
  New patch: update-kvm-instrumentation-for-4.15.patch
  New patch: fix-kvm-instrumentation-for-4.15.patch</changelog>
</package>
<package pkgid="084e5c8715f457910a18f83954c086c8b18a6775924a3199926e5c021a28d73c" name="lttng-modules" arch="x86_64">
  <version epoch="0" ver="2.10.0" rel="lp150.4.2.1"/>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.4.1
  Changelog:
  * Fix: rcu instrumentation: add const qualifier to char pointers
  * Fix: add missing module version information
  * Fix: block instrumentation: &lt; 3.14 don't have bi_iter
  * Fix: update btrfs instrumentation to kernel 3.14
  * Fix: update block layer instrumentation to kernel 3.14
  * Fix file permissions for lttng-statedump-impl.c
- Correct supported module paths (bnc#872683)</changelog>
  <changelog author="tonyj@suse.com" date="1400587200">- Update mm_compaction_migratepages trace-event to reflect kernel commit
  ddc38a292 (mm/compaction: do not count migratepages when unnecessary)</changelog>
  <changelog author="tonyj@suse.com" date="1401883200">- Fix build errors resulting from block_rq_complete trace event changes
  (3.12.21 stable kernel update)
- Previous fix (update mm_compaction_migratepages) generated build warnings
  as code-change introduced was dead,  correct via static function called
  from input parameter.
- Build against full kernel sources thus enabling kvm, btrfs and ext4 probes.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="meissner@suse.com" date="1423483200">- rebuild to follow the kabi change in bsc#916842</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Drop patch: fix-mm_compaction_migratepages-tp.diff
  Drop patch: fix-update-block-instrumentation-to-3.15-kernel.patch
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=c103647d3a1a5090737a4339c584ac294b4ab676</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  See http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  for changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="jcheung@suse.com" date="1444305600">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="tonyj@suse.com" date="1453377600">- Upgrade to 2.7.1 bugfix release to correct v4.4 build failures (bsc#962719)
- Add preventative fix for cve-2016-0728
  new patch: cve-2016-0728-check-reference-counts-for-overflow.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="tonyj@suse.com" date="1488974400">- Resolve build errors in staging due to kernel block layer API FATE.
  (bsc#1020989,fate#322379) currently applying only to !RT kernels.
  new patch: tracepoint-event-add-tp_code_post.patch
  new patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch</changelog>
  <changelog author="tonyj@suse.com" date="1489492800">- Make previous change (bsc#1020989,fate#322379) apply to RT kernels</changelog>
  <changelog author="tonyj@suse.com" date="1493294400">- Update lttng for btrfs_sync_fs change (bsc#1036276)
  New patch: fix-btrfs-instrumentation-for-4.8-kernel.patch</changelog>
  <changelog author="lnussel@suse.de" date="1494244800">- Don't build for rt flavor on openSUSE. Doesn't exist there. (bsc#1013845)</changelog>
  <changelog author="tonyj@suse.com" date="1497960000">- Constify btrfs tracepoints to resolve build failures (bsc#1044912)
  New patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
  Temp disable RT builds
  Drop patch: cve-2016-0728-check-reference-counts-for-overflow.patch
  Drop patch: fix-btrfs-instrumentation-for-4.8-kernel.patch
  Drop patch: tracepoint-event-add-tp_code_post.patch
  Drop patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch
  Modify patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1512388800">- Remove cold parameter from mm_page_free_batched (bsc#1070529)
  New patch: mm_remove_cold_parameter_from_free_hot_cold_page.patch</changelog>
  <changelog author="tonyj@suse.com" date="1513684800">- Update block instrumentation for kernel 4.14. Change is already
  upstream in 2.10.3 but we are not taking updates into SLE at this
  point in beta cycle.. Also fix needs rework to map to SLE15 (v4.12.x)
  New patch: fix-update-block-instrumentation-for-4.14-kernel.patch</changelog>
  <changelog author="tonyj@suse.com" date="1517659200">- Update for kvm build errors
  New patch: update-kvm-instrumentation-for-4.15.patch
  New patch: fix-kvm-instrumentation-for-4.15.patch</changelog>
</package>
<package pkgid="be6cb24d2009f51fca0e5311e3e321be40be38b8057c462cf36fdd5fc0ddf9fc" name="lttng-modules-kmp-default" arch="x86_64">
  <version epoch="0" ver="2.10.0_k4.12.14_lp150.12.13" rel="lp150.4.2.1"/>
  <changelog author="tonyj@suse.com" date="1397563200">- Update to version 2.4.1
  Changelog:
  * Fix: rcu instrumentation: add const qualifier to char pointers
  * Fix: add missing module version information
  * Fix: block instrumentation: &lt; 3.14 don't have bi_iter
  * Fix: update btrfs instrumentation to kernel 3.14
  * Fix: update block layer instrumentation to kernel 3.14
  * Fix file permissions for lttng-statedump-impl.c
- Correct supported module paths (bnc#872683)</changelog>
  <changelog author="tonyj@suse.com" date="1400587200">- Update mm_compaction_migratepages trace-event to reflect kernel commit
  ddc38a292 (mm/compaction: do not count migratepages when unnecessary)</changelog>
  <changelog author="tonyj@suse.com" date="1401883200">- Fix build errors resulting from block_rq_complete trace event changes
  (3.12.21 stable kernel update)
- Previous fix (update mm_compaction_migratepages) generated build warnings
  as code-change introduced was dead,  correct via static function called
  from input parameter.
- Build against full kernel sources thus enabling kvm, btrfs and ext4 probes.</changelog>
  <changelog author="ro@suse.de" date="1409659200">- sanitize release line in specfile</changelog>
  <changelog author="meissner@suse.com" date="1423483200">- rebuild to follow the kabi change in bsc#916842</changelog>
  <changelog author="tonyj@suse.com" date="1438084800">- Update to version 2.7.0-rc1 (FATE#319273)
  Drop patch: fix-mm_compaction_migratepages-tp.diff
  Drop patch: fix-update-block-instrumentation-to-3.15-kernel.patch
  Changelog for differences between 2.4.0 and this point may be found at:
    http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=c103647d3a1a5090737a4339c584ac294b4ab676</changelog>
  <changelog author="tonyj@suse.com" date="1444046400">- Upgrade to release version 2.7.0 (FATE#319273)
  See http://git.lttng.org/?p=lttng-modules.git;a=blob_plain;f=ChangeLog;hb=v2.7.0
  for changelog from v2.7.0-rc1 to v2.7.0</changelog>
  <changelog author="jcheung@suse.com" date="1444305600">- Enable RT KMP build (bsc#948840)</changelog>
  <changelog author="tonyj@suse.com" date="1453377600">- Upgrade to 2.7.1 bugfix release to correct v4.4 build failures (bsc#962719)
- Add preventative fix for cve-2016-0728
  new patch: cve-2016-0728-check-reference-counts-for-overflow.patch</changelog>
  <changelog author="lpechacek@suse.com" date="1453464000">- Disable RT KMP build (bsc#962719)</changelog>
  <changelog author="lpechacek@suse.com" date="1476878400">- Enabled RT KMP build (bsc#1005578)</changelog>
  <changelog author="tonyj@suse.com" date="1488974400">- Resolve build errors in staging due to kernel block layer API FATE.
  (bsc#1020989,fate#322379) currently applying only to !RT kernels.
  new patch: tracepoint-event-add-tp_code_post.patch
  new patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch</changelog>
  <changelog author="tonyj@suse.com" date="1489492800">- Make previous change (bsc#1020989,fate#322379) apply to RT kernels</changelog>
  <changelog author="tonyj@suse.com" date="1493294400">- Update lttng for btrfs_sync_fs change (bsc#1036276)
  New patch: fix-btrfs-instrumentation-for-4.8-kernel.patch</changelog>
  <changelog author="lnussel@suse.de" date="1494244800">- Don't build for rt flavor on openSUSE. Doesn't exist there. (bsc#1013845)</changelog>
  <changelog author="tonyj@suse.com" date="1497960000">- Constify btrfs tracepoints to resolve build failures (bsc#1044912)
  New patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1504180800">- Update to version 3.10 for SLE15 (bsc#1055683)
  Temp disable RT builds
  Drop patch: cve-2016-0728-check-reference-counts-for-overflow.patch
  Drop patch: fix-btrfs-instrumentation-for-4.8-kernel.patch
  Drop patch: tracepoint-event-add-tp_code_post.patch
  Drop patch: update-block-instrumentation-to-compile-on-4.8-kernels.patch
  Modify patch: btrfs-constify-tracepoint-arguments.patch</changelog>
  <changelog author="tonyj@suse.com" date="1512388800">- Remove cold parameter from mm_page_free_batched (bsc#1070529)
  New patch: mm_remove_cold_parameter_from_free_hot_cold_page.patch</changelog>
  <changelog author="tonyj@suse.com" date="1513684800">- Update block instrumentation for kernel 4.14. Change is already
  upstream in 2.10.3 but we are not taking updates into SLE at this
  point in beta cycle.. Also fix needs rework to map to SLE15 (v4.12.x)
  New patch: fix-update-block-instrumentation-for-4.14-kernel.patch</changelog>
  <changelog author="tonyj@suse.com" date="1517659200">- Update for kvm build errors
  New patch: update-kvm-instrumentation-for-4.15.patch
  New patch: fix-kvm-instrumentation-for-4.15.patch</changelog>
</package>
<package pkgid="edf9e2595ad0412936ec3fe53ea9b139c79161bd24bbac85c0e77c2743a369f1" name="lxc" arch="src">
  <version epoch="0" ver="2.0.9" rel="lp150.2.3.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- Split into packages to follow best practice.
  * lxc
  * liblxc1
  * liblxc-devel
  Also, we need liblxc1 to be separately installable from LXC for LXD.
- Tweak descriptions.</changelog>
  <changelog author="cbrauner@suse.de" date="1468065601">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
</package>
<package pkgid="3ca500c3fbe1b72b8d065cbf9c13da83cb501d3fcc671c79fc51e759f24b6c70" name="lxc" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.3.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- Split into packages to follow best practice.
  * lxc
  * liblxc1
  * liblxc-devel
  Also, we need liblxc1 to be separately installable from LXC for LXD.
- Tweak descriptions.</changelog>
  <changelog author="cbrauner@suse.de" date="1468065601">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
</package>
<package pkgid="baf95f29fd7e67fae6e985e7ab51e15585cca372c29a8bc891158488e9cce6a4" name="lxc" arch="src">
  <version epoch="0" ver="2.0.9" rel="lp150.2.6.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533556800">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
</package>
<package pkgid="0e891f2e61a820cd8ff9b9a50fe4f66f39b43c70d212b41260824f05e0af08f3" name="lxc" arch="x86_64">
  <version epoch="0" ver="2.0.9" rel="lp150.2.6.1"/>
  <changelog author="cbrauner@suse.de" date="1468065600">- add lxcfs dependency: lxc relies on lxcfs for a long time now to provide
  container aware /proc files. The /sys/fs/cgroup part is slowly phased out
  because we now have cgroup namespaces.</changelog>
  <changelog author="jengelh@inai.de" date="1469275200">- Abolish old macro use. Remove ancient %clean section.
  Avoid sh invocation for simple ldconfig calls.</changelog>
  <changelog author="cbrauner@suse.de" date="1472644800">- update lxc to 2.0.4
- add 0001-bdev-use-correct-overlay-module-name.patch
- add 0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
- add 0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
- add 0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
- add 0005-tools-move-rcfile-to-the-common-options-list.patch
- add 0006-tools-set-configfile-after-load_config.patch
- add 0007-doc-add-rcfile-to-common-opts.patch
- add 0008-doc-Update-Korean-lxc-attach-1.patch
- add 0009-doc-Add-rcfile-to-Korean-common-opts.patch
- add 0010-doc-Add-rcfile-to-Japanese-common-opts.patch
- add 0011-tools-use-exit-EXIT_-everywhere.patch
- add 0012-tools-unify-exit-calls-outside-of-main.patch
- add 0013-utils-Add-mips-signalfd-syscall-numbers.patch
- add 0014-seccomp-Implement-MIPS-seccomp-handling.patch
- add 0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
- add 0016-seccomp-fix-strerror.patch
- add 0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
- add 0018-seccomp-add-support-for-s390x.patch
- add 0019-seccomp-remove-double-include-and-order-includes.patch
- add 0020-seccomp-non-functional-changes.patch
- add 0021-templates-use-fd-9-instead-of-200.patch
- add 0022-templates-fedora-requires-openssl-binary.patch
- add 0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
- add 0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
- add 0025-c-r-Fix-pid_t-on-some-arches.patch
- add 0026-templates-Add-mips-hostarch-detection-to-debian.patch
- add 0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch</changelog>
  <changelog author="schwab@suse.de" date="1474286400">- setcap has been moved to /usr/sbin (boo#998326).</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481025600">- CVE-2016-8649: lxc: guest escape via ptrace of lxc-attach (bsc#1010933).
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485259200">- update to version 2.0.7
  This is the seventh bugfix release for LXC 2.0. The main bugfixes in this release are:
  - attach: Close lsm label file descriptor
  - attach: Non-functional changes
  - attach: Simplify lsm_openat()
  - caps: Add lxc_cap_is_set()
  - conf: attach: Save errno across call to close
  - conf: Clearly report to either use drop or keep
  - conf: criu: Add make_anonymous_mount_file()
  - conf: Fix suggest_default_idmap()
  - configure: Add --enable-gnutls option
  - configure: Check for memfd_create()
  - configure: Check whether gettid() is declared
  - configure: Do not allow variable length arrays
  - configure: Remove -Werror=vla
  - configure: Use AC_HEADER_MAJOR to detect major()/minor()/makedev()
  - conf: Non-functional changes
  - conf: Remove thread-unsafe strsignal + improve log
  - init: Add cgroupfs-mount to Should-Start/Stop sysvinit LSB headers
  - log: Add lxc_unix_epoch_to_utc()
  - log: Annotate lxc_unix_epoch_to_utc()
  - log: Drop all timezone conversion functions
  - log: Make sure that date is correctly formatted
  - log: Use lxc_unix_epoch_to_utc()
  - log: Use N/A if getpid() != gettid() when threaded
  - log: Use thread-safe localtime_r()
  - lvm: Supress warnings about leaked files
  - lxccontainer: Log failure to send sig to init pid
  - monitor: Add more logging
  - monitor: Close mainloop on exit if we opened it
  - monitor: Improve log + set log level to DEBUG
  - monitor: Log which pipe fd is currently used
  - monitor: Make lxc-monitord async signal safe
  - monitor: Non-functional changes
  - python3-lxc: Fix api_test.py on s390x
  - start: Check for CAP_SETGID before setgroups()
  - start: Fix execute and improve setgroups() calls
  - state: Use async signal safe fun in lxc_wait()
  - templates: lxc-debian: Don't try to get stuff from /usr/lib/systemd on the host
  - templates: lxc-debian: Fix getty service startup
  - templates: lxc-debian: Fix typo in calling dpkg with --print-foreign-architectures option
  - templates: lxc-debian: Handle ppc hostarch -&gt; powerpc
  - templates: lxc-opensuse: Change openSUSE default release to Leap 42.2
  - templates: lxc-opensuse: Remove libgcc_s1
  - templates: lxc-opensuse: Remove poweroff.target -&gt; sigpwr.target copy
  - templates: lxc-opensuse: Set to be unconfined by AppArmor
  - templates: lxc-opensuse: Update for Leap 42.2
  - tests; Don't cause test failures on cleanup errors
  - tests: Skip unpriv tests on broken overlay module
  - tools: Improve logging
  - tools: lxc-start: Remove c-&gt;is_defined(c) check
  - tools: lxc-start: Set configfile after load_config
  - tools: Only check for O_RDONLY
  - tree-wide: Random macro cleanups
  - tree-wide: Remove any variable length arrays
  - tree-wide: Sic semper assertis!
  - utils: Add macro __LXC_NUMSTRLEN
  - utils: Add uid, gid, group convenience wrappers
- commented out the patches, as they no longer apply cleanly</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1485518400">- all patches (00*.patch) are upstream already, thus deleted; patch lxc-aa_allow_incomplete-default.patch is now reworked and added as a drop-in file in /usr/share/lxc/config/common.conf.d/
  0001-bdev-use-correct-overlay-module-name.patch
  0002-cleanup-tools-remove-name-from-lxc-top-usage-message.patch
  0003-cleanup-whitespaces-in-option-alignment-for-lxc-exec.patch
  0004-Use-full-GPG-fingerprint-instead-of-long-IDs.patch
  0005-tools-move-rcfile-to-the-common-options-list.patch
  0006-tools-set-configfile-after-load_config.patch
  0007-doc-add-rcfile-to-common-opts.patch
  0008-doc-Update-Korean-lxc-attach-1.patch
  0009-doc-Add-rcfile-to-Korean-common-opts.patch
  0010-doc-Add-rcfile-to-Japanese-common-opts.patch
  0011-tools-use-exit-EXIT_-everywhere.patch
  0012-tools-unify-exit-calls-outside-of-main.patch
  0013-utils-Add-mips-signalfd-syscall-numbers.patch
  0014-seccomp-Implement-MIPS-seccomp-handling.patch
  0015-seccomp-Add-mips-and-mips64-entries-to-lxc_config_pa.patch
  0016-seccomp-fix-strerror.patch
  0017-confile-add-more-archs-to-lxc_config_parse_arch.patch
  0018-seccomp-add-support-for-s390x.patch
  0019-seccomp-remove-double-include-and-order-includes.patch
  0020-seccomp-non-functional-changes.patch
  0021-templates-use-fd-9-instead-of-200.patch
  0022-templates-fedora-requires-openssl-binary.patch
  0023-tools-use-boolean-for-ret-in-lxc_device.c.patch
  0024-c-r-use-proc-self-tid-children-instead-of-pidfile.patch
  0025-c-r-Fix-pid_t-on-some-arches.patch
  0026-templates-Add-mips-hostarch-detection-to-debian.patch
  0027-cleanup-replace-tabs-wth-spaces-in-usage-strings.patch
  lxc-aa_allow_incomplete-default.patch
  0001-attach-do-not-send-procfd-to-attached-process.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490788800">- backported two patches to get the package to build again for Tumbleweed
  (applied only on tumbleweed aka suse_version &gt;1315)
  0001-tree-wide-include-sys-sysmacros.h-directly.patch
  0002-tree-wide-include-sys-sysmacros.h-directly.patch</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1490875200">- fix for boo#1028264
  added patch 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Replace %__cp by cp</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1494936000">- Update to version 2.0.8
  * Security fix for CVE-2017-5985
  * All templates have been updated to not set default passwords anymore, instead requiring lxc-attach be used to configure users.
  * This may affect some automated environments that were relying on our default (very much insecure) users.
  Bugfixes:
    Make lxc-start-ephemeral Python 3.2-compatible
    Fix typo
    Allow build without sys/capability.h
    lxc-opensuse: fix default value for release code
    util: always malloc for setproctitle
    util: update setproctitle comments
    confile: clear lxc.network..ipv{4,6} when empty
    lxc_setup_tios(): Ignore SIGTTOU and SIGTTIN signals
    Make lxc-net return non-zero on failure
    seccomp: allow x32 guests on amd64 hosts.
    Add HAVE_LIBCAP
    c/r: only supply --ext-mount-map for bind mounts
    Added 'mkdir -p' functionality in create_or_remove_cgroup
    Use LXC_ROOTFS_MOUNT in clonehostname hook
    squeeze is not a supported release anymore, drop the key
    start: dumb down SIGCHLD from WARN() to NOTICE()
    log: fix lxc_unix_epoch_to_utc()
    cgfsng: make trim() safer
    seccomp: set SCMP_FLTATR_ATL_TSKIP if available
    lxc-user-nic: re-order #includes
    lxc-user-nic: improve + bugfix
    lxc-user-nic: delete link on failure
    conf: only try to delete veth when privileged
    Fix lxc-containers to support multiple bridges
    Fix mixed tab/spaces in previous patch
    lxc-alpine: use dl-cdn.a.o as default mirror instead of random one
    lxc-checkconfig: verify new[ug]idmap are setuid-root
    [templates] archlinux: resolve conflicting files
    [templates] archlinux: noneed default_timezone variable
    python3: Deal with potential NULL char*
    lxc-download.in / allow setting keyserver from env
    lxc-download.in / Document keyserver change in help
    Change variable check to match existing style
    tree-wide: include directly
    conf/ile: make sure buffer is large enough
    tree-wide: include directly
    tests: Support running on IPv6 networks
    tests: Kill containers (don't wait for shutdown)
    Fix opening wrong file in suggest_default_idmap
    do not set the root password in the debian template
    do not set insecure passwords
    don't set a default password for altlinux, gentoo, openmandriva and pld
    tools: exit with return code of lxc_execute()
    Keep veth.pair.name on network shutdown
    Makefile: fix static clang init.lxc build
    Avoid waiting for bridge interface if disabled in sysconfig/lxc | lxc-net via USE_LXC_BRIDGE
    Increased buffer length in print_stats()
    avoid assigning to a variable which is not POSIX shell proof (bug #1498)
    remove obsolete note about api stability
    conf: less error prone pointer access
    conf: lxc_map_ids() non-functional changes
    caps: add lxc_{proc,file}_cap_is_set()
    conf: check for {filecaps,setuid} on new{g,u}idmap
    conf: improve log when mounting rootfs
    ls: simplify the judgment condition when list active containers
    fix typo introduced in #1509
    attach|unshare: fix the wrong comment
    caps: skip file capability checks on android
    autotools: check for cap_get_file
    caps: return false if caps are not supported
    conf: non-functional changes to setup_pts()
    conf: use bind-mount for /dev/ptmx
    conf: non-functional changes
    utils: use loop device helpers from LXD
    create ISSUE_TEMPLATE.md
    cgroups: improve cgfsng debugging
    issue template: fix typo
    conf: close fd in lxc_setup_devpts()
    conf: non-functional changes
    utils: tweak lxc_mount_proc_if_needed()
    Change sshd template to work with Ubuntu 17.04
    conf: order mount options
    conf: add MS_LAZYTIME to mount options
    monitor: report errno on exec() error
    af unix: allow for maximum socket name
    commands: avoid NULL pointer dereference
    commands: non-functional changes
    lxccontainer: avoid NULL pointer dereference
    monitor: simplify abstract socket logic
    precise is not the latest LTS, let's use xenial instead
    fix the wrong exit status
    conf: non-functional changes lxc_fill_autodev()
    conf: remove /dev/console from lxc_fill_autodev()
    conf: non-functional changes lxc_setup()
    conf: non-functional changes to console functions
    conf: improve lxc_setup_dev_console()
    conf: lxc_setup_ttydir_console()
    config: remove /dev/console bind mount
    doc: document console behavior
    utils: add lxc_unstack_mountpoint()
    conf: unstack all mounts atop /dev/console
    console: fail when we cannot allocate peer tty
    start: remove umount2()
    conf: non-functional changes
    utils: handle &gt; 2^31 in lxc_unstack_mountpoint()
    Install systemd units for CentOS
    Merge ubuntu and debiancase
    start: add crucial details about lxc_spawn()
- Deleted patches that have been backported before:
  - 0003-CVE-2017-5985-Ensure-target-netns-is-caller-owned.patch
  - 0001-tree-wide-include-sys-sysmacros.h-directly.patch
  - 0002-tree-wide-include-sys-sysmacros.h-directly.patch
- added signature verification</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1499169600">- added workaround for #bsc1041291 to allow builds on Tumbleweed with gcc7, until this bug in gcc7 is fixed...</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094400">- added correct reload of apparmor to %post</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094401">- added Requires for apparmor-abstractions and BuildRequires for apparmor-rpm-macros to apply the fix for boo#1036360</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1504094402">- removed apparmor-rpm-macros again, as it is not needed for the current %post solution</changelog>
  <changelog author="mchandras@suse.de" date="1504267200">- Fix libcap-progs dependency. The 'setcap' binary is located in /sbin
  instead of /usr/sbin but it's best to depend on the actual package
  instead since the location might change in the future.</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1505217600">- removed ldconfig from lxc %post section</changelog>
  <changelog author="opensuse_buildservice@ojkastl.de" date="1509451200">- update to version 2.0.9
  Bugfixes:
  * apparmor: Allow containers to start in AppArmor namespaces
  * apparmor: Drop useless apparmor denies
  * caps: Move ifndef/define to the top
  * cgfsng: Fail when limits fail to apply
  * cgfsng: Log when we defer to cgfsng
  * cgfsng: Only output debug info when we set cgroup data
  * cgroups: Handle hybrid cgroup layouts
  * cgroups: Use tight scoping
  * cgroups: Workaround gcc-7 bug
  * commands: Abstract cmd socket handling + logging
  * commands: Add missing translation
  * commands: Delete meaningless comments
  * commands: Handle EINTR
  * commands: Make state server interface flexible
  * commands: Move lxc_make_abstract_socket_name()
  * commands: Rename to lxc_cmd_add_state_client()
  * commonds: Fix typo
  * conf: Adapt to lxc-user-nic usage
  * conf: Add lxc_get_idmaps()
  * conf: Add userns_exec_full()
  * conf: Allow to clear all config items
  * conf: Allow to get lxc.autodev
  * conf: Allow to get lxc.haltsignal
  * conf: Allow to get lxc.kmsg
  * conf: Allow to get lxc.rebootsignal
  * conf: Allow to get lxc.stopsignal
  * conf: Allow writing uid mappings with euid != 0
  * conf: Avoid double-frees in userns_exec_1()
  * conf: Clear lxc.include
  * conf: Do not check for empty value twice
  * conf: Do not check union on wrong net type
  * conf: Do not deref null pointer
  * conf: Do not free static memory
  * conf: Do not log uninitialized memory
  * conf: Do not write out trailing spaces
  * conf: Don't send ttys when none are configured
  * conf: Dump lxc_get_config_item()
  * conf: Error out on too many mappings
  * conf: Fix bionic builds
  * conf: Fix build without libcap
  * conf: Fix tty creation
  * conf: Fix userns_exec_1()
  * conf: Free netdev-&gt;downscript
  * conf: Implement config item clear callback
  * conf: Improve lxc_map_ids()
  * conf: Improve tty shifting function
  * conf: Improve write_id_mapping()
  * conf: Increase lxc-user-nic buffer
  * conf: Log lxc-user-nic output
  * conf: lxc_listconfigs -&gt; lxc_list_config_items
  * conf: Move clearing config items into one place
  * conf: Non-functional changes
  * conf: NOTICE() on mounts on container's /dev
  * conf: Performance tweaks
  * conf: Preserve newlines
  * conf: Properly parse lxc.idmap entries
  * conf: Record idmap that gets written
  * conf: Refactoring of most config parsing code
  * conf: Refactor network deletion
  * conf: Remove dead assignments in parse_idmaps()
  * conf: Remove dead mount code
  * conf: Rework lxc_map_ids()
  * conf: Rework userns_exec_1()
  * conf: Send ttys in batches of 2
  * conf: Switch API to new callback system
  * conf: Use a minimal {g,u}id map
  * conf: Use correct check on char array
  * conf: Use run_command for lxc-usernsexec
  * console: Clean tty state + return 0 on peer exit
  * console: DO NOT add the handles of adjust winsize when the 'stdin' is not a tty
  * console: Fix memory leak of 'lxc_tty_state'
  * console: Remove dead assignments
  * core: Do remount with the MS_REMOUNT flag when mounts with MS_RDONLY
  * core: Fix a format string build failure on x32
  * core: Fix includes for Android
  * core: Fix memory and resource leak
  * core: Fix some cppcheck warnings
  * core: Fix the bug of 'ts-&gt;stdoutfd' did not fill with parameters 'stdoutfd'
  * core: Include custom mntent for Android
  * core: Log function called in userns_exec_1()
  * core: Remove the __func__ macro
  * core: Remove the unused macro
  * core: Replace "priority" with "level"
  * core: Revert "Add a prefix to the lxc.pc"
  * core: root -&gt; am_root
  * core: struct bdev -&gt; struct lxc_storage
  * core: Update .gitignore
  * core: Use strerror(errno) instead of %m
  * criu: Add cmp_version()
  * criu: Use correct check initialization check
  * doc: Add CII Best Practices badge to README
  * doc: Add console behavior to Japanese lxc.container.conf(5)
  * doc: Document missing env variables
  * doc: Fix regex-typo in Japanese and Korean lxc-monitor(1)
  * doc: Fix regex-typo in lxc-monitor.sgml.in
  * doc: Reword id mapping restrictions when unpriv
  * doc: Rework README
  * doc: Tweak Japanese lxc.container.conf(5)
  * doc: Tweak lxc.container.conf a little
  * doc: Untabify Japanese lxc.container.conf(5)
  * doc: Update API documentation for get_config_item
  * execute: Enable console &amp; standard /dev symlinks
  * init: Add comment for exclude 32 and 33 signals
  * init: Adjust include statements
  * init: Become session leader
  * init: Move initialization of act to outside of the loop
  * init: Report exec*() failure
  * init: Use lxc-stop to stop systemd service
  * liblxc: Make sure memory is free()ed
  * liblxc: Only spawn monitord on demand
  * liblxc: Remove 5s timeout on error
  * liblxc: Use snprintf()
  * liblxc: Use userns_exec_full()
  * lock: Non-functional changes
  * lock: Return the right error when open lock file failed
  * log: Prevent stack smashing
  * log: Switch to a new lxc_log_init function
  * monitor: Abstract lxc_abstract_unix_{send,recv}_fd for af_unix
  * monitor: Add lxc_cmd_state_server()
  * monitor: Add TRACE()ers
  * monitor: Delete unneccessory include file
  * monitor: Remove dead assignments
  * monitor: Remove the workaround-code for lxc_abstract_unix_connect
  * monitor: Remove unlink operation for af_unix
  * network: Add arg to config clear method
  * network: Add data arg to set callback
  * network: Add ifindex field for host veth device
  * network: Add lxc_log_configured_netdevs()
  * network: Add missing checks for empty links
  * network: Add network counter
  * network: Add warning when ignoring MTU
  * network: Clear ifindeces
  * network: Delete ovs for unprivileged networks
  * network: Document all fields in struct lxc_netdev
  * network: Don't delete net devs we didn't create
  * network: Fix grammar
  * network: Implement lxc_get_netdev_by_idx()
  * network: Log cleanup thread pid for openswitch
  * network: Log ifindex
  * network: Log ifindex for host side veth device
  * network: Log veth_attr.pair and veth_attr.veth1
  * network: Move config_value_empty() to confile_utils
  * network: Perform network validation at creation time
  * network: Remove allocation from lxc_mkifname()
  * network: Remove dead assignments
  * network: Remove netpipe
  * network: Retrieve correct names and ifindices
  * network: Retrieve the host's veth device ifindex
  * network: Rework network creation
  * network: Send ifindex for unpriv networks
  * network: Stop recording saved physical net devices
  * network: Use correct network device name
  * network: Use send()/recv()
  * network: Use single helper to delete networks
  * network: Use static memory for net device names
  * openvswitch: Delete ports intelligently
  * seccomp: Export the seccomp filter after load it into kernel successful
  * seccomp: Print action name in log
  * seccomp: s/n-new-privs/no-new-privs/g
  * seccomp: Update comment for function parse_config
  * start: Add lxc_free_handler()
  * start: Add lxc_init_handler()
  * start: Document all handler fields
  * start: Don't call lxc_map_ids() without id map
  * start: Don't close inherited namespace fds
  * start: Don't let data_sock users close the fd
  * start: Dup std{in,out,err} to pty slave
  * start: Ensure cgroups are cleaned up
  * start: Generalize lxc_check_inherited()
  * start: Log sending and receiving of tty fds
  * start: lxc_setup() after unshare(CLONE_NEWCGROUP)
  * start: Move env setup before container setup
  * start: Pass LXC_LOG_LEVEL to hooks
  * start: Pin rootfs when privileged
  * start: Remove dead variable
  * start: Send state to legacy lxc-monitord state server even if no state clients registered
  * start: Set environment variables correctly
  * start: Switch from SOCK_DGRAM to SOCK_STREAM
  * start: Switch ids at last possible instance
  * start: Use separate socket on daemonized start
  * start: Use userns_exec_full()
  * state: Remove lxc_rmstate declaration
  * storage: Add storage_utils.{c.h}
  * storage: Avoid segfault
  * storage: Default to orig type on identical paths
  * storage: Record output from mkfs.*
  * storage: Rename files "bdev" -&gt; "storage"
  * storage: Use userns_exec_full()
  * storage/dir: Using 'add-required_remount_flags' function to add required flags
  * storage/loop: Detect loop file
  * storage/overlayfs: Fix wrong path
  * storage/overlay: Handle overlay for stable 2.0
  * template: Remove obsolete bind-mounts from userns.conf
  * template: Use "rsync -SHaAX" to copy the cached rootfs into place
  * template/alpine: Add support for ppc64le
  * template/alpine: Change file check to also check file size (-f =&gt; -s)
  * template/archlinux: Change locale "en-US.UTF-8" to "en_US.UTF-8"
  * template/centos: Add cronie to the pkg list
  * template/centos: Use altarch mirror for CentOS on arches other than i386 and x86_64
  * template/debian: Add aarch64 -&gt; arm64 mapping
  * template/debian: Add buster as a valid release
  * template/debian: Don't force getty@ configuration
  * template/debian: Use deb.debian.org as the default Debian mirror
  * template/download: Fix syntax error
  * template/download: Sanitize script with shellcheck
  * template/opensuse: Add Tumbleweed as supported release
  * template/opensuse: Fix tumbleweed software selection
  * template/opensuse: getty.target.wants does not always exists
  * template/opensuse: Support leap 42.3
  * template/opensuse: Tumbleweed has no update repo
  * template/plamo: Delete unnecessary process during container shutdown
  * template/ubuntu: Check that there is netplan binary, rather than just just a config directory
  * template/ubuntu: Conditionally move upstart ssh job, as it is now optional
  * template/ubuntu: Support netplan in newer releases by default
  * tests: Adapt lxc-user-nic tests to new syntax
  * tests: Add corner-case tests for lxc_safe_{u}int()
  * tests: Add item clear and config file tests
  * tests: Add test script to test the ro option of lxc.rootfs.options
  * tests: Add unit tests for idmap parser
  * tests: Avoid NULL pointer dereference
  * tests: Compare return value to expected value whenever we can
  * tests: Define a network before checks
  * tests: Don't fail when no processes for the user exist
  * tests: Enforce all methods for config items
  * tests: Remove dead assignments
  * tests: Remove the temp container directory
  * tests: Shortlived daemonized containers
  * tests: Support systemd hybrid cgroups
  * tools: Add additional cgroup checks
  * tools: Print "-devel" when LXC_DEVEL is true
  * tools: Use "which"
  * tools/lxc-attach: Allow for situations without /dev/tty
  * tools/lxc-checkconfig: Add CONFIG_NETFILTER_XT_MATCH_COMMENT
  * tools/lxc-checkconfig: Add probe status checking
  * tools/lxc-execute: Print error message when failed
  * tools/lxc-ls: Return all containers by default
  * tools/lxc-monitord: Exit when receiving a quit command
  * tools/lxc-unshare: Do not pass NULL pointer
  * tools/lxc-user-nic: Add new {create,delete} subcommands
  * tools/lxc-user-nic: Check db before trying to delete
  * tools/lxc-user-nic: Fix adding database entries
  * tools/lxc-user-nic: Fix memleak
  * tools/lxc-user-nic: Free memory and check for error
  * tools/lxc-user-nic: Initialize vars to silence gcc-7
  * tools/lxc-user-nic: Keep lines from other {users,links}
  * tools/lxc-user-nic: Remove delta between master + stable
  * tools/lxc-user-nic: Remove double initialization
  * tools/lxc-user-nic: Rework renaming net devices
  * tools/lxc-user-nic: Simplify logic
  * tools/lxc-user-nic: Test privilege over netns on delete
  * tools/lxc-usernsexec: Remove dead assignments
  * travis: Fix builds
  * utils: Add has_fs_type() + is_fs_type()
  * utils: Add lxc_nic_exists()
  * utils: Add lxc_safe_ulong()
  * utils: Add run_command
  * utils: Close parent end in child process after fork
  * utils: Do not write to 0 sized buffer
  * utils: Duplicate stderr as well in lxc_popen()
  * utils: Fix lxc_mount_proc_if_needed()
  * utils: Fix lxc_popen()/lxc_pclose()
  * utils: Fix mem leak with realpath
  * utils: Fix num parsing functions
  * utils: Fix ppc64le builds
  * utils: Fix the way to detect blocking signal
  * utils: lxc_popen() remove dead assignments
  * utils: Move helpers from cgfsng.c to utils.{c,h}
  * utils: Rework lxc_deslashify()
  * utils: Switch to has_fs_type()
  * utils: Use 1LU otherwise we overflow
  * utils: Use access instead of stat</changelog>
  <changelog author="mchandras@suse.de" date="1532001600">- Add upstream patch to fix container start up problems when AppArmor
  is enabled (boo#1099239)
  * 0001-apparmor-Allow-usr-lib-paths-for-mount-and-pivot_roo.patch</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533556800">- 0001-utils-add-LXC_PROC_PID_FD_LEN.patch: prerequisite for applying the
  next patch
- 0001-lxc-user-nic-verify-file-descriptor-stable-2.0.patch: fix information
  leak and possible open() side effects accessible to regular users via
  lxc-user-nic (bsc#988348, CVE-2018-6556)</changelog>
</package>
<package pkgid="a14a749974ee77d3a68a9def3e44eaa98e08c3de3b42dac66dac029917038fc8" name="lxqt-panel" arch="src">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="andrea@opensuse.org" date="1399982400">- spec file clean up for factoy</changelog>
  <changelog author="andrea@opensuse.org" date="1399982401">- Build all plugins adding sensors and libstatgrab to buildrequires</changelog>
  <changelog author="sfalken@opensuse.org" date="1412337600">- Added:
  * 0001-fix_plugin_mount.patch
  * 0002-fix_plugin_volume.patch
  * 0003-fix_plugin_worldclock.patch
  * 0004-fix_plugin_kbindicator.patch
  * 0005-fix_plugin_dom.patch
  * Patches added to fix buildfailure caused by undefined references, and new default build flags in cmake (gh#lxde/lxde-qt#288)</changelog>
  <changelog author="andrea@opensuse.org" date="1414238400">- new upstream version 0.8.0</changelog>
  <changelog author="andrea@opensuse.org" date="1415880000">- added lxmenu-data</changelog>
  <changelog author="andrea@opensuse.org" date="1416398400">- fixed license tag</changelog>
  <changelog author="sfalken@opensuse.org" date="1422273600">- Added conditionals to enable Fedora Builds</changelog>
  <changelog author="sfalken@opensuse.org" date="1423483200">- New upstream version 0.9.0
- Added -lang subpackage
- Dropped Patches:
  + lxqt-panel-0.8.0_fix_lxqt-mount_headers.patch
  + lxqt-panel-0.8.0_fix_undefined_reference.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1424433600">- Changed %build and %include to use cmake macros
- Added Patches:
  + lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  + lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch</changelog>
  <changelog author="mvetter@suse.com" date="1436443200">- Use correct name "lxqt" instead of "lxde-qt"</changelog>
  <changelog author="mvetter@suse.com" date="1446811200">- Upstream release 0.10.0
  We have to compile it with -DKBINDICATOR_PLUGIN=No -DMOUNT_PLUGIN=No
  for now because we have problems otherwise.
  Deleted patches:
  - lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  - lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch
  Not needed anymore</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1447070400">- Added no-undefined.patch: include sources which export used functions
- Added xkbcommon-includes.patch: explicitly add include path for
  xkbcommon headers, otherwise they are picked up accidentally
- Enable mount and kbindicator plugins</changelog>
  <changelog author="mvetter@suse.com" date="1450872000">- Use lxmenu-data to have a working panel menu (fonts etc).</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Use pkgconfig to require libxkbcommon-x11-devel
- Require lxqt-mount to have mounter option working</changelog>
  <changelog author="dimstar@opensuse.org" date="1464782400">- Add lxqt-panel-xcb-1.12.patch: Fix linking with libxcb-1.12:
  we use xcb symbols by ourselves, so we are also responsible to
  link libxcb.</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Update README.md: Reflect changes introduced in 1c22479
  * CMakeLists: Fail for unmet dependencies
  * mainmenu: Remove setting base style in StyleChange
  * mainmenu: Workaround transparent search
  * mainmenu: Dispose old menu first when building new
  * Add README.md
  * sensors: Add default bar scale
  * sensors: Check for existence of the max value
  * sensors: Add minor code optimization
  * mainmenu: Handle QAction disposal correctly
  * panel: Don't use autoFillBackground
  * Plugin: Fix FTBFS for older Qt versions
  * mainmenu: Fix show/hide actions after menu rebuild
  * Statusnotifier: Remove setParent on StatusNotifierMenu.
  * Add XKB_COMMON_X11_INCLUDE_DIRS
  * panel: Remove/deprecate plugin-screensaver (#363)
  * Add and Update Arabic Translations for Desktop Files
  * Fix updating panel geometry on screen size change
  * panel: Fix screen number config change saving
  * Separate a String for I18N Enhancement
  * plugin: Force config dialog activation/raise
  * plugin: Fix crossreferencing of config dialogs
  * panel: Dispose unneeded menu
  * panel: Destroy panel's config dialog
  * showPopupMenu: Remove extraneous setParent() call (#359)
  * statusnotifier: fix popup position on right click
  * desktopswitch: Take layoutDirection into account
  * taskbar: Remove orientation specific logic for DnD
  * LXQtPanelLayout: Take layoutDirection into account
  * taskbar: Remove forgotten debug
  * taskbar: Consider layoutDirection for DnD
  * panel: Optimize search a bit
  * plugin-volume: Avoid an buffer overflow
  * Respect the OnlyShowIn property for menu entries when using menu-cache (#351)
  * kbindicator-plugin: fix linking with libxcb-1.12
  * plugin-volume: Handle errors when trying to determine the next card
  * Clean up CMakeLists.txt
  * plugin/directorymenu: Removes no use code (#350)
  * build: Forward translations parameters
  * ts-files removal (#346)
  * Fix memory leaks
  * Use const references with the foreach iterator
  * Small fix
  * statusnotifier: Fix showing icons in menu
  * kbindicator: (Re)Add .desktop translations
  * Update desktopswitchconfiguration.ui
  * panel: (Re)Add translations dir
  * Revert unintended *.desktop files removal
  * Remove translations (can be pulled in build time)
  * Use external translations
  * Update lxqt-panel_it.ts
  * Add documentation/comments for PanelPluginsModel.
  * Fix segfault on plugin initialization (#338)
  * translations: updated german translation (#323)
  * plugin-mainmenu: update mainmenu_it.ts (#337)
  * Russian translation update
  * mainmenu: Use style sheet to override icon
  * plugins: Change "repolish" logic
  * mainmenu: Reduce delay of popup when using shortcut
  * volume: Remove debug
  * plugins: Don't unload -&gt; avoid dangling resources
  * Added new translated strings.
  * Added missing context for lupdate.
  * Updated german translation.
  * Ask for confirmation when removing a panel
  * panel: Add "Lock Panel" functionality
  * fix updating panel geometry on screen changes
  * Try find a free position when adding a new panel
  * LXQtPanelApplication: Use D-Pointers
  * Animate auto-hiding panels.
  * Add QT_USE_QSTRINGBUILDER to the compile definitions
  * tray: Fix SEGFAULT on stop
  * mainmenu: Fix visual search problems
  * mainmenu: Remove duplicates from search
  * mainmenu: Add new configuration options for search
  * mainmenu: Workadound QLineEdit's wakups(QTBUG-52021)
  * mainmenu: Add configurable way of search
  * taskbar: separate adding from changing windows
  * plugins: Make buttons flat for cleaner look
  * mainmenu: Fix search interacion
  * mainmenu: Add search/hide possibility
  * taskbar: Add show icon by WindowClass to config
  * taskbar: Use icon from theme (based on windowClass)
  * panellayout: Do not allow oversized plugins
  * panellayout: Avoid plugin margins
  * PluginSettings: Make settings object/class public
  * Bump year Fix licenses: lxqt-panel is pure LGPL
  * worldclock: Fix possible SEGFAULT
  * Add comments for ILXQtPanel and LXQtPanel.
  * plugin-taskbar: fix German translation of configuration dialogue
  * panel: Correct PanelPluginsModel logic
  * volume: Avoid infinite cycle in config dialog
  * plugins: Use "cleaner" style logic
  * mainmenu: Remove unneeded includes
  * mainmenu: Fix freeze for some widget styles (e.g. breeze)
  * tray: Fix "BadDamage" warning message
  * tray: Postpone tray icon initialization
  * PluginSettings: Emit settingsChanged only for owned keys
  * taskbar: Fix (auto)hide after window menu is shown
  * mainmenu: Use directory of current icon for search
  * mainmenu: Fix showing icon path in configuration
  * plugin-taskbar: avoid icon-only style for groups
  * statusnotifier: fix position of context menus
  * plugin-quicklaunch: remove preset applications
  * plugin-tray: Fix native window sizes for high DPI devices
  * taskbar: Refactor/improove window handling logic
  * taskbar: Fix multiple groups when WindowClass changes
  * plugin settings: Publish PluginSettings symbols
  * Add support for nested groups in PluginSettings
  * Add PluginSettings::{read,set}Array for atomicity
  * Add PluginSettings for shared settings for plugins
  * plugins config: remove a lot of redundant code
  * LXQtPanelPluginConfigDialog: add ctor overload
  * Update lxqt-panel_fr_FR.ts
  * Create HR translations for panel and plugins
  * lxqt-panel: Update/format and install man page
  * plugin-kbindicator: remove ru_RU translations
  * plugin-kbindicator: add russian translations
  * Update Russian translations for the panel and plugins
  * Italian translation update
  * Updated german translation.
  * Adds comments for lxqtpanelapplication.h.
  * Correct some minor spelling mistakes.
  * panel-config: Fix background opacity slider
  * taskbar: Avoid "noop" button if window ID changes
  * mainmenu: Fix URL assembly for Drag&amp;Drop
  * panel: Fill background
  * mainmenu: Use configurable icon
  * worldclock: Fix update interval
  * panel: Add periodic hide checking
  * clock: Fix content update if transform/autorotate
  * quicklaunch: Fix panel hiding upon showing menu
  * worldclock: Decrease (unnecessary) wake-ups
  * panel: Remove periodic checking for hide
  * Prevent panel hiding in case any (standalone) window shown
  * plugins: Unify window popup-ing
  * directorymenu: Fix indentation (spaces)
  * panel: Use override for overriden virt func
  * hu translations fixed
  * plugin-sysstat: translations fix
  * desktop-switch: Hightlight only windows in taskbar
  * fix misspelled prefered
- Add keyring
- Remove xkbcommon-includes.patch: upstreamed
- Remove: lxqt-panel-xcb-1.12.patch upstreamed
- Remove: no-undefined.patch instead pass
  - DCMAKE_MODULE_LINKER_FLAGS="-Wl,--as-needed -Wl,-z,now" to
  cmake to not have the --no-undefined which doesnt make sense here
  since the symbol is in the binary and not in a library.</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Show Auto-Hiding Panels with Delay (#387)
  * Enabling testing on weston (#380)
  * Update *da.desktop files
  * plugin-showdesktop: Cleanup left behind XCB artifacts
  * plugin-kbindicator: Use FindXCB CMake module
  * plugin-tray: Use the FindXCB CMake module
  * Use the new lxqt-build-tools CMake modules (FindMenuCache)
  * plugin-desktopswitch: Add LABEL_TYPE_NONE
  * Add/Update Portugese translations
  * taskbar: Add "cycle on wheel" configuration
  * taskbar: Forward wheelEvent
  * Add/Update french desktop entries
  * taskbar: Set toolButtonStyle for popup correctly
  * Fix faulty link in README.md
  * Remove arbitrary limit of taskbar button width
  * Remove cpack (#371)
- Added 0001-lxqt_panel_override_explicit_keyword.patch
  * Fixes compile errors  https://github.com/lxde/lxqt/issues/1251
- Added CXXFLAGS change from X11:LXQT:git for libxkbcommon-x11</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set patch version
  * quicklaunch: Show popup menu aligned to clicked button
  * quicklaunch: Add "Desktop Action" support
  * l10n: Update Polish translation
  * Fix Danish spelling
  * plugin-tray: Fix dupe icon display error
  * Don't export github templates
  * Use worldclock by default instead of clock.
  * clock: Show deprecation message on startup/add
  * Fix clock text update
  * Avoid calling text() in MatchAction on a QAction == 0
  * volume: Do check for OSS availability in run-time
  * Update Polish .desktop entry
  * Remove space from end of "Show popup on mouse hover " string
  * Updated Lithuanian translation
  * Add/update Lithuanian translation
  * Update directorymenu_it.desktop
  * mainmenu: Don't hold the references for menu-cache
  * mainmenu: Fix menu-cache usage
  * set Qt::AA_UseHighDpiPixmaps to true
  * l10n: Updated Polish translation
  * Improved lxqt-panel version display
  * Added default CMAKE_BUILD_TYPE and LXQT_PANEL_PATCH_VERSION
  * plugins: Make widgets/buttons use whole space
  * LXQtPanelLayout: Honor item's expanding size policy
  * mainmenu: Install eventFiler for all (sub)menus
  * volume: Add all changes notifications (configurable)
  * Fixes a FTBFS in superbuild mode
  * Added merged autostart and menu to CMakeLists.txt
  * Updated *_da.desktop files and removed *_da_DK.desktop files
  * translation: Add Portugese directories
  * Update desktop entries and Replace fr_FR by fr
  * Merge pull request #45 from lxde/menu-comment
  * lxqt-applications.menu: remove accidentally added topics from "System Tools"
  * Update Greek translation (el) Remove country variant from language code
  * Rename LxQt to LXQt everywhere
  * CMake: Adds Runtime and Devel install COMPONENTs
  * Coding style changes
  * Adds double quotes to everything that may break
  * Use GNUINnstallDirs
  * Updates the build system to use the Targets infrastructure
  * Place LXQt About over Preferences in the main menu
  * Added italian translation in menu
  * Added german translation for the settings directory.
  * Drops hardcoded /etc/xdg paths
  * menu: hungarian translations added
  * Add Russian translation
  * Restore the old preferences menu layout of razor-qt.
  * Updated german translation, replaced Qt4 by Qt in all xsession/translations
  * add lxqt-leave directory files
  * use LXQt-specific menu file
  * Updates translations infrastructure
  * Update the required minimum cmake version
  * remove dead template lines switch OnlyShowIn from Razor -&gt; LXQt stringchanges LxQt -&gt; LXQt
  * Support lxqt-session and add necessary xdg autostart desktop entry files.
  * Fit the task group to its contents
  * mainmenu: Add "true" translucency support
  * Show "unknown" when an icon is missing
  * volume: Force step for wheel over popup slider
  * volume: Always show tooltip over button
  * volume: Force configured step for wheel over button
  * volume: Use "override" keyword
  * Enable translucency for taskbar group popup
  * tray: Move tray icon window into correct place
  * taskbar: Elide texts of buttons when needed
  * volume: Fix calculating of alsa volume
  * volume: Remove duplicated code
  * volume: Fix reporting of pulse volume
  * sysstat: Fix saving of network maximum speed
  * mainmenu: Redesign config dialog
  * mainmenu: Clear search upon show (configurable)
  * plugin-kbindicator: Undef the "explicit" workaround
  * plugin-sysstat: Avoid "set but unused var" warning
  * panel: Make space reserve on display configurable
  * panel: Add wrong logic warning
  * panel: Hide correctly upon the DragLeave
  * plugin-mount: Fix firing the actions
  * plugin-mount: Notify just on "real" add/remove
  * plugin: Save settings before signal connect
  * taskbar: Add Meta+1..9 shortcuts to raise windows
  * Bump year
- Remove 0001-lxqt_panel_override_explicit_keyword.patch: upstreamed</changelog>
  <changelog author="mvetter@suse.com" date="1509969600">- Use pkg-config to determine cflags:
  SR#535177 changed the location of xkbcommon-x11.h.
  So far the path was hardcoded, now use pkg-config to determine
  the actual path.</changelog>
  <changelog author="mvetter@suse.com" date="1530619200">- bsc#1043608: lxqt-panel volume plugin should call pavucontrol-qt
  instead of pavucontrol
- Add lxqt-panel-0.11.0-pavucontrol.patch</changelog>
</package>
<package pkgid="b50a41d0f40ba8785447cbe700c4264fb53adef2a90f3077ce0c47ddd01718bf" name="lxqt-panel" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="andrea@opensuse.org" date="1399982400">- spec file clean up for factoy</changelog>
  <changelog author="andrea@opensuse.org" date="1399982401">- Build all plugins adding sensors and libstatgrab to buildrequires</changelog>
  <changelog author="sfalken@opensuse.org" date="1412337600">- Added:
  * 0001-fix_plugin_mount.patch
  * 0002-fix_plugin_volume.patch
  * 0003-fix_plugin_worldclock.patch
  * 0004-fix_plugin_kbindicator.patch
  * 0005-fix_plugin_dom.patch
  * Patches added to fix buildfailure caused by undefined references, and new default build flags in cmake (gh#lxde/lxde-qt#288)</changelog>
  <changelog author="andrea@opensuse.org" date="1414238400">- new upstream version 0.8.0</changelog>
  <changelog author="andrea@opensuse.org" date="1415880000">- added lxmenu-data</changelog>
  <changelog author="andrea@opensuse.org" date="1416398400">- fixed license tag</changelog>
  <changelog author="sfalken@opensuse.org" date="1422273600">- Added conditionals to enable Fedora Builds</changelog>
  <changelog author="sfalken@opensuse.org" date="1423483200">- New upstream version 0.9.0
- Added -lang subpackage
- Dropped Patches:
  + lxqt-panel-0.8.0_fix_lxqt-mount_headers.patch
  + lxqt-panel-0.8.0_fix_undefined_reference.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1424433600">- Changed %build and %include to use cmake macros
- Added Patches:
  + lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  + lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch</changelog>
  <changelog author="mvetter@suse.com" date="1436443200">- Use correct name "lxqt" instead of "lxde-qt"</changelog>
  <changelog author="mvetter@suse.com" date="1446811200">- Upstream release 0.10.0
  We have to compile it with -DKBINDICATOR_PLUGIN=No -DMOUNT_PLUGIN=No
  for now because we have problems otherwise.
  Deleted patches:
  - lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  - lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch
  Not needed anymore</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1447070400">- Added no-undefined.patch: include sources which export used functions
- Added xkbcommon-includes.patch: explicitly add include path for
  xkbcommon headers, otherwise they are picked up accidentally
- Enable mount and kbindicator plugins</changelog>
  <changelog author="mvetter@suse.com" date="1450872000">- Use lxmenu-data to have a working panel menu (fonts etc).</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Use pkgconfig to require libxkbcommon-x11-devel
- Require lxqt-mount to have mounter option working</changelog>
  <changelog author="dimstar@opensuse.org" date="1464782400">- Add lxqt-panel-xcb-1.12.patch: Fix linking with libxcb-1.12:
  we use xcb symbols by ourselves, so we are also responsible to
  link libxcb.</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Update README.md: Reflect changes introduced in 1c22479
  * CMakeLists: Fail for unmet dependencies
  * mainmenu: Remove setting base style in StyleChange
  * mainmenu: Workaround transparent search
  * mainmenu: Dispose old menu first when building new
  * Add README.md
  * sensors: Add default bar scale
  * sensors: Check for existence of the max value
  * sensors: Add minor code optimization
  * mainmenu: Handle QAction disposal correctly
  * panel: Don't use autoFillBackground
  * Plugin: Fix FTBFS for older Qt versions
  * mainmenu: Fix show/hide actions after menu rebuild
  * Statusnotifier: Remove setParent on StatusNotifierMenu.
  * Add XKB_COMMON_X11_INCLUDE_DIRS
  * panel: Remove/deprecate plugin-screensaver (#363)
  * Add and Update Arabic Translations for Desktop Files
  * Fix updating panel geometry on screen size change
  * panel: Fix screen number config change saving
  * Separate a String for I18N Enhancement
  * plugin: Force config dialog activation/raise
  * plugin: Fix crossreferencing of config dialogs
  * panel: Dispose unneeded menu
  * panel: Destroy panel's config dialog
  * showPopupMenu: Remove extraneous setParent() call (#359)
  * statusnotifier: fix popup position on right click
  * desktopswitch: Take layoutDirection into account
  * taskbar: Remove orientation specific logic for DnD
  * LXQtPanelLayout: Take layoutDirection into account
  * taskbar: Remove forgotten debug
  * taskbar: Consider layoutDirection for DnD
  * panel: Optimize search a bit
  * plugin-volume: Avoid an buffer overflow
  * Respect the OnlyShowIn property for menu entries when using menu-cache (#351)
  * kbindicator-plugin: fix linking with libxcb-1.12
  * plugin-volume: Handle errors when trying to determine the next card
  * Clean up CMakeLists.txt
  * plugin/directorymenu: Removes no use code (#350)
  * build: Forward translations parameters
  * ts-files removal (#346)
  * Fix memory leaks
  * Use const references with the foreach iterator
  * Small fix
  * statusnotifier: Fix showing icons in menu
  * kbindicator: (Re)Add .desktop translations
  * Update desktopswitchconfiguration.ui
  * panel: (Re)Add translations dir
  * Revert unintended *.desktop files removal
  * Remove translations (can be pulled in build time)
  * Use external translations
  * Update lxqt-panel_it.ts
  * Add documentation/comments for PanelPluginsModel.
  * Fix segfault on plugin initialization (#338)
  * translations: updated german translation (#323)
  * plugin-mainmenu: update mainmenu_it.ts (#337)
  * Russian translation update
  * mainmenu: Use style sheet to override icon
  * plugins: Change "repolish" logic
  * mainmenu: Reduce delay of popup when using shortcut
  * volume: Remove debug
  * plugins: Don't unload -&gt; avoid dangling resources
  * Added new translated strings.
  * Added missing context for lupdate.
  * Updated german translation.
  * Ask for confirmation when removing a panel
  * panel: Add "Lock Panel" functionality
  * fix updating panel geometry on screen changes
  * Try find a free position when adding a new panel
  * LXQtPanelApplication: Use D-Pointers
  * Animate auto-hiding panels.
  * Add QT_USE_QSTRINGBUILDER to the compile definitions
  * tray: Fix SEGFAULT on stop
  * mainmenu: Fix visual search problems
  * mainmenu: Remove duplicates from search
  * mainmenu: Add new configuration options for search
  * mainmenu: Workadound QLineEdit's wakups(QTBUG-52021)
  * mainmenu: Add configurable way of search
  * taskbar: separate adding from changing windows
  * plugins: Make buttons flat for cleaner look
  * mainmenu: Fix search interacion
  * mainmenu: Add search/hide possibility
  * taskbar: Add show icon by WindowClass to config
  * taskbar: Use icon from theme (based on windowClass)
  * panellayout: Do not allow oversized plugins
  * panellayout: Avoid plugin margins
  * PluginSettings: Make settings object/class public
  * Bump year Fix licenses: lxqt-panel is pure LGPL
  * worldclock: Fix possible SEGFAULT
  * Add comments for ILXQtPanel and LXQtPanel.
  * plugin-taskbar: fix German translation of configuration dialogue
  * panel: Correct PanelPluginsModel logic
  * volume: Avoid infinite cycle in config dialog
  * plugins: Use "cleaner" style logic
  * mainmenu: Remove unneeded includes
  * mainmenu: Fix freeze for some widget styles (e.g. breeze)
  * tray: Fix "BadDamage" warning message
  * tray: Postpone tray icon initialization
  * PluginSettings: Emit settingsChanged only for owned keys
  * taskbar: Fix (auto)hide after window menu is shown
  * mainmenu: Use directory of current icon for search
  * mainmenu: Fix showing icon path in configuration
  * plugin-taskbar: avoid icon-only style for groups
  * statusnotifier: fix position of context menus
  * plugin-quicklaunch: remove preset applications
  * plugin-tray: Fix native window sizes for high DPI devices
  * taskbar: Refactor/improove window handling logic
  * taskbar: Fix multiple groups when WindowClass changes
  * plugin settings: Publish PluginSettings symbols
  * Add support for nested groups in PluginSettings
  * Add PluginSettings::{read,set}Array for atomicity
  * Add PluginSettings for shared settings for plugins
  * plugins config: remove a lot of redundant code
  * LXQtPanelPluginConfigDialog: add ctor overload
  * Update lxqt-panel_fr_FR.ts
  * Create HR translations for panel and plugins
  * lxqt-panel: Update/format and install man page
  * plugin-kbindicator: remove ru_RU translations
  * plugin-kbindicator: add russian translations
  * Update Russian translations for the panel and plugins
  * Italian translation update
  * Updated german translation.
  * Adds comments for lxqtpanelapplication.h.
  * Correct some minor spelling mistakes.
  * panel-config: Fix background opacity slider
  * taskbar: Avoid "noop" button if window ID changes
  * mainmenu: Fix URL assembly for Drag&amp;Drop
  * panel: Fill background
  * mainmenu: Use configurable icon
  * worldclock: Fix update interval
  * panel: Add periodic hide checking
  * clock: Fix content update if transform/autorotate
  * quicklaunch: Fix panel hiding upon showing menu
  * worldclock: Decrease (unnecessary) wake-ups
  * panel: Remove periodic checking for hide
  * Prevent panel hiding in case any (standalone) window shown
  * plugins: Unify window popup-ing
  * directorymenu: Fix indentation (spaces)
  * panel: Use override for overriden virt func
  * hu translations fixed
  * plugin-sysstat: translations fix
  * desktop-switch: Hightlight only windows in taskbar
  * fix misspelled prefered
- Add keyring
- Remove xkbcommon-includes.patch: upstreamed
- Remove: lxqt-panel-xcb-1.12.patch upstreamed
- Remove: no-undefined.patch instead pass
  - DCMAKE_MODULE_LINKER_FLAGS="-Wl,--as-needed -Wl,-z,now" to
  cmake to not have the --no-undefined which doesnt make sense here
  since the symbol is in the binary and not in a library.</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Show Auto-Hiding Panels with Delay (#387)
  * Enabling testing on weston (#380)
  * Update *da.desktop files
  * plugin-showdesktop: Cleanup left behind XCB artifacts
  * plugin-kbindicator: Use FindXCB CMake module
  * plugin-tray: Use the FindXCB CMake module
  * Use the new lxqt-build-tools CMake modules (FindMenuCache)
  * plugin-desktopswitch: Add LABEL_TYPE_NONE
  * Add/Update Portugese translations
  * taskbar: Add "cycle on wheel" configuration
  * taskbar: Forward wheelEvent
  * Add/Update french desktop entries
  * taskbar: Set toolButtonStyle for popup correctly
  * Fix faulty link in README.md
  * Remove arbitrary limit of taskbar button width
  * Remove cpack (#371)
- Added 0001-lxqt_panel_override_explicit_keyword.patch
  * Fixes compile errors  https://github.com/lxde/lxqt/issues/1251
- Added CXXFLAGS change from X11:LXQT:git for libxkbcommon-x11</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set patch version
  * quicklaunch: Show popup menu aligned to clicked button
  * quicklaunch: Add "Desktop Action" support
  * l10n: Update Polish translation
  * Fix Danish spelling
  * plugin-tray: Fix dupe icon display error
  * Don't export github templates
  * Use worldclock by default instead of clock.
  * clock: Show deprecation message on startup/add
  * Fix clock text update
  * Avoid calling text() in MatchAction on a QAction == 0
  * volume: Do check for OSS availability in run-time
  * Update Polish .desktop entry
  * Remove space from end of "Show popup on mouse hover " string
  * Updated Lithuanian translation
  * Add/update Lithuanian translation
  * Update directorymenu_it.desktop
  * mainmenu: Don't hold the references for menu-cache
  * mainmenu: Fix menu-cache usage
  * set Qt::AA_UseHighDpiPixmaps to true
  * l10n: Updated Polish translation
  * Improved lxqt-panel version display
  * Added default CMAKE_BUILD_TYPE and LXQT_PANEL_PATCH_VERSION
  * plugins: Make widgets/buttons use whole space
  * LXQtPanelLayout: Honor item's expanding size policy
  * mainmenu: Install eventFiler for all (sub)menus
  * volume: Add all changes notifications (configurable)
  * Fixes a FTBFS in superbuild mode
  * Added merged autostart and menu to CMakeLists.txt
  * Updated *_da.desktop files and removed *_da_DK.desktop files
  * translation: Add Portugese directories
  * Update desktop entries and Replace fr_FR by fr
  * Merge pull request #45 from lxde/menu-comment
  * lxqt-applications.menu: remove accidentally added topics from "System Tools"
  * Update Greek translation (el) Remove country variant from language code
  * Rename LxQt to LXQt everywhere
  * CMake: Adds Runtime and Devel install COMPONENTs
  * Coding style changes
  * Adds double quotes to everything that may break
  * Use GNUINnstallDirs
  * Updates the build system to use the Targets infrastructure
  * Place LXQt About over Preferences in the main menu
  * Added italian translation in menu
  * Added german translation for the settings directory.
  * Drops hardcoded /etc/xdg paths
  * menu: hungarian translations added
  * Add Russian translation
  * Restore the old preferences menu layout of razor-qt.
  * Updated german translation, replaced Qt4 by Qt in all xsession/translations
  * add lxqt-leave directory files
  * use LXQt-specific menu file
  * Updates translations infrastructure
  * Update the required minimum cmake version
  * remove dead template lines switch OnlyShowIn from Razor -&gt; LXQt stringchanges LxQt -&gt; LXQt
  * Support lxqt-session and add necessary xdg autostart desktop entry files.
  * Fit the task group to its contents
  * mainmenu: Add "true" translucency support
  * Show "unknown" when an icon is missing
  * volume: Force step for wheel over popup slider
  * volume: Always show tooltip over button
  * volume: Force configured step for wheel over button
  * volume: Use "override" keyword
  * Enable translucency for taskbar group popup
  * tray: Move tray icon window into correct place
  * taskbar: Elide texts of buttons when needed
  * volume: Fix calculating of alsa volume
  * volume: Remove duplicated code
  * volume: Fix reporting of pulse volume
  * sysstat: Fix saving of network maximum speed
  * mainmenu: Redesign config dialog
  * mainmenu: Clear search upon show (configurable)
  * plugin-kbindicator: Undef the "explicit" workaround
  * plugin-sysstat: Avoid "set but unused var" warning
  * panel: Make space reserve on display configurable
  * panel: Add wrong logic warning
  * panel: Hide correctly upon the DragLeave
  * plugin-mount: Fix firing the actions
  * plugin-mount: Notify just on "real" add/remove
  * plugin: Save settings before signal connect
  * taskbar: Add Meta+1..9 shortcuts to raise windows
  * Bump year
- Remove 0001-lxqt_panel_override_explicit_keyword.patch: upstreamed</changelog>
  <changelog author="mvetter@suse.com" date="1509969600">- Use pkg-config to determine cflags:
  SR#535177 changed the location of xkbcommon-x11.h.
  So far the path was hardcoded, now use pkg-config to determine
  the actual path.</changelog>
  <changelog author="mvetter@suse.com" date="1530619200">- bsc#1043608: lxqt-panel volume plugin should call pavucontrol-qt
  instead of pavucontrol
- Add lxqt-panel-0.11.0-pavucontrol.patch</changelog>
</package>
<package pkgid="e3e3285ee7533c537bd049942ea62868e4cdc06968c08be7e120f5fe4426379e" name="lxqt-panel-devel" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="andrea@opensuse.org" date="1399982400">- spec file clean up for factoy</changelog>
  <changelog author="andrea@opensuse.org" date="1399982401">- Build all plugins adding sensors and libstatgrab to buildrequires</changelog>
  <changelog author="sfalken@opensuse.org" date="1412337600">- Added:
  * 0001-fix_plugin_mount.patch
  * 0002-fix_plugin_volume.patch
  * 0003-fix_plugin_worldclock.patch
  * 0004-fix_plugin_kbindicator.patch
  * 0005-fix_plugin_dom.patch
  * Patches added to fix buildfailure caused by undefined references, and new default build flags in cmake (gh#lxde/lxde-qt#288)</changelog>
  <changelog author="andrea@opensuse.org" date="1414238400">- new upstream version 0.8.0</changelog>
  <changelog author="andrea@opensuse.org" date="1415880000">- added lxmenu-data</changelog>
  <changelog author="andrea@opensuse.org" date="1416398400">- fixed license tag</changelog>
  <changelog author="sfalken@opensuse.org" date="1422273600">- Added conditionals to enable Fedora Builds</changelog>
  <changelog author="sfalken@opensuse.org" date="1423483200">- New upstream version 0.9.0
- Added -lang subpackage
- Dropped Patches:
  + lxqt-panel-0.8.0_fix_lxqt-mount_headers.patch
  + lxqt-panel-0.8.0_fix_undefined_reference.patch</changelog>
  <changelog author="sfalken@opensuse.org" date="1424433600">- Changed %build and %include to use cmake macros
- Added Patches:
  + lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  + lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch</changelog>
  <changelog author="mvetter@suse.com" date="1436443200">- Use correct name "lxqt" instead of "lxde-qt"</changelog>
  <changelog author="mvetter@suse.com" date="1446811200">- Upstream release 0.10.0
  We have to compile it with -DKBINDICATOR_PLUGIN=No -DMOUNT_PLUGIN=No
  for now because we have problems otherwise.
  Deleted patches:
  - lxqt-panel-0.9.0_fix_lxqtmount_include.patch
  - lxqt-panel-0.9.0_add_libxcb_to_cmakelist.patch
  Not needed anymore</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1447070400">- Added no-undefined.patch: include sources which export used functions
- Added xkbcommon-includes.patch: explicitly add include path for
  xkbcommon headers, otherwise they are picked up accidentally
- Enable mount and kbindicator plugins</changelog>
  <changelog author="mvetter@suse.com" date="1450872000">- Use lxmenu-data to have a working panel menu (fonts etc).</changelog>
  <changelog author="mvetter@suse.com" date="1464091200">- Use pkgconfig to require libxkbcommon-x11-devel
- Require lxqt-mount to have mounter option working</changelog>
  <changelog author="dimstar@opensuse.org" date="1464782400">- Add lxqt-panel-xcb-1.12.patch: Fix linking with libxcb-1.12:
  we use xcb symbols by ourselves, so we are also responsible to
  link libxcb.</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Update README.md: Reflect changes introduced in 1c22479
  * CMakeLists: Fail for unmet dependencies
  * mainmenu: Remove setting base style in StyleChange
  * mainmenu: Workaround transparent search
  * mainmenu: Dispose old menu first when building new
  * Add README.md
  * sensors: Add default bar scale
  * sensors: Check for existence of the max value
  * sensors: Add minor code optimization
  * mainmenu: Handle QAction disposal correctly
  * panel: Don't use autoFillBackground
  * Plugin: Fix FTBFS for older Qt versions
  * mainmenu: Fix show/hide actions after menu rebuild
  * Statusnotifier: Remove setParent on StatusNotifierMenu.
  * Add XKB_COMMON_X11_INCLUDE_DIRS
  * panel: Remove/deprecate plugin-screensaver (#363)
  * Add and Update Arabic Translations for Desktop Files
  * Fix updating panel geometry on screen size change
  * panel: Fix screen number config change saving
  * Separate a String for I18N Enhancement
  * plugin: Force config dialog activation/raise
  * plugin: Fix crossreferencing of config dialogs
  * panel: Dispose unneeded menu
  * panel: Destroy panel's config dialog
  * showPopupMenu: Remove extraneous setParent() call (#359)
  * statusnotifier: fix popup position on right click
  * desktopswitch: Take layoutDirection into account
  * taskbar: Remove orientation specific logic for DnD
  * LXQtPanelLayout: Take layoutDirection into account
  * taskbar: Remove forgotten debug
  * taskbar: Consider layoutDirection for DnD
  * panel: Optimize search a bit
  * plugin-volume: Avoid an buffer overflow
  * Respect the OnlyShowIn property for menu entries when using menu-cache (#351)
  * kbindicator-plugin: fix linking with libxcb-1.12
  * plugin-volume: Handle errors when trying to determine the next card
  * Clean up CMakeLists.txt
  * plugin/directorymenu: Removes no use code (#350)
  * build: Forward translations parameters
  * ts-files removal (#346)
  * Fix memory leaks
  * Use const references with the foreach iterator
  * Small fix
  * statusnotifier: Fix showing icons in menu
  * kbindicator: (Re)Add .desktop translations
  * Update desktopswitchconfiguration.ui
  * panel: (Re)Add translations dir
  * Revert unintended *.desktop files removal
  * Remove translations (can be pulled in build time)
  * Use external translations
  * Update lxqt-panel_it.ts
  * Add documentation/comments for PanelPluginsModel.
  * Fix segfault on plugin initialization (#338)
  * translations: updated german translation (#323)
  * plugin-mainmenu: update mainmenu_it.ts (#337)
  * Russian translation update
  * mainmenu: Use style sheet to override icon
  * plugins: Change "repolish" logic
  * mainmenu: Reduce delay of popup when using shortcut
  * volume: Remove debug
  * plugins: Don't unload -&gt; avoid dangling resources
  * Added new translated strings.
  * Added missing context for lupdate.
  * Updated german translation.
  * Ask for confirmation when removing a panel
  * panel: Add "Lock Panel" functionality
  * fix updating panel geometry on screen changes
  * Try find a free position when adding a new panel
  * LXQtPanelApplication: Use D-Pointers
  * Animate auto-hiding panels.
  * Add QT_USE_QSTRINGBUILDER to the compile definitions
  * tray: Fix SEGFAULT on stop
  * mainmenu: Fix visual search problems
  * mainmenu: Remove duplicates from search
  * mainmenu: Add new configuration options for search
  * mainmenu: Workadound QLineEdit's wakups(QTBUG-52021)
  * mainmenu: Add configurable way of search
  * taskbar: separate adding from changing windows
  * plugins: Make buttons flat for cleaner look
  * mainmenu: Fix search interacion
  * mainmenu: Add search/hide possibility
  * taskbar: Add show icon by WindowClass to config
  * taskbar: Use icon from theme (based on windowClass)
  * panellayout: Do not allow oversized plugins
  * panellayout: Avoid plugin margins
  * PluginSettings: Make settings object/class public
  * Bump year Fix licenses: lxqt-panel is pure LGPL
  * worldclock: Fix possible SEGFAULT
  * Add comments for ILXQtPanel and LXQtPanel.
  * plugin-taskbar: fix German translation of configuration dialogue
  * panel: Correct PanelPluginsModel logic
  * volume: Avoid infinite cycle in config dialog
  * plugins: Use "cleaner" style logic
  * mainmenu: Remove unneeded includes
  * mainmenu: Fix freeze for some widget styles (e.g. breeze)
  * tray: Fix "BadDamage" warning message
  * tray: Postpone tray icon initialization
  * PluginSettings: Emit settingsChanged only for owned keys
  * taskbar: Fix (auto)hide after window menu is shown
  * mainmenu: Use directory of current icon for search
  * mainmenu: Fix showing icon path in configuration
  * plugin-taskbar: avoid icon-only style for groups
  * statusnotifier: fix position of context menus
  * plugin-quicklaunch: remove preset applications
  * plugin-tray: Fix native window sizes for high DPI devices
  * taskbar: Refactor/improove window handling logic
  * taskbar: Fix multiple groups when WindowClass changes
  * plugin settings: Publish PluginSettings symbols
  * Add support for nested groups in PluginSettings
  * Add PluginSettings::{read,set}Array for atomicity
  * Add PluginSettings for shared settings for plugins
  * plugins config: remove a lot of redundant code
  * LXQtPanelPluginConfigDialog: add ctor overload
  * Update lxqt-panel_fr_FR.ts
  * Create HR translations for panel and plugins
  * lxqt-panel: Update/format and install man page
  * plugin-kbindicator: remove ru_RU translations
  * plugin-kbindicator: add russian translations
  * Update Russian translations for the panel and plugins
  * Italian translation update
  * Updated german translation.
  * Adds comments for lxqtpanelapplication.h.
  * Correct some minor spelling mistakes.
  * panel-config: Fix background opacity slider
  * taskbar: Avoid "noop" button if window ID changes
  * mainmenu: Fix URL assembly for Drag&amp;Drop
  * panel: Fill background
  * mainmenu: Use configurable icon
  * worldclock: Fix update interval
  * panel: Add periodic hide checking
  * clock: Fix content update if transform/autorotate
  * quicklaunch: Fix panel hiding upon showing menu
  * worldclock: Decrease (unnecessary) wake-ups
  * panel: Remove periodic checking for hide
  * Prevent panel hiding in case any (standalone) window shown
  * plugins: Unify window popup-ing
  * directorymenu: Fix indentation (spaces)
  * panel: Use override for overriden virt func
  * hu translations fixed
  * plugin-sysstat: translations fix
  * desktop-switch: Hightlight only windows in taskbar
  * fix misspelled prefered
- Add keyring
- Remove xkbcommon-includes.patch: upstreamed
- Remove: lxqt-panel-xcb-1.12.patch upstreamed
- Remove: no-undefined.patch instead pass
  - DCMAKE_MODULE_LINKER_FLAGS="-Wl,--as-needed -Wl,-z,now" to
  cmake to not have the --no-undefined which doesnt make sense here
  since the symbol is in the binary and not in a library.</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Show Auto-Hiding Panels with Delay (#387)
  * Enabling testing on weston (#380)
  * Update *da.desktop files
  * plugin-showdesktop: Cleanup left behind XCB artifacts
  * plugin-kbindicator: Use FindXCB CMake module
  * plugin-tray: Use the FindXCB CMake module
  * Use the new lxqt-build-tools CMake modules (FindMenuCache)
  * plugin-desktopswitch: Add LABEL_TYPE_NONE
  * Add/Update Portugese translations
  * taskbar: Add "cycle on wheel" configuration
  * taskbar: Forward wheelEvent
  * Add/Update french desktop entries
  * taskbar: Set toolButtonStyle for popup correctly
  * Fix faulty link in README.md
  * Remove arbitrary limit of taskbar button width
  * Remove cpack (#371)
- Added 0001-lxqt_panel_override_explicit_keyword.patch
  * Fixes compile errors  https://github.com/lxde/lxqt/issues/1251
- Added CXXFLAGS change from X11:LXQT:git for libxkbcommon-x11</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set patch version
  * quicklaunch: Show popup menu aligned to clicked button
  * quicklaunch: Add "Desktop Action" support
  * l10n: Update Polish translation
  * Fix Danish spelling
  * plugin-tray: Fix dupe icon display error
  * Don't export github templates
  * Use worldclock by default instead of clock.
  * clock: Show deprecation message on startup/add
  * Fix clock text update
  * Avoid calling text() in MatchAction on a QAction == 0
  * volume: Do check for OSS availability in run-time
  * Update Polish .desktop entry
  * Remove space from end of "Show popup on mouse hover " string
  * Updated Lithuanian translation
  * Add/update Lithuanian translation
  * Update directorymenu_it.desktop
  * mainmenu: Don't hold the references for menu-cache
  * mainmenu: Fix menu-cache usage
  * set Qt::AA_UseHighDpiPixmaps to true
  * l10n: Updated Polish translation
  * Improved lxqt-panel version display
  * Added default CMAKE_BUILD_TYPE and LXQT_PANEL_PATCH_VERSION
  * plugins: Make widgets/buttons use whole space
  * LXQtPanelLayout: Honor item's expanding size policy
  * mainmenu: Install eventFiler for all (sub)menus
  * volume: Add all changes notifications (configurable)
  * Fixes a FTBFS in superbuild mode
  * Added merged autostart and menu to CMakeLists.txt
  * Updated *_da.desktop files and removed *_da_DK.desktop files
  * translation: Add Portugese directories
  * Update desktop entries and Replace fr_FR by fr
  * Merge pull request #45 from lxde/menu-comment
  * lxqt-applications.menu: remove accidentally added topics from "System Tools"
  * Update Greek translation (el) Remove country variant from language code
  * Rename LxQt to LXQt everywhere
  * CMake: Adds Runtime and Devel install COMPONENTs
  * Coding style changes
  * Adds double quotes to everything that may break
  * Use GNUINnstallDirs
  * Updates the build system to use the Targets infrastructure
  * Place LXQt About over Preferences in the main menu
  * Added italian translation in menu
  * Added german translation for the settings directory.
  * Drops hardcoded /etc/xdg paths
  * menu: hungarian translations added
  * Add Russian translation
  * Restore the old preferences menu layout of razor-qt.
  * Updated german translation, replaced Qt4 by Qt in all xsession/translations
  * add lxqt-leave directory files
  * use LXQt-specific menu file
  * Updates translations infrastructure
  * Update the required minimum cmake version
  * remove dead template lines switch OnlyShowIn from Razor -&gt; LXQt stringchanges LxQt -&gt; LXQt
  * Support lxqt-session and add necessary xdg autostart desktop entry files.
  * Fit the task group to its contents
  * mainmenu: Add "true" translucency support
  * Show "unknown" when an icon is missing
  * volume: Force step for wheel over popup slider
  * volume: Always show tooltip over button
  * volume: Force configured step for wheel over button
  * volume: Use "override" keyword
  * Enable translucency for taskbar group popup
  * tray: Move tray icon window into correct place
  * taskbar: Elide texts of buttons when needed
  * volume: Fix calculating of alsa volume
  * volume: Remove duplicated code
  * volume: Fix reporting of pulse volume
  * sysstat: Fix saving of network maximum speed
  * mainmenu: Redesign config dialog
  * mainmenu: Clear search upon show (configurable)
  * plugin-kbindicator: Undef the "explicit" workaround
  * plugin-sysstat: Avoid "set but unused var" warning
  * panel: Make space reserve on display configurable
  * panel: Add wrong logic warning
  * panel: Hide correctly upon the DragLeave
  * plugin-mount: Fix firing the actions
  * plugin-mount: Notify just on "real" add/remove
  * plugin: Save settings before signal connect
  * taskbar: Add Meta+1..9 shortcuts to raise windows
  * Bump year
- Remove 0001-lxqt_panel_override_explicit_keyword.patch: upstreamed</changelog>
  <changelog author="mvetter@suse.com" date="1509969600">- Use pkg-config to determine cflags:
  SR#535177 changed the location of xkbcommon-x11.h.
  So far the path was hardcoded, now use pkg-config to determine
  the actual path.</changelog>
  <changelog author="mvetter@suse.com" date="1530619200">- bsc#1043608: lxqt-panel volume plugin should call pavucontrol-qt
  instead of pavucontrol
- Add lxqt-panel-0.11.0-pavucontrol.patch</changelog>
</package>
<package pkgid="fbca651306cb8993a6de821cf138ca6fd9b59fb54e9ceb3ad871e57697bfe8ca" name="lxqt-sudo" arch="src">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1440331200">- initial package for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1446638400">- Git build was done by aaz2011@mail.ru
- Setting minimum Cmake version</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Add README.md
  * build: Forward translations parameters
  * ts-files removal (#21)
  * Remove translations (will be pulled in build time)
  * Bump year
  * Italian translation update
  * Updated Russian translation Fix language and typos
  * Add Russian translation
- Add keyring</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Make CMakeLists.txt more uniform.</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set informal patch version
  * Added basic .gitattributes
  * Drops Qt5Core_VERSION_STRING
  * set Qt::AA_UseHighDpiPixmaps to true
  * Bump year</changelog>
  <changelog author="mvetter@suse.com" date="1532606400">- bsc#1100871: Fix layout problem with CJK by setting the
  locale to C
- Add lxqt-sudo-0.13.0-locale-env.patch</changelog>
</package>
<package pkgid="7de77d7120c25942832cd5f811373f7f1f832cc386a94d861dab4cc079fd2d49" name="lxqt-sudo" arch="x86_64">
  <version epoch="0" ver="0.12.0" rel="lp150.2.3.1"/>
  <changelog author="and.november@opensuse.org" date="1440331200">- initial package for openSUSE</changelog>
  <changelog author="mvetter@suse.com" date="1446638400">- Git build was done by aaz2011@mail.ru
- Setting minimum Cmake version</changelog>
  <changelog author="mvetter@suse.com" date="1474718400">- Update to 0.11.0:
  * Add README.md
  * build: Forward translations parameters
  * ts-files removal (#21)
  * Remove translations (will be pulled in build time)
  * Bump year
  * Italian translation update
  * Updated Russian translation Fix language and typos
  * Add Russian translation
- Add keyring</changelog>
  <changelog author="sfalken@opensuse.org" date="1487937600">- Update to 0.11.1:
  * Make CMakeLists.txt more uniform.</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Update to 0.12.0:
  * Set informal patch version
  * Added basic .gitattributes
  * Drops Qt5Core_VERSION_STRING
  * set Qt::AA_UseHighDpiPixmaps to true
  * Bump year</changelog>
  <changelog author="mvetter@suse.com" date="1532606400">- bsc#1100871: Fix layout problem with CJK by setting the
  locale to C
- Add lxqt-sudo-0.13.0-locale-env.patch</changelog>
</package>
<package pkgid="83c7d34c6375678bb68d8f0442cc170f9df146ca64b77217880fc3065e86348b" name="mailman" arch="src">
  <version epoch="0" ver="2.1.27" rel="lp150.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1351080000">- update to 2.1.15
  * fixes CVE-2011-0707 - patch dropped
  * better CSRF protection
  * better e-mail address validation
  * password reminder button
  * new config options
  * updated translations
- dropped mailman-python24 patch as we no longer care
  about python2.4
- replaced %run_permissions in spec</changelog>
  <changelog author="dmueller@suse.com" date="1392120000">- do not abort post script if postalias fails</changelog>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix pre script for usage with more recent postfix versions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dmueller@suse.com" date="1511784000">- remove distributable flag (which is always true):
  drops SuSEconfig.mailman-SuSE, mailman-SuSE.patch, mailman-SuSE2.patch</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1521115200">- update to 2.1.26
  * An XSS vulnerability in the user options CGI could allow a crafted
    URL to execute arbitrary javascript in a user's browser.  A
    related issue could expose information on a user's options page
    without requiring login. (CVE-2018-5950) bsc#1077358
  * Google reCAPTCHA v2
  * New bin/mailman-config command to display various information
    about this Mailman version and how it was configured.
  * bug fixes, i18n updates
  * for further details see NEWS
- updato to 2.1.25
  * The admindb held subscriptions listing now includes the date of the
    most recent request from the address.
  * bug fixes, i18n updates
  * for further details see NEWS
- update to 2.1.24
  * bug fixes, i18n updates
  * for further details see NEWS
- Rename and refresh patch:
  * mailman-2.1.2-list_lists.patch to mailman-2.1.26-list_lists.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Sort out with spec-cleaner
- Use direct paths in post scriptlets and properly state their deps
- Do not attempt user creation during build, fails anyway
- Use proper user creation code in scriptlets</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Fix install prefix for some of the files
- Install license file</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530187200">- update to 2.1.27
  * Existing protections against malicious listowners injecting evil
    scripts into listinfo pages have had a few more checks added.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * A few more error messages have had their values HTML escaped.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * The hash generated when SUBSCRIBE_FORM_SECRET is set could have been
    the same as one generated at the same time for a different list and
    IP address.  While this is not thought to be exploitable in any way,
    the generation has been changed to avoid this.
  * An option has been added to bin/add_members to issue invitations
    instead of immediately adding members.
  * A new BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE setting has been added to
    enable blocking web subscribes from IPv4 addresses listed in Spamhaus
    SBL, CSS or XBL.  It will work with IPv6 addresses if Python's
    py2-ipaddress module is installed.  The module can be installed via pip
    if not included in your Python.
  * Mailman has a new 'security' log and logs
    authentication failures to the various web CGI functions.  The logged
    data include the remote IP and can be used to automate blocking of IPs
    with something like fail2ban.  Since Mailman 2.1.14, these have returned
    an http 401 status and the information should be logged by the web
    server, but this new log makes that more convenient.  Also, the
    'mischief' log entries for 'hostile listname' noe include the remote IP
    if available.
  * admin notices of (un)subscribes now may give
    the source of the action.  This consists of a %(whence)s replacement
    that has been added to the admin(un)subscribeack.txt templates.  Thanks
    to Yasuhito FUTATSUKI for updating the non-English templates and help
    with internationalizing the reasons.
  * there is a new
    BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE setting to enable blocking web
    subscribes for addresses in domains listed in the Spamhaus DBL.
  * i18n &amp; Bugfixes
  * for further details see NEWS</changelog>
</package>
<package pkgid="df9e7ab802ea49f8239ac5d6c8cf43c161d69ff54a102ab81293dd275842f251" name="mailman" arch="x86_64">
  <version epoch="0" ver="2.1.27" rel="lp150.2.3.1"/>
  <changelog author="jmatejek@suse.com" date="1351080000">- update to 2.1.15
  * fixes CVE-2011-0707 - patch dropped
  * better CSRF protection
  * better e-mail address validation
  * password reminder button
  * new config options
  * updated translations
- dropped mailman-python24 patch as we no longer care
  about python2.4
- replaced %run_permissions in spec</changelog>
  <changelog author="dmueller@suse.com" date="1392120000">- do not abort post script if postalias fails</changelog>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix pre script for usage with more recent postfix versions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dmueller@suse.com" date="1511784000">- remove distributable flag (which is always true):
  drops SuSEconfig.mailman-SuSE, mailman-SuSE.patch, mailman-SuSE2.patch</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1521115200">- update to 2.1.26
  * An XSS vulnerability in the user options CGI could allow a crafted
    URL to execute arbitrary javascript in a user's browser.  A
    related issue could expose information on a user's options page
    without requiring login. (CVE-2018-5950) bsc#1077358
  * Google reCAPTCHA v2
  * New bin/mailman-config command to display various information
    about this Mailman version and how it was configured.
  * bug fixes, i18n updates
  * for further details see NEWS
- updato to 2.1.25
  * The admindb held subscriptions listing now includes the date of the
    most recent request from the address.
  * bug fixes, i18n updates
  * for further details see NEWS
- update to 2.1.24
  * bug fixes, i18n updates
  * for further details see NEWS
- Rename and refresh patch:
  * mailman-2.1.2-list_lists.patch to mailman-2.1.26-list_lists.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Sort out with spec-cleaner
- Use direct paths in post scriptlets and properly state their deps
- Do not attempt user creation during build, fails anyway
- Use proper user creation code in scriptlets</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Fix install prefix for some of the files
- Install license file</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530187200">- update to 2.1.27
  * Existing protections against malicious listowners injecting evil
    scripts into listinfo pages have had a few more checks added.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * A few more error messages have had their values HTML escaped.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * The hash generated when SUBSCRIBE_FORM_SECRET is set could have been
    the same as one generated at the same time for a different list and
    IP address.  While this is not thought to be exploitable in any way,
    the generation has been changed to avoid this.
  * An option has been added to bin/add_members to issue invitations
    instead of immediately adding members.
  * A new BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE setting has been added to
    enable blocking web subscribes from IPv4 addresses listed in Spamhaus
    SBL, CSS or XBL.  It will work with IPv6 addresses if Python's
    py2-ipaddress module is installed.  The module can be installed via pip
    if not included in your Python.
  * Mailman has a new 'security' log and logs
    authentication failures to the various web CGI functions.  The logged
    data include the remote IP and can be used to automate blocking of IPs
    with something like fail2ban.  Since Mailman 2.1.14, these have returned
    an http 401 status and the information should be logged by the web
    server, but this new log makes that more convenient.  Also, the
    'mischief' log entries for 'hostile listname' noe include the remote IP
    if available.
  * admin notices of (un)subscribes now may give
    the source of the action.  This consists of a %(whence)s replacement
    that has been added to the admin(un)subscribeack.txt templates.  Thanks
    to Yasuhito FUTATSUKI for updating the non-English templates and help
    with internationalizing the reasons.
  * there is a new
    BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE setting to enable blocking web
    subscribes for addresses in domains listed in the Spamhaus DBL.
  * i18n &amp; Bugfixes
  * for further details see NEWS</changelog>
</package>
<package pkgid="2e2f4c1ada22c53fd2c56a9374155f546c8033690c2af687324a90f962b06649" name="mailman" arch="src">
  <version epoch="0" ver="2.1.29" rel="lp150.2.8.1"/>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix pre script for usage with more recent postfix versions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dmueller@suse.com" date="1511784000">- remove distributable flag (which is always true):
  drops SuSEconfig.mailman-SuSE, mailman-SuSE.patch, mailman-SuSE2.patch</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1521115200">- update to 2.1.26
  * An XSS vulnerability in the user options CGI could allow a crafted
    URL to execute arbitrary javascript in a user's browser.  A
    related issue could expose information on a user's options page
    without requiring login. (CVE-2018-5950) bsc#1077358
  * Google reCAPTCHA v2
  * New bin/mailman-config command to display various information
    about this Mailman version and how it was configured.
  * bug fixes, i18n updates
  * for further details see NEWS
- updato to 2.1.25
  * The admindb held subscriptions listing now includes the date of the
    most recent request from the address.
  * bug fixes, i18n updates
  * for further details see NEWS
- update to 2.1.24
  * bug fixes, i18n updates
  * for further details see NEWS
- Rename and refresh patch:
  * mailman-2.1.2-list_lists.patch to mailman-2.1.26-list_lists.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Sort out with spec-cleaner
- Use direct paths in post scriptlets and properly state their deps
- Do not attempt user creation during build, fails anyway
- Use proper user creation code in scriptlets</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Fix install prefix for some of the files
- Install license file</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530187200">- update to 2.1.27
  * Existing protections against malicious listowners injecting evil
    scripts into listinfo pages have had a few more checks added.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * A few more error messages have had their values HTML escaped.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * The hash generated when SUBSCRIBE_FORM_SECRET is set could have been
    the same as one generated at the same time for a different list and
    IP address.  While this is not thought to be exploitable in any way,
    the generation has been changed to avoid this.
  * An option has been added to bin/add_members to issue invitations
    instead of immediately adding members.
  * A new BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE setting has been added to
    enable blocking web subscribes from IPv4 addresses listed in Spamhaus
    SBL, CSS or XBL.  It will work with IPv6 addresses if Python's
    py2-ipaddress module is installed.  The module can be installed via pip
    if not included in your Python.
  * Mailman has a new 'security' log and logs
    authentication failures to the various web CGI functions.  The logged
    data include the remote IP and can be used to automate blocking of IPs
    with something like fail2ban.  Since Mailman 2.1.14, these have returned
    an http 401 status and the information should be logged by the web
    server, but this new log makes that more convenient.  Also, the
    'mischief' log entries for 'hostile listname' noe include the remote IP
    if available.
  * admin notices of (un)subscribes now may give
    the source of the action.  This consists of a %(whence)s replacement
    that has been added to the admin(un)subscribeack.txt templates.  Thanks
    to Yasuhito FUTATSUKI for updating the non-English templates and help
    with internationalizing the reasons.
  * there is a new
    BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE setting to enable blocking web
    subscribes for addresses in domains listed in the Spamhaus DBL.
  * i18n &amp; Bugfixes
  * for further details see NEWS</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1532433600">- update to 2.1.28:
  * A content spoofing vulnerability with invalid list name messages in
    the web UI has been fixed.  CVE-2018-13796 bsc#1101288
  * It is now possible to edit HTML and text templates via the web admin
    UI in a supported language other than the list's preferred_language.
  * The Japanese translation has been updated
  * The German translation has been updated
  * The Esperanto translation has been updated
  * The BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE feature added in 2.1.27 was
    not working.  This is fixed.
  * Escaping of HTML entities for the web UI is now done more selectively.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1533297600">- update to 2.1.29:
  * Fixed the listinfo and admin overview pages that were broken</changelog>
</package>
<package pkgid="43aa215abed2ccbc2f94ce06418ae6bb6c37947ec3bb02e2b5cca481fcd326cb" name="mailman" arch="x86_64">
  <version epoch="0" ver="2.1.29" rel="lp150.2.8.1"/>
  <changelog author="jmatejek@suse.com" date="1392379200">- rename README.SuSE
- update to 2.1.17
  * option to strip/keep non-standard headers in anonymous lists
  * option to make membership checks on mail-news gateway
  * UI improvements for admin interface
  * digest_size_threshold = 0 now means that *no* digest is sent
    based on size
  * option to CSRF-protect subscription form
  * admins can add members with mail delivery disabled
  * configurable name of master lock
  * updated translations
- updated list_lists patch because upstream list_lists now has
  an argument -p / --public-archive that does the same as SUSE-specific
  argument -u / --public-archives. Both spellings are supported
  and are synonymous.</changelog>
  <changelog author="hsk@imb-jena.de" date="1413547200">- update to 2.1.18
  * mailman now requires dnspython
  * new dmarc_moderation_action feature and corresponging list and default
    settings
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1425297600">- update to 2.1.19
  * backports from 2.2 development branch
  - new list attribute 'subscribe_auto_approval'
  - added 'automate' option to bin/newlist
  - processing of Topics regular expressions has changed
  - added real name display to the web roster, controlled by new
    ROSTER_DISPLAY_REALNAME setting
  - bug fixes
  * new list attribute dmarc_wrapped_message_text and
    DEFAULT_DMARC_WRAPPED_MESSAGE_TEXT setting
  * new list attribute equivalent_domains and DEFAULT_EQUIVALENT_DOMAINS
    setting
  * new WEB_HEAD_ADD setting
  * new DEFAULT_SUBSCRIBE_OR_INVITE setting
  * new list attribute bounce_notify_owner_on_bounce_increment and
    DEFAULT_BOUNCE_NOTIFY_OWNER_ON_BOUNCE_INCREMENT setting
  * log files, request.pck files and heldmsg-* files are no longer created
    world readable
  * i18n updates
  * bug fixes</changelog>
  <changelog author="hsk@imb-jena.de" date="1427803200">- update to 2.1.20
  * fix for CVE-2015-2775 (path traversal vulnerability)
  * new Address Change sub-section in the web admin Membership
    Management section
  * translation updates and bug fixes</changelog>
  <changelog author="mpluskal@suse.com" date="1454500800">- Use url for source
- Add gpg signature</changelog>
  <changelog author="hsk@imb-jena.de" date="1456747200">- update to 2.1.21
  * new dmarc_none_moderation_action list setting
  * new feature to automatically turn on moderation for single list
    members (spam prevention)
  * new mm_cfg.py setting GLOBAL_BAN_LIST
  * translation updates and bug fixes
  * for more details see NEWS and Mailman/Defaults.py
- mailman-2.1.4-dirmode.patch: adjusted to 2.1.21</changelog>
  <changelog author="hsk@imb-jena.de" date="1459252800">- updated mailman-apache2.conf to support "require" syntax of recent
  apache httpd</changelog>
  <changelog author="hsk@imb-jena.de" date="1460980800">- update to 2.1.22
  * bug fixes, i18n updates; for details see NEWS</changelog>
  <changelog author="hsk17@mail.de" date="1472472000">- update to 2.1.23
  * CSRF protection in user options page (CVE-2016-6893)
  * header_filter_rules matching: headers and patterns are all
    decoded to unicode
  * another possible REMOVE_DKIM_HEADERS setting
  * SMTPDirect.py can now do SASL authentication and STARTTLS
  * bug fixes, i18n updates
  * for further details see NEWS</changelog>
  <changelog author="kukuk@suse.de" date="1487592000">- Require fillup and insserv if we call them</changelog>
  <changelog author="kukuk@suse.de" date="1490011200">- Require system user wwwrun</changelog>
  <changelog author="dimstar@opensuse.org" date="1498737600">- Fix pre script for usage with more recent postfix versions.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dmueller@suse.com" date="1511784000">- remove distributable flag (which is always true):
  drops SuSEconfig.mailman-SuSE, mailman-SuSE.patch, mailman-SuSE2.patch</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1521115200">- update to 2.1.26
  * An XSS vulnerability in the user options CGI could allow a crafted
    URL to execute arbitrary javascript in a user's browser.  A
    related issue could expose information on a user's options page
    without requiring login. (CVE-2018-5950) bsc#1077358
  * Google reCAPTCHA v2
  * New bin/mailman-config command to display various information
    about this Mailman version and how it was configured.
  * bug fixes, i18n updates
  * for further details see NEWS
- updato to 2.1.25
  * The admindb held subscriptions listing now includes the date of the
    most recent request from the address.
  * bug fixes, i18n updates
  * for further details see NEWS
- update to 2.1.24
  * bug fixes, i18n updates
  * for further details see NEWS
- Rename and refresh patch:
  * mailman-2.1.2-list_lists.patch to mailman-2.1.26-list_lists.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1521201600">- Sort out with spec-cleaner
- Use direct paths in post scriptlets and properly state their deps
- Do not attempt user creation during build, fails anyway
- Use proper user creation code in scriptlets</changelog>
  <changelog author="tchvatal@suse.com" date="1521460800">- Fix install prefix for some of the files
- Install license file</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1530187200">- update to 2.1.27
  * Existing protections against malicious listowners injecting evil
    scripts into listinfo pages have had a few more checks added.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * A few more error messages have had their values HTML escaped.
    JVN#00846677/JPCERT#97432283/CVE-2018-0618 (boo#1099510)
  * The hash generated when SUBSCRIBE_FORM_SECRET is set could have been
    the same as one generated at the same time for a different list and
    IP address.  While this is not thought to be exploitable in any way,
    the generation has been changed to avoid this.
  * An option has been added to bin/add_members to issue invitations
    instead of immediately adding members.
  * A new BLOCK_SPAMHAUS_LISTED_IP_SUBSCRIBE setting has been added to
    enable blocking web subscribes from IPv4 addresses listed in Spamhaus
    SBL, CSS or XBL.  It will work with IPv6 addresses if Python's
    py2-ipaddress module is installed.  The module can be installed via pip
    if not included in your Python.
  * Mailman has a new 'security' log and logs
    authentication failures to the various web CGI functions.  The logged
    data include the remote IP and can be used to automate blocking of IPs
    with something like fail2ban.  Since Mailman 2.1.14, these have returned
    an http 401 status and the information should be logged by the web
    server, but this new log makes that more convenient.  Also, the
    'mischief' log entries for 'hostile listname' noe include the remote IP
    if available.
  * admin notices of (un)subscribes now may give
    the source of the action.  This consists of a %(whence)s replacement
    that has been added to the admin(un)subscribeack.txt templates.  Thanks
    to Yasuhito FUTATSUKI for updating the non-English templates and help
    with internationalizing the reasons.
  * there is a new
    BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE setting to enable blocking web
    subscribes for addresses in domains listed in the Spamhaus DBL.
  * i18n &amp; Bugfixes
  * for further details see NEWS</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1532433600">- update to 2.1.28:
  * A content spoofing vulnerability with invalid list name messages in
    the web UI has been fixed.  CVE-2018-13796 bsc#1101288
  * It is now possible to edit HTML and text templates via the web admin
    UI in a supported language other than the list's preferred_language.
  * The Japanese translation has been updated
  * The German translation has been updated
  * The Esperanto translation has been updated
  * The BLOCK_SPAMHAUS_LISTED_DBL_SUBSCRIBE feature added in 2.1.27 was
    not working.  This is fixed.
  * Escaping of HTML entities for the web UI is now done more selectively.</changelog>
  <changelog author="liedke@rz.uni-mannheim.de" date="1533297600">- update to 2.1.29:
  * Fixed the listinfo and admin overview pages that were broken</changelog>
</package>
<package pkgid="5e0b432fe2ec75614a211706c394d8b88f2a1b2e521b6f9742136974b62318f0" name="mariadb" arch="src">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="48d8d5165ca52d9fd8dbdd2b051cf48e73ce76dbc34108d690aaaa3aad5a1775" name="mariadb" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="3325560d92898fc7bf03c3febeeb11f9048e606b340d3b2da01e7dec81f226b2" name="mariadb-bench" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="43c6be2836f5c5359575063dd8af623bbb8f12430f34d82343e96c25a8f16a1b" name="mariadb-client" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="5d18797d2dc1f13b831988e078ca9aedb1a1ef060edc22bf6803777a5964b026" name="mariadb-errormessages" arch="noarch">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="9da8a8308dbc4301bc6be4c4e34f9652b2e2bc932628094a3f79e016c58bf965" name="mariadb-galera" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="72ac48505d187d9e2881909ec42bb72842b2c43247ca79a32204009def53572a" name="mariadb-test" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="170dd63f1ccd7f1123f739b31615cfa9d1ca6607bd4ec65df3828151746a46eb" name="mariadb-tools" arch="x86_64">
  <version epoch="0" ver="10.2.15" rel="lp150.2.3.2"/>
  <changelog author="kstreitova@suse.com" date="1499688000">- update to MariaDB 10.1.25 GA
  * notable changes
  * MariaDB can no longer be compiled with OpenSSL version 0.9.8
    and below. The last 0.9.8 release was in December 2015, it is
    out of support and is no longer getting security fixes.
  * MariaDB Backup is now beta
  * release notes and changelog:
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-release-notes
  * https://mariadb.com/kb/en/mariadb/mariadb-10125-changelog
  * refresh mariadb-10.1.12-fortify-and-O.patch
  * remove mariadb-10.1.22-xtradb_null_checks.patch (MDEV-12358),
    a fix was merged upstream
  * update file lists for new man-pages and tools
- switch from 'Restart=on-failure' to 'Restart=on-abort' in
  mysql.service in order to follow the upstream</changelog>
  <changelog author="vcizek@suse.com" date="1505822400">- Explicitly require libopenssl-1_0_0-devel, to successfully build
  once we switch openssl to 1.1 (bsc#1042632)</changelog>
  <changelog author="bwiedemann@suse.com" date="1509019200">- Drop INFO_BIN from package because it is not needed
  and differs for every build (boo#1047218)</changelog>
  <changelog author="vcizek@suse.com" date="1509451200">- Also Require: libopenssl-1_0_0-devel from the libmysqlclient-devel package</changelog>
  <changelog author="kstreitova@suse.com" date="1509451201">- update to 10.2.10 GA
  * release notes and changelogs
    https://downloads.mariadb.org/mariadb/+releases/
  * fixes for the following security vulnerabilities
  * 10.2.10: CVE-2017-10378, CVE-2017-10268, CVE-2017-15365
  * 10.2.8:  CVE-2017-3636, CVE-2017-3641, CVE-2017-3653,
    CVE-2017-10320, CVE-2017-10365, CVE-2017-10379,
    CVE-2017-10384, CVE-2017-10286, CVE-2017-3257
  * 10.2.6:  CVE-2017-3308, CVE-2017-3309, CVE-2017-3453,
    CVE-2017-3456, CVE-2017-3464
  * 10.2.5:  CVE-2017-3313, CVE-2017-3302
  * [bsc#1042632], [bsc#1043328], [bsc#1019948], [fate#323738]
- refresh and rename the following patches:
  * mariadb-10.1.4-group.patch to
    mariadb-10.2.3-group.patch
  * mariadb-10.1.16-systemd-cmake.patch to
    mariadb-10.2.8-systemd-cmake.patch
  * mariadb-10.1.18-mysql_install_db-mariadb_dirs.patch to
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
  * mariadb-10.1.12-fortify-and-O.patch to
    mariadb-10.2.4-fortify-and-O.patch
  * mysql-community-server-5.1.46-logrotate.patch to
    mariadb-10.2.4-logrotate.patch
- add mariadb-10.2.10.tar.gz.sig signature and mariadb.keyring files
- start building without client library part, use
  mariadb-connector-c for getting libmariadb libraries. Remove
  libmysclient* packages
- remove baselibs.conf because we no longer build client libraries
  here
- update %{soname} to 19 (libmysqld soname)
- change '=' to '&gt;=' in  Requires:mariadb-errormessages for
  libmysqld%{soname}. Versioned libraries shouldn't require regular
  packages with '='. It also causes problems during update (Problem:
  libmysqld18-10.1.25-3.1.x86_64 requires mariadb-errormessages = 10.1.25,
  but this requirement cannot be provided).
  Also add "Provides: mariadb-errormessages = 10.1.25" for errormessages
  subpackage that solves this problem for the current update.
- pack new files, remove mysql specific files
- remove README.SUSE as it was outdated
- package cleaning
  * run spec-cleaner
  * renumber sources
  * reorganize subpackages order and update summaries, descriptions
    and groups
  * tweak and add some comments to the specfile
  * remove warning about mysql-packaging repository that is no longer
    used for this package
  * remove checks whether we build mysql or mariadb (we build mariadb
    only)
- add galera subpackage
  * add missing "Requires:" (lsof, net-tools, rsync, socat,
    xtrabackup) for proper wsrep scripts functionality
  * add mariadb-10.2.9-galera_cnf.patch that enhances galera.cnf
    configuration file (add wsrep_on=OFF and set the location
    of the wsrep library)
  * rename README-wsrep to README.wsrep so it corresponds with the
    other README names
  * move galera_new_cluster, galera_recovery,
    use_galera_new_cluster.conf, wsrep_* scripts to the galera
    subpackage
- remove the following macros definitions:
  * %{_tmpfilesdir} - it's been defined in systemd macros since
    openSUSE 13.2
  * %{preferred} - we no longer need to distinguish between preferred
    and not preferred version (we build mariadb only)
  * %{with_mandatory_lz4} - mysql specific
  * %{build_extras}, %{pretty_name}, %{build_readline},
    %{builtin_plugins} and {libname} - they are no longer needed
- add the following macros
  * %{run_testsuite} macro that controls the run of the regression
    testsuite
  * %{ignore_testsuite_result} macro - when set to 1 it ignores
    results from the regression testsuite (debug purposes)
  * %{with_mroonga} macro (enable mroonga build for x86_64 archs only)
- rename %{with_jemalloc} to %{with_tokudb} and enable tokudb for
  x86_64 architectures for openSUSE and SLE15 [fate#323280]. Don't
  enable it for SLE12 (missing jemalloc dependency)
- add the following BuildRequires:
  * unixODBC-devel to allow ODBC support for Connect engine [bsc#1039034]
  * krb5-devel to build auth_gssapi.so plugin
  * libarchive-devel
  * use libboost_headers-devel instead of boost-devel for TW. Boost
    package has been split up and will migrate to using multibuild.
    This results in packages that unnecessarily build require
    boost-devel to cause major bottlenecks [bsc#1062583]
- do not use "BuildRequires: lzo-devel" for i586 and arm because
  it makes build fail
- add the following Requires:
  * hostname - as mariadb_install_db depends on this tool [bsc#1060110]
  * libaio-devel for libmysqld-devel because libmysqld depends
    on libaio
- tweak build options:
  * remove "DWITH_ASAN=OFF" - this option was added because of mysql
    and it's no longer needed
  * switch from "-DWITH_JEMALLOC=auto" to "-DWITH_JEMALLOC=system"
  * use "DCMAKE_SKIP_INSTALL_RPATH" - this allows to link with -rpath
    during build and fixes quite a few test suite failures. When
    installing the file -rpath is still disabled, so this should
    not have any effect on the installed binaries
  * add "-DWITH_LIBARCHIVE=ON" and "-DWITH_MARIABACKUP=ON"
  * remove -DWITH_BOOST=../boost/ as we use system boost now
- enable OQGRAPH to build (openSUSE only, SLE is missing Judy
  requirement)
- disable Cassandra storage engine build as it's no longer actively
  being developed (See MDEV-4695) [bsc#1055165]
  * Remove "BuildRequires: libthrift-devel" and %{with_cassandra}
    macros that are no longer needed now
- disable make test (Connector/C unit tests) as it requires a
  running server. These tests are part of mysql-test-run
  now (MDEV-12470)
- add suse_skipped_tests.list - the list of the tests that we want
  to skip (they fail correctly or the fix is in progress)
  * adjust mysql-test-run options to skip tests listed there
    [bsc#1041891]
- remove mytop utility that is packaged separately
- remove *.jar files from mysql-test
- remove python scripts remains from tokudb upstream
- remove generating of the MySQL NDB Cluster filelists
- remove removing of manpages for MySQL Carrier Grade Edition
- provide a symlink for the my_safe_process executable that was
  moved from its location to bindir
- update filename in /var/adm/update-messages to match
  documentation and build-compare pattern
- README is now README.md
- fix "file listed twice" build error</changelog>
  <changelog author="vcizek@suse.com" date="1511956800">- Disable openssl compatibility checking
  * the check uses CRYPTO_set_mem_functions() to set debugging
    memory allocation function. The setting only succeeds if no allocation
    was done before. Our fips self-tests, which are run from the library
    constructor, however, do allocate memory, so the subsequent call to
    CRYPTO_set_mem_functions causes the compatibility check to fail
  * add mariadb-10.2.10-disable_openssl_compatibility_check.patch</changelog>
  <changelog author="rhafer@suse.de" date="1511956801">- Added mariadb-10.2.10-wsrep_sst_common.patch (bsc#1069401).
  Upstream bug: https://jira.mariadb.org/browse/MDEV-14256</changelog>
  <changelog author="kstreitova@suse.com" date="1512043200">- update to 10.2.11 GA
  * release notes and changelog:
  * https://mariadb.com/kb/en/library/mariadb-10211-release-notes/
  * https://mariadb.com/kb/en/library/mariadb-10211-changelog/
- pack additional mroonga/groonga files
- change default charset to utf8mb4 for full Unicode support
  [fate#324329]
- remove mariadb-10.2.10-wsrep_sst_common.patch as it's no longer
  needed</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Do not manually delete
  %{_localstatedir}/adm/update-messages/%{name}-%{version}-%{release}-something:
  The file is listed as ghost and thus properly owned by the
  package.
- Use %tmpfiles_create which can cope with transactional updates.</changelog>
  <changelog author="kstreitova@suse.com" date="1514894400">- switch from deprecated 'net-tools' to 'iproute2' for
  mariadb-galera subpackage. This dependency switch is sufficient
  for making wsrep_sst_rsync.sh script to use 'ip' instead of
  'ifconfig' command</changelog>
  <changelog author="kstreitova@suse.com" date="1515153600">- update to 10.2.12 GA
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10212-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10212-changelog/
- remove mysql-community-server-5.5.6-safe-process-in-bin.patch
  becuase this moving is done in the specfile
- get rid of the archive with patches (remove mysql-patches.tar.xz
  and series files), handle patches in the standard way
    mysql-community-server-5.1.45-multi-configuration.patch
    mariadb-10.2.4-logrotate.patch
    mariadb-5.5.28-install_db-quiet.patch
    mariadb-10.1.1-mysqld_multi-features.patch
    mariadb-5.2.3-cnf.patch
    mariadb-10.2.3-group.patch
    mariadb-10.1.12-deharcode-libdir.patch
    mariadb-10.0.15-logrotate-su.patch
    mariadb-10.2.4-fortify-and-O.patch
    mariadb-10.2.8-systemd-cmake.patch
    mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch
    mariadb-10.2.9-galera_cnf.patch
    mariadb-10.2.10-disable_openssl_compatibility_check.patch
- add comments to the section with removing unused files (based on
  https://lists.launchpad.net/maria-developers/msg11028.html)
- put rm statements together
- install the new upstream systemd-tmpfiles configuration file
  'tmpfiles.conf' and rename it to 'mariadb.conf' in order to
  follow the manual
- remove the new upstream systemd-sysusers configuration file as
  we handle creating of mysql user in the specfile
- mysql.service: remove calling of the wait function and let
  systemd to do this job. Switch from 'Type=simple' to
  'Type=notify' and add TimeoutSec=300
- rename unit files from mysql to mariadb and add mysql alias for
  the backward compatibility [bsc#1067443]
  * mysql.service -&gt; mariadb.service
  * mysql.target -&gt; mariadb.target
  * mysql@.service -&gt; mariadb@.service
- remove configuration-tweaks.tar.xz and move configuration to
  my.ini/my.cnf file (omit default_plugins.cnf as all
  configuration here was commented out)
- add a numeric prefix for galera.cnf file in order to allow users
  to speficy in which order the configs will be loaded within the
  my.cnf.d directory [bsc#1055268]
- add 'bind-address = 127.0.0.1' as a default option to my.cnf file
  for security reasons (disable MariaDB to listen for TCP/IP
  connections by default) [bsc#1058374]
- update my.cnf file and add a section with SSL configuration
  [bsc#1058374]</changelog>
  <changelog author="kstreitova@suse.com" date="1516363200">- change owner of mysql-test directory from root to mysql. It also
  fixes sys_vars.secure_file_priv running under mysql user (e.g.
  if ít's started via suse-test-run script) that needs to be able
  to create a test file there during its run [bsc#1012075]</changelog>
  <changelog author="dmueller@suse.com" date="1518436800">- add dependency on which for galera scripts</changelog>
  <changelog author="kstreitova@suse.com" date="1518609600">- update to 10.2.13 GA
  * notable changes
  * InnoDB updated to 5.7.21
  * Galera wsrep library updated to 25.3.23
  * MDEV-13869 - MariaDB slow start
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY
  * MDEV-15249 - Crash in MVCC read after IMPORT TABLESPACE
  * Foreign key bugs:
  * MDEV-15199 - Referential integrity broken in ON DELETE
    CASCADE/MDEV-14222 Unnecessary 'cascade' memory allocation
    for every updated row
  * MDEV-15219 - FOREIGN KEY CASCADE or SET NULL operations will
    not resume after lock wait
  * MDEV-15042 - INSERT ON DUPLICATE KEY UPDATE produces error
    1032 (Can't find record)
  * MDEV-13205 - InnoDB: Failing assertion:
    !dict_index_is_online_ddl(index) upon ALTER TABLE
  * MDEV-14958 - Merge new release of InnoDB MySQL 5.7.21 to 10.2
  * MDEV-15165 - InnoDB purge for index on virtual column is
    trying to access an incomplete record
  * MDEV-15143 - InnoDB: Rollback of trx with id 0 completed
  * MDEV-11415 - Remove excessive undo logging during ALTER
    TABLE?ALGORITHM=COPY
  * MDEV-15016 - multiple page cleaner threads use a lot of CPU
  * MDEV-14941 - Timeouts on persistent statistics tables caused
    by MDEV-14511
  * MDEV-14985 - innodb_undo_log_truncate may be blocked if
    transactions were recovered at startup
  * MDEV-14441 - InnoDB hangs when setting
    innodb_adaptive_hash_index=OFF during UPDATE
  * MDEV-14887 - On a 32-bit system, MariaDB 10.2 mishandles
    data file sizes exceeding 4GiB
  * fixes for the following security vulnerabilities:
  * CVE-2018-2562, CVE-2018-2622, CVE-2018-2640, CVE-2018-2665,
    CVE-2018-2668, CVE-2018-2612
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10213-release-notes/
    https://mariadb.com/kb/en/library/mariadb-10213-changelog/
  * fixes [bsc#1058729] and [bsc#1068906]
- refresh mariadb-10.2.10-disable_openssl_compatibility_check.patch
- refresh mariadb-10.2.3-group.patch</changelog>
  <changelog author="rsalevsky@suse.com" date="1519732800">- add mariadb-10.2.14-xtrabackup-v2.patch (bsc#1083087)</changelog>
  <changelog author="ro@suse.de" date="1520942400">- fix build on aarch64: compile a few more files with -O0
  from https://jira.mariadb.org/browse/MDEV-14318
  add patch mariadb-10.2.13-aarch_compilefix.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1521201600">- change %{extra_provides} macro from "mariadb_102" to "mariadb-102"
  and use this macro in Provides/Obsoletes for mariadb, test,
  tools, bench and errormessages subpackages to ensure a smooth
  transition from SLE12 to SLE15 [fate#323756]
- remove "Provides: mariadb-errormessages = 10.1.25" that shouldn't
  be needed anymore</changelog>
  <changelog author="kstreitova@suse.com" date="1525089600">- update to 10.2.14 GA
  * notable changes:
  * MyRocks is now Gamma (RC)
  * MDEV-14533 - Added the DISKS plugin, for monitoring disk
    space
  * MDEV-14611 - ALTER TABLE EXCHANGE PARTITION does not work
    properly when used with DATA DIRECTORY.
  * MDEV-15333 - MariaDB (still) slow start
  * MDEV-12255 - Wrong result with
    innodb_prefix_index_cluster_optimization
  * MDEV-12396 - IMPORT TABLESPACE cleanup
  * MDEV-14648 - Restore fix for MySQL BUG#39053 - UNINSTALL
    PLUGIN does not allow the storage engine to cleanup open
    connections
  * MDEV-15249 - IMPORT fixes
  * MDEV-14988 - innodb_read_only tries to modify files if
    transactions were recovered in COMMITTED state
  * MDEV-14773 - DROP TABLE hangs for InnoDB table with FULLTEXT
    index (fixing a recent regression from upstream)
  * MDEV-15529 - IMPORT TABLESPACE unnecessarily uses the
    doublewrite buffer
  * MDEV-15554 - InnoDB page_cleaner shutdown sometimes hangs
  * MDEV-14545 - Mariabackup - Backup fails due to
    MLOG_INDEX_LOAD record
  * fixes for the following security vulnerabilities: none
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10214-release-notes
    https://mariadb.com/kb/en/library/mariadb-10214-changelog
- remove the following patches
  * mariadb-10.2.14-xtrabackup-v2.patch (applied upstream,
    MDEV-15254)
  * mariadb-10.2.13-aarch_compilefix.patch (applied upstream,
    MDEV-14318)
  * mariadb-10.2.10-disable_openssl_compatibility_check.patch
    (fixed upstream in https://github.com/MariaDB/server/pull/558)
  * mariadb-10.2.8-systemd-cmake.patch and DWITH_SYSTEMD=ON
    compile option that are no longer needed - systemd is detected
    correctly now (discussed in [bsc#1080891] and MDEV-8379)
  * mariadb-10.2.3-mysql_install_db-mariadb_dirs.patch (fixed
    upstream in 52516706c86f9f66c76836eabde7e2477694bac3)
  * remove mariadb-10.2.3-group.patch that was just a half solution
    of the group support (missing server part) and moreover using
    a group option in mysql-systemd-helper was removed few years ago
    as it caused troubles because MariaDB resolved it as
    'group_concat_max_len option' (see
    https://github.com/openSUSE/mysql-packaging/issues/15)
- remove jar files from the tarball (used for testing from the
  source)
- build TokuDB without the jemalloc support for now. Jemalloc 5
  is not backwards compatible which leads to the errors in the
  testsuite at least (MDEV-15034)
- update suse_skipped_tests.list</changelog>
  <changelog author="kstreitova@suse.com" date="1525089601">- update suse_skipped_tests.list and add failing tests for s390</changelog>
  <changelog author="kstreitova@suse.com" date="1526644800">- update to 10.2.15 GA
  * notable changes:
  * PCRE updated to 8.42
  * The embedded server library now supports SSL when connecting
    to remote servers [bsc#1088681], [CVE-2018-2767]
  * MDEV-15325 - Incomplete validation of missing tablespace
    during recovery
  * MDEV-15720 - ib_buffer_pool unnecessarily includes the
    temporary tablespace
  * MDEV-15764 - InnoDB may write uninitialized garbage to redo
    log
  * MDEV-15553 - Virtual Columns: Assertion failed in
    dict_table_get_col_name
  * MDEV-14705 - slow innodb startup/shutdown can exceed systemd
    timeout
  * MDEV-15507 - Assertion failed in dict_check_sys_tables on
    upgrade from 5.5
  * MDEV-15916 - Change buffer crash during TRUNCATE or
    DROP TABLE
  * encryption fixes - MDEV-12632, MDEV-13516, MDEV-15752,
    MDEV-15566, MDEV-16092
  * temporary table ROLLBACK fixes - MDEV-15826, MDEV-15374
  * applicable changes from 5.7.22 - MDEV-16142
  * fixes for the following security vulnerabilities:
    CVE-2018-2786, CVE-2018-2759, CVE-2018-2777, CVE-2018-2810,
    CVE-2018-2782, CVE-2018-2784, CVE-2018-2787, CVE-2018-2766,
    CVE-2018-2755, CVE-2018-2819, CVE-2018-2817, CVE-2018-2761,
    CVE-2018-2781, CVE-2018-2771, CVE-2018-2813
  * release notes and changelog:
    https://mariadb.com/kb/en/library/mariadb-10215-release-notes
    https://mariadb.com/kb/en/library/mariadb-10215-changelog
- update suse_skipped_tests.list and add tests that are failing
  with GCC 8 [bsc#1092544], MDEV-16127
- do not build TokuDB as a build without jemalloc is not supported
  upstream</changelog>
</package>
<package pkgid="e48481cfd6c3d3711e8c985c798928a82cff2572be5193cddfb3c917fe2d2f1c" name="mate-screensaver" arch="src">
  <version epoch="0" ver="1.20.2" rel="lp150.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Check for running display manager when user switching.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1436788800">- Update to 1.10.2:
  * Fix segfault due to wrong object being destroyed.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444392000">- Update to 1.11.0:
  * Switch to org.gnome.SessionManager.
  * Do not fade to black when locking the screen.
  * manager: fade out explicitly locks more quickly.
  * More improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 1.11.1:
  * Fix systemd event handling.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0:
  * Retrieve strings directly from gschema (requires intltool
    0.50.1).
  * Add support for libsystemd (in addition to libsystemd-login).
  * Some more fixes and cleanups.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Use authentication directly via PAM.
- Do not require xscreensaver-data but recommend.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452513600">- Add missing mate-session-manager-gschemas dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453809600">- Update to version 1.13.0:
  * Gtk3: fix several deprecations.
  * Some more fixes and cleanups.
  * Drop MateConf migration script.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 1.14.1:
  * GTK+-3: Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  * GTK+-3: Add style class lock-dialog.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Fix locking when screensaver is already active.
  * GTK+3: Fix background and locking in multi-monitor setup.
  * GTK+3: Fix several deprecations.
  * Some more fixes and cleanups.
  * Make distcheck use a currently selected GTK+ version
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486296000">- Update to version 1.16.1:
  * Fix build breakage with GTK+ 3.14.
  * Fix "Blank screen" theme with GTK+ 3.22.
  * GTK+2: Fix switching to "Blank screen" theme in the full screen
    preview.
  * Properly restore the password dialogue position after a wrong
    password attempt.
  * Check for a gdm-binary process when switching the user.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: Require libmate-menu &gt;= 1.10.
  * Build: Require libmatekbd and libmate-desktop &gt;= 1.17.
  * Move to GTK+3 (require GTK+ &gt;= 3.14), drop the GTK+2 code and
  - -with-gtk build option.
  * Lock screen: Load user's background instead of the system one.
  * Preferences: Fix some GTK+ deprecations.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492430400">- Update to version 1.18.1:
  * lock-dialog UI: Fix some deprecations.
  * g_get_real_name will never return NULL pointer.
  * screensaver and lock screen not correctly displayed in
    configurations with overlapping monitor geometries.
  * [GTK+3.20] Switch to GdkSeat.
  * Set input purpose for the password entry widget.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.2:
  * Fix loop initial declarations.
  * Drop required max version of glib.
  * Fix idle slider display in all languages.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GTK+ 3.22 and GLib 2.50.
  * Avoid deprecated gdk_screen_get_width/height().
  * Don't use deprecated gtk_show_uri().
  * Implement OpenBSD authentication using bsd_auth(3).
  * copy theme dialogue: Fix the build warning about a wrong
    variable type.
  * An implementation of WidthOfScreen and HeightOfScreen.
  * Restore the correct mate-screensaver-command man page.
  * Add HiDPI support for the lock screen.
  * gs-lock-plug.c: Fix a build warning.
  * Update translations.
- Add mate-screensaver-gtk-3.20.patch: Restore GLib 2.48 and
  GTK+ 3.20 support.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove buildrequires on xorg-x11-devel, dependencies
  were adjusted according to what configure requests and
  what libraries are used by the final executable.</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Remove future aims from description.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529150400">- Update to version 1.20.1:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1536408000">- Update to version 1.20.2:
  * Fix more GdkScreen related deprecations (fixes boo#1098985).
  * lock-plug: Only scale lock-screen widgets on older versions of
    GTK+.
  * Update translations.
- Rebase mate-screensaver-gtk-3.20.patch.</changelog>
</package>
<package pkgid="b8549bb6492e630f23288ab3e01ff09775f10360b109cf1bd96997b58aad9c65" name="mate-screensaver" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="lp150.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Check for running display manager when user switching.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1436788800">- Update to 1.10.2:
  * Fix segfault due to wrong object being destroyed.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444392000">- Update to 1.11.0:
  * Switch to org.gnome.SessionManager.
  * Do not fade to black when locking the screen.
  * manager: fade out explicitly locks more quickly.
  * More improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 1.11.1:
  * Fix systemd event handling.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0:
  * Retrieve strings directly from gschema (requires intltool
    0.50.1).
  * Add support for libsystemd (in addition to libsystemd-login).
  * Some more fixes and cleanups.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Use authentication directly via PAM.
- Do not require xscreensaver-data but recommend.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452513600">- Add missing mate-session-manager-gschemas dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453809600">- Update to version 1.13.0:
  * Gtk3: fix several deprecations.
  * Some more fixes and cleanups.
  * Drop MateConf migration script.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 1.14.1:
  * GTK+-3: Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  * GTK+-3: Add style class lock-dialog.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Fix locking when screensaver is already active.
  * GTK+3: Fix background and locking in multi-monitor setup.
  * GTK+3: Fix several deprecations.
  * Some more fixes and cleanups.
  * Make distcheck use a currently selected GTK+ version
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486296000">- Update to version 1.16.1:
  * Fix build breakage with GTK+ 3.14.
  * Fix "Blank screen" theme with GTK+ 3.22.
  * GTK+2: Fix switching to "Blank screen" theme in the full screen
    preview.
  * Properly restore the password dialogue position after a wrong
    password attempt.
  * Check for a gdm-binary process when switching the user.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: Require libmate-menu &gt;= 1.10.
  * Build: Require libmatekbd and libmate-desktop &gt;= 1.17.
  * Move to GTK+3 (require GTK+ &gt;= 3.14), drop the GTK+2 code and
  - -with-gtk build option.
  * Lock screen: Load user's background instead of the system one.
  * Preferences: Fix some GTK+ deprecations.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492430400">- Update to version 1.18.1:
  * lock-dialog UI: Fix some deprecations.
  * g_get_real_name will never return NULL pointer.
  * screensaver and lock screen not correctly displayed in
    configurations with overlapping monitor geometries.
  * [GTK+3.20] Switch to GdkSeat.
  * Set input purpose for the password entry widget.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.2:
  * Fix loop initial declarations.
  * Drop required max version of glib.
  * Fix idle slider display in all languages.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GTK+ 3.22 and GLib 2.50.
  * Avoid deprecated gdk_screen_get_width/height().
  * Don't use deprecated gtk_show_uri().
  * Implement OpenBSD authentication using bsd_auth(3).
  * copy theme dialogue: Fix the build warning about a wrong
    variable type.
  * An implementation of WidthOfScreen and HeightOfScreen.
  * Restore the correct mate-screensaver-command man page.
  * Add HiDPI support for the lock screen.
  * gs-lock-plug.c: Fix a build warning.
  * Update translations.
- Add mate-screensaver-gtk-3.20.patch: Restore GLib 2.48 and
  GTK+ 3.20 support.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove buildrequires on xorg-x11-devel, dependencies
  were adjusted according to what configure requests and
  what libraries are used by the final executable.</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Remove future aims from description.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529150400">- Update to version 1.20.1:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1536408000">- Update to version 1.20.2:
  * Fix more GdkScreen related deprecations (fixes boo#1098985).
  * lock-plug: Only scale lock-screen widgets on older versions of
    GTK+.
  * Update translations.
- Rebase mate-screensaver-gtk-3.20.patch.</changelog>
</package>
<package pkgid="8f782a0de4f76f36fe292bfa38573785e301470428c3d5f1acfd0bbe1f0e5903" name="mate-screensaver-devel" arch="x86_64">
  <version epoch="0" ver="1.20.2" rel="lp150.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Check for running display manager when user switching.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1436788800">- Update to 1.10.2:
  * Fix segfault due to wrong object being destroyed.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444392000">- Update to 1.11.0:
  * Switch to org.gnome.SessionManager.
  * Do not fade to black when locking the screen.
  * manager: fade out explicitly locks more quickly.
  * More improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 1.11.1:
  * Fix systemd event handling.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0:
  * Retrieve strings directly from gschema (requires intltool
    0.50.1).
  * Add support for libsystemd (in addition to libsystemd-login).
  * Some more fixes and cleanups.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Use authentication directly via PAM.
- Do not require xscreensaver-data but recommend.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452513600">- Add missing mate-session-manager-gschemas dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453809600">- Update to version 1.13.0:
  * Gtk3: fix several deprecations.
  * Some more fixes and cleanups.
  * Drop MateConf migration script.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 1.14.1:
  * GTK+-3: Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  * GTK+-3: Add style class lock-dialog.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Fix locking when screensaver is already active.
  * GTK+3: Fix background and locking in multi-monitor setup.
  * GTK+3: Fix several deprecations.
  * Some more fixes and cleanups.
  * Make distcheck use a currently selected GTK+ version
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486296000">- Update to version 1.16.1:
  * Fix build breakage with GTK+ 3.14.
  * Fix "Blank screen" theme with GTK+ 3.22.
  * GTK+2: Fix switching to "Blank screen" theme in the full screen
    preview.
  * Properly restore the password dialogue position after a wrong
    password attempt.
  * Check for a gdm-binary process when switching the user.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: Require libmate-menu &gt;= 1.10.
  * Build: Require libmatekbd and libmate-desktop &gt;= 1.17.
  * Move to GTK+3 (require GTK+ &gt;= 3.14), drop the GTK+2 code and
  - -with-gtk build option.
  * Lock screen: Load user's background instead of the system one.
  * Preferences: Fix some GTK+ deprecations.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492430400">- Update to version 1.18.1:
  * lock-dialog UI: Fix some deprecations.
  * g_get_real_name will never return NULL pointer.
  * screensaver and lock screen not correctly displayed in
    configurations with overlapping monitor geometries.
  * [GTK+3.20] Switch to GdkSeat.
  * Set input purpose for the password entry widget.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.2:
  * Fix loop initial declarations.
  * Drop required max version of glib.
  * Fix idle slider display in all languages.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GTK+ 3.22 and GLib 2.50.
  * Avoid deprecated gdk_screen_get_width/height().
  * Don't use deprecated gtk_show_uri().
  * Implement OpenBSD authentication using bsd_auth(3).
  * copy theme dialogue: Fix the build warning about a wrong
    variable type.
  * An implementation of WidthOfScreen and HeightOfScreen.
  * Restore the correct mate-screensaver-command man page.
  * Add HiDPI support for the lock screen.
  * gs-lock-plug.c: Fix a build warning.
  * Update translations.
- Add mate-screensaver-gtk-3.20.patch: Restore GLib 2.48 and
  GTK+ 3.20 support.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove buildrequires on xorg-x11-devel, dependencies
  were adjusted according to what configure requests and
  what libraries are used by the final executable.</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Remove future aims from description.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529150400">- Update to version 1.20.1:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1536408000">- Update to version 1.20.2:
  * Fix more GdkScreen related deprecations (fixes boo#1098985).
  * lock-plug: Only scale lock-screen widgets on older versions of
    GTK+.
  * Update translations.
- Rebase mate-screensaver-gtk-3.20.patch.</changelog>
</package>
<package pkgid="4636cac5e2573f0d9391b96cd9a7d3000d1c688a9091ada0f12dc9852b1028cb" name="mate-screensaver-lang" arch="noarch">
  <version epoch="0" ver="1.20.2" rel="lp150.2.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1434110400">- Update to 1.10.1:
  * Check for running display manager when user switching.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1436788800">- Update to 1.10.2:
  * Fix segfault due to wrong object being destroyed.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1444392000">- Update to 1.11.0:
  * Switch to org.gnome.SessionManager.
  * Do not fade to black when locking the screen.
  * manager: fade out explicitly locks more quickly.
  * More improvements.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 1.11.1:
  * Fix systemd event handling.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1446724800">- Update to 1.12.0:
  * Retrieve strings directly from gschema (requires intltool
    0.50.1).
  * Add support for libsystemd (in addition to libsystemd-login).
  * Some more fixes and cleanups.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1448280000">- Use authentication directly via PAM.
- Do not require xscreensaver-data but recommend.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452513600">- Add missing mate-session-manager-gschemas dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453809600">- Update to version 1.13.0:
  * Gtk3: fix several deprecations.
  * Some more fixes and cleanups.
  * Drop MateConf migration script.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1460203200">- Update to version 1.14.0:
  * Update translations.
  * Add Changelog generation.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1463918400">- Update to version 1.14.1:
  * GTK+-3: Fix assertion 'GTK_IS_WIDGET (widget)' failed.
  * GTK+-3: Add style class lock-dialog.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1474372800">- Update to version 1.16.0:
  * Fix locking when screensaver is already active.
  * GTK+3: Fix background and locking in multi-monitor setup.
  * GTK+3: Fix several deprecations.
  * Some more fixes and cleanups.
  * Make distcheck use a currently selected GTK+ version
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1486296000">- Update to version 1.16.1:
  * Fix build breakage with GTK+ 3.14.
  * Fix "Blank screen" theme with GTK+ 3.22.
  * GTK+2: Fix switching to "Blank screen" theme in the full screen
    preview.
  * Properly restore the password dialogue position after a wrong
    password attempt.
  * Check for a gdm-binary process when switching the user.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1489492800">- Update to version 1.18.0:
  * NEWS: Use consistent, project wide, markdown-like formatting to
    make generating release announcements easier.
  * Build: Require libmate-menu &gt;= 1.10.
  * Build: Require libmatekbd and libmate-desktop &gt;= 1.17.
  * Move to GTK+3 (require GTK+ &gt;= 3.14), drop the GTK+2 code and
  - -with-gtk build option.
  * Lock screen: Load user's background instead of the system one.
  * Preferences: Fix some GTK+ deprecations.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1492430400">- Update to version 1.18.1:
  * lock-dialog UI: Fix some deprecations.
  * g_get_real_name will never return NULL pointer.
  * screensaver and lock screen not correctly displayed in
    configurations with overlapping monitor geometries.
  * [GTK+3.20] Switch to GdkSeat.
  * Set input purpose for the password entry widget.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510142400">- Update to version 1.18.2:
  * Fix loop initial declarations.
  * Drop required max version of glib.
  * Fix idle slider display in all languages.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1520596800">- Update to version 1.20.0:
  * Require GTK+ 3.22 and GLib 2.50.
  * Avoid deprecated gdk_screen_get_width/height().
  * Don't use deprecated gtk_show_uri().
  * Implement OpenBSD authentication using bsd_auth(3).
  * copy theme dialogue: Fix the build warning about a wrong
    variable type.
  * An implementation of WidthOfScreen and HeightOfScreen.
  * Restore the correct mate-screensaver-command man page.
  * Add HiDPI support for the lock screen.
  * gs-lock-plug.c: Fix a build warning.
  * Update translations.
- Add mate-screensaver-gtk-3.20.patch: Restore GLib 2.48 and
  GTK+ 3.20 support.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove buildrequires on xorg-x11-devel, dependencies
  were adjusted according to what configure requests and
  what libraries are used by the final executable.</changelog>
  <changelog author="jengelh@inai.de" date="1521028801">- Remove future aims from description.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1529150400">- Update to version 1.20.1:
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1536408000">- Update to version 1.20.2:
  * Fix more GdkScreen related deprecations (fixes boo#1098985).
  * lock-plug: Only scale lock-screen widgets on older versions of
    GTK+.
  * Update translations.
- Rebase mate-screensaver-gtk-3.20.patch.</changelog>
</package>
<package pkgid="ef3e340a07efd8dc37519a2b1e3ef9a5873a4a3e39dee411709c4d8fc07757a5" name="matrix-synapse" arch="src">
  <version epoch="0" ver="0.28.1" rel="lp150.2.4.1"/>
  <changelog author="okurz@suse.com" date="1497787200">- Initial version of matrix-synapse version 0.19.2</changelog>
  <changelog author="okurz@suse.com" date="1498737600">- Prevent conflicts between python2/3 version of packages</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Do not suppress errors from useradd procedure.
- Trim description to the essence of the package. It is not
  supposed to be a manual or architectural document.
- Remove redundant %clean section. Replace %__-type macro
  indirections.</changelog>
  <changelog author="okurz@suse.com" date="1510660800">- Update to version v0.24.1+4.632baf79:
  * Disallow capital letters in userids
  * Allow = in mxids and groupids
  * Validate group ids when parsing
  * Fix a logcontext leak in the media repo
  * Correctly wire in update group profile over federation
  * replace 'except:' with 'except Exception:'
  * fix vars named `l`
  * Bump version and changelog
  * Add jitter to validity period of attestations
  * Revert "Add jitter to validity period of attestations"</changelog>
  <changelog author="okurz@suse.com" date="1510660801">- Update to version v0.24.1:
  * Bug fixes:
  * Fix updating group profiles over federation (PR #2567)
  * Fix handling SERVFAILs when doing AAAA lookups for federation (PR #2477)
  * Fix incompatibility with newer versions of ujson (PR #2483) Thanks to
    @jeremycline!
  * Fix notification keywords that start/end with non-word chars (PR #2500)
  * Fix stack overflow and logcontexts from linearizer (PR #2532)
  * Fix 500 error when fields missing from power_levels event (PR #2552)
  * Fix 500 error when we get an error handling a PDU (PR #2553)
  * Fix regression in performance of syncs (PR #2470)
  * Fix caching error in the push evaluator (PR #2332)
  * Fix bug where pusherpool didn't start and broke some rooms (PR #2342)
  * Fix port script for user directory tables (PR #2375)
  * Fix device lists notifications when user rejoins a room (PR #2443, #2449)
  * Fix sync to always send down current state events in timeline (PR #2451)
  * Fix bug where guest users were incorrectly kicked (PR #2453)
  * Fix bug talking to IPv6 only servers using SRV records (PR #2462)
  * Fix synapse_port_db failure. Thanks to Pneumaticat! (PR #1904)
  * Fix caching to not cache error responses (PR #1913)
  * Fix APIs to make kick &amp; ban reasons work (PR #1917)
  * Fix bugs in the /keys/changes api (PR #1921)
  * Fix bug where users couldn't forget rooms they were banned from (PR #1922)
  * Fix issue with long language values in pushers API (PR #1925)
  * Fix a race in transaction queue (PR #1930)
  * Fix dynamic thumbnailing to preserve aspect ratio. Thanks to jkolo! (PR
    [#1945])
  * Fix device list update to not constantly resync (PR #1964)
  * Fix potential for huge memory usage when getting device that have
    changed (PR #1969)
  * Fix bug where pusher pool didn't start and caused issues when
    interacting with some rooms (PR #2342)
  * Fix bug with storing registration sessions that caused frequent CPU churn
    (PR #2319)
  * Fix users not getting notifications when AS listened to that user_id (PR
    [#2216]) Thanks to @slipeer!
  * Fix users without push set up not getting notifications after joining rooms
    (PR #2236)
  * Fix preview url API to trim long descriptions (PR #2243)
  * Fix bug where we used cached but unpersisted state group as prev group,
    resulting in broken state of restart (PR #2263)
  * Fix removing of pushers when using workers (PR #2267)
  * Fix CORS headers to allow Authorization header (PR #2285) Thanks to @krombel!
  * Fix bug in anonymous usage statistic reporting (PR #2281)
  * Fix API to allow clients to upload one-time-keys with new sigs (PR #2206)
  * Fix bug where users got pushed for rooms they had muted (PR #2200)
  * Fix nuke-room script to work with current schema (PR #1927) Thanks
    @zuckschwerdt!
  * Fix db port script to not assume postgres tables are in the public schema
    (PR #2024) Thanks @jerrykan!
  * Fix getting latest device IP for user with no devices (PR #2118)
  * Fix rejection of invites to unreachable servers (PR #2145)
  * Fix code for reporting old verify keys in synapse (PR #2156)
  * Fix invite state to always include all events (PR #2163)
  * Fix bug where synapse would always fetch state for any missing event (PR #2170)
  * Fix a leak with timed out HTTP connections (PR #2180)
  * Fix bug where we didn't time out HTTP requests to ASes  (PR #2192)
  * Fix joining rooms over federation where not all servers in the room saw the
    new server had joined (PR #2094)
  * Fix bug where current_state_events renamed to current_state_ids (PR #1849)
  * Fix routing loop when fetching remote media (PR #1992)
  * Fix current_state_events table to not lie (PR #1996)
  * Fix CAS login to handle PartialDownloadError (PR #1997)
  * Fix assertion to stop transaction queue getting wedged (PR #2010)
  * Fix presence to fallback to last_active_ts if it beats the last sync time.
    Thanks @Half-Shot! (PR #2014)
  * Fix bug when federation received a PDU while a room join is in progress (PR
    [#2016])
  * Fix resetting state on rejected events (PR #2025)
  * Fix installation issues in readme. Thanks @ricco386 (PR #2037)
  * Fix caching of remote servers' signature keys (PR #2042)
  * Fix some leaking log context (PR #2048, #2049, #2057, #2058)
  * Fix rejection of invites not reaching sync (PR #2056)
  * Fix bug in handling of incoming device list updates over federation.
  * Features:
  * Add Group Server (PR #2352, #2363, #2374, #2377, #2378, #2382, #2410, #2426,
    [#2430], #2454, #2471, #2472, #2544)
  * Add support for channel notifications (PR #2501)
  * Add basic implementation of backup media store (PR #2538)
  * Add config option to auto-join new users to rooms (PR #2545)
  * Add a frontend proxy worker (PR #2344)
  * Add support for event_id_only push format (PR #2450)
  * Add a PoC for filtering spammy events (PR #2456)
  * Add a config option to block all room invites (PR #2457)
  * Add a user directory API (PR #2252, and many more)
  * Add shutdown room API to remove room from local server (PR #2291)
  * Add API to quarantine media (PR #2292)
  * Add new config option to not send event contents to push servers (PR #2301)
    Thanks to @cjdelisle!
  * Add per user rate-limiting overrides (PR #2208)
  * Add config option to limit maximum number of events requested by ``/sync``
    and ``/messages`` (PR #2221) Thanks to @psaavedra!
  * Add username availability checker API (PR #2183)
  * Add read marker API (PR #2120)
  * Add delete_devices API (PR #1993)
  * Add phone number registration/login support (PR #1994, #2055)
  * Add some administration functionalities. Thanks to morteza-araby! (PR #1784)
  * Changes:
  * Make the spam checker a module (PR #2474)
  * Delete expired url cache data (PR #2478)
  * Ignore incoming events for rooms that we have left (PR #2490)
  * Allow spam checker to reject invites too (PR #2492)
  * Add room creation checks to spam checker (PR #2495)
  * Spam checking: add the invitee to user_may_invite (PR #2502)
  * Process events from federation for different rooms in parallel (PR #2520)
  * Allow error strings from spam checker (PR #2531)
  * Improve error handling for missing files in config (PR #2551)
  * Make 'affinity' package optional, as it is not supported on some platforms
  * Use bcrypt module instead of py-bcrypt (PR #2288) Thanks to @kyrias!
  * Improve performance of generating push notifications (PR #2343, #2357, #2365,
    [#2366], #2371)
  * Improve DB performance for device list handling in sync (PR #2362)
  * Include a sample prometheus config (PR #2416)
  * Document known to work postgres version (PR #2433) Thanks to @ptman!
  * Improve performance of storing user IPs (PR #2307, #2308)
  * Slightly improve performance of verifying access tokens (PR #2320)
  * Slightly improve performance of event persistence (PR #2321)
  * Increase default cache factor size from 0.1 to 0.5 (PR #2330)
  * Various performance fixes (PR #2177, #2233, #2230, #2238, #2248, #2256,
    [#2274])
  * Deduplicate sync filters (PR #2219) Thanks to @krombel!
  * Correct a typo in UPGRADE.rst (PR #2231) Thanks to @aaronraimist!
  * Add count of one time keys to sync stream (PR #2237)
  * Only store event_auth for state events (PR #2247)
  * Store URL cache preview downloads separately (PR #2299)
  * Various small performance fixes (PR #2201, #2202, #2224, #2226, #2227, #2228,
    [#2229])
  * Update username availability checker API (PR #2209, #2213)
  * When purging, don't de-delta state groups we're about to delete (PR #2214)
  * Documentation to check synapse version (PR #2215) Thanks to @hamber-dick!
  * Add an index to event_search to speed up purge history API (PR #2218)
  * Always mark remotes as up if we receive a signed request from them (PR #2190)
  * Enable guest access for the 3pl/3pid APIs (PR #1986)
  * Add setting to support TURN for guests (PR #2011)
  * Various performance improvements (PR #2075, #2076, #2080, #2083, #2108,
    [#2158], #2176, #2185)
  * Make synctl a bit more user friendly (PR #2078, #2127) Thanks @APwhitehat!
  * Replace HTTP replication with TCP replication (PR #2082, #2097, #2098,
    [#2099], #2103, #2014, #2016, #2115, #2116, #2117)
  * Support authenticated SMTP (PR #2102) Thanks @DanielDent!
  * Add a counter metric for successfully-sent transactions (PR #2121)
  * Propagate errors sensibly from proxied IS requests (PR #2147)
  * Add more granular event send metrics (PR #2178)
  * Use JSONSchema for validation of filters. Thanks @pik! (PR #1783)
  * Reread log config on SIGHUP (PR #1982)
  * Speed up public room list (PR #1989)
  * Add helpful texts to logger config options (PR #1990)
  * Minor ``/sync`` performance improvements. (PR #2002, #2013, #2022)
  * Add some debug to help diagnose weird federation issue (PR #2035)
  * Correctly limit retries for all federation requests (PR #2050, #2061)
  * Don't lock table when persisting new one time keys (PR #2053)
  * Reduce some CPU work on DB threads (PR #2054)
  * Cache hosts in room (PR #2060)
  * Batch sending of device list pokes (PR #2063)
  * Speed up persist event path in certain edge cases (PR #2070)
  * Reduce database table sizes (PR #1873, #1916, #1923, #1963)
  * Update contrib/ to not use syutil. Thanks to andrewshadura! (PR #1907)
  * Don't fetch current state when sending an event in common case (PR #1955)</changelog>
  <changelog author="okurz@suse.com" date="1511179200">- Update to version v0.25.1:
  * Bug fixes:
  * Fix login with LDAP and other password provider modules (PR #2678). Thanks to @jkolo!
  * Fix port script (PR #2673)
  * Fix port script (PR #2577)
  * Fix error when running synapse with no logfile (PR #2581)
  * Fix UI auth when deleting devices (PR #2591)
  * Fix typo when checking if user is invited to group (PR #2599)
  * Fix the port script to drop NUL values in all tables (PR #2611)
  * Fix appservices being backlogged and not receiving new events due to a bug in
    notify_interested_services (PR #2631) Thanks to @xyzz!
  * Fix updating rooms avatar/display name when modified by admin (PR #2636)
  * Thanks to @farialima!
  * Fix bug in state group storage (PR #2649)
  * Fix 500 on invalid utf-8 in request (PR #2663)
  * Features:
  * Add is_public to groups table to allow for private groups (PR #2582)
  * Add a route for determining who you are (PR #2668) Thanks to @turt2live!
  * Add more features to the password providers (PR #2608, #2610, #2620,
    [#2622], #2623, #2624, #2626, #2628, #2629)
  * Add a hook for custom rest endpoints (PR #2627)
  * Add API to update group room visibility (PR #2651)
  * Changes:
  * Ignore tags when generating URL preview descriptions (PR #2576) Thanks to
    @maximevaillancourt!
  * Register some /unstable endpoints in /r0 as well (PR #2579) Thanks to @krombel!
  * Support /keys/upload on /r0 as well as /unstable (PR #2585)
  * Front-end proxy: pass through auth header (PR #2586)
  * Allow ASes to deactivate their own users (PR #2589)
  * Remove refresh tokens (PR #2613)
  * Automatically set default displayname on register (PR #2617)
  * Log login requests (PR #2618)
  * Always return is_public in the /groups/:group_id/rooms API (PR #2630)
  * Avoid no-op media deletes (PR #2637) Thanks to @spantaleev!
  * Fix various embarrassing typos around user_directory and add some doc. (PR #2643)
  * Return whether a user is an admin within a group (PR #2647)
  * Namespace visibility options for groups (PR #2657)
  * Downcase UserIDs on registration (PR #2662)
  * Cache failures when fetching URL previews (PR #2669)
  * Add patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch</changelog>
  <changelog author="okurz@suse.com" date="1515326400">- Update to version v0.26.0:
  * Bug fixes:
  * Fix database port script (PR #2673)
  * Fix internal server error on login with ldap_auth_provider (PR #2678) Thanks
    to @jkolo!
  * Fix error on sqlite 3.7 (PR #2697)
  * Fix OPTIONS on preview_url (PR #2707)
  * Fix error handling on dns lookup (PR #2711)
  * Fix wrong avatars when inviting multiple users when creating room (PR #2717)
  * Fix 500 when joining matrix-dev (PR #2719)
  * Features:
  * Add ability for ASes to publicise groups for their users (PR #2686)
  * Add all local users to the user_directory and optionally search them (PR
  * #2723)
  * Add support for custom login types for validating users (PR #2729)
  * Changes:
  * Update example Prometheus config to new format (PR #2648) Thanks to
    @krombel!
  * Rename redact_content option to include_content in Push API (PR #2650)
  * Declare support for r0.3.0 (PR #2677)
  * Improve upserts (PR #2684, #2688, #2689, #2713)
  * Improve documentation of workers (PR #2700)
  * Improve tracebacks on exceptions (PR #2705)
  * Allow guest access to group APIs for reading (PR #2715)
  * Support for posting content in federation_client script (PR #2716)
  * Delete devices and pushers on logouts etc (PR #2722)</changelog>
  <changelog author="okurz@suse.com" date="1522324800">- Update to version v0.27.2:
  * Bug fixes:
  * Fix bug which broke TCP replication between workers (PR #3015)
  * Fix broken ldap_config config option (PR #2683) Thanks to @seckrv!
  * Fix error message when user is not allowed to unban (PR #2761) Thanks to
    @turt2live!
  * Fix publicised groups GET API (singular) over federation (PR #2772)
  * Fix user directory when using user_directory_search_all_users config
    option (PR #2803, #2831)
  * Fix error on /publicRooms when no rooms exist (PR #2827)
  * Fix bug in quarantine_media (PR #2837)
  * Fix url_previews when no Content-Type is returned from URL (PR #2845)
  * Fix rare race in sync API when joining room (PR #2944)
  * Fix slow event search, switch back from GIST to GIN indexes (PR #2769,
    [#2848])
  * Fix bug where an invalid event caused server to stop functioning
    correctly, due to parsing and serializing bugs in ujson library.
  * Features:
  * Add ability for ASes to override message send time (PR #2754)
  * Add support for custom storage providers for media repository (PR #2867,
    [#2777], #2783, #2789, #2791, #2804, #2812, #2814, #2857, #2868, #2767)
  * Add purge API features, see docs/admin_api/purge_history_api.rst for
    full details (PR #2858, #2867, #2882, #2946, #2962, #2943)
  * Add support for whitelisting 3PIDs that users can register. (PR #2813)
  * Add /room/{id}/event/{id} API (PR #2766)
  * Add an admin API to get all the media in a room (PR #2818) Thanks to
    @turt2live!
  * Add federation_domain_whitelist option (PR #2820, #2821)
  * Changes:
  * Continue to factor out processing from main process and into worker
    processes. See updated docs/workers.rst (PR #2892 - #2904, #2913, #2920
  - #2926, #2947, #2847, #2854, #2872, #2873, #2874, #2928, #2929, #2934,
    [#2856], #2976 - #2984, #2987 - #2989, #2991 - #2993, #2995, #2784)
  * Ensure state cache is used when persisting events (PR #2864, #2871,
    [#2802], #2835, #2836, #2841, #2842, #2849)
  * Change the default config to bind on both IPv4 and IPv6 on all platforms
    (PR #2435) Thanks to @silkeh!
  * No longer require a specific version of saml2 (PR #2695) Thanks to @okurz!
  * Remove verbosity/log_file from generated config (PR #2755)
  * Add and improve metrics and logging (PR #2770, #2778, #2785, #2786,
    [#2787], #2793, #2794, #2795, #2809, #2810, #2833, #2834, #2844, #2965,
    [#2927], #2975, #2790, #2796, #2838)
  * When using synctl with workers, don't start the main synapse
    automatically (PR #2774)
  * Minor performance improvements (PR #2773, #2792)
  * Use a connection pool for non-federation outbound connections (PR #2817)
  * Make it possible to run unit tests against postgres (PR #2829)
  * Update pynacl dependency to 1.2.1 or higher (PR #2888) Thanks to @bachp!
  * Remove ability for AS users to call /events and /sync (PR #2948)
  * Use bcrypt.checkpw (PR #2949) Thanks to @krombel!
- Change spec-file to use service downloaded and recompressed file directly
- Remove patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch
  now included in upstream changes</changelog>
  <changelog author="okurz@suse.com" date="1523880000">- Update to version v0.27.4:
  * Bug fixes:
  * URL quote path segments over federation (#3082)
  * Add room_id to the response of rooms/{roomId}/join (PR #2986) Thanks to @jplatte!
  * Fix replication after switch to simplejson (PR #3015)
  * Fix replication after switch to simplejson (PR #3015)
  * 404 correctly on missing paths via NoResource (PR #3022)
  * Fix error when claiming e2e keys from offline servers (PR #3034)
  * fix tests/storage/test_user_directory.py (PR #3042)
  * use PUT instead of POST for federating groups/m.join_policy (PR #3070) Thanks to @krombel!
  * postgres port script: fix state_groups_pkey error (PR #3072)
  * Features:
  * Add joinability for groups (PR #3045)
  * Implement group join API (PR #3046)
  * Add counter metrics for calculating state delta (PR #3033)
  * R30 stats (PR #3041)
  * Measure time it takes to calculate state group ID (PR #3043)
  * Add basic performance statistics to phone home (PR #3044)
  * Add response size metrics (PR #3071)
  * phone home cache size configurations (PR #3063)
  * Changes:
  * Update canonicaljson dependency (#3095)
  * Add a blurb explaining the main synapse worker (PR #2886) Thanks to @turt2live!
  * Replace old style error catching with 'as' keyword (PR #3000) Thanks to @NotAFile!
  * Use .iter* to avoid copies in StateHandler (PR #3006)
  * Linearize calls to _generate_user_id (PR #3029)
  * Remove last usage of ujson (PR #3030)
  * Use simplejson throughout (PR #3048)
  * Use static JSONEncoders (PR #3049)
  * Remove uses of events.content (PR #3060)
  * Improve database cache performance (PR #3068)</changelog>
  <changelog author="okurz@suse.com" date="1524225600">- Introduce package self-test based on _multibuild</changelog>
  <changelog author="okurz@suse.com" date="1524830400">- Disable web-client for package self-test to get rid of unfulfilled dependency</changelog>
  <changelog author="okurz@suse.com" date="1525435200">- Update to version v0.28.1:
  * SECURITY UPDATE
    Clamp the allowed values of event depth received over federation to be
    [0, 2^63 - 1]. This mitigates an attack where malicious events
    injected with depth = 2^63 - 1 render rooms unusable. Depth is used to
    determine the cosmetic ordering of events within a room, and so the ordering
    of events in such a room will default to using stream_ordering rather than depth
    (topological_ordering).
    This is a temporary solution to mitigate abuse in the wild, whilst a long term solution
    is being implemented to improve how the depth parameter is used.
    Full details at
    https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI/edit#
    Pin Twisted to &lt;18.4 until we stop using the private _OpenSSLECCurve API.
  * Bug Fixes:
  * Return 401 for invalid access_token on logout (PR #2938) Thanks to @dklug!
  * Return a 404 rather than a 500 on rejoining empty rooms (PR #3080)
  * fix federation_domain_whitelist (PR #3099)
  * Avoid creating events with huge numbers of prev_events (PR #3113)
  * Reject events which have lots of prev_events (PR #3118)
  * Fix quarantine media admin API and search reindex (PR #3130)
  * Fix media admin APIs (PR #3134)
  * Features:
  * Add metrics for event processing lag (PR #3090)
  * Add metrics for ResponseCache (PR #3092)
  * Changes:
  * Synapse on PyPy (PR #2760) Thanks to @Valodim!
  * move handling of auto_join_rooms to RegisterHandler (PR #2996) Thanks to @krombel!
  * Improve handling of SRV records for federation connections (PR #3016) Thanks to @silkeh!
  * Document the behaviour of ResponseCache (PR #3059)
  * Preparation for py3 (PR #3061, #3073, #3074, #3075, #3103, #3104, #3106, #3107, #3109, #3110) Thanks to @NotAFile!
  * update prometheus dashboard to use new metric names (PR #3069) Thanks to @krombel!
  * use python3-compatible prints (PR #3074) Thanks to @NotAFile!
  * Send federation events concurrently (PR #3078)
  * Limit concurrent event sends for a room (PR #3079)
  * Improve R30 stat definition (PR #3086)
  * Send events to ASes concurrently (PR #3088)
  * Refactor ResponseCache usage (PR #3093)
  * Clarify that SRV may not point to a CNAME (PR #3100) Thanks to @silkeh!
  * Use str(e) instead of e.message (PR #3103) Thanks to @NotAFile!
  * Use six.itervalues in some places (PR #3106) Thanks to @NotAFile!
  * Refactor store.have_events (PR #3117)</changelog>
  <changelog author="okurz@suse.com" date="1528891200">- Fix security bug in the get_missing_events federation AP
  (CVE-2018-12291, boo#1096833)
- Add boo1096833_event_visibility_rules_not_applied_correctly.patch</changelog>
</package>
<package pkgid="a206cf1a197c796f4a080f05d981c837d4c13266fcd925f07cb1f704ff0f719c" name="matrix-synapse-test" arch="src">
  <version epoch="0" ver="0.28.1" rel="lp150.2.4.1"/>
  <changelog author="okurz@suse.com" date="1497787200">- Initial version of matrix-synapse version 0.19.2</changelog>
  <changelog author="okurz@suse.com" date="1498737600">- Prevent conflicts between python2/3 version of packages</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Do not suppress errors from useradd procedure.
- Trim description to the essence of the package. It is not
  supposed to be a manual or architectural document.
- Remove redundant %clean section. Replace %__-type macro
  indirections.</changelog>
  <changelog author="okurz@suse.com" date="1510660800">- Update to version v0.24.1+4.632baf79:
  * Disallow capital letters in userids
  * Allow = in mxids and groupids
  * Validate group ids when parsing
  * Fix a logcontext leak in the media repo
  * Correctly wire in update group profile over federation
  * replace 'except:' with 'except Exception:'
  * fix vars named `l`
  * Bump version and changelog
  * Add jitter to validity period of attestations
  * Revert "Add jitter to validity period of attestations"</changelog>
  <changelog author="okurz@suse.com" date="1510660801">- Update to version v0.24.1:
  * Bug fixes:
  * Fix updating group profiles over federation (PR #2567)
  * Fix handling SERVFAILs when doing AAAA lookups for federation (PR #2477)
  * Fix incompatibility with newer versions of ujson (PR #2483) Thanks to
    @jeremycline!
  * Fix notification keywords that start/end with non-word chars (PR #2500)
  * Fix stack overflow and logcontexts from linearizer (PR #2532)
  * Fix 500 error when fields missing from power_levels event (PR #2552)
  * Fix 500 error when we get an error handling a PDU (PR #2553)
  * Fix regression in performance of syncs (PR #2470)
  * Fix caching error in the push evaluator (PR #2332)
  * Fix bug where pusherpool didn't start and broke some rooms (PR #2342)
  * Fix port script for user directory tables (PR #2375)
  * Fix device lists notifications when user rejoins a room (PR #2443, #2449)
  * Fix sync to always send down current state events in timeline (PR #2451)
  * Fix bug where guest users were incorrectly kicked (PR #2453)
  * Fix bug talking to IPv6 only servers using SRV records (PR #2462)
  * Fix synapse_port_db failure. Thanks to Pneumaticat! (PR #1904)
  * Fix caching to not cache error responses (PR #1913)
  * Fix APIs to make kick &amp; ban reasons work (PR #1917)
  * Fix bugs in the /keys/changes api (PR #1921)
  * Fix bug where users couldn't forget rooms they were banned from (PR #1922)
  * Fix issue with long language values in pushers API (PR #1925)
  * Fix a race in transaction queue (PR #1930)
  * Fix dynamic thumbnailing to preserve aspect ratio. Thanks to jkolo! (PR
    [#1945])
  * Fix device list update to not constantly resync (PR #1964)
  * Fix potential for huge memory usage when getting device that have
    changed (PR #1969)
  * Fix bug where pusher pool didn't start and caused issues when
    interacting with some rooms (PR #2342)
  * Fix bug with storing registration sessions that caused frequent CPU churn
    (PR #2319)
  * Fix users not getting notifications when AS listened to that user_id (PR
    [#2216]) Thanks to @slipeer!
  * Fix users without push set up not getting notifications after joining rooms
    (PR #2236)
  * Fix preview url API to trim long descriptions (PR #2243)
  * Fix bug where we used cached but unpersisted state group as prev group,
    resulting in broken state of restart (PR #2263)
  * Fix removing of pushers when using workers (PR #2267)
  * Fix CORS headers to allow Authorization header (PR #2285) Thanks to @krombel!
  * Fix bug in anonymous usage statistic reporting (PR #2281)
  * Fix API to allow clients to upload one-time-keys with new sigs (PR #2206)
  * Fix bug where users got pushed for rooms they had muted (PR #2200)
  * Fix nuke-room script to work with current schema (PR #1927) Thanks
    @zuckschwerdt!
  * Fix db port script to not assume postgres tables are in the public schema
    (PR #2024) Thanks @jerrykan!
  * Fix getting latest device IP for user with no devices (PR #2118)
  * Fix rejection of invites to unreachable servers (PR #2145)
  * Fix code for reporting old verify keys in synapse (PR #2156)
  * Fix invite state to always include all events (PR #2163)
  * Fix bug where synapse would always fetch state for any missing event (PR #2170)
  * Fix a leak with timed out HTTP connections (PR #2180)
  * Fix bug where we didn't time out HTTP requests to ASes  (PR #2192)
  * Fix joining rooms over federation where not all servers in the room saw the
    new server had joined (PR #2094)
  * Fix bug where current_state_events renamed to current_state_ids (PR #1849)
  * Fix routing loop when fetching remote media (PR #1992)
  * Fix current_state_events table to not lie (PR #1996)
  * Fix CAS login to handle PartialDownloadError (PR #1997)
  * Fix assertion to stop transaction queue getting wedged (PR #2010)
  * Fix presence to fallback to last_active_ts if it beats the last sync time.
    Thanks @Half-Shot! (PR #2014)
  * Fix bug when federation received a PDU while a room join is in progress (PR
    [#2016])
  * Fix resetting state on rejected events (PR #2025)
  * Fix installation issues in readme. Thanks @ricco386 (PR #2037)
  * Fix caching of remote servers' signature keys (PR #2042)
  * Fix some leaking log context (PR #2048, #2049, #2057, #2058)
  * Fix rejection of invites not reaching sync (PR #2056)
  * Fix bug in handling of incoming device list updates over federation.
  * Features:
  * Add Group Server (PR #2352, #2363, #2374, #2377, #2378, #2382, #2410, #2426,
    [#2430], #2454, #2471, #2472, #2544)
  * Add support for channel notifications (PR #2501)
  * Add basic implementation of backup media store (PR #2538)
  * Add config option to auto-join new users to rooms (PR #2545)
  * Add a frontend proxy worker (PR #2344)
  * Add support for event_id_only push format (PR #2450)
  * Add a PoC for filtering spammy events (PR #2456)
  * Add a config option to block all room invites (PR #2457)
  * Add a user directory API (PR #2252, and many more)
  * Add shutdown room API to remove room from local server (PR #2291)
  * Add API to quarantine media (PR #2292)
  * Add new config option to not send event contents to push servers (PR #2301)
    Thanks to @cjdelisle!
  * Add per user rate-limiting overrides (PR #2208)
  * Add config option to limit maximum number of events requested by ``/sync``
    and ``/messages`` (PR #2221) Thanks to @psaavedra!
  * Add username availability checker API (PR #2183)
  * Add read marker API (PR #2120)
  * Add delete_devices API (PR #1993)
  * Add phone number registration/login support (PR #1994, #2055)
  * Add some administration functionalities. Thanks to morteza-araby! (PR #1784)
  * Changes:
  * Make the spam checker a module (PR #2474)
  * Delete expired url cache data (PR #2478)
  * Ignore incoming events for rooms that we have left (PR #2490)
  * Allow spam checker to reject invites too (PR #2492)
  * Add room creation checks to spam checker (PR #2495)
  * Spam checking: add the invitee to user_may_invite (PR #2502)
  * Process events from federation for different rooms in parallel (PR #2520)
  * Allow error strings from spam checker (PR #2531)
  * Improve error handling for missing files in config (PR #2551)
  * Make 'affinity' package optional, as it is not supported on some platforms
  * Use bcrypt module instead of py-bcrypt (PR #2288) Thanks to @kyrias!
  * Improve performance of generating push notifications (PR #2343, #2357, #2365,
    [#2366], #2371)
  * Improve DB performance for device list handling in sync (PR #2362)
  * Include a sample prometheus config (PR #2416)
  * Document known to work postgres version (PR #2433) Thanks to @ptman!
  * Improve performance of storing user IPs (PR #2307, #2308)
  * Slightly improve performance of verifying access tokens (PR #2320)
  * Slightly improve performance of event persistence (PR #2321)
  * Increase default cache factor size from 0.1 to 0.5 (PR #2330)
  * Various performance fixes (PR #2177, #2233, #2230, #2238, #2248, #2256,
    [#2274])
  * Deduplicate sync filters (PR #2219) Thanks to @krombel!
  * Correct a typo in UPGRADE.rst (PR #2231) Thanks to @aaronraimist!
  * Add count of one time keys to sync stream (PR #2237)
  * Only store event_auth for state events (PR #2247)
  * Store URL cache preview downloads separately (PR #2299)
  * Various small performance fixes (PR #2201, #2202, #2224, #2226, #2227, #2228,
    [#2229])
  * Update username availability checker API (PR #2209, #2213)
  * When purging, don't de-delta state groups we're about to delete (PR #2214)
  * Documentation to check synapse version (PR #2215) Thanks to @hamber-dick!
  * Add an index to event_search to speed up purge history API (PR #2218)
  * Always mark remotes as up if we receive a signed request from them (PR #2190)
  * Enable guest access for the 3pl/3pid APIs (PR #1986)
  * Add setting to support TURN for guests (PR #2011)
  * Various performance improvements (PR #2075, #2076, #2080, #2083, #2108,
    [#2158], #2176, #2185)
  * Make synctl a bit more user friendly (PR #2078, #2127) Thanks @APwhitehat!
  * Replace HTTP replication with TCP replication (PR #2082, #2097, #2098,
    [#2099], #2103, #2014, #2016, #2115, #2116, #2117)
  * Support authenticated SMTP (PR #2102) Thanks @DanielDent!
  * Add a counter metric for successfully-sent transactions (PR #2121)
  * Propagate errors sensibly from proxied IS requests (PR #2147)
  * Add more granular event send metrics (PR #2178)
  * Use JSONSchema for validation of filters. Thanks @pik! (PR #1783)
  * Reread log config on SIGHUP (PR #1982)
  * Speed up public room list (PR #1989)
  * Add helpful texts to logger config options (PR #1990)
  * Minor ``/sync`` performance improvements. (PR #2002, #2013, #2022)
  * Add some debug to help diagnose weird federation issue (PR #2035)
  * Correctly limit retries for all federation requests (PR #2050, #2061)
  * Don't lock table when persisting new one time keys (PR #2053)
  * Reduce some CPU work on DB threads (PR #2054)
  * Cache hosts in room (PR #2060)
  * Batch sending of device list pokes (PR #2063)
  * Speed up persist event path in certain edge cases (PR #2070)
  * Reduce database table sizes (PR #1873, #1916, #1923, #1963)
  * Update contrib/ to not use syutil. Thanks to andrewshadura! (PR #1907)
  * Don't fetch current state when sending an event in common case (PR #1955)</changelog>
  <changelog author="okurz@suse.com" date="1511179200">- Update to version v0.25.1:
  * Bug fixes:
  * Fix login with LDAP and other password provider modules (PR #2678). Thanks to @jkolo!
  * Fix port script (PR #2673)
  * Fix port script (PR #2577)
  * Fix error when running synapse with no logfile (PR #2581)
  * Fix UI auth when deleting devices (PR #2591)
  * Fix typo when checking if user is invited to group (PR #2599)
  * Fix the port script to drop NUL values in all tables (PR #2611)
  * Fix appservices being backlogged and not receiving new events due to a bug in
    notify_interested_services (PR #2631) Thanks to @xyzz!
  * Fix updating rooms avatar/display name when modified by admin (PR #2636)
  * Thanks to @farialima!
  * Fix bug in state group storage (PR #2649)
  * Fix 500 on invalid utf-8 in request (PR #2663)
  * Features:
  * Add is_public to groups table to allow for private groups (PR #2582)
  * Add a route for determining who you are (PR #2668) Thanks to @turt2live!
  * Add more features to the password providers (PR #2608, #2610, #2620,
    [#2622], #2623, #2624, #2626, #2628, #2629)
  * Add a hook for custom rest endpoints (PR #2627)
  * Add API to update group room visibility (PR #2651)
  * Changes:
  * Ignore tags when generating URL preview descriptions (PR #2576) Thanks to
    @maximevaillancourt!
  * Register some /unstable endpoints in /r0 as well (PR #2579) Thanks to @krombel!
  * Support /keys/upload on /r0 as well as /unstable (PR #2585)
  * Front-end proxy: pass through auth header (PR #2586)
  * Allow ASes to deactivate their own users (PR #2589)
  * Remove refresh tokens (PR #2613)
  * Automatically set default displayname on register (PR #2617)
  * Log login requests (PR #2618)
  * Always return is_public in the /groups/:group_id/rooms API (PR #2630)
  * Avoid no-op media deletes (PR #2637) Thanks to @spantaleev!
  * Fix various embarrassing typos around user_directory and add some doc. (PR #2643)
  * Return whether a user is an admin within a group (PR #2647)
  * Namespace visibility options for groups (PR #2657)
  * Downcase UserIDs on registration (PR #2662)
  * Cache failures when fetching URL previews (PR #2669)
  * Add patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch</changelog>
  <changelog author="okurz@suse.com" date="1515326400">- Update to version v0.26.0:
  * Bug fixes:
  * Fix database port script (PR #2673)
  * Fix internal server error on login with ldap_auth_provider (PR #2678) Thanks
    to @jkolo!
  * Fix error on sqlite 3.7 (PR #2697)
  * Fix OPTIONS on preview_url (PR #2707)
  * Fix error handling on dns lookup (PR #2711)
  * Fix wrong avatars when inviting multiple users when creating room (PR #2717)
  * Fix 500 when joining matrix-dev (PR #2719)
  * Features:
  * Add ability for ASes to publicise groups for their users (PR #2686)
  * Add all local users to the user_directory and optionally search them (PR
  * #2723)
  * Add support for custom login types for validating users (PR #2729)
  * Changes:
  * Update example Prometheus config to new format (PR #2648) Thanks to
    @krombel!
  * Rename redact_content option to include_content in Push API (PR #2650)
  * Declare support for r0.3.0 (PR #2677)
  * Improve upserts (PR #2684, #2688, #2689, #2713)
  * Improve documentation of workers (PR #2700)
  * Improve tracebacks on exceptions (PR #2705)
  * Allow guest access to group APIs for reading (PR #2715)
  * Support for posting content in federation_client script (PR #2716)
  * Delete devices and pushers on logouts etc (PR #2722)</changelog>
  <changelog author="okurz@suse.com" date="1522324800">- Update to version v0.27.2:
  * Bug fixes:
  * Fix bug which broke TCP replication between workers (PR #3015)
  * Fix broken ldap_config config option (PR #2683) Thanks to @seckrv!
  * Fix error message when user is not allowed to unban (PR #2761) Thanks to
    @turt2live!
  * Fix publicised groups GET API (singular) over federation (PR #2772)
  * Fix user directory when using user_directory_search_all_users config
    option (PR #2803, #2831)
  * Fix error on /publicRooms when no rooms exist (PR #2827)
  * Fix bug in quarantine_media (PR #2837)
  * Fix url_previews when no Content-Type is returned from URL (PR #2845)
  * Fix rare race in sync API when joining room (PR #2944)
  * Fix slow event search, switch back from GIST to GIN indexes (PR #2769,
    [#2848])
  * Fix bug where an invalid event caused server to stop functioning
    correctly, due to parsing and serializing bugs in ujson library.
  * Features:
  * Add ability for ASes to override message send time (PR #2754)
  * Add support for custom storage providers for media repository (PR #2867,
    [#2777], #2783, #2789, #2791, #2804, #2812, #2814, #2857, #2868, #2767)
  * Add purge API features, see docs/admin_api/purge_history_api.rst for
    full details (PR #2858, #2867, #2882, #2946, #2962, #2943)
  * Add support for whitelisting 3PIDs that users can register. (PR #2813)
  * Add /room/{id}/event/{id} API (PR #2766)
  * Add an admin API to get all the media in a room (PR #2818) Thanks to
    @turt2live!
  * Add federation_domain_whitelist option (PR #2820, #2821)
  * Changes:
  * Continue to factor out processing from main process and into worker
    processes. See updated docs/workers.rst (PR #2892 - #2904, #2913, #2920
  - #2926, #2947, #2847, #2854, #2872, #2873, #2874, #2928, #2929, #2934,
    [#2856], #2976 - #2984, #2987 - #2989, #2991 - #2993, #2995, #2784)
  * Ensure state cache is used when persisting events (PR #2864, #2871,
    [#2802], #2835, #2836, #2841, #2842, #2849)
  * Change the default config to bind on both IPv4 and IPv6 on all platforms
    (PR #2435) Thanks to @silkeh!
  * No longer require a specific version of saml2 (PR #2695) Thanks to @okurz!
  * Remove verbosity/log_file from generated config (PR #2755)
  * Add and improve metrics and logging (PR #2770, #2778, #2785, #2786,
    [#2787], #2793, #2794, #2795, #2809, #2810, #2833, #2834, #2844, #2965,
    [#2927], #2975, #2790, #2796, #2838)
  * When using synctl with workers, don't start the main synapse
    automatically (PR #2774)
  * Minor performance improvements (PR #2773, #2792)
  * Use a connection pool for non-federation outbound connections (PR #2817)
  * Make it possible to run unit tests against postgres (PR #2829)
  * Update pynacl dependency to 1.2.1 or higher (PR #2888) Thanks to @bachp!
  * Remove ability for AS users to call /events and /sync (PR #2948)
  * Use bcrypt.checkpw (PR #2949) Thanks to @krombel!
- Change spec-file to use service downloaded and recompressed file directly
- Remove patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch
  now included in upstream changes</changelog>
  <changelog author="okurz@suse.com" date="1523880000">- Update to version v0.27.4:
  * Bug fixes:
  * URL quote path segments over federation (#3082)
  * Add room_id to the response of rooms/{roomId}/join (PR #2986) Thanks to @jplatte!
  * Fix replication after switch to simplejson (PR #3015)
  * Fix replication after switch to simplejson (PR #3015)
  * 404 correctly on missing paths via NoResource (PR #3022)
  * Fix error when claiming e2e keys from offline servers (PR #3034)
  * fix tests/storage/test_user_directory.py (PR #3042)
  * use PUT instead of POST for federating groups/m.join_policy (PR #3070) Thanks to @krombel!
  * postgres port script: fix state_groups_pkey error (PR #3072)
  * Features:
  * Add joinability for groups (PR #3045)
  * Implement group join API (PR #3046)
  * Add counter metrics for calculating state delta (PR #3033)
  * R30 stats (PR #3041)
  * Measure time it takes to calculate state group ID (PR #3043)
  * Add basic performance statistics to phone home (PR #3044)
  * Add response size metrics (PR #3071)
  * phone home cache size configurations (PR #3063)
  * Changes:
  * Update canonicaljson dependency (#3095)
  * Add a blurb explaining the main synapse worker (PR #2886) Thanks to @turt2live!
  * Replace old style error catching with 'as' keyword (PR #3000) Thanks to @NotAFile!
  * Use .iter* to avoid copies in StateHandler (PR #3006)
  * Linearize calls to _generate_user_id (PR #3029)
  * Remove last usage of ujson (PR #3030)
  * Use simplejson throughout (PR #3048)
  * Use static JSONEncoders (PR #3049)
  * Remove uses of events.content (PR #3060)
  * Improve database cache performance (PR #3068)</changelog>
  <changelog author="okurz@suse.com" date="1524225600">- Introduce package self-test based on _multibuild</changelog>
  <changelog author="okurz@suse.com" date="1524830400">- Disable web-client for package self-test to get rid of unfulfilled dependency</changelog>
  <changelog author="okurz@suse.com" date="1525435200">- Update to version v0.28.1:
  * SECURITY UPDATE
    Clamp the allowed values of event depth received over federation to be
    [0, 2^63 - 1]. This mitigates an attack where malicious events
    injected with depth = 2^63 - 1 render rooms unusable. Depth is used to
    determine the cosmetic ordering of events within a room, and so the ordering
    of events in such a room will default to using stream_ordering rather than depth
    (topological_ordering).
    This is a temporary solution to mitigate abuse in the wild, whilst a long term solution
    is being implemented to improve how the depth parameter is used.
    Full details at
    https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI/edit#
    Pin Twisted to &lt;18.4 until we stop using the private _OpenSSLECCurve API.
  * Bug Fixes:
  * Return 401 for invalid access_token on logout (PR #2938) Thanks to @dklug!
  * Return a 404 rather than a 500 on rejoining empty rooms (PR #3080)
  * fix federation_domain_whitelist (PR #3099)
  * Avoid creating events with huge numbers of prev_events (PR #3113)
  * Reject events which have lots of prev_events (PR #3118)
  * Fix quarantine media admin API and search reindex (PR #3130)
  * Fix media admin APIs (PR #3134)
  * Features:
  * Add metrics for event processing lag (PR #3090)
  * Add metrics for ResponseCache (PR #3092)
  * Changes:
  * Synapse on PyPy (PR #2760) Thanks to @Valodim!
  * move handling of auto_join_rooms to RegisterHandler (PR #2996) Thanks to @krombel!
  * Improve handling of SRV records for federation connections (PR #3016) Thanks to @silkeh!
  * Document the behaviour of ResponseCache (PR #3059)
  * Preparation for py3 (PR #3061, #3073, #3074, #3075, #3103, #3104, #3106, #3107, #3109, #3110) Thanks to @NotAFile!
  * update prometheus dashboard to use new metric names (PR #3069) Thanks to @krombel!
  * use python3-compatible prints (PR #3074) Thanks to @NotAFile!
  * Send federation events concurrently (PR #3078)
  * Limit concurrent event sends for a room (PR #3079)
  * Improve R30 stat definition (PR #3086)
  * Send events to ASes concurrently (PR #3088)
  * Refactor ResponseCache usage (PR #3093)
  * Clarify that SRV may not point to a CNAME (PR #3100) Thanks to @silkeh!
  * Use str(e) instead of e.message (PR #3103) Thanks to @NotAFile!
  * Use six.itervalues in some places (PR #3106) Thanks to @NotAFile!
  * Refactor store.have_events (PR #3117)</changelog>
  <changelog author="okurz@suse.com" date="1528891200">- Fix security bug in the get_missing_events federation AP
  (CVE-2018-12291, boo#1096833)
- Add boo1096833_event_visibility_rules_not_applied_correctly.patch</changelog>
</package>
<package pkgid="c3627c49a91fd57018cd3c4c5593bdf991f54bea67ba36f4e30cac4afa2fb90b" name="mc" arch="src">
  <version epoch="0" ver="4.8.20" rel="lp150.3.3.1"/>
  <changelog author="dnh@opensuse.org" date="1389700800">- add preliminary patch by Sebastian Siebert
  mc-vfs-fish-deleted_source_file.patch
  bnc#856501 and http://www.midnight-commander.org/ticket/3128</changelog>
  <changelog author="jengelh@inai.de" date="1391083200">- Spec metadata update, remove redundant %clean section,
  do parallel build with %_smp_mflags</changelog>
  <changelog author="dnh@opensuse.org" date="1394884800">- add mc-vfs_fish_helpers_ls-formatstring.diff
  fixing possible format-string attack via filename
  http://www.midnight-commander.org/ticket/2983
  until http://www.midnight-commander.org/ticket/3128
  is fixed, fish should stay disabled though!</changelog>
  <changelog author="dnh@opensuse.org" date="1394884801">- fix bug ("%i" is not an appropriate format for off_t) in
  mc-vfs_fish_helpers_ls-formatstring.diff, thanks to andrew_b
  of upstream in mc-ticket:2983</changelog>
  <changelog author="dnh@opensuse.org" date="1396440000">- update to 4.8.12
- remove mc-vfs_fish_helpers_ls-formatstring.diff (fixed upstream)
- change mc-extfs-iso9660-xorriso.patch to work with upstream fix</changelog>
  <changelog author="dnh@opensuse.org" date="1409918400">- update to 4.8.13
  various bugfixes and minor improvements, see NEWS file for details
- comment out mc-Syntax.cmake.patch, fixed upstream, to be removed</changelog>
  <changelog author="dnh@opensuse.org" date="1410004800">- remove file mc-Syntax.cmake.patch / cmds in .spec
- remove file mc-vfs_fish_helpers_ls-formatstring.diff
  (extraneous patches seem to cause factory-auto to decline the submit)
  cf. e.g. https://build.opensuse.org/request/show/247789</changelog>
  <changelog author="astieger@suse.com" date="1427198400">- GNU Midnight Commander 4.8.14:
  * Core:
    + Minimal version of GLib is 2.14.0
    + Add new panel binding "SelectExt" to select/unselect files
    with the same extension as the current file
    + Speed up of directory size calculation
    + Support of italic text
  * Editor:
    + New syntax highlighting support: puppet
  * Viewer:
    + Rewrite mcview's rendering and scrolling
    + Use VIEW_SELECTED_COLOR in plain mode
    + In QuickView panel, don't pass any chars to command line to
    avoid unexpected command execution
  * Misc:
    + Code cleanup
    + Bind poedit to Edit action for .po files
    + Better grammar mcedit user menu
  * Various bug fixes</changelog>
  <changelog author="dnh@opensuse.org" date="1447070400">- Update to 4.8.15:
  * Core:
    Minimal version of GLib is 2.26.0
    Use the PATH environment variable to search for the executable when opening pipe (#3444)
    Support more than 2 (up to 9) columns in file panel in brief mode (#3212)
    Clarify file sorting in "Unsorted" mode (#3496)
    WGroupbox: respect dialog's colors (#3468)
    Highlight find file's result in internal viewer (#3530)
  * VFS:
    s3 extfs vfs: bugfixes and improvements (#3470, #3502)
  * Editor:
    Add hidden option to choose full or base file name in the status line (#3445)
    Improvements of syntax highlighting:
    Lua (#3471)
    PKGBUILD (#3484)
  * Misc:
    Text alignment in Info panel (#3155)
    Select of menu file edit: change default button to "User" (#3493)
    Recognize .gmo files as well as .mo ones (#3422)
    Fix mc.pot comment tripping up Transifex and unportable inplace sed (#3479)
    A lot of code clean up (#3420, #3424, #3426, #3427, #3428, #3429, #3430, #3431, #3434, #3435, #3437, #3463, #3464, #3465, #3466, #3467, #3494, #3495, #3539)
    Documentation updates:
    Spanish man and help: Diff Viewer section and minor fixes (#3477)
    VFS garbage collection (#3472)
  * Fixes:
    Various memory leaks (#3438, #3439, #3440, #3457, #3458, #3459, #3460, #3461, #3462, #3475, #3520, #3521, #3522)
    Linux kernel-specific segfault on startup (#3441)
    Lost of Panelize contents in some cases (#3032, #3489, #3498, #3507)
    Wrong highlight of search result in case of "Regular expression" and "Whole words" (#3524)
    "Whole words" search works only in Normal mode (#3525)
    SFTP VFS: segfault (#3456)
    Segfault in "Find file" due to invalid UTF-8 sequences (#3449)
    Bash variable 'PROMPT_COMMAND' in pantheon-terminal (#3534)
- rebased mc-extd-xdg.patch against upstream changes</changelog>
  <changelog author="pth@suse.de" date="1447070401">- Tag .sha256 file as source.</changelog>
  <changelog author="astieger@suse.com" date="1447070402">- verify the sha256 hash during build</changelog>
  <changelog author="dnh@opensuse.org" date="1457956800">- Update to 4.8.16:
  Core
    Support for ash + bugfixes for bash, fish (#2742)
    Find file: empty file name matches any file name (#3593)
    Find file: empty value of "Content" is used instead of "Search for content" checkbox to disable search for content (#3594)
    Listbox: don't wraparound on mouse scroll (#3554)
    Internals:
    Listbox: various fixups (#3569: #3562, #3563, #3565, #3161)
    Split MSG_ACTION into MSG_ACTION and MSG_NOTIFY (#3566)
  VFS
    Support lzip compression format (#2673, #1541)
    Support lz4 compression format (#3523)
    patchfs: support xz compression (#3443)
    Update uc1541 version (#3527)
    Add mc.ext patterns for initramfs / initrd (#3115)
  Editor
    Add golang syntax (MidnightCommander?/mc#84)
    Update Puppet syntax (MidnightCommander?/mc#86)
  Misc
    Code cleanup (#3555, #3547, #3587)
    Better subshell documentation (#3556)
    Fixes to the English man pages by Denys Vlasenko
  Fixes
    Insufficient quoting in mc.menu (#2947)
    Broken ./configure --without-internal-edit (#3601)
    Memory leaks (#3547, #3561, #3567, #3572)
    No preallocation if appending during file copy (#3577)
    Cannot set mini-format for "brief" listing type (#3588)
    Info panel: incorrect inode information in some cases (#3214)
    Info panel: wrong device name with symbolic link (#3412)
    Info panel: buffer overflow (#3582)
    Regression: match filename, not full path in mc.ext (#3578)
    Broken case insensitive search in non-unicode locale (#3491)
    Error message prefixed with no sense "0:" (#3269)
    mcedit: buffer overflow (#3579)
    mcedit: "Lower case selection" command in User Menu (#3586)
    mcedit: close on ctrl-g (#3557)
    mcview: "Not found" result isn't reported in some cases (#3543)
    VFS: isofs doesn't show .dotfiles (#3537)
    VFS: isofs: cannot copy file from iso when Joliet without RockRidge? is used (#2851)
    VFS: extfs/unzip: enter into zip file fails with "inconsistent extfs archive" (#3433)
    VFS: SFTP: various bugs (#3581)
    VFS: FISH: provide major/minor info for block/char devices (#3599)
    Bashism in gitfs+ extfs helper (#3379)
    Non-portable invocation of man (#3509)
    mc-wrapper leaves MC_USER set (#3550)
    Broken silent opening of files in background (#3574)
    Run identify on JPEGs even if exif is not installed (#3568)
- rebased a bunch of patches</changelog>
  <changelog author="dnh@opensuse.org" date="1459512000">- Add no-brainer patch mc-patchfs_lzip-syntax-error.patch from upstream
  that fixes a syntax error in the patchfs helper script (bsc#972789).</changelog>
  <changelog author="dnh@opensuse.org" date="1462795200">- Update to 4.8.17:
  === Core ===
  * Minimal version of Gettext is 0.18.1 (#1885)
  * Optimization of copy/move operations (use adaptive buffer as in coreutils) (#2193)
  * Recognize csh as tcsh (#2742)
  * ?entered scrolling of file panel (#3130)
  * Internals:
  * Switch to new high-level mouse API (#3571)
  === VFS ===
  * FISH helpers: remove executable bit (#3610)
  === Editor ===
  * Improvements of syntax highlighting:
  * F90 (#3618)
  * Java (MidnightCommander/mc#95)
  === Misc ===
  * Code cleanup (#3598, #3607)
  * Install mc.keymap as a symlink to mc.default.keymap (#3609)
  * File highlight: add more common file formats
  === Fixes ===
  * Segfault due to incorrect value of SHELL environment variable (#3606)
  * Segfault when copying files under FreeBSD 9.3 (#3617)
  * Segfault when entering into some cpio archives (#3621)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * Subshell cursor position lost after window resizing (#3640)
  * Listbox no longer scrolls when dragging outside widget (#3559)
  * VFS: extfs: incorrect date parsing in unzip (#3622)
  * VFS: extfs: buffer overflow (#3605)
  * VFS: patchfs: syntax error (#3620)
  * VFS: fish: mistakes in ls Perl helper (#3611)
- remove upstreamed Patch99: mc-patchfs_lzip-syntax-error.patch</changelog>
  <changelog author="dnh@opensuse.org" date="1475496000">- Update to Version 4.8.18
- Core
  * Alt-Enter, Ctrl-Enter and Ctrl-Shift-Enter shortcuts are bindable in file manager (#3075)
  * Internals:
  * Refactoring of widget subsystem (#2919, #3632)
- Editor
  * Add syntax highlighting:
  * GLSL (#3683)
  * CUDA (#3686)
- Misc
  * Code cleanup (#3641, #3652)
- Fixes
  * Build failure on FreeBSD (#3643)
  * Incompatibility with NetBSD curses (#3665)
  * Memory leaks (#3637)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * --with-subshell=optional does not work (#3642)
  * Backward search is not interruptible (#3648)
  * "Output lines" has no effect (#3655)
  * Wrong handling of mouse clicks in long listing mode (#3661)
  * Panelize resets marks on marked files in many cases (#3663)
  * Cannot change directory in the active panel in some cases (#3669)
  * Filtered View doesn't work (#3646, #3660)
  * mcedit: don't kill bookmarks when open file from "Find File" dialog (#3668)
  * man pages use "the MC" instead of "MC" (#3644)</changelog>
  <changelog author="dnh@opensuse.org" date="1488801600">- Update to Version 4.8.19
  * * Core
  * Replace $MC_HOME with $MC_PROFILE_ROOT (#3684)
  * Allow rebind TAB key to change panel (#3672)
  * Support for True Color (16 millions colors) (#3145)
  * Color aliases in skin files (#3711)
  * * VFS
  * Support timestamps with nanosecond precision for copy/move operations (#3575)
  * Introduce EXTFS helpers tester (#3730, #3744, #3752, #3753, #3751)
  * Teach u7z to parse archive listings w/o sizes and/or dates (#2707)
  * Teach rpm helper about transaction scripts (#3750)
  * Fix hp48, uace &amp; uarc extfs which used an obsolete date format (#3729, #3747)
  * * Editor
  * Syntax:
  - updates of HTML and ebuild highlighting
  - highlight *.t (Perl test) files as Perl scripts
  - disassociate .cl file extension from LISP syntax (#3691)
  * Add syntax highlighting:
  - OpenCL (#3690)
  - OpenShadingLanguage (#3762)
  - R
  - YAML (#3293)
  * * Misc
  * Code cleanup (#3693, #3703, #3721, #3763)
  * Add true color skins: 'Four seasons' (#3724)
  * Activate `--enable-tests` by default if `check` is found (#3708)
  * Added new skin: YADT (MidnightCommander/mc#115)
  * * Fixes
  * Segfault on switching left panel to Info (#3700)
  * Broken compatibility with ncurses (#3697)
  * Setting MC_HOME makes mc ignore ~/.bashrc (#3684)
  * mc_tmpdir() use a buffer of only 64 characters (#3736)
  * Some bugs in the parsing of hexadecimal search patterns (#3694)
  * Hexadecimal search fails on binary data (#3589)
  * Broken file list resorting on double click on panel header line (#3715)
  * Wrong dialog resizing and positioning (#3714, #3723)
  * Widget's 'disabled' status is not toggled immediately (#3716)
  * Last item of 'Options/Layout/Horizontal' radiobuttons remains highlighted (#3717)
  * 'Options/Layout/Equal split' checkbox gets reverted (#3718)
  * Panels: cannot show more than one "column" in user defined listing mode (#3757)
  * Mix of MSG_NOTIFY and MSG_FOCUS messages (#3731)
  * skins: 'window-state-char' and 'window-close-char' are parsed as colors (#3710)
  * Pressing &lt;right&gt; and &lt;left&gt; in the hotlist dialog doesn't refresh it (#3775)
  * mcview: an error message about bad regexp isn't shown (#3720)
  * mcedit: fix etags filenames parsing (#3698)
  * mcedit: fix mouse active area for maximize / close buttons (#3774)
  * mcedit: frames (MDI interface) don't reflect the focus state (#3766)
  * mcedit: frames (MDI interface) sometimes obscure the buttonbar (#3760)
  * mcedit doesn't show search error messages when searching backwards (#3735)
  * help viewer: tab characters handled incorrectly (#3754)
  * VFS: incorrect zoo archive listing (#3696)
  * VFS: segfault in VFSs not setting block size in stat (#3749)
- removed obsolete 02_ignore_ftp_chmod_error.patch
  if ignore_ftp_chattr_errors=true (the default?) in
  ~/.config/mc/ini, errors are ignored anyway, and if if set to false,
  the user get the error (e.g. permission denied). With the patch, the
  user never will see an error and wonder, why it's not working. It
  might have been, that this option has not worked in (much) older
  versions and the patch introduced because of this.
- removed obsolete 09_uzip_broken_528239.patch
  it is correctly detected during configure
- rebased mc-rpm.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1511870400">- Update to Version 4.8.20
  * * Core
  * Rename key bindings:
  - [main].PanelListingSwitch -&gt; [panel].CycleListingFormat
  - [main].PanelListingChange -&gt; [main].SetupListingFormat
  * Speed up of UTF-8 normalization for frequent cases (#3616)
  * * VFS
  * extfs helpers tester:
  - diff of failed tests is now included in output to ease bug reporting (#3784)
  * * Editor
  * Syntax:
  - ES2015 support (#3793)
  - TypeScript support (#3794)
  - Ada 95 updates (#3804)
  - Apache Hive QL support (#3828)
  - SQL &amp; PHP keyword updates (MidnightCommander/mc#129)
  - Simplification of case insensitive file name patterns in /usr/share/mc/syntax/Syntax file (#3829)
  - Markdown (initial support) (#3864)
  - Protocol Buffers and gRPC support (#3868)
  * Add %c (cursor offset from BOF) support for user menu macros (#3867)
  * * Viewer
  * * Diff viewer
  * * Misc
  * Unify curses initialization for various curses implementations (#3697)
  * Highlight txz extension as archive like tgz, etc. (#3782)
  * Add new media extensions to filehighlight.ini (#3834)
  * * Fixes
  * Wrong --help message for mcview, mcedit and mcdiff (#3805)
  * Compression from menu broken due to bad quoting (#3840)
  * --with-homedir gives "yes" as config directory (#3836)
  * External panelize: opening a file with an absolute path fails (#2942)
  * Filter isn't cleared when entering empty string (#3813)
  * Panelization is not kept while switching panel listing mode (#3810)
  * Cannot tab out of a QuickView panel (#3815)
  * Cannot use the F10 key in a QuickView panel (#3816)
  * Wromg INPUT_COMPLETE_CD flag handling in the QuickDialog? engine (#3870)
  * mcview: file interpreted as latin1 instead of utf8 (#3783)
  * mcview: incomplete read of filtering data (#3817)
  * mcview: search doesn't grow file as much as needed (#3819, #3855)
  * mcview: goto doesn't grow file as much as needed (#3826)
  * mcview: quick view panel: crash on slow startup while switching panel mode (#3846)
  * mcedit: fix broken encoding into UTF-8 for 8-bit displays (#3843)
  * mcedit: incorrect %f macro substitution in the user menu (#3861)
  * man pages: wrong paths of mc.hint and mc.hlp (#3806)
  * subshell: fix broken tcsh 6.20+ cd escaping (#3852)
  * VFS: incremental tar doesn't contain empty directories (#2297)
  * VFS: incremental tar: wrong directories owner for tar --numeric-owner -g (#3709)
  * VFS: timestamps not being preserved due to uninitialized struct stat st_[acm]tim.tv_nsec (#3821)
  * VFS: ftp: can't retrieve password from .netrc when user is in URL (#3869)
  * VFS: tests: locale issue causing helpers using 'sort' to fail (#3787)
  * VFS: tests: unportable 'echo' use causing one rpm helper test to fail (#3786)
  * Spelling errors in the manual page (#3839)</changelog>
  <changelog author="adam.majer@suse.de" date="1523361600">- xls2csv_update.patch: fix mc to call xls2csv correctly
  (bsc#1087708)</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- Remove some unused BuildRequires, enabling building on SLE-15
- Drop fdupes usage as difference is only 1 file smaller than 1kB.</changelog>
  <changelog author="adam.majer@suse.de" date="1530014400">- sftp_interactive_password.patch: Fixes logins to remote SSH
  sessions where only Keyboard-Interactive password is available
  and tunneled password is disabled (bsc#1098235)</changelog>
</package>
<package pkgid="9ba66bf9bd37255e1ba4076c3fb01e2abe03258ad995a60c8b8743c05a60b6cf" name="mc" arch="x86_64">
  <version epoch="0" ver="4.8.20" rel="lp150.3.3.1"/>
  <changelog author="dnh@opensuse.org" date="1389700800">- add preliminary patch by Sebastian Siebert
  mc-vfs-fish-deleted_source_file.patch
  bnc#856501 and http://www.midnight-commander.org/ticket/3128</changelog>
  <changelog author="jengelh@inai.de" date="1391083200">- Spec metadata update, remove redundant %clean section,
  do parallel build with %_smp_mflags</changelog>
  <changelog author="dnh@opensuse.org" date="1394884800">- add mc-vfs_fish_helpers_ls-formatstring.diff
  fixing possible format-string attack via filename
  http://www.midnight-commander.org/ticket/2983
  until http://www.midnight-commander.org/ticket/3128
  is fixed, fish should stay disabled though!</changelog>
  <changelog author="dnh@opensuse.org" date="1394884801">- fix bug ("%i" is not an appropriate format for off_t) in
  mc-vfs_fish_helpers_ls-formatstring.diff, thanks to andrew_b
  of upstream in mc-ticket:2983</changelog>
  <changelog author="dnh@opensuse.org" date="1396440000">- update to 4.8.12
- remove mc-vfs_fish_helpers_ls-formatstring.diff (fixed upstream)
- change mc-extfs-iso9660-xorriso.patch to work with upstream fix</changelog>
  <changelog author="dnh@opensuse.org" date="1409918400">- update to 4.8.13
  various bugfixes and minor improvements, see NEWS file for details
- comment out mc-Syntax.cmake.patch, fixed upstream, to be removed</changelog>
  <changelog author="dnh@opensuse.org" date="1410004800">- remove file mc-Syntax.cmake.patch / cmds in .spec
- remove file mc-vfs_fish_helpers_ls-formatstring.diff
  (extraneous patches seem to cause factory-auto to decline the submit)
  cf. e.g. https://build.opensuse.org/request/show/247789</changelog>
  <changelog author="astieger@suse.com" date="1427198400">- GNU Midnight Commander 4.8.14:
  * Core:
    + Minimal version of GLib is 2.14.0
    + Add new panel binding "SelectExt" to select/unselect files
    with the same extension as the current file
    + Speed up of directory size calculation
    + Support of italic text
  * Editor:
    + New syntax highlighting support: puppet
  * Viewer:
    + Rewrite mcview's rendering and scrolling
    + Use VIEW_SELECTED_COLOR in plain mode
    + In QuickView panel, don't pass any chars to command line to
    avoid unexpected command execution
  * Misc:
    + Code cleanup
    + Bind poedit to Edit action for .po files
    + Better grammar mcedit user menu
  * Various bug fixes</changelog>
  <changelog author="dnh@opensuse.org" date="1447070400">- Update to 4.8.15:
  * Core:
    Minimal version of GLib is 2.26.0
    Use the PATH environment variable to search for the executable when opening pipe (#3444)
    Support more than 2 (up to 9) columns in file panel in brief mode (#3212)
    Clarify file sorting in "Unsorted" mode (#3496)
    WGroupbox: respect dialog's colors (#3468)
    Highlight find file's result in internal viewer (#3530)
  * VFS:
    s3 extfs vfs: bugfixes and improvements (#3470, #3502)
  * Editor:
    Add hidden option to choose full or base file name in the status line (#3445)
    Improvements of syntax highlighting:
    Lua (#3471)
    PKGBUILD (#3484)
  * Misc:
    Text alignment in Info panel (#3155)
    Select of menu file edit: change default button to "User" (#3493)
    Recognize .gmo files as well as .mo ones (#3422)
    Fix mc.pot comment tripping up Transifex and unportable inplace sed (#3479)
    A lot of code clean up (#3420, #3424, #3426, #3427, #3428, #3429, #3430, #3431, #3434, #3435, #3437, #3463, #3464, #3465, #3466, #3467, #3494, #3495, #3539)
    Documentation updates:
    Spanish man and help: Diff Viewer section and minor fixes (#3477)
    VFS garbage collection (#3472)
  * Fixes:
    Various memory leaks (#3438, #3439, #3440, #3457, #3458, #3459, #3460, #3461, #3462, #3475, #3520, #3521, #3522)
    Linux kernel-specific segfault on startup (#3441)
    Lost of Panelize contents in some cases (#3032, #3489, #3498, #3507)
    Wrong highlight of search result in case of "Regular expression" and "Whole words" (#3524)
    "Whole words" search works only in Normal mode (#3525)
    SFTP VFS: segfault (#3456)
    Segfault in "Find file" due to invalid UTF-8 sequences (#3449)
    Bash variable 'PROMPT_COMMAND' in pantheon-terminal (#3534)
- rebased mc-extd-xdg.patch against upstream changes</changelog>
  <changelog author="pth@suse.de" date="1447070401">- Tag .sha256 file as source.</changelog>
  <changelog author="astieger@suse.com" date="1447070402">- verify the sha256 hash during build</changelog>
  <changelog author="dnh@opensuse.org" date="1457956800">- Update to 4.8.16:
  Core
    Support for ash + bugfixes for bash, fish (#2742)
    Find file: empty file name matches any file name (#3593)
    Find file: empty value of "Content" is used instead of "Search for content" checkbox to disable search for content (#3594)
    Listbox: don't wraparound on mouse scroll (#3554)
    Internals:
    Listbox: various fixups (#3569: #3562, #3563, #3565, #3161)
    Split MSG_ACTION into MSG_ACTION and MSG_NOTIFY (#3566)
  VFS
    Support lzip compression format (#2673, #1541)
    Support lz4 compression format (#3523)
    patchfs: support xz compression (#3443)
    Update uc1541 version (#3527)
    Add mc.ext patterns for initramfs / initrd (#3115)
  Editor
    Add golang syntax (MidnightCommander?/mc#84)
    Update Puppet syntax (MidnightCommander?/mc#86)
  Misc
    Code cleanup (#3555, #3547, #3587)
    Better subshell documentation (#3556)
    Fixes to the English man pages by Denys Vlasenko
  Fixes
    Insufficient quoting in mc.menu (#2947)
    Broken ./configure --without-internal-edit (#3601)
    Memory leaks (#3547, #3561, #3567, #3572)
    No preallocation if appending during file copy (#3577)
    Cannot set mini-format for "brief" listing type (#3588)
    Info panel: incorrect inode information in some cases (#3214)
    Info panel: wrong device name with symbolic link (#3412)
    Info panel: buffer overflow (#3582)
    Regression: match filename, not full path in mc.ext (#3578)
    Broken case insensitive search in non-unicode locale (#3491)
    Error message prefixed with no sense "0:" (#3269)
    mcedit: buffer overflow (#3579)
    mcedit: "Lower case selection" command in User Menu (#3586)
    mcedit: close on ctrl-g (#3557)
    mcview: "Not found" result isn't reported in some cases (#3543)
    VFS: isofs doesn't show .dotfiles (#3537)
    VFS: isofs: cannot copy file from iso when Joliet without RockRidge? is used (#2851)
    VFS: extfs/unzip: enter into zip file fails with "inconsistent extfs archive" (#3433)
    VFS: SFTP: various bugs (#3581)
    VFS: FISH: provide major/minor info for block/char devices (#3599)
    Bashism in gitfs+ extfs helper (#3379)
    Non-portable invocation of man (#3509)
    mc-wrapper leaves MC_USER set (#3550)
    Broken silent opening of files in background (#3574)
    Run identify on JPEGs even if exif is not installed (#3568)
- rebased a bunch of patches</changelog>
  <changelog author="dnh@opensuse.org" date="1459512000">- Add no-brainer patch mc-patchfs_lzip-syntax-error.patch from upstream
  that fixes a syntax error in the patchfs helper script (bsc#972789).</changelog>
  <changelog author="dnh@opensuse.org" date="1462795200">- Update to 4.8.17:
  === Core ===
  * Minimal version of Gettext is 0.18.1 (#1885)
  * Optimization of copy/move operations (use adaptive buffer as in coreutils) (#2193)
  * Recognize csh as tcsh (#2742)
  * ?entered scrolling of file panel (#3130)
  * Internals:
  * Switch to new high-level mouse API (#3571)
  === VFS ===
  * FISH helpers: remove executable bit (#3610)
  === Editor ===
  * Improvements of syntax highlighting:
  * F90 (#3618)
  * Java (MidnightCommander/mc#95)
  === Misc ===
  * Code cleanup (#3598, #3607)
  * Install mc.keymap as a symlink to mc.default.keymap (#3609)
  * File highlight: add more common file formats
  === Fixes ===
  * Segfault due to incorrect value of SHELL environment variable (#3606)
  * Segfault when copying files under FreeBSD 9.3 (#3617)
  * Segfault when entering into some cpio archives (#3621)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * Subshell cursor position lost after window resizing (#3640)
  * Listbox no longer scrolls when dragging outside widget (#3559)
  * VFS: extfs: incorrect date parsing in unzip (#3622)
  * VFS: extfs: buffer overflow (#3605)
  * VFS: patchfs: syntax error (#3620)
  * VFS: fish: mistakes in ls Perl helper (#3611)
- remove upstreamed Patch99: mc-patchfs_lzip-syntax-error.patch</changelog>
  <changelog author="dnh@opensuse.org" date="1475496000">- Update to Version 4.8.18
- Core
  * Alt-Enter, Ctrl-Enter and Ctrl-Shift-Enter shortcuts are bindable in file manager (#3075)
  * Internals:
  * Refactoring of widget subsystem (#2919, #3632)
- Editor
  * Add syntax highlighting:
  * GLSL (#3683)
  * CUDA (#3686)
- Misc
  * Code cleanup (#3641, #3652)
- Fixes
  * Build failure on FreeBSD (#3643)
  * Incompatibility with NetBSD curses (#3665)
  * Memory leaks (#3637)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * --with-subshell=optional does not work (#3642)
  * Backward search is not interruptible (#3648)
  * "Output lines" has no effect (#3655)
  * Wrong handling of mouse clicks in long listing mode (#3661)
  * Panelize resets marks on marked files in many cases (#3663)
  * Cannot change directory in the active panel in some cases (#3669)
  * Filtered View doesn't work (#3646, #3660)
  * mcedit: don't kill bookmarks when open file from "Find File" dialog (#3668)
  * man pages use "the MC" instead of "MC" (#3644)</changelog>
  <changelog author="dnh@opensuse.org" date="1488801600">- Update to Version 4.8.19
  * * Core
  * Replace $MC_HOME with $MC_PROFILE_ROOT (#3684)
  * Allow rebind TAB key to change panel (#3672)
  * Support for True Color (16 millions colors) (#3145)
  * Color aliases in skin files (#3711)
  * * VFS
  * Support timestamps with nanosecond precision for copy/move operations (#3575)
  * Introduce EXTFS helpers tester (#3730, #3744, #3752, #3753, #3751)
  * Teach u7z to parse archive listings w/o sizes and/or dates (#2707)
  * Teach rpm helper about transaction scripts (#3750)
  * Fix hp48, uace &amp; uarc extfs which used an obsolete date format (#3729, #3747)
  * * Editor
  * Syntax:
  - updates of HTML and ebuild highlighting
  - highlight *.t (Perl test) files as Perl scripts
  - disassociate .cl file extension from LISP syntax (#3691)
  * Add syntax highlighting:
  - OpenCL (#3690)
  - OpenShadingLanguage (#3762)
  - R
  - YAML (#3293)
  * * Misc
  * Code cleanup (#3693, #3703, #3721, #3763)
  * Add true color skins: 'Four seasons' (#3724)
  * Activate `--enable-tests` by default if `check` is found (#3708)
  * Added new skin: YADT (MidnightCommander/mc#115)
  * * Fixes
  * Segfault on switching left panel to Info (#3700)
  * Broken compatibility with ncurses (#3697)
  * Setting MC_HOME makes mc ignore ~/.bashrc (#3684)
  * mc_tmpdir() use a buffer of only 64 characters (#3736)
  * Some bugs in the parsing of hexadecimal search patterns (#3694)
  * Hexadecimal search fails on binary data (#3589)
  * Broken file list resorting on double click on panel header line (#3715)
  * Wrong dialog resizing and positioning (#3714, #3723)
  * Widget's 'disabled' status is not toggled immediately (#3716)
  * Last item of 'Options/Layout/Horizontal' radiobuttons remains highlighted (#3717)
  * 'Options/Layout/Equal split' checkbox gets reverted (#3718)
  * Panels: cannot show more than one "column" in user defined listing mode (#3757)
  * Mix of MSG_NOTIFY and MSG_FOCUS messages (#3731)
  * skins: 'window-state-char' and 'window-close-char' are parsed as colors (#3710)
  * Pressing &lt;right&gt; and &lt;left&gt; in the hotlist dialog doesn't refresh it (#3775)
  * mcview: an error message about bad regexp isn't shown (#3720)
  * mcedit: fix etags filenames parsing (#3698)
  * mcedit: fix mouse active area for maximize / close buttons (#3774)
  * mcedit: frames (MDI interface) don't reflect the focus state (#3766)
  * mcedit: frames (MDI interface) sometimes obscure the buttonbar (#3760)
  * mcedit doesn't show search error messages when searching backwards (#3735)
  * help viewer: tab characters handled incorrectly (#3754)
  * VFS: incorrect zoo archive listing (#3696)
  * VFS: segfault in VFSs not setting block size in stat (#3749)
- removed obsolete 02_ignore_ftp_chmod_error.patch
  if ignore_ftp_chattr_errors=true (the default?) in
  ~/.config/mc/ini, errors are ignored anyway, and if if set to false,
  the user get the error (e.g. permission denied). With the patch, the
  user never will see an error and wonder, why it's not working. It
  might have been, that this option has not worked in (much) older
  versions and the patch introduced because of this.
- removed obsolete 09_uzip_broken_528239.patch
  it is correctly detected during configure
- rebased mc-rpm.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1511870400">- Update to Version 4.8.20
  * * Core
  * Rename key bindings:
  - [main].PanelListingSwitch -&gt; [panel].CycleListingFormat
  - [main].PanelListingChange -&gt; [main].SetupListingFormat
  * Speed up of UTF-8 normalization for frequent cases (#3616)
  * * VFS
  * extfs helpers tester:
  - diff of failed tests is now included in output to ease bug reporting (#3784)
  * * Editor
  * Syntax:
  - ES2015 support (#3793)
  - TypeScript support (#3794)
  - Ada 95 updates (#3804)
  - Apache Hive QL support (#3828)
  - SQL &amp; PHP keyword updates (MidnightCommander/mc#129)
  - Simplification of case insensitive file name patterns in /usr/share/mc/syntax/Syntax file (#3829)
  - Markdown (initial support) (#3864)
  - Protocol Buffers and gRPC support (#3868)
  * Add %c (cursor offset from BOF) support for user menu macros (#3867)
  * * Viewer
  * * Diff viewer
  * * Misc
  * Unify curses initialization for various curses implementations (#3697)
  * Highlight txz extension as archive like tgz, etc. (#3782)
  * Add new media extensions to filehighlight.ini (#3834)
  * * Fixes
  * Wrong --help message for mcview, mcedit and mcdiff (#3805)
  * Compression from menu broken due to bad quoting (#3840)
  * --with-homedir gives "yes" as config directory (#3836)
  * External panelize: opening a file with an absolute path fails (#2942)
  * Filter isn't cleared when entering empty string (#3813)
  * Panelization is not kept while switching panel listing mode (#3810)
  * Cannot tab out of a QuickView panel (#3815)
  * Cannot use the F10 key in a QuickView panel (#3816)
  * Wromg INPUT_COMPLETE_CD flag handling in the QuickDialog? engine (#3870)
  * mcview: file interpreted as latin1 instead of utf8 (#3783)
  * mcview: incomplete read of filtering data (#3817)
  * mcview: search doesn't grow file as much as needed (#3819, #3855)
  * mcview: goto doesn't grow file as much as needed (#3826)
  * mcview: quick view panel: crash on slow startup while switching panel mode (#3846)
  * mcedit: fix broken encoding into UTF-8 for 8-bit displays (#3843)
  * mcedit: incorrect %f macro substitution in the user menu (#3861)
  * man pages: wrong paths of mc.hint and mc.hlp (#3806)
  * subshell: fix broken tcsh 6.20+ cd escaping (#3852)
  * VFS: incremental tar doesn't contain empty directories (#2297)
  * VFS: incremental tar: wrong directories owner for tar --numeric-owner -g (#3709)
  * VFS: timestamps not being preserved due to uninitialized struct stat st_[acm]tim.tv_nsec (#3821)
  * VFS: ftp: can't retrieve password from .netrc when user is in URL (#3869)
  * VFS: tests: locale issue causing helpers using 'sort' to fail (#3787)
  * VFS: tests: unportable 'echo' use causing one rpm helper test to fail (#3786)
  * Spelling errors in the manual page (#3839)</changelog>
  <changelog author="adam.majer@suse.de" date="1523361600">- xls2csv_update.patch: fix mc to call xls2csv correctly
  (bsc#1087708)</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- Remove some unused BuildRequires, enabling building on SLE-15
- Drop fdupes usage as difference is only 1 file smaller than 1kB.</changelog>
  <changelog author="adam.majer@suse.de" date="1530014400">- sftp_interactive_password.patch: Fixes logins to remote SSH
  sessions where only Keyboard-Interactive password is available
  and tunneled password is disabled (bsc#1098235)</changelog>
</package>
<package pkgid="ad69f3a0a56fa67f1aec7f20ffac0942b78a2ee203daab50849d9d84b373d9d6" name="mc-lang" arch="noarch">
  <version epoch="0" ver="4.8.20" rel="lp150.3.3.1"/>
  <changelog author="dnh@opensuse.org" date="1389700800">- add preliminary patch by Sebastian Siebert
  mc-vfs-fish-deleted_source_file.patch
  bnc#856501 and http://www.midnight-commander.org/ticket/3128</changelog>
  <changelog author="jengelh@inai.de" date="1391083200">- Spec metadata update, remove redundant %clean section,
  do parallel build with %_smp_mflags</changelog>
  <changelog author="dnh@opensuse.org" date="1394884800">- add mc-vfs_fish_helpers_ls-formatstring.diff
  fixing possible format-string attack via filename
  http://www.midnight-commander.org/ticket/2983
  until http://www.midnight-commander.org/ticket/3128
  is fixed, fish should stay disabled though!</changelog>
  <changelog author="dnh@opensuse.org" date="1394884801">- fix bug ("%i" is not an appropriate format for off_t) in
  mc-vfs_fish_helpers_ls-formatstring.diff, thanks to andrew_b
  of upstream in mc-ticket:2983</changelog>
  <changelog author="dnh@opensuse.org" date="1396440000">- update to 4.8.12
- remove mc-vfs_fish_helpers_ls-formatstring.diff (fixed upstream)
- change mc-extfs-iso9660-xorriso.patch to work with upstream fix</changelog>
  <changelog author="dnh@opensuse.org" date="1409918400">- update to 4.8.13
  various bugfixes and minor improvements, see NEWS file for details
- comment out mc-Syntax.cmake.patch, fixed upstream, to be removed</changelog>
  <changelog author="dnh@opensuse.org" date="1410004800">- remove file mc-Syntax.cmake.patch / cmds in .spec
- remove file mc-vfs_fish_helpers_ls-formatstring.diff
  (extraneous patches seem to cause factory-auto to decline the submit)
  cf. e.g. https://build.opensuse.org/request/show/247789</changelog>
  <changelog author="astieger@suse.com" date="1427198400">- GNU Midnight Commander 4.8.14:
  * Core:
    + Minimal version of GLib is 2.14.0
    + Add new panel binding "SelectExt" to select/unselect files
    with the same extension as the current file
    + Speed up of directory size calculation
    + Support of italic text
  * Editor:
    + New syntax highlighting support: puppet
  * Viewer:
    + Rewrite mcview's rendering and scrolling
    + Use VIEW_SELECTED_COLOR in plain mode
    + In QuickView panel, don't pass any chars to command line to
    avoid unexpected command execution
  * Misc:
    + Code cleanup
    + Bind poedit to Edit action for .po files
    + Better grammar mcedit user menu
  * Various bug fixes</changelog>
  <changelog author="dnh@opensuse.org" date="1447070400">- Update to 4.8.15:
  * Core:
    Minimal version of GLib is 2.26.0
    Use the PATH environment variable to search for the executable when opening pipe (#3444)
    Support more than 2 (up to 9) columns in file panel in brief mode (#3212)
    Clarify file sorting in "Unsorted" mode (#3496)
    WGroupbox: respect dialog's colors (#3468)
    Highlight find file's result in internal viewer (#3530)
  * VFS:
    s3 extfs vfs: bugfixes and improvements (#3470, #3502)
  * Editor:
    Add hidden option to choose full or base file name in the status line (#3445)
    Improvements of syntax highlighting:
    Lua (#3471)
    PKGBUILD (#3484)
  * Misc:
    Text alignment in Info panel (#3155)
    Select of menu file edit: change default button to "User" (#3493)
    Recognize .gmo files as well as .mo ones (#3422)
    Fix mc.pot comment tripping up Transifex and unportable inplace sed (#3479)
    A lot of code clean up (#3420, #3424, #3426, #3427, #3428, #3429, #3430, #3431, #3434, #3435, #3437, #3463, #3464, #3465, #3466, #3467, #3494, #3495, #3539)
    Documentation updates:
    Spanish man and help: Diff Viewer section and minor fixes (#3477)
    VFS garbage collection (#3472)
  * Fixes:
    Various memory leaks (#3438, #3439, #3440, #3457, #3458, #3459, #3460, #3461, #3462, #3475, #3520, #3521, #3522)
    Linux kernel-specific segfault on startup (#3441)
    Lost of Panelize contents in some cases (#3032, #3489, #3498, #3507)
    Wrong highlight of search result in case of "Regular expression" and "Whole words" (#3524)
    "Whole words" search works only in Normal mode (#3525)
    SFTP VFS: segfault (#3456)
    Segfault in "Find file" due to invalid UTF-8 sequences (#3449)
    Bash variable 'PROMPT_COMMAND' in pantheon-terminal (#3534)
- rebased mc-extd-xdg.patch against upstream changes</changelog>
  <changelog author="pth@suse.de" date="1447070401">- Tag .sha256 file as source.</changelog>
  <changelog author="astieger@suse.com" date="1447070402">- verify the sha256 hash during build</changelog>
  <changelog author="dnh@opensuse.org" date="1457956800">- Update to 4.8.16:
  Core
    Support for ash + bugfixes for bash, fish (#2742)
    Find file: empty file name matches any file name (#3593)
    Find file: empty value of "Content" is used instead of "Search for content" checkbox to disable search for content (#3594)
    Listbox: don't wraparound on mouse scroll (#3554)
    Internals:
    Listbox: various fixups (#3569: #3562, #3563, #3565, #3161)
    Split MSG_ACTION into MSG_ACTION and MSG_NOTIFY (#3566)
  VFS
    Support lzip compression format (#2673, #1541)
    Support lz4 compression format (#3523)
    patchfs: support xz compression (#3443)
    Update uc1541 version (#3527)
    Add mc.ext patterns for initramfs / initrd (#3115)
  Editor
    Add golang syntax (MidnightCommander?/mc#84)
    Update Puppet syntax (MidnightCommander?/mc#86)
  Misc
    Code cleanup (#3555, #3547, #3587)
    Better subshell documentation (#3556)
    Fixes to the English man pages by Denys Vlasenko
  Fixes
    Insufficient quoting in mc.menu (#2947)
    Broken ./configure --without-internal-edit (#3601)
    Memory leaks (#3547, #3561, #3567, #3572)
    No preallocation if appending during file copy (#3577)
    Cannot set mini-format for "brief" listing type (#3588)
    Info panel: incorrect inode information in some cases (#3214)
    Info panel: wrong device name with symbolic link (#3412)
    Info panel: buffer overflow (#3582)
    Regression: match filename, not full path in mc.ext (#3578)
    Broken case insensitive search in non-unicode locale (#3491)
    Error message prefixed with no sense "0:" (#3269)
    mcedit: buffer overflow (#3579)
    mcedit: "Lower case selection" command in User Menu (#3586)
    mcedit: close on ctrl-g (#3557)
    mcview: "Not found" result isn't reported in some cases (#3543)
    VFS: isofs doesn't show .dotfiles (#3537)
    VFS: isofs: cannot copy file from iso when Joliet without RockRidge? is used (#2851)
    VFS: extfs/unzip: enter into zip file fails with "inconsistent extfs archive" (#3433)
    VFS: SFTP: various bugs (#3581)
    VFS: FISH: provide major/minor info for block/char devices (#3599)
    Bashism in gitfs+ extfs helper (#3379)
    Non-portable invocation of man (#3509)
    mc-wrapper leaves MC_USER set (#3550)
    Broken silent opening of files in background (#3574)
    Run identify on JPEGs even if exif is not installed (#3568)
- rebased a bunch of patches</changelog>
  <changelog author="dnh@opensuse.org" date="1459512000">- Add no-brainer patch mc-patchfs_lzip-syntax-error.patch from upstream
  that fixes a syntax error in the patchfs helper script (bsc#972789).</changelog>
  <changelog author="dnh@opensuse.org" date="1462795200">- Update to 4.8.17:
  === Core ===
  * Minimal version of Gettext is 0.18.1 (#1885)
  * Optimization of copy/move operations (use adaptive buffer as in coreutils) (#2193)
  * Recognize csh as tcsh (#2742)
  * ?entered scrolling of file panel (#3130)
  * Internals:
  * Switch to new high-level mouse API (#3571)
  === VFS ===
  * FISH helpers: remove executable bit (#3610)
  === Editor ===
  * Improvements of syntax highlighting:
  * F90 (#3618)
  * Java (MidnightCommander/mc#95)
  === Misc ===
  * Code cleanup (#3598, #3607)
  * Install mc.keymap as a symlink to mc.default.keymap (#3609)
  * File highlight: add more common file formats
  === Fixes ===
  * Segfault due to incorrect value of SHELL environment variable (#3606)
  * Segfault when copying files under FreeBSD 9.3 (#3617)
  * Segfault when entering into some cpio archives (#3621)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * Subshell cursor position lost after window resizing (#3640)
  * Listbox no longer scrolls when dragging outside widget (#3559)
  * VFS: extfs: incorrect date parsing in unzip (#3622)
  * VFS: extfs: buffer overflow (#3605)
  * VFS: patchfs: syntax error (#3620)
  * VFS: fish: mistakes in ls Perl helper (#3611)
- remove upstreamed Patch99: mc-patchfs_lzip-syntax-error.patch</changelog>
  <changelog author="dnh@opensuse.org" date="1475496000">- Update to Version 4.8.18
- Core
  * Alt-Enter, Ctrl-Enter and Ctrl-Shift-Enter shortcuts are bindable in file manager (#3075)
  * Internals:
  * Refactoring of widget subsystem (#2919, #3632)
- Editor
  * Add syntax highlighting:
  * GLSL (#3683)
  * CUDA (#3686)
- Misc
  * Code cleanup (#3641, #3652)
- Fixes
  * Build failure on FreeBSD (#3643)
  * Incompatibility with NetBSD curses (#3665)
  * Memory leaks (#3637)
  * Subshell output lost on window resize under tmux, GNU screen (#3639)
  * --with-subshell=optional does not work (#3642)
  * Backward search is not interruptible (#3648)
  * "Output lines" has no effect (#3655)
  * Wrong handling of mouse clicks in long listing mode (#3661)
  * Panelize resets marks on marked files in many cases (#3663)
  * Cannot change directory in the active panel in some cases (#3669)
  * Filtered View doesn't work (#3646, #3660)
  * mcedit: don't kill bookmarks when open file from "Find File" dialog (#3668)
  * man pages use "the MC" instead of "MC" (#3644)</changelog>
  <changelog author="dnh@opensuse.org" date="1488801600">- Update to Version 4.8.19
  * * Core
  * Replace $MC_HOME with $MC_PROFILE_ROOT (#3684)
  * Allow rebind TAB key to change panel (#3672)
  * Support for True Color (16 millions colors) (#3145)
  * Color aliases in skin files (#3711)
  * * VFS
  * Support timestamps with nanosecond precision for copy/move operations (#3575)
  * Introduce EXTFS helpers tester (#3730, #3744, #3752, #3753, #3751)
  * Teach u7z to parse archive listings w/o sizes and/or dates (#2707)
  * Teach rpm helper about transaction scripts (#3750)
  * Fix hp48, uace &amp; uarc extfs which used an obsolete date format (#3729, #3747)
  * * Editor
  * Syntax:
  - updates of HTML and ebuild highlighting
  - highlight *.t (Perl test) files as Perl scripts
  - disassociate .cl file extension from LISP syntax (#3691)
  * Add syntax highlighting:
  - OpenCL (#3690)
  - OpenShadingLanguage (#3762)
  - R
  - YAML (#3293)
  * * Misc
  * Code cleanup (#3693, #3703, #3721, #3763)
  * Add true color skins: 'Four seasons' (#3724)
  * Activate `--enable-tests` by default if `check` is found (#3708)
  * Added new skin: YADT (MidnightCommander/mc#115)
  * * Fixes
  * Segfault on switching left panel to Info (#3700)
  * Broken compatibility with ncurses (#3697)
  * Setting MC_HOME makes mc ignore ~/.bashrc (#3684)
  * mc_tmpdir() use a buffer of only 64 characters (#3736)
  * Some bugs in the parsing of hexadecimal search patterns (#3694)
  * Hexadecimal search fails on binary data (#3589)
  * Broken file list resorting on double click on panel header line (#3715)
  * Wrong dialog resizing and positioning (#3714, #3723)
  * Widget's 'disabled' status is not toggled immediately (#3716)
  * Last item of 'Options/Layout/Horizontal' radiobuttons remains highlighted (#3717)
  * 'Options/Layout/Equal split' checkbox gets reverted (#3718)
  * Panels: cannot show more than one "column" in user defined listing mode (#3757)
  * Mix of MSG_NOTIFY and MSG_FOCUS messages (#3731)
  * skins: 'window-state-char' and 'window-close-char' are parsed as colors (#3710)
  * Pressing &lt;right&gt; and &lt;left&gt; in the hotlist dialog doesn't refresh it (#3775)
  * mcview: an error message about bad regexp isn't shown (#3720)
  * mcedit: fix etags filenames parsing (#3698)
  * mcedit: fix mouse active area for maximize / close buttons (#3774)
  * mcedit: frames (MDI interface) don't reflect the focus state (#3766)
  * mcedit: frames (MDI interface) sometimes obscure the buttonbar (#3760)
  * mcedit doesn't show search error messages when searching backwards (#3735)
  * help viewer: tab characters handled incorrectly (#3754)
  * VFS: incorrect zoo archive listing (#3696)
  * VFS: segfault in VFSs not setting block size in stat (#3749)
- removed obsolete 02_ignore_ftp_chmod_error.patch
  if ignore_ftp_chattr_errors=true (the default?) in
  ~/.config/mc/ini, errors are ignored anyway, and if if set to false,
  the user get the error (e.g. permission denied). With the patch, the
  user never will see an error and wonder, why it's not working. It
  might have been, that this option has not worked in (much) older
  versions and the patch introduced because of this.
- removed obsolete 09_uzip_broken_528239.patch
  it is correctly detected during configure
- rebased mc-rpm.patch</changelog>
  <changelog author="ecsos@opensuse.org" date="1511870400">- Update to Version 4.8.20
  * * Core
  * Rename key bindings:
  - [main].PanelListingSwitch -&gt; [panel].CycleListingFormat
  - [main].PanelListingChange -&gt; [main].SetupListingFormat
  * Speed up of UTF-8 normalization for frequent cases (#3616)
  * * VFS
  * extfs helpers tester:
  - diff of failed tests is now included in output to ease bug reporting (#3784)
  * * Editor
  * Syntax:
  - ES2015 support (#3793)
  - TypeScript support (#3794)
  - Ada 95 updates (#3804)
  - Apache Hive QL support (#3828)
  - SQL &amp; PHP keyword updates (MidnightCommander/mc#129)
  - Simplification of case insensitive file name patterns in /usr/share/mc/syntax/Syntax file (#3829)
  - Markdown (initial support) (#3864)
  - Protocol Buffers and gRPC support (#3868)
  * Add %c (cursor offset from BOF) support for user menu macros (#3867)
  * * Viewer
  * * Diff viewer
  * * Misc
  * Unify curses initialization for various curses implementations (#3697)
  * Highlight txz extension as archive like tgz, etc. (#3782)
  * Add new media extensions to filehighlight.ini (#3834)
  * * Fixes
  * Wrong --help message for mcview, mcedit and mcdiff (#3805)
  * Compression from menu broken due to bad quoting (#3840)
  * --with-homedir gives "yes" as config directory (#3836)
  * External panelize: opening a file with an absolute path fails (#2942)
  * Filter isn't cleared when entering empty string (#3813)
  * Panelization is not kept while switching panel listing mode (#3810)
  * Cannot tab out of a QuickView panel (#3815)
  * Cannot use the F10 key in a QuickView panel (#3816)
  * Wromg INPUT_COMPLETE_CD flag handling in the QuickDialog? engine (#3870)
  * mcview: file interpreted as latin1 instead of utf8 (#3783)
  * mcview: incomplete read of filtering data (#3817)
  * mcview: search doesn't grow file as much as needed (#3819, #3855)
  * mcview: goto doesn't grow file as much as needed (#3826)
  * mcview: quick view panel: crash on slow startup while switching panel mode (#3846)
  * mcedit: fix broken encoding into UTF-8 for 8-bit displays (#3843)
  * mcedit: incorrect %f macro substitution in the user menu (#3861)
  * man pages: wrong paths of mc.hint and mc.hlp (#3806)
  * subshell: fix broken tcsh 6.20+ cd escaping (#3852)
  * VFS: incremental tar doesn't contain empty directories (#2297)
  * VFS: incremental tar: wrong directories owner for tar --numeric-owner -g (#3709)
  * VFS: timestamps not being preserved due to uninitialized struct stat st_[acm]tim.tv_nsec (#3821)
  * VFS: ftp: can't retrieve password from .netrc when user is in URL (#3869)
  * VFS: tests: locale issue causing helpers using 'sort' to fail (#3787)
  * VFS: tests: unportable 'echo' use causing one rpm helper test to fail (#3786)
  * Spelling errors in the manual page (#3839)</changelog>
  <changelog author="adam.majer@suse.de" date="1523361600">- xls2csv_update.patch: fix mc to call xls2csv correctly
  (bsc#1087708)</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- Remove some unused BuildRequires, enabling building on SLE-15
- Drop fdupes usage as difference is only 1 file smaller than 1kB.</changelog>
  <changelog author="adam.majer@suse.de" date="1530014400">- sftp_interactive_password.patch: Fixes logins to remote SSH
  sessions where only Keyboard-Interactive password is available
  and tunneled password is disabled (bsc#1098235)</changelog>
</package>
<package pkgid="c71fc1ea5d598271d986d43514733a967b57e612aab7ed421b1804d2ada3ae32" name="mercurial" arch="src">
  <version epoch="0" ver="4.5.2" rel="lp150.2.3.1"/>
  <changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
  <changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
</package>
<package pkgid="f3bbe2847f4fa24d5facec666848a641375d0528c37089e350663a5d369f1ad9" name="mercurial" arch="x86_64">
  <version epoch="0" ver="4.5.2" rel="lp150.2.3.1"/>
  <changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
  <changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
</package>
<package pkgid="c50a3fe7ec034f8cccb8e084117edab9249126e404092e73f029e81e768cb375" name="mercurial-lang" arch="noarch">
  <version epoch="0" ver="4.5.2" rel="lp150.2.3.1"/>
  <changelog author="develop7@develop7.info" date="1462190400">- update to v3.8.1
  (3.8.1 was released immediately after 3.8 to fix a release oversight.)
  Regularly scheduled feature release. This release contains a low-priority security fix for:
  * CVE-2016-3105 Mercurial: arbitrary code execution when converting Git repos
  Features
  * `hg update` and other commands that can perform update (such as hg pull -u)
    now warn about other topological heads
  * cHg has been added
  * `hg update` now updates to the tip-most changeset on the same topological
    branch. Before, it would update to the tip-most changeset, possibly on a
    different topological head
  * Hints on how to continue interrupted commands are now printed
    (e.g. `hg resolve -m` will now tell you to run `hg rebase --continue` or
    `hg histedit --continue`)
  * The experimental automv extension has been added. This extension attempts
    to detect file copes and renames automatically.
  * The 3rd party hgwatchman extension has been imported as the fsmonitor
    extension. This extension uses filesystem watching to make commands like
    `hg status` significantly faster on large repositories.
  * `hg rebase` now chooses its default destination the same way `hg merge` does
  * `hg pull -u` now activates a bookmark if the has a bookmark
  * `hg pull -u` now deactivates a bookmark if the destination doesn't match
    the existing bookmark
  * Improved edge styles in graph log.
  * User template keywords and functions can be defined in `[templatealias]`
    section.
  * It's now possible to push the active bookmark using `hg push -B .`.
  Improvements
  This release includes many improvements, including (but not limited to):
  * performance of copy detection during rebases has been improved, potentially
    leading to faster rebase execution
  * performance of `hg log -f &lt;file&gt;` has been improved
  * syntax errors in loaded extensions are now handled better
  * `hg update` on Windows should now be up to 4x faster
  * JSON encoding should now be proper UTF-8 for all inputs
  * Performance of the - revset operator has been improved
  * The blackbox extension now logs more data
  * "hgext" is now a Python namespace package
  * revsets accessing changelog data (commit messages, authors, dates) are now
    10-15% faster
  * hg.exe built in MinGW will now link against the proper Python DLL</changelog>
  <changelog author="develop7@develop7.info" date="1462276800">- fix mercurial-locale-fix.patch</changelog>
  <changelog author="develop7@develop7.info" date="1463486400">- Mercurial v3.8.2
  This is an unscheduled bugfix release. 3.8.1 contained a noisy deprecation
  warning that was only intended for Mercurial developers, sorry.
  * bookmarks: properly invalidate volatile sets when writing bookmarks
  * builddeb: add distroseries to tagged versions
  * bundle2: properly request phases during getbundle
  * debian: add wish to suggests
  * debian: forgot to make debian/rules executable in 6b95a623ec90
  * deprecation: gate deprecation warning behind devel configuration
  * help: fix the display for hg help internals.revlogs (issue5227)
  * help: search section of help topic by translated section name correctly
  * hg-ssh: copy doc string to man page
  * patch: show lower-ed translated message correctly
  * progress: stop excessive clearing (issue4801)</changelog>
  <changelog author="astieger@suse.com" date="1465732800">- mercurial 3.8.3:
  * bookmarks: allow pushing active bookmark on new remote head
  * localrepo: prevent executable-bit only changes from being lost on amend
  * strip: invalidate phase cache after stripping changeset
- verify source signature</changelog>
  <changelog author="develop7@develop7.info" date="1470052800">- Mercurial v3.9
  + Features
  * ui.textwidth can now be set to define width of help text
  * separate() template function added
  * ui.rollback can be set to false to disable the hg rollback command
  * fail-&lt;command&gt; hooks now run when a command fails
  * experimental.graphstyle.* config options to control styling of graphs in
    console
  * experimental.histedit.autoverb allows histedit lines beginning with
    "verb!" to be interpreted as histedit actions
  * [hostsecurity] config section for defining advanced per-host security
    settings
  * ability to define the SHA-256 and SHA-512 hashes of pinned server
    certificates
  * ability to define CA certificates on a per-host basis
  * ability to define the minimum TLS protocol version on a global or
    per-host basis
  * sort() revset can now perform topological sorts using the topo option
  * hgweb can now render JSON for filelog, filerevision, summary, and search
    web commands
  * [paths] entries can now define a pushrev sub-option to control which
    revisions to push by default
  * The experimental 'journal' extension was added, allowing users to view
    the previous positions of bookmarks and the working copy
  + Improvements
    This release includes many improvements, including (but not limited to):
  * performance of `hg diff` has been improved
  * chg now detects more changes to the configuration and execution
    environment
  * SSL/TLS code has been significantly refactored and now is consistent
    across all consumers (HTTPS, SMTPS)
  * performance improvements to server communication (particularly for the
    largefiles and remotefilelog extensions)
  * connections to servers whose certificate authority (CA) is unknown are
    now refused even if no CA certificates are available (see SecureConnections for details)
  * fingerprints of server certificates are now printed using SHA-256
    instead of SHA-1
  * reads and writes to certain files is now robust and avoids more race
    conditions and edge cases (see ExactCacheValidationPlan)
  * performance improvements to certain revsets
  * cloning will no longer prompt for a password multiple times when cloning
    from a server that requires a password
  * annotate view in hgweb now groups lines into blocks depending on their
    revision and highlights lines for the current revision
  * hgweb now displays extra information and also navigation links in popups
    for each line in annotate view</changelog>
  <changelog author="develop7@develop7.info" date="1474286400">- Mercurial 3.9.1 (2016-9-1)
  This is a regularly-scheduled bugfix release.
  * bundle2: fail faster when interrupted
  * bundle2: localize handleoutput remote prompts
  * convert: move svn config initializer out of the module level
  * debian: update source URL in copyright file
  * exchange: correctly specify url to unbundle (issue5145)
  * help: add example of '[templates]' usage
  * help: update link to wiki/CommandServer
  * osx: update bugzilla link in readme
  * revset: fix keyword arguments to go through optimization process
  * win32: update link to mailing list in readme
  * win32: update wiki link in mercurial.ini</changelog>
  <changelog author="develop7@develop7.info" date="1478088000">- Mercurial 4.0
  This is a regularly-scheduled quarterly feature release. Unlike other
  4.0 software releases, this is simply 3.9 + .1, so it should be the usual
  pain-free upgrade.
  + Features
  * The following commands now also have experimental formatter support:
    'hg version', 'hg grep' and 'hg config'
  * New template keywords and functions: `termwidth`, `mod(a, b)`,
    `relpath(path)`
  * Basic arithmetic operations in template such as `termwidth - 10`
  * `follow()` revset takes new `startrev` parameter
  * Bash completion now allows skipping potentially expensive status call
    for completing 'hg status' arguments, using $HGCOMPLETE_NOSTATUS
    environment variable
  + Improvements
  * A number of changes were made to move and copy tracking, to make sure
    move and copy information is not lost during commands like 'hg graft'
  * Compound revset expression is now properly ordered
  * Python 3 support has received a lot of improvements (but will take a
    lot of additional work)
  * zlib performance in hgweb is improved, and it's possible to control zlib
    compression level using server.zliblevel option
- Refreshed mercurial-hgk-path-fix.diff and mercurial-locale-path-fix.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1483704000">- Update to version 4.0.2:
  * demandimport: do not raise ImportError for unknown item in
    fromlist
  * posix: make poll() restart on interruption by signal
  * hgweb: add missing slash to file log url in rss style
  * hgweb: cache fctx.parents() in annotate command
  * vfs, scmutil: ignore EPERM at os.utime, which avoids ambiguity
- Update package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1485950400">- Mercurial 4.1
  This is a regularly-scheduled quarterly feature release.
  + Features
  * A new extensible "compression engines" API has been implemented. Support
    for a new compression format can now be implemented in extensions.
  * New compression formats are fully supported in bundles and the wire
    protocol. There is experimental support for different compression in
    revlogs.
  * zstd - a new and exciting compression engine - is now distributed with
    Mercurial and built by default
  * HTTP payloads for many commands will now use zstd by default (as opposed
    to zlib) when both client and server support it. This can reduce
    server-side CPU usage to ~60% of original for operations like serving
    bundles.
  * zstd compressed bundles can be produced by specifying the `zstd` bundle
    type. e.g. `hg bundle -a -t zstd-v2 zstd-bundle.hg`.
  * A new statistical profiler has been added and made the default profiler
    for `--profile`. This profiler gives more accurate results than Python's
    built-in cProfile (the previous default) because the profiler overhead is
    much smaller. The output from `--profile` now displays the code hot path
    by default. This allows Mercurial developers to more accurately identify
    performance problems.
  * New `followlines(file, from:to, startrev=.)` revset predicate to track a
    part of changes.
  * Experimental support for additional git-diff features.
  * Troubled changes (from ChangesetEvolution) are noted more prominently in a few places.
  * An experimental hg debugupgraderepo command allows in-place upgrading of
    repositories to the latest storage format.
  + Improvements
  * Performance of reading individual revlog entries has been greatly
    improved. This will be noticeable when performing changelog scans on
    large repositories (such as when executing certain revsets).
  * The low-level content diffing algorithm is now ~2x faster. Operations
    that write data to the repository (like commit) can be noticeably faster
    as a result.
  See complete changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.1_.282017-2-1.29
- refreshed mercurial-locale-path-fix.patch and mercurial-hgk-path-fix.diff
- refresh package keyring</changelog>
  <changelog author="develop7@develop7.info" date="1491307200">- Mercurial 4.1.2
  This is a regularly-scheduled bugfix release.
  + Mercurial should work inside IIS on Windows again. (issue5493)
  + zstd support now refuses to work on old bundle formats. (issue5506)
  + Merges involving subrepositories no longer crash in some cases. (issue5505)
  + Checking for new heads during push is no longer accidentally quadratic
- Mercurial 4.1.1
  This is a regularly-scheduled bugfix release.
  + Several incorrect mailing list addresses have been corrected.
  + Various error cases have been corrected during push and pull.
  + Minor issues that happened when Mercurial spawned worker processes have
    been fixed.</changelog>
  <changelog author="develop7@develop7.info" date="1494158400">- Mercurial 4.2
  This is a regularly-scheduled quarterly feature release.
  * Notable changes
    + Pager support has been moved into core and is now enabled by default.
    This is now controlled with the ui.paginate setting.
    Note that in 4.2-rc, the ui.paginate option was named pager.enable. The
    old name has been dropped in the final release. If you had turned
    pagination off using pager.enable=False, please update your config.
    + Color support has also been moved into core and is now enabled by default
    (the ui.color setting now defaults to 'auto').
    + The new experimental 'show' extension provides a way to view various
    information about your repository in an ergonomic way. It is deliberately
    designed for human consumption and not for scripting, so it doesn't carry
    the same backward compatibility guarantees as other commands. See
    'hg help -e show' for more information.
    + Mercurial now requires `setuptools` on Windows</changelog>
  <changelog author="develop7@develop7.info" date="1499256000">- Mercurial 4.2.2
  This is a regularly-scheduled bugfix release.
  * largefiles: avoid a crash when archiving a subrepo with largefiles disabled
  * rebase: also test abort from pretxnclose error
  * rebase: backed out changes 2519994d25ca and cf8ad0e6c0e4 (issue5610)
  * rebase: reinforce testing around precommit hook interrupting a rebase
- Mercurial 4.2.1
  This is a regularly-scheduled bugfix release.
  * `hg graft` now works when grafting across merges that were problematic
    before (b4e1e30528c7).
  * A race condition in `hg status` was partially fixed (issue5584).
  * The message about deprecated SHA-1 hashes in the [hostfingerprints] config
    section now references the correct syntax for replacing them with SHA-256
    hashes (issue5559).</changelog>
  <changelog author="tiwai@suse.de" date="1502366400">- mercurial 4.2.3: security fix updates for
  CVE-2017-1000115 and CVE-2017-1000116:
  * Mercurial's symlink auditing was incomplete prior to 4.3, and
    could be abused to write to files outside the repository
    (CVE-2017-1000115 bsc#1053344)
  * Mercurial was not sanitizing hostnames passed to ssh, allowing
    shell injection attacks by specifying a hostname starting with
  - oProxyCommand (CVE-2017-1000116, bsc#1052696)</changelog>
  <changelog author="tiwai@suse.de" date="1502798400">- Mercurial 4.3.1:
  This is a regularly-scheduled quarterly feature release,
  including the previous two security fixes (CVE-2017-1000115,
  CVE-2017-1000116)
  Notable changes:
  * experimental amend extension providing the amend command
  * experimental sparse extension
  * Support for Python 2.6 has been dropped.
  * Bundles created by the strip extension now store phase
    information. It will be restored when unbundling.
  * The strip extension now removes relevant obsmarkers.
    If a backup requested (the default), the obsmarkers are stored
    in the backup bundle and will be restored when unbundling.
  * hg show work (from the experimental show extension) now
    displays more info
  * hg show stack is a new view for the current, in-progress
    changeset and others around it
  * Mitigation for two security vulnerabilities</changelog>
  <changelog author="develop7@develop7.info" date="1509883200">- Mercurial 4.4
  Notable changes
    Control whitespace settings for annotation on hgweb
  * /annotate URLs on hgweb now accept query string arguments to influence how
    whitespace changes impact results.
  * The arguments "ignorews," "ignorewsamount," "ignorewseol," and
    "ignoreblanklines" now have the same meaning as their [annotate] config
    section counterparts. Any provided setting overrides the server default.
  * HTML checkboxes have been added to the paper and gitweb themes to expose
    current whitespace settings and to easily modify the current view.
    Fast, heuristic copy-tracing
    A new fast heuristic algorithm for copytracing which assumes that the
    files moves are either:
    1. renames in the same directory
    2. moves in other directories with same names
    You can use this algorithm by setting 'experimental.copytrace=heuristics'.
    This setting performs full copytracing if both source and destination
    branches contains non-public changesets only.
    Other changes
  * Estimated time is more accurate with non-linear progress
  * "hg status -v" can now show unfinished state. For example, when in an
    unfinished rebase state, "hg status -v" might show:
    [#] The repository is in an unfinished *rebase* state.
    [#] No unresolved merge conflicts.
    [#] To continue:                hg rebase --continue
    [#] To abort:                   hg rebase --abort
  * Added '--ignore-space-at-eol' diff option to ignore whitespace
    differences at line endings.
  * show: use consistent node length in views
  * show: decrease minimum displayed hash length from 5 to 4
  * A new uncommit extension which provides 'hg uncommit' using which one
    can uncommit part or all of the changeset. This command undoes the
    effect of a local commit, returning the affected files to their
    uncommitted state.
  * 'hg clone --uncompressed' uses clone bundles when possible
  * 'hg annotate --skip' now prints a '*' on lines with skipped revisions
  * New 'commands.update.check' feature to adjust constraints on when
    'hg update' will allow updates with a dirty working copy.
  * Add an experimental -L/--line-range FILE,FROMLINE:TOLINE option to
    'hg log' command to follow the history of files by line range. In
    combination with -p/--patch option, only diff hunks within specified
    line range will be displayed. Feedback, especially on UX aspects, is
    welcome.
  * Print warning when fsmonitor isn't being used on a large repository
  Read rest of the changelog at
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.4_.282017-11-01.29
- Mercurial 4.3.3
  * Prevent crashes when clearing progress bar. (issue5684)
  * rebase: move bookmarks with --keep (issue5682)
- Mercurial 4.3.2
  * restore compatibility with older versions of Python 2.7 by not using a
    bytearray with struct.unpack_from()
  * restore mingw compatibility for setup.py
  * hgwebdir: read 'web.template' untrusted (plugs potential security issue)
  * repair: preserve phase when not using generaldelta (issue5678)
  * ssh: fix flakey ssh errors on BSD systems
  * restore error handling behavior around certain I/O errors; the regressed
    behavior could result in transactions not being properly rolled back if
    stdio handles encountered errors (issue5658)
  * templatekw: choose {latesttag} by len(changes), not date (issue5659)
  * record: fix revert -i for lines without newline (issue5651)
  * mq: create non-lossy patches, also with custom global diff configuration
- Fixed README file name (now it's README.rst)</changelog>
  <changelog author="develop7@develop7.info" date="1510401600">- Mercurial 4.4.1
  1. Notable changes
  * Git and Subversion subrepos have been disabled by default to mitigate a
    potential security risk if files overlapping with a subrepo managed to be
    committed to a repository.
    bsc#1071715 CVE-2017-17458
  * Subrepos are now more paranoid about symlink traversal.
  * The share extension handles drive letters on Windows better.
  It is possible that a specially malformed repository can cause Git
  subrepositories to run arbitrary code in the form of a .git/hooks/post-update
  script checked in to the repository in Mercurial 4.4 and earlier. Typical use
  of Mercurial prevents construction of such repositories, but they can be
  created programmatically.</changelog>
  <changelog author="develop7@develop7.info" date="1517745600">- Mercurial 4.5
  See full changelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5-rc_.282018-01-22.29
  1. New Features
    1.1. revert --interactive
    The revert command now accepts the flag --interactive to allow reverting
    only some of the changes to the specified files.
    1.2. Accessing hidden changesets
    Set config option `experimental.directaccess = True` to access hidden
    changesets from read only commands.
    1.3. githelp extension
    The githelp extension provides the `hg githelp` command. This command
    attempts to convert a git command to its Mercurial equivalent. The
    extension can be useful to Git users new to Mercurial.
    1.4. Largefiles changes
    largefiles: add a 'debuglfput' command to put largefile into the store
    largefiles: add support for 'largefiles://' url scheme
    largefiles: allow to run 'debugupgraderepo' on repo with largefiles
    largefiles: convert EOL of hgrc before appending to bytes IO
    largefiles: explicitly set the source and sink types to 'hg' for lfconvert
    largefiles: modernize how capabilities are added to the wire protocol
  2. hgweb changes
    hgweb now shows more information about commits: phase (if it's not public),
    obsolescence status (with a short explanation and links to the successors)
    and instabilities (e.g. orphan, phase-divergent or content-divergent).
    Client-side graph code has been simplified by delegating more work to the
    backend, so /graph page is now more in sync with /log page, visually and
    feature-wise. Unfortunately, this code change means that 3rd-party themes
    for 4.5+ are required to have graphentry.tmpl template available (copy it
    from the base theme if you don't use %include and then reference it in map
    file) and render entries in graph.tmpl -- look at one of the core themes to
    see what it needs to look like. JS functions that create graph vertices and
    edges are now available in Graph.prototype, making it possible to call the
    original functions from custom theme-specific functions if needed.
    Graph now shows different symbols for normal, branch-closing, obsolete and
    unstable commits, and marks currently checked out commit with a circle
    around its graph node.
    There's also now json-graph API endpoint that can be used for rendering
    commit graph in 3rd-party applications.
  2.1. Other Changes
    When interactive revert is run against a revision other than the working
    directory parent, the diff shown is the diff to _apply_ to the working
    directory, rather than the diff to _discard_ from the working copy. This is
    in line with related user experiences with 'git' and appears to be less
    confusing with 'ui.interface=curses'.
    Let 'hg rebase' avoid content-divergence by skipping obsolete changesets
    (and their descendants) when they are present in the rebase set along with
    one of their successors but none of their successors is in destination.
    A new experimental config flag, `rebase.experimental.inmemory`, makes
    rebase perform an in-memory merge instead of doing it on-disk in the
    working copy.
    The `HGPLAINEXCEPT` environment variable can now include color to allow
    automatic output colorization in otherwise automated environments.
    A new `unamend` command in `uncommit` extension which undoes the effect of
    the amend command by creating a new changeset which was there before amend
    and moving the changes that were amended to the working directory.
    A '--abort' flag to merge command to abort the ongoing merge.
    An experimental flag '--rev' to 'hg branch' which can be used to change
    branch of changesets.
    bundle2 read I/O significantly improved
    bundle2 memory use significantly reduced during read
    clonebundle: it is now possible to serve the clonebundle using a git-lfs
    compatible server.
    templatefilters: add slashpath() to convert path separator to slash
    (issue5572)
    A new experimental config flag, 'inline-color-diff', adds within-line color
    diff capacity
    histedit: add support to output nodechanges using formatter to help with
    editor integrations
  3. Backwards Compatibility Changes
    `log --follow-first -rREV`, which is deprecated, now follows the first
    parent of merge revisions from the specified REV just like
    `log --follow -rREV`.
    `log --follow -rREV FILE..` now follows file history across copies and
    renames.
    transaction: register summary callbacks only at start of transaction
    hgweb's graph view no longer supports browsers that lack &lt;canvas&gt; support
    hgweb: only include graph-related data in jsdata variable on /graph pages
    graphlog: add another graph node type, unstable, using character *
    remove: print message for each file in verbose mode only while using '-A'</changelog>
  <changelog author="develop7@develop7.info" date="1520424000">- Mercurial 4.5.2
  (4.5.2 was released immediately after 4.5.1 to fix a release oversight.)
  1. Security Fixes (CVE-2018-1000132,bsc#1085211)
    All versions of Mercurial prior to 4.5.2 have vulnerabilities in the HTTP
    server that allow permissions bypass to:
  * Perform writes on repositories that should be read-only
  * Perform reads on repositories that shouldn't allow read access
  2. Backwards Compatibility Changes
    The "batch" wire protocol command now enforces permissions of each invoked
    sub-command. Wire protocol commands must define their operation type or the
    "batch" command will assume they can write data and will prevent their
    execution on HTTP servers unless the HTTP request method is POST, the
    server is configured to allow pushes, and the (possibly authenticated) HTTP
    user is authorized to perform a push.
    Wire protocol commands not defining their operation type in
    "wireproto.PERMISSIONS" are now assumed to be used for "push" operations
    and access control to run those commands is now enforced accordingly.
  3. Bug Fixes
    fileset: don't abort when running copied() on a revision with a removed file
    date: fix parsing months
    setup: only allow Python 3 from a source checkout (issue5804)
    annotate: do not poorly split lines at CR (issue5798)
    subrepo: don't attempt to share remote sources (issue5793)
    subrepo: activate clone pooling to enable sharing with remote URLs
    changegroup: do not delta lfs revisions
    revlog: do not use delta for lfs revisions
    revlog: resolve lfs rawtext to vanilla rawtext before applying delta
  See full cnahgelog on
  https://www.mercurial-scm.org/wiki/WhatsNew#Mercurial_4.5.1_.2F_4.5.2_.282018-03-06.29</changelog>
  <changelog author="develop7@develop7.info" date="1520683200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="tiwai@suse.de" date="1530878400">- Fix security issues in mpatch overflow and other misbehavior
  (CVE-2018-13346, bsc#1100354, CVE-2018-13347, bsc#1100355,
  CVE-2018-13348, bsc#1100353):
  hg-mpatch-fix01.patch
  hg-mpatch-fix02.patch
  hg-mpatch-fix03.patch
  hg-mpatch-fix04.patch
  hg-mpatch-fix05.patch
  hg-mpatch-fix06.patch
  hg-mpatch-fix07.patch
  hg-mpatch-fix08.patch
  hg-mpatch-fix09.patch</changelog>
</package>
<package pkgid="1d199110d2bdc5aff9ae0447c6bfe80ad0137feed5f20703806729b4127e2967" name="metatheme-breeze-common" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Adjusted Scrollbars so now they fit the Qt theme</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix background-image warning
  * Don't show scrollbar steppers</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Properly check for Breeze GTK 3 theme existence in kconf_update
  * Fixup install paths
  * Move the 3.0 directory to 3.18 to ensure builds will not fail (kde#388018)
  * Revert "Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally""
  * Revert "Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions"
  * Modify theme generator to match scrollbar updates
  * Add preliminary theme generation script for authoring assets
  * Add GTK 3.18 theme back to support LTS distributions
  * Reverse my previous revert, and eliminate the attempted installation of the other Gtk 3 theme versions
  * Revert "Remove gtk+-3 build dep, install versioned gtk.css dirs unconditionally" This commit causes the build to fail as gtk-3.18/ does not exist as a directory in the source tree
  * Apply text contrast changes to GTK 2 theme
  * Increase text contrast for consistency with default Breeze color scheme
  * Rename 3.20 theme to be used for all GTK 3 versions
  * Remove obsolete GTK versions' themes to improve maintainability
  * Update scrollbar assets (kde#385627)
  * Adjust client-side decorations to look correct in both CSD and forced SSD environments
  * Add support for gtk3 theme variant feature.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-kconf_update-Add-gtk-primary-button-warps-slider-0-t.patch (kde#379773</changelog>
</package>
<package pkgid="1d6f225c021b37aeba83e348e55da029b4408042761ba10ee057ed564d801db4" name="mgetty" arch="src">
  <version epoch="0" ver="1.1.37" rel="lp150.2.3.1"/>
  <changelog author="crrodriguez@suse.de" date="1223553600">- fix implicit-fortify-decl errors</changelog>
  <changelog author="prusnak@suse.cz" date="1226059200">- alter tempfile.patch to reuse spooldir (CVE-2008-4936) [bnc#442596]</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not include build date in binaries</changelog>
  <changelog author="gjhe@novell.com" date="1305288000">- fix bug [bnc#646280],adjust faxspool to process pdf file using
  gs directly, do not use acroreader.</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="coolo@suse.com" date="1324900800">- don't package files twice</changelog>
  <changelog author="prusnak@opensuse.org" date="1327406400">- build with PIE [bnc#743151]</changelog>
  <changelog author="mweckbecker@suse.com" date="1331294400">- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with
  PIE work properly</changelog>
  <changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
  <changelog author="dmueller@suse.com" date="1357819200">- replace run_permissions call with set_permissions (bnc#764113)</changelog>
  <changelog author="schwab@suse.de" date="1362484800">- lp64.patch: Add support for future LP64 platforms</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
</package>
<package pkgid="d6149d03bc4af14cf2172664bc3034d6d52d3bfdba87dc68dc2a63b5fd82e435" name="mgetty" arch="x86_64">
  <version epoch="0" ver="1.1.37" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not include build date in binaries</changelog>
  <changelog author="gjhe@novell.com" date="1305288000">- fix bug [bnc#646280],adjust faxspool to process pdf file using
  gs directly, do not use acroreader.</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="coolo@suse.com" date="1324900800">- don't package files twice</changelog>
  <changelog author="prusnak@opensuse.org" date="1327406400">- build with PIE [bnc#743151]</changelog>
  <changelog author="mweckbecker@suse.com" date="1331294400">- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with
  PIE work properly</changelog>
  <changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
  <changelog author="dmueller@suse.com" date="1357819200">- replace run_permissions call with set_permissions (bnc#764113)</changelog>
  <changelog author="schwab@suse.de" date="1362484800">- lp64.patch: Add support for future LP64 platforms</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
</package>
<package pkgid="a712f2d133cc26d6830f9990c0cd2f853aedffe3915e214dbbb63166c57e8d8c" name="midori-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="a6e1d2a38bddd41b92a06b1d1f002edcfc5e316622a3efcaa3d65933b54133aa" name="milou5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * make krunner accessible
  * spdx validation
  * Remove unused import
  * Remove unused import
  * [ResultDelegate] Enforce PlainText
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Fix i18ncd -&gt; i18ndc.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * [ResultDelegate] Silence i18n when ListView.section is empty
  * [ResultDelegate] Workaround subtextLabel leaking outside its container
  * [ResultDelegate] Get rid of Globals.js
  * adjust license to be readable by KAboutData</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Include ECMAddTests after KDECompilerSettings, for policy covering
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Move cmake_minimum_required to top
  * Prevent cmake 3.10+ warning with automoc &amp; MILOU_EXPORT_PREVIEW</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [SourcesModel] Check changed file name before reloading configuration</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Support-both-QString-and-QIcon-for-dragHelper-pixmap.patch</changelog>
</package>
<package pkgid="793eaea95fda4579f2c06af0d51cd4875464bf8cbddbdd01181236e18c710e53" name="milou5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * make krunner accessible
  * spdx validation
  * Remove unused import
  * Remove unused import
  * [ResultDelegate] Enforce PlainText
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Fix i18ncd -&gt; i18ndc.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * [ResultDelegate] Silence i18n when ListView.section is empty
  * [ResultDelegate] Workaround subtextLabel leaking outside its container
  * [ResultDelegate] Get rid of Globals.js
  * adjust license to be readable by KAboutData</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Include ECMAddTests after KDECompilerSettings, for policy covering
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Move cmake_minimum_required to top
  * Prevent cmake 3.10+ warning with automoc &amp; MILOU_EXPORT_PREVIEW</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [SourcesModel] Check changed file name before reloading configuration</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Support-both-QString-and-QIcon-for-dragHelper-pixmap.patch</changelog>
</package>
<package pkgid="48e79ecf28fbe639d17e08ff218991cf561445bc716344e063030285af0e5ac9" name="milou5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1497355200">- Update to 5.10.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.2.php
- Changes since 5.10.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * make krunner accessible
  * spdx validation
  * Remove unused import
  * Remove unused import
  * [ResultDelegate] Enforce PlainText
  * Use Q_DECL_OVERRIDE</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Fix i18ncd -&gt; i18ndc.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * [ResultDelegate] Silence i18n when ListView.section is empty
  * [ResultDelegate] Workaround subtextLabel leaking outside its container
  * [ResultDelegate] Get rid of Globals.js
  * adjust license to be readable by KAboutData</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Include ECMAddTests after KDECompilerSettings, for policy covering
  * Require KDE Frameworks 5.42 and Qt 5.9
  * Move cmake_minimum_required to top
  * Prevent cmake 3.10+ warning with automoc &amp; MILOU_EXPORT_PREVIEW</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [SourcesModel] Check changed file name before reloading configuration</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-Support-both-QString-and-QIcon-for-dragHelper-pixmap.patch</changelog>
</package>
<package pkgid="03b7d2ffbc30d1a1b9a9a50fcbbc29271b2d2e457a5faf10d71d36970753ecb9" name="minetest" arch="src">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="870f39c90e622e37da08918276ae97fba741a5398e4588aebfc6a5981fac48b3" name="minetest" arch="x86_64">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="6f6286d803d25fcc905f0cb612172baafd13733e1b8ca17995236dc7046c1afb" name="minetest-data" arch="noarch">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="4ed7c003e903efe3a57a764dd23cb2057ec291431015d470defe39b3eec23e5a" name="minetest-game" arch="noarch">
  <version epoch="0" ver="0.4.17" rel="lp150.3.3.1"/>
  <changelog author="m407@mail.ru" date="1344600000">- Initial package (version 0.4.1) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1344600001">- Remove redundant tags/sections from specfile
- Always build for noarch</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1348315200">- Build version 0.4.3</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1348401600">- Renamed the spec and changes file to the correct name
- Removed the creative mod as it's currently broken
- Used fdupes to get link duplicate file</changelog>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update 0.4.9</changelog>
  <changelog author="mailaender@opensuse.org" date="1411300800">- update 0.4.10</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update 0.4.12</changelog>
  <changelog author="rpm@fthiessen.de" date="1448452800">- Update to 0.4.13</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Update License field</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to version 0.4.15</changelog>
  <changelog author="rpm@fthiessen.de" date="1484049600">- Added minetest-game-rpmlintrc to fix build on openSUSE 13.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * See http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Don't require minetest, to make headless installation possible</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17:
  * Fix boo#1103904
  * See https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_0.4.17
- Add the licence file to the package.</changelog>
</package>
<package pkgid="f1adcc8637813caabd8579a0b1fc9c81303813c199d19a53b440d0d3330680ff" name="minetest-game" arch="src">
  <version epoch="0" ver="0.4.17" rel="lp150.3.3.1"/>
  <changelog author="m407@mail.ru" date="1344600000">- Initial package (version 0.4.1) for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1344600001">- Remove redundant tags/sections from specfile
- Always build for noarch</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1348315200">- Build version 0.4.3</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1348401600">- Renamed the spec and changes file to the correct name
- Removed the creative mod as it's currently broken
- Used fdupes to get link duplicate file</changelog>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update 0.4.9</changelog>
  <changelog author="mailaender@opensuse.org" date="1411300800">- update 0.4.10</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update 0.4.12</changelog>
  <changelog author="rpm@fthiessen.de" date="1448452800">- Update to 0.4.13</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14</changelog>
  <changelog author="jengelh@inai.de" date="1469620800">- Update License field</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to version 0.4.15</changelog>
  <changelog author="rpm@fthiessen.de" date="1484049600">- Added minetest-game-rpmlintrc to fix build on openSUSE 13.1</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * See http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Don't require minetest, to make headless installation possible</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17:
  * Fix boo#1103904
  * See https://dev.minetest.net/Changelog#0.4.16_.E2.86.92_0.4.17
- Add the licence file to the package.</changelog>
</package>
<package pkgid="473c1e6f4d4bc0b6721b627ffe18bba640cb5b4521968bbdb4e27185e463e358" name="minetest-lang" arch="noarch">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="92d5421af6bc0e5bb74b379462ae755af591ea6cc2332733c7de7d05c63284ab" name="minetestserver" arch="x86_64">
  <version epoch="0" ver="0.4.17.1" rel="lp150.5.3.1"/>
  <changelog author="m407@mail.ru" date="1355054400">- Build version 0.4.4</changelog>
  <changelog author="mailaender@opensuse.org" date="1365768000">- update to version 0.4.6</changelog>
  <changelog author="opensuse@dstoecker.de" date="1375963200">- update to 0.4.7</changelog>
  <changelog author="mailaender@opensuse.org" date="1389096000">- update to 0.4.9
- use simpler GitHub release https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="khyota@redhyena.net" date="1417089600">- update title and description</changelog>
  <changelog author="ejobling248@gmail.com" date="1420632000">- update to 0.4.11</changelog>
  <changelog author="khyota@redhyena.net" date="1424347200">- update to 0.4.12</changelog>
  <changelog author="adam@mizerski.pl" date="1428840000">- Cleaned up spec file
  - Used spec-cleaner
  - sorted and revised BuildRequires
  - removed all "%if 0%{?suse_version}" - there's too many openSUSE
    specific things to keep it really multi-distro.
- Splitted compilation of minetest and minetestserver
  (idea borrowed from ArchLinux)
  - Splitted minetest package into minetest, minetestserver and
    minetest-data.
- Enabled support for translations.
  - Added minetest-lang subpackage.
- Enabled support for redis and leveldb to minetestsever
- Fixed support for opengl-game-wrapper.sh
- Made minetest use system jsoncpp and lua instead of bundled ones.
- Added files:
  - minetest@.service
  - minetest-rpmlintrc
  - supress warning aboud desktop file pointing to minetest-wrapper
- Added patches:
  - FindJson.cmake.patch - copied from Debian.
  - i18n.patch - copied from Debian.
  - minetest-0.4.8-shared-irrlicht.patch - copied from Fedora.
  - shared_mods.patch - copied from Debian and modified.
- Added "minetest" user and group for minetestserver.</changelog>
  <changelog author="rpm@fthiessen.de" date="1448366400">- Update to 0.4.13:
  * Added: fix-find-luajit.patch to detect systems luajit correctly
  * Removed upstream fixed FindJson.cmake.patch and
    minetest-0.4.8-shared-irrlicht.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1449057600">- Added fix-cguittfont.patch to fix missing library "libcguittfont".</changelog>
  <changelog author="rpm@fthiessen.de" date="1463400000">- Update to 0.4.14
- Removed upstream fixed fix-cguittfont.patch,
  i18n.patch and fix-find-luajit.patch</changelog>
  <changelog author="rpm@fthiessen.de" date="1469620800">- Replace fonts by system ones.
- Fixed license.</changelog>
  <changelog author="mailaender@opensuse.org" date="1482753600">- Update to 0.4.15</changelog>
  <changelog author="khyota@redhyena.net" date="1483617600">- Add use-pkg-config-to-find-luajit.patch https://github.com/minetest/minetest/issues/4483</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496664000">- Update to version 0.4.16:
  * Add 2D sheet animations for nodes ''(sfan5)''
  * Drop client side chat prediction. No more messages shown to chat
    when you talk and you are disconnected. ''(red-001)''
  * Add particle animation, glow ''(sfan5)
  * Server list: add ping indicators ''(kilbith)''
  * Server side occlusion culling ''(lhofhansl)''
  * New custom progress bar (you can customize it with texture packs)
    (kilbith)
  * Implement delayed shutdown for server owners: /shutdown 60 =&gt;
    shutdowns in 1 min /shutdown -1 cancels it
  * Add support for requesting a reconnect and changing the shutdown
    message to /shutdown
  * Add a mapblock cache in MeshUpdateQueue to improve client rendering
    performance ''(celeron55)''
  * Player data can now be into database. This is an important change,
    players to files are always supported for this release but deprecated.
    Files backend for players will be removed in a future release. See
    http://wiki.minetest.net/Database_backends for compat matrix and
    migration steps.
  * Sounds: add fading sounds
  * Save automatically window size when modified. This behaviour can
    be disabled in client settings
  * Add cancel button to password change formspec
  * Improve pause menu with more user friendly informations and update
    keys dynamicly depending on your configuration
  * Merge singleplayer &amp; server tab on desktop clients
  * Add /clearinv chat command
  * Add keyword-based search to server-list and advance settings
  * Add hardware-based itemstacks and node coloring
  * Undersampling which should make minetest run better on low end devices
  * Full changelog see http://dev.minetest.net/Changelog#0.4.15_.E2.86.92_0.4.16
- Minor spec cleanup.</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516622400">- Recommend minetest-game to make server package more useful by default</changelog>
  <changelog author="opensuse@trummer.xyz" date="1516708800">- Added PostgreSQL database backend</changelog>
  <changelog author="werner@suse.de" date="1520596800">- Use pkg-config information to set PNG_PNG_INCLUDE_DIR for cmake</changelog>
  <changelog author="werner@suse.de" date="1520596801">- Use latest libpng</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533643200">- Update to version 0.4.17.1:
  * Fix boo#1103904
  * Fix crash caused by log_deprecated
    and the use of deprecated functions
  * Fix crash on pause menu when pressing up/down keys
- Remove use-pkg-config-to-find-luajit.patch: fixed upstream.
- Update to version 0.4.17:
  * Dungeons: Mostly fix missing stair nodes
  * Cavegen: Fix variable typo that broke mgvalleys large cave
    distribution
  * Prevent translating empty strings
  * upright_sprite: Fix texture position for players
  * core.rotate_node: Do not trigger after_place_node for mod
    compatibility
  * Generate Notifier: Clear events once after all
    'on generated' functions
  * Fix liquid post effect colour behaviour in third person view
  * Delete world dialog: Move buttons to avoid
    double click deletion
  * Fix /shutdown countdown parameter
  * Check argument types inside MetaDataRef Lua API
  * dropped items and falling nodes: Delete in 'ignore' nodes
  * Fix off-by-one in log output line length
  * Fix buffer parameter not working in getMapSlice()
  * Fix rounding error in g/set_node caused by truncation to float
  * Fix dancing text in text input fields
  * Fix undefined behaviour on getting pointer to data in
    empty vector
  * Fix wrong scrolling in text areas
  * Damage: Remove damage ignore timer due to abuse potential
  * Ensure no item stack is being held before crafting
  * Several documentation additions, improvements
  * core.rotate_node: Run callbacks like with any
    regular placed node
  * Biome dust node: Only place on 'walkable' cubic
    non-liquid drawtypes
  * Fix issue Minetest crash when custom font path is not exist
  * Fix Settings tab formspec alignment
  * Do not scale texture unless necessary
  * Fix day_night_ratio_do_override not being initialised
    server-side
  * Fix default item callbacks to work with nil users
  * Prevent from crafting non-existent, unknown items
  * Profiler: Fix var args not being passed to
    callback register function
  * Fix attached particle spawners far from spawn
  * Localplayer: Fix disable_jump effect and standing node position
  * Fix blocks written by vmanip not being marked as modified
  * Fix Rotate Node Placement
  * ServerEnv: Clean up object lifecycle handling
  * Fix the core.wrap_text function
  * Fix empty legacy meta being persisted
  * Statbars: fix incorrect half-images in non-standard
    orientations
  * serialize: use a temporary for SerializeException
  * Fix player coordinate rounding in collisionMoveSimple()
  * Fix for empty key/value when reading item string with
    wear but no metadata
  * Fix render order of overlays
  * Fix console resize issue when maximising game window
  * Fix console not being properly resized after
    window size changed
  * Verify HudSetParams input when hotbar textures are set
  * (Re)spawn players within 'mapgen_limit'
  * Fix sending color codes to clients that don't support them</changelog>
</package>
<package pkgid="1b040da9b19c4c811a641a4df07263bbe4627dac354f6fc4e066b353dda21e7f" name="minizip-devel" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="ba4ed1a6ef19204ae29206fbd303d81a7061bbd5c05b1323b34a7d29fee95c68" name="mksusecd" arch="src">
  <version epoch="0" ver="1.59" rel="lp150.2.3.1"/>
  <changelog author="jenkins@suse.com" date="1489665600">- support old mksquashfs version
- 1.44</changelog>
  <changelog author="snwint@suse.com" date="1490011200">- fix typo
- add --rebuild-initrd option for smaller initrds
- 1.45</changelog>
  <changelog author="snwint@suse.com" date="1491220800">- isohybrid: add --size option to specify image size
- 1.46</changelog>
  <changelog author="snwint@suse.com" date="1491220801">- some small doc fixes
- add dvd/disk image layout description
- 1.47</changelog>
  <changelog author="snwint@suse.com" date="1491220802">- undo accidental mksusecd patch
- 1.48</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- add support for disk images with FAT file system
- 1.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1491912000">- distinguish between repomd/classical repo types and allow to
  specify the default repo location (fate#322983)
- merge gh#openSUSE/mksusecd#21
- fix typo in help text
- 1.50</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493380800">- fix getopt config
- enhanced README.md
- merge gh#openSUSE/mksusecd#22
- document all functions
- 1.51</changelog>
  <changelog author="snwint@suse.de" date="1493899200">- include all documentation files</changelog>
  <changelog author="wfeldt@opensuse.org" date="1495454400">- merge gh#openSUSE/mksusecd#23
- remove iso9660 header when creating image for usb media
  (bsc#939456)
- clarify description of --fat option
- 1.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1507550400">- merge gh#openSUSE/mksusecd#24
- rework cpio parsing function to handle blobs added by our product
  creator
- ensure initrd has really been unpacked when --rebuild-initrd
  option is used
- beautify code
- 1.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512043200">- merge gh#openSUSE/mksusecd#26
- manage (sle15-style modules) repomd repositories
- 1.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512475200">- merge gh#openSUSE/mksusecd#28
- support new CHECKSUMS file
- 1.55</changelog>
  <changelog author="wfeldt@opensuse.org" date="1516363200">- merge gh#openSUSE/mksusecd#29
- allow building of encrypted installation media
- fix handling of repo-md repositories with encrypted media
- 1.56</changelog>
  <changelog author="snwint@suse.de" date="1519214400">- require createrepo-implementation (bsc#1075670)</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- adjust Requires to work also with older dists (bsc#1082057)</changelog>
  <changelog author="adam.majer@suse.de" date="1520337600">- switch to using cdrtools for Factory and SLE15. wodim is to
  be removed (bnc#1081739)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1525694400">- merge gh#openSUSE/mksusecd#30
- fix cpio archive parser (bsc#1092147)
- 1.57</changelog>
  <changelog author="wfeldt@opensuse.org" date="1525780800">- merge gh#openSUSE/mksusecd#31
- added link to obs builds
- add links to related blog articles
- 1.58</changelog>
  <changelog author="wfeldt@opensuse.org" date="1527249600">- merge gh#openSUSE/mksusecd#32
- add -joliet-long to mkisofs call as some file names on our media
  are too long (bsc#1094687)
- 1.59</changelog>
</package>
<package pkgid="fd8ac1776a0f74a3dfa91f85f30d59717be7d95c0c8425f0a7b3379225347560" name="mksusecd" arch="x86_64">
  <version epoch="0" ver="1.59" rel="lp150.2.3.1"/>
  <changelog author="jenkins@suse.com" date="1489665600">- support old mksquashfs version
- 1.44</changelog>
  <changelog author="snwint@suse.com" date="1490011200">- fix typo
- add --rebuild-initrd option for smaller initrds
- 1.45</changelog>
  <changelog author="snwint@suse.com" date="1491220800">- isohybrid: add --size option to specify image size
- 1.46</changelog>
  <changelog author="snwint@suse.com" date="1491220801">- some small doc fixes
- add dvd/disk image layout description
- 1.47</changelog>
  <changelog author="snwint@suse.com" date="1491220802">- undo accidental mksusecd patch
- 1.48</changelog>
  <changelog author="snwint@suse.com" date="1491393600">- add support for disk images with FAT file system
- 1.49</changelog>
  <changelog author="wfeldt@opensuse.org" date="1491912000">- distinguish between repomd/classical repo types and allow to
  specify the default repo location (fate#322983)
- merge gh#openSUSE/mksusecd#21
- fix typo in help text
- 1.50</changelog>
  <changelog author="wfeldt@opensuse.org" date="1493380800">- fix getopt config
- enhanced README.md
- merge gh#openSUSE/mksusecd#22
- document all functions
- 1.51</changelog>
  <changelog author="snwint@suse.de" date="1493899200">- include all documentation files</changelog>
  <changelog author="wfeldt@opensuse.org" date="1495454400">- merge gh#openSUSE/mksusecd#23
- remove iso9660 header when creating image for usb media
  (bsc#939456)
- clarify description of --fat option
- 1.52</changelog>
  <changelog author="wfeldt@opensuse.org" date="1507550400">- merge gh#openSUSE/mksusecd#24
- rework cpio parsing function to handle blobs added by our product
  creator
- ensure initrd has really been unpacked when --rebuild-initrd
  option is used
- beautify code
- 1.53</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512043200">- merge gh#openSUSE/mksusecd#26
- manage (sle15-style modules) repomd repositories
- 1.54</changelog>
  <changelog author="wfeldt@opensuse.org" date="1512475200">- merge gh#openSUSE/mksusecd#28
- support new CHECKSUMS file
- 1.55</changelog>
  <changelog author="wfeldt@opensuse.org" date="1516363200">- merge gh#openSUSE/mksusecd#29
- allow building of encrypted installation media
- fix handling of repo-md repositories with encrypted media
- 1.56</changelog>
  <changelog author="snwint@suse.de" date="1519214400">- require createrepo-implementation (bsc#1075670)</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- adjust Requires to work also with older dists (bsc#1082057)</changelog>
  <changelog author="adam.majer@suse.de" date="1520337600">- switch to using cdrtools for Factory and SLE15. wodim is to
  be removed (bnc#1081739)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1525694400">- merge gh#openSUSE/mksusecd#30
- fix cpio archive parser (bsc#1092147)
- 1.57</changelog>
  <changelog author="wfeldt@opensuse.org" date="1525780800">- merge gh#openSUSE/mksusecd#31
- added link to obs builds
- add links to related blog articles
- 1.58</changelog>
  <changelog author="wfeldt@opensuse.org" date="1527249600">- merge gh#openSUSE/mksusecd#32
- add -joliet-long to mkisofs call as some file names on our media
  are too long (bsc#1094687)
- 1.59</changelog>
</package>
<package pkgid="efbc5816bf6adc49995c48a4262f1d0330bb17784ebb0d1ccb0383e6e36429e6" name="monitoring-plugins-metadata" arch="noarch">
  <version epoch="0" ver="4.1.1+git0.5a1edf2b" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
  <changelog author="zlliu@suse.com" date="1500033600">- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500206400">- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.1+git.1503904762.b4582bdb:
  * Low: mysql: Fixed bug where crm_admin is never called, leaving master scores to -1 in certain conditions.
  * Low: exportfs: check fsid parameter for not containing a comma
  * Low: mysql: don't run ocf_is_ms check in a subshell
  * Low: redis: add check for redis-check-rdb
  * Low: redis: wait for pid file to appear after start
  * High: pgsql: Allow dynamic membership
  * Medium: CTDB: fix issue with --logfile being replace with --logging
  * Medium: oraasm: new resource agent for Oracle ASM Disk Groups
  * Medium: rabbitmq-cluster: Backup and restore policies
  * Low: Raid1: Clean up spelling and whitespace
  * Medium: LVM: use vgscan --cache to update metadata during start/relocate
  * Medium: LVM: warn when cache mode is not writethrough
  * Medium: iSCSILogicalUnit: add emulate parameters
  * Medium: mysql: Properly Detect read_only State
  * Medium: anything: Allow multiple instances of binfiles to be run (pidfile will be unique)
  * Medium: anything: Start should return OCF_RUNNING if monitor succeeds
  * Medium: anything: Attempt to fix missing PID directory before starting
  * Medium: kamailio fixes and enhancements for v5.0
  * Low: portblock: dont log dd "0+0 records in/out"
  * Medium: Raid1: Handle case when mddev is a symlink
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Medium: VirtualDomain: new attributes migrateuri, remoteuri, migration_user
  * Low: sapdb: Add hdbnameserver to monitor services
  * High: CTDB: Don't fail on empty directory (bsc#1052577)
  * High: minio: Resource agent for the minio storage server
  * High: ZFS: Add ZFS Resource Agent
  * High: awseip/awsvip: fixes and improvements
  * Medium: VirtualDomain: new configuration option shutdown_mode
  * Medium: Route: Resource key for the address family (ip4, ip6 or detect)
  * Low: aws-vpc-route53: Fix missing ocf_log in log message
- Remove patches merged upstream:
  * Remove 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * Remove 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * Remove 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * Remove 0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504180800">- Update to version 4.0.1+git.1504170332.70fbcd8a:
  * Medium: ocf-shellfuncs: improve locking (ocf_take_lock)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * High: lvmlockd: add resource agent for lvmlockd daemon (fate#323822)
  * High: rkt: Add agent for managing rkt containers
  * Medium: varnish: Compatibility for version 4.0</changelog>
  <changelog author="kgronlund@suse.com" date="1504180801">- Update to version 4.0.1+git.1504207605.22ac330c: (bsc#1053207)
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)</changelog>
  <changelog author="kgronlund@suse.com" date="1504526400">- Update to version 4.0.1+git.1504527822.722ffb5b:
  * High: ovsmonitor: Add OpenvSwitch monitor agent (fate#323276)</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.1+git.1508859013.2b3cb4a6:
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: pgsql: Support PG10: Following the change of the PostgreSQL function name.
  * High: pgsql: Support PG10: Following the change of the default action of "pg_ctl start" and "pg_ctl promote".</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Update to version 4.0.1+git.1509705432.020b5b34:
  * LVM-activate: add new RA for LVM activation (fate#323822)
  * nfsserver: allow stop to timeout
  * adding docker-native healthcheck query to docker</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version v4.1.0rc1~git8.2900c751:
  * Drop libnet dependency (bsc#1069596)
  * db2: fix HADR promote when master failed
  * Add resource agent for IPSEC tunnels
  * Mid: apache: Move the stop judgment last.
  * Mid: apache: Eliminate wasteful TERM transmission, correct the waiting time correctly.
  * galera: recover from empty gvwstate.dat
  * Revert "LVM: use vgscan --cache to update metadata during start/relocate"
  * Medium: IPaddr2: do not send Gratuitous ARPs in the Cluster IP configuration
  * Medium: IPaddr2: add send_arp_opts parameter
  * Medium: IPaddr2: allow to choose arping instead of send_arp binary
  * Low: send_arp.linux: print proper usage
  * Low: IPaddr2: document arp_interval as deprecated
  * Low: IPaddr2: remove metadata of an unused parameter arp_mac
  * Low: IPaddr2: always remove orphan pidfile
  * Low: IPaddr2: use ocf_log for an output from send_arp</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.1.0+git54.b264e401:
  * mpathpersist: New agent (fate#324044)
  * jira: New resource agent
  * azure-lb: New resource agent
  * lxc-info/machine-info: New agents for monitoring containers/machines
  * Low: redis: Check read bit on redis config
  * Low: IPsrcaddr: Only check for ifconfig on BSD/solaris
  * Medium: CTDB: Cope with deprecated "idmap backend" smb.conf option
  * Medium: oracle: Fix alter user syntax for set_mon_user_profile
  * Medium: db2: improve monitor and simplify STANDBY/.../DISCONNECTED
  * Medium: CTDB: fix initial probe
  * Medium: ethmonitor: add intel omnipath support
  * Medium: LVM-activate: avoid unnecessary validation in stop action
  * Medium: IPsrcaddr: match exact route to avoid failing</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.1.0+git59.a0452207:
  * lvmlockd: auto change lvm config to use lvmlockd (fate#323822)
  * LVM-activate: put all validations into lvm_validate (fate#323822)
  * mariadb: GTID/semi-sync based MariaDB Master/Slave resource-agent</changelog>
  <changelog author="kgronlund@suse.com" date="1516190400">- Use python3 (bsc#1076413)</changelog>
  <changelog author="kgronlund@suse.com" date="1516190401">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="dakechi@suse.com" date="1533729600">- Implements the reload operation on the SAPInstance RA (bsc#1096744)
- Include the enq_server and enq_replicator on the default service list
  to be monitored for the new S/4 HANA Enq. Services 2. (bsc#1092384)
- Improved SAPInstance START profile detection, avoiding the need of
  setting the START_PROFILE parameter. (bsc#1096744)
- Included the following patches:
  * 0007-SAPInstance-implemeted-reload-method.patch
  * 0008-SAPInstance-Improved-indents.patch
  * 0009-Medium-SAPInstance-Add-monitored-services-for-ENSA2-.patch
  * 0010-SAPInstance-Improved-SAP-instance-profile-detection.patch</changelog>
</package>
<package pkgid="9b2fea219af1e6331faddb94a9ffb11b7657cf74946a308cc3aa889ea5a49c4d" name="mozilla-nss" arch="src">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="2d2b19b1c46a58728f4b5b9138c6c563352a82361d2855e69be3090362a0f3ed" name="mozilla-nss" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="d29b352913eff4db8f7a55c55cf2e0d639718311c0f5424908e36364db1a57b1" name="mozilla-nss-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="4eb193341ef60b284f01751113861d011b8c8de33a072084d7c8a83ca202e408" name="mozilla-nss-certs" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="fd99cdceba61ce9f401698606d3918f5621aa31e451ea88330fd93f40413ff26" name="mozilla-nss-certs-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="f97007ab985c790ddd8975ab965ea6fe671c70b03b454a44332777c2116a63a2" name="mozilla-nss-devel" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="33adeae469fb88b36caca98c43d4cb831ab8538f463a1165201b8f3ca4e8d489" name="mozilla-nss-sysinit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="da1edb054b0ce639c1cbe00d611205782e0e04107b4c5c9633cc0c3024282447" name="mozilla-nss-sysinit-32bit" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="7b9503fb7404de48759e5946ac1ae1dad84ff47e0398b9b179409b07a7435dce" name="mozilla-nss-tools" arch="x86_64">
  <version epoch="0" ver="3.36.4" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1471867200">- update to NSS 3.25
  New functionality:
  * Implemented DHE key agreement for TLS 1.3
  * Added support for ChaCha with TLS 1.3
  * Added support for TLS 1.2 ciphersuites that use SHA384 as the PRF
  * In previous versions, when using client authentication with TLS 1.2,
    NSS only supported certificate_verify messages that used the same
    signature hash algorithm as used by the PRF. This limitation has
    been removed.
  * Several functions have been added to the public API of the
    NSS Cryptoki Framework.
  New functions:
  * NSSCKFWSlot_GetSlotID
  * NSSCKFWSession_GetFWSlot
  * NSSCKFWInstance_DestroySessionHandle
  * NSSCKFWInstance_FindSessionHandle
  Notable changes:
  * An SSL socket can no longer be configured to allow both TLS 1.3 and SSLv3
  * Regression fix: NSS no longer reports a failure if an application
    attempts to disable the SSLv2 protocol.
  * The list of trusted CA certificates has been updated to version 2.8
  * The following CA certificate was Removed
    Sonera Class1 CA
  * The following CA certificates were Added
    Hellenic Academic and Research Institutions RootCA 2015
    Hellenic Academic and Research Institutions ECC RootCA 2015
    Certplus Root CA G1
    Certplus Root CA G2
    OpenTrust Root CA G1
    OpenTrust Root CA G2
    OpenTrust Root CA G3</changelog>
  <changelog author="wr@rosenauer.org" date="1479124800">- update to NSS 3.26.2
  * required for Firefox 50.0
  Changes in 3.26
  New Functionality:
  * the selfserv test utility has been enhanced to support ALPN
    (HTTP/1.1) and 0-RTT
  * added support for the System-wide crypto policy available on
    Fedora Linux see http://fedoraproject.org/wiki/Changes/CryptoPolicy
  * introduced build flag NSS_DISABLE_LIBPKIX that allows compilation
    of NSS without the libpkix library
  Notable Changes:
  * The following CA certificate was Added
    CN = ISRG Root X1
  * NPN is disabled and ALPN is enabled by default
  * the NSS test suite now completes with the experimental TLS 1.3
    code enabled
  * several test improvements and additions, including a NIST known answer test
  Changes in 3.26.2
  * MD5 signature algorithms sent by the server in CertificateRequest
    messages are now properly ignored. Previously, with rare server
    configurations, an MD5 signature algorithm might have been selected
    for client authentication and caused the client to abort the
    connection soon after.</changelog>
  <changelog author="wr@rosenauer.org" date="1484740800">- update to NSS 3.28.1
  No new functionality is introduced in this release. This is a patch release to
  update the list of root CA certificates and address a minor TLS compatibility
  issue that some applications experienced with NSS 3.28.
  * The following CA certificates were Removed
    CN = Buypass Class 2 CA 1
    CN = Root CA Generalitat Valenciana
    OU = RSA Security 2048 V3
  * The following CA certificates were Added
    OU = AC RAIZ FNMT-RCM
    CN = Amazon Root CA 1
    CN = Amazon Root CA 2
    CN = Amazon Root CA 3
    CN = Amazon Root CA 4
    CN = LuxTrust Global Root 2
    CN = Symantec Class 1 Public Primary Certification Authority - G4
    CN = Symantec Class 1 Public Primary Certification Authority - G6
    CN = Symantec Class 2 Public Primary Certification Authority - G4
    CN = Symantec Class 2 Public Primary Certification Authority - G6
  * The version number of the updated root CA list has been set to 2.11
  * A misleading assertion/alert has been removed when NSS tries to flush data
    to the peer but the connection was already reset.
- update to NSS 3.28
  New functionality:
  * NSS includes support for TLS 1.3 draft -18. This includes a number
    of improvements to TLS 1.3:
  - The signed certificate timestamp, used in certificate
    transparency, is supported in TLS 1.3.
  - Key exporters for TLS 1.3 are supported. This includes the early
    key exporter, which can be used if 0-RTT is enabled. Note that
    there is a difference between TLS 1.3 and key exporters in older
    versions of TLS. TLS 1.3 does not distinguish between an empty
    context and no context.
  - The TLS 1.3 (draft) protocol can be enabled, by defining
    NSS_ENABLE_TLS_1_3=1 when building NSS.
  - NSS includes support for the X25519 key exchange algorithm,
    which is supported and enabled by default in all versions of TLS.
  New Functions:
  * SSL_ExportEarlyKeyingMaterial
  * SSL_SendAdditionalKeyShares
  * SSL_SignatureSchemePrefSet
  * SSL_SignatureSchemePrefGet
  Notable Changes:
  * NSS can no longer be compiled with support for additional elliptic curves.
    This was previously possible by replacing certain NSS source files.
  * NSS will now detect the presence of tokens that support additional
    elliptic curves and enable those curves for use in TLS.
    Note that this detection has a one-off performance cost, which can be
    avoided by using the SSL_NamedGroupConfig function to limit supported
    groups to those that NSS provides.
  * PKCS#11 bypass for TLS is no longer supported and has been removed.
  * Support for "export" grade SSL/TLS cipher suites has been removed.
  * NSS now uses the signature schemes definition in TLS 1.3.
    This also affects TLS 1.2. NSS will now only generate signatures with the
    combinations of hash and signature scheme that are defined in TLS 1.3,
    even when negotiating TLS 1.2.
  - This means that SHA-256 will only be used with P-256 ECDSA certificates,
    SHA-384 with P-384 certificates, and SHA-512 with P-521 certificates.
    SHA-1 is permitted (in TLS 1.2 only) with any certificate for backward
    compatibility reasons.
  - New functions to configure signature schemes are provided:
    SSL_SignatureSchemePrefSet, SSL_SignatureSchemePrefGet.
    The old SSL_SignaturePrefSet and SSL_SignaturePrefSet functions are
    now deprecated.
  - NSS will now no longer assume that default signature schemes are
    supported by a peer if there was no commonly supported signature scheme.
  * NSS will now check if RSA-PSS signing is supported by the token that holds
    the private key prior to using it for TLS.
  * The certificate validation code contains checks to no longer trust
    certificates that are issued by old WoSign and StartCom CAs after
    October 21, 2016. This is equivalent to the behavior that Mozilla will
    release with Firefox 51.
- update to NSS 3.27.2
  * SSL_SetTrustAnchors leaks (bmo#1318561)
- removed upstreamed patch
  * nss-uninitialized.patch
- raised the minimum softokn/freebl version to 3.28 as reported in
  boo#1021636</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- update to NSS 3.28.2
  This is a stability and compatibility release. Below is a summary of
  the changes.
  * Fixed a NSS 3.28 regression in the signature scheme flexibility that
    causes connectivity issues between iOS 8 clients and NSS servers
    with ECDSA certificates (bmo#1334114)
  * Fixed a possible crash on some Windows systems (bmo#1323150)
  * Fixed a compatibility issue with TLS clients that do not provide a
    list of supported key exchange groups (bmo#1330612)</changelog>
  <changelog author="wr@rosenauer.org" date="1487592000">- update to NSS 3.28.3
  * This is a patch release to fix binary compatibility issues.
    NSS version 3.28, 3.28.1 and 3.28.2 contained changes that were
    in violation with the NSS compatibility promise.
    ECParams, which is part of the public API of the freebl/softokn
    parts of NSS, had been changed to include an additional attribute.
    That size increase caused crashes or malfunctioning with applications
    that use that data structure directly, or indirectly through
    ECPublicKey, ECPrivateKey, NSSLOWKEYPublicKey, NSSLOWKEYPrivateKey,
    or potentially other data structures that reference ECParams.
    The change has been reverted to the original state in bug
    bmo#1334108.
    SECKEYECPublicKey had been extended with a new attribute, named
    "encoding". If an application passed type SECKEYECPublicKey to NSS
    (as part of SECKEYPublicKey), the NSS library read the uninitialized
    attribute. With this NSS release SECKEYECPublicKey.encoding is
    deprecated. NSS no longer reads the attribute, and will always
    set it to ECPoint_Undefined. See bug bmo#1340103.
- requires NSPR &gt;= 4.13.1</changelog>
  <changelog author="rguenther@suse.com" date="1489665600">- Add nss-fix-hash.patch to fix hash computation (and build with
  GCC 7 which complains about shifts of boolean values).</changelog>
  <changelog author="wr@rosenauer.org" date="1489665601">- update to NSS 3.29.3
  * enables TLS 1.3 by default
- TLS 1.3 was already enabled in 3.28.x builds for openSUSE.
  This build option was removed.
- required for Firefox 53</changelog>
  <changelog author="wr@rosenauer.org" date="1491998400">- update to NSS 3.29.5
  * Rare crashes in the base 64 decoder and encoder were fixed.
    (bmo#1344380)
  * A carry over bug in the RNG was fixed. (bmo#1345089)
- Allow use of session tickets when there is no ticket wrapping key
  (boo#1015499, bmo#1320695) (nss-bmo1320695.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1493208000">- update to NSS 3.30.2
  New Functionality
  * In the PKCS#11 root CA module (nssckbi), CAs with positive trust
    are marked with a new boolean attribute, CKA_NSS_MOZILLA_CA_POLICY,
    set to true. Applications that need to distinguish them from other
    other root CAs, may use the exported function PK11_HasAttributeSet.
  * Support for callback functions that can be used to monitor SSL/TLS
    alerts that are sent or received.
  New Functions
  * CERT_CompareAVA - performs a comparison of two CERTAVA structures,
    and returns a SECComparison result.
  * PK11_HasAttributeSet - allows to check if a PKCS#11 object in a
    given slot has a specific boolean attribute set.
  * SSL_AlertReceivedCallback - register a callback function, that will
    be called whenever an SSL/TLS alert is received
  * SSL_AlertSentCallback - register a callback function, that will be
    called whenever an SSL/TLS alert is sent
  * SSL_SetSessionTicketKeyPair - configures an asymmetric key pair,
    for use in wrapping session ticket keys, used by the server. This
    function currently only accepts an RSA public/private key pair.
  New Macros
  * PKCS12_AES_CBC_128, PKCS12_AES_CBC_192, PKCS12_AES_CBC_256
    cipher family identifiers corresponding to the PKCS#5 v2.1 AES
    based encryption schemes used in the PKCS#12 support in NSS
  * CKA_NSS_MOZILLA_CA_POLICY - identifier for a boolean PKCS#11
    attribute, that should be set to true, if a CA is present because
    of it's acceptance according to the Mozilla CA Policy
  Notable Changes
  * The TLS server code has been enhanced to support session tickets
    when no RSA certificate (e.g. only an ECDSA certificate) is configured.
  * RSA-PSS signatures produced by key pairs with a modulus bit length
    that is not a multiple of 8 are now supported.
  * The pk12util tool now supports importing and exporting data encrypted
    in the AES based schemes defined in PKCS#5 v2.1.
  Root CA updates
  * The following CA certificates were Removed
  - O = Japanese Government, OU = ApplicationCA
  - CN = WellsSecure Public Root Certificate Authority
  - CN = TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s? H6
  - CN = Microsec e-Szigno Root
  * The following CA certificates were Added
  - CN = D-TRUST Root CA 3 2013
  - CN = TUBITAK Kamu SM SSL Kok Sertifikasi - Surum 1
  * The version number of the updated root CA list has been set to 2.14
    (bmo#1350859)
  * Domain name constraints for one of the new CAs have been added to the
    NSS code (bmo#1349705)
- removed obsolete nss-bmo1320695.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1501934400">- update to NSS 3.31
  New functionality
  * Allow certificates to be specified by RFC7512 PKCS#11 URIs.
  * Allow querying a certificate object for its temporary or permanent
    storage status in a thread safe way.
  New functions
  * CERT_GetCertIsPerm - retrieve the permanent storage status attribute of a
    certificate in a thread safe way.
  * CERT_GetCertIsTemp - retrieve the temporary storage status attribute of a
    certificate in a thread safe way.
  * PK11_FindCertFromURI - find a certificate identified by the given URI.
  * PK11_FindCertsFromURI - find a list of certificates identified by the given
    URI.
  * PK11_GetModuleURI - retrieve the URI of the given module.
  * PK11_GetTokenURI - retrieve the URI of a token based on the given slot
    information.
  * PK11URI_CreateURI - create a new PK11URI object from a set of attributes.
  * PK11URI_DestroyURI - destroy a PK11URI object.
  * PK11URI_FormatURI - format a PK11URI object to a string.
  * PK11URI_GetPathAttribute - retrieve a path attribute with the given name.
  * PK11URI_GetQueryAttribute - retrieve a query attribute with the given name.
  * PK11URI_ParseURI - parse PKCS#11 URI and return a new PK11URI object.
  New macros
  * Several new macros that start with PK11URI_PATTR_ for path attributes defined
    in RFC7512.
  * Several new macros that start with PK11URI_QATTR_ for query attributes defined
    in RFC7512.
  Notable changes
  * The APIs that set a TLS version range have been changed to trim the requested
    range to the overlap with a systemwide crypto policy, if configured.
    SSL_VersionRangeGetSupported can be used to query the overlap between the
    library's supported range of TLS versions and the systemwide policy.
  * Previously, SSL_VersionRangeSet and SSL_VersionRangeSetDefault returned a
    failure if the requested version range wasn't fully allowed by the systemwide
    crypto policy. They have been changed to return success, if at least one TLS
    version overlaps between the requested range and the systemwide policy. An
    application may call SSL_VersionRangeGet and SSL_VersionRangeGetDefault to
    query the TLS version range that was effectively activated.
  * Corrected the encoding of Domain Name Constraints extensions created by
    certutil.
  * NSS supports a clean seeding mechanism for *NIX systems now using only
    /dev/urandom. This is used only when SEED_ONLY_DEV_URANDOM is set at compile
    time.
  * CERT_AsciiToName can handle OIDs in dotted decimal form now.
- removed obsolete nss-fix-hash.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1505217600">- update to NSS 3.31.1
  * Potential deadlock when using an external PKCS#11 token (bmo#1381784)</changelog>
  <changelog author="wr@rosenauer.org" date="1505217601">- update to NSS 3.32
  Notable changes
  * Various minor improvements and correctness fixes.
  * The Code Signing trust bit was turned off for all included root certificates.
  * The Websites (TLS/SSL) trust bit was turned off for the following
    root certificates:
    AddTrust Class 1 CA Root
    Swisscom Root CA 2
  * The following CA certificates were Removed:
    AddTrust Public CA Root
    AddTrust Qualified CA Root
    China Internet Network Information Center EV Certificates Root
    CNNIC ROOT
    ComSign Secured CA
    GeoTrust Global CA 2
    Secure Certificate Services
    Swisscom Root CA 1
    Swisscom Root EV CA 2
    Trusted Certificate Services
    UTN-USERFirst-Hardware
    UTN-USERFirst-Object
- requires NSPR 4.16</changelog>
  <changelog author="wr@rosenauer.org" date="1505476800">- update to NSS 3.32.1
  * no upstream changelog/releasenote provided</changelog>
  <changelog author="wr@rosenauer.org" date="1507032000">- update to NSS 3.33
  Notable changes
  * TLS compression is no longer supported. API calls that attempt
    to enable compression are accepted without failure. However,
    TLS compression will remain disabled.
  * This version of NSS uses a formally verified implementation of
    Curve25519 on 64-bit systems.
  * The compile time flag DISABLE_ECC has been removed.
  * When NSS is compiled without NSS_FORCE_FIPS=1 startup checks
    are not performed anymore.
  * Various minor improvements and correctness fixes.
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  New functions
  * CERT_FindCertByIssuerAndSNCX - a variation of existing function
    CERT_FindCertByIssuerAndSN that accepts an additional password
    context parameter.
  * CERT_FindCertByNicknameOrEmailAddrCX - a variation of existing
    function CERT_FindCertByNicknameOrEmailAddr that accepts an
    additional password context parameter.
  * CERT_FindCertByNicknameOrEmailAddrForUsageCX - a variation of
    existing function CERT_FindCertByNicknameOrEmailAddrForUsage that
    accepts an additional password context parameter.
  * NSS_SecureMemcmpZero - check if a memory region is all zero in
    constant time.
  * PORT_ZAllocAligned - allocate aligned memory.
  * PORT_ZAllocAlignedOffset - allocate aligned memory for structs.
  * SSL_GetExperimentalAPI - access experimental APIs in libssl.
- add patch to separate hw and sw implementations for AES and GCM
  to avoid implicit execution of SSE2 methods if compiled for i586
  (bmo-1400603.patch, boo#1061204)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- update to NSS 3.34.1
  Changes in 3.34:
  Notable changes
  * The following CA certificates were Added:
    GDCA TrustAUTH R5 ROOT
    SSL.com Root Certification Authority RSA
    SSL.com Root Certification Authority ECC
    SSL.com EV Root Certification Authority RSA R2
    SSL.com EV Root Certification Authority ECC
    TrustCor RootCert CA-1
    TrustCor RootCert CA-2
    TrustCor ECA-1
  * The following CA certificates were Removed:
    Certum CA, O=Unizeto Sp. z o.o.
    StartCom Certification Authority
    StartCom Certification Authority G2
    TÜB?TAK UEKAE Kök Sertifika Hizmet Sa?lay?c?s? - Sürüm 3
    ACEDICOM Root
    Certinomis - Autorité Racine
    TÜRKTRUST Elektronik Sertifika Hizmet Sa?lay?c?s?
    PSCProcert
    CA ?????, O=WoSign CA Limited
    Certification Authority of WoSign
    Certification Authority of WoSign G2
    CA WoSign ECC Root
  * libfreebl no longer requires SSE2 instructions
  New functionality
  * When listing an NSS database using certutil -L, but the database
    hasn't yet been initialized with any non-empty or empty password,
    the text "Database needs user init" will be included in the listing.
  * When using certutil to set an inacceptable password in FIPS mode,
    a correct explanation of acceptable passwords will be printed.
  * SSLKEYLOGFILE is now supported with TLS 1.3, see bmo#1287711 for details.
  * SSLChannelInfo has two new fields (bmo#1396525):
    SSLNamedGroup originalKeaGroup holds the key exchange group of
    the original handshake when the session was resumed.
    PRBool resumed is PR_TRUE when the session is resumed and PR_FALSE
    otherwise.
  * RSA-PSS signatures are now supported on certificates. Certificates
    with RSA-PSS or RSA-PKCS#1v1.5 keys can be used to create an RSA-PSS
    signature on a certificate using the --pss-sign argument to certutil.
  Changes in 3.34.1:
  * The following CA certificate was Re-Added. It was removed in NSS
    3.34, but has been re-added with only the Email trust bit set.
    (bmo#1418678):
    libfreebl no longer requires SSE2 instructionsCN = Certum CA, O=Unizeto Sp. z o.o.
  * Removed entries from certdata.txt for actively distrusted
    certificates that have expired (bmo#1409872)
  * The version of the CA list was set to 2.20.</changelog>
  <changelog author="wr@rosenauer.org" date="1518091200">- update to NSS 3.35
  New functionality
  * TLS 1.3 support has been updated to draft -23. This includes a
    large number of changes since 3.34, which supported only draft
  - 18. See below for details.
  New Types
  * SSLHandshakeType - The type of a TLS handshake message.
  * For the SSLSignatureScheme enum, the enumerated values
    ssl_sig_rsa_pss_sha* are deprecated in response to a change in
    TLS 1.3.  Please use the equivalent ssl_sig_rsa_pss_rsae_sha*
    for rsaEncryption keys, or ssl_sig_rsa_pss_pss_sha* for PSS keys.
    Note that this release does not include support for the latter.
  Notable Changes
  * Previously, NSS used the DBM file format by default. Starting
    with version 3.35, NSS uses the SQL file format by default.
    Additional information can be found on this Fedora Linux project
    page: https://fedoraproject.org/wiki/Changes/NSSDefaultFileFormatSql
  * Added formally verified implementations of non-vectorized Chacha20
    and non-vectorized Poly1305 64-bit.
  * For stronger security, when creating encrypted PKCS#7 or PKCS#12 data,
    the iteration count for the password based encryption algorithm
    has been increased to one million iterations. Note that debug builds
    will use a lower count, for better performance in test environments.
  * NSS 3.30 had introduced a regression, preventing NSS from reading
    some AES encrypted data, produced by older versions of NSS.
    NSS 3.35 fixes this regression and restores the ability to read
    affected data.
  * The following CA certificates were Removed:
    OU = Security Communication EV RootCA1
    CN = CA Disig Root R1
    CN = DST ACES CA X6
    Subject CN = VeriSign Class 3 Secure Server CA - G2
  * The Websites (TLS/SSL) trust bit was turned off for the following
    CA certificates:
    CN = Chambers of Commerce Root
    CN = Global Chambersign Root
  * TLS servers are able to handle a ClientHello statelessly, if the
    client supports TLS 1.3.  If the server sends a HelloRetryRequest,
    it is possible to discard the server socket, and make a new socket
    to handle any subsequent ClientHello. This better enables stateless
    server operation. (This feature is added in support of QUIC, but it
    also has utility for DTLS 1.3 servers.)
  * The tstclnt utility now supports DTLS, using the -P option.  Note that
    a DTLS server is also provided in tstclnt.
  * TLS compression is no longer possible with NSS. The option can be
    enabled, but NSS will no longer negotiate compression.
  * The signatures of functions SSL_OptionSet, SSL_OptionGet,
    SSL_OptionSetDefault and SSL_OptionGetDefault have been modified,
    to take a PRIntn argument rather than PRBool. This makes it clearer,
    that options can have values other than 0 or 1.  Note this does
    not affect ABI compatibility, because PRBool is a typedef for PRIntn.</changelog>
  <changelog author="cgrobertson@suse.com" date="1521115200">- update to NSS 3.36
  New functionality
  * Experimental APIs for TLS session cache handling
  Notable Changes
  * Replaces existing vectorized ChaCha20 code with verified
    HACL* implementation.
- Removed patch as no longer needed: renegotiate-transitional.patch
  upstream fix</changelog>
  <changelog author="wr@rosenauer.org" date="1524571200">- update to NSS 3.36.1
  Notable changes
  * In NSS version 3.35 the iteration count in optimized builds,
    which is used for password based encryption algorithm related to
    encrypted PKCS#7 or PKCS#12 data, was increased to one million
    iterations. That change had caused an interoperability regression
    with operating systems that are limited to 600 K iterations.
    NSS 3.36.1 has been changed to use the same 600 K limit.
  Bugs fixed
  * Certain smartcard operations could result in a deadlock.</changelog>
  <changelog author="wr@rosenauer.org" date="1528372800">- update to NSS 3.36.4
  * required for Firefox 60.0.2 (bsc#1096515)
  * Fix crash on macOS related to authentication tokens, e.g. PK11or
    WebAuthn. (bmo#1461731)
  Bugfixes from 3.36.2
  * Connecting to a server that was recently upgraded to TLS 1.3
    would result in a SSL_RX_MALFORMED_SERVER_HELLO error. (bmo#1462303)
  * Fix a rare bug with PKCS#12 files. (bmo#1460673)
- use relro linker option (add-relro-linker-option.patch)</changelog>
</package>
<package pkgid="eac95fe80dd0af367031d4821539a842791e881765c5033d31ec5c76aacd4721" name="mozjs52" arch="src">
  <version epoch="0" ver="52.6.0" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- initial mozjs52 package
  (roughly based on previous mozjs* packages)</changelog>
  <changelog author="wr@rosenauer.org" date="1503921600">- update to 52.3.0
- added bmo1176787.patch to disable MOZ_GLUE_IN_PROGRAM
- added bmo1379539.patch to remove NSPR dependency while
  - -enable-posix-nspr-emulation is used</changelog>
  <changelog author="wr@rosenauer.org" date="1504008000">- try to use ION everywhere
- removed obsolete NSPR build dependency</changelog>
  <changelog author="cgrobertson@suse.com" date="1507291200">- Added additional compiler flags on the condition
  of building for ppc64le using gcc7 or newer.
  (see bmo#1399248)</changelog>
  <changelog author="jones_ld@protonmail.com" date="1511006400">- Enable Internationalization required by GJS
- Disable running tests due to broken toLocaleDateString_timeZone test</changelog>
  <changelog author="cgrobertson@suse.com" date="1512129600">- Added support for ICU and data file.
- Added mozilla-s390-bigendian.patch to enable bigendian support
  for s390 machines.
- Added xulrunner-24.0-s390-inlines.patch for s390 builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517227200">- Update to 52.6.0
- Drop fix-64bit-archs.patch and bmo1379539.patch, fixed upstream
- Update Source url.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519905600">- Actually remove bundled zlib and use system zlib. Avoids potential
  problems when trying to use system zlib while mozjs52-devel is
  installed (two zlib.h instances with conflicting definitions).
  Likewise fix for boo#1082720.
- Drop unused zip BuildRequires.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526990400">- Fix armv6 build by fixing armv6 detection:
  * fix_armv6_build.patch</changelog>
  <changelog author="schwab@suse.de" date="1527681600">- No JIT on ppc, don't run jit test</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1527681601">- for ppc64 (BE) use same patches as s390x
  (mozilla-s390-bigendian.patch xulrunner-24.0-s390-inlines.patch)
- This change is sufficient to solve boo#1093033</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1529323200">- update _constraints file for ppc64/ppc64le to avoid
  "Out of memory" build failure on some PowerPC workers.</changelog>
  <changelog author="msuchanek@suse.com" date="1532433600">- Remove trailing backslash (https://build.suse.de/request/show/168818)</changelog>
</package>
<package pkgid="7c027c359766ad424b8f8f853a2f1f93178759f3c11e01f2dbb4ee054a00a4fb" name="mozjs52" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- initial mozjs52 package
  (roughly based on previous mozjs* packages)</changelog>
  <changelog author="wr@rosenauer.org" date="1503921600">- update to 52.3.0
- added bmo1176787.patch to disable MOZ_GLUE_IN_PROGRAM
- added bmo1379539.patch to remove NSPR dependency while
  - -enable-posix-nspr-emulation is used</changelog>
  <changelog author="wr@rosenauer.org" date="1504008000">- try to use ION everywhere
- removed obsolete NSPR build dependency</changelog>
  <changelog author="cgrobertson@suse.com" date="1507291200">- Added additional compiler flags on the condition
  of building for ppc64le using gcc7 or newer.
  (see bmo#1399248)</changelog>
  <changelog author="jones_ld@protonmail.com" date="1511006400">- Enable Internationalization required by GJS
- Disable running tests due to broken toLocaleDateString_timeZone test</changelog>
  <changelog author="cgrobertson@suse.com" date="1512129600">- Added support for ICU and data file.
- Added mozilla-s390-bigendian.patch to enable bigendian support
  for s390 machines.
- Added xulrunner-24.0-s390-inlines.patch for s390 builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517227200">- Update to 52.6.0
- Drop fix-64bit-archs.patch and bmo1379539.patch, fixed upstream
- Update Source url.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519905600">- Actually remove bundled zlib and use system zlib. Avoids potential
  problems when trying to use system zlib while mozjs52-devel is
  installed (two zlib.h instances with conflicting definitions).
  Likewise fix for boo#1082720.
- Drop unused zip BuildRequires.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526990400">- Fix armv6 build by fixing armv6 detection:
  * fix_armv6_build.patch</changelog>
  <changelog author="schwab@suse.de" date="1527681600">- No JIT on ppc, don't run jit test</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1527681601">- for ppc64 (BE) use same patches as s390x
  (mozilla-s390-bigendian.patch xulrunner-24.0-s390-inlines.patch)
- This change is sufficient to solve boo#1093033</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1529323200">- update _constraints file for ppc64/ppc64le to avoid
  "Out of memory" build failure on some PowerPC workers.</changelog>
  <changelog author="msuchanek@suse.com" date="1532433600">- Remove trailing backslash (https://build.suse.de/request/show/168818)</changelog>
</package>
<package pkgid="524917140f4545306dfa523cb3650953405b9e307255710b342c87149baee7a6" name="mozjs52-devel" arch="x86_64">
  <version epoch="0" ver="52.6.0" rel="lp150.2.3.1"/>
  <changelog author="wr@rosenauer.org" date="1502798400">- initial mozjs52 package
  (roughly based on previous mozjs* packages)</changelog>
  <changelog author="wr@rosenauer.org" date="1503921600">- update to 52.3.0
- added bmo1176787.patch to disable MOZ_GLUE_IN_PROGRAM
- added bmo1379539.patch to remove NSPR dependency while
  - -enable-posix-nspr-emulation is used</changelog>
  <changelog author="wr@rosenauer.org" date="1504008000">- try to use ION everywhere
- removed obsolete NSPR build dependency</changelog>
  <changelog author="cgrobertson@suse.com" date="1507291200">- Added additional compiler flags on the condition
  of building for ppc64le using gcc7 or newer.
  (see bmo#1399248)</changelog>
  <changelog author="jones_ld@protonmail.com" date="1511006400">- Enable Internationalization required by GJS
- Disable running tests due to broken toLocaleDateString_timeZone test</changelog>
  <changelog author="cgrobertson@suse.com" date="1512129600">- Added support for ICU and data file.
- Added mozilla-s390-bigendian.patch to enable bigendian support
  for s390 machines.
- Added xulrunner-24.0-s390-inlines.patch for s390 builds.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1517227200">- Update to 52.6.0
- Drop fix-64bit-archs.patch and bmo1379539.patch, fixed upstream
- Update Source url.</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1519905600">- Actually remove bundled zlib and use system zlib. Avoids potential
  problems when trying to use system zlib while mozjs52-devel is
  installed (two zlib.h instances with conflicting definitions).
  Likewise fix for boo#1082720.
- Drop unused zip BuildRequires.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1526990400">- Fix armv6 build by fixing armv6 detection:
  * fix_armv6_build.patch</changelog>
  <changelog author="schwab@suse.de" date="1527681600">- No JIT on ppc, don't run jit test</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1527681601">- for ppc64 (BE) use same patches as s390x
  (mozilla-s390-bigendian.patch xulrunner-24.0-s390-inlines.patch)
- This change is sufficient to solve boo#1093033</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1529323200">- update _constraints file for ppc64/ppc64le to avoid
  "Out of memory" build failure on some PowerPC workers.</changelog>
  <changelog author="msuchanek@suse.com" date="1532433600">- Remove trailing backslash (https://build.suse.de/request/show/168818)</changelog>
</package>
<package pkgid="3b9cb795beb2b2b55cf13f9e0c977b70c403c756a53b063867f6fa5c7a455bf9" name="mupdf" arch="src">
  <version epoch="0" ver="1.12.0" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1479988800">- Update to version 1.10
  * FictionBook (FB2) e-book support.
  * Simple SVG parser (a small subset of SVG only).
  * mutool convert: a new document conversion tool and interface.
  * Multi-threaded rendering in mudraw.
  * Updated base 14 fonts from URW.
  * New CJK font with language specific variants.
  * Hyperlink support in EPUB.
  * Alpha channel is now optional in pixmaps.
  * More aggressive purging of cached objects.
  * Partial image decoding for lower memory use when banding.
  * Reduced default set of built-in CMap tables to the minimum required.
  * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time.
  * Function level linking.
  * Dropped pdf object generation numbers from public interfaces.
  * Simplified PDF page, xobject, and annotation internals.
  * Closing and freeing devices and writers are now separate steps.
  * Improved PDF annotation editing interface (still a work in progress).
  * Document writer interface.
  * Banded image writer interface.
- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch,
  both are fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1482235200">- Update to version 1.10a
  * A bug with mutool and saving PDF files using the 'ascii'
    option has been fixed.
- Add fix-openjpeg-flags.patch to stop defining OPJ_STATIC,
  this is https://github.com/uclouvain/openjpeg/issues/802</changelog>
  <changelog author="idonmez@suse.com" date="1485259200">- Add CVE-2016-10132.patch, CVE-2016-10133.patch and
  CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and
  CVE-2016-10141 bsc#1019877</changelog>
  <changelog author="idonmez@suse.com" date="1486382400">- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes
  CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504</changelog>
  <changelog author="idonmez@suse.com" date="1486728000">- Add CVE-2017-5896.patch to fix a heap overflow
  CVE-2017-5896 bsc#1023761 bsc#1024679</changelog>
  <changelog author="idonmez@suse.com" date="1486728001">- Add bsc1023760.patch to fix writing svg output to stdout if no
  output specified bsc#1023760</changelog>
  <changelog author="idonmez@suse.com" date="1493294400">- mupdf is not a terminal app boo#1036637</changelog>
  <changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to sort input files to make build reproducible
  (boo#1041090)</changelog>
  <changelog author="idonmez@suse.com" date="1501761600">- Add CVE-2016-10221.patch, CVE-2016-8728.patch and
  CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728,
  CVE-2016-8729 and CVE-2017-7976
  bsc#1032140 bsc#1039850 bsc#1052029</changelog>
  <changelog author="aloisio@gmx.com" date="1510315200">- Update to version 1.11
  * This is primarily a bug fix release.
  * PDF portfolio support with command line tool "mutool
    portfolio".
  * Add callbacks to load fallback fonts from the system.
  * Use system fonts in Android to reduce install size.
  * Flag to disable publisher styles in EPUB layout.
  * Improved SVG output.
- Refreshed fix-openjpeg-flags.patch and reproducible.patch
- Dropped CVE-2017-5896.patch, bsc1023760.patch,
  CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch,
  CVE-2016-10132.patch, CVE-2016-10133.patch,
  CVE-2016-10141.patch, CVE-2017-5627.patch
  and CVE-2017-5628.patch (merged or adapted upstream)</changelog>
  <changelog author="avindra@opensuse.org" date="1515931200">- Update to version 1.12.0
  * Color Management:
    + LCMS2 library for color management
    + CMYK rendering with overprint simulation
    + Spot color rendering
    + Transparency rendering fixes
  * Structured text output improvements:
    + Reworked structured text API
    + Faster text searching
    + Highlight and copy text by selecting lines instead of by
    area
    + New semantic XHTML output format
    + New layout preserving HTML output format
  * Features and improvements:
    + Improved non-AA rendering with new scan converter
    + Improved LARGEFILE support
    + Improved TIFF support
    + Improved documentation
    + PCLm output.
    + PSD output.
    + New "mutool trace" tool.
    + New "mutool sign" tool (work in progress).
    + Text redaction (work in progress).
    + Lots of bug fixes.
- Strip "-source" from tarball name
- Switch to xz release (13mb smaller)
- rebase fix-openjpeg-flags.patch
- drop reproducible.patch
  * fixed upstream in 081d4c72430e3077a05499c783d9fbe24361b368
- Fixes CVE-2017-15369 (bsc#1063413), CVE-2017-15587 (bsc#1064027)</changelog>
  <changelog author="idonmez@suse.com" date="1516622400">- Add CVE-2018-5686.patch to fix an infinite loop
  CVE-2018-5686 bsc#1075936</changelog>
  <changelog author="kbabioch@suse.com" date="1516708800">- Add CVE-2017-17858.patch to fix an heap-based buffer overflow
  CVE-2017-17858 bsc#1077161</changelog>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
</package>
<package pkgid="d9c1eee7ba322c4abc20591e5b82084bb4073056bbd57b72ca1872a81a99ab78" name="mupdf" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1479988800">- Update to version 1.10
  * FictionBook (FB2) e-book support.
  * Simple SVG parser (a small subset of SVG only).
  * mutool convert: a new document conversion tool and interface.
  * Multi-threaded rendering in mudraw.
  * Updated base 14 fonts from URW.
  * New CJK font with language specific variants.
  * Hyperlink support in EPUB.
  * Alpha channel is now optional in pixmaps.
  * More aggressive purging of cached objects.
  * Partial image decoding for lower memory use when banding.
  * Reduced default set of built-in CMap tables to the minimum required.
  * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time.
  * Function level linking.
  * Dropped pdf object generation numbers from public interfaces.
  * Simplified PDF page, xobject, and annotation internals.
  * Closing and freeing devices and writers are now separate steps.
  * Improved PDF annotation editing interface (still a work in progress).
  * Document writer interface.
  * Banded image writer interface.
- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch,
  both are fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1482235200">- Update to version 1.10a
  * A bug with mutool and saving PDF files using the 'ascii'
    option has been fixed.
- Add fix-openjpeg-flags.patch to stop defining OPJ_STATIC,
  this is https://github.com/uclouvain/openjpeg/issues/802</changelog>
  <changelog author="idonmez@suse.com" date="1485259200">- Add CVE-2016-10132.patch, CVE-2016-10133.patch and
  CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and
  CVE-2016-10141 bsc#1019877</changelog>
  <changelog author="idonmez@suse.com" date="1486382400">- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes
  CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504</changelog>
  <changelog author="idonmez@suse.com" date="1486728000">- Add CVE-2017-5896.patch to fix a heap overflow
  CVE-2017-5896 bsc#1023761 bsc#1024679</changelog>
  <changelog author="idonmez@suse.com" date="1486728001">- Add bsc1023760.patch to fix writing svg output to stdout if no
  output specified bsc#1023760</changelog>
  <changelog author="idonmez@suse.com" date="1493294400">- mupdf is not a terminal app boo#1036637</changelog>
  <changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to sort input files to make build reproducible
  (boo#1041090)</changelog>
  <changelog author="idonmez@suse.com" date="1501761600">- Add CVE-2016-10221.patch, CVE-2016-8728.patch and
  CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728,
  CVE-2016-8729 and CVE-2017-7976
  bsc#1032140 bsc#1039850 bsc#1052029</changelog>
  <changelog author="aloisio@gmx.com" date="1510315200">- Update to version 1.11
  * This is primarily a bug fix release.
  * PDF portfolio support with command line tool "mutool
    portfolio".
  * Add callbacks to load fallback fonts from the system.
  * Use system fonts in Android to reduce install size.
  * Flag to disable publisher styles in EPUB layout.
  * Improved SVG output.
- Refreshed fix-openjpeg-flags.patch and reproducible.patch
- Dropped CVE-2017-5896.patch, bsc1023760.patch,
  CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch,
  CVE-2016-10132.patch, CVE-2016-10133.patch,
  CVE-2016-10141.patch, CVE-2017-5627.patch
  and CVE-2017-5628.patch (merged or adapted upstream)</changelog>
  <changelog author="avindra@opensuse.org" date="1515931200">- Update to version 1.12.0
  * Color Management:
    + LCMS2 library for color management
    + CMYK rendering with overprint simulation
    + Spot color rendering
    + Transparency rendering fixes
  * Structured text output improvements:
    + Reworked structured text API
    + Faster text searching
    + Highlight and copy text by selecting lines instead of by
    area
    + New semantic XHTML output format
    + New layout preserving HTML output format
  * Features and improvements:
    + Improved non-AA rendering with new scan converter
    + Improved LARGEFILE support
    + Improved TIFF support
    + Improved documentation
    + PCLm output.
    + PSD output.
    + New "mutool trace" tool.
    + New "mutool sign" tool (work in progress).
    + Text redaction (work in progress).
    + Lots of bug fixes.
- Strip "-source" from tarball name
- Switch to xz release (13mb smaller)
- rebase fix-openjpeg-flags.patch
- drop reproducible.patch
  * fixed upstream in 081d4c72430e3077a05499c783d9fbe24361b368
- Fixes CVE-2017-15369 (bsc#1063413), CVE-2017-15587 (bsc#1064027)</changelog>
  <changelog author="idonmez@suse.com" date="1516622400">- Add CVE-2018-5686.patch to fix an infinite loop
  CVE-2018-5686 bsc#1075936</changelog>
  <changelog author="kbabioch@suse.com" date="1516708800">- Add CVE-2017-17858.patch to fix an heap-based buffer overflow
  CVE-2017-17858 bsc#1077161</changelog>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
</package>
<package pkgid="87ee96c5307d41cb8af538dbf46865ba0161ed503c95575b1d219d75fdbc844b" name="mupdf-devel-static" arch="x86_64">
  <version epoch="0" ver="1.12.0" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1479988800">- Update to version 1.10
  * FictionBook (FB2) e-book support.
  * Simple SVG parser (a small subset of SVG only).
  * mutool convert: a new document conversion tool and interface.
  * Multi-threaded rendering in mudraw.
  * Updated base 14 fonts from URW.
  * New CJK font with language specific variants.
  * Hyperlink support in EPUB.
  * Alpha channel is now optional in pixmaps.
  * More aggressive purging of cached objects.
  * Partial image decoding for lower memory use when banding.
  * Reduced default set of built-in CMap tables to the minimum required.
  * FZ_ENABLE_PDF, _XPS, _JS, to disable features at compile time.
  * Function level linking.
  * Dropped pdf object generation numbers from public interfaces.
  * Simplified PDF page, xobject, and annotation internals.
  * Closing and freeing devices and writers are now separate steps.
  * Improved PDF annotation editing interface (still a work in progress).
  * Document writer interface.
  * Banded image writer interface.
- Drop CVE-2016-6265.patch and mupdf-fix-openjpeg2.patch,
  both are fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1482235200">- Update to version 1.10a
  * A bug with mutool and saving PDF files using the 'ascii'
    option has been fixed.
- Add fix-openjpeg-flags.patch to stop defining OPJ_STATIC,
  this is https://github.com/uclouvain/openjpeg/issues/802</changelog>
  <changelog author="idonmez@suse.com" date="1485259200">- Add CVE-2016-10132.patch, CVE-2016-10133.patch and
  CVE-2016-10141.patch to fix CVE-2016-10132, CVE-2016-10133 and
  CVE-2016-10141 bsc#1019877</changelog>
  <changelog author="idonmez@suse.com" date="1486382400">- Add CVE-2017-5627.patch and CVE-2017-5628.patch fixes
  CVE-2017-5627 and CVE-2017-5628 bsc#1022503 bsc#1022504</changelog>
  <changelog author="idonmez@suse.com" date="1486728000">- Add CVE-2017-5896.patch to fix a heap overflow
  CVE-2017-5896 bsc#1023761 bsc#1024679</changelog>
  <changelog author="idonmez@suse.com" date="1486728001">- Add bsc1023760.patch to fix writing svg output to stdout if no
  output specified bsc#1023760</changelog>
  <changelog author="idonmez@suse.com" date="1493294400">- mupdf is not a terminal app boo#1036637</changelog>
  <changelog author="bwiedemann@suse.com" date="1496059200">- Add reproducible.patch to sort input files to make build reproducible
  (boo#1041090)</changelog>
  <changelog author="idonmez@suse.com" date="1501761600">- Add CVE-2016-10221.patch, CVE-2016-8728.patch and
  CVE-2017-7976.patch to fix CVE-2016-10221, CVE-2016-8728,
  CVE-2016-8729 and CVE-2017-7976
  bsc#1032140 bsc#1039850 bsc#1052029</changelog>
  <changelog author="aloisio@gmx.com" date="1510315200">- Update to version 1.11
  * This is primarily a bug fix release.
  * PDF portfolio support with command line tool "mutool
    portfolio".
  * Add callbacks to load fallback fonts from the system.
  * Use system fonts in Android to reduce install size.
  * Flag to disable publisher styles in EPUB layout.
  * Improved SVG output.
- Refreshed fix-openjpeg-flags.patch and reproducible.patch
- Dropped CVE-2017-5896.patch, bsc1023760.patch,
  CVE-2016-10221.patch, CVE-2016-8728.patch, CVE-2017-7976.patch,
  CVE-2016-10132.patch, CVE-2016-10133.patch,
  CVE-2016-10141.patch, CVE-2017-5627.patch
  and CVE-2017-5628.patch (merged or adapted upstream)</changelog>
  <changelog author="avindra@opensuse.org" date="1515931200">- Update to version 1.12.0
  * Color Management:
    + LCMS2 library for color management
    + CMYK rendering with overprint simulation
    + Spot color rendering
    + Transparency rendering fixes
  * Structured text output improvements:
    + Reworked structured text API
    + Faster text searching
    + Highlight and copy text by selecting lines instead of by
    area
    + New semantic XHTML output format
    + New layout preserving HTML output format
  * Features and improvements:
    + Improved non-AA rendering with new scan converter
    + Improved LARGEFILE support
    + Improved TIFF support
    + Improved documentation
    + PCLm output.
    + PSD output.
    + New "mutool trace" tool.
    + New "mutool sign" tool (work in progress).
    + Text redaction (work in progress).
    + Lots of bug fixes.
- Strip "-source" from tarball name
- Switch to xz release (13mb smaller)
- rebase fix-openjpeg-flags.patch
- drop reproducible.patch
  * fixed upstream in 081d4c72430e3077a05499c783d9fbe24361b368
- Fixes CVE-2017-15369 (bsc#1063413), CVE-2017-15587 (bsc#1064027)</changelog>
  <changelog author="idonmez@suse.com" date="1516622400">- Add CVE-2018-5686.patch to fix an infinite loop
  CVE-2018-5686 bsc#1075936</changelog>
  <changelog author="kbabioch@suse.com" date="1516708800">- Add CVE-2017-17858.patch to fix an heap-based buffer overflow
  CVE-2017-17858 bsc#1077161</changelog>
  <changelog author="kbabioch@suse.com" date="1517572800">- Add CVE-2018-6187.patch to fix a heap buffer overflow in in pdf-write.c
  in the do_pdf_save_document function (CVE-2018-6187 boo#1077407)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572801">- Add CVE-2018-6544.patch to fix a DoS in pdf_load_obj_stm within in
  pdf/pdf-xref.c (CVE-2018-6544 boo#1079100)
- Add CVE-2018-6192.patch to fix a DoS in pdf_read_new_xref within
  pdf/pdf-xref.c via crafted PDF file (CVE-2018-6192 boo#1077755)</changelog>
  <changelog author="kbabioch@suse.com" date="1517572802">- CVE-2018-6192.patch: Use official fix from usptream (CVE-2018-6192
  boo#1077755)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- use freetype2-devel explictily as buildrequires</changelog>
  <changelog author="kbabioch@suse.com" date="1518436800">- Add CVE-2018-1000051.patch: Fix a Use After Free vulnerability in
  fz_keep_key_storable that can potentially result in DoS / remote
  code execution (CVE-2018-1000051 bsc#1080531)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609600">- Remove xorg-x11-devel from buildrequires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1518609601">-mupdf-no-strip.patch: fix debuginfo generation</changelog>
</package>
<package pkgid="f2dd7b05be761d2f800c1f7b9da721599a6ba007a823868e49bb5fc838cc999c" name="mutt" arch="src">
  <version epoch="0" ver="1.10.1" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1488456000">- Also now recommend urlscan</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Explicite add package documentation directory to file list</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Update to neomutt 20170421 which updates to mutt 1.8.2
  1.8.2 Bug fix release.
  1.8.1 Bug fix release.
  1.8.0
  - $locale has been removed.  Mutt now respects the LC_TIME setting
    instead.  See also $attribution_locale.
  + $attribution_locale can be used to override the date formatting in
    attribution strings.  When unset, Mutt will use the locale
    environment, but note the default value of $date_format has a
    leading '!' which says to use the C-locale.
  ! Message-id and mail-followup-to headers are now preserved for recalled
    messages.
  + &lt;unsidebar_whitelist&gt; added to complement &lt;sidebar_whitelist&gt;.
  ! The pager position is reset to the top when toggling header-weed.
  ! IMAP messages moved to $trash via server-side copy are marked as read.
  + &lt;root-message&gt; jumps to the root message of a thread.
  ! Piped text attachments are charset converted.
  + Added %F to $attach_format, to show the content-disposition filename.
    %d will fall back to %F which will fall back to %f.
  + &lt;rename-attachment&gt; allows an attachment name to be changed, without
    modifying the underlying file's name.
  ! Mutt will look for the user's muttrc additionally in
    $XDG_CONFIG_HOME/mutt/.
  + Compressed mbox and mmdf files are now supported via open-hook,
    close-hook, and append-hook.  See contrib/sample.muttrc-compress
    for suggested settings.  Note this is a compile-time option:
  - -enable-compressed.
  + When $flag_safe is set, flagged messages cannot be deleted.
  + The '@' pattern modifier can be used to limit matches to known aliases.
  + &lt;mark-message&gt; creates a hotkey binding to a specific message.  The hotkey
    prefix is specified via $mark_macro_prefix.
  + &lt;setenv&gt; and &lt;unsetenv&gt; can be used to add/remove environment variables
    passed to children.
  ! Mutt will now use the built-in OpenSSL SSL_set_verify() callback
    to verify certificates.  This allows better support for verifying
    chains, including alternative chain support.
  + $uncollapse_new controls whether a thread will be uncollapsed when a new
    message arrives.
  ! $to_chars and $status_chars now accept multibyte characters.
  + &lt;subjectrx&gt; allows replacing matching subjects with something else.
    This can be used to declutter subject lines in the index.
  + &lt;edit-label&gt; can be used to add, change, or delete a message's X-Label.
  ! Pattern expressions with ~y support label tab completion.
  + The header cache now also supports Kyoto Cabinet and LMDB as
    backend databases.
  1.7.2 (2016-12-04):
  ! Bug fix release.  No features were modified or added.
  ! Fixes for OpenSSL 1.1.  Versions less than 0.9.6 are no longer supported.
  1.7.1 (2016-10-08):
  ! Bug fix release.  No features were modified or added.
  1.7.0 (2016-08-18):
  ! Improved alignment when using multi-column characters with
    soft-fill (%*X) and right-justified (%&gt;X) format strings.
  + The COLUMNS environment variable will be set to the width of the
    pager when invoking display filters.  This can be used in
    copiousoutput mailcap entries to allow their output to match the
    pager width.
  + The sidebar patch has been merged.  Please watch for airborne
    bovine.  See the documentation for all the options, or simply
    enable it with 'set sidebar_visible'.
  + $mail_check_stats and $mail_check_stats_interval control whether,
    and how often, to scan for unread, flagged, and total message
    counts when checking for new mail in mailboxes.  These statistics
    can be displayed in the sidebar and browser.
  + $trash, when set, specifies the path of the folder where mails
    marked for deletion will be moved, instead of being irremediably
    purged.
  + The &lt;purge-message&gt; function can be used to delete an entry and
    bypass the trash folder.
  + $folder_format has new format strings %m and %n, to display
    total and unread message counts for mailboxes.  Note that
    $mail_check_stats should be enabled to use these.
  ! When browsing IMAP, %N will now display 'N', instead of the unread
    message count.  Please use %n to display unread messages.
- Removed obsolete patches
  * COLS-workaround.dif
  * mutt-1.6.2-gpgme_set_sender.patch
- Modifyed and ported patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Renamed patch
  * mutt-1.6.2.dif becomes mutt-1.8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1493380801">- Move some extend documentation about mutt in a seperate package
- Remove mutt-1.5.21.de.po as mutt now have a de.po as well</changelog>
  <changelog author="werner@suse.de" date="1493467200">- Provide a hint on the package split</changelog>
  <changelog author="werner@suse.de" date="1493467201">- Yet an other package split: now there is a mutt-lang</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- call gzip -n to make build more reproducible</changelog>
  <changelog author="thorsten.behrens@cib.de" date="1493553601">- Make header cache work again, using TokyoCabinet as backend
- Remove now-obsolete configure parameters</changelog>
  <changelog author="thorsten.behrens@cib.de" date="1493553602">- Remove warning</changelog>
  <changelog author="werner@suse.de" date="1493640000">- Switch form TokyoCabinet over to KyotoCabinet</changelog>
  <changelog author="werner@suse.de" date="1494417600">- Add patch mutt-1.8.2-from4crypt.diff
  to fix crash in crypt.c if no From is found or set</changelog>
  <changelog author="werner@suse.de" date="1497355200">- Update to neomutt 20170609 which updates to mutt 1.8.3
  + Warn on bindkey aliasing
  + Drop PATCHES, tidy 'mutt -v' output
  + Add %z format strings to index_format
  + Add debug_level/debug_file options
  + Fix nntp group selection
  + Fix status color
  + Tidy up S/MIME contrib
  + Do not try to create Maildir if it is an NNTP URI
  + Fix missing NONULL for mutt.set() in Lua
  + Fix German PGP shortkeys
  + Remove feature muttrc files
  + Merge README.notmuch into manual
  + Remove unneded scripts
  + Remove README.SECURITY
  + Remove BEWARE and devel-notes.txt
  + Update Makefiles
  + Delete TODO files
  + Remove legacy files
  + Don't generate vim-neomutt syntax file
  + Remove LaTeX/pdf manual generation
  + Add missing docs for expandos
  + Fix sidebar howto examples
  + Remove some upstream references
  + Drop refs to patches
  + Improve PR template and CONTRIBUTING.md
  + Fix list items in newbie-tutorial's Mailing List Guidelines
  + Remove configure options that no longer exist
  + fix newbie tutorial
  + document signing tags / releases
  + config: drop unused paginate command
  + script: split tests up into several
  + convert credits page to markdown
  + simpify 404 page
  + improve newbie tutorial
  + remove help.html and integrate its content elsewhere
  + make: "graphviz" program is needed for generating diagram
  + improve getting started guide // include legacy files
  + dev: add list of architectures/operating systems
  + numerous small fixes
  + Remove typedefs and rename ~130 structs
  + Add separate hcache dir
  + Move crypto files to ncrypt dir
  + Split up mutt.h, protos.h
  + Always build: sidebar, imap, pop, smtp, compressed, nntp
  + Remove --enable-mailtool configure option
  + Make dotlock optional
  + Change gpgme requirement back to 1.1.0
  + Remove check_sec.sh
  + Fix safe_calloc args
  + Remove unused macros
  + Remove unused option: SmimeSignOpaqueCommand
  + Move configure-generated files
  + Update distcheck build flags
  + Drop obsolete iconv check
  + Unused prototypes - unsupported systems
  + Drop many configure tests for things defined in POSIX:2001
  + Kill useless crypthash.h file
  + Run clang-format on the code
  + Fail early if ncursesw cannot be found
  + Add names prototype arguments
  + Abbreviate pointer tests against NULL
  + Initialise pointers to NULL
  + Reduce the scope of for loop variables
  + Coverity: fix defects
  + Convert all exec calls to use mutt_envlist(), remove setenv function
  + Note that mbox-hooks are dependent on $move
  + Refresh header color when updating label
  + Remove glibc-specific execvpe() call in sendlib.c
  + Add color commands for the compose menu headers and security status
  + Fix sidebar count updates when closing mailbox
  + Don't modify LastFolder/CurrentFolder upon aborting a change folder operation
  + Change message modifying operations to additively set redraw flags
  + Improve maildir and mh to report flag changes in mx_check_mailbox()
  + Add $header_color_partial to allow partial coloring of headers
  + Rename REDRAW_SIGWINCH to REDRAW_FLOW
  + Create R_PAGER_FLOW config variable flag
  + Turn IMAP_EXPUNGE_EXPECTED back off when syncing
  + Add $history_remove_dups option to remove dups from history ring
  + Also remove duplicates from the history file
  + Don't filter new entries when compacting history save file
  + Move the IMAP msn field to IMAP_HEADER_DATA
  + Fix imap expunge to match msn and fix index
  + Fix cmd_parse_fetch() to match against MSN
  + Start fixing imap_read_headers() to account for MSN gaps
  + Add msn_index and max_msn to find and check boundaries by MSN
  + Properly adjust fetch ranges when handling new mail
  + Small imap fetch fixes
  + Don't abort header cache evaluation when there is a hole
  + Fix mfc overflow check and uninitialized variable
  + Fix potential segv if mx_open_mailbox is passed an empty string
  + Don't clean up idata when closing an open-append mailbox
  + Don't clean up msn idata when closing an open-append mailbox
  + Fix memory leak when closing mailbox and using the sidebar
  + Change imap body cache cleanup to use the uid_hash
  + Convert classic s/mime to space delimit findKeys output
  + Add self-encrypt options for PGP and S/MIME
  + Change $postpone_encrypt to use self-encrypt variables first
  + Automatic post-release commit for mutt-1.8.3
  + Add note about message scoring and thread patterns
  + unbind mappings before overwriting in vim-keys
  + latest coverity issues (#624)
  + don't pass colour-codes to filters
  + Don't set a colour unless it's been defined.
  + crash if no from is set or founds
  + ifdef command
  + fix translations
  + fix some remaining translation problems
  + explain binding warnings
  + don't document unsupported arches
  + fix make git_ver.h
  + allow xsltproc and w3m calls to fail
  + fix make dist
  + Add a mutt_endwin() before invoking $sendmail
  + Restore setenv function
  + Fix tag-prefix to not abort on $timeout
  + Change km_dokey() to return -2 on a timeout/sigwinch
  + Enable TEXTDOMAINDIR override to make translation testing easier
  + Fix "format string is not a string literal" warnings
- Modifyed and ported patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Delete patch mutt-1.8.2-from4crypt.diff now upstream
- Renamed patch mutt-1.8.2.dif which becomes mutt-1.8.3.dif</changelog>
  <changelog author="olaf@aepfle.de" date="1499860800">- Add buildconditional for openssl/gnutls
  Disable gnutls, there can be only one of them and openssl was used
- Use pkgconfig to refer to openssl/gnutls
- Remove uneeded builddeps and recommends for smtp_daemon by
  specifying the path to sendmail
- Remove uneeded builddep for ispell by specifying the path to it
- Update doc builddeps: add opensp, libxslt-tools, w3m
  drop docbook_4,libxml2,libxslt,lynx,sgml-skel,xli
- Remove unneeded builddeps: fdupes,glibc-i18ndata,libassuan,
  libcom_err,libgcrypt,libgpg-error
- Wrap desktop files handing in suse_version
- Remove included krb5-config, the copy in the devel pkg is good enough
- Use configure macro for ordinary autoconf result
- Build manual.txt with w3m to properly dump tables
- Move Requires perl-Expect to doc pkg, make it a Recommends
- Consistent suse_version for shared-mime-info usage
- Unconditional libgpgme usage
- Unconditional autoreconf</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- If built with gnutls, set ssl_ca_certificates_file to avoid
  warning about "server cert signed using an insecure algorithm"</changelog>
  <changelog author="tchvatal@suse.com" date="1502366400">- Switch to hunspell as default spell-checking software wrt
  fate#323578
- Write SUSE in the skel.muttrc instead of SuSE
- Use the right folder for unpacking instead of symlink
  * fixes quilt setup</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Update to neomutt 20170912 which updates to mutt 1.9.0
  NeoMutt
    Add guix build support
    Only match real mailboxes when looking for new mail
    Fix the printing of ncurses version in -v output
    Bind editor &lt;delete&gt; to delete-char
    Fix overflowing colours
    Fix empty In-Reply-To generation
    Trim trailing slash from completed dirs
    Add guix-neomutt.scm
    Fix setting custom query_type in notmuch query
    Better curses identification
    Use the system's wchar_t support
    Use the system's md5 tool (or equivalent)
    Clean up configure.ac
    Teach gen-map-doc about the new opcode header
    Rename functions (snake_case)
    Rename constants/defines (UPPER_CASE)
    Create library of shared functions
    Much tidying
    Rename globals to match user config
    Drop unnecessary functions/macros
    Use a standard list implementation
    Coverity fixes
    Use explicit NUL for string terminators
    Drop OPS* in favour of opcodes.h
  Upstream
    Fix menu color calls to occur before positioning the cursor
    When guessing an attachment type, don't allow text/plain if there is a null character
    Add $imap_poll_timeout to allow mailbox polling to time out
    Handle error if REGCOMP in pager fails when resizing
    Change recvattach to allow nested encryption
    Fix attachment check_traditional and extract_keys operations
    Add edit-content-type helper and warning for decrypted attachments
    Add option to run command to query attachment mime type
    Add warning about using inline pgp with format=flowed
- Rename patch mutt-1.8.3.dif which becomes now mutt-1.9.0.dif
- Modify the patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif</changelog>
  <changelog author="werner@suse.de" date="1507118400">- Add patch neomutt-c030a8b.patch from upstream commit to fix
  boo#1061343</changelog>
  <changelog author="werner@suse.de" date="1508846400">- Add patch mutt-1.9.0-1.9.1.patch which is a backport of the
  mutt upstream patch diff-1.9.0-1.9.1 to neomutt 20170912
- Rename patch mutt-1.9.0.dif which now becomes mutt-1.9.1.dif</changelog>
  <changelog author="werner@suse.de" date="1530792000">- Skip neomutt now (boo#1094717)
  * There exists a package neomutt
  * mutt-1.10.0 uses a lot of extensions now like compessed folders
    and header caching, but still misses things like notmuch
- Modified patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Renamed patch: mutt-1.9.1.dif becomes mutt-1.10.0.dif
- Deleted patches mutt-1.9.0-1.9.1.patch neomutt-c030a8b.patch
- Add patch truncate.patch to avoid truncated buffers due snprintf</changelog>
  <changelog author="werner@suse.de" date="1531828800">- Update to mutt 1.10.1 (boo#1101428)
  This is an important bug-fix release, fixing a code injection
  and a couple path traversal vulnerabilities.
  This also covers
  * CVE-2018-14363 bnc#1101566
  * CVE-2018-14362 bnc#1101567
  * CVE-2018-14361 bnc#1101568
  * CVE-2018-14360 bnc#1101569
  * CVE-2018-14359 bnc#1101570
  * CVE-2018-14358 bnc#1101571
  * CVE-2018-14357 bnc#1101573
  * CVE-2018-14356 bnc#1101576
  * CVE-2018-14355 bnc#1101577
  * CVE-2018-14354 bnc#1101578
  * CVE-2018-14353 bnc#1101581
  * CVE-2018-14352 bnc#1101582
  * CVE-2018-14351 bnc#1101583
  * CVE-2018-14350 bnc#1101588
  * CVE-2018-14349 bnc#1101589
- Modified patches
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * truncate.patch</changelog>
</package>
<package pkgid="4348b8cc704e07e73f8cbb49b56a1387713e13db1423cc12a2d0e2366782a347" name="mutt" arch="x86_64">
  <version epoch="0" ver="1.10.1" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1488456000">- Also now recommend urlscan</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Explicite add package documentation directory to file list</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Update to neomutt 20170421 which updates to mutt 1.8.2
  1.8.2 Bug fix release.
  1.8.1 Bug fix release.
  1.8.0
  - $locale has been removed.  Mutt now respects the LC_TIME setting
    instead.  See also $attribution_locale.
  + $attribution_locale can be used to override the date formatting in
    attribution strings.  When unset, Mutt will use the locale
    environment, but note the default value of $date_format has a
    leading '!' which says to use the C-locale.
  ! Message-id and mail-followup-to headers are now preserved for recalled
    messages.
  + &lt;unsidebar_whitelist&gt; added to complement &lt;sidebar_whitelist&gt;.
  ! The pager position is reset to the top when toggling header-weed.
  ! IMAP messages moved to $trash via server-side copy are marked as read.
  + &lt;root-message&gt; jumps to the root message of a thread.
  ! Piped text attachments are charset converted.
  + Added %F to $attach_format, to show the content-disposition filename.
    %d will fall back to %F which will fall back to %f.
  + &lt;rename-attachment&gt; allows an attachment name to be changed, without
    modifying the underlying file's name.
  ! Mutt will look for the user's muttrc additionally in
    $XDG_CONFIG_HOME/mutt/.
  + Compressed mbox and mmdf files are now supported via open-hook,
    close-hook, and append-hook.  See contrib/sample.muttrc-compress
    for suggested settings.  Note this is a compile-time option:
  - -enable-compressed.
  + When $flag_safe is set, flagged messages cannot be deleted.
  + The '@' pattern modifier can be used to limit matches to known aliases.
  + &lt;mark-message&gt; creates a hotkey binding to a specific message.  The hotkey
    prefix is specified via $mark_macro_prefix.
  + &lt;setenv&gt; and &lt;unsetenv&gt; can be used to add/remove environment variables
    passed to children.
  ! Mutt will now use the built-in OpenSSL SSL_set_verify() callback
    to verify certificates.  This allows better support for verifying
    chains, including alternative chain support.
  + $uncollapse_new controls whether a thread will be uncollapsed when a new
    message arrives.
  ! $to_chars and $status_chars now accept multibyte characters.
  + &lt;subjectrx&gt; allows replacing matching subjects with something else.
    This can be used to declutter subject lines in the index.
  + &lt;edit-label&gt; can be used to add, change, or delete a message's X-Label.
  ! Pattern expressions with ~y support label tab completion.
  + The header cache now also supports Kyoto Cabinet and LMDB as
    backend databases.
  1.7.2 (2016-12-04):
  ! Bug fix release.  No features were modified or added.
  ! Fixes for OpenSSL 1.1.  Versions less than 0.9.6 are no longer supported.
  1.7.1 (2016-10-08):
  ! Bug fix release.  No features were modified or added.
  1.7.0 (2016-08-18):
  ! Improved alignment when using multi-column characters with
    soft-fill (%*X) and right-justified (%&gt;X) format strings.
  + The COLUMNS environment variable will be set to the width of the
    pager when invoking display filters.  This can be used in
    copiousoutput mailcap entries to allow their output to match the
    pager width.
  + The sidebar patch has been merged.  Please watch for airborne
    bovine.  See the documentation for all the options, or simply
    enable it with 'set sidebar_visible'.
  + $mail_check_stats and $mail_check_stats_interval control whether,
    and how often, to scan for unread, flagged, and total message
    counts when checking for new mail in mailboxes.  These statistics
    can be displayed in the sidebar and browser.
  + $trash, when set, specifies the path of the folder where mails
    marked for deletion will be moved, instead of being irremediably
    purged.
  + The &lt;purge-message&gt; function can be used to delete an entry and
    bypass the trash folder.
  + $folder_format has new format strings %m and %n, to display
    total and unread message counts for mailboxes.  Note that
    $mail_check_stats should be enabled to use these.
  ! When browsing IMAP, %N will now display 'N', instead of the unread
    message count.  Please use %n to display unread messages.
- Removed obsolete patches
  * COLS-workaround.dif
  * mutt-1.6.2-gpgme_set_sender.patch
- Modifyed and ported patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Renamed patch
  * mutt-1.6.2.dif becomes mutt-1.8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1493380801">- Move some extend documentation about mutt in a seperate package
- Remove mutt-1.5.21.de.po as mutt now have a de.po as well</changelog>
  <changelog author="werner@suse.de" date="1493467200">- Provide a hint on the package split</changelog>
  <changelog author="werner@suse.de" date="1493467201">- Yet an other package split: now there is a mutt-lang</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- call gzip -n to make build more reproducible</changelog>
  <changelog author="thorsten.behrens@cib.de" date="1493553601">- Make header cache work again, using TokyoCabinet as backend
- Remove now-obsolete configure parameters</changelog>
  <changelog author="thorsten.behrens@cib.de" date="1493553602">- Remove warning</changelog>
  <changelog author="werner@suse.de" date="1493640000">- Switch form TokyoCabinet over to KyotoCabinet</changelog>
  <changelog author="werner@suse.de" date="1494417600">- Add patch mutt-1.8.2-from4crypt.diff
  to fix crash in crypt.c if no From is found or set</changelog>
  <changelog author="werner@suse.de" date="1497355200">- Update to neomutt 20170609 which updates to mutt 1.8.3
  + Warn on bindkey aliasing
  + Drop PATCHES, tidy 'mutt -v' output
  + Add %z format strings to index_format
  + Add debug_level/debug_file options
  + Fix nntp group selection
  + Fix status color
  + Tidy up S/MIME contrib
  + Do not try to create Maildir if it is an NNTP URI
  + Fix missing NONULL for mutt.set() in Lua
  + Fix German PGP shortkeys
  + Remove feature muttrc files
  + Merge README.notmuch into manual
  + Remove unneded scripts
  + Remove README.SECURITY
  + Remove BEWARE and devel-notes.txt
  + Update Makefiles
  + Delete TODO files
  + Remove legacy files
  + Don't generate vim-neomutt syntax file
  + Remove LaTeX/pdf manual generation
  + Add missing docs for expandos
  + Fix sidebar howto examples
  + Remove some upstream references
  + Drop refs to patches
  + Improve PR template and CONTRIBUTING.md
  + Fix list items in newbie-tutorial's Mailing List Guidelines
  + Remove configure options that no longer exist
  + fix newbie tutorial
  + document signing tags / releases
  + config: drop unused paginate command
  + script: split tests up into several
  + convert credits page to markdown
  + simpify 404 page
  + improve newbie tutorial
  + remove help.html and integrate its content elsewhere
  + make: "graphviz" program is needed for generating diagram
  + improve getting started guide // include legacy files
  + dev: add list of architectures/operating systems
  + numerous small fixes
  + Remove typedefs and rename ~130 structs
  + Add separate hcache dir
  + Move crypto files to ncrypt dir
  + Split up mutt.h, protos.h
  + Always build: sidebar, imap, pop, smtp, compressed, nntp
  + Remove --enable-mailtool configure option
  + Make dotlock optional
  + Change gpgme requirement back to 1.1.0
  + Remove check_sec.sh
  + Fix safe_calloc args
  + Remove unused macros
  + Remove unused option: SmimeSignOpaqueCommand
  + Move configure-generated files
  + Update distcheck build flags
  + Drop obsolete iconv check
  + Unused prototypes - unsupported systems
  + Drop many configure tests for things defined in POSIX:2001
  + Kill useless crypthash.h file
  + Run clang-format on the code
  + Fail early if ncursesw cannot be found
  + Add names prototype arguments
  + Abbreviate pointer tests against NULL
  + Initialise pointers to NULL
  + Reduce the scope of for loop variables
  + Coverity: fix defects
  + Convert all exec calls to use mutt_envlist(), remove setenv function
  + Note that mbox-hooks are dependent on $move
  + Refresh header color when updating label
  + Remove glibc-specific execvpe() call in sendlib.c
  + Add color commands for the compose menu headers and security status
  + Fix sidebar count updates when closing mailbox
  + Don't modify LastFolder/CurrentFolder upon aborting a change folder operation
  + Change message modifying operations to additively set redraw flags
  + Improve maildir and mh to report flag changes in mx_check_mailbox()
  + Add $header_color_partial to allow partial coloring of headers
  + Rename REDRAW_SIGWINCH to REDRAW_FLOW
  + Create R_PAGER_FLOW config variable flag
  + Turn IMAP_EXPUNGE_EXPECTED back off when syncing
  + Add $history_remove_dups option to remove dups from history ring
  + Also remove duplicates from the history file
  + Don't filter new entries when compacting history save file
  + Move the IMAP msn field to IMAP_HEADER_DATA
  + Fix imap expunge to match msn and fix index
  + Fix cmd_parse_fetch() to match against MSN
  + Start fixing imap_read_headers() to account for MSN gaps
  + Add msn_index and max_msn to find and check boundaries by MSN
  + Properly adjust fetch ranges when handling new mail
  + Small imap fetch fixes
  + Don't abort header cache evaluation when there is a hole
  + Fix mfc overflow check and uninitialized variable
  + Fix potential segv if mx_open_mailbox is passed an empty string
  + Don't clean up idata when closing an open-append mailbox
  + Don't clean up msn idata when closing an open-append mailbox
  + Fix memory leak when closing mailbox and using the sidebar
  + Change imap body cache cleanup to use the uid_hash
  + Convert classic s/mime to space delimit findKeys output
  + Add self-encrypt options for PGP and S/MIME
  + Change $postpone_encrypt to use self-encrypt variables first
  + Automatic post-release commit for mutt-1.8.3
  + Add note about message scoring and thread patterns
  + unbind mappings before overwriting in vim-keys
  + latest coverity issues (#624)
  + don't pass colour-codes to filters
  + Don't set a colour unless it's been defined.
  + crash if no from is set or founds
  + ifdef command
  + fix translations
  + fix some remaining translation problems
  + explain binding warnings
  + don't document unsupported arches
  + fix make git_ver.h
  + allow xsltproc and w3m calls to fail
  + fix make dist
  + Add a mutt_endwin() before invoking $sendmail
  + Restore setenv function
  + Fix tag-prefix to not abort on $timeout
  + Change km_dokey() to return -2 on a timeout/sigwinch
  + Enable TEXTDOMAINDIR override to make translation testing easier
  + Fix "format string is not a string literal" warnings
- Modifyed and ported patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Delete patch mutt-1.8.2-from4crypt.diff now upstream
- Renamed patch mutt-1.8.2.dif which becomes mutt-1.8.3.dif</changelog>
  <changelog author="olaf@aepfle.de" date="1499860800">- Add buildconditional for openssl/gnutls
  Disable gnutls, there can be only one of them and openssl was used
- Use pkgconfig to refer to openssl/gnutls
- Remove uneeded builddeps and recommends for smtp_daemon by
  specifying the path to sendmail
- Remove uneeded builddep for ispell by specifying the path to it
- Update doc builddeps: add opensp, libxslt-tools, w3m
  drop docbook_4,libxml2,libxslt,lynx,sgml-skel,xli
- Remove unneeded builddeps: fdupes,glibc-i18ndata,libassuan,
  libcom_err,libgcrypt,libgpg-error
- Wrap desktop files handing in suse_version
- Remove included krb5-config, the copy in the devel pkg is good enough
- Use configure macro for ordinary autoconf result
- Build manual.txt with w3m to properly dump tables
- Move Requires perl-Expect to doc pkg, make it a Recommends
- Consistent suse_version for shared-mime-info usage
- Unconditional libgpgme usage
- Unconditional autoreconf</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- If built with gnutls, set ssl_ca_certificates_file to avoid
  warning about "server cert signed using an insecure algorithm"</changelog>
  <changelog author="tchvatal@suse.com" date="1502366400">- Switch to hunspell as default spell-checking software wrt
  fate#323578
- Write SUSE in the skel.muttrc instead of SuSE
- Use the right folder for unpacking instead of symlink
  * fixes quilt setup</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Update to neomutt 20170912 which updates to mutt 1.9.0
  NeoMutt
    Add guix build support
    Only match real mailboxes when looking for new mail
    Fix the printing of ncurses version in -v output
    Bind editor &lt;delete&gt; to delete-char
    Fix overflowing colours
    Fix empty In-Reply-To generation
    Trim trailing slash from completed dirs
    Add guix-neomutt.scm
    Fix setting custom query_type in notmuch query
    Better curses identification
    Use the system's wchar_t support
    Use the system's md5 tool (or equivalent)
    Clean up configure.ac
    Teach gen-map-doc about the new opcode header
    Rename functions (snake_case)
    Rename constants/defines (UPPER_CASE)
    Create library of shared functions
    Much tidying
    Rename globals to match user config
    Drop unnecessary functions/macros
    Use a standard list implementation
    Coverity fixes
    Use explicit NUL for string terminators
    Drop OPS* in favour of opcodes.h
  Upstream
    Fix menu color calls to occur before positioning the cursor
    When guessing an attachment type, don't allow text/plain if there is a null character
    Add $imap_poll_timeout to allow mailbox polling to time out
    Handle error if REGCOMP in pager fails when resizing
    Change recvattach to allow nested encryption
    Fix attachment check_traditional and extract_keys operations
    Add edit-content-type helper and warning for decrypted attachments
    Add option to run command to query attachment mime type
    Add warning about using inline pgp with format=flowed
- Rename patch mutt-1.8.3.dif which becomes now mutt-1.9.0.dif
- Modify the patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif</changelog>
  <changelog author="werner@suse.de" date="1507118400">- Add patch neomutt-c030a8b.patch from upstream commit to fix
  boo#1061343</changelog>
  <changelog author="werner@suse.de" date="1508846400">- Add patch mutt-1.9.0-1.9.1.patch which is a backport of the
  mutt upstream patch diff-1.9.0-1.9.1 to neomutt 20170912
- Rename patch mutt-1.9.0.dif which now becomes mutt-1.9.1.dif</changelog>
  <changelog author="werner@suse.de" date="1530792000">- Skip neomutt now (boo#1094717)
  * There exists a package neomutt
  * mutt-1.10.0 uses a lot of extensions now like compessed folders
    and header caching, but still misses things like notmuch
- Modified patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Renamed patch: mutt-1.9.1.dif becomes mutt-1.10.0.dif
- Deleted patches mutt-1.9.0-1.9.1.patch neomutt-c030a8b.patch
- Add patch truncate.patch to avoid truncated buffers due snprintf</changelog>
  <changelog author="werner@suse.de" date="1531828800">- Update to mutt 1.10.1 (boo#1101428)
  This is an important bug-fix release, fixing a code injection
  and a couple path traversal vulnerabilities.
  This also covers
  * CVE-2018-14363 bnc#1101566
  * CVE-2018-14362 bnc#1101567
  * CVE-2018-14361 bnc#1101568
  * CVE-2018-14360 bnc#1101569
  * CVE-2018-14359 bnc#1101570
  * CVE-2018-14358 bnc#1101571
  * CVE-2018-14357 bnc#1101573
  * CVE-2018-14356 bnc#1101576
  * CVE-2018-14355 bnc#1101577
  * CVE-2018-14354 bnc#1101578
  * CVE-2018-14353 bnc#1101581
  * CVE-2018-14352 bnc#1101582
  * CVE-2018-14351 bnc#1101583
  * CVE-2018-14350 bnc#1101588
  * CVE-2018-14349 bnc#1101589
- Modified patches
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * truncate.patch</changelog>
</package>
<package pkgid="9feb4958bd425eb51d1ce4aff26a73936d6564a7b5bba157da7df5aec60a9adf" name="mutt-doc" arch="noarch">
  <version epoch="0" ver="1.10.1" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1488456000">- Also now recommend urlscan</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Explicite add package documentation directory to file list</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Update to neomutt 20170421 which updates to mutt 1.8.2
  1.8.2 Bug fix release.
  1.8.1 Bug fix release.
  1.8.0
  - $locale has been removed.  Mutt now respects the LC_TIME setting
    instead.  See also $attribution_locale.
  + $attribution_locale can be used to override the date formatting in
    attribution strings.  When unset, Mutt will use the locale
    environment, but note the default value of $date_format has a
    leading '!' which says to use the C-locale.
  ! Message-id and mail-followup-to headers are now preserved for recalled
    messages.
  + &lt;unsidebar_whitelist&gt; added to complement &lt;sidebar_whitelist&gt;.
  ! The pager position is reset to the top when toggling header-weed.
  ! IMAP messages moved to $trash via server-side copy are marked as read.
  + &lt;root-message&gt; jumps to the root message of a thread.
  ! Piped text attachments are charset converted.
  + Added %F to $attach_format, to show the content-disposition filename.
    %d will fall back to %F which will fall back to %f.
  + &lt;rename-attachment&gt; allows an attachment name to be changed, without
    modifying the underlying file's name.
  ! Mutt will look for the user's muttrc additionally in
    $XDG_CONFIG_HOME/mutt/.
  + Compressed mbox and mmdf files are now supported via open-hook,
    close-hook, and append-hook.  See contrib/sample.muttrc-compress
    for suggested settings.  Note this is a compile-time option:
  - -enable-compressed.
  + When $flag_safe is set, flagged messages cannot be deleted.
  + The '@' pattern modifier can be used to limit matches to known aliases.
  + &lt;mark-message&gt; creates a hotkey binding to a specific message.  The hotkey
    prefix is specified via $mark_macro_prefix.
  + &lt;setenv&gt; and &lt;unsetenv&gt; can be used to add/remove environment variables
    passed to children.
  ! Mutt will now use the built-in OpenSSL SSL_set_verify() callback
    to verify certificates.  This allows better support for verifying
    chains, including alternative chain support.
  + $uncollapse_new controls whether a thread will be uncollapsed when a new
    message arrives.
  ! $to_chars and $status_chars now accept multibyte characters.
  + &lt;subjectrx&gt; allows replacing matching subjects with something else.
    This can be used to declutter subject lines in the index.
  + &lt;edit-label&gt; can be used to add, change, or delete a message's X-Label.
  ! Pattern expressions with ~y support label tab completion.
  + The header cache now also supports Kyoto Cabinet and LMDB as
    backend databases.
  1.7.2 (2016-12-04):
  ! Bug fix release.  No features were modified or added.
  ! Fixes for OpenSSL 1.1.  Versions less than 0.9.6 are no longer supported.
  1.7.1 (2016-10-08):
  ! Bug fix release.  No features were modified or added.
  1.7.0 (2016-08-18):
  ! Improved alignment when using multi-column characters with
    soft-fill (%*X) and right-justified (%&gt;X) format strings.
  + The COLUMNS environment variable will be set to the width of the
    pager when invoking display filters.  This can be used in
    copiousoutput mailcap entries to allow their output to match the
    pager width.
  + The sidebar patch has been merged.  Please watch for airborne
    bovine.  See the documentation for all the options, or simply
    enable it with 'set sidebar_visible'.
  + $mail_check_stats and $mail_check_stats_interval control whether,
    and how often, to scan for unread, flagged, and total message
    counts when checking for new mail in mailboxes.  These statistics
    can be displayed in the sidebar and browser.
  + $trash, when set, specifies the path of the folder where mails
    marked for deletion will be moved, instead of being irremediably
    purged.
  + The &lt;purge-message&gt; function can be used to delete an entry and
    bypass the trash folder.
  + $folder_format has new format strings %m and %n, to display
    total and unread message counts for mailboxes.  Note that
    $mail_check_stats should be enabled to use these.
  ! When browsing IMAP, %N will now display 'N', instead of the unread
    message count.  Please use %n to display unread messages.
- Removed obsolete patches
  * COLS-workaround.dif
  * mutt-1.6.2-gpgme_set_sender.patch
- Modifyed and ported patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Renamed patch
  * mutt-1.6.2.dif becomes mutt-1.8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1493380801">- Move some extend documentation about mutt in a seperate package
- Remove mutt-1.5.21.de.po as mutt now have a de.po as well</changelog>
  <changelog author="werner@suse.de" date="1493467200">- Provide a hint on the package split</changelog>
  <changelog author="werner@suse.de" date="1493467201">- Yet an other package split: now there is a mutt-lang</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- call gzip -n to make build more reproducible</changelog>
  <changelog author="thorsten.behrens@cib.de" date="1493553601">- Make header cache work again, using TokyoCabinet as backend
- Remove now-obsolete configure parameters</changelog>
  <changelog author="thorsten.behrens@cib.de" date="1493553602">- Remove warning</changelog>
  <changelog author="werner@suse.de" date="1493640000">- Switch form TokyoCabinet over to KyotoCabinet</changelog>
  <changelog author="werner@suse.de" date="1494417600">- Add patch mutt-1.8.2-from4crypt.diff
  to fix crash in crypt.c if no From is found or set</changelog>
  <changelog author="werner@suse.de" date="1497355200">- Update to neomutt 20170609 which updates to mutt 1.8.3
  + Warn on bindkey aliasing
  + Drop PATCHES, tidy 'mutt -v' output
  + Add %z format strings to index_format
  + Add debug_level/debug_file options
  + Fix nntp group selection
  + Fix status color
  + Tidy up S/MIME contrib
  + Do not try to create Maildir if it is an NNTP URI
  + Fix missing NONULL for mutt.set() in Lua
  + Fix German PGP shortkeys
  + Remove feature muttrc files
  + Merge README.notmuch into manual
  + Remove unneded scripts
  + Remove README.SECURITY
  + Remove BEWARE and devel-notes.txt
  + Update Makefiles
  + Delete TODO files
  + Remove legacy files
  + Don't generate vim-neomutt syntax file
  + Remove LaTeX/pdf manual generation
  + Add missing docs for expandos
  + Fix sidebar howto examples
  + Remove some upstream references
  + Drop refs to patches
  + Improve PR template and CONTRIBUTING.md
  + Fix list items in newbie-tutorial's Mailing List Guidelines
  + Remove configure options that no longer exist
  + fix newbie tutorial
  + document signing tags / releases
  + config: drop unused paginate command
  + script: split tests up into several
  + convert credits page to markdown
  + simpify 404 page
  + improve newbie tutorial
  + remove help.html and integrate its content elsewhere
  + make: "graphviz" program is needed for generating diagram
  + improve getting started guide // include legacy files
  + dev: add list of architectures/operating systems
  + numerous small fixes
  + Remove typedefs and rename ~130 structs
  + Add separate hcache dir
  + Move crypto files to ncrypt dir
  + Split up mutt.h, protos.h
  + Always build: sidebar, imap, pop, smtp, compressed, nntp
  + Remove --enable-mailtool configure option
  + Make dotlock optional
  + Change gpgme requirement back to 1.1.0
  + Remove check_sec.sh
  + Fix safe_calloc args
  + Remove unused macros
  + Remove unused option: SmimeSignOpaqueCommand
  + Move configure-generated files
  + Update distcheck build flags
  + Drop obsolete iconv check
  + Unused prototypes - unsupported systems
  + Drop many configure tests for things defined in POSIX:2001
  + Kill useless crypthash.h file
  + Run clang-format on the code
  + Fail early if ncursesw cannot be found
  + Add names prototype arguments
  + Abbreviate pointer tests against NULL
  + Initialise pointers to NULL
  + Reduce the scope of for loop variables
  + Coverity: fix defects
  + Convert all exec calls to use mutt_envlist(), remove setenv function
  + Note that mbox-hooks are dependent on $move
  + Refresh header color when updating label
  + Remove glibc-specific execvpe() call in sendlib.c
  + Add color commands for the compose menu headers and security status
  + Fix sidebar count updates when closing mailbox
  + Don't modify LastFolder/CurrentFolder upon aborting a change folder operation
  + Change message modifying operations to additively set redraw flags
  + Improve maildir and mh to report flag changes in mx_check_mailbox()
  + Add $header_color_partial to allow partial coloring of headers
  + Rename REDRAW_SIGWINCH to REDRAW_FLOW
  + Create R_PAGER_FLOW config variable flag
  + Turn IMAP_EXPUNGE_EXPECTED back off when syncing
  + Add $history_remove_dups option to remove dups from history ring
  + Also remove duplicates from the history file
  + Don't filter new entries when compacting history save file
  + Move the IMAP msn field to IMAP_HEADER_DATA
  + Fix imap expunge to match msn and fix index
  + Fix cmd_parse_fetch() to match against MSN
  + Start fixing imap_read_headers() to account for MSN gaps
  + Add msn_index and max_msn to find and check boundaries by MSN
  + Properly adjust fetch ranges when handling new mail
  + Small imap fetch fixes
  + Don't abort header cache evaluation when there is a hole
  + Fix mfc overflow check and uninitialized variable
  + Fix potential segv if mx_open_mailbox is passed an empty string
  + Don't clean up idata when closing an open-append mailbox
  + Don't clean up msn idata when closing an open-append mailbox
  + Fix memory leak when closing mailbox and using the sidebar
  + Change imap body cache cleanup to use the uid_hash
  + Convert classic s/mime to space delimit findKeys output
  + Add self-encrypt options for PGP and S/MIME
  + Change $postpone_encrypt to use self-encrypt variables first
  + Automatic post-release commit for mutt-1.8.3
  + Add note about message scoring and thread patterns
  + unbind mappings before overwriting in vim-keys
  + latest coverity issues (#624)
  + don't pass colour-codes to filters
  + Don't set a colour unless it's been defined.
  + crash if no from is set or founds
  + ifdef command
  + fix translations
  + fix some remaining translation problems
  + explain binding warnings
  + don't document unsupported arches
  + fix make git_ver.h
  + allow xsltproc and w3m calls to fail
  + fix make dist
  + Add a mutt_endwin() before invoking $sendmail
  + Restore setenv function
  + Fix tag-prefix to not abort on $timeout
  + Change km_dokey() to return -2 on a timeout/sigwinch
  + Enable TEXTDOMAINDIR override to make translation testing easier
  + Fix "format string is not a string literal" warnings
- Modifyed and ported patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Delete patch mutt-1.8.2-from4crypt.diff now upstream
- Renamed patch mutt-1.8.2.dif which becomes mutt-1.8.3.dif</changelog>
  <changelog author="olaf@aepfle.de" date="1499860800">- Add buildconditional for openssl/gnutls
  Disable gnutls, there can be only one of them and openssl was used
- Use pkgconfig to refer to openssl/gnutls
- Remove uneeded builddeps and recommends for smtp_daemon by
  specifying the path to sendmail
- Remove uneeded builddep for ispell by specifying the path to it
- Update doc builddeps: add opensp, libxslt-tools, w3m
  drop docbook_4,libxml2,libxslt,lynx,sgml-skel,xli
- Remove unneeded builddeps: fdupes,glibc-i18ndata,libassuan,
  libcom_err,libgcrypt,libgpg-error
- Wrap desktop files handing in suse_version
- Remove included krb5-config, the copy in the devel pkg is good enough
- Use configure macro for ordinary autoconf result
- Build manual.txt with w3m to properly dump tables
- Move Requires perl-Expect to doc pkg, make it a Recommends
- Consistent suse_version for shared-mime-info usage
- Unconditional libgpgme usage
- Unconditional autoreconf</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- If built with gnutls, set ssl_ca_certificates_file to avoid
  warning about "server cert signed using an insecure algorithm"</changelog>
  <changelog author="tchvatal@suse.com" date="1502366400">- Switch to hunspell as default spell-checking software wrt
  fate#323578
- Write SUSE in the skel.muttrc instead of SuSE
- Use the right folder for unpacking instead of symlink
  * fixes quilt setup</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Update to neomutt 20170912 which updates to mutt 1.9.0
  NeoMutt
    Add guix build support
    Only match real mailboxes when looking for new mail
    Fix the printing of ncurses version in -v output
    Bind editor &lt;delete&gt; to delete-char
    Fix overflowing colours
    Fix empty In-Reply-To generation
    Trim trailing slash from completed dirs
    Add guix-neomutt.scm
    Fix setting custom query_type in notmuch query
    Better curses identification
    Use the system's wchar_t support
    Use the system's md5 tool (or equivalent)
    Clean up configure.ac
    Teach gen-map-doc about the new opcode header
    Rename functions (snake_case)
    Rename constants/defines (UPPER_CASE)
    Create library of shared functions
    Much tidying
    Rename globals to match user config
    Drop unnecessary functions/macros
    Use a standard list implementation
    Coverity fixes
    Use explicit NUL for string terminators
    Drop OPS* in favour of opcodes.h
  Upstream
    Fix menu color calls to occur before positioning the cursor
    When guessing an attachment type, don't allow text/plain if there is a null character
    Add $imap_poll_timeout to allow mailbox polling to time out
    Handle error if REGCOMP in pager fails when resizing
    Change recvattach to allow nested encryption
    Fix attachment check_traditional and extract_keys operations
    Add edit-content-type helper and warning for decrypted attachments
    Add option to run command to query attachment mime type
    Add warning about using inline pgp with format=flowed
- Rename patch mutt-1.8.3.dif which becomes now mutt-1.9.0.dif
- Modify the patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif</changelog>
  <changelog author="werner@suse.de" date="1507118400">- Add patch neomutt-c030a8b.patch from upstream commit to fix
  boo#1061343</changelog>
  <changelog author="werner@suse.de" date="1508846400">- Add patch mutt-1.9.0-1.9.1.patch which is a backport of the
  mutt upstream patch diff-1.9.0-1.9.1 to neomutt 20170912
- Rename patch mutt-1.9.0.dif which now becomes mutt-1.9.1.dif</changelog>
  <changelog author="werner@suse.de" date="1530792000">- Skip neomutt now (boo#1094717)
  * There exists a package neomutt
  * mutt-1.10.0 uses a lot of extensions now like compessed folders
    and header caching, but still misses things like notmuch
- Modified patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Renamed patch: mutt-1.9.1.dif becomes mutt-1.10.0.dif
- Deleted patches mutt-1.9.0-1.9.1.patch neomutt-c030a8b.patch
- Add patch truncate.patch to avoid truncated buffers due snprintf</changelog>
  <changelog author="werner@suse.de" date="1531828800">- Update to mutt 1.10.1 (boo#1101428)
  This is an important bug-fix release, fixing a code injection
  and a couple path traversal vulnerabilities.
  This also covers
  * CVE-2018-14363 bnc#1101566
  * CVE-2018-14362 bnc#1101567
  * CVE-2018-14361 bnc#1101568
  * CVE-2018-14360 bnc#1101569
  * CVE-2018-14359 bnc#1101570
  * CVE-2018-14358 bnc#1101571
  * CVE-2018-14357 bnc#1101573
  * CVE-2018-14356 bnc#1101576
  * CVE-2018-14355 bnc#1101577
  * CVE-2018-14354 bnc#1101578
  * CVE-2018-14353 bnc#1101581
  * CVE-2018-14352 bnc#1101582
  * CVE-2018-14351 bnc#1101583
  * CVE-2018-14350 bnc#1101588
  * CVE-2018-14349 bnc#1101589
- Modified patches
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * truncate.patch</changelog>
</package>
<package pkgid="5f84d74a6e8181987e30881b7e2ba1a2a88dca4dcf5ebd99514d47c835f55851" name="mutt-lang" arch="noarch">
  <version epoch="0" ver="1.10.1" rel="lp150.2.3.1"/>
  <changelog author="werner@suse.de" date="1488456000">- Also now recommend urlscan</changelog>
  <changelog author="werner@suse.de" date="1488801600">- Explicite add package documentation directory to file list</changelog>
  <changelog author="werner@suse.de" date="1493380800">- Update to neomutt 20170421 which updates to mutt 1.8.2
  1.8.2 Bug fix release.
  1.8.1 Bug fix release.
  1.8.0
  - $locale has been removed.  Mutt now respects the LC_TIME setting
    instead.  See also $attribution_locale.
  + $attribution_locale can be used to override the date formatting in
    attribution strings.  When unset, Mutt will use the locale
    environment, but note the default value of $date_format has a
    leading '!' which says to use the C-locale.
  ! Message-id and mail-followup-to headers are now preserved for recalled
    messages.
  + &lt;unsidebar_whitelist&gt; added to complement &lt;sidebar_whitelist&gt;.
  ! The pager position is reset to the top when toggling header-weed.
  ! IMAP messages moved to $trash via server-side copy are marked as read.
  + &lt;root-message&gt; jumps to the root message of a thread.
  ! Piped text attachments are charset converted.
  + Added %F to $attach_format, to show the content-disposition filename.
    %d will fall back to %F which will fall back to %f.
  + &lt;rename-attachment&gt; allows an attachment name to be changed, without
    modifying the underlying file's name.
  ! Mutt will look for the user's muttrc additionally in
    $XDG_CONFIG_HOME/mutt/.
  + Compressed mbox and mmdf files are now supported via open-hook,
    close-hook, and append-hook.  See contrib/sample.muttrc-compress
    for suggested settings.  Note this is a compile-time option:
  - -enable-compressed.
  + When $flag_safe is set, flagged messages cannot be deleted.
  + The '@' pattern modifier can be used to limit matches to known aliases.
  + &lt;mark-message&gt; creates a hotkey binding to a specific message.  The hotkey
    prefix is specified via $mark_macro_prefix.
  + &lt;setenv&gt; and &lt;unsetenv&gt; can be used to add/remove environment variables
    passed to children.
  ! Mutt will now use the built-in OpenSSL SSL_set_verify() callback
    to verify certificates.  This allows better support for verifying
    chains, including alternative chain support.
  + $uncollapse_new controls whether a thread will be uncollapsed when a new
    message arrives.
  ! $to_chars and $status_chars now accept multibyte characters.
  + &lt;subjectrx&gt; allows replacing matching subjects with something else.
    This can be used to declutter subject lines in the index.
  + &lt;edit-label&gt; can be used to add, change, or delete a message's X-Label.
  ! Pattern expressions with ~y support label tab completion.
  + The header cache now also supports Kyoto Cabinet and LMDB as
    backend databases.
  1.7.2 (2016-12-04):
  ! Bug fix release.  No features were modified or added.
  ! Fixes for OpenSSL 1.1.  Versions less than 0.9.6 are no longer supported.
  1.7.1 (2016-10-08):
  ! Bug fix release.  No features were modified or added.
  1.7.0 (2016-08-18):
  ! Improved alignment when using multi-column characters with
    soft-fill (%*X) and right-justified (%&gt;X) format strings.
  + The COLUMNS environment variable will be set to the width of the
    pager when invoking display filters.  This can be used in
    copiousoutput mailcap entries to allow their output to match the
    pager width.
  + The sidebar patch has been merged.  Please watch for airborne
    bovine.  See the documentation for all the options, or simply
    enable it with 'set sidebar_visible'.
  + $mail_check_stats and $mail_check_stats_interval control whether,
    and how often, to scan for unread, flagged, and total message
    counts when checking for new mail in mailboxes.  These statistics
    can be displayed in the sidebar and browser.
  + $trash, when set, specifies the path of the folder where mails
    marked for deletion will be moved, instead of being irremediably
    purged.
  + The &lt;purge-message&gt; function can be used to delete an entry and
    bypass the trash folder.
  + $folder_format has new format strings %m and %n, to display
    total and unread message counts for mailboxes.  Note that
    $mail_check_stats should be enabled to use these.
  ! When browsing IMAP, %N will now display 'N', instead of the unread
    message count.  Please use %n to display unread messages.
- Removed obsolete patches
  * COLS-workaround.dif
  * mutt-1.6.2-gpgme_set_sender.patch
- Modifyed and ported patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Renamed patch
  * mutt-1.6.2.dif becomes mutt-1.8.2.dif</changelog>
  <changelog author="werner@suse.de" date="1493380801">- Move some extend documentation about mutt in a seperate package
- Remove mutt-1.5.21.de.po as mutt now have a de.po as well</changelog>
  <changelog author="werner@suse.de" date="1493467200">- Provide a hint on the package split</changelog>
  <changelog author="werner@suse.de" date="1493467201">- Yet an other package split: now there is a mutt-lang</changelog>
  <changelog author="bwiedemann@suse.com" date="1493553600">- call gzip -n to make build more reproducible</changelog>
  <changelog author="thorsten.behrens@cib.de" date="1493553601">- Make header cache work again, using TokyoCabinet as backend
- Remove now-obsolete configure parameters</changelog>
  <changelog author="thorsten.behrens@cib.de" date="1493553602">- Remove warning</changelog>
  <changelog author="werner@suse.de" date="1493640000">- Switch form TokyoCabinet over to KyotoCabinet</changelog>
  <changelog author="werner@suse.de" date="1494417600">- Add patch mutt-1.8.2-from4crypt.diff
  to fix crash in crypt.c if no From is found or set</changelog>
  <changelog author="werner@suse.de" date="1497355200">- Update to neomutt 20170609 which updates to mutt 1.8.3
  + Warn on bindkey aliasing
  + Drop PATCHES, tidy 'mutt -v' output
  + Add %z format strings to index_format
  + Add debug_level/debug_file options
  + Fix nntp group selection
  + Fix status color
  + Tidy up S/MIME contrib
  + Do not try to create Maildir if it is an NNTP URI
  + Fix missing NONULL for mutt.set() in Lua
  + Fix German PGP shortkeys
  + Remove feature muttrc files
  + Merge README.notmuch into manual
  + Remove unneded scripts
  + Remove README.SECURITY
  + Remove BEWARE and devel-notes.txt
  + Update Makefiles
  + Delete TODO files
  + Remove legacy files
  + Don't generate vim-neomutt syntax file
  + Remove LaTeX/pdf manual generation
  + Add missing docs for expandos
  + Fix sidebar howto examples
  + Remove some upstream references
  + Drop refs to patches
  + Improve PR template and CONTRIBUTING.md
  + Fix list items in newbie-tutorial's Mailing List Guidelines
  + Remove configure options that no longer exist
  + fix newbie tutorial
  + document signing tags / releases
  + config: drop unused paginate command
  + script: split tests up into several
  + convert credits page to markdown
  + simpify 404 page
  + improve newbie tutorial
  + remove help.html and integrate its content elsewhere
  + make: "graphviz" program is needed for generating diagram
  + improve getting started guide // include legacy files
  + dev: add list of architectures/operating systems
  + numerous small fixes
  + Remove typedefs and rename ~130 structs
  + Add separate hcache dir
  + Move crypto files to ncrypt dir
  + Split up mutt.h, protos.h
  + Always build: sidebar, imap, pop, smtp, compressed, nntp
  + Remove --enable-mailtool configure option
  + Make dotlock optional
  + Change gpgme requirement back to 1.1.0
  + Remove check_sec.sh
  + Fix safe_calloc args
  + Remove unused macros
  + Remove unused option: SmimeSignOpaqueCommand
  + Move configure-generated files
  + Update distcheck build flags
  + Drop obsolete iconv check
  + Unused prototypes - unsupported systems
  + Drop many configure tests for things defined in POSIX:2001
  + Kill useless crypthash.h file
  + Run clang-format on the code
  + Fail early if ncursesw cannot be found
  + Add names prototype arguments
  + Abbreviate pointer tests against NULL
  + Initialise pointers to NULL
  + Reduce the scope of for loop variables
  + Coverity: fix defects
  + Convert all exec calls to use mutt_envlist(), remove setenv function
  + Note that mbox-hooks are dependent on $move
  + Refresh header color when updating label
  + Remove glibc-specific execvpe() call in sendlib.c
  + Add color commands for the compose menu headers and security status
  + Fix sidebar count updates when closing mailbox
  + Don't modify LastFolder/CurrentFolder upon aborting a change folder operation
  + Change message modifying operations to additively set redraw flags
  + Improve maildir and mh to report flag changes in mx_check_mailbox()
  + Add $header_color_partial to allow partial coloring of headers
  + Rename REDRAW_SIGWINCH to REDRAW_FLOW
  + Create R_PAGER_FLOW config variable flag
  + Turn IMAP_EXPUNGE_EXPECTED back off when syncing
  + Add $history_remove_dups option to remove dups from history ring
  + Also remove duplicates from the history file
  + Don't filter new entries when compacting history save file
  + Move the IMAP msn field to IMAP_HEADER_DATA
  + Fix imap expunge to match msn and fix index
  + Fix cmd_parse_fetch() to match against MSN
  + Start fixing imap_read_headers() to account for MSN gaps
  + Add msn_index and max_msn to find and check boundaries by MSN
  + Properly adjust fetch ranges when handling new mail
  + Small imap fetch fixes
  + Don't abort header cache evaluation when there is a hole
  + Fix mfc overflow check and uninitialized variable
  + Fix potential segv if mx_open_mailbox is passed an empty string
  + Don't clean up idata when closing an open-append mailbox
  + Don't clean up msn idata when closing an open-append mailbox
  + Fix memory leak when closing mailbox and using the sidebar
  + Change imap body cache cleanup to use the uid_hash
  + Convert classic s/mime to space delimit findKeys output
  + Add self-encrypt options for PGP and S/MIME
  + Change $postpone_encrypt to use self-encrypt variables first
  + Automatic post-release commit for mutt-1.8.3
  + Add note about message scoring and thread patterns
  + unbind mappings before overwriting in vim-keys
  + latest coverity issues (#624)
  + don't pass colour-codes to filters
  + Don't set a colour unless it's been defined.
  + crash if no from is set or founds
  + ifdef command
  + fix translations
  + fix some remaining translation problems
  + explain binding warnings
  + don't document unsupported arches
  + fix make git_ver.h
  + allow xsltproc and w3m calls to fail
  + fix make dist
  + Add a mutt_endwin() before invoking $sendmail
  + Restore setenv function
  + Fix tag-prefix to not abort on $timeout
  + Change km_dokey() to return -2 on a timeout/sigwinch
  + Enable TEXTDOMAINDIR override to make translation testing easier
  + Fix "format string is not a string literal" warnings
- Modifyed and ported patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Delete patch mutt-1.8.2-from4crypt.diff now upstream
- Renamed patch mutt-1.8.2.dif which becomes mutt-1.8.3.dif</changelog>
  <changelog author="olaf@aepfle.de" date="1499860800">- Add buildconditional for openssl/gnutls
  Disable gnutls, there can be only one of them and openssl was used
- Use pkgconfig to refer to openssl/gnutls
- Remove uneeded builddeps and recommends for smtp_daemon by
  specifying the path to sendmail
- Remove uneeded builddep for ispell by specifying the path to it
- Update doc builddeps: add opensp, libxslt-tools, w3m
  drop docbook_4,libxml2,libxslt,lynx,sgml-skel,xli
- Remove unneeded builddeps: fdupes,glibc-i18ndata,libassuan,
  libcom_err,libgcrypt,libgpg-error
- Wrap desktop files handing in suse_version
- Remove included krb5-config, the copy in the devel pkg is good enough
- Use configure macro for ordinary autoconf result
- Build manual.txt with w3m to properly dump tables
- Move Requires perl-Expect to doc pkg, make it a Recommends
- Consistent suse_version for shared-mime-info usage
- Unconditional libgpgme usage
- Unconditional autoreconf</changelog>
  <changelog author="olaf@aepfle.de" date="1499947200">- If built with gnutls, set ssl_ca_certificates_file to avoid
  warning about "server cert signed using an insecure algorithm"</changelog>
  <changelog author="tchvatal@suse.com" date="1502366400">- Switch to hunspell as default spell-checking software wrt
  fate#323578
- Write SUSE in the skel.muttrc instead of SuSE
- Use the right folder for unpacking instead of symlink
  * fixes quilt setup</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Update to neomutt 20170912 which updates to mutt 1.9.0
  NeoMutt
    Add guix build support
    Only match real mailboxes when looking for new mail
    Fix the printing of ncurses version in -v output
    Bind editor &lt;delete&gt; to delete-char
    Fix overflowing colours
    Fix empty In-Reply-To generation
    Trim trailing slash from completed dirs
    Add guix-neomutt.scm
    Fix setting custom query_type in notmuch query
    Better curses identification
    Use the system's wchar_t support
    Use the system's md5 tool (or equivalent)
    Clean up configure.ac
    Teach gen-map-doc about the new opcode header
    Rename functions (snake_case)
    Rename constants/defines (UPPER_CASE)
    Create library of shared functions
    Much tidying
    Rename globals to match user config
    Drop unnecessary functions/macros
    Use a standard list implementation
    Coverity fixes
    Use explicit NUL for string terminators
    Drop OPS* in favour of opcodes.h
  Upstream
    Fix menu color calls to occur before positioning the cursor
    When guessing an attachment type, don't allow text/plain if there is a null character
    Add $imap_poll_timeout to allow mailbox polling to time out
    Handle error if REGCOMP in pager fails when resizing
    Change recvattach to allow nested encryption
    Fix attachment check_traditional and extract_keys operations
    Add edit-content-type helper and warning for decrypted attachments
    Add option to run command to query attachment mime type
    Add warning about using inline pgp with format=flowed
- Rename patch mutt-1.8.3.dif which becomes now mutt-1.9.0.dif
- Modify the patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif</changelog>
  <changelog author="werner@suse.de" date="1507118400">- Add patch neomutt-c030a8b.patch from upstream commit to fix
  boo#1061343</changelog>
  <changelog author="werner@suse.de" date="1508846400">- Add patch mutt-1.9.0-1.9.1.patch which is a backport of the
  mutt upstream patch diff-1.9.0-1.9.1 to neomutt 20170912
- Rename patch mutt-1.9.0.dif which now becomes mutt-1.9.1.dif</changelog>
  <changelog author="werner@suse.de" date="1530792000">- Skip neomutt now (boo#1094717)
  * There exists a package neomutt
  * mutt-1.10.0 uses a lot of extensions now like compessed folders
    and header caching, but still misses things like notmuch
- Modified patches
  * aw.listreply.diff
  * bsc907453-CVE-2014-9116-jessie.patch
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.21-mailcap.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.5.9i-pgpewrap.diff
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * widechar.sidebar.dif
- Renamed patch: mutt-1.9.1.dif becomes mutt-1.10.0.dif
- Deleted patches mutt-1.9.0-1.9.1.patch neomutt-c030a8b.patch
- Add patch truncate.patch to avoid truncated buffers due snprintf</changelog>
  <changelog author="werner@suse.de" date="1531828800">- Update to mutt 1.10.1 (boo#1101428)
  This is an important bug-fix release, fixing a code injection
  and a couple path traversal vulnerabilities.
  This also covers
  * CVE-2018-14363 bnc#1101566
  * CVE-2018-14362 bnc#1101567
  * CVE-2018-14361 bnc#1101568
  * CVE-2018-14360 bnc#1101569
  * CVE-2018-14359 bnc#1101570
  * CVE-2018-14358 bnc#1101571
  * CVE-2018-14357 bnc#1101573
  * CVE-2018-14356 bnc#1101576
  * CVE-2018-14355 bnc#1101577
  * CVE-2018-14354 bnc#1101578
  * CVE-2018-14353 bnc#1101581
  * CVE-2018-14352 bnc#1101582
  * CVE-2018-14351 bnc#1101583
  * CVE-2018-14350 bnc#1101588
  * CVE-2018-14349 bnc#1101589
- Modified patches
  * bug-676388-largefile.patch
  * mutt-1.5.15-wrapcolumn.diff
  * mutt-1.5.20-sendgroupreplyto.diff
  * mutt-1.5.23-carriage-return.path
  * mutt-1.6.1-opennfs.dif
  * patch-1.5.24.vk.pgp_verbose_mime
  * truncate.patch</changelog>
</package>
<package pkgid="317243beeac27def2ff0a87c677b2fd18c2d98754119429dbf9d2dd74c1ee70d" name="myspell-af_NA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="39dbc5364f4ff10c7d28b4b28ac61924168ce03c271b9e73f40905e16de8e29c" name="myspell-af_ZA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="a4fb3ce471a54383bdda2eff011cc02b21b5d2ec83c89451704cef4694d653d7" name="myspell-an" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="cac3082927b0e4c114555c428eaa75f9ef4825618569ad04ed3f8760011c9d89" name="myspell-an_ES" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="413ef09e6c45b7a83935a7d3e3a8873699377df91a1e03df22a6bfd8d964b5ce" name="myspell-ar" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="3a60e6d2ba52448651e38b86836703824382e522c372128f6e8996268c76e6dd" name="myspell-ar_AE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="e24cad16ad0bd3d96b5b66945e94fcc9fe3448291a58b7eb4f1f992ffaeec35a" name="myspell-ar_BH" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="7e4070d261dc79e8b9d3697169b51256d4f5306fbf77c95c6990dc89372cb112" name="myspell-ar_DZ" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="352a86ce74a0bc3debcf80eaf45e06e741bc4f813757852eebcb3b9a1f3aa234" name="myspell-ar_EG" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="70aa283b2430d4e887a4cf1df53daf1d77906ba3591d2306bee7d13fb653d190" name="myspell-ar_IQ" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="f0e96249e1b67b1450af59797ee55448ac84e77edf61c91e531a2787ad496b64" name="myspell-ar_JO" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="84bd2d6c4df73cbd61c30d3a4242277e05063181985a397050180935ace623ec" name="myspell-ar_KW" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="34503d22cc083bdf5a176ca5811817c79b440b38fa330abf7d1900d20cd7bc43" name="myspell-ar_LB" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="cb7323985d4933c548ee09641c6a3be1397c1b633a4574c803b685e9a1817678" name="myspell-ar_LY" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="5ca9b99580bce7fbedbb5ec4a5cd2091dff932273ca00548b249c5b1edac5b7a" name="myspell-ar_MA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="27602a3855fac034d6a9902abc92a27e1d953f6b96b2cbeff888fcbd5ff4545a" name="myspell-ar_OM" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="7b4dc98bdfd443759c4587f570f041f85d87b8d187de6e9596bf92a7961e5cc3" name="myspell-ar_QA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="f18670432e906592989c2892e6c128880a8167e3a087352b6c7cc730762e992b" name="myspell-ar_SA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="654081c56e5648f59d51d4fe658415b8d7da725c54089aa3f1c248aa21d06ecd" name="myspell-ar_SD" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="131807f49e159582b3262816c142ff060d12e0a9c5b2bab9bdf37ee1ac55a212" name="myspell-ar_SY" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="38008d583966eb09e0eacd582b63aed48e1e8bb984c4fc062ec85199e9c2dadf" name="myspell-ar_TN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="59a5b89d99270c5433b726e8281aad42e44676a125798c034b5704229bca7789" name="myspell-ar_YE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="81b3530f329a9749f591499c6317c06f1372e5f9eb07460293b6de6db11824d4" name="myspell-be_BY" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="d14be9367493613c01d043ea555b7f6c0f87a058537226ff41ce828c68985976" name="myspell-bg_BG" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="615da0d3aa416d4379fd387609897df1b3f1d8b3ede589dfb727dc405c0caf2d" name="myspell-bn_BD" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="41a428ca6d6718d4a32b0810be5773f1887b0253ac1ea10262603ebef5c1b6a3" name="myspell-bn_IN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="5ddb850cf5110b00cd66033f88157bace5bad31c2c7f9034b1c0a1097b0211f8" name="myspell-bo" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="1eb3bc463a51d5aaf43c24c46d7b68a9101ca3496ca95f4fb005a6d3a578e5b7" name="myspell-bo_CN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="2398f7b38a38378eda288c7179ade270414b17407270a9ac5b918382743592c6" name="myspell-bo_IN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="9bb8e86f3aa099cc6bab0b586d6a1f57b852fe69fe729ea71cdf74003d5c86b5" name="myspell-br_FR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="207be924bfcb18e468892b7038cd94e73d332a680af245f00642883af0989728" name="myspell-bs" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="aaa6824669f3a7941a1e0f043f2cae3343af96898d00e2fe89d6033a641a6bfe" name="myspell-bs_BA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="b9045c375548cc06d799ea90d7d19f1ce9cfb356d75bb9121a792afa28b48334" name="myspell-ca" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="56ba02145bde6453919acbfe218350d1a19347e4ca9e9a286775cb063c53bbc3" name="myspell-ca_AD" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="e31c3f133b3fff56232264a05cdb99f956615a7cab82b1c10a2dc22625cda5e1" name="myspell-ca_ES" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="736b611e701b4e813df88916e6c4926f69db4c09aa71dd3efb6790b245e4f2b9" name="myspell-ca_ES_valencia" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="fd6fa62529a9aa2afacfe1e9c15955ab84130080490de4f6745528774e57ec5d" name="myspell-ca_FR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="a79276742fca7dbdae450a350bc60799f7a6998af5d7b4306268a86a7e4a20ad" name="myspell-ca_IT" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="523a973b248875ba50862dcf91e866477d8d6b73e3489a77c89bee2f4bf7882d" name="myspell-cs_CZ" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="6389335312b3045043962baa8926a98817bbb60d4a87c6612df6c57d671cb29f" name="myspell-da_DK" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="1525ca297deea8e05fc895157f7ec7c22d36a47ec8e4d52a32c5e339fdffb81b" name="myspell-de" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="14a7bfcb603c0e5e741850c978765c4da33142b4f935789bb847171dc36eeecc" name="myspell-de_AT" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="637d5a1900cbdb69913c4a4728525a084726b51cde9e87a849b766334bf75159" name="myspell-de_CH" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="0e452e22bcc99e5aac764ff6c4d2cef1e5d04ebcb420c49ac012ac5045911af8" name="myspell-de_DE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="90540d1df0910e6bc4b82bbca99df61e97c8764f577da6d6dffdda5b6bca43c5" name="myspell-dictionaries" arch="src">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="c41f04c2520227aaba9bfb703eb711ea0b0e0ac3d55547c8d1762baf4fb38703" name="myspell-dictionaries" arch="x86_64">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="dfb79b6ade104e720068153685878cad8a0d0156593014925b0ae93f04bcb5c0" name="myspell-el_GR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="f39eff1375d52049e7a4797f556c54dc683e8f71577aae0398e3f03c592ba74e" name="myspell-en" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="dae225ad18cc8cf417cd36e195887246eabc37fff4c4d393d36fe0f2a96b9a10" name="myspell-en_AU" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="ce979a3f58bc4017aac567a3fe40840f83d55ccb1b0919d3960c226290b058c0" name="myspell-en_BS" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="fe34c4c2a13f3691eba254277de09709c2c1fe861967b7df91820c2982704a50" name="myspell-en_BZ" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="93b0c6af0d29fa3a314dd6df5bd60c02a71de8ab201d14b0a11a7fbb776382aa" name="myspell-en_CA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="71578c1a501097ace44ee50f8e4320ab609d950675251a3534851eff2350f4f9" name="myspell-en_GB" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="426378488b54e588d990a065fde184fbef26a3341f5c5d0bbd4524849dcf6ca8" name="myspell-en_GH" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="952017e66e12e68603537f722ebea74d1c844af06a62fa842c0f47e2b39661db" name="myspell-en_IE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="e58abaef9a18b6aee8af6e40c967fbad94ed86cf07062e5b367c3da9cb4c77d1" name="myspell-en_IN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="7db2361fd9a387c86f619b3a6f5071637767f2fd0c6fa3c12f8055da26c0409c" name="myspell-en_JM" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="471aafb3388b14acb4624e3a0e47c86e464a80a57d1bfe3082744094a2cb6da7" name="myspell-en_MW" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="42616bb990cf641f1feaf2d82bb394edc5b9e79d8d7ab2f2962a07a9ce9917c0" name="myspell-en_NA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="c901797fdc627605bc9d8a28eba89e571cb9278d4428be2a3153ac041658778f" name="myspell-en_NZ" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="743dc750460af2192df01cd5aa041789e6c80b5ef1b5e32f7eadc7b285d28796" name="myspell-en_PH" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="e985bb565043c5df5b7016fdce0478076ed37928c2fbe291d62f59dce7134948" name="myspell-en_TT" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="5c19a9d6cfc06d7c875aa8a58e402fc6c5d3957793a5f87c283019b8207f5d48" name="myspell-en_US" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="d0df7ad1ca25e2601f6124fdb93190e02c9bfa537564756fb77aaf4fdd9cd55e" name="myspell-en_ZA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="159b77c5d9c084ed0e971844a71a620cb22414e7f0c75deafd9640b98da3308d" name="myspell-en_ZW" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="a05342311852441f2d043e189dd79cc7dd074cf8b502abf5b7e7764a78bdccf2" name="myspell-es" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="d2d37259d8c428ed5b500fb9c785c3a2c9e2a9f178bf74db9a0cf3f7b6f731d6" name="myspell-es_AR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="4f23b04925f0cff65477864693f61601907d4e6b3e8c8c7b68c33d34123f3429" name="myspell-es_BO" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="7754914088e996845714934d655332ba839d1497f0d87431ff1e216879337c2e" name="myspell-es_CL" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="ec959813966fcf6c356779f0ee1a0306d30126be596e748462593b752778d6cb" name="myspell-es_CO" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="4ba54a6f2ca43630275137c730947a313b5acb6b7118e32fa5ea933b8760697d" name="myspell-es_CR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="9deaf514d0b7b7cab20f5c3d870a362f11d6f59baaf6ae84bdec2c9367b9347f" name="myspell-es_CU" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="c602b8a30bf487ed881cdfd9f9c2ca3e071fecdc6a72e24d2d218859d7283c25" name="myspell-es_DO" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="fdc1232aa99fb0892e9eeb7fa4262eebb97fcf3e14b258e913d229e4bd86d8c7" name="myspell-es_EC" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="5ba17aff13ea9f68890f8437a4c89ea143f5d3198aae93b8e3e63de89843c3e2" name="myspell-es_ES" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="f8d3bf211077ff92821d60801fa1cddb435118e9ca5df7c25b5968de9d5cf9c6" name="myspell-es_GT" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="edbd93b74024903dc7e2616349dbc124f6cd9d427ec3d7bc2574aca680c0e6eb" name="myspell-es_HN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="38293ca8e30cc7099d8494ab4dd5e50d0925549e53b5453552809941577c830d" name="myspell-es_MX" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="933970d30c1d5c88586673551dd09bf1e6d16d033acffa11f09ecd9bdf4a4cf6" name="myspell-es_NI" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="cffad3d5cd4698d453e0b3af136727ca8ae46115476118edcc4bf90e1a084539" name="myspell-es_PA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="2be3f9d1ea124a3a73d0e463407597eebde4e4044d01f6dbe03233d2c0a3a1b9" name="myspell-es_PE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="6ce15b281012589beea2f58f8da4c08ef45900efa5654892b48aaa264a68ae81" name="myspell-es_PR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="bf975e24069eabbd2d204fc262caf5028a400441812368ff591658fc0a0712d5" name="myspell-es_PY" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="ab29ed5cbde0c3bae20ef1652386f5894b88316046cd244230023b8badb2915e" name="myspell-es_SV" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="0957fa6d6ae9618a2d6121833281de781648c293043b936f5cee9bb84f57c458" name="myspell-es_UY" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="8f9f33403fb34b1b9972daa615971b4427cf7bb0f1e0576a84d69ded26d341e8" name="myspell-es_VE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="756f2d30431bb62fd015f39210800152290a06f511a9defba86e21898d60bf2d" name="myspell-et_EE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="d9709af4440c3433bbe17da71b9b95e004bd7cfefea9dd0f84b515b02708301b" name="myspell-fr_BE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="f0edb8cafad13d17ae34e3d387c1b281d64d0f86328f5d0f8beed9e294a77949" name="myspell-fr_CA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="89c52f6783578f6dfdb8f150ca8d14a5c45e55e900f94c013603e0654926f7bd" name="myspell-fr_CH" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="7bc481c22b23c5617329fa811610a4e002d3515472f25a6c734789d09e63c7eb" name="myspell-fr_FR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="07e58a6bb467f42f736151764a1970cd5541340f694a71c080aabed91fb7eb9a" name="myspell-fr_LU" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="d008fc603eade0497ca607505e5e148fc5c133bb4f8f9f868720c4ccb6e78a36" name="myspell-fr_MC" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="465df3d6a3b782761223ff0b942a7403ccccb40028e38e84ee753aba103f0112" name="myspell-gd_GB" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="929ff84026aec1de41498a48f780f4b28aa38e92ddb722e640961629c7793fb2" name="myspell-gl" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="7c024a3b8ed5d3e029ab2af736342937ea2ba665a023fdfb3351dc8491eab431" name="myspell-gl_ES" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="9b417b8c835f915270f2539875678250cf31b290d1b1a4e325a3fe4582800e02" name="myspell-gu_IN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="89cb890befaebed26a84fbd3f80216b17f963b8d0db1c4aa92b38027f682e4dd" name="myspell-gug" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="b92d416183b13e595f52af0443784b8f4c6f5b3c04d106db23c83b44c4e376e6" name="myspell-gug_PY" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="64e4d395dce765e7851608d561d7b247043e7c364a35634e01dfbbda5287aacc" name="myspell-he_IL" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="81aed65de5d218fea5e2fc9cb1080f494a763a4a1c23f25b1dcf6a29ede5f7e8" name="myspell-hi_IN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="36fd6a8831a63c959640acc1b3b240af488494896691e893b8c9c855a125d5b8" name="myspell-hr_HR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="a1c80916752b21d965370405f8a2631d7c3e0ab676dd01b97b4cac70235074df" name="myspell-hu_HU" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="0b2beff14710801ec9c4780bbb4d5897eaef91db9535ff733428171cf5590af7" name="myspell-id" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="73d90225fae5808a5ca7100389ad658dfc7916fa68c6a967b86fdacd1734908a" name="myspell-id_ID" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="9c7829317b6fc4622e03a70081baa9a4e5d1c1002d07fd98204d9be91638b2ac" name="myspell-is" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="b29470f58b8806f7975ca1394ae23ea8998573d26f8f50af2df43b8a089488d2" name="myspell-is_IS" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="234643e48f1690112a13d045293bbb5d1ae833c8a6cd713692d882c0406126b6" name="myspell-it_IT" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="42184701ca67168ba62bbaaebeab5a2e287e525416f71f9dd77ee75deb274f64" name="myspell-kmr_Latn" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="d40fb0c16017a27cc54cc5e16292b66a96dbdb7e65c1062675ad0289d675d207" name="myspell-kmr_Latn_SY" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="6015c50810a2df9a7ff31d761111aee309c5495c6c7ea6f58552e93ceab2429b" name="myspell-kmr_Latn_TR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="d1fef46dedbb4360d48a06a655463ef7515d4231999c6d64969eb51c7434b670" name="myspell-lightproof-en" arch="x86_64">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="74e032d98b02ad342eb190a9d700eaff3091e8607bb194428079159bfcfb8b06" name="myspell-lightproof-hu_HU" arch="x86_64">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="e68c176cb100a9801f76121dfc9cfdf114bf86c3d4447d2bc7e972fabeac0d63" name="myspell-lightproof-pt_BR" arch="x86_64">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="877834850aa425a5673cb075ef2efe20594434539d7bc7f80cee4a87bc841c2e" name="myspell-lightproof-ru_RU" arch="x86_64">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="2c7184f6c5c7187f515757c9920b64d21b35b1dd4798a9c5f6f5dc2319415352" name="myspell-lo_LA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="877ca9553addd7802f8389ca5807e5f3b437a4119463b198fc86aad1ef107e06" name="myspell-lt_LT" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="e55e1e2764d791c7c8c2e9a065d6f0e53116de1dc683dede7f5b8c7edb218787" name="myspell-lv_LV" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="eeae88a499345ded5b35ab67e87227c6f6976778db2961efc2b75fbe81ef1521" name="myspell-nb_NO" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="f9185fd44a2d9583c30eb4dd1f9008c3a802d5cd41d0b788bb6b8c430af5ee47" name="myspell-ne_NP" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="ba0a451735e90631169f00ea541fa746d23f3ed3f4c90c759f38322b8810a99d" name="myspell-nl_BE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="e115140b2b4523611354de9e021a70937b2178aff90a80b65fc63df7a02dd254" name="myspell-nl_NL" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="3e8bde8075ed6ab4a62016ad2d3feb7db52bea6ed5765d5c6ee34aec7ea1acce" name="myspell-nn_NO" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="f37451dadeb9b26d3f820618ba8d438836189f90ce525f53111937f41aba410b" name="myspell-no" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="8a42f5c9af62cedbf2004da3a171db4025acb3daf53ed41e8574a29c8c200cc3" name="myspell-oc_FR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="cd4e91f8639b52e8847ec7c47203bb040051c3e1e8d11fa903f1cd71d9e8844d" name="myspell-pl_PL" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="7f86f59ad66cc7dda61ef427138d347c32d0fbeb5b7e1813b9e18d746e622796" name="myspell-pt_AO" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="aa632c301555b910372d84e7ca569d23a5b05587a52289ba0a5e24ef477d613f" name="myspell-pt_BR" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="c6b565c6d537317b196b7044d5160b957f68bcdfa86072e510564b4c554342ce" name="myspell-pt_PT" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="61eded7eea6c713b255478a78a98cb9a1a96e6dc0ae9095303cc4ec88ca42f5b" name="myspell-ro" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="03a7fbb96b1590297f585f00af1dde3e0bcbaf9401f26589cff7164516ff930d" name="myspell-ro_RO" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="ba9bee6e2c88617da3426a1ba8b941c36eff4cf32f7d8fd5db958b3e109afa05" name="myspell-ru_RU" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="b3ff2d0ffd3698340559c1b08a84890cbb63cba9dc0779b8cd563acd3f342f55" name="myspell-si_LK" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="30f93e854b95f38248fe00d47d897b06453566e06b75531bac30a81496988159" name="myspell-sk_SK" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="6c6f702ad78089bed9cedeb60eb8501ba34c79cb6feaca31d6bca8302b1e67d3" name="myspell-sl_SI" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="adfbb1f01ad43f4dc87f7736644ddbb2064d6156f6d36a33b8401539bc454c3a" name="myspell-sq_AL" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="8b2e56c11ba35f05fa43197afd01c4b2dcc662f6aa181956c6cf36bb4e2a8e55" name="myspell-sr" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="1cc5092a2e3f03d2e5f28ba13f9ec95695daeeffab0d6d7074b6b0585ede8ef2" name="myspell-sr_CS" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="976a81d4c11aa4b2ab9254aab756f5315d97f22ca1112c50fa1abe3df0ca47a9" name="myspell-sr_Latn_CS" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="de11341e849e33a659b22b80dd6104950b31a2363a5de5bf8422d5a08f7b865e" name="myspell-sr_Latn_RS" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="f0f07e7e2beb8f3f10732d9db1a98e197ff23e9abf3c3d8a3b25555ba81790c4" name="myspell-sr_RS" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="668847c7652fb58d8fc15eea10dc7aef381b565ff82f18260073e1893bbc3b4a" name="myspell-sv_FI" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="0185a2241b705fe3ca16d3885e2b5bf973d4a1909a368bd5f875dbb355da31a2" name="myspell-sv_SE" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="d86f3c109f7421a8c547dd2b8c9813053f09c72da148cc88aa7ca5851616ba43" name="myspell-sw_TZ" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="03ee56104f13359469ad0b0bc6b39694a79f3dcbd2a6c44cb9d424985097d28f" name="myspell-te" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="a224324109ae05076b391f1e303f614599852818171efbdbb0455aa117dd55a8" name="myspell-te_IN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="96a6f6ddad26ef2891a8715544c6b5edba535208ff26cd3e7799f3c02b26f229" name="myspell-th_TH" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="17d8255571a0c94ff050eeb39394c8745fd929e7c8a7abdcd178d9337898eadf" name="myspell-uk_UA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="7b40214fda00c7acc6841eaa352c9c74d1828d4aa3d567c9dc17b1f01a6d4a00" name="myspell-vi" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="e21c66b3a8c8b7db42e8d5e8e610196526309cbabc1f1177e67303883b254a06" name="myspell-vi_VN" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="a44b4b9c51d43f674e5a40b44e1b533cb5c32cbbea1515611af28c93e0e0ae61" name="myspell-zu_ZA" arch="noarch">
  <version epoch="0" ver="20180704" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1410436800">- package lightproof files [bnc#890735]
- package all doc files
- update to 20140911</changelog>
  <changelog author="pgajdos@suse.com" date="1418990400">- update to 20141215
- package split according to locale [bnc#907966]</changelog>
  <changelog author="pgajdos@suse.com" date="1422619200">- git state 20150130
- fixed [bnc#914911]:
  * gl: fixed dangling symlinks when gl_ES not installed
  * de: _frami dropped from dictionaries name,
    removed hyph_de.dic, th_de_v2.dat, th_de_v2.idx links from
    myspell-de main language package (dangling when no
    variant is installed)
  * en: introduced dependenciencies between language subpackages
    to not have dangling symlinks:
  - all variants depends on en_US variant
  - all except en_PH depends on en_GB
  - en_MW, en_NA and en_ZW variants depends on en_ZA
  * ca: ca-valencia.{dic,aff} regular files moved to
    myspell-ca_ES_valencia</changelog>
  <changelog author="pgajdos@suse.com" date="1428408000">- git state 20150407, fixes [bnc#806250]</changelog>
  <changelog author="pgajdos@suse.com" date="1429531200">- remove Obsoletes: bits from myspell-dictionaries rpm which we
  provide in language sub-subpackages</changelog>
  <changelog author="pgajdos@suse.com" date="1429790400">- fix build for 11sp3</changelog>
  <changelog author="tchvatal@suse.com" date="1440676800">- Update to git state 20150827 reflecting LO 5.0</changelog>
  <changelog author="tchvatal@suse.com" date="1440676801">- Slightly whitespace the spec.in file</changelog>
  <changelog author="tchvatal@suse.com" date="1440676802">- Fixup es generating in update script</changelog>
  <changelog author="pgajdos@suse.com" date="1450353600">- git state 20151217</changelog>
  <changelog author="tchvatal@suse.com" date="1454500800">- Fix description of the package bnc#718113</changelog>
  <changelog author="tchvatal@suse.com" date="1454500801">- git state 20160203 to incorporate the previous change</changelog>
  <changelog author="tchvatal@suse.com" date="1462968000">- Version update to git state 20160511:
  * Notably croatian and czech rules updates</changelog>
  <changelog author="tchvatal@suse.com" date="1477915200">- Update to git state 20161031:
  * Various language updates
  * Notably Swedish and pt_PT</changelog>
  <changelog author="pgajdos@suse.com" date="1481284800">- add FLAG UTF-8 to es_ANY.aff [bsc#1014742]
  + myspell-dictionaries-es-FLAG-UTF-8.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1494504000">- Update to git state 20170511:
  * Add Tibetian dictionary
- Update update.sh script to not bother &lt; 12.3 releases</changelog>
  <changelog author="tchvatal@suse.com" date="1509624000">- Version update to git state 20171102:
  * Albanian dictionary
  * Udates all around the place
    Spanish/English/Swedish/...</changelog>
  <changelog author="pgajdos@suse.com" date="1513598400">- git state 20171218
  * hungarian, spanish
- update.sh: save git log before removing .git; run spec-cleaner
  if present</changelog>
  <changelog author="tchvatal@suse.com" date="1522756800">- Update to 20180403:
  * Various updates around
  * Indonesian spelling dictionary and thesaurus added</changelog>
  <changelog author="tchvatal@suse.com" date="1530705600">- Update to 20180704 bsc#1102294 bsc#1099508:
  * Indonesian hyphenation added
  * English updates
  * Croatian updates
  * Bulgarian files converted to UTF8 in order to avoid bugs</changelog>
</package>
<package pkgid="028cd5bf9ed41cd9dafd188cd0f691dbf0a07a9e6ddf3e7796972b44617d92a0" name="nemo-extension-audio-tab" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="1f66d71f9e3b01a5b8dd044fed541b40893e7f2af2aa6fa8245a1a6771dbad37" name="nemo-extension-compare" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="5ec2dcf067b067512f81ed976361f902d7704dc5aa5dd753b9c8f1288a8c1ebd" name="nemo-extension-dropbox" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="8087952186ddc218bc2963cc5846594d054c8a53909e166a569b6cc6420a9c45" name="nemo-extension-emblems" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="bd1abcca410b8a52722a0448cf62c9268f6e286e88979164f65011d7d1226a7f" name="nemo-extension-fileroller" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="1364ff46ea99e003b296713b0452aa3c59a03b3362f999b38e35d13a4e294c65" name="nemo-extension-gtkhash" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="c4fc0d1d2a56f221cd040028101310a85f58ef4dcd5c76a3a5559c03f4ac8242" name="nemo-extension-image-converter" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="e8ddb51089fa9fa934655f9e77c5897aea0b2fd92a3ad42b161464ec028ef1ef" name="nemo-extension-pastebin" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="17dcebf069cb85fe359515cbd29ea1c554a461b2da838ac7a810b541e3fc03de" name="nemo-extension-preview" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="dbae38bfd89f1d5724ecaf9c48a10795fea799d05bb28ff80125b7ea49ba3d8d" name="nemo-extension-rabbitvcs" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="ab37bb3fa008185ae1cb8055db8d5423c4bbf508998575187b3e6f2fbcdfc753" name="nemo-extension-repairer" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="c4533d0d97e1128c8061ed3a0bf705b1734ee76d06eaf6509fed88edafd95a3c" name="nemo-extension-seahorse" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="b3d89573f1509e508bdb0fc3037413ab133e6e9fd26314d5fdb038986a0a9418" name="nemo-extension-share" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="f7e65accded869d87a2f4c5172f2cef5a8929cf777c094c1ce4e91fa96191649" name="nemo-extension-terminal" arch="noarch">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="d9bca35e4830e9bdefe5d6725cd3b8ce41f338ca38126d5473f45bf863d2d600" name="nemo-extensions" arch="src">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="90e7970f074e14e12612229998041da12b46069857570a573a3a77d0b083c1e0" name="nextcloud" arch="noarch">
  <version epoch="0" ver="13.0.4" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1481716800">- upstream update to version 11.0.0</changelog>
  <changelog author="ecsos@opensuse.org" date="1485172800">- upstream update to version 11.0.1</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1485518400">- Add php-openssl dependency</changelog>
  <changelog author="ecsos@opensuse.org" date="1488283200">- upstream update to version 11.0.2
  * Server
  - Use login name to fix password confirm with ldap users
    (server/2953)
  - Change the row-format before changing the collation
    (server/3063)
  - Generate correct path for owner and use the display name
    (server/3080)
  - Markdown support for app descriptions (server/3117)
  - Fix style in comment (server/3143)
  - Escape the name for the jquery selector (server/3138)
  - Define spreed calls (server/3115)
  - LDAP Backend OCS Api (server/3213)
  - Fix Sharing app description (server/3397)
  - Fix shared-as-busy events for owner (server/3363)
  - Use correct theming when returning the defaults (server/3399)
  - Filter out sensitive appconfig values (server/3400)
  - Add transifex config for sharebymail (server/3423)
  - Update the email in the accounts table as well (server/3411)
  - Don't log the password on confirmPassword when LDAP throws an
    exception (server/3414)
  - Make sure ownCloud 8.2 activities also can get displayed
    (server/3412)
  - Popovermenu backport (server/3286)
  - Set vendor during install (server/3426)
  - Make sure the file information is available when sending the
    email (server/3433)
  - Add profile data to provisioning api (server/3259)
  - Fix detection of the new iOS app (server/3431)
  - Add integration tests for legacy DAV endpoints (server/3445)
  - Make sure invalid images don't flood the log file
    (server/3440)
  - Fix printing backup code (server/3510)
  - Fix cookie name (nctoken instead of octoken) (server/3511)
  - LDAP's checkPassword should only catch when a user was not
    found (server/3493)
  - Return unknown free space from nullstorage (server/3508)
  - Fix for address book data lost when any user receiving a
    share is deleted (server/3499)
  - Rename database password toggle (server/3500)
  - Popovermenu files css fix (server/3494)
  - Add screensharing icon (server/3481)
  - Fix misleading wording: searching is affected, not user
    access (server/3560)
  - Backport of Fix Broken UUID Attribute Detection (server/3528)
  * Activity
  - Make sure integer like names are still strings (activity/103)
  - Fix activities for public uploads (activity/113)
  - Show the parent as target when the file was not renamed
    (activity/114)
  - Fix activities for "Files drop" on external storages
    (activity/118)
  * SAML &amp; SSO
  - Setup account later (user_saml/79)
  * Serverinfo
  - Fix SQL syntax error on MariaDB 10.0.27 and 10.1.19
    (serverinfo/77)
  - Don't throw an error when /proc/meminfo is not readable
    (serverinfo/76)
  * Survey_Client
  - Fix problem when checking size with dash in DB name
    (survey_client/50)</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove empty %postun and redundant %clean.
- Ensure summary/description is neutral.</changelog>
  <changelog author="adamradovits12@hotmail.com" date="1493035200">- upstream update to version 11.0.3
  * Server
  - Use the correct principal for shared addressbooks
  (server/3608)
  - Fix saving backup codes by using a correct data uri
  (server/3652)
  - Update icewind/streams to 0.5.2 (server/32931)
  - Fix string comparison and return docs (server/3665)
  - Typecast shared mount's storage_id to int as documented
    + some refactor to avoid similar bugs (server/3658)
  - Use a proper date format for transfer ownership
  (server/3700)
  - DAV sharing permissions should not depend on the order
  (server/3722)
  - Add new user agent of windows 10 dav backend
  (server/37641)
  - Add back appstoreenabled config switch (server/37671)
  - Call right function after sudo mode (server/3820)
  - Dont allow empty wildcard search (server/3842)
  - Remove single quotes around search query like in
  user search (server/3849)
  - Fix mimetype detection on public uploads for the
  workflow engine (server/3765)
  - Fix branding and show Nextcloud (server/39691)
  - Fix reshare with user activity message (server/39812)
  - Create correct VCard and return correct error codes
  (server/4029)
  - Prevent migration from ownCloud 10 to Nextcloud 11
  (server/34151)
  - Make sure transparency is an integer when saving a
  calendar (server/4167)
  - Make public links work with master key (server/42071)
  - Don't try to render the avatars if avatars are
  disabled (server/4214)
  - Reduce error message text (server/42281)
  - Don't list on public calendar endpoints (server/4229)
  - Fix upload of folders in Chrome (server/4154)
  - Make sure blob columns are correctly converted as
  parameters (server/4233)
  - Save the scope of an auth token in the session
  (server/4225)
  - Take share by mail into consideration if we calculate
  the access list (server/4242)
  - Also add the root of external storages to the file id
  list (server/4237)
  - Fix LDAP description (server/42382)
  - Remove the double password confirmation on changing
  cron (server/4236)
  - Fix scheduling plugin on legacy caldav endpoint
  (server/4235)
  - Directly fix invalid values of DTEND and DTSTART
  (server/4234)
  - Make JobList::next() lock free (server/4254)
  - Don't remove owner property for public calendars
  (server/4272)
  - Add capabilities for share by mail (server/42511)
  - Dont use the permissions mask while scanning
  (server/4278)
  - Add missing maintenance plugin to new DAV endpoint
  (server/4290)
  - Fix bug with shared_by for own calendars if shared
  (server/4301)
  - Translation string corrected &gt; 1 user (server/4377)
  * Activity
  - Fix activities for "Files drop" on external storages
  (activity/118)
  * User_SAML
  - Bump to php-saml 2.10.5 (user_saml/1001)
  * Logreader
  - Small screen layout improvements
  (logreader/2bcd915969386ceb77c7f91dfd5fc19fd3212346
  - Fix log filtering
  (logreader/4095dfc62dcceb3c59a3f581baa5589737d0e6f3)
  - Greatly speedup log iteration
  (logreader/71a4c6849641f821e80d96674c57a69fe7a8aa9e)
  - Search more rows
  (logreader/b9d00b5599ac8a76862895266f1c23096391aad8)
  - Stop iterating if we dont have a valid file handle
  (logreader/a87a8e653ecae5efef6342e645b98f2878219c87)
  - Don't return a LogIterator on a broken handle
  (logreader/39069108f99d463b1cb8bc944f3ef24324b9f43d)
  - More robust log iteration
  (logreader/c0eb04d55bf1dee94ef523dae0e3b0e6afc272a6)
  - Use proper iso date format
  (logreader/13a31181a6d72d084797a71f49f2c5edee8c8dae)
  - Automatically try to fix some common escape errors from
  copy-pasted log entries
  (logreader/031db2a7f9b9f8cee42acf6eae7d993d31d4660a)
  - Fix stack trace parsing of incorrectly escaped logentries
  (logreader/538667770edfdd48374ef33e9c15498ed98ece60)
  - Highlight entries from the same request when clicking
  on an entry
  (logreader/2d1ccd0e4cca32220fcbe0b4d79d1cd23f0e73a5)
  - Fix copy paste info searchfield
  (logreader/0e91b2f46649a720feb7c3b6b8266b8657db5574)
  - Fix reset search after 0 results
  (logreader/50bec8ecf7edd81cfb96a35089283c0d879b41f3)
  - Allow searching for requestId and user
  (logreader/7f84e55bb4a1e4086ab0918a6bf58ad3885bbd91)
  - Allow searching in url
  (logreader/7833d97cf85fd351d2f7550d67d21bd0c2a815f4)
  - Fix infinite scroll
  (logreader/cbe874c6c068b9156ad8456edf31d112da40cbc9)
  - Dont show loading indicator if we already have entries
  (logreader/d26a08dc0540126177e8d20c3e243b44c5a399c4)
  * Gallery
  - Fix upload after core changes
  (gallery/b4ac4429841cfe2b7ea260dfb37fcde25580143c2)
  - Update JavaScript libraries (gallery/247)</changelog>
  <changelog author="ecsos@opensuse.org" date="1493380800">- fix boo#1036756: package security issue</changelog>
  <changelog author="ecsos@opensuse.org" date="1495454400">- upstream update to version 12.0.0
  no changelog from upstream at this time
  See https://github.com/nextcloud/server/issues?q=is%3Aissue+milestone%3A%22Nextcloud+12.0%22+is%3Aclosed</changelog>
  <changelog author="ecsos@opensuse.org" date="1500292800">- unneeded git-files should not be remove,
  otherwise it throw integrity check failure in some situations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1502366400">- upstream update to version 12.0.1
  So many changes. See https://nextcloud.com/changelog/#latest12</changelog>
  <changelog author="ecsos@opensuse.org" date="1502798400">- upstream update to version 12.0.2
  * Server
  - Minor bugfix release</changelog>
  <changelog author="ecsos@opensuse.org" date="1505822400">- upstream update to version 12.0.3
  Nextcloud 12.0.3 delivers a lot of enhancements in various areas
  including:
  - A number of improvements to email notification templates
  - 2FA enhancements
  - Smarter LDAP password handling
  - File Drop and upload-in-general updates
  - A performance improvement handling large files
  See https://nextcloud.com/changelog/#latest12
  Details: https://github.com/nextcloud/server/pulls?q=is%3Apr+milestone%3A%22Nextcloud+12.0.3%22+is%3Aclosed</changelog>
  <changelog author="ecsos@opensuse.org" date="1512388800">- upstream update to version 12.0.4
  * Server
    Over 50 fixes were merged in the server.
  - Improve text: 'you have now' -&gt; 'you now have (server#6464)
  - Fix initializing paged search under some circumstances
    (server#6502)
  - LDAP: simplify returning the homePath (server#6509)
  - Fix sharer name overlap with filename (server#6524)
  - Allow to close sidebar for text files (server#6525)
  - Fix quota new endpoint 12 (server#6527)
  - Pass new value to triggerChange (server#6528)
  - Throw 101 when an empty group string is provided
    (server#6547)
  - Contacts menu privacy (server#6554)
  - Add color-border variable (server#6649)
  - Do not stop on scss compilation failure (server#6661)
  - Don't pass User object when uid string is expected
    (server#6674)
  - Navigate to the root directory when showing the main filelist
    (server#6689)
  - Fix LDAP User deletion (cleanup) (server#6699)
  - Update aws sdk + s3 improvements (server#6737)
  - Dont run invalid path repair step when upgrading
    from 11.0.5.2 and later (server#6743)
  - Fix language when trying to change password (server#6751)
  - Fix postgresql tests (server#6792)
  - Also use configured 'cache_path' for new chunking
    (server#6814)
  - Set s3 part size to 500mb (server#6815)
  - Fix contacts menu for IE11 (server#6823)
  - Still trigger conflict resolution for existing entries when
    the curre (server#6847)
  - Propagate multipart upload exception when aborting upload
    (server#6855)
  - Allow to migrate from 10.0.3.3 (server#6878)
  - Timespan check (server#6896)
  - Do not log WebDAV maintenance mode exception (server#6908)
  - Don't reset quota (server#6910)
  - Backport of translation string fixes (server#6935)
  - Fix class name in exception logger plugin (server#6942)
  - Allow quota of 0 again (server#6943)
  - Fix uninitialized variable $this-&gt;params (server#6944)
  - Don't add a LIKE condition when it's not needed (server#6945)
  - Fix undefined offset warning when using '/' as external
    storage root (server#6946)
  - Fix page title not changed (server#6987)
  - Better readability for text on log in page which is directly
    on backgrounds (server#7028)
  - Translate Grant Access (server#7040)
  - Use fopen directly when reading objects from s3 (server#7079)
  - Improve mimetype detection for object storages (server#7081)
  - Fix seeking on object storage (server#7082)
  - Hide spinner for initial install (server#7095)
  - Ensure uid for calendar objects is unique (server#7096)
  - Revert "Only allow colons in db host for IPv6 addresses
    (server#7102)
  - Theme flow redirection page (server#7114)
  - Fix icon for security settings (server#7116)
  - If for some reason the json can't be decoded it is not cached
    (server#7118)
  - Improve performance of UserMountCache with external storage
    folders (server#7120)
  - {J,CS}SResourceLocator: account for symlinks in app path
    (server#7170)
  - Fix s3 download and touch (server#7186)
  - Touch opertation on object storage, don't create
    the file cache entry to early (server#7207)
  - Allow migration from upcoming 10.0.4 ownCloud release
    (server#7245)
  - CSSResourceLocator: handle SCSS in apps outside root
    (server#7257)
  - only replace permission popupmenu (server#7259)
  - Fix accesslist when a user has an ID only containting 0-9
    (server#7262)
  - Update CRL due to files_frommail (server#7277)
  - Only in case of $currentAccess the array uses the id as index
    (server#7328)
  * Other
  - Add aws sdk (3rdparty#69)
  - Don't send emails to disabled users (activity#202)
  - Add an option to disable emails completly (activity#206)
  - Make sure the mountPoint property is public before using it
    (files_accesscontrol#79)
  - Allow to playback m4v files (files_videoplayer#43)
  - Fix notifications order (notifications#93)</changelog>
  <changelog author="ecsos@opensuse.org" date="1513684800">- Nextcloud 12 is not compatible with php ? 7.2,
  so php &lt; 7.2 is needed.</changelog>
  <changelog author="ecsos@opensuse.org" date="1516795200">- update to 12.0.5
  Many fixes were merged, the most important ones include:
  - #7144 Unlock files even if an exception occurs
  - #7322 Set primary action button color to same as theming color
  - #7323 Use the correct root for shared jail when the source
    storage is also a jail
  - #7353 Fix translation of federation scope menu
  - #7362 Allow to skip data dir permission checks
  - #7407 Check if owner of share exists
  - #7409 Add retry wrapper when reading files from swift
  - #7451 Fix constructor spy in unit test with Sinon 4.1.3
  - #7455 Remove wrong entry in admin_settings that causes 500
  - #7456 CardDAV convertor check should not be to wide
  - #7457 Fix loading icon position in the app menu
  - #7464 Allow getting the filepath when getting cached mounts
  - #7468 Allow 'Nextcloud' in the user agent string of Android
  - #7558 Fix email buttons for white theme
  - #7567 Respect sharing options when searching for Sharees
  - #7568 Fix duplicate session token after remembered login
  - #7577 Check userExists later,
    saves lookups for appData_INSTANCEID userids
  - #7672 Added additional methods for removal of sensitive info
  - #7688 Fix scss webroot and url rewrite
  - #7717 Throw ServerNotAvailableException when LDAP is caught
    shutting down
  - #7666 Fix drag shadow not visible when dragging a file on
    a narrow screen
  - #7674 Do no run SyncJob in cron
  - #7684 Fix inverted app icons on IE11
  - #7694 Don't attempt to translate login names to uids when uids
    are provided
  - #7708 Don't show recurring msg when pages result was turned off
  - #7742 Hide favourite icon in details view if favourite action
    is not available
  - #7745 Don't lie about preview types
  - #7747 Update of composer
  - #7758 add option to use legacy v2 auth with s3
  - #7759 Use correct L10N files for jsconfig
  - #7757 Wait for the shared link to be set in the acceptance
    tests
  - gallery/#349 Fix date picker not visible in slideshow sharing
    dialog
  - activity/#229 Properly construct path of root on file rename
  - #7770 Fix SCSS processing when undoing theming values
  - #7774 Update icewind/smb to 2.0.3
  - #7777 Set height for sidebar icons
  - #7779 Improve zip support
  - #7786 Return correct mount type for federated shares
  - #7792 Fix empty details view after renaming a file
  - #7817 Fix preview when theming changes invertion of icons
  - #7821 Log full exception in cron instead of only the message
  - #7888 Keep all shipped apps enabled because they should be okay
  - #7962 update icewind/smb to 2.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1517918400">- update to 13.0.0
  Over 1100 changes were merged in the server, with many hundreds
  more in existing or new apps. The main improvements include:
  * Collaboration features
  - Nextcloud Talk, a private videoconference software integrated
    with Nextcloud
  - real-time and asynchronous communication with push
    notifications, calls and chat web and mobile devices
  - Integration in business workflow with calendar invitations
    and calls directly from Nextcloud Files
  - Screen and note sharing with participant moderation
    capabilities
  - 100% secure peer-to-peer, end-to-end encrypted calls,
    mediated by self-hosted server
  - auto-completion of user names in comments and notification
    to the mentioned user
  - support free/busy scheduling in native calendar applications
    like Thunderbird Lightning
  - show meeting invites in the calendar
  * End-to-End Encryption
  - can encrypt data on a per-folder level rather than
    all-or-nothing approach
  - does not require users to remember or exchange passwords
  - does not require re-uploading data upon sharing
  - features an optional off-line administrator recovery key
  - allows full audit logging
  - can be combined with our File Access Control feature so
    administrator can enforce aspects of End-to-end Encryption
  - protects from identity theft with our Cryptographic Identity
    Protection feature
    This feature is in Tech Preview for Nextcloud 13 and does not
    yet implement sharing.
  * User Interface
  - new way of selecting files
  - easy way to quickly copy or move to a location
  - High DPI support
  - admin menu integrated in one list
  - no limitation to file uploads via the web interface
  - user quota in the side bar
  - social sharing (Twitter, G+, Facebook, Diaspora) now features
    a preview
  - improved theming
  * Performance
  - decreased page load times with up to 50% and faster search
  - 80% faster LDAP and up to 10x faster external storage
  - Server-side Encryption performance largely improved
  See https://nextcloud.com/changelog/</changelog>
  <changelog author="ecsos@opensuse.org" date="1521115200">- update to 13.0.1
  - Dont polute the log on DAV emaillogin (server#8045)
  - Don't perform CSRF check on OCS routes with Bearer auth
    (server#8099)
  - Use S3Client::upload instead of splitting single/multipart
    upload ourselves (server#8102)
  - Remove old perl script to update l10n files (server#8145)
  - Scss hardening (server#8156)
  - Do not try to get the jailed path if we can't find the id
    (server#8177)
  - Handle SSL certificate verifications for others than
    Let's Encrypt (server#8183)
  - Use a phan version instead of master (server#8195)
  - Repair step to clear frontend related caches (server#8197)
  - Keep previous exception when transforming to dav exception
    (server#8228)
  - Actually return stream from swift (server#8250)
  - Remove invalid link to documentation (server#8253)
  - Fix deleting folders when using s3 external storage
    (server#8261)
  - Link to NC13 dev manual (server#8264)
  - Better result handling of email search (server#8267)
  - Update CRL to revoke files_rightclick (server#8271)
  - Fix styling issues of guest pages #8155 (server#8286)
  - Remove jquery ui background image (server#8287)
  - Show open graph preview in WhatsApp (server#8309)
  - Make acceptance tests for comments more consistent with the
    others (server#8395)
  - Fix edit tag textbox size (server#8407)
  - Use TTF fonts for avatar generation (server#8440)
  - Use mb_* string methods to extract first character for
    generated avatars (server#8470)
  - Show hint in OCS API for user creation (server#8515)
  - Fix hiding and event propagation issues with the user
    management popover (server#8517)
  - Add some whitespace around change.svg icon (server#8518)
  - Avoid fruitless login attempts (server#8532)
  - Fix retrieval of group members with numerical uids from LDAP
    (server#8536)
  - Theming: handle not being in the serverroot (server#8554)
  - Ext storage error warning (server#8561)
  - Set autocomplete=new-password for mail share password
    (server#8577)
  - Fix upload button visible on read-only folders (server#8595)
  - Fixed app navigation for IE11 (server#8609)
  - Fix breadcrumbs width calculation (server#8610)
  - Fix comments (and systemtags) when involving users with
    numerical ids (server#8615)
  - Update commentstabview.js (server#8621)
  - Properly encapsulate require_once for app.php (server#8631)
  - AppData hardening (server#8636)
  - Use hash algo that's robust against collisions (server#8654)
  - Fixed date/time picker on IE11 (server#8663)
  - Use a more widely available method to test s3 settings
    (server#8667)
  - Use proper lanugage in langauge code (server#8668)
  - Display the proper language strings in setttings (server#8669)
  - Do not create empty userid when attribute does not have allowed
    chars (server#8673)
  - Remove too restrict check for background image/color
    (server#8675)
  - Fix example regex for user agent matching (server#8676)
  - Generate different UIDs for Birthday, Anniversary and Death
    event (server#8678)
  - Don't use double quotes in MySQL queries (server#8680)
  - Log exceptions that happen when writing the app store reply
    to storage (server#8683)
  - Set the correct active navigation entry (server#8685)
  - Fix activities for end2end encryption (server#8686)
  - Filter out the current user when searching for emails too
    (server#8687)
  - Fix check if theming defaults instance is available
    (server#8688)
  - Fix undefined index problem (server#8693)
  - Disable part files for object stores (server#8725)
  - Better handling of invisible elements in acceptance tests
    (server#8738)
  - Remove base url from global cache prefix (server#8745)
  - Check if the cached js file exists (server#8746)
  - Sharee email matches not limited (server#8749)
  - Fix integer overflow in ChunkingPlugin (server#8752)
  - Revert wording back to updates (server#8755)
  - Add acceptance tests for permissions on public shared folders
    (server#8758)
  - Also send file emails in ASAP mode (activity#249)
  - Ensure userids are strings (activity#252)
  - Null coalescing operator is PHP7+ (activity#254)
  - Update PDF.js to 1.9.426 (files_pdfviewer#55)
  - Enable full screen mode for PDF files (files_pdfviewer#59)
  - Fix ACE module files failing to load (files_texteditor#83)
  - Do not keep FileInfoModels returned by "getModelForFile"
    (files_texteditor#89)
  - Fix share drop down in gallery not properly shown (gallery#394)
  - Fix gallery button hidden in folders without create permission
    (gallery#402)
  - Fix controls position in gallery layout (gallery#405)
  - Removed old code already present thanks to the files app
    (gallery#406)
  - Create "file app" public share links if the slideshow is
    opened from ... (gallery#407)
  - Allow to check against haveibeenpwned.com password list
    (password_policy#61)</changelog>
  <changelog author="ecsos@opensuse.org" date="1524744000">- update to 13.0.2
  - Show group display names (server#8779)
  - Group existence check works without attribute (like with users)
    (server#8849)
  - The FN is optional, carrying the displayname if present
    (server#8900)
  - Set "share with" field to the ID of the circle (server#8905)
  - Show EOL warning in the update section (server#8986)
  - Use app version to generate scss filename (server#9015)
  - Update icewind/smb to 2.0.5 (server#9017)
  - Fix search text overlapping close button (server#9019)
  - Clear any theming prefixed cache on cache buster increase
    (server#9020)
  - Reset encryptionVersion to '1' if a file was stream copied
    (server#9064)
  - Do not treat is-encrypted as custom property (server#9071)
  - Fix proper permissions for multiple file access (server#9072)
  - When formatting a share node an Empty target is invalid
    (server#9073)
  - Move on with the next user if we found the user on one user
    back-end (server#9077)
  - Allow usage of Windows 10 WebDav Netdrive (server#9089)
  - Add more logging for the object storage during creation of the
    buckets (server#9094)
  - Do not convert email addresses with idn_to_ascii if?
    (server#9095)
  - Fix progress bar hidden before the upload ends (server#9124)
  - Update CRL to include old quicknotes cert (server#9213)
  - Fix user selectable text for public links for text files
    (server#9230)
  - Provide an option to disable HTML emails (server#9231)
  - Fix appinfo parsing when a single localized option is provided
    (server#9233)
  - Use multibyte substring (server#9234)
  - Fix webdav support for OneNote clients (server#9236)
  - Fixed files copy/move when in favorites or recent section
    (server#9238)
  - Don't update personal settings for admins (activity#262)
  - Skip parameters which are not there instead of failing out
    (activity#265)
  - Bump version 13 (files_pdfviewer#64)
  - Fix info.xml (files_pdfviewer#66)
  - No default enable (files_pdfviewer#67)
  - Fix position of icons in "Share with" input field (gallery#418)
  - Fix "No results found" tooltip (gallery#419)
  - Fix UI while a share is being added (gallery#420)
  - Hide "No results found" tooltip on autocompletion (gallery#424)
  - Fix error while clicking on the share link checkbox
    (gallery#430)</changelog>
  <changelog author="ecsos@opensuse.org" date="1528372800">- update to 13.0.3
  - Backport various scss fixes #8777 (server#9259)
  - Fix ellipsis in filename column (server#9344)
  - Replace deprecated sinon reset() call with resetHistory()
    (server#9358)
  - Issue #9318: catch exceptions in SCSSCacher::resetCache()
    (server#9377)
  - Log lock state on conflict (server#9389)
  - Remove unneeded locks in getCacheEntry (server#9391)
  - Only allow a single concurrent dav write to a file
    (server#9392)
  - Workflow rules error when changing operation (server#9409)
  - Fix jsunit tests (server#9430)
  - Allow IPv6 database host (server#9432)
  - Add labels for Contacts menu and Settings (server#9433)
  - Get correct version of an app (server#9436)
  - Fix ids of permission checkboxes for shares (server#9453)
  - Fix race condition when preparing upload folder (server#9454)
  - Allow to specify a link to a legal notice (server#9516)
  - Fix for unbound cloned LDAP connections (server#9522)
  - Dont use $info as array when its not an array (server#9525)
  - Improve OAuth (server#9540)
  - Bump theming version for extraordinary release (server#9547)
  - Fix translation bug on lost password page (server#9548)
  - Cleanup locks in scanner on error (server#9566)
  - Bump version for theming again ? (server#9573)
  - Make sure force language is reflected in html lang attribute
    (server#9579)
  - Add privacy link to theming and fix scrollbars (server#9586)
  - Fix settings menu (server#9590)
  - Handle exception while itterating trough smb file listing
    (server#9608)
  - Send invitations for shared calendars (server#9610)
  - Regenerate session id after public share auth (server#9619)
  - Emit event when running ./occ db:add-missing-indices
    (server#9620)
  - Add PHP missing message to index.php (server#9621)
  - Delete the previews when a version is restored (server#9622)
  - Limit Sinon version to 5.0.7 at most (server#9629)
  - Prepare another theming release including translations for
    recently added imprint and privacy policy strings
    (server#9647)
  - Dont open the file on dav HEAD request (server#9649)
  - Fix(AmazonS3): fix loop $result['Contents'] error
    (server#9650)
  - Fix undefined variables (server#9651)
  - Add search category icon (server#9652)
  - Fix "Invalid argument supplied for foreach()" (server#9654)
  - Do not load calendar/addressbook plugins if not needed
    (server#9655)
  - Make LargeFileHelper.php faster by avoiding execs as much as
    possible (server#9656)
  - Improve error reporting and move format parameter to the
    options (server#9657)
  - The OAuth endpoint needs to support Basic Auth (server#9659)
  - LDAP password renewal fixes (server#9661)
  - Check user state when fetching to avoid dealing with offline
    objects (server#9662)
  - Make sure the file is readable before attempting to create
    a preview (server#9668)
  - Fix drone mysqlmb4 tests (server#9672)
  - Make sure the log doesn't try to read from PUT if it can't
    (server#9694)
  - Allow admins to override FreeBusy capabilities without
    modifying ShareAPI capabilities (server#9707)
  - Fix the unit tests (server#9712)
  - Fix header nav (server#9727)
  - Fix local users check in contacts menu (server#9732)
  - Don't open the file when handling HEAD requests (3rdparty#99)
  - Do not sanitize markdown output twice (files_texteditor#101)</changelog>
  <changelog author="ecsos@opensuse.org" date="1528718400">- update to 13.0.4
  - Allow setting notify credentials in environment (server#9788)
  - Make the token expiration also work for autocasting 0
    (server#9803)
  - Enable caldav for webdav subtree public-calendars (server#9820)
- This also fix security issues:
  - (boo#1100343, CVE-2018-3762) and (boo#1100344, CVE-2018-3761)</changelog>
</package>
<package pkgid="1d60e57da1984ece85b56a27c3bd4271eade862c013edbc435a6dd2e328241ce" name="nextcloud" arch="src">
  <version epoch="0" ver="13.0.4" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1481716800">- upstream update to version 11.0.0</changelog>
  <changelog author="ecsos@opensuse.org" date="1485172800">- upstream update to version 11.0.1</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1485518400">- Add php-openssl dependency</changelog>
  <changelog author="ecsos@opensuse.org" date="1488283200">- upstream update to version 11.0.2
  * Server
  - Use login name to fix password confirm with ldap users
    (server/2953)
  - Change the row-format before changing the collation
    (server/3063)
  - Generate correct path for owner and use the display name
    (server/3080)
  - Markdown support for app descriptions (server/3117)
  - Fix style in comment (server/3143)
  - Escape the name for the jquery selector (server/3138)
  - Define spreed calls (server/3115)
  - LDAP Backend OCS Api (server/3213)
  - Fix Sharing app description (server/3397)
  - Fix shared-as-busy events for owner (server/3363)
  - Use correct theming when returning the defaults (server/3399)
  - Filter out sensitive appconfig values (server/3400)
  - Add transifex config for sharebymail (server/3423)
  - Update the email in the accounts table as well (server/3411)
  - Don't log the password on confirmPassword when LDAP throws an
    exception (server/3414)
  - Make sure ownCloud 8.2 activities also can get displayed
    (server/3412)
  - Popovermenu backport (server/3286)
  - Set vendor during install (server/3426)
  - Make sure the file information is available when sending the
    email (server/3433)
  - Add profile data to provisioning api (server/3259)
  - Fix detection of the new iOS app (server/3431)
  - Add integration tests for legacy DAV endpoints (server/3445)
  - Make sure invalid images don't flood the log file
    (server/3440)
  - Fix printing backup code (server/3510)
  - Fix cookie name (nctoken instead of octoken) (server/3511)
  - LDAP's checkPassword should only catch when a user was not
    found (server/3493)
  - Return unknown free space from nullstorage (server/3508)
  - Fix for address book data lost when any user receiving a
    share is deleted (server/3499)
  - Rename database password toggle (server/3500)
  - Popovermenu files css fix (server/3494)
  - Add screensharing icon (server/3481)
  - Fix misleading wording: searching is affected, not user
    access (server/3560)
  - Backport of Fix Broken UUID Attribute Detection (server/3528)
  * Activity
  - Make sure integer like names are still strings (activity/103)
  - Fix activities for public uploads (activity/113)
  - Show the parent as target when the file was not renamed
    (activity/114)
  - Fix activities for "Files drop" on external storages
    (activity/118)
  * SAML &amp; SSO
  - Setup account later (user_saml/79)
  * Serverinfo
  - Fix SQL syntax error on MariaDB 10.0.27 and 10.1.19
    (serverinfo/77)
  - Don't throw an error when /proc/meminfo is not readable
    (serverinfo/76)
  * Survey_Client
  - Fix problem when checking size with dash in DB name
    (survey_client/50)</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove empty %postun and redundant %clean.
- Ensure summary/description is neutral.</changelog>
  <changelog author="adamradovits12@hotmail.com" date="1493035200">- upstream update to version 11.0.3
  * Server
  - Use the correct principal for shared addressbooks
  (server/3608)
  - Fix saving backup codes by using a correct data uri
  (server/3652)
  - Update icewind/streams to 0.5.2 (server/32931)
  - Fix string comparison and return docs (server/3665)
  - Typecast shared mount's storage_id to int as documented
    + some refactor to avoid similar bugs (server/3658)
  - Use a proper date format for transfer ownership
  (server/3700)
  - DAV sharing permissions should not depend on the order
  (server/3722)
  - Add new user agent of windows 10 dav backend
  (server/37641)
  - Add back appstoreenabled config switch (server/37671)
  - Call right function after sudo mode (server/3820)
  - Dont allow empty wildcard search (server/3842)
  - Remove single quotes around search query like in
  user search (server/3849)
  - Fix mimetype detection on public uploads for the
  workflow engine (server/3765)
  - Fix branding and show Nextcloud (server/39691)
  - Fix reshare with user activity message (server/39812)
  - Create correct VCard and return correct error codes
  (server/4029)
  - Prevent migration from ownCloud 10 to Nextcloud 11
  (server/34151)
  - Make sure transparency is an integer when saving a
  calendar (server/4167)
  - Make public links work with master key (server/42071)
  - Don't try to render the avatars if avatars are
  disabled (server/4214)
  - Reduce error message text (server/42281)
  - Don't list on public calendar endpoints (server/4229)
  - Fix upload of folders in Chrome (server/4154)
  - Make sure blob columns are correctly converted as
  parameters (server/4233)
  - Save the scope of an auth token in the session
  (server/4225)
  - Take share by mail into consideration if we calculate
  the access list (server/4242)
  - Also add the root of external storages to the file id
  list (server/4237)
  - Fix LDAP description (server/42382)
  - Remove the double password confirmation on changing
  cron (server/4236)
  - Fix scheduling plugin on legacy caldav endpoint
  (server/4235)
  - Directly fix invalid values of DTEND and DTSTART
  (server/4234)
  - Make JobList::next() lock free (server/4254)
  - Don't remove owner property for public calendars
  (server/4272)
  - Add capabilities for share by mail (server/42511)
  - Dont use the permissions mask while scanning
  (server/4278)
  - Add missing maintenance plugin to new DAV endpoint
  (server/4290)
  - Fix bug with shared_by for own calendars if shared
  (server/4301)
  - Translation string corrected &gt; 1 user (server/4377)
  * Activity
  - Fix activities for "Files drop" on external storages
  (activity/118)
  * User_SAML
  - Bump to php-saml 2.10.5 (user_saml/1001)
  * Logreader
  - Small screen layout improvements
  (logreader/2bcd915969386ceb77c7f91dfd5fc19fd3212346
  - Fix log filtering
  (logreader/4095dfc62dcceb3c59a3f581baa5589737d0e6f3)
  - Greatly speedup log iteration
  (logreader/71a4c6849641f821e80d96674c57a69fe7a8aa9e)
  - Search more rows
  (logreader/b9d00b5599ac8a76862895266f1c23096391aad8)
  - Stop iterating if we dont have a valid file handle
  (logreader/a87a8e653ecae5efef6342e645b98f2878219c87)
  - Don't return a LogIterator on a broken handle
  (logreader/39069108f99d463b1cb8bc944f3ef24324b9f43d)
  - More robust log iteration
  (logreader/c0eb04d55bf1dee94ef523dae0e3b0e6afc272a6)
  - Use proper iso date format
  (logreader/13a31181a6d72d084797a71f49f2c5edee8c8dae)
  - Automatically try to fix some common escape errors from
  copy-pasted log entries
  (logreader/031db2a7f9b9f8cee42acf6eae7d993d31d4660a)
  - Fix stack trace parsing of incorrectly escaped logentries
  (logreader/538667770edfdd48374ef33e9c15498ed98ece60)
  - Highlight entries from the same request when clicking
  on an entry
  (logreader/2d1ccd0e4cca32220fcbe0b4d79d1cd23f0e73a5)
  - Fix copy paste info searchfield
  (logreader/0e91b2f46649a720feb7c3b6b8266b8657db5574)
  - Fix reset search after 0 results
  (logreader/50bec8ecf7edd81cfb96a35089283c0d879b41f3)
  - Allow searching for requestId and user
  (logreader/7f84e55bb4a1e4086ab0918a6bf58ad3885bbd91)
  - Allow searching in url
  (logreader/7833d97cf85fd351d2f7550d67d21bd0c2a815f4)
  - Fix infinite scroll
  (logreader/cbe874c6c068b9156ad8456edf31d112da40cbc9)
  - Dont show loading indicator if we already have entries
  (logreader/d26a08dc0540126177e8d20c3e243b44c5a399c4)
  * Gallery
  - Fix upload after core changes
  (gallery/b4ac4429841cfe2b7ea260dfb37fcde25580143c2)
  - Update JavaScript libraries (gallery/247)</changelog>
  <changelog author="ecsos@opensuse.org" date="1493380800">- fix boo#1036756: package security issue</changelog>
  <changelog author="ecsos@opensuse.org" date="1495454400">- upstream update to version 12.0.0
  no changelog from upstream at this time
  See https://github.com/nextcloud/server/issues?q=is%3Aissue+milestone%3A%22Nextcloud+12.0%22+is%3Aclosed</changelog>
  <changelog author="ecsos@opensuse.org" date="1500292800">- unneeded git-files should not be remove,
  otherwise it throw integrity check failure in some situations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1502366400">- upstream update to version 12.0.1
  So many changes. See https://nextcloud.com/changelog/#latest12</changelog>
  <changelog author="ecsos@opensuse.org" date="1502798400">- upstream update to version 12.0.2
  * Server
  - Minor bugfix release</changelog>
  <changelog author="ecsos@opensuse.org" date="1505822400">- upstream update to version 12.0.3
  Nextcloud 12.0.3 delivers a lot of enhancements in various areas
  including:
  - A number of improvements to email notification templates
  - 2FA enhancements
  - Smarter LDAP password handling
  - File Drop and upload-in-general updates
  - A performance improvement handling large files
  See https://nextcloud.com/changelog/#latest12
  Details: https://github.com/nextcloud/server/pulls?q=is%3Apr+milestone%3A%22Nextcloud+12.0.3%22+is%3Aclosed</changelog>
  <changelog author="ecsos@opensuse.org" date="1512388800">- upstream update to version 12.0.4
  * Server
    Over 50 fixes were merged in the server.
  - Improve text: 'you have now' -&gt; 'you now have (server#6464)
  - Fix initializing paged search under some circumstances
    (server#6502)
  - LDAP: simplify returning the homePath (server#6509)
  - Fix sharer name overlap with filename (server#6524)
  - Allow to close sidebar for text files (server#6525)
  - Fix quota new endpoint 12 (server#6527)
  - Pass new value to triggerChange (server#6528)
  - Throw 101 when an empty group string is provided
    (server#6547)
  - Contacts menu privacy (server#6554)
  - Add color-border variable (server#6649)
  - Do not stop on scss compilation failure (server#6661)
  - Don't pass User object when uid string is expected
    (server#6674)
  - Navigate to the root directory when showing the main filelist
    (server#6689)
  - Fix LDAP User deletion (cleanup) (server#6699)
  - Update aws sdk + s3 improvements (server#6737)
  - Dont run invalid path repair step when upgrading
    from 11.0.5.2 and later (server#6743)
  - Fix language when trying to change password (server#6751)
  - Fix postgresql tests (server#6792)
  - Also use configured 'cache_path' for new chunking
    (server#6814)
  - Set s3 part size to 500mb (server#6815)
  - Fix contacts menu for IE11 (server#6823)
  - Still trigger conflict resolution for existing entries when
    the curre (server#6847)
  - Propagate multipart upload exception when aborting upload
    (server#6855)
  - Allow to migrate from 10.0.3.3 (server#6878)
  - Timespan check (server#6896)
  - Do not log WebDAV maintenance mode exception (server#6908)
  - Don't reset quota (server#6910)
  - Backport of translation string fixes (server#6935)
  - Fix class name in exception logger plugin (server#6942)
  - Allow quota of 0 again (server#6943)
  - Fix uninitialized variable $this-&gt;params (server#6944)
  - Don't add a LIKE condition when it's not needed (server#6945)
  - Fix undefined offset warning when using '/' as external
    storage root (server#6946)
  - Fix page title not changed (server#6987)
  - Better readability for text on log in page which is directly
    on backgrounds (server#7028)
  - Translate Grant Access (server#7040)
  - Use fopen directly when reading objects from s3 (server#7079)
  - Improve mimetype detection for object storages (server#7081)
  - Fix seeking on object storage (server#7082)
  - Hide spinner for initial install (server#7095)
  - Ensure uid for calendar objects is unique (server#7096)
  - Revert "Only allow colons in db host for IPv6 addresses
    (server#7102)
  - Theme flow redirection page (server#7114)
  - Fix icon for security settings (server#7116)
  - If for some reason the json can't be decoded it is not cached
    (server#7118)
  - Improve performance of UserMountCache with external storage
    folders (server#7120)
  - {J,CS}SResourceLocator: account for symlinks in app path
    (server#7170)
  - Fix s3 download and touch (server#7186)
  - Touch opertation on object storage, don't create
    the file cache entry to early (server#7207)
  - Allow migration from upcoming 10.0.4 ownCloud release
    (server#7245)
  - CSSResourceLocator: handle SCSS in apps outside root
    (server#7257)
  - only replace permission popupmenu (server#7259)
  - Fix accesslist when a user has an ID only containting 0-9
    (server#7262)
  - Update CRL due to files_frommail (server#7277)
  - Only in case of $currentAccess the array uses the id as index
    (server#7328)
  * Other
  - Add aws sdk (3rdparty#69)
  - Don't send emails to disabled users (activity#202)
  - Add an option to disable emails completly (activity#206)
  - Make sure the mountPoint property is public before using it
    (files_accesscontrol#79)
  - Allow to playback m4v files (files_videoplayer#43)
  - Fix notifications order (notifications#93)</changelog>
  <changelog author="ecsos@opensuse.org" date="1513684800">- Nextcloud 12 is not compatible with php ? 7.2,
  so php &lt; 7.2 is needed.</changelog>
  <changelog author="ecsos@opensuse.org" date="1516795200">- update to 12.0.5
  Many fixes were merged, the most important ones include:
  - #7144 Unlock files even if an exception occurs
  - #7322 Set primary action button color to same as theming color
  - #7323 Use the correct root for shared jail when the source
    storage is also a jail
  - #7353 Fix translation of federation scope menu
  - #7362 Allow to skip data dir permission checks
  - #7407 Check if owner of share exists
  - #7409 Add retry wrapper when reading files from swift
  - #7451 Fix constructor spy in unit test with Sinon 4.1.3
  - #7455 Remove wrong entry in admin_settings that causes 500
  - #7456 CardDAV convertor check should not be to wide
  - #7457 Fix loading icon position in the app menu
  - #7464 Allow getting the filepath when getting cached mounts
  - #7468 Allow 'Nextcloud' in the user agent string of Android
  - #7558 Fix email buttons for white theme
  - #7567 Respect sharing options when searching for Sharees
  - #7568 Fix duplicate session token after remembered login
  - #7577 Check userExists later,
    saves lookups for appData_INSTANCEID userids
  - #7672 Added additional methods for removal of sensitive info
  - #7688 Fix scss webroot and url rewrite
  - #7717 Throw ServerNotAvailableException when LDAP is caught
    shutting down
  - #7666 Fix drag shadow not visible when dragging a file on
    a narrow screen
  - #7674 Do no run SyncJob in cron
  - #7684 Fix inverted app icons on IE11
  - #7694 Don't attempt to translate login names to uids when uids
    are provided
  - #7708 Don't show recurring msg when pages result was turned off
  - #7742 Hide favourite icon in details view if favourite action
    is not available
  - #7745 Don't lie about preview types
  - #7747 Update of composer
  - #7758 add option to use legacy v2 auth with s3
  - #7759 Use correct L10N files for jsconfig
  - #7757 Wait for the shared link to be set in the acceptance
    tests
  - gallery/#349 Fix date picker not visible in slideshow sharing
    dialog
  - activity/#229 Properly construct path of root on file rename
  - #7770 Fix SCSS processing when undoing theming values
  - #7774 Update icewind/smb to 2.0.3
  - #7777 Set height for sidebar icons
  - #7779 Improve zip support
  - #7786 Return correct mount type for federated shares
  - #7792 Fix empty details view after renaming a file
  - #7817 Fix preview when theming changes invertion of icons
  - #7821 Log full exception in cron instead of only the message
  - #7888 Keep all shipped apps enabled because they should be okay
  - #7962 update icewind/smb to 2.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1517918400">- update to 13.0.0
  Over 1100 changes were merged in the server, with many hundreds
  more in existing or new apps. The main improvements include:
  * Collaboration features
  - Nextcloud Talk, a private videoconference software integrated
    with Nextcloud
  - real-time and asynchronous communication with push
    notifications, calls and chat web and mobile devices
  - Integration in business workflow with calendar invitations
    and calls directly from Nextcloud Files
  - Screen and note sharing with participant moderation
    capabilities
  - 100% secure peer-to-peer, end-to-end encrypted calls,
    mediated by self-hosted server
  - auto-completion of user names in comments and notification
    to the mentioned user
  - support free/busy scheduling in native calendar applications
    like Thunderbird Lightning
  - show meeting invites in the calendar
  * End-to-End Encryption
  - can encrypt data on a per-folder level rather than
    all-or-nothing approach
  - does not require users to remember or exchange passwords
  - does not require re-uploading data upon sharing
  - features an optional off-line administrator recovery key
  - allows full audit logging
  - can be combined with our File Access Control feature so
    administrator can enforce aspects of End-to-end Encryption
  - protects from identity theft with our Cryptographic Identity
    Protection feature
    This feature is in Tech Preview for Nextcloud 13 and does not
    yet implement sharing.
  * User Interface
  - new way of selecting files
  - easy way to quickly copy or move to a location
  - High DPI support
  - admin menu integrated in one list
  - no limitation to file uploads via the web interface
  - user quota in the side bar
  - social sharing (Twitter, G+, Facebook, Diaspora) now features
    a preview
  - improved theming
  * Performance
  - decreased page load times with up to 50% and faster search
  - 80% faster LDAP and up to 10x faster external storage
  - Server-side Encryption performance largely improved
  See https://nextcloud.com/changelog/</changelog>
  <changelog author="ecsos@opensuse.org" date="1521115200">- update to 13.0.1
  - Dont polute the log on DAV emaillogin (server#8045)
  - Don't perform CSRF check on OCS routes with Bearer auth
    (server#8099)
  - Use S3Client::upload instead of splitting single/multipart
    upload ourselves (server#8102)
  - Remove old perl script to update l10n files (server#8145)
  - Scss hardening (server#8156)
  - Do not try to get the jailed path if we can't find the id
    (server#8177)
  - Handle SSL certificate verifications for others than
    Let's Encrypt (server#8183)
  - Use a phan version instead of master (server#8195)
  - Repair step to clear frontend related caches (server#8197)
  - Keep previous exception when transforming to dav exception
    (server#8228)
  - Actually return stream from swift (server#8250)
  - Remove invalid link to documentation (server#8253)
  - Fix deleting folders when using s3 external storage
    (server#8261)
  - Link to NC13 dev manual (server#8264)
  - Better result handling of email search (server#8267)
  - Update CRL to revoke files_rightclick (server#8271)
  - Fix styling issues of guest pages #8155 (server#8286)
  - Remove jquery ui background image (server#8287)
  - Show open graph preview in WhatsApp (server#8309)
  - Make acceptance tests for comments more consistent with the
    others (server#8395)
  - Fix edit tag textbox size (server#8407)
  - Use TTF fonts for avatar generation (server#8440)
  - Use mb_* string methods to extract first character for
    generated avatars (server#8470)
  - Show hint in OCS API for user creation (server#8515)
  - Fix hiding and event propagation issues with the user
    management popover (server#8517)
  - Add some whitespace around change.svg icon (server#8518)
  - Avoid fruitless login attempts (server#8532)
  - Fix retrieval of group members with numerical uids from LDAP
    (server#8536)
  - Theming: handle not being in the serverroot (server#8554)
  - Ext storage error warning (server#8561)
  - Set autocomplete=new-password for mail share password
    (server#8577)
  - Fix upload button visible on read-only folders (server#8595)
  - Fixed app navigation for IE11 (server#8609)
  - Fix breadcrumbs width calculation (server#8610)
  - Fix comments (and systemtags) when involving users with
    numerical ids (server#8615)
  - Update commentstabview.js (server#8621)
  - Properly encapsulate require_once for app.php (server#8631)
  - AppData hardening (server#8636)
  - Use hash algo that's robust against collisions (server#8654)
  - Fixed date/time picker on IE11 (server#8663)
  - Use a more widely available method to test s3 settings
    (server#8667)
  - Use proper lanugage in langauge code (server#8668)
  - Display the proper language strings in setttings (server#8669)
  - Do not create empty userid when attribute does not have allowed
    chars (server#8673)
  - Remove too restrict check for background image/color
    (server#8675)
  - Fix example regex for user agent matching (server#8676)
  - Generate different UIDs for Birthday, Anniversary and Death
    event (server#8678)
  - Don't use double quotes in MySQL queries (server#8680)
  - Log exceptions that happen when writing the app store reply
    to storage (server#8683)
  - Set the correct active navigation entry (server#8685)
  - Fix activities for end2end encryption (server#8686)
  - Filter out the current user when searching for emails too
    (server#8687)
  - Fix check if theming defaults instance is available
    (server#8688)
  - Fix undefined index problem (server#8693)
  - Disable part files for object stores (server#8725)
  - Better handling of invisible elements in acceptance tests
    (server#8738)
  - Remove base url from global cache prefix (server#8745)
  - Check if the cached js file exists (server#8746)
  - Sharee email matches not limited (server#8749)
  - Fix integer overflow in ChunkingPlugin (server#8752)
  - Revert wording back to updates (server#8755)
  - Add acceptance tests for permissions on public shared folders
    (server#8758)
  - Also send file emails in ASAP mode (activity#249)
  - Ensure userids are strings (activity#252)
  - Null coalescing operator is PHP7+ (activity#254)
  - Update PDF.js to 1.9.426 (files_pdfviewer#55)
  - Enable full screen mode for PDF files (files_pdfviewer#59)
  - Fix ACE module files failing to load (files_texteditor#83)
  - Do not keep FileInfoModels returned by "getModelForFile"
    (files_texteditor#89)
  - Fix share drop down in gallery not properly shown (gallery#394)
  - Fix gallery button hidden in folders without create permission
    (gallery#402)
  - Fix controls position in gallery layout (gallery#405)
  - Removed old code already present thanks to the files app
    (gallery#406)
  - Create "file app" public share links if the slideshow is
    opened from ... (gallery#407)
  - Allow to check against haveibeenpwned.com password list
    (password_policy#61)</changelog>
  <changelog author="ecsos@opensuse.org" date="1524744000">- update to 13.0.2
  - Show group display names (server#8779)
  - Group existence check works without attribute (like with users)
    (server#8849)
  - The FN is optional, carrying the displayname if present
    (server#8900)
  - Set "share with" field to the ID of the circle (server#8905)
  - Show EOL warning in the update section (server#8986)
  - Use app version to generate scss filename (server#9015)
  - Update icewind/smb to 2.0.5 (server#9017)
  - Fix search text overlapping close button (server#9019)
  - Clear any theming prefixed cache on cache buster increase
    (server#9020)
  - Reset encryptionVersion to '1' if a file was stream copied
    (server#9064)
  - Do not treat is-encrypted as custom property (server#9071)
  - Fix proper permissions for multiple file access (server#9072)
  - When formatting a share node an Empty target is invalid
    (server#9073)
  - Move on with the next user if we found the user on one user
    back-end (server#9077)
  - Allow usage of Windows 10 WebDav Netdrive (server#9089)
  - Add more logging for the object storage during creation of the
    buckets (server#9094)
  - Do not convert email addresses with idn_to_ascii if?
    (server#9095)
  - Fix progress bar hidden before the upload ends (server#9124)
  - Update CRL to include old quicknotes cert (server#9213)
  - Fix user selectable text for public links for text files
    (server#9230)
  - Provide an option to disable HTML emails (server#9231)
  - Fix appinfo parsing when a single localized option is provided
    (server#9233)
  - Use multibyte substring (server#9234)
  - Fix webdav support for OneNote clients (server#9236)
  - Fixed files copy/move when in favorites or recent section
    (server#9238)
  - Don't update personal settings for admins (activity#262)
  - Skip parameters which are not there instead of failing out
    (activity#265)
  - Bump version 13 (files_pdfviewer#64)
  - Fix info.xml (files_pdfviewer#66)
  - No default enable (files_pdfviewer#67)
  - Fix position of icons in "Share with" input field (gallery#418)
  - Fix "No results found" tooltip (gallery#419)
  - Fix UI while a share is being added (gallery#420)
  - Hide "No results found" tooltip on autocompletion (gallery#424)
  - Fix error while clicking on the share link checkbox
    (gallery#430)</changelog>
  <changelog author="ecsos@opensuse.org" date="1528372800">- update to 13.0.3
  - Backport various scss fixes #8777 (server#9259)
  - Fix ellipsis in filename column (server#9344)
  - Replace deprecated sinon reset() call with resetHistory()
    (server#9358)
  - Issue #9318: catch exceptions in SCSSCacher::resetCache()
    (server#9377)
  - Log lock state on conflict (server#9389)
  - Remove unneeded locks in getCacheEntry (server#9391)
  - Only allow a single concurrent dav write to a file
    (server#9392)
  - Workflow rules error when changing operation (server#9409)
  - Fix jsunit tests (server#9430)
  - Allow IPv6 database host (server#9432)
  - Add labels for Contacts menu and Settings (server#9433)
  - Get correct version of an app (server#9436)
  - Fix ids of permission checkboxes for shares (server#9453)
  - Fix race condition when preparing upload folder (server#9454)
  - Allow to specify a link to a legal notice (server#9516)
  - Fix for unbound cloned LDAP connections (server#9522)
  - Dont use $info as array when its not an array (server#9525)
  - Improve OAuth (server#9540)
  - Bump theming version for extraordinary release (server#9547)
  - Fix translation bug on lost password page (server#9548)
  - Cleanup locks in scanner on error (server#9566)
  - Bump version for theming again ? (server#9573)
  - Make sure force language is reflected in html lang attribute
    (server#9579)
  - Add privacy link to theming and fix scrollbars (server#9586)
  - Fix settings menu (server#9590)
  - Handle exception while itterating trough smb file listing
    (server#9608)
  - Send invitations for shared calendars (server#9610)
  - Regenerate session id after public share auth (server#9619)
  - Emit event when running ./occ db:add-missing-indices
    (server#9620)
  - Add PHP missing message to index.php (server#9621)
  - Delete the previews when a version is restored (server#9622)
  - Limit Sinon version to 5.0.7 at most (server#9629)
  - Prepare another theming release including translations for
    recently added imprint and privacy policy strings
    (server#9647)
  - Dont open the file on dav HEAD request (server#9649)
  - Fix(AmazonS3): fix loop $result['Contents'] error
    (server#9650)
  - Fix undefined variables (server#9651)
  - Add search category icon (server#9652)
  - Fix "Invalid argument supplied for foreach()" (server#9654)
  - Do not load calendar/addressbook plugins if not needed
    (server#9655)
  - Make LargeFileHelper.php faster by avoiding execs as much as
    possible (server#9656)
  - Improve error reporting and move format parameter to the
    options (server#9657)
  - The OAuth endpoint needs to support Basic Auth (server#9659)
  - LDAP password renewal fixes (server#9661)
  - Check user state when fetching to avoid dealing with offline
    objects (server#9662)
  - Make sure the file is readable before attempting to create
    a preview (server#9668)
  - Fix drone mysqlmb4 tests (server#9672)
  - Make sure the log doesn't try to read from PUT if it can't
    (server#9694)
  - Allow admins to override FreeBusy capabilities without
    modifying ShareAPI capabilities (server#9707)
  - Fix the unit tests (server#9712)
  - Fix header nav (server#9727)
  - Fix local users check in contacts menu (server#9732)
  - Don't open the file when handling HEAD requests (3rdparty#99)
  - Do not sanitize markdown output twice (files_texteditor#101)</changelog>
  <changelog author="ecsos@opensuse.org" date="1528718400">- update to 13.0.4
  - Allow setting notify credentials in environment (server#9788)
  - Make the token expiration also work for autocasting 0
    (server#9803)
  - Enable caldav for webdav subtree public-calendars (server#9820)
- This also fix security issues:
  - (boo#1100343, CVE-2018-3762) and (boo#1100344, CVE-2018-3761)</changelog>
</package>
<package pkgid="6a367f659071f539db2b71094b2b06b62c610988947e942a6d0166df9c715cc0" name="nextcloud" arch="noarch">
  <version epoch="0" ver="13.0.5" rel="lp150.2.6.1"/>
  <changelog author="ecsos@opensuse.org" date="1485172800">- upstream update to version 11.0.1</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1485518400">- Add php-openssl dependency</changelog>
  <changelog author="ecsos@opensuse.org" date="1488283200">- upstream update to version 11.0.2
  * Server
  - Use login name to fix password confirm with ldap users
    (server/2953)
  - Change the row-format before changing the collation
    (server/3063)
  - Generate correct path for owner and use the display name
    (server/3080)
  - Markdown support for app descriptions (server/3117)
  - Fix style in comment (server/3143)
  - Escape the name for the jquery selector (server/3138)
  - Define spreed calls (server/3115)
  - LDAP Backend OCS Api (server/3213)
  - Fix Sharing app description (server/3397)
  - Fix shared-as-busy events for owner (server/3363)
  - Use correct theming when returning the defaults (server/3399)
  - Filter out sensitive appconfig values (server/3400)
  - Add transifex config for sharebymail (server/3423)
  - Update the email in the accounts table as well (server/3411)
  - Don't log the password on confirmPassword when LDAP throws an
    exception (server/3414)
  - Make sure ownCloud 8.2 activities also can get displayed
    (server/3412)
  - Popovermenu backport (server/3286)
  - Set vendor during install (server/3426)
  - Make sure the file information is available when sending the
    email (server/3433)
  - Add profile data to provisioning api (server/3259)
  - Fix detection of the new iOS app (server/3431)
  - Add integration tests for legacy DAV endpoints (server/3445)
  - Make sure invalid images don't flood the log file
    (server/3440)
  - Fix printing backup code (server/3510)
  - Fix cookie name (nctoken instead of octoken) (server/3511)
  - LDAP's checkPassword should only catch when a user was not
    found (server/3493)
  - Return unknown free space from nullstorage (server/3508)
  - Fix for address book data lost when any user receiving a
    share is deleted (server/3499)
  - Rename database password toggle (server/3500)
  - Popovermenu files css fix (server/3494)
  - Add screensharing icon (server/3481)
  - Fix misleading wording: searching is affected, not user
    access (server/3560)
  - Backport of Fix Broken UUID Attribute Detection (server/3528)
  * Activity
  - Make sure integer like names are still strings (activity/103)
  - Fix activities for public uploads (activity/113)
  - Show the parent as target when the file was not renamed
    (activity/114)
  - Fix activities for "Files drop" on external storages
    (activity/118)
  * SAML &amp; SSO
  - Setup account later (user_saml/79)
  * Serverinfo
  - Fix SQL syntax error on MariaDB 10.0.27 and 10.1.19
    (serverinfo/77)
  - Don't throw an error when /proc/meminfo is not readable
    (serverinfo/76)
  * Survey_Client
  - Fix problem when checking size with dash in DB name
    (survey_client/50)</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove empty %postun and redundant %clean.
- Ensure summary/description is neutral.</changelog>
  <changelog author="adamradovits12@hotmail.com" date="1493035200">- upstream update to version 11.0.3
  * Server
  - Use the correct principal for shared addressbooks
  (server/3608)
  - Fix saving backup codes by using a correct data uri
  (server/3652)
  - Update icewind/streams to 0.5.2 (server/32931)
  - Fix string comparison and return docs (server/3665)
  - Typecast shared mount's storage_id to int as documented
    + some refactor to avoid similar bugs (server/3658)
  - Use a proper date format for transfer ownership
  (server/3700)
  - DAV sharing permissions should not depend on the order
  (server/3722)
  - Add new user agent of windows 10 dav backend
  (server/37641)
  - Add back appstoreenabled config switch (server/37671)
  - Call right function after sudo mode (server/3820)
  - Dont allow empty wildcard search (server/3842)
  - Remove single quotes around search query like in
  user search (server/3849)
  - Fix mimetype detection on public uploads for the
  workflow engine (server/3765)
  - Fix branding and show Nextcloud (server/39691)
  - Fix reshare with user activity message (server/39812)
  - Create correct VCard and return correct error codes
  (server/4029)
  - Prevent migration from ownCloud 10 to Nextcloud 11
  (server/34151)
  - Make sure transparency is an integer when saving a
  calendar (server/4167)
  - Make public links work with master key (server/42071)
  - Don't try to render the avatars if avatars are
  disabled (server/4214)
  - Reduce error message text (server/42281)
  - Don't list on public calendar endpoints (server/4229)
  - Fix upload of folders in Chrome (server/4154)
  - Make sure blob columns are correctly converted as
  parameters (server/4233)
  - Save the scope of an auth token in the session
  (server/4225)
  - Take share by mail into consideration if we calculate
  the access list (server/4242)
  - Also add the root of external storages to the file id
  list (server/4237)
  - Fix LDAP description (server/42382)
  - Remove the double password confirmation on changing
  cron (server/4236)
  - Fix scheduling plugin on legacy caldav endpoint
  (server/4235)
  - Directly fix invalid values of DTEND and DTSTART
  (server/4234)
  - Make JobList::next() lock free (server/4254)
  - Don't remove owner property for public calendars
  (server/4272)
  - Add capabilities for share by mail (server/42511)
  - Dont use the permissions mask while scanning
  (server/4278)
  - Add missing maintenance plugin to new DAV endpoint
  (server/4290)
  - Fix bug with shared_by for own calendars if shared
  (server/4301)
  - Translation string corrected &gt; 1 user (server/4377)
  * Activity
  - Fix activities for "Files drop" on external storages
  (activity/118)
  * User_SAML
  - Bump to php-saml 2.10.5 (user_saml/1001)
  * Logreader
  - Small screen layout improvements
  (logreader/2bcd915969386ceb77c7f91dfd5fc19fd3212346
  - Fix log filtering
  (logreader/4095dfc62dcceb3c59a3f581baa5589737d0e6f3)
  - Greatly speedup log iteration
  (logreader/71a4c6849641f821e80d96674c57a69fe7a8aa9e)
  - Search more rows
  (logreader/b9d00b5599ac8a76862895266f1c23096391aad8)
  - Stop iterating if we dont have a valid file handle
  (logreader/a87a8e653ecae5efef6342e645b98f2878219c87)
  - Don't return a LogIterator on a broken handle
  (logreader/39069108f99d463b1cb8bc944f3ef24324b9f43d)
  - More robust log iteration
  (logreader/c0eb04d55bf1dee94ef523dae0e3b0e6afc272a6)
  - Use proper iso date format
  (logreader/13a31181a6d72d084797a71f49f2c5edee8c8dae)
  - Automatically try to fix some common escape errors from
  copy-pasted log entries
  (logreader/031db2a7f9b9f8cee42acf6eae7d993d31d4660a)
  - Fix stack trace parsing of incorrectly escaped logentries
  (logreader/538667770edfdd48374ef33e9c15498ed98ece60)
  - Highlight entries from the same request when clicking
  on an entry
  (logreader/2d1ccd0e4cca32220fcbe0b4d79d1cd23f0e73a5)
  - Fix copy paste info searchfield
  (logreader/0e91b2f46649a720feb7c3b6b8266b8657db5574)
  - Fix reset search after 0 results
  (logreader/50bec8ecf7edd81cfb96a35089283c0d879b41f3)
  - Allow searching for requestId and user
  (logreader/7f84e55bb4a1e4086ab0918a6bf58ad3885bbd91)
  - Allow searching in url
  (logreader/7833d97cf85fd351d2f7550d67d21bd0c2a815f4)
  - Fix infinite scroll
  (logreader/cbe874c6c068b9156ad8456edf31d112da40cbc9)
  - Dont show loading indicator if we already have entries
  (logreader/d26a08dc0540126177e8d20c3e243b44c5a399c4)
  * Gallery
  - Fix upload after core changes
  (gallery/b4ac4429841cfe2b7ea260dfb37fcde25580143c2)
  - Update JavaScript libraries (gallery/247)</changelog>
  <changelog author="ecsos@opensuse.org" date="1493380800">- fix boo#1036756: package security issue</changelog>
  <changelog author="ecsos@opensuse.org" date="1495454400">- upstream update to version 12.0.0
  no changelog from upstream at this time
  See https://github.com/nextcloud/server/issues?q=is%3Aissue+milestone%3A%22Nextcloud+12.0%22+is%3Aclosed</changelog>
  <changelog author="ecsos@opensuse.org" date="1500292800">- unneeded git-files should not be remove,
  otherwise it throw integrity check failure in some situations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1502366400">- upstream update to version 12.0.1
  So many changes. See https://nextcloud.com/changelog/#latest12</changelog>
  <changelog author="ecsos@opensuse.org" date="1502798400">- upstream update to version 12.0.2
  * Server
  - Minor bugfix release</changelog>
  <changelog author="ecsos@opensuse.org" date="1505822400">- upstream update to version 12.0.3
  Nextcloud 12.0.3 delivers a lot of enhancements in various areas
  including:
  - A number of improvements to email notification templates
  - 2FA enhancements
  - Smarter LDAP password handling
  - File Drop and upload-in-general updates
  - A performance improvement handling large files
  See https://nextcloud.com/changelog/#latest12
  Details: https://github.com/nextcloud/server/pulls?q=is%3Apr+milestone%3A%22Nextcloud+12.0.3%22+is%3Aclosed</changelog>
  <changelog author="ecsos@opensuse.org" date="1512388800">- upstream update to version 12.0.4
  * Server
    Over 50 fixes were merged in the server.
  - Improve text: 'you have now' -&gt; 'you now have (server#6464)
  - Fix initializing paged search under some circumstances
    (server#6502)
  - LDAP: simplify returning the homePath (server#6509)
  - Fix sharer name overlap with filename (server#6524)
  - Allow to close sidebar for text files (server#6525)
  - Fix quota new endpoint 12 (server#6527)
  - Pass new value to triggerChange (server#6528)
  - Throw 101 when an empty group string is provided
    (server#6547)
  - Contacts menu privacy (server#6554)
  - Add color-border variable (server#6649)
  - Do not stop on scss compilation failure (server#6661)
  - Don't pass User object when uid string is expected
    (server#6674)
  - Navigate to the root directory when showing the main filelist
    (server#6689)
  - Fix LDAP User deletion (cleanup) (server#6699)
  - Update aws sdk + s3 improvements (server#6737)
  - Dont run invalid path repair step when upgrading
    from 11.0.5.2 and later (server#6743)
  - Fix language when trying to change password (server#6751)
  - Fix postgresql tests (server#6792)
  - Also use configured 'cache_path' for new chunking
    (server#6814)
  - Set s3 part size to 500mb (server#6815)
  - Fix contacts menu for IE11 (server#6823)
  - Still trigger conflict resolution for existing entries when
    the curre (server#6847)
  - Propagate multipart upload exception when aborting upload
    (server#6855)
  - Allow to migrate from 10.0.3.3 (server#6878)
  - Timespan check (server#6896)
  - Do not log WebDAV maintenance mode exception (server#6908)
  - Don't reset quota (server#6910)
  - Backport of translation string fixes (server#6935)
  - Fix class name in exception logger plugin (server#6942)
  - Allow quota of 0 again (server#6943)
  - Fix uninitialized variable $this-&gt;params (server#6944)
  - Don't add a LIKE condition when it's not needed (server#6945)
  - Fix undefined offset warning when using '/' as external
    storage root (server#6946)
  - Fix page title not changed (server#6987)
  - Better readability for text on log in page which is directly
    on backgrounds (server#7028)
  - Translate Grant Access (server#7040)
  - Use fopen directly when reading objects from s3 (server#7079)
  - Improve mimetype detection for object storages (server#7081)
  - Fix seeking on object storage (server#7082)
  - Hide spinner for initial install (server#7095)
  - Ensure uid for calendar objects is unique (server#7096)
  - Revert "Only allow colons in db host for IPv6 addresses
    (server#7102)
  - Theme flow redirection page (server#7114)
  - Fix icon for security settings (server#7116)
  - If for some reason the json can't be decoded it is not cached
    (server#7118)
  - Improve performance of UserMountCache with external storage
    folders (server#7120)
  - {J,CS}SResourceLocator: account for symlinks in app path
    (server#7170)
  - Fix s3 download and touch (server#7186)
  - Touch opertation on object storage, don't create
    the file cache entry to early (server#7207)
  - Allow migration from upcoming 10.0.4 ownCloud release
    (server#7245)
  - CSSResourceLocator: handle SCSS in apps outside root
    (server#7257)
  - only replace permission popupmenu (server#7259)
  - Fix accesslist when a user has an ID only containting 0-9
    (server#7262)
  - Update CRL due to files_frommail (server#7277)
  - Only in case of $currentAccess the array uses the id as index
    (server#7328)
  * Other
  - Add aws sdk (3rdparty#69)
  - Don't send emails to disabled users (activity#202)
  - Add an option to disable emails completly (activity#206)
  - Make sure the mountPoint property is public before using it
    (files_accesscontrol#79)
  - Allow to playback m4v files (files_videoplayer#43)
  - Fix notifications order (notifications#93)</changelog>
  <changelog author="ecsos@opensuse.org" date="1513684800">- Nextcloud 12 is not compatible with php ? 7.2,
  so php &lt; 7.2 is needed.</changelog>
  <changelog author="ecsos@opensuse.org" date="1516795200">- update to 12.0.5
  Many fixes were merged, the most important ones include:
  - #7144 Unlock files even if an exception occurs
  - #7322 Set primary action button color to same as theming color
  - #7323 Use the correct root for shared jail when the source
    storage is also a jail
  - #7353 Fix translation of federation scope menu
  - #7362 Allow to skip data dir permission checks
  - #7407 Check if owner of share exists
  - #7409 Add retry wrapper when reading files from swift
  - #7451 Fix constructor spy in unit test with Sinon 4.1.3
  - #7455 Remove wrong entry in admin_settings that causes 500
  - #7456 CardDAV convertor check should not be to wide
  - #7457 Fix loading icon position in the app menu
  - #7464 Allow getting the filepath when getting cached mounts
  - #7468 Allow 'Nextcloud' in the user agent string of Android
  - #7558 Fix email buttons for white theme
  - #7567 Respect sharing options when searching for Sharees
  - #7568 Fix duplicate session token after remembered login
  - #7577 Check userExists later,
    saves lookups for appData_INSTANCEID userids
  - #7672 Added additional methods for removal of sensitive info
  - #7688 Fix scss webroot and url rewrite
  - #7717 Throw ServerNotAvailableException when LDAP is caught
    shutting down
  - #7666 Fix drag shadow not visible when dragging a file on
    a narrow screen
  - #7674 Do no run SyncJob in cron
  - #7684 Fix inverted app icons on IE11
  - #7694 Don't attempt to translate login names to uids when uids
    are provided
  - #7708 Don't show recurring msg when pages result was turned off
  - #7742 Hide favourite icon in details view if favourite action
    is not available
  - #7745 Don't lie about preview types
  - #7747 Update of composer
  - #7758 add option to use legacy v2 auth with s3
  - #7759 Use correct L10N files for jsconfig
  - #7757 Wait for the shared link to be set in the acceptance
    tests
  - gallery/#349 Fix date picker not visible in slideshow sharing
    dialog
  - activity/#229 Properly construct path of root on file rename
  - #7770 Fix SCSS processing when undoing theming values
  - #7774 Update icewind/smb to 2.0.3
  - #7777 Set height for sidebar icons
  - #7779 Improve zip support
  - #7786 Return correct mount type for federated shares
  - #7792 Fix empty details view after renaming a file
  - #7817 Fix preview when theming changes invertion of icons
  - #7821 Log full exception in cron instead of only the message
  - #7888 Keep all shipped apps enabled because they should be okay
  - #7962 update icewind/smb to 2.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1517918400">- update to 13.0.0
  Over 1100 changes were merged in the server, with many hundreds
  more in existing or new apps. The main improvements include:
  * Collaboration features
  - Nextcloud Talk, a private videoconference software integrated
    with Nextcloud
  - real-time and asynchronous communication with push
    notifications, calls and chat web and mobile devices
  - Integration in business workflow with calendar invitations
    and calls directly from Nextcloud Files
  - Screen and note sharing with participant moderation
    capabilities
  - 100% secure peer-to-peer, end-to-end encrypted calls,
    mediated by self-hosted server
  - auto-completion of user names in comments and notification
    to the mentioned user
  - support free/busy scheduling in native calendar applications
    like Thunderbird Lightning
  - show meeting invites in the calendar
  * End-to-End Encryption
  - can encrypt data on a per-folder level rather than
    all-or-nothing approach
  - does not require users to remember or exchange passwords
  - does not require re-uploading data upon sharing
  - features an optional off-line administrator recovery key
  - allows full audit logging
  - can be combined with our File Access Control feature so
    administrator can enforce aspects of End-to-end Encryption
  - protects from identity theft with our Cryptographic Identity
    Protection feature
    This feature is in Tech Preview for Nextcloud 13 and does not
    yet implement sharing.
  * User Interface
  - new way of selecting files
  - easy way to quickly copy or move to a location
  - High DPI support
  - admin menu integrated in one list
  - no limitation to file uploads via the web interface
  - user quota in the side bar
  - social sharing (Twitter, G+, Facebook, Diaspora) now features
    a preview
  - improved theming
  * Performance
  - decreased page load times with up to 50% and faster search
  - 80% faster LDAP and up to 10x faster external storage
  - Server-side Encryption performance largely improved
  See https://nextcloud.com/changelog/</changelog>
  <changelog author="ecsos@opensuse.org" date="1521115200">- update to 13.0.1
  - Dont polute the log on DAV emaillogin (server#8045)
  - Don't perform CSRF check on OCS routes with Bearer auth
    (server#8099)
  - Use S3Client::upload instead of splitting single/multipart
    upload ourselves (server#8102)
  - Remove old perl script to update l10n files (server#8145)
  - Scss hardening (server#8156)
  - Do not try to get the jailed path if we can't find the id
    (server#8177)
  - Handle SSL certificate verifications for others than
    Let's Encrypt (server#8183)
  - Use a phan version instead of master (server#8195)
  - Repair step to clear frontend related caches (server#8197)
  - Keep previous exception when transforming to dav exception
    (server#8228)
  - Actually return stream from swift (server#8250)
  - Remove invalid link to documentation (server#8253)
  - Fix deleting folders when using s3 external storage
    (server#8261)
  - Link to NC13 dev manual (server#8264)
  - Better result handling of email search (server#8267)
  - Update CRL to revoke files_rightclick (server#8271)
  - Fix styling issues of guest pages #8155 (server#8286)
  - Remove jquery ui background image (server#8287)
  - Show open graph preview in WhatsApp (server#8309)
  - Make acceptance tests for comments more consistent with the
    others (server#8395)
  - Fix edit tag textbox size (server#8407)
  - Use TTF fonts for avatar generation (server#8440)
  - Use mb_* string methods to extract first character for
    generated avatars (server#8470)
  - Show hint in OCS API for user creation (server#8515)
  - Fix hiding and event propagation issues with the user
    management popover (server#8517)
  - Add some whitespace around change.svg icon (server#8518)
  - Avoid fruitless login attempts (server#8532)
  - Fix retrieval of group members with numerical uids from LDAP
    (server#8536)
  - Theming: handle not being in the serverroot (server#8554)
  - Ext storage error warning (server#8561)
  - Set autocomplete=new-password for mail share password
    (server#8577)
  - Fix upload button visible on read-only folders (server#8595)
  - Fixed app navigation for IE11 (server#8609)
  - Fix breadcrumbs width calculation (server#8610)
  - Fix comments (and systemtags) when involving users with
    numerical ids (server#8615)
  - Update commentstabview.js (server#8621)
  - Properly encapsulate require_once for app.php (server#8631)
  - AppData hardening (server#8636)
  - Use hash algo that's robust against collisions (server#8654)
  - Fixed date/time picker on IE11 (server#8663)
  - Use a more widely available method to test s3 settings
    (server#8667)
  - Use proper lanugage in langauge code (server#8668)
  - Display the proper language strings in setttings (server#8669)
  - Do not create empty userid when attribute does not have allowed
    chars (server#8673)
  - Remove too restrict check for background image/color
    (server#8675)
  - Fix example regex for user agent matching (server#8676)
  - Generate different UIDs for Birthday, Anniversary and Death
    event (server#8678)
  - Don't use double quotes in MySQL queries (server#8680)
  - Log exceptions that happen when writing the app store reply
    to storage (server#8683)
  - Set the correct active navigation entry (server#8685)
  - Fix activities for end2end encryption (server#8686)
  - Filter out the current user when searching for emails too
    (server#8687)
  - Fix check if theming defaults instance is available
    (server#8688)
  - Fix undefined index problem (server#8693)
  - Disable part files for object stores (server#8725)
  - Better handling of invisible elements in acceptance tests
    (server#8738)
  - Remove base url from global cache prefix (server#8745)
  - Check if the cached js file exists (server#8746)
  - Sharee email matches not limited (server#8749)
  - Fix integer overflow in ChunkingPlugin (server#8752)
  - Revert wording back to updates (server#8755)
  - Add acceptance tests for permissions on public shared folders
    (server#8758)
  - Also send file emails in ASAP mode (activity#249)
  - Ensure userids are strings (activity#252)
  - Null coalescing operator is PHP7+ (activity#254)
  - Update PDF.js to 1.9.426 (files_pdfviewer#55)
  - Enable full screen mode for PDF files (files_pdfviewer#59)
  - Fix ACE module files failing to load (files_texteditor#83)
  - Do not keep FileInfoModels returned by "getModelForFile"
    (files_texteditor#89)
  - Fix share drop down in gallery not properly shown (gallery#394)
  - Fix gallery button hidden in folders without create permission
    (gallery#402)
  - Fix controls position in gallery layout (gallery#405)
  - Removed old code already present thanks to the files app
    (gallery#406)
  - Create "file app" public share links if the slideshow is
    opened from ... (gallery#407)
  - Allow to check against haveibeenpwned.com password list
    (password_policy#61)</changelog>
  <changelog author="ecsos@opensuse.org" date="1524744000">- update to 13.0.2
  - Show group display names (server#8779)
  - Group existence check works without attribute (like with users)
    (server#8849)
  - The FN is optional, carrying the displayname if present
    (server#8900)
  - Set "share with" field to the ID of the circle (server#8905)
  - Show EOL warning in the update section (server#8986)
  - Use app version to generate scss filename (server#9015)
  - Update icewind/smb to 2.0.5 (server#9017)
  - Fix search text overlapping close button (server#9019)
  - Clear any theming prefixed cache on cache buster increase
    (server#9020)
  - Reset encryptionVersion to '1' if a file was stream copied
    (server#9064)
  - Do not treat is-encrypted as custom property (server#9071)
  - Fix proper permissions for multiple file access (server#9072)
  - When formatting a share node an Empty target is invalid
    (server#9073)
  - Move on with the next user if we found the user on one user
    back-end (server#9077)
  - Allow usage of Windows 10 WebDav Netdrive (server#9089)
  - Add more logging for the object storage during creation of the
    buckets (server#9094)
  - Do not convert email addresses with idn_to_ascii if?
    (server#9095)
  - Fix progress bar hidden before the upload ends (server#9124)
  - Update CRL to include old quicknotes cert (server#9213)
  - Fix user selectable text for public links for text files
    (server#9230)
  - Provide an option to disable HTML emails (server#9231)
  - Fix appinfo parsing when a single localized option is provided
    (server#9233)
  - Use multibyte substring (server#9234)
  - Fix webdav support for OneNote clients (server#9236)
  - Fixed files copy/move when in favorites or recent section
    (server#9238)
  - Don't update personal settings for admins (activity#262)
  - Skip parameters which are not there instead of failing out
    (activity#265)
  - Bump version 13 (files_pdfviewer#64)
  - Fix info.xml (files_pdfviewer#66)
  - No default enable (files_pdfviewer#67)
  - Fix position of icons in "Share with" input field (gallery#418)
  - Fix "No results found" tooltip (gallery#419)
  - Fix UI while a share is being added (gallery#420)
  - Hide "No results found" tooltip on autocompletion (gallery#424)
  - Fix error while clicking on the share link checkbox
    (gallery#430)</changelog>
  <changelog author="ecsos@opensuse.org" date="1528372800">- update to 13.0.3
  - Backport various scss fixes #8777 (server#9259)
  - Fix ellipsis in filename column (server#9344)
  - Replace deprecated sinon reset() call with resetHistory()
    (server#9358)
  - Issue #9318: catch exceptions in SCSSCacher::resetCache()
    (server#9377)
  - Log lock state on conflict (server#9389)
  - Remove unneeded locks in getCacheEntry (server#9391)
  - Only allow a single concurrent dav write to a file
    (server#9392)
  - Workflow rules error when changing operation (server#9409)
  - Fix jsunit tests (server#9430)
  - Allow IPv6 database host (server#9432)
  - Add labels for Contacts menu and Settings (server#9433)
  - Get correct version of an app (server#9436)
  - Fix ids of permission checkboxes for shares (server#9453)
  - Fix race condition when preparing upload folder (server#9454)
  - Allow to specify a link to a legal notice (server#9516)
  - Fix for unbound cloned LDAP connections (server#9522)
  - Dont use $info as array when its not an array (server#9525)
  - Improve OAuth (server#9540)
  - Bump theming version for extraordinary release (server#9547)
  - Fix translation bug on lost password page (server#9548)
  - Cleanup locks in scanner on error (server#9566)
  - Bump version for theming again ? (server#9573)
  - Make sure force language is reflected in html lang attribute
    (server#9579)
  - Add privacy link to theming and fix scrollbars (server#9586)
  - Fix settings menu (server#9590)
  - Handle exception while itterating trough smb file listing
    (server#9608)
  - Send invitations for shared calendars (server#9610)
  - Regenerate session id after public share auth (server#9619)
  - Emit event when running ./occ db:add-missing-indices
    (server#9620)
  - Add PHP missing message to index.php (server#9621)
  - Delete the previews when a version is restored (server#9622)
  - Limit Sinon version to 5.0.7 at most (server#9629)
  - Prepare another theming release including translations for
    recently added imprint and privacy policy strings
    (server#9647)
  - Dont open the file on dav HEAD request (server#9649)
  - Fix(AmazonS3): fix loop $result['Contents'] error
    (server#9650)
  - Fix undefined variables (server#9651)
  - Add search category icon (server#9652)
  - Fix "Invalid argument supplied for foreach()" (server#9654)
  - Do not load calendar/addressbook plugins if not needed
    (server#9655)
  - Make LargeFileHelper.php faster by avoiding execs as much as
    possible (server#9656)
  - Improve error reporting and move format parameter to the
    options (server#9657)
  - The OAuth endpoint needs to support Basic Auth (server#9659)
  - LDAP password renewal fixes (server#9661)
  - Check user state when fetching to avoid dealing with offline
    objects (server#9662)
  - Make sure the file is readable before attempting to create
    a preview (server#9668)
  - Fix drone mysqlmb4 tests (server#9672)
  - Make sure the log doesn't try to read from PUT if it can't
    (server#9694)
  - Allow admins to override FreeBusy capabilities without
    modifying ShareAPI capabilities (server#9707)
  - Fix the unit tests (server#9712)
  - Fix header nav (server#9727)
  - Fix local users check in contacts menu (server#9732)
  - Don't open the file when handling HEAD requests (3rdparty#99)
  - Do not sanitize markdown output twice (files_texteditor#101)</changelog>
  <changelog author="ecsos@opensuse.org" date="1528718400">- update to 13.0.4
  - Allow setting notify credentials in environment (server#9788)
  - Make the token expiration also work for autocasting 0
    (server#9803)
  - Enable caldav for webdav subtree public-calendars (server#9820)
- This also fix security issues:
  - (boo#1100343, CVE-2018-3762) and (boo#1100344, CVE-2018-3761)</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1532433600">- update to 13.0.5
  - Fix highlighting of the upload drop zone (server#9837)
  - Apply ldapUserFilter on members of group (server#9839)
  - Make the DELETION of groups match greedy on the groupID (server#9841)
  - Add parent index to share table (server#9843)
  - Log full exception in cron instead of only the message (server#9958)
  - Properly lock the target file on dav upload when not using part files (server#9986)
  - LDAP backup server should not be queried when auth fails (server#10032)
  - Fix filenames in sharing integration tests (server#10044)
  - Lower log level for quota manipulation cases (server#10076)
  - Let user set avatar in nextcloud if LDAP provides invalid image data (server#10089)
  - Improved logging of smb connection errors (server#10093)
  - Allow admin to disable fetching of avatars as well as a specific attribute (server#10115)
  - Allow to disable encryption (server#10121)
  - Update message shown when unsharing a file (server#10164)
  - Fixed English grammatical error on Settings page. (server#10165)
  - Request a valid property for DAV opendir (server#10169)
  - Allow updating the token on session regeneration (server#10170)
  - Prevent lock values from going negative with memcache backend (server#10180)
  - Correctly handle users with numeric user ids (server#10185)
  - Correctly parse the subject parameters for link (un)shares of calendars (server#10188)
  - Fix "parsing" of email-addresses in comments and chat messages (server#10189)
  - Sanitize parameters in createSessionToken() while logging (server#10195)
  - Also retry rename operation on InvalidArgumentException (server#10201)
  - Improve url detection in comments (server#10202)
  - Only bind to ldap if configuration for the first server is set (server#10233)
  - Use download manager from PDF.js to download the file (files_pdfviewer#84)
  - Fix trying to load removed scripts (files_pdfviewer#87)
  - Only pull for new messages if the session is allowed to be kept alive (notifications#138)
  - Always push object data (notifications#139)
  - Add prioritization for Talk (notifications#140)</changelog>
</package>
<package pkgid="72abd98aaee5151599edca0edde5302a9f71383cf03c167e31fcec1c5a893f69" name="nextcloud" arch="src">
  <version epoch="0" ver="13.0.5" rel="lp150.2.6.1"/>
  <changelog author="ecsos@opensuse.org" date="1485172800">- upstream update to version 11.0.1</changelog>
  <changelog author="guoyunhebrave@gmail.com" date="1485518400">- Add php-openssl dependency</changelog>
  <changelog author="ecsos@opensuse.org" date="1488283200">- upstream update to version 11.0.2
  * Server
  - Use login name to fix password confirm with ldap users
    (server/2953)
  - Change the row-format before changing the collation
    (server/3063)
  - Generate correct path for owner and use the display name
    (server/3080)
  - Markdown support for app descriptions (server/3117)
  - Fix style in comment (server/3143)
  - Escape the name for the jquery selector (server/3138)
  - Define spreed calls (server/3115)
  - LDAP Backend OCS Api (server/3213)
  - Fix Sharing app description (server/3397)
  - Fix shared-as-busy events for owner (server/3363)
  - Use correct theming when returning the defaults (server/3399)
  - Filter out sensitive appconfig values (server/3400)
  - Add transifex config for sharebymail (server/3423)
  - Update the email in the accounts table as well (server/3411)
  - Don't log the password on confirmPassword when LDAP throws an
    exception (server/3414)
  - Make sure ownCloud 8.2 activities also can get displayed
    (server/3412)
  - Popovermenu backport (server/3286)
  - Set vendor during install (server/3426)
  - Make sure the file information is available when sending the
    email (server/3433)
  - Add profile data to provisioning api (server/3259)
  - Fix detection of the new iOS app (server/3431)
  - Add integration tests for legacy DAV endpoints (server/3445)
  - Make sure invalid images don't flood the log file
    (server/3440)
  - Fix printing backup code (server/3510)
  - Fix cookie name (nctoken instead of octoken) (server/3511)
  - LDAP's checkPassword should only catch when a user was not
    found (server/3493)
  - Return unknown free space from nullstorage (server/3508)
  - Fix for address book data lost when any user receiving a
    share is deleted (server/3499)
  - Rename database password toggle (server/3500)
  - Popovermenu files css fix (server/3494)
  - Add screensharing icon (server/3481)
  - Fix misleading wording: searching is affected, not user
    access (server/3560)
  - Backport of Fix Broken UUID Attribute Detection (server/3528)
  * Activity
  - Make sure integer like names are still strings (activity/103)
  - Fix activities for public uploads (activity/113)
  - Show the parent as target when the file was not renamed
    (activity/114)
  - Fix activities for "Files drop" on external storages
    (activity/118)
  * SAML &amp; SSO
  - Setup account later (user_saml/79)
  * Serverinfo
  - Fix SQL syntax error on MariaDB 10.0.27 and 10.1.19
    (serverinfo/77)
  - Don't throw an error when /proc/meminfo is not readable
    (serverinfo/76)
  * Survey_Client
  - Fix problem when checking size with dash in DB name
    (survey_client/50)</changelog>
  <changelog author="jengelh@inai.de" date="1488456000">- Remove empty %postun and redundant %clean.
- Ensure summary/description is neutral.</changelog>
  <changelog author="adamradovits12@hotmail.com" date="1493035200">- upstream update to version 11.0.3
  * Server
  - Use the correct principal for shared addressbooks
  (server/3608)
  - Fix saving backup codes by using a correct data uri
  (server/3652)
  - Update icewind/streams to 0.5.2 (server/32931)
  - Fix string comparison and return docs (server/3665)
  - Typecast shared mount's storage_id to int as documented
    + some refactor to avoid similar bugs (server/3658)
  - Use a proper date format for transfer ownership
  (server/3700)
  - DAV sharing permissions should not depend on the order
  (server/3722)
  - Add new user agent of windows 10 dav backend
  (server/37641)
  - Add back appstoreenabled config switch (server/37671)
  - Call right function after sudo mode (server/3820)
  - Dont allow empty wildcard search (server/3842)
  - Remove single quotes around search query like in
  user search (server/3849)
  - Fix mimetype detection on public uploads for the
  workflow engine (server/3765)
  - Fix branding and show Nextcloud (server/39691)
  - Fix reshare with user activity message (server/39812)
  - Create correct VCard and return correct error codes
  (server/4029)
  - Prevent migration from ownCloud 10 to Nextcloud 11
  (server/34151)
  - Make sure transparency is an integer when saving a
  calendar (server/4167)
  - Make public links work with master key (server/42071)
  - Don't try to render the avatars if avatars are
  disabled (server/4214)
  - Reduce error message text (server/42281)
  - Don't list on public calendar endpoints (server/4229)
  - Fix upload of folders in Chrome (server/4154)
  - Make sure blob columns are correctly converted as
  parameters (server/4233)
  - Save the scope of an auth token in the session
  (server/4225)
  - Take share by mail into consideration if we calculate
  the access list (server/4242)
  - Also add the root of external storages to the file id
  list (server/4237)
  - Fix LDAP description (server/42382)
  - Remove the double password confirmation on changing
  cron (server/4236)
  - Fix scheduling plugin on legacy caldav endpoint
  (server/4235)
  - Directly fix invalid values of DTEND and DTSTART
  (server/4234)
  - Make JobList::next() lock free (server/4254)
  - Don't remove owner property for public calendars
  (server/4272)
  - Add capabilities for share by mail (server/42511)
  - Dont use the permissions mask while scanning
  (server/4278)
  - Add missing maintenance plugin to new DAV endpoint
  (server/4290)
  - Fix bug with shared_by for own calendars if shared
  (server/4301)
  - Translation string corrected &gt; 1 user (server/4377)
  * Activity
  - Fix activities for "Files drop" on external storages
  (activity/118)
  * User_SAML
  - Bump to php-saml 2.10.5 (user_saml/1001)
  * Logreader
  - Small screen layout improvements
  (logreader/2bcd915969386ceb77c7f91dfd5fc19fd3212346
  - Fix log filtering
  (logreader/4095dfc62dcceb3c59a3f581baa5589737d0e6f3)
  - Greatly speedup log iteration
  (logreader/71a4c6849641f821e80d96674c57a69fe7a8aa9e)
  - Search more rows
  (logreader/b9d00b5599ac8a76862895266f1c23096391aad8)
  - Stop iterating if we dont have a valid file handle
  (logreader/a87a8e653ecae5efef6342e645b98f2878219c87)
  - Don't return a LogIterator on a broken handle
  (logreader/39069108f99d463b1cb8bc944f3ef24324b9f43d)
  - More robust log iteration
  (logreader/c0eb04d55bf1dee94ef523dae0e3b0e6afc272a6)
  - Use proper iso date format
  (logreader/13a31181a6d72d084797a71f49f2c5edee8c8dae)
  - Automatically try to fix some common escape errors from
  copy-pasted log entries
  (logreader/031db2a7f9b9f8cee42acf6eae7d993d31d4660a)
  - Fix stack trace parsing of incorrectly escaped logentries
  (logreader/538667770edfdd48374ef33e9c15498ed98ece60)
  - Highlight entries from the same request when clicking
  on an entry
  (logreader/2d1ccd0e4cca32220fcbe0b4d79d1cd23f0e73a5)
  - Fix copy paste info searchfield
  (logreader/0e91b2f46649a720feb7c3b6b8266b8657db5574)
  - Fix reset search after 0 results
  (logreader/50bec8ecf7edd81cfb96a35089283c0d879b41f3)
  - Allow searching for requestId and user
  (logreader/7f84e55bb4a1e4086ab0918a6bf58ad3885bbd91)
  - Allow searching in url
  (logreader/7833d97cf85fd351d2f7550d67d21bd0c2a815f4)
  - Fix infinite scroll
  (logreader/cbe874c6c068b9156ad8456edf31d112da40cbc9)
  - Dont show loading indicator if we already have entries
  (logreader/d26a08dc0540126177e8d20c3e243b44c5a399c4)
  * Gallery
  - Fix upload after core changes
  (gallery/b4ac4429841cfe2b7ea260dfb37fcde25580143c2)
  - Update JavaScript libraries (gallery/247)</changelog>
  <changelog author="ecsos@opensuse.org" date="1493380800">- fix boo#1036756: package security issue</changelog>
  <changelog author="ecsos@opensuse.org" date="1495454400">- upstream update to version 12.0.0
  no changelog from upstream at this time
  See https://github.com/nextcloud/server/issues?q=is%3Aissue+milestone%3A%22Nextcloud+12.0%22+is%3Aclosed</changelog>
  <changelog author="ecsos@opensuse.org" date="1500292800">- unneeded git-files should not be remove,
  otherwise it throw integrity check failure in some situations.</changelog>
  <changelog author="ecsos@opensuse.org" date="1502366400">- upstream update to version 12.0.1
  So many changes. See https://nextcloud.com/changelog/#latest12</changelog>
  <changelog author="ecsos@opensuse.org" date="1502798400">- upstream update to version 12.0.2
  * Server
  - Minor bugfix release</changelog>
  <changelog author="ecsos@opensuse.org" date="1505822400">- upstream update to version 12.0.3
  Nextcloud 12.0.3 delivers a lot of enhancements in various areas
  including:
  - A number of improvements to email notification templates
  - 2FA enhancements
  - Smarter LDAP password handling
  - File Drop and upload-in-general updates
  - A performance improvement handling large files
  See https://nextcloud.com/changelog/#latest12
  Details: https://github.com/nextcloud/server/pulls?q=is%3Apr+milestone%3A%22Nextcloud+12.0.3%22+is%3Aclosed</changelog>
  <changelog author="ecsos@opensuse.org" date="1512388800">- upstream update to version 12.0.4
  * Server
    Over 50 fixes were merged in the server.
  - Improve text: 'you have now' -&gt; 'you now have (server#6464)
  - Fix initializing paged search under some circumstances
    (server#6502)
  - LDAP: simplify returning the homePath (server#6509)
  - Fix sharer name overlap with filename (server#6524)
  - Allow to close sidebar for text files (server#6525)
  - Fix quota new endpoint 12 (server#6527)
  - Pass new value to triggerChange (server#6528)
  - Throw 101 when an empty group string is provided
    (server#6547)
  - Contacts menu privacy (server#6554)
  - Add color-border variable (server#6649)
  - Do not stop on scss compilation failure (server#6661)
  - Don't pass User object when uid string is expected
    (server#6674)
  - Navigate to the root directory when showing the main filelist
    (server#6689)
  - Fix LDAP User deletion (cleanup) (server#6699)
  - Update aws sdk + s3 improvements (server#6737)
  - Dont run invalid path repair step when upgrading
    from 11.0.5.2 and later (server#6743)
  - Fix language when trying to change password (server#6751)
  - Fix postgresql tests (server#6792)
  - Also use configured 'cache_path' for new chunking
    (server#6814)
  - Set s3 part size to 500mb (server#6815)
  - Fix contacts menu for IE11 (server#6823)
  - Still trigger conflict resolution for existing entries when
    the curre (server#6847)
  - Propagate multipart upload exception when aborting upload
    (server#6855)
  - Allow to migrate from 10.0.3.3 (server#6878)
  - Timespan check (server#6896)
  - Do not log WebDAV maintenance mode exception (server#6908)
  - Don't reset quota (server#6910)
  - Backport of translation string fixes (server#6935)
  - Fix class name in exception logger plugin (server#6942)
  - Allow quota of 0 again (server#6943)
  - Fix uninitialized variable $this-&gt;params (server#6944)
  - Don't add a LIKE condition when it's not needed (server#6945)
  - Fix undefined offset warning when using '/' as external
    storage root (server#6946)
  - Fix page title not changed (server#6987)
  - Better readability for text on log in page which is directly
    on backgrounds (server#7028)
  - Translate Grant Access (server#7040)
  - Use fopen directly when reading objects from s3 (server#7079)
  - Improve mimetype detection for object storages (server#7081)
  - Fix seeking on object storage (server#7082)
  - Hide spinner for initial install (server#7095)
  - Ensure uid for calendar objects is unique (server#7096)
  - Revert "Only allow colons in db host for IPv6 addresses
    (server#7102)
  - Theme flow redirection page (server#7114)
  - Fix icon for security settings (server#7116)
  - If for some reason the json can't be decoded it is not cached
    (server#7118)
  - Improve performance of UserMountCache with external storage
    folders (server#7120)
  - {J,CS}SResourceLocator: account for symlinks in app path
    (server#7170)
  - Fix s3 download and touch (server#7186)
  - Touch opertation on object storage, don't create
    the file cache entry to early (server#7207)
  - Allow migration from upcoming 10.0.4 ownCloud release
    (server#7245)
  - CSSResourceLocator: handle SCSS in apps outside root
    (server#7257)
  - only replace permission popupmenu (server#7259)
  - Fix accesslist when a user has an ID only containting 0-9
    (server#7262)
  - Update CRL due to files_frommail (server#7277)
  - Only in case of $currentAccess the array uses the id as index
    (server#7328)
  * Other
  - Add aws sdk (3rdparty#69)
  - Don't send emails to disabled users (activity#202)
  - Add an option to disable emails completly (activity#206)
  - Make sure the mountPoint property is public before using it
    (files_accesscontrol#79)
  - Allow to playback m4v files (files_videoplayer#43)
  - Fix notifications order (notifications#93)</changelog>
  <changelog author="ecsos@opensuse.org" date="1513684800">- Nextcloud 12 is not compatible with php ? 7.2,
  so php &lt; 7.2 is needed.</changelog>
  <changelog author="ecsos@opensuse.org" date="1516795200">- update to 12.0.5
  Many fixes were merged, the most important ones include:
  - #7144 Unlock files even if an exception occurs
  - #7322 Set primary action button color to same as theming color
  - #7323 Use the correct root for shared jail when the source
    storage is also a jail
  - #7353 Fix translation of federation scope menu
  - #7362 Allow to skip data dir permission checks
  - #7407 Check if owner of share exists
  - #7409 Add retry wrapper when reading files from swift
  - #7451 Fix constructor spy in unit test with Sinon 4.1.3
  - #7455 Remove wrong entry in admin_settings that causes 500
  - #7456 CardDAV convertor check should not be to wide
  - #7457 Fix loading icon position in the app menu
  - #7464 Allow getting the filepath when getting cached mounts
  - #7468 Allow 'Nextcloud' in the user agent string of Android
  - #7558 Fix email buttons for white theme
  - #7567 Respect sharing options when searching for Sharees
  - #7568 Fix duplicate session token after remembered login
  - #7577 Check userExists later,
    saves lookups for appData_INSTANCEID userids
  - #7672 Added additional methods for removal of sensitive info
  - #7688 Fix scss webroot and url rewrite
  - #7717 Throw ServerNotAvailableException when LDAP is caught
    shutting down
  - #7666 Fix drag shadow not visible when dragging a file on
    a narrow screen
  - #7674 Do no run SyncJob in cron
  - #7684 Fix inverted app icons on IE11
  - #7694 Don't attempt to translate login names to uids when uids
    are provided
  - #7708 Don't show recurring msg when pages result was turned off
  - #7742 Hide favourite icon in details view if favourite action
    is not available
  - #7745 Don't lie about preview types
  - #7747 Update of composer
  - #7758 add option to use legacy v2 auth with s3
  - #7759 Use correct L10N files for jsconfig
  - #7757 Wait for the shared link to be set in the acceptance
    tests
  - gallery/#349 Fix date picker not visible in slideshow sharing
    dialog
  - activity/#229 Properly construct path of root on file rename
  - #7770 Fix SCSS processing when undoing theming values
  - #7774 Update icewind/smb to 2.0.3
  - #7777 Set height for sidebar icons
  - #7779 Improve zip support
  - #7786 Return correct mount type for federated shares
  - #7792 Fix empty details view after renaming a file
  - #7817 Fix preview when theming changes invertion of icons
  - #7821 Log full exception in cron instead of only the message
  - #7888 Keep all shipped apps enabled because they should be okay
  - #7962 update icewind/smb to 2.0.4</changelog>
  <changelog author="ecsos@opensuse.org" date="1517918400">- update to 13.0.0
  Over 1100 changes were merged in the server, with many hundreds
  more in existing or new apps. The main improvements include:
  * Collaboration features
  - Nextcloud Talk, a private videoconference software integrated
    with Nextcloud
  - real-time and asynchronous communication with push
    notifications, calls and chat web and mobile devices
  - Integration in business workflow with calendar invitations
    and calls directly from Nextcloud Files
  - Screen and note sharing with participant moderation
    capabilities
  - 100% secure peer-to-peer, end-to-end encrypted calls,
    mediated by self-hosted server
  - auto-completion of user names in comments and notification
    to the mentioned user
  - support free/busy scheduling in native calendar applications
    like Thunderbird Lightning
  - show meeting invites in the calendar
  * End-to-End Encryption
  - can encrypt data on a per-folder level rather than
    all-or-nothing approach
  - does not require users to remember or exchange passwords
  - does not require re-uploading data upon sharing
  - features an optional off-line administrator recovery key
  - allows full audit logging
  - can be combined with our File Access Control feature so
    administrator can enforce aspects of End-to-end Encryption
  - protects from identity theft with our Cryptographic Identity
    Protection feature
    This feature is in Tech Preview for Nextcloud 13 and does not
    yet implement sharing.
  * User Interface
  - new way of selecting files
  - easy way to quickly copy or move to a location
  - High DPI support
  - admin menu integrated in one list
  - no limitation to file uploads via the web interface
  - user quota in the side bar
  - social sharing (Twitter, G+, Facebook, Diaspora) now features
    a preview
  - improved theming
  * Performance
  - decreased page load times with up to 50% and faster search
  - 80% faster LDAP and up to 10x faster external storage
  - Server-side Encryption performance largely improved
  See https://nextcloud.com/changelog/</changelog>
  <changelog author="ecsos@opensuse.org" date="1521115200">- update to 13.0.1
  - Dont polute the log on DAV emaillogin (server#8045)
  - Don't perform CSRF check on OCS routes with Bearer auth
    (server#8099)
  - Use S3Client::upload instead of splitting single/multipart
    upload ourselves (server#8102)
  - Remove old perl script to update l10n files (server#8145)
  - Scss hardening (server#8156)
  - Do not try to get the jailed path if we can't find the id
    (server#8177)
  - Handle SSL certificate verifications for others than
    Let's Encrypt (server#8183)
  - Use a phan version instead of master (server#8195)
  - Repair step to clear frontend related caches (server#8197)
  - Keep previous exception when transforming to dav exception
    (server#8228)
  - Actually return stream from swift (server#8250)
  - Remove invalid link to documentation (server#8253)
  - Fix deleting folders when using s3 external storage
    (server#8261)
  - Link to NC13 dev manual (server#8264)
  - Better result handling of email search (server#8267)
  - Update CRL to revoke files_rightclick (server#8271)
  - Fix styling issues of guest pages #8155 (server#8286)
  - Remove jquery ui background image (server#8287)
  - Show open graph preview in WhatsApp (server#8309)
  - Make acceptance tests for comments more consistent with the
    others (server#8395)
  - Fix edit tag textbox size (server#8407)
  - Use TTF fonts for avatar generation (server#8440)
  - Use mb_* string methods to extract first character for
    generated avatars (server#8470)
  - Show hint in OCS API for user creation (server#8515)
  - Fix hiding and event propagation issues with the user
    management popover (server#8517)
  - Add some whitespace around change.svg icon (server#8518)
  - Avoid fruitless login attempts (server#8532)
  - Fix retrieval of group members with numerical uids from LDAP
    (server#8536)
  - Theming: handle not being in the serverroot (server#8554)
  - Ext storage error warning (server#8561)
  - Set autocomplete=new-password for mail share password
    (server#8577)
  - Fix upload button visible on read-only folders (server#8595)
  - Fixed app navigation for IE11 (server#8609)
  - Fix breadcrumbs width calculation (server#8610)
  - Fix comments (and systemtags) when involving users with
    numerical ids (server#8615)
  - Update commentstabview.js (server#8621)
  - Properly encapsulate require_once for app.php (server#8631)
  - AppData hardening (server#8636)
  - Use hash algo that's robust against collisions (server#8654)
  - Fixed date/time picker on IE11 (server#8663)
  - Use a more widely available method to test s3 settings
    (server#8667)
  - Use proper lanugage in langauge code (server#8668)
  - Display the proper language strings in setttings (server#8669)
  - Do not create empty userid when attribute does not have allowed
    chars (server#8673)
  - Remove too restrict check for background image/color
    (server#8675)
  - Fix example regex for user agent matching (server#8676)
  - Generate different UIDs for Birthday, Anniversary and Death
    event (server#8678)
  - Don't use double quotes in MySQL queries (server#8680)
  - Log exceptions that happen when writing the app store reply
    to storage (server#8683)
  - Set the correct active navigation entry (server#8685)
  - Fix activities for end2end encryption (server#8686)
  - Filter out the current user when searching for emails too
    (server#8687)
  - Fix check if theming defaults instance is available
    (server#8688)
  - Fix undefined index problem (server#8693)
  - Disable part files for object stores (server#8725)
  - Better handling of invisible elements in acceptance tests
    (server#8738)
  - Remove base url from global cache prefix (server#8745)
  - Check if the cached js file exists (server#8746)
  - Sharee email matches not limited (server#8749)
  - Fix integer overflow in ChunkingPlugin (server#8752)
  - Revert wording back to updates (server#8755)
  - Add acceptance tests for permissions on public shared folders
    (server#8758)
  - Also send file emails in ASAP mode (activity#249)
  - Ensure userids are strings (activity#252)
  - Null coalescing operator is PHP7+ (activity#254)
  - Update PDF.js to 1.9.426 (files_pdfviewer#55)
  - Enable full screen mode for PDF files (files_pdfviewer#59)
  - Fix ACE module files failing to load (files_texteditor#83)
  - Do not keep FileInfoModels returned by "getModelForFile"
    (files_texteditor#89)
  - Fix share drop down in gallery not properly shown (gallery#394)
  - Fix gallery button hidden in folders without create permission
    (gallery#402)
  - Fix controls position in gallery layout (gallery#405)
  - Removed old code already present thanks to the files app
    (gallery#406)
  - Create "file app" public share links if the slideshow is
    opened from ... (gallery#407)
  - Allow to check against haveibeenpwned.com password list
    (password_policy#61)</changelog>
  <changelog author="ecsos@opensuse.org" date="1524744000">- update to 13.0.2
  - Show group display names (server#8779)
  - Group existence check works without attribute (like with users)
    (server#8849)
  - The FN is optional, carrying the displayname if present
    (server#8900)
  - Set "share with" field to the ID of the circle (server#8905)
  - Show EOL warning in the update section (server#8986)
  - Use app version to generate scss filename (server#9015)
  - Update icewind/smb to 2.0.5 (server#9017)
  - Fix search text overlapping close button (server#9019)
  - Clear any theming prefixed cache on cache buster increase
    (server#9020)
  - Reset encryptionVersion to '1' if a file was stream copied
    (server#9064)
  - Do not treat is-encrypted as custom property (server#9071)
  - Fix proper permissions for multiple file access (server#9072)
  - When formatting a share node an Empty target is invalid
    (server#9073)
  - Move on with the next user if we found the user on one user
    back-end (server#9077)
  - Allow usage of Windows 10 WebDav Netdrive (server#9089)
  - Add more logging for the object storage during creation of the
    buckets (server#9094)
  - Do not convert email addresses with idn_to_ascii if?
    (server#9095)
  - Fix progress bar hidden before the upload ends (server#9124)
  - Update CRL to include old quicknotes cert (server#9213)
  - Fix user selectable text for public links for text files
    (server#9230)
  - Provide an option to disable HTML emails (server#9231)
  - Fix appinfo parsing when a single localized option is provided
    (server#9233)
  - Use multibyte substring (server#9234)
  - Fix webdav support for OneNote clients (server#9236)
  - Fixed files copy/move when in favorites or recent section
    (server#9238)
  - Don't update personal settings for admins (activity#262)
  - Skip parameters which are not there instead of failing out
    (activity#265)
  - Bump version 13 (files_pdfviewer#64)
  - Fix info.xml (files_pdfviewer#66)
  - No default enable (files_pdfviewer#67)
  - Fix position of icons in "Share with" input field (gallery#418)
  - Fix "No results found" tooltip (gallery#419)
  - Fix UI while a share is being added (gallery#420)
  - Hide "No results found" tooltip on autocompletion (gallery#424)
  - Fix error while clicking on the share link checkbox
    (gallery#430)</changelog>
  <changelog author="ecsos@opensuse.org" date="1528372800">- update to 13.0.3
  - Backport various scss fixes #8777 (server#9259)
  - Fix ellipsis in filename column (server#9344)
  - Replace deprecated sinon reset() call with resetHistory()
    (server#9358)
  - Issue #9318: catch exceptions in SCSSCacher::resetCache()
    (server#9377)
  - Log lock state on conflict (server#9389)
  - Remove unneeded locks in getCacheEntry (server#9391)
  - Only allow a single concurrent dav write to a file
    (server#9392)
  - Workflow rules error when changing operation (server#9409)
  - Fix jsunit tests (server#9430)
  - Allow IPv6 database host (server#9432)
  - Add labels for Contacts menu and Settings (server#9433)
  - Get correct version of an app (server#9436)
  - Fix ids of permission checkboxes for shares (server#9453)
  - Fix race condition when preparing upload folder (server#9454)
  - Allow to specify a link to a legal notice (server#9516)
  - Fix for unbound cloned LDAP connections (server#9522)
  - Dont use $info as array when its not an array (server#9525)
  - Improve OAuth (server#9540)
  - Bump theming version for extraordinary release (server#9547)
  - Fix translation bug on lost password page (server#9548)
  - Cleanup locks in scanner on error (server#9566)
  - Bump version for theming again ? (server#9573)
  - Make sure force language is reflected in html lang attribute
    (server#9579)
  - Add privacy link to theming and fix scrollbars (server#9586)
  - Fix settings menu (server#9590)
  - Handle exception while itterating trough smb file listing
    (server#9608)
  - Send invitations for shared calendars (server#9610)
  - Regenerate session id after public share auth (server#9619)
  - Emit event when running ./occ db:add-missing-indices
    (server#9620)
  - Add PHP missing message to index.php (server#9621)
  - Delete the previews when a version is restored (server#9622)
  - Limit Sinon version to 5.0.7 at most (server#9629)
  - Prepare another theming release including translations for
    recently added imprint and privacy policy strings
    (server#9647)
  - Dont open the file on dav HEAD request (server#9649)
  - Fix(AmazonS3): fix loop $result['Contents'] error
    (server#9650)
  - Fix undefined variables (server#9651)
  - Add search category icon (server#9652)
  - Fix "Invalid argument supplied for foreach()" (server#9654)
  - Do not load calendar/addressbook plugins if not needed
    (server#9655)
  - Make LargeFileHelper.php faster by avoiding execs as much as
    possible (server#9656)
  - Improve error reporting and move format parameter to the
    options (server#9657)
  - The OAuth endpoint needs to support Basic Auth (server#9659)
  - LDAP password renewal fixes (server#9661)
  - Check user state when fetching to avoid dealing with offline
    objects (server#9662)
  - Make sure the file is readable before attempting to create
    a preview (server#9668)
  - Fix drone mysqlmb4 tests (server#9672)
  - Make sure the log doesn't try to read from PUT if it can't
    (server#9694)
  - Allow admins to override FreeBusy capabilities without
    modifying ShareAPI capabilities (server#9707)
  - Fix the unit tests (server#9712)
  - Fix header nav (server#9727)
  - Fix local users check in contacts menu (server#9732)
  - Don't open the file when handling HEAD requests (3rdparty#99)
  - Do not sanitize markdown output twice (files_texteditor#101)</changelog>
  <changelog author="ecsos@opensuse.org" date="1528718400">- update to 13.0.4
  - Allow setting notify credentials in environment (server#9788)
  - Make the token expiration also work for autocasting 0
    (server#9803)
  - Enable caldav for webdav subtree public-calendars (server#9820)
- This also fix security issues:
  - (boo#1100343, CVE-2018-3762) and (boo#1100344, CVE-2018-3761)</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1532433600">- update to 13.0.5
  - Fix highlighting of the upload drop zone (server#9837)
  - Apply ldapUserFilter on members of group (server#9839)
  - Make the DELETION of groups match greedy on the groupID (server#9841)
  - Add parent index to share table (server#9843)
  - Log full exception in cron instead of only the message (server#9958)
  - Properly lock the target file on dav upload when not using part files (server#9986)
  - LDAP backup server should not be queried when auth fails (server#10032)
  - Fix filenames in sharing integration tests (server#10044)
  - Lower log level for quota manipulation cases (server#10076)
  - Let user set avatar in nextcloud if LDAP provides invalid image data (server#10089)
  - Improved logging of smb connection errors (server#10093)
  - Allow admin to disable fetching of avatars as well as a specific attribute (server#10115)
  - Allow to disable encryption (server#10121)
  - Update message shown when unsharing a file (server#10164)
  - Fixed English grammatical error on Settings page. (server#10165)
  - Request a valid property for DAV opendir (server#10169)
  - Allow updating the token on session regeneration (server#10170)
  - Prevent lock values from going negative with memcache backend (server#10180)
  - Correctly handle users with numeric user ids (server#10185)
  - Correctly parse the subject parameters for link (un)shares of calendars (server#10188)
  - Fix "parsing" of email-addresses in comments and chat messages (server#10189)
  - Sanitize parameters in createSessionToken() while logging (server#10195)
  - Also retry rename operation on InvalidArgumentException (server#10201)
  - Improve url detection in comments (server#10202)
  - Only bind to ldap if configuration for the first server is set (server#10233)
  - Use download manager from PDF.js to download the file (files_pdfviewer#84)
  - Fix trying to load removed scripts (files_pdfviewer#87)
  - Only pull for new messages if the session is allowed to be kept alive (notifications#138)
  - Always push object data (notifications#139)
  - Add prioritization for Talk (notifications#140)</changelog>
</package>
<package pkgid="3293b39c7773b71976bff25cb55c3f0b9174295a129ad2654f19583d2e1acb82" name="nodejs8" arch="src">
  <version epoch="0" ver="8.11.3" rel="lp150.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1510574400">- New upstream LTS version 8.9.1:
  * openssl: upgrade openssl sources to 1.0.2m
    [OpenSSL Security Advisory (bsc#1066242, bsc#1056058)
    CVE-2017-3735 CVE-2017-3736]
  * https: revert refactor to use http internals
- Changes since 8.9.0 LTS version:
  * deps: update to npm 5.5.1
  * http2: The exposed http2 socket is no longer manipulatable
  * module: support custom paths to require.resolve()
  * util: util.TextEncoder and util.TextDecoder are no longer
    experimental. No longer produces a warning when using them.
- versioned.patch: refreshed
- 0f3e69db.patch icu59.patch: removed empty patches</changelog>
  <changelog author="adam.majer@suse.de" date="1510574401">- Fix permissions of node-gyp. This should be executable to allow
  building of binary node modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1510833600">- Update nodejs.keyring based on current Release Team as found on
  https://github.com/nodejs/node#release-team</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1511956800">- Change BuildRequires from openssl-devel to libopenssl-1_0_0-devel
  due to Tumbleweed/Leap 15 change to OpenSSL 1.1.0 as default</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
</package>
<package pkgid="9068b959b2620bed76808e8070b4175a8a97aa47f489fb9891431cdc4fb2ad97" name="nodejs8" arch="x86_64">
  <version epoch="0" ver="8.11.3" rel="lp150.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1510574400">- New upstream LTS version 8.9.1:
  * openssl: upgrade openssl sources to 1.0.2m
    [OpenSSL Security Advisory (bsc#1066242, bsc#1056058)
    CVE-2017-3735 CVE-2017-3736]
  * https: revert refactor to use http internals
- Changes since 8.9.0 LTS version:
  * deps: update to npm 5.5.1
  * http2: The exposed http2 socket is no longer manipulatable
  * module: support custom paths to require.resolve()
  * util: util.TextEncoder and util.TextDecoder are no longer
    experimental. No longer produces a warning when using them.
- versioned.patch: refreshed
- 0f3e69db.patch icu59.patch: removed empty patches</changelog>
  <changelog author="adam.majer@suse.de" date="1510574401">- Fix permissions of node-gyp. This should be executable to allow
  building of binary node modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1510833600">- Update nodejs.keyring based on current Release Team as found on
  https://github.com/nodejs/node#release-team</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1511956800">- Change BuildRequires from openssl-devel to libopenssl-1_0_0-devel
  due to Tumbleweed/Leap 15 change to OpenSSL 1.1.0 as default</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
</package>
<package pkgid="0ce43aa8653c1b376a1686e08177d94c2a978e9d11aa16dd5fbbf85c0d860420" name="nodejs8" arch="src">
  <version epoch="0" ver="8.11.4" rel="lp150.2.6.1"/>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
  <changelog author="adam.majer@suse.de" date="1529064000">- Recommend same major version npm package (bsc#1097748)</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Ensure neutrality of description.
- Use %make_install.</changelog>
  <changelog author="adam.majer@suse.de" date="1534766400">- New upstream LTS release 8.11.4:
  * buffer: Fix out-of-bounds (OOB) write in Buffer.write() for
    UCS-2 encoding (CVE-2018-12115, bsc#1105019)
  * deps: Upgrade to OpenSSL 1.0.2p, fixing:
    + Client DoS due to large DH parameter
    (CVE-2018-0732, bsc#1097158)
    + ECDSA key extraction via local side-channel</changelog>
  <changelog author="adam.majer@suse.de" date="1535025600">- fix_ci_tests.patch: Fix parallel/test-tls-passphrase.js test to
  continue to function with older versions of OpenSSL library.</changelog>
</package>
<package pkgid="b89fea89117fd18319b11ecf8b571382d185e1e70a23fac8454daa72a85b266a" name="nodejs8" arch="x86_64">
  <version epoch="0" ver="8.11.4" rel="lp150.2.6.1"/>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
  <changelog author="adam.majer@suse.de" date="1529064000">- Recommend same major version npm package (bsc#1097748)</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Ensure neutrality of description.
- Use %make_install.</changelog>
  <changelog author="adam.majer@suse.de" date="1534766400">- New upstream LTS release 8.11.4:
  * buffer: Fix out-of-bounds (OOB) write in Buffer.write() for
    UCS-2 encoding (CVE-2018-12115, bsc#1105019)
  * deps: Upgrade to OpenSSL 1.0.2p, fixing:
    + Client DoS due to large DH parameter
    (CVE-2018-0732, bsc#1097158)
    + ECDSA key extraction via local side-channel</changelog>
  <changelog author="adam.majer@suse.de" date="1535025600">- fix_ci_tests.patch: Fix parallel/test-tls-passphrase.js test to
  continue to function with older versions of OpenSSL library.</changelog>
</package>
<package pkgid="f1d023aacbb861db323e6758079fd3af5cea6ced14c2681aff9f5015b7946d3d" name="nodejs8-devel" arch="x86_64">
  <version epoch="0" ver="8.11.3" rel="lp150.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1510574400">- New upstream LTS version 8.9.1:
  * openssl: upgrade openssl sources to 1.0.2m
    [OpenSSL Security Advisory (bsc#1066242, bsc#1056058)
    CVE-2017-3735 CVE-2017-3736]
  * https: revert refactor to use http internals
- Changes since 8.9.0 LTS version:
  * deps: update to npm 5.5.1
  * http2: The exposed http2 socket is no longer manipulatable
  * module: support custom paths to require.resolve()
  * util: util.TextEncoder and util.TextDecoder are no longer
    experimental. No longer produces a warning when using them.
- versioned.patch: refreshed
- 0f3e69db.patch icu59.patch: removed empty patches</changelog>
  <changelog author="adam.majer@suse.de" date="1510574401">- Fix permissions of node-gyp. This should be executable to allow
  building of binary node modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1510833600">- Update nodejs.keyring based on current Release Team as found on
  https://github.com/nodejs/node#release-team</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1511956800">- Change BuildRequires from openssl-devel to libopenssl-1_0_0-devel
  due to Tumbleweed/Leap 15 change to OpenSSL 1.1.0 as default</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
</package>
<package pkgid="ac5164a5f144f8929ac4034fbb5bfc3c2c94774d8a5d73fa2af44d40bf2686cf" name="nodejs8-devel" arch="x86_64">
  <version epoch="0" ver="8.11.4" rel="lp150.2.6.1"/>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
  <changelog author="adam.majer@suse.de" date="1529064000">- Recommend same major version npm package (bsc#1097748)</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Ensure neutrality of description.
- Use %make_install.</changelog>
  <changelog author="adam.majer@suse.de" date="1534766400">- New upstream LTS release 8.11.4:
  * buffer: Fix out-of-bounds (OOB) write in Buffer.write() for
    UCS-2 encoding (CVE-2018-12115, bsc#1105019)
  * deps: Upgrade to OpenSSL 1.0.2p, fixing:
    + Client DoS due to large DH parameter
    (CVE-2018-0732, bsc#1097158)
    + ECDSA key extraction via local side-channel</changelog>
  <changelog author="adam.majer@suse.de" date="1535025600">- fix_ci_tests.patch: Fix parallel/test-tls-passphrase.js test to
  continue to function with older versions of OpenSSL library.</changelog>
</package>
<package pkgid="791c27fde15aad770ecef6d25deeb2c4acae86d90e0c041bb84f60a19e715d22" name="nodejs8-docs" arch="noarch">
  <version epoch="0" ver="8.11.3" rel="lp150.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1510574400">- New upstream LTS version 8.9.1:
  * openssl: upgrade openssl sources to 1.0.2m
    [OpenSSL Security Advisory (bsc#1066242, bsc#1056058)
    CVE-2017-3735 CVE-2017-3736]
  * https: revert refactor to use http internals
- Changes since 8.9.0 LTS version:
  * deps: update to npm 5.5.1
  * http2: The exposed http2 socket is no longer manipulatable
  * module: support custom paths to require.resolve()
  * util: util.TextEncoder and util.TextDecoder are no longer
    experimental. No longer produces a warning when using them.
- versioned.patch: refreshed
- 0f3e69db.patch icu59.patch: removed empty patches</changelog>
  <changelog author="adam.majer@suse.de" date="1510574401">- Fix permissions of node-gyp. This should be executable to allow
  building of binary node modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1510833600">- Update nodejs.keyring based on current Release Team as found on
  https://github.com/nodejs/node#release-team</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1511956800">- Change BuildRequires from openssl-devel to libopenssl-1_0_0-devel
  due to Tumbleweed/Leap 15 change to OpenSSL 1.1.0 as default</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
</package>
<package pkgid="7cea6797c57b433628ef4df9fe05163b31fdfc9c157e5044c7b30046fa2c023f" name="nodejs8-docs" arch="noarch">
  <version epoch="0" ver="8.11.4" rel="lp150.2.6.1"/>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
  <changelog author="adam.majer@suse.de" date="1529064000">- Recommend same major version npm package (bsc#1097748)</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Ensure neutrality of description.
- Use %make_install.</changelog>
  <changelog author="adam.majer@suse.de" date="1534766400">- New upstream LTS release 8.11.4:
  * buffer: Fix out-of-bounds (OOB) write in Buffer.write() for
    UCS-2 encoding (CVE-2018-12115, bsc#1105019)
  * deps: Upgrade to OpenSSL 1.0.2p, fixing:
    + Client DoS due to large DH parameter
    (CVE-2018-0732, bsc#1097158)
    + ECDSA key extraction via local side-channel</changelog>
  <changelog author="adam.majer@suse.de" date="1535025600">- fix_ci_tests.patch: Fix parallel/test-tls-passphrase.js test to
  continue to function with older versions of OpenSSL library.</changelog>
</package>
<package pkgid="87b52dc2e3f8f69794ce07c0ef1c9a24bba13bf7baffe15962e1c1cf7ae7b759" name="npm8" arch="x86_64">
  <version epoch="0" ver="8.11.3" rel="lp150.2.3.1"/>
  <changelog author="adam.majer@suse.de" date="1510574400">- New upstream LTS version 8.9.1:
  * openssl: upgrade openssl sources to 1.0.2m
    [OpenSSL Security Advisory (bsc#1066242, bsc#1056058)
    CVE-2017-3735 CVE-2017-3736]
  * https: revert refactor to use http internals
- Changes since 8.9.0 LTS version:
  * deps: update to npm 5.5.1
  * http2: The exposed http2 socket is no longer manipulatable
  * module: support custom paths to require.resolve()
  * util: util.TextEncoder and util.TextDecoder are no longer
    experimental. No longer produces a warning when using them.
- versioned.patch: refreshed
- 0f3e69db.patch icu59.patch: removed empty patches</changelog>
  <changelog author="adam.majer@suse.de" date="1510574401">- Fix permissions of node-gyp. This should be executable to allow
  building of binary node modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1510833600">- Update nodejs.keyring based on current Release Team as found on
  https://github.com/nodejs/node#release-team</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1511956800">- Change BuildRequires from openssl-devel to libopenssl-1_0_0-devel
  due to Tumbleweed/Leap 15 change to OpenSSL 1.1.0 as default</changelog>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
</package>
<package pkgid="055ef3b0500e93bb8cbe6e88e7a79a09fb9c1ac9981fee20e32247fe93b575f7" name="npm8" arch="x86_64">
  <version epoch="0" ver="8.11.4" rel="lp150.2.6.1"/>
  <changelog author="qantas94heavy@gmail.com" date="1512820800">- New upstream LTS release 8.9.3:
  * buffer: buffers allocated with an invalid content will now be
    zero filled
    [ CVE-2017-15897, bnc#1072320 ]
  * deps/openssl: updated to 1.0.2n (bsc#1072322)
    [ CVE-2017-3738 CVE-2017-15896 ]
- Changes in 8.9.2:
  * console: avoid adding infinite error listeners
  * http2: improve errors thrown in header validation
- Remove unnecessary curl BuildRequires
- Enable gold linker on s390x (TW and SLE/Leap 15)
- Build with bundled ICU if system ICU not available (only applies
  to SLE 11/12 and Leap 42.x)</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- openssl11.patch: backport support for OpenSSL 1.1 (bnc#1066953)
- Dropped 8334.diff - no longer needed</changelog>
  <changelog author="adam.majer@suse.de" date="1513944000">- Enable CI tests in %check target
  + fix_ci_tests.patch:
  - DNS queries in buildroots are failing with EAI_AGAIN
  - disable test-module-loading-globalpaths.js - we have
    hardcoded global paths
  + versioned.patch: call versioned node binary for tests
  + openssl11.patch: fix OpenSSL 1.1 backport so all SSL tests pass
    instead of crashing in some situations.
- node-gyp-addon-gypi.patch: fix typo allowing unit tests to compile</changelog>
  <changelog author="adam.majer@suse.de" date="1515499200">- New upstream LTS release 8.9.4:
  * deps: update npm to 5.6.0
  * for complete changeset see
    https://github.com/nodejs/node/blob/master/doc/changelogs/CHANGELOG_V8.md#8.9.4
- versioned.patch: refreshed
- nodejs-sle11-python26-check_output.patch: refreshed</changelog>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x</changelog>
  <changelog author="adam.majer@suse.de" date="1518004800">- Fix specfile typo
- Use gcc7 on Leap 42.3</changelog>
  <changelog author="adam.majer@suse.de" date="1518523200">- Add Recommends and BuildRequire on python2 for npm. node-gyp
  requires this old version of python for now. This is only needed
  for binary modules.</changelog>
  <changelog author="adam.majer@suse.de" date="1521720000">- New upstream LTS release 8.10.0:
  * deps:
    + update V8 to 6.2.414.46
    + revert ABI breaking changes in V8 6.2
    + upgrade libuv to 1.19.1
    + re land npm 5.6.0
  * crypto:
    + Support both OpenSSL 1.1.0 and 1.0.2. This allows us to drop
    openssl11.patch
    + warn on invalid authentication tag length
  * async_hooks:
    + update defaultTriggerAsyncIdScope for perf
    + use typed array stack as fast path
    + use scope for defaultTriggerAsyncId
    + separate missing from default context
    + deprecate undocumented API
  * n-api: add helper for addons to get the event loop
  * cli: add --stack-trace-limit to NODE_OPTIONS
  * console: add support for console.debug
  * module:
    + add builtinModules
    + replace default paths in require.resolve()
  * src: add process.ppid
  * http:
    + support generic Duplex streams
    + add rawPacket in err of clientError event
    + better support for IPv6 addresses
  * tls: unconsume stream on destroy
  * process: improve unhandled rejection message
  * stream: remove usage of *State.highWaterMark
  * trace_events: add executionAsyncId to init events
- remove any old manpage files in %pre from before update-alternatives
  were used to manage symlinks to these manpages.
- versioned.patch: refreshed</changelog>
  <changelog author="adam.majer@suse.de" date="1522756800">- New upstream LTS release 8.11.1:
  * Security fixes:
    + Fix for inspector DNS rebinding vulnerability
    (bsc#1087463, CVE-2018-7160)
    + Fix for 'path' module regular expression denial of service
    (bsc#1087459, CVE-2018-7158)
    + Reject spaces in HTTP Content-Length header values
    (bsc#1087453, CVE-2018-7159)
  * deps: upgrade http-parser to v2.8.0</changelog>
  <changelog author="adam.majer@suse.de" date="1522843200">- Fix some node-gyp permissions</changelog>
  <changelog author="adam.majer@suse.de" date="1522929600">- Install license with %license, not %doc (bsc#1082318)</changelog>
  <changelog author="adam.majer@suse.de" date="1526040000">- icu_61_namespacefix.patch: Fix building with ICU61.1 (bsc#1091764)</changelog>
  <changelog author="adam.majer@suse.de" date="1526472000">- New upstream LTS release 8.11.2:
  * deps:
    + update node-inspect to 1.11.3
    + update nghttp2 to 1.29.0
  * http2: Sync with current release stream
  * n-api: Sync with current release stream
- versioned.patch: rebased</changelog>
  <changelog author="adam.majer@suse.de" date="1527076800">- use gcc7 for SLE12
- manual_configure.patch: configure nghttp2 correctly</changelog>
  <changelog author="adam.majer@suse.de" date="1527163200">- env_shebang.patch: use absolute paths in executable shebang lines
- versioned.patch: updated to move shebang modifications to above
  patch.</changelog>
  <changelog author="adam.majer@suse.de" date="1528891200">- New upstream LTS release 8.11.3:
  * buffer: Fixes Denial of Service vulnerability where calling
    Buffer.fill() could hang (CVE-2018-7167, bsc#1097375)
  * http2:
    + Fixes Denial of Service vulnerability by updating the http2
    implementation to not crash under certain circumstances
    during cleanup (CVE-2018-7161, bsc#1097404)
    + Unbundled nghttp2 to fix Denial of Service vulnerability
    (CVE-2018-1000168, bsc#1097401)</changelog>
  <changelog author="adam.majer@suse.de" date="1529064000">- Recommend same major version npm package (bsc#1097748)</changelog>
  <changelog author="jengelh@inai.de" date="1532865600">- Ensure neutrality of description.
- Use %make_install.</changelog>
  <changelog author="adam.majer@suse.de" date="1534766400">- New upstream LTS release 8.11.4:
  * buffer: Fix out-of-bounds (OOB) write in Buffer.write() for
    UCS-2 encoding (CVE-2018-12115, bsc#1105019)
  * deps: Upgrade to OpenSSL 1.0.2p, fixing:
    + Client DoS due to large DH parameter
    (CVE-2018-0732, bsc#1097158)
    + ECDSA key extraction via local side-channel</changelog>
  <changelog author="adam.majer@suse.de" date="1535025600">- fix_ci_tests.patch: Fix parallel/test-tls-passphrase.js test to
  continue to function with older versions of OpenSSL library.</changelog>
</package>
<package pkgid="41d09d820bfc024ef355a9e6612f1462eae2d4887578233bb61876eaf9866931" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.3.2"/>
  <changelog author="schwab@suse.de" date="1507550400">- Drop glibc-obsolete
- glibc-2.3.90-noversion.diff: remove
- reinitialize-dl_load_write_lock.patch: remove</changelog>
  <changelog author="schwab@suse.de" date="1507636800">- nscd-libnsl.patch: Remove reference to libnsl from nscd (bsc#1062244)</changelog>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (bnc#1092877).</changelog>
</package>
<package pkgid="7c2677f208c837b712e4a2956eecfca40086322f22d010428b223d18ce56add0" name="nscd" arch="x86_64">
  <version epoch="0" ver="2.26" rel="lp150.11.6.120"/>
  <changelog author="schwab@suse.de" date="1508760000">- math-c++-compat.patch: Add more C++ compatibility (BZ #22296)
- malloc-tcache-leak.patch: Fix tcache leak after thread destruction (BZ
  [#22111])
- falkor-memcpy-memmove.patch: Optimized implementation of memcpy/memmove
  for Qualcomm Falkor
- aarch64-cpu-features.patch: Fix glibc.tune.cpu tunable handling
- nss-files-large-buffers.patch: Avoid large buffers with many host
  addresses (BZ #22078)
- sysconf-uio-maxiov.patch: Fix missing definition of UIO_MAXIOV (BZ
  [#22321])
- glob-tilde-overflow.patch: Fix buffer overflows with GLOB_TILDE
  (CVE-2017-15670, CVE-2017-15671, CVE-2017-15804,
  bsc#1064569. bsc#1064580, bsc#1064583, BZ #22320, BZ #22325, BZ #22332)
- dl-runtime-resolve-xsave.patch: Use fxsave/xsave/xsavec in
  _dl_runtime_resolve (BZ #21265)</changelog>
  <changelog author="schwab@suse.de" date="1509019200">- spawni-assert.patch: Fix improper assert in Linux posix_spawn (BZ
  [#22273])</changelog>
  <changelog author="schwab@suse.de" date="1509019201">- x86-64-dl-platform.patch: Don't set GLRO(dl_platform) to NULL (BZ #22299)</changelog>
  <changelog author="schwab@suse.de" date="1511784000">- glob64-s390.patch: no compat glob64 on s390
- noversion.tar.bz2: remove unused source</changelog>
  <changelog author="schwab@suse.de" date="1513080000">- Add _multibuild</changelog>
  <changelog author="schwab@suse.de" date="1513166400">- tst-tlsopt-powerpc.patch: fix tst-tlsopt-powerpc (bcn#1070419)
- powerpc-hwcap-bits.patch: Update HWCAP for powerpc (bnc#1070420)
- malloc-tcache-check-overflow.patch: Fix integer overflow in malloc when
  tcache is enabled (CVE-2017-17426, bnc#1071479, BZ #22375)</changelog>
  <changelog author="schwab@suse.de" date="1514894400">- dl-init-paths-overflow.patch: Count components of the expanded path in
  _dl_init_path (CVE-2017-1000408, CVE-2017-1000409, bsc#1071319, BZ
  [#22607], BZ #22627)
- fillin-rpath-empty-tokens.patch: Check for empty tokens before dynamic
  string token expansion (CVE-2017-16997, bsc#1073231, BZ #22625)</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- getcwd-absolute.patch: make getcwd(3) fail if it cannot obtain an
  absolute path (CVE-2018-1000001, bsc#1074293, BZ #22679)</changelog>
  <changelog author="schwab@suse.de" date="1517313600">- Avoid duplicate source rpm</changelog>
  <changelog author="schwab@suse.de" date="1517313601">- fix-locking-in-_IO_cleanup.patch: Skip locked files during exit
  (bsc#1070491, BZ #15142)</changelog>
  <changelog author="schwab@suse.de" date="1517832000">- memalign-overflow.patch: Fix integer overflows in internal memalign and
  malloc functions (CVE-2018-6485, CVE-2018-6551, bsc#1079036, BZ #22343,
  BZ #22774)</changelog>
  <changelog author="matz@suse.de" date="1518177600">- Add systemtap-headers to BuildRequires.
- Add --enable-systemtap to configure arguments. (fate#324969,
  bsc#1073636)</changelog>
  <changelog author="schwab@suse.de" date="1519128000">- Mark source0 as nosource in non-main source rpms</changelog>
  <changelog author="schwab@suse.de" date="1519300800">- stack-guard-size-accounting.patch: Fix stack guard size accounting
  (bsc#1074208, BZ #22637)
- libgcc-rtld-now.patch: Open libgcc.so with RTLD_NOW during
  pthread_cancel (bsc#1074208, BZ #22636)</changelog>
  <changelog author="schwab@suse.de" date="1519732800">- Use %license (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1522152000">- res-send-enomem.patch: Fix crash in resolver on memory allocation
  failure (bsc#1086690, BZ #23005)</changelog>
  <changelog author="schwab@suse.de" date="1523534400">- Readd nis to netgroup and automount nss config (bsc#1088860)</changelog>
  <changelog author="matz@suse.com" date="1526644800">- Add glibc-fix-avx512-mempcpy.patch as quick fix for mempcpy
  buffer overwrite in memmove-avx512-no-vzeroupper.S for Knights
  Landing CPUs (CVE-2018-11237, bnc#1094154, bnc#1092877, BZ #23196)</changelog>
  <changelog author="schwab@suse.de" date="1526990400">- Use %license also for COPYING and COPYING.LIB (bsc#1082318)</changelog>
  <changelog author="schwab@suse.de" date="1528891200">- i386-memmove-sse2-unaligned.patch: Fix SSE2 memmove issue when crossing
  2GB boundary (CVE-2017-18269, bnc#1094150, BZ #22644)
- realpath-ssize-max-overflow.patch: Fix overflow in path length
  computation (CVE-2018-11236, bsc#1094161, BZ #22786)
- glibc-fix-avx512-mempcpy.patch: replace with upstream version</changelog>
</package>
<package pkgid="5d76ad9648749e1c12dadc7eded33dab728ba567e132b06126d6cf10013ed7f7" name="nss-myhostname" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="d6872aac9400fec5b03fa6bd2d415260d33692ae6702351028bf9d8f41308d19" name="nss-myhostname" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="2f6a6f4e7dfccd23c2ac5c59ae14368301a076ce284e639ade65463df6876cab" name="nss-myhostname-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="23e991934931e891984eef4b401173847ec90983d0b4eea09b7601fb9010ecf0" name="nss-myhostname-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="ae4161c1191d3c84b3b838624749ad868075e4159521db890d686bd5c190bbc9" name="nss-mymachines" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="a8b771ea47a4fb50d2be2ffc2c1173b449c093cae74c7c6b21cfffb7baa88b91" name="nss-mymachines" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="dc201e32f67a0dbfc455756b9f73f2544e47221e11d830ea587111cff41e6aa3" name="nss-mymachines-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="d4ec52605d3785b679b52057b6e7e3aae9e3638dd154e1a9c07c28e9cecab357" name="nss-mymachines-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="00a674d2881a7dcbdc8844a9e7fd4059aad0c029187fce420c5dc981ada33d8f" name="nss-systemd" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="27666b8ca8cd4eebfb41e14ca21da638814b71e4afc09bf49ce42a1b03807f86" name="nss-systemd" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="0db474e7dd4424eea8ce1a843fb341f10e2b7370fd7ee05bf91fa704bcd2a226" name="nvme-cli" arch="src">
  <version epoch="0" ver="1.5" rel="lp150.6.3.1"/>
  <changelog author="jthumshirn@suse.com" date="1494590400">- Add possibility to change queue depth at connect time (bsc#1037297)
  + 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  + 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1497441600">- Add NVMe over Fabrics specific id-ctrl fields (bsc#1037293)
  + add-missing-nvme_id_crtl-fileds.patch
  + 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  + 0004-nvme-cli-id-ctrl-display-additional-fields.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1497614400">-  Also re-build documentation on each build (bsc#1037297)</changelog>
  <changelog author="jthumshirn@suse.com" date="1498478400">- Provide nvme ns-descs subcommand (bsc#1038235)
  + 0005-nvme-cli-add-ns-descs-subcommand.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1498478401">- Create nvme files and directories in /etc/nvme (bsc#1045931 )</changelog>
  <changelog author="jthumshirn@suse.com" date="1498824000">- Add hostid option to connect command (bsc#1045293)
  + 0006-fabrics-add-hostid-option-to-connect-command.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1504180800">- Fix hostid parsing (bsc#1049272)
  + 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1504785600">- Generate Spec compliant UUID NQNs (bsc#1057498)
  + 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508241600">- allow override queue depth and nr io queues on connect-all (bsc#1063462)
  + 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508328000">- Update to version v1.4 (FATE#322735):
  * Fixup Security send/recv to read data from disk
  * Unbreak RPM build after bash completion files were moved in 7e4c7596
  * fabrics: Fix disconnect_by_device from disconnecting instance 0 on error
  * lightnvm: allow to init target on factory mode
  * Fixed problem with security-recv binary output not working correctly
  * nvme-cli: return 0 if disconnect operation with cfg.nqn successfully
  * Fix compile for 32-bit
  * nvme-cli: Fix build on aarch64-linux-android-4.9
  * nvme-cli: Huawei plug-in.
  * nvme-print: Fix line spacing on -H option
  * id-ctrl: remove new lines from json output
  * nvme-list: print empty lists when no devices are present
  * fabrics: add option to override drivers queue depth
  * nvme-cli: nvme-intel implement json output for smart-log
  * nvme-cli: Add parsing support for noiob
  * Fix potential device string truncation
  * fabrics: add option to override drivers queue depth also for connect-all command
  * Regenerate man-pages
  * Release v1.3
  * nvme-print: Free only top-level json objects
  * fix use-after-free in pci.ids parsing
  * nvme-cli: add fields into identify controller data structure
  * nvme-cli: show more fields for id-ctrl
  * nvme-cli: id-ctrl: display additional fields
  * Show help when no or an invalid device is given
  * nvme-cli: add id-ctrl for nvme-huawei plug-in.
  * Fix spelling errors
  * fabrics: add hostid option to connect command
  * nvme-cli: add ns-descs subcommand
  * nvme-cli: Get Feature support for Extended Host Id
  * nvme-cli: Fix typo in Intel plugin and improve generic help text
  * Implement Intel Vendor specific logs
  * nvme-cli: add thermal management fields for smart-log
  * nvme-cli: add temperature sensor fields in json_smart_log
  * nvme-cli: add output-format discription for smart-log
  * Formatting update
  * Regenerate documentation
  * nvme-cli: add error message for nvme list.
  * Fix typo of flbas in nvme_create_max_ns_test
  * Show help for get-ns-id
  * Show help for nvme reset and subsystem-reset
  * nvme-cli: Extended Data Structure in resv-report
  * Update docs
  * resync nvme.h with the kernel nvme.h
  * nvme-cli : add support for sanitize command.
  * nvme-cli : add sanitize command documentation.
  * nvme-cli : add support for retrieving sanitize log.
  * nvme-cli : add sanitize-log command documentation.
  * fix build without libuuid
  * nvme-cli : wdc-plug-in : return on invalid input device.
  * nvme-cli : only print help text and return for nvme list -h option.
  * nvme-cli/list-ns: fix identifying active or allocated namespaces list
  * Fixed get_internal_log to parse the entire nlog and allow selection of specific regions to be parsed.
  * NVMe-CLI Fix Sanitize Command Parameter Types
  * Fix app tag and mask setting
  * Fix app tag field sizes
  * nvme-cli/list: fix when nvme device can not be open
  * nvme-cli/list: change fd returned by open operation from unsigned to signed.
  * Makefile: allow linker override for cross uuid test
  * nvme-cli: fix connecting failure due to invalid uuid format of hostid
  * nvme-cli/fabrics: Add ctrl-loss-tmo param to connect cmd
  * Fixing macro definitions to avoid issues when these are used in expressions
  * nvme-cli: add nvme directive command support
  * nvme-cli: add documentation for directive commands
  * fix for issue 219, show-regs reports AQA.ACQS and AQA.ASQS as bytes
  * nvme-cli: Fix nvme ns desc
  * new bit fields (6, 7, and 8) for OACS from NVMe rev 1.3
  * added new bit field (6) to ONCS from NVMe rev 1.3
  * nvme-cli: Describe action 3 of nvme activate
  * nvme-cli: generate spec-compliant UUID NQNs
  * NVMe-CLI Fixed Status Code check for reset type on fw-activate.
  * Added handling for temperature threshold values below 0C(273K) and removed buffer check for human readable output as Temperature threshold feature does not use Memory Buffer for Attributes
  * Update nvme.c
  * nvme-cli : Add Namespace Rescan Command
  * nvme-cli : Add man documentation files for ns-rescan command.
  * Version 1.4 Release
  * Drop upstream patches:
  - 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  - 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch
  - add-missing-nvme_id_crtl-fileds.patch
  - 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  - 0004-nvme-cli-id-ctrl-display-additional-fields.patch
  - 0005-nvme-cli-add-ns-descs-subcommand.patch
  - 0006-fabrics-add-hostid-option-to-connect-command.patch
  - 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch
  - 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update descriptions.</changelog>
  <changelog author="jthumshirn@suse.com" date="1513252800">- Add list-subs subcommand (bsc#1072813)
  + 0001-nvme-Introduce-new-list-subsys-command.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1515585600">- Update to version v1.5 (FATE#322735):
  * Remove upstreamed patches:
  - 0001-nvme-Introduce-new-list-subsys-command.patch
  - 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch
  * fabrics: also set queue_size and nr_io_queues on connect-all connects
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli : wdc-plugin Add support for WDC SN100 and SN200 devices.
  * Add AEN decoder helper to get-log
  * Regen documentation
  * Add Nix(OS) install instructions to the README
  * Fix the Markdown code for the Alpine install instructions
  * nvme-cli: make address print format more human-readable
  * intel-nvme: Fix compiler errors and warnings
  * Include sizing data in json output that's already included in the non-json results.
  * Cleanup variable definitions
  * Add command effects log page
  * Increase default format timeout
  * Revert "nvme-cli: add duplicate_connect parameter support"
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli: fix wrong bitmask in number of rpmb units.
  * nvme-cli: make command description const
  * nvme/id-ns: do not try to get namespace id from non-block device.
  * Fix typo in previous commit
  * Fix long suffix parse on 32-bit machines
  * Nitpicked a printing alignment issue with the id-ns vendor specific field
  * Avoid unnecessary abbreviation.
  * nvme/flush: explicitely close file descriptor
  * Fix memory leak
  * Add 'DEAC' support to write-zeroes command
  * Rebuild documentation
  * nvme-cli: resync nvme.h with the kernel's
  * NVMe-CLI : WDC-Plugin Updated Smart Log Command
  * NVMe-CLI : WDC-Plugin Documentation for Updated Smart Log Command
  * Regenerate documentation
  * nvme-cli: update show_registers_cc() to use nvme.h
  * nvme-cli: replace values of all namespaces with NVME_NSID_ALL
  * nvme-cli: add prints for new HMB identify fields of TP 4002
  * Update get-feature help text
  * Improve code alignment on intel plugin
  * Update intel internal log man page.
  * nvme-cli/intel: Return if arg parsing returns error
  * nvme: add options for write command directives
  * Update documentation
  * Updated the human readable printing for the SGLS field in the id-ctrl command to be compliant with NVMe 1.3
  * nvme: Introduce new 'list-subsys' command
  * nvme-cli: add support to get properties for NVMe over Fabric
  * nvme-cli: support to set the property for NVMe over Fabric
  * Reorder command list
  * Documentation fixes
  * nvme-cli: add support alias command with Firmware Activate
  * nvme-cli: update Firmware Commit with boot partition feature
  * nvme-cli: add command specific status of Firmware Commit
  * Update documentation to use aliases
  * nvme-cli: add prints of boot partition feature to show-regs
  * nvme-cli: Fix small mem leak.
  * Release v1.5</changelog>
  <changelog author="jthumshirn@suse.com" date="1518523200">- Add NetApp vendor plugin (bsc#1080672)
  + 0001-nvme-cli-add-NetApp-plugin.patch
  + 0002-nvme-cli-add-netapp-smdevices-man-page.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1522843200">- Make log identifier a required parameter (bsc#1086240)
  + 0003-get-log-Make-log-identifier-a-required-parameter.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1523534400">- Add ctrl-loss-tmo option to fabrics connect manpage (bsc#1084379)
  + 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1525262400">- Add keep-alive-tmo option to connect-all command (bsc#1090568)
  + 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1528372800">- Add ctrl-loss-tmo to connect-all command (bsc#1084379)
  + 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch</changelog>
  <changelog author="hare@suse.de" date="1533643200">- nvme-vendor: Add get_log LSP &amp; LSO fields from 1.3 spec
  (bsc#1099018)
  + 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
- nvme-cli: Implement nvme_get_log13 (bsc#1099018)
  + 0008-nvme-cli-Implement-nvme_get_log13.patch
- nvme-cli: Add support of unsigned long long to json (bsc#1099018)
  + 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
- nvme-cli: add support of RAE (bsc#1099018)
  + 0010-nvme-cli-add-support-of-RAE.patch
- nvme-cli: add minimal ana-log page support (bsc#1099018)
  + 0011-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana_log documentation (bsc#1099018)
  + 0012-nvme-cli-add-ana-log-documentation.patch
- nvme-discover: sanitize options
  + 0013-nvme-discover-sanitize-options.patch
- Fix double free in list_subsys
  + 0014-Fix-double-free-in-list_subsys.patch (bsc#1099018)
- Log error in case of failure in get_nvme_subsystem (bsc#1099018)
  + 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
- nvme-cli: move print function to nvme-print.c (bsc#1099018)
  + 0016-nvme-cli-move-print-function-to-nvme-print.patch
- nvme-cli: show partial results if controller fails (bsc#1099018)
  + 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
- nvme-list-subsys: Add device name argument and print ANA state
  (bsc#1099018)
  + 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch</changelog>
  <changelog author="hare@suse.de" date="1533902400">- nvme-discover: Retry discovery log if the generation counter changes
  (bsc#1087848)
  + 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-fabrics: Fix passing "host_traddr" for all transports (bsc#1084379)
  + 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (bsc#1084379)
  + 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on connect (bsc#1090568)
  + 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
</package>
<package pkgid="abbb234fb1fed225f29d5e4e4138d394192c2ccc1a7ee66a0fd4e8c77d2c4674" name="nvme-cli" arch="x86_64">
  <version epoch="0" ver="1.5" rel="lp150.6.3.1"/>
  <changelog author="jthumshirn@suse.com" date="1494590400">- Add possibility to change queue depth at connect time (bsc#1037297)
  + 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  + 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1497441600">- Add NVMe over Fabrics specific id-ctrl fields (bsc#1037293)
  + add-missing-nvme_id_crtl-fileds.patch
  + 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  + 0004-nvme-cli-id-ctrl-display-additional-fields.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1497614400">-  Also re-build documentation on each build (bsc#1037297)</changelog>
  <changelog author="jthumshirn@suse.com" date="1498478400">- Provide nvme ns-descs subcommand (bsc#1038235)
  + 0005-nvme-cli-add-ns-descs-subcommand.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1498478401">- Create nvme files and directories in /etc/nvme (bsc#1045931 )</changelog>
  <changelog author="jthumshirn@suse.com" date="1498824000">- Add hostid option to connect command (bsc#1045293)
  + 0006-fabrics-add-hostid-option-to-connect-command.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1504180800">- Fix hostid parsing (bsc#1049272)
  + 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1504785600">- Generate Spec compliant UUID NQNs (bsc#1057498)
  + 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508241600">- allow override queue depth and nr io queues on connect-all (bsc#1063462)
  + 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1508328000">- Update to version v1.4 (FATE#322735):
  * Fixup Security send/recv to read data from disk
  * Unbreak RPM build after bash completion files were moved in 7e4c7596
  * fabrics: Fix disconnect_by_device from disconnecting instance 0 on error
  * lightnvm: allow to init target on factory mode
  * Fixed problem with security-recv binary output not working correctly
  * nvme-cli: return 0 if disconnect operation with cfg.nqn successfully
  * Fix compile for 32-bit
  * nvme-cli: Fix build on aarch64-linux-android-4.9
  * nvme-cli: Huawei plug-in.
  * nvme-print: Fix line spacing on -H option
  * id-ctrl: remove new lines from json output
  * nvme-list: print empty lists when no devices are present
  * fabrics: add option to override drivers queue depth
  * nvme-cli: nvme-intel implement json output for smart-log
  * nvme-cli: Add parsing support for noiob
  * Fix potential device string truncation
  * fabrics: add option to override drivers queue depth also for connect-all command
  * Regenerate man-pages
  * Release v1.3
  * nvme-print: Free only top-level json objects
  * fix use-after-free in pci.ids parsing
  * nvme-cli: add fields into identify controller data structure
  * nvme-cli: show more fields for id-ctrl
  * nvme-cli: id-ctrl: display additional fields
  * Show help when no or an invalid device is given
  * nvme-cli: add id-ctrl for nvme-huawei plug-in.
  * Fix spelling errors
  * fabrics: add hostid option to connect command
  * nvme-cli: add ns-descs subcommand
  * nvme-cli: Get Feature support for Extended Host Id
  * nvme-cli: Fix typo in Intel plugin and improve generic help text
  * Implement Intel Vendor specific logs
  * nvme-cli: add thermal management fields for smart-log
  * nvme-cli: add temperature sensor fields in json_smart_log
  * nvme-cli: add output-format discription for smart-log
  * Formatting update
  * Regenerate documentation
  * nvme-cli: add error message for nvme list.
  * Fix typo of flbas in nvme_create_max_ns_test
  * Show help for get-ns-id
  * Show help for nvme reset and subsystem-reset
  * nvme-cli: Extended Data Structure in resv-report
  * Update docs
  * resync nvme.h with the kernel nvme.h
  * nvme-cli : add support for sanitize command.
  * nvme-cli : add sanitize command documentation.
  * nvme-cli : add support for retrieving sanitize log.
  * nvme-cli : add sanitize-log command documentation.
  * fix build without libuuid
  * nvme-cli : wdc-plug-in : return on invalid input device.
  * nvme-cli : only print help text and return for nvme list -h option.
  * nvme-cli/list-ns: fix identifying active or allocated namespaces list
  * Fixed get_internal_log to parse the entire nlog and allow selection of specific regions to be parsed.
  * NVMe-CLI Fix Sanitize Command Parameter Types
  * Fix app tag and mask setting
  * Fix app tag field sizes
  * nvme-cli/list: fix when nvme device can not be open
  * nvme-cli/list: change fd returned by open operation from unsigned to signed.
  * Makefile: allow linker override for cross uuid test
  * nvme-cli: fix connecting failure due to invalid uuid format of hostid
  * nvme-cli/fabrics: Add ctrl-loss-tmo param to connect cmd
  * Fixing macro definitions to avoid issues when these are used in expressions
  * nvme-cli: add nvme directive command support
  * nvme-cli: add documentation for directive commands
  * fix for issue 219, show-regs reports AQA.ACQS and AQA.ASQS as bytes
  * nvme-cli: Fix nvme ns desc
  * new bit fields (6, 7, and 8) for OACS from NVMe rev 1.3
  * added new bit field (6) to ONCS from NVMe rev 1.3
  * nvme-cli: Describe action 3 of nvme activate
  * nvme-cli: generate spec-compliant UUID NQNs
  * NVMe-CLI Fixed Status Code check for reset type on fw-activate.
  * Added handling for temperature threshold values below 0C(273K) and removed buffer check for human readable output as Temperature threshold feature does not use Memory Buffer for Attributes
  * Update nvme.c
  * nvme-cli : Add Namespace Rescan Command
  * nvme-cli : Add man documentation files for ns-rescan command.
  * Version 1.4 Release
  * Drop upstream patches:
  - 0001-fabrics-add-option-to-override-drivers-queue-depth.patch
  - 0002-fabrics-add-option-to-override-drivers-queue-depth-a.patch
  - add-missing-nvme_id_crtl-fileds.patch
  - 0003-nvme-cli-show-more-fields-for-id-ctrl.patch
  - 0004-nvme-cli-id-ctrl-display-additional-fields.patch
  - 0005-nvme-cli-add-ns-descs-subcommand.patch
  - 0006-fabrics-add-hostid-option-to-connect-command.patch
  - 0007-nvme-cli-fix-connecting-failure-due-to-invalid-uuid-format.patch
  - 0008-nvme-cli-generate-spec-compliant-uuid-nqns.patch</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update descriptions.</changelog>
  <changelog author="jthumshirn@suse.com" date="1513252800">- Add list-subs subcommand (bsc#1072813)
  + 0001-nvme-Introduce-new-list-subsys-command.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1515585600">- Update to version v1.5 (FATE#322735):
  * Remove upstreamed patches:
  - 0001-nvme-Introduce-new-list-subsys-command.patch
  - 0009-fabrics-also-set-queue_size-and-nr_io_queues-on-conn.patch
  * fabrics: also set queue_size and nr_io_queues on connect-all connects
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli : wdc-plugin Add support for WDC SN100 and SN200 devices.
  * Add AEN decoder helper to get-log
  * Regen documentation
  * Add Nix(OS) install instructions to the README
  * Fix the Markdown code for the Alpine install instructions
  * nvme-cli: make address print format more human-readable
  * intel-nvme: Fix compiler errors and warnings
  * Include sizing data in json output that's already included in the non-json results.
  * Cleanup variable definitions
  * Add command effects log page
  * Increase default format timeout
  * Revert "nvme-cli: add duplicate_connect parameter support"
  * nvme-cli: add duplicate_connect parameter support
  * nvme-cli: fix wrong bitmask in number of rpmb units.
  * nvme-cli: make command description const
  * nvme/id-ns: do not try to get namespace id from non-block device.
  * Fix typo in previous commit
  * Fix long suffix parse on 32-bit machines
  * Nitpicked a printing alignment issue with the id-ns vendor specific field
  * Avoid unnecessary abbreviation.
  * nvme/flush: explicitely close file descriptor
  * Fix memory leak
  * Add 'DEAC' support to write-zeroes command
  * Rebuild documentation
  * nvme-cli: resync nvme.h with the kernel's
  * NVMe-CLI : WDC-Plugin Updated Smart Log Command
  * NVMe-CLI : WDC-Plugin Documentation for Updated Smart Log Command
  * Regenerate documentation
  * nvme-cli: update show_registers_cc() to use nvme.h
  * nvme-cli: replace values of all namespaces with NVME_NSID_ALL
  * nvme-cli: add prints for new HMB identify fields of TP 4002
  * Update get-feature help text
  * Improve code alignment on intel plugin
  * Update intel internal log man page.
  * nvme-cli/intel: Return if arg parsing returns error
  * nvme: add options for write command directives
  * Update documentation
  * Updated the human readable printing for the SGLS field in the id-ctrl command to be compliant with NVMe 1.3
  * nvme: Introduce new 'list-subsys' command
  * nvme-cli: add support to get properties for NVMe over Fabric
  * nvme-cli: support to set the property for NVMe over Fabric
  * Reorder command list
  * Documentation fixes
  * nvme-cli: add support alias command with Firmware Activate
  * nvme-cli: update Firmware Commit with boot partition feature
  * nvme-cli: add command specific status of Firmware Commit
  * Update documentation to use aliases
  * nvme-cli: add prints of boot partition feature to show-regs
  * nvme-cli: Fix small mem leak.
  * Release v1.5</changelog>
  <changelog author="jthumshirn@suse.com" date="1518523200">- Add NetApp vendor plugin (bsc#1080672)
  + 0001-nvme-cli-add-NetApp-plugin.patch
  + 0002-nvme-cli-add-netapp-smdevices-man-page.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1522843200">- Make log identifier a required parameter (bsc#1086240)
  + 0003-get-log-Make-log-identifier-a-required-parameter.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1523534400">- Add ctrl-loss-tmo option to fabrics connect manpage (bsc#1084379)
  + 0004-Documentation-add-manpage-entry-for-connect-s-ctrl-l.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1525262400">- Add keep-alive-tmo option to connect-all command (bsc#1090568)
  + 0005-fabrics-add-option-to-supply-keep-alive-timeout-for.patch</changelog>
  <changelog author="jthumshirn@suse.com" date="1528372800">- Add ctrl-loss-tmo to connect-all command (bsc#1084379)
  + 0006-fabrics-add-ctrl-loss-tmo-to-connect-all.patch</changelog>
  <changelog author="hare@suse.de" date="1533643200">- nvme-vendor: Add get_log LSP &amp; LSO fields from 1.3 spec
  (bsc#1099018)
  + 0007-nvme-vendor-Add-get-log-LSP-LSO-fields-from-1.3-spec.patch
- nvme-cli: Implement nvme_get_log13 (bsc#1099018)
  + 0008-nvme-cli-Implement-nvme_get_log13.patch
- nvme-cli: Add support of unsigned long long to json (bsc#1099018)
  + 0009-nvme-cli-Add-support-of-unsigned-long-long-to-json-r.patch
- nvme-cli: add support of RAE (bsc#1099018)
  + 0010-nvme-cli-add-support-of-RAE.patch
- nvme-cli: add minimal ana-log page support (bsc#1099018)
  + 0011-nvme-cli-add-minimal-ana-log-page-support.patch
- nvme-cli: add ana_log documentation (bsc#1099018)
  + 0012-nvme-cli-add-ana-log-documentation.patch
- nvme-discover: sanitize options
  + 0013-nvme-discover-sanitize-options.patch
- Fix double free in list_subsys
  + 0014-Fix-double-free-in-list_subsys.patch (bsc#1099018)
- Log error in case of failure in get_nvme_subsystem (bsc#1099018)
  + 0015-Log-error-incase-of-failure-in-get_nvme_subsystem_in.patch
- nvme-cli: move print function to nvme-print.c (bsc#1099018)
  + 0016-nvme-cli-move-print-function-to-nvme-print.patch
- nvme-cli: show partial results if controller fails (bsc#1099018)
  + 0017-nvme-cli-show-partial-results-if-controller-fails-du.patch
- nvme-list-subsys: Add device name argument and print ANA state
  (bsc#1099018)
  + 0018-nvme-list-subsys-Add-device-name-argument-and-print-.patch</changelog>
  <changelog author="hare@suse.de" date="1533902400">- nvme-discover: Retry discovery log if the generation counter changes
  (bsc#1087848)
  + 0019-nvme-discover-Retry-discovery-log-if-the-generation-.patch
- nvme-fabrics: Fix passing "host_traddr" for all transports (bsc#1084379)
  + 0020-nvme-cli-fabrics-Fix-passing-host_traddr-for-all-tra.patch
- fabrics: write ctrl_loss_tmo to fabrics device on connect (bsc#1084379)
  + 0021-fabrics-write-ctrl_loss_tmo-to-fabrics-device-on-con.patch
- fabrics: write keep-alive-timeout to fabrics device on connect (bsc#1090568)
  + 0022-fabrics-write-keep-alive-timeout-to-fabrics-device-o.patch</changelog>
</package>
<package pkgid="ea6eaec53829dbde9dc028928e5a0797826f017a578723bdb492066ad938a5c3" name="obs-service-refresh_patches" arch="noarch">
  <version epoch="0" ver="0.3.9+git.1537184752.d624424" rel="lp150.2.3.1"/>
  <changelog author="speilicke@suse.com" date="1383912000">- Initial version</changelog>
  <changelog author="speilicke@suse.com" date="1383912001">- Update to version 0.2+git.1383921307.c464e65:
  + Done implementing base logicGenerate *.changes file entries
  + Avoid writing the same changes twice</changelog>
  <changelog author="speilicke@suse.com" date="1384171200">- Update to version 0.2+git.1383925560.c99dd8e:
  + Done implementing base logicGenerate *.changes file entries
  + Avoid writing the same changes twice
  + Kill semicolon</changelog>
  <changelog author="speilicke@suse.com" date="1384430400">- Update to version 0.3.1+git.1384442162.3a0e42a:
  + Kill semicolonMore robust untarred directory finding
  + Also refresh patches applying with fuzz
  + Quilt unpacked tarball name can have arbitatry name
  + Better abort criteria
  + Always remove untarred dir
  + Implement dropping patches
  + Use compiled regular expressions
  + Remove dropped patches from specfile</changelog>
  <changelog author="speilicke@suse.com" date="1384776000">- Require python</changelog>
  <changelog author="speilicke@suse.com" date="1385467200">- Update to version 0.3.2+git.1385463523.dfec30c:
  + Exit early in case of errorsFix default changesauthor</changelog>
  <changelog author="speilicke@suse.com" date="1385467201">- Update to version 0.3.3+git.1385473723.13c63f4:
  + Whitespaces handling in OSCRC_EMAIL regexp</changelog>
  <changelog author="speilicke@suse.com" date="1386590400">- Update to version 0.3.4+git.1386595051.c3f87d4:
  + Fix %pre section patch regex</changelog>
  <changelog author="speilicke@suse.com" date="1386590401">- Update to version 0.3.4.1+git.1386598065.93569e2:
  + Support quilt on SLE_11</changelog>
  <changelog author="speilicke@suse.com" date="1386676800">- Update to version 0.3.5+git.1386667973.d5e8213:
  + Rework fuzz detection
  + Pass --fuzz=0 to "quilt setup"
  + Do not list twice patches in .changes entry
  + Switch to C locale to avoid parsing localized output</changelog>
  <changelog author="speilicke@suse.com" date="1389960000">- Update to version 0.3.6+git.1389964042.5343549:
  + Introduce "--ignorefuzz" argument</changelog>
  <changelog author="speilicke@suse.com" date="1392033600">- Update to version 0.3.6+git.1392041308.272e6ab:
  + Adjust changes message for refreshed patches</changelog>
  <changelog author="speilicke@suse.com" date="1392206400">- Update to version 0.3.7+git.1392213832.12f52e6:
  + Disable positive notifications (be more quiet)
  + Don't create entry for no changes</changelog>
  <changelog author="speilicke@suse.com" date="1392638400">- Update to version 0.3.8+git.1392653668.565b745:
  + Remove patches only after processing all specs</changelog>
  <changelog author="speilicke@suse.com" date="1394107200">- Update to version 0.3.9+git.1394121974.21d4106:
  + Fix dropped_patches</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1537185600">- Update to version 0.3.9+git.1537184752.d624424:
  * Avoid parsing shell output (boo#1108189)</changelog>
</package>
<package pkgid="3a6395f9f3ac3c7d555c83986b3a8587d8f998f7567ea6265e7e1b7ffe0885fa" name="obs-service-refresh_patches" arch="src">
  <version epoch="0" ver="0.3.9+git.1537184752.d624424" rel="lp150.2.3.1"/>
  <changelog author="speilicke@suse.com" date="1383912000">- Initial version</changelog>
  <changelog author="speilicke@suse.com" date="1383912001">- Update to version 0.2+git.1383921307.c464e65:
  + Done implementing base logicGenerate *.changes file entries
  + Avoid writing the same changes twice</changelog>
  <changelog author="speilicke@suse.com" date="1384171200">- Update to version 0.2+git.1383925560.c99dd8e:
  + Done implementing base logicGenerate *.changes file entries
  + Avoid writing the same changes twice
  + Kill semicolon</changelog>
  <changelog author="speilicke@suse.com" date="1384430400">- Update to version 0.3.1+git.1384442162.3a0e42a:
  + Kill semicolonMore robust untarred directory finding
  + Also refresh patches applying with fuzz
  + Quilt unpacked tarball name can have arbitatry name
  + Better abort criteria
  + Always remove untarred dir
  + Implement dropping patches
  + Use compiled regular expressions
  + Remove dropped patches from specfile</changelog>
  <changelog author="speilicke@suse.com" date="1384776000">- Require python</changelog>
  <changelog author="speilicke@suse.com" date="1385467200">- Update to version 0.3.2+git.1385463523.dfec30c:
  + Exit early in case of errorsFix default changesauthor</changelog>
  <changelog author="speilicke@suse.com" date="1385467201">- Update to version 0.3.3+git.1385473723.13c63f4:
  + Whitespaces handling in OSCRC_EMAIL regexp</changelog>
  <changelog author="speilicke@suse.com" date="1386590400">- Update to version 0.3.4+git.1386595051.c3f87d4:
  + Fix %pre section patch regex</changelog>
  <changelog author="speilicke@suse.com" date="1386590401">- Update to version 0.3.4.1+git.1386598065.93569e2:
  + Support quilt on SLE_11</changelog>
  <changelog author="speilicke@suse.com" date="1386676800">- Update to version 0.3.5+git.1386667973.d5e8213:
  + Rework fuzz detection
  + Pass --fuzz=0 to "quilt setup"
  + Do not list twice patches in .changes entry
  + Switch to C locale to avoid parsing localized output</changelog>
  <changelog author="speilicke@suse.com" date="1389960000">- Update to version 0.3.6+git.1389964042.5343549:
  + Introduce "--ignorefuzz" argument</changelog>
  <changelog author="speilicke@suse.com" date="1392033600">- Update to version 0.3.6+git.1392041308.272e6ab:
  + Adjust changes message for refreshed patches</changelog>
  <changelog author="speilicke@suse.com" date="1392206400">- Update to version 0.3.7+git.1392213832.12f52e6:
  + Disable positive notifications (be more quiet)
  + Don't create entry for no changes</changelog>
  <changelog author="speilicke@suse.com" date="1392638400">- Update to version 0.3.8+git.1392653668.565b745:
  + Remove patches only after processing all specs</changelog>
  <changelog author="speilicke@suse.com" date="1394107200">- Update to version 0.3.9+git.1394121974.21d4106:
  + Fix dropped_patches</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1537185600">- Update to version 0.3.9+git.1537184752.d624424:
  * Avoid parsing shell output (boo#1108189)</changelog>
</package>
<package pkgid="b428fd1cf07221949933fbaa27b46ddc145143feb0d54ffa15074acfab92a8c5" name="okular" arch="src">
  <version epoch="0" ver="17.12.3" rel="lp150.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * cmake: Remove endif that doesn't match opening if</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix segfault when document is closed while annotation is selected</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't repeat work of KAboutData::setApplicationData(), set window icon
  * Fix typo
  * Drop unused DBusAddons</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Initialize cursor in PageView scrollbars with ArrowCursor (kde#334798)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Shell: Fix sync "Show menubar" action status</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * plucker: Comment code to reduce warnings
  * Add a few make gcc lines
  * Fix small warning
  * Make newer gcc happier about fallthrough
  * Add missing break to switch case
  * Fix warning in newer gcc versions
  * 1.2.x for KDE Applications 17.08.x
  * port to Kirigami 2
  * Support Forward and Backward mouse buttons in presentation mode
  * Simplify method FilePrinter::psPaperSize
  * Minor
  * Bug 236688 - Sort pages according to TOC in CHM Files
  * CHM: zooming changes the font size
  * Bug 262265 chmlib should not send qFatal if encoding could not be guessed
  * kio_msits emits mimetype again</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Search for Kirigami
  * CMake: Use some more find_package(... CONFIG)
  * Do not start reloading again if we're reloading
  * Fix crash when closing
  * Fix warning about TRANSLATION_DOMAIN being defined twice
  * Add the base .arcconfig file
  * Fix translations: add translation domain for generators
  * Fix memory leak in text document settings d-pointers
  * Fix width and height being switched when printing Custom size</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Show tooltip for annotations without handle too
  * Properly create KPixmapSequence
  * Fix sidebar labels being unreadable when selected or hovered over (kde#382139)
  * Fix automatic reload of files saved with QSaveFile (kde#384185)</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix crash on rotation jobs</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Prevent Okular from crashing when synctex logs an error (kde#383915)
  * Change whitespace in synctex patches
  * Fix highlight/annotation clipping with Qt scaling (kde#386110)
  * Give warnings when the file is modified externally
  * generators: Use a specific description for libzip</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Fix crash when accessing text page after save
  * Unbreak compilation of the chm backend
  * We broke ABI by adding a new virtual to generator
  * Increase version now that we're not on unstable versioning anymore
  * Enable -DQT_NO_URL_CAST_FROM_STRING and fix compilation</changelog>
  <changelog author="lbeltrame@kde.org" date="1513080000">- Adjust license after legal review</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * remove deprecated Encoding key from desktop files
  * Fix testSaveAsUndoStackAnnotations autotest
  * Don't call m_formsMessage-&gt;setVisible( true ) on unsetDummyMode</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add pdf.gz file save test
  * Fix saving annotations to gzipped files (kde#338742)
  * Fix crash on save when we had edited forms
  * parttest: make the mouse selection be a few steps
  * Use correct arrow cursor for Annotations' close buttons (kde#384381)
  * Improve parttest a bit
  * Fix regression due to more QTemporaryFile behaviour changes
  * Fix crash when exporting
  * djvu: Fix printing</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Add QVERIFY to QTest::qWaitForWindowExposed
  * Fix crash due to dangling pointer in MouseAnnotation (kde#388228)
  * Build++
  * Add test that produces bug 388288 crash
  * Make it compile
  * Make Part::openUrl not discard OpenUrlArguments (kde#386600)
  * Fix potential crash in document saving
  * PDF: Fix potential crash
  * XPS: Fix crash opening some files</changelog>
  <changelog author="wbauer@tmo.at" date="1522152000">- Add some build requirements to enable additional features:
  * Qt5TextToSpeech for text-to-speech support
  * purpose-devel for enabling the share menu
  * libmarkdown-devel for displaying Markdown documents</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1536580800">- Add patch 0001-Fix-path-traversal-issue-when-extracting-an-.okular-.patch:
  * Fix directory traversal issue with .okular files (kde#398096,
  boo#1107591,rh#1626265, CVE-2018-1000801)</changelog>
</package>
<package pkgid="46760157927bb759c29fd464f8c41eb4f76db8f32a3f244dc9d043faf154ca2f" name="okular" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * cmake: Remove endif that doesn't match opening if</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix segfault when document is closed while annotation is selected</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't repeat work of KAboutData::setApplicationData(), set window icon
  * Fix typo
  * Drop unused DBusAddons</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Initialize cursor in PageView scrollbars with ArrowCursor (kde#334798)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Shell: Fix sync "Show menubar" action status</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * plucker: Comment code to reduce warnings
  * Add a few make gcc lines
  * Fix small warning
  * Make newer gcc happier about fallthrough
  * Add missing break to switch case
  * Fix warning in newer gcc versions
  * 1.2.x for KDE Applications 17.08.x
  * port to Kirigami 2
  * Support Forward and Backward mouse buttons in presentation mode
  * Simplify method FilePrinter::psPaperSize
  * Minor
  * Bug 236688 - Sort pages according to TOC in CHM Files
  * CHM: zooming changes the font size
  * Bug 262265 chmlib should not send qFatal if encoding could not be guessed
  * kio_msits emits mimetype again</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Search for Kirigami
  * CMake: Use some more find_package(... CONFIG)
  * Do not start reloading again if we're reloading
  * Fix crash when closing
  * Fix warning about TRANSLATION_DOMAIN being defined twice
  * Add the base .arcconfig file
  * Fix translations: add translation domain for generators
  * Fix memory leak in text document settings d-pointers
  * Fix width and height being switched when printing Custom size</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Show tooltip for annotations without handle too
  * Properly create KPixmapSequence
  * Fix sidebar labels being unreadable when selected or hovered over (kde#382139)
  * Fix automatic reload of files saved with QSaveFile (kde#384185)</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix crash on rotation jobs</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Prevent Okular from crashing when synctex logs an error (kde#383915)
  * Change whitespace in synctex patches
  * Fix highlight/annotation clipping with Qt scaling (kde#386110)
  * Give warnings when the file is modified externally
  * generators: Use a specific description for libzip</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Fix crash when accessing text page after save
  * Unbreak compilation of the chm backend
  * We broke ABI by adding a new virtual to generator
  * Increase version now that we're not on unstable versioning anymore
  * Enable -DQT_NO_URL_CAST_FROM_STRING and fix compilation</changelog>
  <changelog author="lbeltrame@kde.org" date="1513080000">- Adjust license after legal review</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * remove deprecated Encoding key from desktop files
  * Fix testSaveAsUndoStackAnnotations autotest
  * Don't call m_formsMessage-&gt;setVisible( true ) on unsetDummyMode</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add pdf.gz file save test
  * Fix saving annotations to gzipped files (kde#338742)
  * Fix crash on save when we had edited forms
  * parttest: make the mouse selection be a few steps
  * Use correct arrow cursor for Annotations' close buttons (kde#384381)
  * Improve parttest a bit
  * Fix regression due to more QTemporaryFile behaviour changes
  * Fix crash when exporting
  * djvu: Fix printing</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Add QVERIFY to QTest::qWaitForWindowExposed
  * Fix crash due to dangling pointer in MouseAnnotation (kde#388228)
  * Build++
  * Add test that produces bug 388288 crash
  * Make it compile
  * Make Part::openUrl not discard OpenUrlArguments (kde#386600)
  * Fix potential crash in document saving
  * PDF: Fix potential crash
  * XPS: Fix crash opening some files</changelog>
  <changelog author="wbauer@tmo.at" date="1522152000">- Add some build requirements to enable additional features:
  * Qt5TextToSpeech for text-to-speech support
  * purpose-devel for enabling the share menu
  * libmarkdown-devel for displaying Markdown documents</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1536580800">- Add patch 0001-Fix-path-traversal-issue-when-extracting-an-.okular-.patch:
  * Fix directory traversal issue with .okular files (kde#398096,
  boo#1107591,rh#1626265, CVE-2018-1000801)</changelog>
</package>
<package pkgid="c9e7b9b6a9e58d14e99ae6ff078d7c4633525eb8be4004e6d4fddc1cc078f6c2" name="okular-devel" arch="x86_64">
  <version epoch="0" ver="17.12.3" rel="lp150.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * cmake: Remove endif that doesn't match opening if</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix segfault when document is closed while annotation is selected</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't repeat work of KAboutData::setApplicationData(), set window icon
  * Fix typo
  * Drop unused DBusAddons</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Initialize cursor in PageView scrollbars with ArrowCursor (kde#334798)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Shell: Fix sync "Show menubar" action status</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * plucker: Comment code to reduce warnings
  * Add a few make gcc lines
  * Fix small warning
  * Make newer gcc happier about fallthrough
  * Add missing break to switch case
  * Fix warning in newer gcc versions
  * 1.2.x for KDE Applications 17.08.x
  * port to Kirigami 2
  * Support Forward and Backward mouse buttons in presentation mode
  * Simplify method FilePrinter::psPaperSize
  * Minor
  * Bug 236688 - Sort pages according to TOC in CHM Files
  * CHM: zooming changes the font size
  * Bug 262265 chmlib should not send qFatal if encoding could not be guessed
  * kio_msits emits mimetype again</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Search for Kirigami
  * CMake: Use some more find_package(... CONFIG)
  * Do not start reloading again if we're reloading
  * Fix crash when closing
  * Fix warning about TRANSLATION_DOMAIN being defined twice
  * Add the base .arcconfig file
  * Fix translations: add translation domain for generators
  * Fix memory leak in text document settings d-pointers
  * Fix width and height being switched when printing Custom size</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Show tooltip for annotations without handle too
  * Properly create KPixmapSequence
  * Fix sidebar labels being unreadable when selected or hovered over (kde#382139)
  * Fix automatic reload of files saved with QSaveFile (kde#384185)</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix crash on rotation jobs</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Prevent Okular from crashing when synctex logs an error (kde#383915)
  * Change whitespace in synctex patches
  * Fix highlight/annotation clipping with Qt scaling (kde#386110)
  * Give warnings when the file is modified externally
  * generators: Use a specific description for libzip</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Fix crash when accessing text page after save
  * Unbreak compilation of the chm backend
  * We broke ABI by adding a new virtual to generator
  * Increase version now that we're not on unstable versioning anymore
  * Enable -DQT_NO_URL_CAST_FROM_STRING and fix compilation</changelog>
  <changelog author="lbeltrame@kde.org" date="1513080000">- Adjust license after legal review</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * remove deprecated Encoding key from desktop files
  * Fix testSaveAsUndoStackAnnotations autotest
  * Don't call m_formsMessage-&gt;setVisible( true ) on unsetDummyMode</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add pdf.gz file save test
  * Fix saving annotations to gzipped files (kde#338742)
  * Fix crash on save when we had edited forms
  * parttest: make the mouse selection be a few steps
  * Use correct arrow cursor for Annotations' close buttons (kde#384381)
  * Improve parttest a bit
  * Fix regression due to more QTemporaryFile behaviour changes
  * Fix crash when exporting
  * djvu: Fix printing</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Add QVERIFY to QTest::qWaitForWindowExposed
  * Fix crash due to dangling pointer in MouseAnnotation (kde#388228)
  * Build++
  * Add test that produces bug 388288 crash
  * Make it compile
  * Make Part::openUrl not discard OpenUrlArguments (kde#386600)
  * Fix potential crash in document saving
  * PDF: Fix potential crash
  * XPS: Fix crash opening some files</changelog>
  <changelog author="wbauer@tmo.at" date="1522152000">- Add some build requirements to enable additional features:
  * Qt5TextToSpeech for text-to-speech support
  * purpose-devel for enabling the share menu
  * libmarkdown-devel for displaying Markdown documents</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1536580800">- Add patch 0001-Fix-path-traversal-issue-when-extracting-an-.okular-.patch:
  * Fix directory traversal issue with .okular files (kde#398096,
  boo#1107591,rh#1626265, CVE-2018-1000801)</changelog>
</package>
<package pkgid="bc054b9bfe7787a0ee6ad79a32d80f73705478042c6fdb94e0e23ea6302d039b" name="okular-lang" arch="noarch">
  <version epoch="0" ver="17.12.3" rel="lp150.3.3.1"/>
  <changelog author="lbeltrame@kde.org" date="1490443200">- Update to 17.03.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.03.80.php
- Changes since 16.12.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1491998400">- Update to 17.03.90
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04-rc.php
- Changes since 17.03.80:
  * cmake: Remove endif that doesn't match opening if</changelog>
  <changelog author="lbeltrame@kde.org" date="1492344000">- Update to 17.04.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.0.php
- Changes since 17.03.90:
  * Fix segfault when document is closed while annotation is selected</changelog>
  <changelog author="lbeltrame@kde.org" date="1495022400">- Update to 17.04.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.1.php
- Changes since 17.04.0:
  * Don't repeat work of KAboutData::setApplicationData(), set window icon
  * Fix typo
  * Drop unused DBusAddons</changelog>
  <changelog author="lbeltrame@kde.org" date="1496836800">- Update to 17.04.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.2.php
- Changes since 17.04.1:
  * Initialize cursor in PageView scrollbars with ArrowCursor (kde#334798)</changelog>
  <changelog author="lbeltrame@kde.org" date="1500206400">- Update to 17.04.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.04.3.php
- Changes since 17.04.2:
  * Shell: Fix sync "Show menubar" action status</changelog>
  <changelog author="christophe@krop.fr" date="1501934400">- Update to KDE Applications 17.07.90
  * KDE Applications 17.07.90
  * https://www.kde.org/announcements/announce-applications-17.07.90.php</changelog>
  <changelog author="christophe@krop.fr" date="1502452800">- Update to KDE Applications 17.08.0
  * New feature release
  * https://www.kde.org/announcements/announce-applications-17.08.0.php
- Changes since 17.04.3 :
  * plucker: Comment code to reduce warnings
  * Add a few make gcc lines
  * Fix small warning
  * Make newer gcc happier about fallthrough
  * Add missing break to switch case
  * Fix warning in newer gcc versions
  * 1.2.x for KDE Applications 17.08.x
  * port to Kirigami 2
  * Support Forward and Backward mouse buttons in presentation mode
  * Simplify method FilePrinter::psPaperSize
  * Minor
  * Bug 236688 - Sort pages according to TOC in CHM Files
  * CHM: zooming changes the font size
  * Bug 262265 chmlib should not send qFatal if encoding could not be guessed
  * kio_msits emits mimetype again</changelog>
  <changelog author="lbeltrame@kde.org" date="1504785600">- Update to 17.08.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.1.php
- Changes since 17.08.0:
  * Search for Kirigami
  * CMake: Use some more find_package(... CONFIG)
  * Do not start reloading again if we're reloading
  * Fix crash when closing
  * Fix warning about TRANSLATION_DOMAIN being defined twice
  * Add the base .arcconfig file
  * Fix translations: add translation domain for generators
  * Fix memory leak in text document settings d-pointers
  * Fix width and height being switched when printing Custom size</changelog>
  <changelog author="lbeltrame@kde.org" date="1508155200">- Update to 17.08.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.2.php
- Changes since 17.08.1:
  * Show tooltip for annotations without handle too
  * Properly create KPixmapSequence
  * Fix sidebar labels being unreadable when selected or hovered over (kde#382139)
  * Fix automatic reload of files saved with QSaveFile (kde#384185)</changelog>
  <changelog author="lbeltrame@kde.org" date="1510228800">- Update to 17.08.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.08.3.php
- Changes since 17.08.2:
  * Fix crash on rotation jobs</changelog>
  <changelog author="lbeltrame@kde.org" date="1511179200">- Update to 17.11.80
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-beta.php
- Changes since 17.08.3:
  * Too many changes to list here</changelog>
  <changelog author="lbeltrame@kde.org" date="1512216000">- Update to 17.11.90
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12-rc.php
- Changes since 17.11.80:
  * Prevent Okular from crashing when synctex logs an error (kde#383915)
  * Change whitespace in synctex patches
  * Fix highlight/annotation clipping with Qt scaling (kde#386110)
  * Give warnings when the file is modified externally
  * generators: Use a specific description for libzip</changelog>
  <changelog author="lbeltrame@kde.org" date="1512820800">- Update to 17.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.0.php
- Changes since 17.11.90:
  * Fix crash when accessing text page after save
  * Unbreak compilation of the chm backend
  * We broke ABI by adding a new virtual to generator
  * Increase version now that we're not on unstable versioning anymore
  * Enable -DQT_NO_URL_CAST_FROM_STRING and fix compilation</changelog>
  <changelog author="lbeltrame@kde.org" date="1513080000">- Adjust license after legal review</changelog>
  <changelog author="lbeltrame@kde.org" date="1515672000">- Update to 17.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.1.php
- Changes since 17.12.0:
  * remove deprecated Encoding key from desktop files
  * Fix testSaveAsUndoStackAnnotations autotest
  * Don't call m_formsMessage-&gt;setVisible( true ) on unsetDummyMode</changelog>
  <changelog author="lbeltrame@kde.org" date="1518004800">- Update to 17.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.2.php
- Changes since 17.12.1:
  * Add pdf.gz file save test
  * Fix saving annotations to gzipped files (kde#338742)
  * Fix crash on save when we had edited forms
  * parttest: make the mouse selection be a few steps
  * Use correct arrow cursor for Annotations' close buttons (kde#384381)
  * Improve parttest a bit
  * Fix regression due to more QTemporaryFile behaviour changes
  * Fix crash when exporting
  * djvu: Fix printing</changelog>
  <changelog author="lbeltrame@kde.org" date="1520510400">- Update to 17.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/announce-applications-17.12.3.php
- Changes since 17.12.2:
  * Add QVERIFY to QTest::qWaitForWindowExposed
  * Fix crash due to dangling pointer in MouseAnnotation (kde#388228)
  * Build++
  * Add test that produces bug 388288 crash
  * Make it compile
  * Make Part::openUrl not discard OpenUrlArguments (kde#386600)
  * Fix potential crash in document saving
  * PDF: Fix potential crash
  * XPS: Fix crash opening some files</changelog>
  <changelog author="wbauer@tmo.at" date="1522152000">- Add some build requirements to enable additional features:
  * Qt5TextToSpeech for text-to-speech support
  * purpose-devel for enabling the share menu
  * libmarkdown-devel for displaying Markdown documents</changelog>
  <changelog author="Luca Beltrame &lt;lbeltrame@kde.org&gt;" date="1536580800">- Add patch 0001-Fix-path-traversal-issue-when-extracting-an-.okular-.patch:
  * Fix directory traversal issue with .okular files (kde#398096,
  boo#1107591,rh#1626265, CVE-2018-1000801)</changelog>
</package>
<package pkgid="a0231d8fc88f7055501f65c8c7e45093a30bf53e9aa3f9f34629f55e8129e3b4" name="openSUSE-xfce-icon-theme" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="1574fb697ded3aa3b8a81b22c964eccdd4dde88a7f5a571cc1d23019ccc1f30a" name="openafs" arch="src">
  <version epoch="0" ver="1.8.0" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="900399be40067b29290295112b42340f1a5b585c444075d9912a4936974d80ac" name="openafs" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="168c8392e51a98bca73dc645f9674fddb33cd56ef80a8ea93c4316b3bb8b7753" name="openafs-authlibs" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="f95779961d8d4ee50ba04e67fcae54c08496079c757765a61bfacac61ececd64" name="openafs-authlibs-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="a63abcf5b97aa03f1fc0ada6ef26045153bf6a615668ed5e7bd2e6cdf5f38cd3" name="openafs-client" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="d7fa1b1b2d73260000c40102e1271c1a07ba162f6d65335639ca047ab194c51f" name="openafs-devel" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="ed4abd7333e6aba11acf2f9dc544034b8b54132437c3adcd018df122ed467cab" name="openafs-fuse_client" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="481586059f6405ae5afddfec79e7595e36cbd196bab38a0701f93ed103f0e774" name="openafs-kernel-source" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="a38c1ca01de0574531feb6375054cf64d9876fd35d8ee1945de03be5cf1e2f71" name="openafs-kmp-default" arch="x86_64">
  <version epoch="0" ver="1.8.0_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="f41bd019f667b4cd43b746594c3661c1e402575f3ab5cd0dec1e7eeb25560904" name="openafs-server" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.2.2.1"/>
  <changelog author="christof.hanke@rzg.mpg.de" date="1482753600">- first version of 1.8
- remove docs package, put man pages in induvidual packets
- remove layout-patch, deal with this in spec file directly</changelog>
  <changelog author="christof.hanke@rzg.mpg.de" date="1485518400">- remove pam, is not build on x86_64 and i596</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486468800">- enable building of KMP
- make openafs-krb5-mit package dependend on openafs-client package
- add ld.so - config to main package</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1486641600">- rename package to openafs18-* so they don't override
  stable openafs-1.6 ones
- move ld.so to main package -- was in server-packages</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267200">- spec-file:
  + use hardlinks for fdupes to provide correct header files in
    kernel-source
  + minor bugfixes, reorganization
- rename changes file to openafs18.changes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267201">- update to 1.8.0pre2
- use a preamble-file for KMP
- sort/cleanup/beautify spec-file</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1504267202">- do not strip binaries on install
- fix %postun server</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1512648000">- update to 1.8.0pre3
- add integrity check of tar-balls</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1515326400">- update to 1.8.0pre4
- add patch for ncurses detection</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819200">- update to 1.8.0pre5</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1519819201">- add compat macro for new _fillupdir macro introduced in Nov 2017</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1520337600">- cleanup package for Factory:
  - rename package to openafs.
  - remove sys-v init stuff.
  - apply recommendations given in Request 581009</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1521115200">- cleanup last cleanup: also remove rc.* files</changelog>
  <changelog author="jengelh@inai.de" date="1521374400">- Replace old $RPM_* vars (most of them) by macros.
- Replace unnecessary macro indirections like %bindir by %_bindir.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522238400">- rename binary backup to afs_backup.
  - rename man pages and prefix "backup" in content
- prefix "scout" by "afs_" in man-page
- remove unnecessary macro indirection %ARCH
- replace hard-coded paths by macros
- make whitespace more consistent
- minor syntax and typo fixes</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1522670400">- build fuse-client unconditionally.
- do not build KMP on unsupported architectures so that overall
  build succeeds.</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523016000">- fix dependencies between packages, so that fuse-client
  can be installed.
- cleanup old sys-v sysconfig files and other minor fixes
- fix unit file for fuse-client</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1523880000">- fdupes: use symlinks instead of hardlinks. Do not fdupe
  /etc and /var</changelog>
  <changelog author="christof.hanke@mpcdf.mpg.de" date="1524139200">- remove package krb5-mit. It contained binaries for server and client.
  Besides, client and server already had an implicit dependency on krb5.
  Put the binaries to client and server-package respectively.
- Remove openafs-1.8.x.heimdal.patch and everything heimdal-related.
  SUSE does not provide a proper heimdal and it's untested for a long
  time.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1525435200">- Update to 1.8.0
- Fix AArch64 build by updating spec and backporting patches:
  * add_support_fo_arm64_linux26.patch
  * dont_require_AFS_SYSCALL.patch
  * add_AFS_STRINGIZE_macro.patch
  * avoid_double_param_in_arm64_kernel.patch</changelog>
</package>
<package pkgid="48d41066dbbd01a6452a665f8e9a440bb71e8b6349b8515a2efc47c55da9937e" name="opencv" arch="src">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456660800">- Added _constraints file to avoid random failures on small workers
  (at least for builds on PMBS)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Added opencv_contrib_face-3.1.0.tar.bz2
  * This tarball is created to take only the face module from the
    contrib package. The Face module is required by libkface, which
    in its turn is required by digikam.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Add python 3 support</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458561600">- Test for python versions greater than or equal to the current
  version.</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Apply upstream patch opencv-gcc6-disable-pch.patch to disable
  PCH for GCC6.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465300800">- In case we build using GCC6 (or newer), add -mlra to CFLAGS to
  workaround gcc bug
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71294.</changelog>
  <changelog author="olaf@aepfle.de" date="1469102400">- Enable ffmpeg support unconditional</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1495972800">- Update to OpenCV 3.2.0
  - Results from 11 GSoC 2016 projects have been submitted to the library:
    + sinusoidal patterns for structured light and phase unwrapping module
    [Ambroise Moreau (Delia Passalacqua)]
    + DIS optical flow (excellent dense optical flow algorithm that is both
    significantly better and significantly faster than Farneback?s algorithm ?
    our baseline), and learning-based color constancy algorithms implementation
    [Alexander Bokov (Maksim Shabunin)]
    + CNN based tracking algorithm (GOTURN) [Tyan Vladimir (Antonella Cascitelli)]
    + PCAFlow and Global Patch Collider algorithms implementation
    [Vladislav Samsonov (Ethan Rublee)]
    + Multi-language OpenCV Tutorials in Python, C++ and Java
    [João Cartucho (Vincent Rabaud)]
    + New camera model and parallel processing for stitching pipeline
    [Jiri Horner (Bo Li)]
    + Optimizations and improvements of dnn module
    [Vitaliy Lyudvichenko (Anatoly Baksheev)]
    + Base64 and JSON support for file storage. Use names like
    ?myfilestorage.xml?base64? when writing file storage to store big chunks of
    numerical data in base64-encoded form.  [Iric Wu (Vadim Pisarevsky)]
    + tiny_dnn improvements and integration
    [Edgar Riba (Manuele Tamburrano, Stefano Fabri)]
    + Quantization and semantic saliency detection with tiny_dnn
    [Yida Wang (Manuele Tamburrano, Stefano Fabri)]
    + Word-spotting CNN based algorithm
    [Anguelos Nicolaou (Lluis Gomez)]
  - Contributions besides GSoC:
    + Greatly improved and accelerated dnn module in opencv_contrib:
  - Many new layers, including deconvolution, LSTM etc.
  - Support for semantic segmentation and SSD networks with samples.
  - TensorFlow importer + sample that runs Inception net by Google.
    + More image formats and camera backends supported
    + Interactive camera calibration app
    + Multiple algorithms implemented in opencv_contrib
    + Supported latest OSes, including Ubuntu 16.04 LTS and OSX 10.12
    + Lot?s of optimizations for IA and ARM archs using parallelism, vector
    instructions and new OpenCL kernels.
    + OpenCV now can use vendor-provided OpenVX and LAPACK/BLAS (including Intel MKL,
    Apple?s Accelerate, OpenBLAS and Atlas) for acceleration
- Refreshed opencv-build-compare.patch
- Dropped upstream opencv-gcc5.patch
- Replace opencv-gcc6-disable-pch.patch with upstream patch
  opencv-gcc6-fix-pch-support-PR8345.patch
- Enable TBB support (C++ threading library)
- Add dependency on openBLAS</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Use %cmake macros
- Remove the conditions that are not really needed
- Add tests conditional disabled by default
  * Many tests fail and there are missing testdata
- Switch to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1496664001">- Add conditional for the qt5/qt4 integration
  * This is used only for gui tools, library is not affected
- Add provides/obsoletes for the qt5 packages to allow migration
- Drop patch opencv-qt5-sobump.diff
  * Used only by the obsoleted qt5 variant</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500120000">- Add 0001-Do-not-include-glx.h-when-using-GLES.patch
  Fix build for 32bit ARM, including both GLES and desktop GL headers
  causes incompatible pointer type errors</changelog>
  <changelog author="kah0922@gmail.com" date="1507550400">- Update to 3.3
- Dropped obsolete patches
  * opencv-gcc6-fix-pch-support-PR8345.patch
  * opencv-gles.patch
- Updated opencv-build-compare.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Rename python subpackage to python2
- Do not explicitly require python-base for python subpackages</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 3.3.1:
  * Lots of various bugfixes
- Update source url</changelog>
  <changelog author="ecsos@opensuse.org" date="1509796800">- fix build error/unresolvable for Leap 42.2 and 42.3</changelog>
  <changelog author="ecsos@opensuse.org" date="1510142400">- change requires of python-numpy-devel to build in Leap and
  to not break factory in future</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update licensing information</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511611200">- Readd opencv-gles.patch, it is *not* included upstream; otherwise
  build breaks on all GLES Qt5 platforms (armv6l, armv7l, aarch64)
- add fix_processor_detection_for_32bit_on_64bit.patch
- Correctly set optimizations and dynamic dispatch on ARM, use
  OpenCV 3.3 syntax on x86.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditionals for python2 and python3 to allow us enabling
  only desired python variants when needed
- Do not depend on sphinx as py2 and py3 seem to collide there</changelog>
  <changelog author="qzheng@suse.com" date="1526904000">- Add opencv-imgproc-fix-bounds-check.patch:
  make backport from commit 4ca89db to fix imgproc(hdr)
  bounds check in HdrDecoder::checkSignature ( bsc#1074312,
  CVE-2017-18009 ).</changelog>
</package>
<package pkgid="b87e373e4824b40b1ec92ec2aa8d2fa5d272b4685f740f9ba8bcdb7b0fd6e265" name="opencv" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456660800">- Added _constraints file to avoid random failures on small workers
  (at least for builds on PMBS)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Added opencv_contrib_face-3.1.0.tar.bz2
  * This tarball is created to take only the face module from the
    contrib package. The Face module is required by libkface, which
    in its turn is required by digikam.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Add python 3 support</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458561600">- Test for python versions greater than or equal to the current
  version.</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Apply upstream patch opencv-gcc6-disable-pch.patch to disable
  PCH for GCC6.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465300800">- In case we build using GCC6 (or newer), add -mlra to CFLAGS to
  workaround gcc bug
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71294.</changelog>
  <changelog author="olaf@aepfle.de" date="1469102400">- Enable ffmpeg support unconditional</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1495972800">- Update to OpenCV 3.2.0
  - Results from 11 GSoC 2016 projects have been submitted to the library:
    + sinusoidal patterns for structured light and phase unwrapping module
    [Ambroise Moreau (Delia Passalacqua)]
    + DIS optical flow (excellent dense optical flow algorithm that is both
    significantly better and significantly faster than Farneback?s algorithm ?
    our baseline), and learning-based color constancy algorithms implementation
    [Alexander Bokov (Maksim Shabunin)]
    + CNN based tracking algorithm (GOTURN) [Tyan Vladimir (Antonella Cascitelli)]
    + PCAFlow and Global Patch Collider algorithms implementation
    [Vladislav Samsonov (Ethan Rublee)]
    + Multi-language OpenCV Tutorials in Python, C++ and Java
    [João Cartucho (Vincent Rabaud)]
    + New camera model and parallel processing for stitching pipeline
    [Jiri Horner (Bo Li)]
    + Optimizations and improvements of dnn module
    [Vitaliy Lyudvichenko (Anatoly Baksheev)]
    + Base64 and JSON support for file storage. Use names like
    ?myfilestorage.xml?base64? when writing file storage to store big chunks of
    numerical data in base64-encoded form.  [Iric Wu (Vadim Pisarevsky)]
    + tiny_dnn improvements and integration
    [Edgar Riba (Manuele Tamburrano, Stefano Fabri)]
    + Quantization and semantic saliency detection with tiny_dnn
    [Yida Wang (Manuele Tamburrano, Stefano Fabri)]
    + Word-spotting CNN based algorithm
    [Anguelos Nicolaou (Lluis Gomez)]
  - Contributions besides GSoC:
    + Greatly improved and accelerated dnn module in opencv_contrib:
  - Many new layers, including deconvolution, LSTM etc.
  - Support for semantic segmentation and SSD networks with samples.
  - TensorFlow importer + sample that runs Inception net by Google.
    + More image formats and camera backends supported
    + Interactive camera calibration app
    + Multiple algorithms implemented in opencv_contrib
    + Supported latest OSes, including Ubuntu 16.04 LTS and OSX 10.12
    + Lot?s of optimizations for IA and ARM archs using parallelism, vector
    instructions and new OpenCL kernels.
    + OpenCV now can use vendor-provided OpenVX and LAPACK/BLAS (including Intel MKL,
    Apple?s Accelerate, OpenBLAS and Atlas) for acceleration
- Refreshed opencv-build-compare.patch
- Dropped upstream opencv-gcc5.patch
- Replace opencv-gcc6-disable-pch.patch with upstream patch
  opencv-gcc6-fix-pch-support-PR8345.patch
- Enable TBB support (C++ threading library)
- Add dependency on openBLAS</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Use %cmake macros
- Remove the conditions that are not really needed
- Add tests conditional disabled by default
  * Many tests fail and there are missing testdata
- Switch to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1496664001">- Add conditional for the qt5/qt4 integration
  * This is used only for gui tools, library is not affected
- Add provides/obsoletes for the qt5 packages to allow migration
- Drop patch opencv-qt5-sobump.diff
  * Used only by the obsoleted qt5 variant</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500120000">- Add 0001-Do-not-include-glx.h-when-using-GLES.patch
  Fix build for 32bit ARM, including both GLES and desktop GL headers
  causes incompatible pointer type errors</changelog>
  <changelog author="kah0922@gmail.com" date="1507550400">- Update to 3.3
- Dropped obsolete patches
  * opencv-gcc6-fix-pch-support-PR8345.patch
  * opencv-gles.patch
- Updated opencv-build-compare.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Rename python subpackage to python2
- Do not explicitly require python-base for python subpackages</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 3.3.1:
  * Lots of various bugfixes
- Update source url</changelog>
  <changelog author="ecsos@opensuse.org" date="1509796800">- fix build error/unresolvable for Leap 42.2 and 42.3</changelog>
  <changelog author="ecsos@opensuse.org" date="1510142400">- change requires of python-numpy-devel to build in Leap and
  to not break factory in future</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update licensing information</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511611200">- Readd opencv-gles.patch, it is *not* included upstream; otherwise
  build breaks on all GLES Qt5 platforms (armv6l, armv7l, aarch64)
- add fix_processor_detection_for_32bit_on_64bit.patch
- Correctly set optimizations and dynamic dispatch on ARM, use
  OpenCV 3.3 syntax on x86.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditionals for python2 and python3 to allow us enabling
  only desired python variants when needed
- Do not depend on sphinx as py2 and py3 seem to collide there</changelog>
  <changelog author="qzheng@suse.com" date="1526904000">- Add opencv-imgproc-fix-bounds-check.patch:
  make backport from commit 4ca89db to fix imgproc(hdr)
  bounds check in HdrDecoder::checkSignature ( bsc#1074312,
  CVE-2017-18009 ).</changelog>
</package>
<package pkgid="81d225f65b8b71c72cbf23b54381c5eeb9a59760ad097d184c653429cd63e650" name="opencv-devel" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456660800">- Added _constraints file to avoid random failures on small workers
  (at least for builds on PMBS)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Added opencv_contrib_face-3.1.0.tar.bz2
  * This tarball is created to take only the face module from the
    contrib package. The Face module is required by libkface, which
    in its turn is required by digikam.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Add python 3 support</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458561600">- Test for python versions greater than or equal to the current
  version.</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Apply upstream patch opencv-gcc6-disable-pch.patch to disable
  PCH for GCC6.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465300800">- In case we build using GCC6 (or newer), add -mlra to CFLAGS to
  workaround gcc bug
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71294.</changelog>
  <changelog author="olaf@aepfle.de" date="1469102400">- Enable ffmpeg support unconditional</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1495972800">- Update to OpenCV 3.2.0
  - Results from 11 GSoC 2016 projects have been submitted to the library:
    + sinusoidal patterns for structured light and phase unwrapping module
    [Ambroise Moreau (Delia Passalacqua)]
    + DIS optical flow (excellent dense optical flow algorithm that is both
    significantly better and significantly faster than Farneback?s algorithm ?
    our baseline), and learning-based color constancy algorithms implementation
    [Alexander Bokov (Maksim Shabunin)]
    + CNN based tracking algorithm (GOTURN) [Tyan Vladimir (Antonella Cascitelli)]
    + PCAFlow and Global Patch Collider algorithms implementation
    [Vladislav Samsonov (Ethan Rublee)]
    + Multi-language OpenCV Tutorials in Python, C++ and Java
    [João Cartucho (Vincent Rabaud)]
    + New camera model and parallel processing for stitching pipeline
    [Jiri Horner (Bo Li)]
    + Optimizations and improvements of dnn module
    [Vitaliy Lyudvichenko (Anatoly Baksheev)]
    + Base64 and JSON support for file storage. Use names like
    ?myfilestorage.xml?base64? when writing file storage to store big chunks of
    numerical data in base64-encoded form.  [Iric Wu (Vadim Pisarevsky)]
    + tiny_dnn improvements and integration
    [Edgar Riba (Manuele Tamburrano, Stefano Fabri)]
    + Quantization and semantic saliency detection with tiny_dnn
    [Yida Wang (Manuele Tamburrano, Stefano Fabri)]
    + Word-spotting CNN based algorithm
    [Anguelos Nicolaou (Lluis Gomez)]
  - Contributions besides GSoC:
    + Greatly improved and accelerated dnn module in opencv_contrib:
  - Many new layers, including deconvolution, LSTM etc.
  - Support for semantic segmentation and SSD networks with samples.
  - TensorFlow importer + sample that runs Inception net by Google.
    + More image formats and camera backends supported
    + Interactive camera calibration app
    + Multiple algorithms implemented in opencv_contrib
    + Supported latest OSes, including Ubuntu 16.04 LTS and OSX 10.12
    + Lot?s of optimizations for IA and ARM archs using parallelism, vector
    instructions and new OpenCL kernels.
    + OpenCV now can use vendor-provided OpenVX and LAPACK/BLAS (including Intel MKL,
    Apple?s Accelerate, OpenBLAS and Atlas) for acceleration
- Refreshed opencv-build-compare.patch
- Dropped upstream opencv-gcc5.patch
- Replace opencv-gcc6-disable-pch.patch with upstream patch
  opencv-gcc6-fix-pch-support-PR8345.patch
- Enable TBB support (C++ threading library)
- Add dependency on openBLAS</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Use %cmake macros
- Remove the conditions that are not really needed
- Add tests conditional disabled by default
  * Many tests fail and there are missing testdata
- Switch to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1496664001">- Add conditional for the qt5/qt4 integration
  * This is used only for gui tools, library is not affected
- Add provides/obsoletes for the qt5 packages to allow migration
- Drop patch opencv-qt5-sobump.diff
  * Used only by the obsoleted qt5 variant</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500120000">- Add 0001-Do-not-include-glx.h-when-using-GLES.patch
  Fix build for 32bit ARM, including both GLES and desktop GL headers
  causes incompatible pointer type errors</changelog>
  <changelog author="kah0922@gmail.com" date="1507550400">- Update to 3.3
- Dropped obsolete patches
  * opencv-gcc6-fix-pch-support-PR8345.patch
  * opencv-gles.patch
- Updated opencv-build-compare.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Rename python subpackage to python2
- Do not explicitly require python-base for python subpackages</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 3.3.1:
  * Lots of various bugfixes
- Update source url</changelog>
  <changelog author="ecsos@opensuse.org" date="1509796800">- fix build error/unresolvable for Leap 42.2 and 42.3</changelog>
  <changelog author="ecsos@opensuse.org" date="1510142400">- change requires of python-numpy-devel to build in Leap and
  to not break factory in future</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update licensing information</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511611200">- Readd opencv-gles.patch, it is *not* included upstream; otherwise
  build breaks on all GLES Qt5 platforms (armv6l, armv7l, aarch64)
- add fix_processor_detection_for_32bit_on_64bit.patch
- Correctly set optimizations and dynamic dispatch on ARM, use
  OpenCV 3.3 syntax on x86.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditionals for python2 and python3 to allow us enabling
  only desired python variants when needed
- Do not depend on sphinx as py2 and py3 seem to collide there</changelog>
  <changelog author="qzheng@suse.com" date="1526904000">- Add opencv-imgproc-fix-bounds-check.patch:
  make backport from commit 4ca89db to fix imgproc(hdr)
  bounds check in HdrDecoder::checkSignature ( bsc#1074312,
  CVE-2017-18009 ).</changelog>
</package>
<package pkgid="5fbceb17765cf638d53142505548e32d5dab115b2e4e776e200655079e64ea4b" name="opencv-doc" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456660800">- Added _constraints file to avoid random failures on small workers
  (at least for builds on PMBS)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Added opencv_contrib_face-3.1.0.tar.bz2
  * This tarball is created to take only the face module from the
    contrib package. The Face module is required by libkface, which
    in its turn is required by digikam.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Add python 3 support</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458561600">- Test for python versions greater than or equal to the current
  version.</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Apply upstream patch opencv-gcc6-disable-pch.patch to disable
  PCH for GCC6.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465300800">- In case we build using GCC6 (or newer), add -mlra to CFLAGS to
  workaround gcc bug
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71294.</changelog>
  <changelog author="olaf@aepfle.de" date="1469102400">- Enable ffmpeg support unconditional</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1495972800">- Update to OpenCV 3.2.0
  - Results from 11 GSoC 2016 projects have been submitted to the library:
    + sinusoidal patterns for structured light and phase unwrapping module
    [Ambroise Moreau (Delia Passalacqua)]
    + DIS optical flow (excellent dense optical flow algorithm that is both
    significantly better and significantly faster than Farneback?s algorithm ?
    our baseline), and learning-based color constancy algorithms implementation
    [Alexander Bokov (Maksim Shabunin)]
    + CNN based tracking algorithm (GOTURN) [Tyan Vladimir (Antonella Cascitelli)]
    + PCAFlow and Global Patch Collider algorithms implementation
    [Vladislav Samsonov (Ethan Rublee)]
    + Multi-language OpenCV Tutorials in Python, C++ and Java
    [João Cartucho (Vincent Rabaud)]
    + New camera model and parallel processing for stitching pipeline
    [Jiri Horner (Bo Li)]
    + Optimizations and improvements of dnn module
    [Vitaliy Lyudvichenko (Anatoly Baksheev)]
    + Base64 and JSON support for file storage. Use names like
    ?myfilestorage.xml?base64? when writing file storage to store big chunks of
    numerical data in base64-encoded form.  [Iric Wu (Vadim Pisarevsky)]
    + tiny_dnn improvements and integration
    [Edgar Riba (Manuele Tamburrano, Stefano Fabri)]
    + Quantization and semantic saliency detection with tiny_dnn
    [Yida Wang (Manuele Tamburrano, Stefano Fabri)]
    + Word-spotting CNN based algorithm
    [Anguelos Nicolaou (Lluis Gomez)]
  - Contributions besides GSoC:
    + Greatly improved and accelerated dnn module in opencv_contrib:
  - Many new layers, including deconvolution, LSTM etc.
  - Support for semantic segmentation and SSD networks with samples.
  - TensorFlow importer + sample that runs Inception net by Google.
    + More image formats and camera backends supported
    + Interactive camera calibration app
    + Multiple algorithms implemented in opencv_contrib
    + Supported latest OSes, including Ubuntu 16.04 LTS and OSX 10.12
    + Lot?s of optimizations for IA and ARM archs using parallelism, vector
    instructions and new OpenCL kernels.
    + OpenCV now can use vendor-provided OpenVX and LAPACK/BLAS (including Intel MKL,
    Apple?s Accelerate, OpenBLAS and Atlas) for acceleration
- Refreshed opencv-build-compare.patch
- Dropped upstream opencv-gcc5.patch
- Replace opencv-gcc6-disable-pch.patch with upstream patch
  opencv-gcc6-fix-pch-support-PR8345.patch
- Enable TBB support (C++ threading library)
- Add dependency on openBLAS</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Use %cmake macros
- Remove the conditions that are not really needed
- Add tests conditional disabled by default
  * Many tests fail and there are missing testdata
- Switch to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1496664001">- Add conditional for the qt5/qt4 integration
  * This is used only for gui tools, library is not affected
- Add provides/obsoletes for the qt5 packages to allow migration
- Drop patch opencv-qt5-sobump.diff
  * Used only by the obsoleted qt5 variant</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500120000">- Add 0001-Do-not-include-glx.h-when-using-GLES.patch
  Fix build for 32bit ARM, including both GLES and desktop GL headers
  causes incompatible pointer type errors</changelog>
  <changelog author="kah0922@gmail.com" date="1507550400">- Update to 3.3
- Dropped obsolete patches
  * opencv-gcc6-fix-pch-support-PR8345.patch
  * opencv-gles.patch
- Updated opencv-build-compare.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Rename python subpackage to python2
- Do not explicitly require python-base for python subpackages</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 3.3.1:
  * Lots of various bugfixes
- Update source url</changelog>
  <changelog author="ecsos@opensuse.org" date="1509796800">- fix build error/unresolvable for Leap 42.2 and 42.3</changelog>
  <changelog author="ecsos@opensuse.org" date="1510142400">- change requires of python-numpy-devel to build in Leap and
  to not break factory in future</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update licensing information</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511611200">- Readd opencv-gles.patch, it is *not* included upstream; otherwise
  build breaks on all GLES Qt5 platforms (armv6l, armv7l, aarch64)
- add fix_processor_detection_for_32bit_on_64bit.patch
- Correctly set optimizations and dynamic dispatch on ARM, use
  OpenCV 3.3 syntax on x86.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditionals for python2 and python3 to allow us enabling
  only desired python variants when needed
- Do not depend on sphinx as py2 and py3 seem to collide there</changelog>
  <changelog author="qzheng@suse.com" date="1526904000">- Add opencv-imgproc-fix-bounds-check.patch:
  make backport from commit 4ca89db to fix imgproc(hdr)
  bounds check in HdrDecoder::checkSignature ( bsc#1074312,
  CVE-2017-18009 ).</changelog>
</package>
<package pkgid="ee2ed3f7a7c6cbd37ecdf6143a45d3f48a595d1e1e6bb53838cad3ce2bccd89e" name="openldap2" arch="src">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="133f12f28ee0a295b34f1e5b0e95b2136ff56ab4f046dbfd7548ffdef54dcec1" name="openldap2" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="c2e9534e15a328cf965db327e13f94c35f0aeef4187ab16cc49090a76238bef9" name="openldap2-back-meta" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="a2990e7bdc1e9c4f4f8acfce553941c2a93e71a6f632615e609f939d8e2c89d4" name="openldap2-back-perl" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="6f2eb482342b27d8656a5c22519d18a6002e5f8c8af8440d30777fb9b63121dc" name="openldap2-back-sock" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="24271786321f51004041159ed826b2075f92a73f108abae9d1635f5586e69fa9" name="openldap2-back-sql" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="9ac1f481cb73c6108ef6f180df44a2071bed94005fd17872aac28837d2ca7d0d" name="openldap2-client" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="12a38070e703a1cd3ad16ab3ddc8c3dedcdd6e17f9cc2bd63b3eec0ded9b9078" name="openldap2-contrib" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="f352d104bfb108bcc1a98ac406ea8114f95c8745d4688f964a478b7108181db9" name="openldap2-devel" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="069cb06255cc083f10f82392257a2c0a93e7a10163c63bc13ec10bbf41b8c5e8" name="openldap2-devel-32bit" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="b55d214a025b9f6579275728e18f354105ad74ec161198d2cb5eab9fea155e24" name="openldap2-devel-static" arch="x86_64">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="d6dbff263a7efe2e63f47b05397ba719a0c25a44a3d14aee0b3415ed18edbff6" name="openldap2-doc" arch="noarch">
  <version epoch="0" ver="2.4.46" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="610902d7a8a5763a418277bc5fcc8d1d891efd941f56816b60bbdf5ae738761f" name="openldap2-ppolicy-check-password" arch="x86_64">
  <version epoch="0" ver="1.2" rel="lp150.8.3.1"/>
  <changelog author="hguo@suse.com" date="1476446400">- Add more details in the comments of slapd.conf concerning
  file permission and StartTLS capability.</changelog>
  <changelog author="hguo@suse.com" date="1478779200">- Introduce patch 0012-use-system-wide-cert-dir-by-default.patch
  to let OpenLDAP read system wide certificate directory by
  default and avoid hiding the error if user specified CA location
  cannot be read (bsc#1009470).</changelog>
  <changelog author="kukuk@suse.com" date="1487419200">- Remove superfluous insserv PreReq.</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Drop binutils requirement; the code using /usr/bin/strings has
  been dropped in openSUSE:Factory/openldap2 revision 112.</changelog>
  <changelog author="hguo@suse.com" date="1496750400">- There is no change made about the package itself, this is only
  copying over some changelog texts from SLE package:
- bug#976172 owned by hguo@suse.com: openldap2 - missing
  /usr/share/doc/packages/openldap2/guide/admin/guide.html
- bug#916914 owned by varkoly@suse.com: VUL-0: CVE-2015-1546:
  openldap2: slapd crash in valueReturnFilter cleanup
- [fate#319300](https://fate.suse.com/319300)
- [CVE-2015-1545](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1545)
- bug#905959 owned by hguo@suse.com: L3-Question: Are multiple
  "Connection 0" in a Multi Master setup normal ?
- [CVE-2015-1546](http://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2015-1546)
- bug#916897 owned by varkoly@suse.com: VUL-0: CVE-2015-1545:
  openldap2: slapd crashes on search with deref control and empty attr list</changelog>
  <changelog author="hguo@suse.com" date="1496836800">- Remove legacy daemon control that was used to migrate from SLE 11
  to 12. (bsc#1038405)</changelog>
  <changelog author="michael@stroeder.com" date="1499860800">- Upgrade to upstream 2.4.45 release
- removed obsolete 0010-Enforce-minimum-DH-size-of-1024.patch
  and  0012-use-system-wide-cert-dir-by-default.patch
- added 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  for supporting modify increment operations with back-sock
- added overlay addpartial to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1500552000">- added overlay trace to package openldap2-contrib</changelog>
  <changelog author="michael@stroeder.com" date="1503057600">- Added OpenLDAP new feature implementing OpenLDAP ITS#8714
  0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1504699200">- updated 0014-ITS-8714-Send-out-EXTENDED-operation-message-from-back-sock.patch</changelog>
  <changelog author="michael@stroeder.com" date="1505736000">- added 0012-ITS8051-sockdnpat.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1506945600">- use existing groups instead of inventing new ones</changelog>
  <changelog author="jengelh@inai.de" date="1506945601">- Add openldap-r-only.dif so that openldap2's own tools also
  link against libldap_r rather than libldap.
- Make libldap equivalent to libldap_r (like Debian) to avoid
  crashes in threaded programs which unknowingly get both
  libraries inserted into their process image.
  [rh#1370065, boo#996551]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="michael@stroeder.com" date="1512993600">- added 0016-ITS-8782-fix-cancel-memleak.patch</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="michael@stroeder.com" date="1521806400">- Upgrade to upstream 2.4.46 release
- removed obsolete back-port patches:
  * 0013-ITS-8692-let-back-sock-generate-increment-line.patch
  * 0016-ITS-8782-fix-cancel-memleak.patch
  OpenLDAP 2.4.46 Release (2018/03/22)
  Fixed libldap connection delete callbacks when TLS fails to start (ITS#8717)
  Fixed libldap to not reuse tls_session if TLS hostname check fails (ITS#7373)
  Fixed libldap cross-compiling with OpenSSL 1.1 (ITS#8687)
  Fixed libldap OpenSSL 1.1.1 compatibility with BIO_method (ITS#8791)
  Fixed libldap MozNSS CA certificate hash matching (ITS#7374)
  Fixed libldap MozNSS with PEM certs when also using an NSS cert db (ITS#7389)
  Fixed libldap MozNSS initialization (ITS#8484)
  Fixed libldap GnuTLS with GNUTLS_E_AGAIN (ITS#8650)
  Fixed libldap memory leak with cancel operations (ITS#8782)
  Fixed slapd Eventlog registry key creation on 64-bit Windows (ITS#8705)
  Fixed slapd to maintain SSF across SASL binds (ITS#8796)
  Fixed slapd syncrepl deadlock when updating cookie (ITS#8752)
  Fixed slapd syncrepl callback to always be last in the stack (ITS#8752)
  Fixed slapd telephoneNumberNormalize when the value is spaces and hyphens (ITS#8778)
  Fixed slapd CSN queue processing (ITS#8801)
  Fixed slapd-ldap TLS connection timeout with high latency connections (ITS#8720)
  Fixed slapd-ldap to ignore unknown schema when omit-unknown-schema is set (ITS#7520)
  Fixed slapd-mdb with an optimization for long lived read transactions (ITS#8226)
  Fixed slapd-meta assert when olcDbRewrite is modified (ITS#8404)
  Fixed slapd-sock with LDAP_MOD_INCREMENT operations (ITS#8692)
  Fixed slapo-accesslog cleanup to only occur on failed operations (ITS#8752)
  Fixed slapo-dds entryTTL to actually decrease as per RFC 2589 (ITS#7100)
  Fixed slapo-syncprov memory leak with delete operations (ITS#8690)
  Fixed slapo-syncprov to not clear pending operation when checkpointing (ITS#8444)
  Fixed slapo-syncprov to correctly record contextCSN values in the accesslog (ITS#8100)
  Fixed slapo-syncprov not to log checkpoints to accesslog db (ITS#8607)
  Fixed slapo-syncprov to process changes from this SID on REFRESH (ITS#8800)
  Fixed slapo-syncprov session log parsing to not block other operations (ITS#8486)
  Build Environment
  Fixed Windows build with newer MINGW version (ITS#8697)
  Fixed compiler warnings and removed unused variables (ITS#8578)
  Contrib
  Fixed ldapc++ Control structure (ITS#8583)
  Documentation
  Delete stub manpage for back-ldbm (ITS#8713)
  Fixed ldap_bind(3) to mention the LDAP_SASL_SIMPLE mechanism (ITS#8121)
  Fixed ldap.conf(5) to note SASL_MECH/SASL_REALM are no longer user-only (ITS#8818)
  Fixed slapd-config(5) typo for olcTLSCipherSuite (ITS#8715)
  Fixed slapo-syncprov(5) indexing requirements (ITS#5048)</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1523016000">- bsc#1085064 Add script "openldap_update_modules_path.sh" which
  which removes the configuration item olcModulePath in cn=config
  which is after upgrade from SLE12 to SLE15 holds inappropriate
  information. If the cn=config is being used on a system, the
  conflicting items in slapd.conf are ignored, despite of it, the
  backend DB configuration section has been also commented out in
  the default slapd.conf.
  In case of correct cn=config (the olcModulePath has been already
  removed), the script stops without touching anything.</changelog>
  <changelog author="zsolt.kalmar@suse.com" date="1524571200">- bsc#1085064 Packaging issues have been discovered around the
  openldap_update_modules_path.sh which has been corrected:
  - the spec file was wrongly configured, therefore the script has
  never been called
  - the script should create the symlinks first, as slapcat is
  useless on a system which is already affected.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1534507200">- Fix slapd segfaults in mdb_env_reader_dest
  with patch 0016-Clear-shared-key-only-in-close-function.patch
  (bsc#1089640)</changelog>
</package>
<package pkgid="ddeba3fc5cdd549b29d00baf7cb95eb188f785a08303401c67bbff603f29ea1f" name="openmpi2" arch="src">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="d323e75a4eb1a0018b0af0d60b1524551c3316ce546b2d151c8cb0b3cbd75b47" name="openmpi2" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="09a28ad63165b9e140aa7a48e4db5e14ad07d413a0fd902bfb155c65836f0e8a" name="openmpi2-config" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="2c14e0faa0715c659bcc64f3be3b9f2f17133c23e3ec50758fb401af0d3fc267" name="openmpi2-devel" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="e20f60eed67cd54937df25de6d01df1ec66efdfcce5278fbf41ff3b2bbea4346" name="openmpi2-docs" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="06657ac02ea7046682d351d73c1e30eaac61cf2bcce4bfbb1e85bd36d527aa51" name="openmpi2-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="4d05bb93e7e6a959b443f3a196436ce179677692c9101ed2b61b59e037ed55db" name="openmpi2-gnu-hpc-devel" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="80be45901dde532b666fe90260b1db9a3fd253debb7667bb794803fa0540feed" name="openmpi2-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="1d81e279a3e988f82486b1fabea0493f15addac7693714dcabb5c85acae124ae" name="openmpi2-gnu-hpc-docs" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="c4c8a1e051676d98babb3828f5392b3d0122809f260e8934836c4e0e5e3d75e2" name="openmpi2-gnu-hpc-macros-devel" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="378c785a77407facb1320a0be1eadf617b1d5442c72a7d3b7b643033ee5acb17" name="openmpi2-libs" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="70c0948c67efce4c2632dd7d400bb1859cc37dbb009c669db291424312290551" name="openmpi2-testsuite" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="311460645cdca8f9c1ec0d57c5af81e6c369cdbe869651c17044882c0e35cf9b" name="openmpi2-testsuite" arch="src">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="6ed6edef30f73da5ccc24ca24b9570c5aba75e34c5b08fd554364d173f0aea79" name="openmpi_2_1_3-gnu-hpc" arch="src">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="12a9d63da82877d2c540f0a37a558153b4d763a0b83f3593354740d5ea75b385" name="openmpi_2_1_3-gnu-hpc" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="a79099fbbe9f2c1ea0053a200403544b5ea6408c05b2ec64f7e50748abbb3db3" name="openmpi_2_1_3-gnu-hpc-devel" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="bc3142d17aba9d5564e080a3f6319d48aabd542a8cd00c9b96955750abc77f24" name="openmpi_2_1_3-gnu-hpc-devel-static" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="6b0afbfdc207f22f0f8f7457e354860825ac611a3f956bb8f698601e286e7bbf" name="openmpi_2_1_3-gnu-hpc-docs" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="5b0487f32b4b32ede33fea09dbcb49301caaddde9f289499f6e1186bb7914141" name="openmpi_2_1_3-gnu-hpc-macros-devel" arch="x86_64">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="c7e5e2e9f68e48287f6782aa8b72ce13ac12e8a7f746f6b22de9f68d1c703af3" name="openmpi_2_1_3-gnu-hpc-testsuite" arch="noarch">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="5163b88ba7fea404a1f81d30af8f2c18acd134005929922097b2f342085a58ae" name="openmpi_2_1_3-gnu-hpc-testsuite" arch="src">
  <version epoch="0" ver="2.1.3" rel="lp150.3.3.1"/>
  <changelog author="nmoreychaisemartin@suse.com" date="1500465600">- Fix module file name</changelog>
  <changelog author="schwab@linux-m68k.org" date="1502625600">- Enable ucx only on supported platforms</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504612800">- Update _service to allow auto updates from github</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1504699200">- Update to 2.1.1.176.7aa585d4ff (2.1.2rc3)
  * Too many bug fixes to list. See NEWS
  * ppc64be support was dropped
- Drop btl-vader-work-around-ob1-pending-fragment-bug.patch and
  pml-ob1-do-not-access-fragment-after-calling-btl-rget.patch as
  they were merged upstream.
- Package NEWS file
- Add openmpi-pmix-configure-ac.patch to fix
  a compilation issue on Leap 42.3/SLE12 SP3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505217600">- Update to 2.1.1.186.9a3ac9803c
- Drop openmpi-pmix-configure-ac.patch as it was merged upstream</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505476800">- Reenable fortan08 bindings as gcc &gt;= 5 is now the default
- Remove devel-headers configure option (reserved for MPI plugins developers)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1505822400">- Remove --disable-mca-dso
  Related bug was due to openmpi/*.so wrongly packaged as devel</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340800">- Update to OpenMPI 2.1.2
  * Many bug fixes. See NEWS
- Fix VERSION file during build so that ompi_info reports good infos</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1506340801">- Convert to multibuild.
- Move all the doc to the docs RPM
- Add HPC build using environment modules (FATE#321711).
- Resync spec with openmpi and openmpi3</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507291200">- Add conflicts between the macros-devel packages</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507636800">- Add a ringdisabled flag to allow building only the standard flavor
  so not all flavors are pulled into staging rings
- Fix baselibs.conf generation (wrong directory and name)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1507896000">- Fix pre/post install call to ldconfig</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1512648000">- Add btl-vader-change-the-way-fast-boxes-are-used.patch to
  fix a SEGV on i386 systems</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1516190400">- Switch from gcc6 to gcc7 as additional compiler flavor for HPC on SLES.
- Fix library package requires - use HPC macro (boo#1074890)
- Fix rpm macro file.
- Only build openmpi2-config for the standard flavor</changelog>
  <changelog author="eich@suse.com" date="1517313600">- Use macro in mpivars.(c)sh to be independent of changes to the module
  setup for the compiler (boo#1078364).</changelog>
  <changelog author="cgoll@suse.com" date="1518177600">- Fix summary in module files (bnc#1080259)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522065600">- Enable --enable-mpirun-prefix-by-default (bsc#1086821)</changelog>
  <changelog author="nmoreychaisemartin@suse.com" date="1522152000">- Update to openmpi 2.1.3
  - Update internal PMIx version to 1.2.5.
  - Fix a problem with ompi_info reporting using param option.
  - Correct PMPI_Aint_{add|diff} to be functions (not subroutines)
    in the Fortran mpi_f08 module.
  - Fix a problem when doing MPI I/O using data types with large
    extents in conjunction with MPI_TYPE_CREATE_SUBARRAY.  Thanks to
  - Fix a problem when opening many files using MPI_FILE_OPEN.
  - Fix a problem with debuggers failing to attach to a running job.
  - Fix a problem when using madvise and the OpenIB BTL.
  - Fix a problem in the Vader BTL that resulted in failures of
    IMB under certain circumstances.
  - Fix a problem preventing Open MPI from working under Cygwin.
  - Reduce some verbosity being emitted by the USNIC BTL under certain
    circumstances.
  - Fix a problem with misdirection of SIGKILL.
  - Replace use of posix_memalign with malloc for small allocations.
  - Fix a problem with Open MPI's out of band TCP network for file descriptors
    greater than 32767.
  - Plug a memory leak in MPI_Mem_free().
- Drop btl-vader-change-the-way-fast-boxes-are-used.patch as it
  merged upstream.
- Add fix-rdma-component-selection.patch to fix bad rdma component selection
  which can cause stall when running on multiple IB nodes (bsc#1087031)</changelog>
  <changelog author="eich@suse.com" date="1525262400">- Create missing docs master package (bsc#1091714)</changelog>
  <changelog author="jjolly@suse.com" date="1526644800">- Added openmpi2-add-HCAs-to-mca-ini.patch
  * Adds necessary parameters for QLogic Corp. FastLinQ QL41000 (bsc#1092257)</changelog>
</package>
<package pkgid="e907e0acd2ca34ff9815e37807dd1b1d2ed1b9ed11814f5b38fc0231b74b630e" name="openmpt123" arch="x86_64">
  <version epoch="0" ver="0.3.9" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1487505600">- Initial package containing libopenmod more updated secure alternative
  bsc#1022032</changelog>
  <changelog author="jengelh@inai.de" date="1487505601">- Update summaries and descriptions.
- Enable the SDL2 driver as an option, as the portaudio driver
  appears to hang with ALSA (and not everyone runs Pulseaudio).</changelog>
  <changelog author="tchvatal@suse.com" date="1490616000">- Update to 0.2.7774-beta22
- Make mpg123 conditional and disabled for now by default
- Fix the Factory build with the new rpm</changelog>
  <changelog author="tchvatal@suse.com" date="1495454400">- Version update to 0.2.8043-beta23
  * foo_openmpt: Interpolation filter and volume ramping settings were
    confused in previous versions. This version resets both to the defaults.
- Make mpg123 on by default</changelog>
  <changelog author="tchvatal@suse.com" date="1495454401">- Add patch fixing issue bsc#1040149 wrong includedir propagation:
  * libmodpulg-pcfile.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1497441600">- baselibs.conf for libmodplug.so.1</changelog>
  <changelog author="zaitor@opensuse.org" date="1497873600">- Add libopenmpt0 and libopenmpt_modplug1 to baselibs.conf too.</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Version update to 0.2.8461-beta26 bsc#1048666 CVE-2017-11311:
  * various small fixes and seciruity tweaks</changelog>
  <changelog author="tchvatal@suse.com" date="1521633600">- Version update to 0.3.7:
  * Various speedup improvements and features all around
  * Fuzzying fixes</changelog>
  <changelog author="9+suse@cirno.systems" date="1524139200">- Update to 0.3.8
  * [Sec] Possible out-of-bounds memory read with IT / ITP / MO3
    files containing pattern loops (CVE-2018-10017, bsc#1089080)
  * Keep track of active SFx macro during seeking.
  * The "note cut" duplicate note action did not volume-ramp the
    previously playing sample.
  * A song starting with non-existing patterns could not be played.
  * DSM: Support restart position and 16-bit samples.
  * DTM: Import global volume.</changelog>
  <changelog author="tchvatal@suse.com" date="1527508800">- Up to 0.3.9:
  * [Sec] Possible write near address 0 in out-of-memory situations
    when reading AMS files (bsc#1095644 CVE-2018-11710)
  * [Bug] openmpt123: Fixed build failure in C++17 due to use of
    removed feature std::random_shuffle.
  * STM: Having both Bxx and Cxx commands in a pattern imported
    the Bxx command incorrectly.
  * STM: Last character of sample name was missing.
  * Speed up reading of truncated ULT files.
  * ULT: Portamento import was sometimes broken.
  * The resonant filter was sometimes unstable when combining
    low-volume samples, low cutoff and high mixing rates.</changelog>
</package>
<package pkgid="163bc77e448988bc65a1efdb4f9554fb736bff61dbbaa6b6aa9e786d08f56287" name="opensc" arch="src">
  <version epoch="0" ver="0.17.0" rel="lp150.2.3.1"/>
  <changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1237291200">- Updated to version 0.11.7:
  * hide_empty_slots now on by default? small logic change?
  * ruToken driver was updated.
  * openct virtual readers reduced to 2 by default.
  * Security issue: Fix private data support. (bnc#480262,
    CVE-2009-0368)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * Enable lock_login by default.
  * Disable allow_soft_keygen by default.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239278400">- Fixed undefined code (bnc#440853).
- Don't call autoreconf on older products.</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 0.11.8:
  * Fix security problem in pkcs11-tool gen_keypair
    (PublicExponent 1) (bnc#501726)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * updated and improve entersafe driver. FTCOS/PK-01C cards are
    supported now, compatible with cards writen by Feitian's
    software on windows.</changelog>
  <changelog author="sbrabec@suse.cz" date="1248955200">- libopensc2 should not require opensc (bnc#466430).</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 0.11.9:
  * New rutoken_ecp driver
  * Allow more keys/certificates/files etc. with entersafe tokens
  * Updates pkcs11.h from scute fixing warnings
  * Small fixes in rutoken driver
  * Major update for piv driver with increased compatibility</changelog>
  <changelog author="jengelh@medozas.de" date="1262347200">- package baselibs.conf</changelog>
  <changelog author="puzel@novell.com" date="1271160000">- update to version 0.11.13
  * Modify Rutoken S binary interfaces by Aktiv Co.
  * Muscle driver fixed (acl reading issue)
  * Many small fixes (e.g. mem leaks)
  * Compiling with openssl 1.0.0-beta fixed
  * Document integer problem in OpenSC and implement workaround
  * Improve entersafe profile to support private data objects
- Require pinentry
- add opensc-libassuan-2.patch
- add opensc-fix-gcc-warnings.patch</changelog>
  <changelog author="sbrabec@suse.cz" date="1282564800">- Fixed broken opensc-fix-gcc-warnings.patch (bnc#627619).
- Simplified plugin installation.</changelog>
  <changelog author="sbrabec@suse.cz" date="1294401600">- Updated to version 0.12.0:
  * Security fix (bnc#660109, CVE-2010-4523).
  * Only one backend is supported. openSUSE will use pcsc-lite.
  * libopensc made private, library should not be used by other
    applications. Please use generic PKCS#11 interface instead.
  * Signer plugin discontinued. Please use openssl engine_pkcs11.
  * No more depends on libassuan.
  * New card drivers.
  * Support for CardOS enhanced.
  * More changes and enhancements.
- libopensc merged back to the main package, as it is private now.</changelog>
  <changelog author="lmedinas@opensuse.org" date="1317297600">- Updated to version 0.12.2:
  * Builds are now silent by default when OpenSC is built from
    source on Unix.
  * Using --wait with command line tools works with 64bit Linux
    again.
  * Greatly improved OpenPGP card support, including OpenPGP
    2.0 cards like the one found in German Privacy Foundation
    CryptoStick.
  * Fixed support for FINeID cards issued after 01.03.2011 with
    2048bit keys.
  * #256: Fixed support for TCOS cards (broken since 0.12.0).
  * Added support for IDKey-cards to TCOS3 driver.
  * #361: Improved PC/SC driver to fetch the maximum PIN sizes
    from the open source CCID driver. This fixes the issue for
    Linux/OSX with recent driver.
  * Fix FINeID cards for organizations.
  * Several smaller bugs and compiler warnings fixed
- Updated to version 0.12.1:
  * IAS-ECC 1.0.1
  * Support for cards with multiple PKCS#15 applications
  * New card driver: IAS/ECC 1.0.1
  * rutoken-tool has been deprecated and removed.
  * eidenv and piv-tool utilities now have manual pages.
  * pkcs11-tool now requires the use of --module parameter.
  * All tools can now use an ATR as an argument to --reader,
    to skip to the card with given ATR.
  * opensc-tool -l with -v now shows information about the
    inserted cards.
  * Creating files have an enforced upper size limit, 64K
  * Support for multiple PKCS#15 applications with different
    AID-s. PKCS#15 applications can be listed with pkcs15-tool
  - -list-applications. Binding to a specific AID with PKCS#15
    tools can be done with --aid.
  * Hex strings (like card ATR or APDU-s) can now be separated
    by space, in addition to colons.
  * Pinpad readers known to be bogus are now ignored by OpenSC.
    At the moment only "HP USB Smart Card Keyboard" is disabled.
  * Numerous compiler warnings, unused code and internal bugs
    have been eliminated.</changelog>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1529668800">- Fix broken support of Feitian epass2003 (bsc#1097951, regression,
  opensc-feitian-epass2003.patch).</changelog>
</package>
<package pkgid="482c6ca6fc61ac5401b81d5b2f9b40d6ba8845591c7ebb744ccca53ffdd0a762" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="lp150.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1237291200">- Updated to version 0.11.7:
  * hide_empty_slots now on by default? small logic change?
  * ruToken driver was updated.
  * openct virtual readers reduced to 2 by default.
  * Security issue: Fix private data support. (bnc#480262,
    CVE-2009-0368)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * Enable lock_login by default.
  * Disable allow_soft_keygen by default.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239278400">- Fixed undefined code (bnc#440853).
- Don't call autoreconf on older products.</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 0.11.8:
  * Fix security problem in pkcs11-tool gen_keypair
    (PublicExponent 1) (bnc#501726)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * updated and improve entersafe driver. FTCOS/PK-01C cards are
    supported now, compatible with cards writen by Feitian's
    software on windows.</changelog>
  <changelog author="sbrabec@suse.cz" date="1248955200">- libopensc2 should not require opensc (bnc#466430).</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 0.11.9:
  * New rutoken_ecp driver
  * Allow more keys/certificates/files etc. with entersafe tokens
  * Updates pkcs11.h from scute fixing warnings
  * Small fixes in rutoken driver
  * Major update for piv driver with increased compatibility</changelog>
  <changelog author="jengelh@medozas.de" date="1262347200">- package baselibs.conf</changelog>
  <changelog author="puzel@novell.com" date="1271160000">- update to version 0.11.13
  * Modify Rutoken S binary interfaces by Aktiv Co.
  * Muscle driver fixed (acl reading issue)
  * Many small fixes (e.g. mem leaks)
  * Compiling with openssl 1.0.0-beta fixed
  * Document integer problem in OpenSC and implement workaround
  * Improve entersafe profile to support private data objects
- Require pinentry
- add opensc-libassuan-2.patch
- add opensc-fix-gcc-warnings.patch</changelog>
  <changelog author="sbrabec@suse.cz" date="1282564800">- Fixed broken opensc-fix-gcc-warnings.patch (bnc#627619).
- Simplified plugin installation.</changelog>
  <changelog author="sbrabec@suse.cz" date="1294401600">- Updated to version 0.12.0:
  * Security fix (bnc#660109, CVE-2010-4523).
  * Only one backend is supported. openSUSE will use pcsc-lite.
  * libopensc made private, library should not be used by other
    applications. Please use generic PKCS#11 interface instead.
  * Signer plugin discontinued. Please use openssl engine_pkcs11.
  * No more depends on libassuan.
  * New card drivers.
  * Support for CardOS enhanced.
  * More changes and enhancements.
- libopensc merged back to the main package, as it is private now.</changelog>
  <changelog author="lmedinas@opensuse.org" date="1317297600">- Updated to version 0.12.2:
  * Builds are now silent by default when OpenSC is built from
    source on Unix.
  * Using --wait with command line tools works with 64bit Linux
    again.
  * Greatly improved OpenPGP card support, including OpenPGP
    2.0 cards like the one found in German Privacy Foundation
    CryptoStick.
  * Fixed support for FINeID cards issued after 01.03.2011 with
    2048bit keys.
  * #256: Fixed support for TCOS cards (broken since 0.12.0).
  * Added support for IDKey-cards to TCOS3 driver.
  * #361: Improved PC/SC driver to fetch the maximum PIN sizes
    from the open source CCID driver. This fixes the issue for
    Linux/OSX with recent driver.
  * Fix FINeID cards for organizations.
  * Several smaller bugs and compiler warnings fixed
- Updated to version 0.12.1:
  * IAS-ECC 1.0.1
  * Support for cards with multiple PKCS#15 applications
  * New card driver: IAS/ECC 1.0.1
  * rutoken-tool has been deprecated and removed.
  * eidenv and piv-tool utilities now have manual pages.
  * pkcs11-tool now requires the use of --module parameter.
  * All tools can now use an ATR as an argument to --reader,
    to skip to the card with given ATR.
  * opensc-tool -l with -v now shows information about the
    inserted cards.
  * Creating files have an enforced upper size limit, 64K
  * Support for multiple PKCS#15 applications with different
    AID-s. PKCS#15 applications can be listed with pkcs15-tool
  - -list-applications. Binding to a specific AID with PKCS#15
    tools can be done with --aid.
  * Hex strings (like card ATR or APDU-s) can now be separated
    by space, in addition to colons.
  * Pinpad readers known to be bogus are now ignored by OpenSC.
    At the moment only "HP USB Smart Card Keyboard" is disabled.
  * Numerous compiler warnings, unused code and internal bugs
    have been eliminated.</changelog>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1529668800">- Fix broken support of Feitian epass2003 (bsc#1097951, regression,
  opensc-feitian-epass2003.patch).</changelog>
</package>
<package pkgid="ba9007327cb2f010ef2dd82efe1e34958c2b598b8a80873feaee6c25782870d1" name="opensc" arch="src">
  <version epoch="0" ver="0.18.0" rel="lp150.2.6.1"/>
  <changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
  <changelog author="sbrabec@suse.cz" date="1237291200">- Updated to version 0.11.7:
  * hide_empty_slots now on by default? small logic change?
  * ruToken driver was updated.
  * openct virtual readers reduced to 2 by default.
  * Security issue: Fix private data support. (bnc#480262,
    CVE-2009-0368)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * Enable lock_login by default.
  * Disable allow_soft_keygen by default.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239278400">- Fixed undefined code (bnc#440853).
- Don't call autoreconf on older products.</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 0.11.8:
  * Fix security problem in pkcs11-tool gen_keypair
    (PublicExponent 1) (bnc#501726)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * updated and improve entersafe driver. FTCOS/PK-01C cards are
    supported now, compatible with cards writen by Feitian's
    software on windows.</changelog>
  <changelog author="sbrabec@suse.cz" date="1248955200">- libopensc2 should not require opensc (bnc#466430).</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 0.11.9:
  * New rutoken_ecp driver
  * Allow more keys/certificates/files etc. with entersafe tokens
  * Updates pkcs11.h from scute fixing warnings
  * Small fixes in rutoken driver
  * Major update for piv driver with increased compatibility</changelog>
  <changelog author="jengelh@medozas.de" date="1262347200">- package baselibs.conf</changelog>
  <changelog author="puzel@novell.com" date="1271160000">- update to version 0.11.13
  * Modify Rutoken S binary interfaces by Aktiv Co.
  * Muscle driver fixed (acl reading issue)
  * Many small fixes (e.g. mem leaks)
  * Compiling with openssl 1.0.0-beta fixed
  * Document integer problem in OpenSC and implement workaround
  * Improve entersafe profile to support private data objects
- Require pinentry
- add opensc-libassuan-2.patch
- add opensc-fix-gcc-warnings.patch</changelog>
  <changelog author="sbrabec@suse.cz" date="1282564800">- Fixed broken opensc-fix-gcc-warnings.patch (bnc#627619).
- Simplified plugin installation.</changelog>
  <changelog author="sbrabec@suse.cz" date="1294401600">- Updated to version 0.12.0:
  * Security fix (bnc#660109, CVE-2010-4523).
  * Only one backend is supported. openSUSE will use pcsc-lite.
  * libopensc made private, library should not be used by other
    applications. Please use generic PKCS#11 interface instead.
  * Signer plugin discontinued. Please use openssl engine_pkcs11.
  * No more depends on libassuan.
  * New card drivers.
  * Support for CardOS enhanced.
  * More changes and enhancements.
- libopensc merged back to the main package, as it is private now.</changelog>
  <changelog author="lmedinas@opensuse.org" date="1317297600">- Updated to version 0.12.2:
  * Builds are now silent by default when OpenSC is built from
    source on Unix.
  * Using --wait with command line tools works with 64bit Linux
    again.
  * Greatly improved OpenPGP card support, including OpenPGP
    2.0 cards like the one found in German Privacy Foundation
    CryptoStick.
  * Fixed support for FINeID cards issued after 01.03.2011 with
    2048bit keys.
  * #256: Fixed support for TCOS cards (broken since 0.12.0).
  * Added support for IDKey-cards to TCOS3 driver.
  * #361: Improved PC/SC driver to fetch the maximum PIN sizes
    from the open source CCID driver. This fixes the issue for
    Linux/OSX with recent driver.
  * Fix FINeID cards for organizations.
  * Several smaller bugs and compiler warnings fixed
- Updated to version 0.12.1:
  * IAS-ECC 1.0.1
  * Support for cards with multiple PKCS#15 applications
  * New card driver: IAS/ECC 1.0.1
  * rutoken-tool has been deprecated and removed.
  * eidenv and piv-tool utilities now have manual pages.
  * pkcs11-tool now requires the use of --module parameter.
  * All tools can now use an ATR as an argument to --reader,
    to skip to the card with given ATR.
  * opensc-tool -l with -v now shows information about the
    inserted cards.
  * Creating files have an enforced upper size limit, 64K
  * Support for multiple PKCS#15 applications with different
    AID-s. PKCS#15 applications can be listed with pkcs15-tool
  - -list-applications. Binding to a specific AID with PKCS#15
    tools can be done with --aid.
  * Hex strings (like card ATR or APDU-s) can now be separated
    by space, in addition to colons.
  * Pinpad readers known to be bogus are now ignored by OpenSC.
    At the moment only "HP USB Smart Card Keyboard" is disabled.
  * Numerous compiler warnings, unused code and internal bugs
    have been eliminated.</changelog>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
</package>
<package pkgid="d134d59d112cf32961feda28827fbdaca2c0c78c8851f7f374016925cfbaf440" name="opensc" arch="x86_64">
  <version epoch="0" ver="0.18.0" rel="lp150.2.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1237291200">- Updated to version 0.11.7:
  * hide_empty_slots now on by default? small logic change?
  * ruToken driver was updated.
  * openct virtual readers reduced to 2 by default.
  * Security issue: Fix private data support. (bnc#480262,
    CVE-2009-0368)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * Enable lock_login by default.
  * Disable allow_soft_keygen by default.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239278400">- Fixed undefined code (bnc#440853).
- Don't call autoreconf on older products.</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 0.11.8:
  * Fix security problem in pkcs11-tool gen_keypair
    (PublicExponent 1) (bnc#501726)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * updated and improve entersafe driver. FTCOS/PK-01C cards are
    supported now, compatible with cards writen by Feitian's
    software on windows.</changelog>
  <changelog author="sbrabec@suse.cz" date="1248955200">- libopensc2 should not require opensc (bnc#466430).</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 0.11.9:
  * New rutoken_ecp driver
  * Allow more keys/certificates/files etc. with entersafe tokens
  * Updates pkcs11.h from scute fixing warnings
  * Small fixes in rutoken driver
  * Major update for piv driver with increased compatibility</changelog>
  <changelog author="jengelh@medozas.de" date="1262347200">- package baselibs.conf</changelog>
  <changelog author="puzel@novell.com" date="1271160000">- update to version 0.11.13
  * Modify Rutoken S binary interfaces by Aktiv Co.
  * Muscle driver fixed (acl reading issue)
  * Many small fixes (e.g. mem leaks)
  * Compiling with openssl 1.0.0-beta fixed
  * Document integer problem in OpenSC and implement workaround
  * Improve entersafe profile to support private data objects
- Require pinentry
- add opensc-libassuan-2.patch
- add opensc-fix-gcc-warnings.patch</changelog>
  <changelog author="sbrabec@suse.cz" date="1282564800">- Fixed broken opensc-fix-gcc-warnings.patch (bnc#627619).
- Simplified plugin installation.</changelog>
  <changelog author="sbrabec@suse.cz" date="1294401600">- Updated to version 0.12.0:
  * Security fix (bnc#660109, CVE-2010-4523).
  * Only one backend is supported. openSUSE will use pcsc-lite.
  * libopensc made private, library should not be used by other
    applications. Please use generic PKCS#11 interface instead.
  * Signer plugin discontinued. Please use openssl engine_pkcs11.
  * No more depends on libassuan.
  * New card drivers.
  * Support for CardOS enhanced.
  * More changes and enhancements.
- libopensc merged back to the main package, as it is private now.</changelog>
  <changelog author="lmedinas@opensuse.org" date="1317297600">- Updated to version 0.12.2:
  * Builds are now silent by default when OpenSC is built from
    source on Unix.
  * Using --wait with command line tools works with 64bit Linux
    again.
  * Greatly improved OpenPGP card support, including OpenPGP
    2.0 cards like the one found in German Privacy Foundation
    CryptoStick.
  * Fixed support for FINeID cards issued after 01.03.2011 with
    2048bit keys.
  * #256: Fixed support for TCOS cards (broken since 0.12.0).
  * Added support for IDKey-cards to TCOS3 driver.
  * #361: Improved PC/SC driver to fetch the maximum PIN sizes
    from the open source CCID driver. This fixes the issue for
    Linux/OSX with recent driver.
  * Fix FINeID cards for organizations.
  * Several smaller bugs and compiler warnings fixed
- Updated to version 0.12.1:
  * IAS-ECC 1.0.1
  * Support for cards with multiple PKCS#15 applications
  * New card driver: IAS/ECC 1.0.1
  * rutoken-tool has been deprecated and removed.
  * eidenv and piv-tool utilities now have manual pages.
  * pkcs11-tool now requires the use of --module parameter.
  * All tools can now use an ATR as an argument to --reader,
    to skip to the card with given ATR.
  * opensc-tool -l with -v now shows information about the
    inserted cards.
  * Creating files have an enforced upper size limit, 64K
  * Support for multiple PKCS#15 applications with different
    AID-s. PKCS#15 applications can be listed with pkcs15-tool
  - -list-applications. Binding to a specific AID with PKCS#15
    tools can be done with --aid.
  * Hex strings (like card ATR or APDU-s) can now be separated
    by space, in addition to colons.
  * Pinpad readers known to be bogus are now ignored by OpenSC.
    At the moment only "HP USB Smart Card Keyboard" is disabled.
  * Numerous compiler warnings, unused code and internal bugs
    have been eliminated.</changelog>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
</package>
<package pkgid="c4702daec1d0583cd3940330eeb1f3ea3a92f926452b7843541082b02be50324" name="opensc-32bit" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="lp150.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1237291200">- Updated to version 0.11.7:
  * hide_empty_slots now on by default? small logic change?
  * ruToken driver was updated.
  * openct virtual readers reduced to 2 by default.
  * Security issue: Fix private data support. (bnc#480262,
    CVE-2009-0368)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * Enable lock_login by default.
  * Disable allow_soft_keygen by default.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239278400">- Fixed undefined code (bnc#440853).
- Don't call autoreconf on older products.</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 0.11.8:
  * Fix security problem in pkcs11-tool gen_keypair
    (PublicExponent 1) (bnc#501726)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * updated and improve entersafe driver. FTCOS/PK-01C cards are
    supported now, compatible with cards writen by Feitian's
    software on windows.</changelog>
  <changelog author="sbrabec@suse.cz" date="1248955200">- libopensc2 should not require opensc (bnc#466430).</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 0.11.9:
  * New rutoken_ecp driver
  * Allow more keys/certificates/files etc. with entersafe tokens
  * Updates pkcs11.h from scute fixing warnings
  * Small fixes in rutoken driver
  * Major update for piv driver with increased compatibility</changelog>
  <changelog author="jengelh@medozas.de" date="1262347200">- package baselibs.conf</changelog>
  <changelog author="puzel@novell.com" date="1271160000">- update to version 0.11.13
  * Modify Rutoken S binary interfaces by Aktiv Co.
  * Muscle driver fixed (acl reading issue)
  * Many small fixes (e.g. mem leaks)
  * Compiling with openssl 1.0.0-beta fixed
  * Document integer problem in OpenSC and implement workaround
  * Improve entersafe profile to support private data objects
- Require pinentry
- add opensc-libassuan-2.patch
- add opensc-fix-gcc-warnings.patch</changelog>
  <changelog author="sbrabec@suse.cz" date="1282564800">- Fixed broken opensc-fix-gcc-warnings.patch (bnc#627619).
- Simplified plugin installation.</changelog>
  <changelog author="sbrabec@suse.cz" date="1294401600">- Updated to version 0.12.0:
  * Security fix (bnc#660109, CVE-2010-4523).
  * Only one backend is supported. openSUSE will use pcsc-lite.
  * libopensc made private, library should not be used by other
    applications. Please use generic PKCS#11 interface instead.
  * Signer plugin discontinued. Please use openssl engine_pkcs11.
  * No more depends on libassuan.
  * New card drivers.
  * Support for CardOS enhanced.
  * More changes and enhancements.
- libopensc merged back to the main package, as it is private now.</changelog>
  <changelog author="lmedinas@opensuse.org" date="1317297600">- Updated to version 0.12.2:
  * Builds are now silent by default when OpenSC is built from
    source on Unix.
  * Using --wait with command line tools works with 64bit Linux
    again.
  * Greatly improved OpenPGP card support, including OpenPGP
    2.0 cards like the one found in German Privacy Foundation
    CryptoStick.
  * Fixed support for FINeID cards issued after 01.03.2011 with
    2048bit keys.
  * #256: Fixed support for TCOS cards (broken since 0.12.0).
  * Added support for IDKey-cards to TCOS3 driver.
  * #361: Improved PC/SC driver to fetch the maximum PIN sizes
    from the open source CCID driver. This fixes the issue for
    Linux/OSX with recent driver.
  * Fix FINeID cards for organizations.
  * Several smaller bugs and compiler warnings fixed
- Updated to version 0.12.1:
  * IAS-ECC 1.0.1
  * Support for cards with multiple PKCS#15 applications
  * New card driver: IAS/ECC 1.0.1
  * rutoken-tool has been deprecated and removed.
  * eidenv and piv-tool utilities now have manual pages.
  * pkcs11-tool now requires the use of --module parameter.
  * All tools can now use an ATR as an argument to --reader,
    to skip to the card with given ATR.
  * opensc-tool -l with -v now shows information about the
    inserted cards.
  * Creating files have an enforced upper size limit, 64K
  * Support for multiple PKCS#15 applications with different
    AID-s. PKCS#15 applications can be listed with pkcs15-tool
  - -list-applications. Binding to a specific AID with PKCS#15
    tools can be done with --aid.
  * Hex strings (like card ATR or APDU-s) can now be separated
    by space, in addition to colons.
  * Pinpad readers known to be bogus are now ignored by OpenSC.
    At the moment only "HP USB Smart Card Keyboard" is disabled.
  * Numerous compiler warnings, unused code and internal bugs
    have been eliminated.</changelog>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1529668800">- Fix broken support of Feitian epass2003 (bsc#1097951, regression,
  opensc-feitian-epass2003.patch).</changelog>
</package>
<package pkgid="17250d8940971cd2fab344a424be4cdf8088bd4ca1ca9a7e033c18ec3fcf6faa" name="opensc-32bit" arch="x86_64">
  <version epoch="0" ver="0.18.0" rel="lp150.2.6.1"/>
  <changelog author="sbrabec@suse.cz" date="1237291200">- Updated to version 0.11.7:
  * hide_empty_slots now on by default? small logic change?
  * ruToken driver was updated.
  * openct virtual readers reduced to 2 by default.
  * Security issue: Fix private data support. (bnc#480262,
    CVE-2009-0368)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * Enable lock_login by default.
  * Disable allow_soft_keygen by default.</changelog>
  <changelog author="sbrabec@suse.cz" date="1239278400">- Fixed undefined code (bnc#440853).
- Don't call autoreconf on older products.</changelog>
  <changelog author="sbrabec@suse.cz" date="1241697600">- Updated to version 0.11.8:
  * Fix security problem in pkcs11-tool gen_keypair
    (PublicExponent 1) (bnc#501726)
    See http://en.opensuse.org/Smart_Cards/Advisories for more.
  * updated and improve entersafe driver. FTCOS/PK-01C cards are
    supported now, compatible with cards writen by Feitian's
    software on windows.</changelog>
  <changelog author="sbrabec@suse.cz" date="1248955200">- libopensc2 should not require opensc (bnc#466430).</changelog>
  <changelog author="sbrabec@suse.cz" date="1249473600">- Updated to version 0.11.9:
  * New rutoken_ecp driver
  * Allow more keys/certificates/files etc. with entersafe tokens
  * Updates pkcs11.h from scute fixing warnings
  * Small fixes in rutoken driver
  * Major update for piv driver with increased compatibility</changelog>
  <changelog author="jengelh@medozas.de" date="1262347200">- package baselibs.conf</changelog>
  <changelog author="puzel@novell.com" date="1271160000">- update to version 0.11.13
  * Modify Rutoken S binary interfaces by Aktiv Co.
  * Muscle driver fixed (acl reading issue)
  * Many small fixes (e.g. mem leaks)
  * Compiling with openssl 1.0.0-beta fixed
  * Document integer problem in OpenSC and implement workaround
  * Improve entersafe profile to support private data objects
- Require pinentry
- add opensc-libassuan-2.patch
- add opensc-fix-gcc-warnings.patch</changelog>
  <changelog author="sbrabec@suse.cz" date="1282564800">- Fixed broken opensc-fix-gcc-warnings.patch (bnc#627619).
- Simplified plugin installation.</changelog>
  <changelog author="sbrabec@suse.cz" date="1294401600">- Updated to version 0.12.0:
  * Security fix (bnc#660109, CVE-2010-4523).
  * Only one backend is supported. openSUSE will use pcsc-lite.
  * libopensc made private, library should not be used by other
    applications. Please use generic PKCS#11 interface instead.
  * Signer plugin discontinued. Please use openssl engine_pkcs11.
  * No more depends on libassuan.
  * New card drivers.
  * Support for CardOS enhanced.
  * More changes and enhancements.
- libopensc merged back to the main package, as it is private now.</changelog>
  <changelog author="lmedinas@opensuse.org" date="1317297600">- Updated to version 0.12.2:
  * Builds are now silent by default when OpenSC is built from
    source on Unix.
  * Using --wait with command line tools works with 64bit Linux
    again.
  * Greatly improved OpenPGP card support, including OpenPGP
    2.0 cards like the one found in German Privacy Foundation
    CryptoStick.
  * Fixed support for FINeID cards issued after 01.03.2011 with
    2048bit keys.
  * #256: Fixed support for TCOS cards (broken since 0.12.0).
  * Added support for IDKey-cards to TCOS3 driver.
  * #361: Improved PC/SC driver to fetch the maximum PIN sizes
    from the open source CCID driver. This fixes the issue for
    Linux/OSX with recent driver.
  * Fix FINeID cards for organizations.
  * Several smaller bugs and compiler warnings fixed
- Updated to version 0.12.1:
  * IAS-ECC 1.0.1
  * Support for cards with multiple PKCS#15 applications
  * New card driver: IAS/ECC 1.0.1
  * rutoken-tool has been deprecated and removed.
  * eidenv and piv-tool utilities now have manual pages.
  * pkcs11-tool now requires the use of --module parameter.
  * All tools can now use an ATR as an argument to --reader,
    to skip to the card with given ATR.
  * opensc-tool -l with -v now shows information about the
    inserted cards.
  * Creating files have an enforced upper size limit, 64K
  * Support for multiple PKCS#15 applications with different
    AID-s. PKCS#15 applications can be listed with pkcs15-tool
  - -list-applications. Binding to a specific AID with PKCS#15
    tools can be done with --aid.
  * Hex strings (like card ATR or APDU-s) can now be separated
    by space, in addition to colons.
  * Pinpad readers known to be bogus are now ignored by OpenSC.
    At the moment only "HP USB Smart Card Keyboard" is disabled.
  * Numerous compiler warnings, unused code and internal bugs
    have been eliminated.</changelog>
  <changelog author="mgorse@suse.com" date="1339502400">- make needed directories before running make install</changelog>
  <changelog author="luizluca@tre-sc.gov.br" date="1386072000">- update to version 0.13.0</changelog>
  <changelog author="michael@stroeder.com" date="1424088000">- update to version 0.14.0</changelog>
  <changelog author="bwachter-pkg@lart.info" date="1438257600">- update to version 0.15.0
- register with p11-kit
  (https://www.opensc-project.org/opensc/ticket/390)</changelog>
  <changelog author="t.gruner@katodev.de" date="1467720000">- update to version 0.16.0
- remove fix (issue 505)
- clean up spec-file</changelog>
  <changelog author="sbrabec@suse.com" date="1479816000">- Add baselibs.conf to provide 32-bit PKCS11 plugins (bsc#996047).
- Drop opensc-ADVISORIES. There is no new advisory since 2009.</changelog>
  <changelog author="tchvatal@suse.com" date="1500379200">- Switch to tarball fetching from github
- Few small cleanups</changelog>
  <changelog author="michael@stroeder.com" date="1514808000">- update to version 0.17.0:
  * support for new cards
  * PIN support enhancemets
  * added .pc file
  * builds with OpenSSL 1.1.0 (1074799)
  * See /usr/share/doc/packages/opensc/NEWS for complete list.</changelog>
  <changelog author="sbrabec@suse.com" date="1531224000">- Update to version 0.18.0:
  * Further improvements of PIN support.
  * Large number of improvements and fixes
    (boo#1097951, boo#1100501).
  * See /usr/share/doc/packages/opensc/NEWS for complete list.
- Add opensc-desktop.patch, opensc-desktop2.patch and
  opensc-bash-completions.patch.</changelog>
</package>
<package pkgid="da3358865c7eaa9d4e63311c2032df212398bf87fedd972ea5db06e190536085" name="openslp" arch="src">
  <version epoch="0" ver="2.0.0" rel="lp150.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1345896000">- openslp-ocloexec.patch: open all internal fds with O_CLOEXEC
  so we do not leak them on fork() .. execve() particulary
  important in the shared library.</changelog>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environments (to break cycles)</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mls@suse.de" date="1373976000">- fix wrong dir modifier in filelist</changelog>
  <changelog author="mls@suse.de" date="1392292800">- frontport SLE11 patches:
  * add hardMTU option to limit the datagram package size to
    1400 bytes [bnc#648384].
    patch: openslp.hardmtu.diff
  * fix double free in SLPDKnownDAAdd error case [bnc#667953]
    patch: openslp.knowndafree.diff
  * fix libslp socket handling, check if socket is still alive
    and fix socket close code [bnc#693756]
    patch: openslp.loopbacksocket.diff
  * make openslpd reconnect to DAs if they closed the connection
    [bnc#723385]
    patch: openslp.slpdreconnect.diff
  * fixup lifetime of registrations a bit so that they
    don't get removed too early [bnc#658972]
    patch: openslp.lifetime.diff</changelog>
  <changelog author="mls@suse.de" date="1392811200">- update to openslp-2.0.0 to get IPv6 support
  * dropped patches:
    v1dadiscovery.diff, openslp.clrflags.diff
    openslp.fixdsareturn.diff, openslp.dereg.diff,
    openslp.tcpclearovr.diff, openslp.lifetime.diff,
    slptool-timeout.diff, openslp.poll.diff,
    openslp.ignorespaces.diff, openslp.checkovr.diff,
    openslp.fixaddrcheck.diff, openslp.loopbacksocket.diff,
    openslp.diff, openslp.doubleequal.diff, openslp.discovery.diff,
    openslp.parseext.diff, openslp.knowndafree.diff,
    openslp.emptyanswer.diff, openslp.v1sladdr.diff, hppa.diff
  * renamed patches:
    openslp-1.2.0-visibility.patch -&gt; openslp.visibility.diff
    openslp-1.2.0-daemon.diff -&gt; openslp.daemon.diff
    openslp.use-TCPDIAG-for-checking-listeners -&gt; openslp.netlink.diff
    openslp-ocloexec.patch -&gt; openslp.cloexec.diff
- always use localtime in the log file [bnc#855385]
  patch: openslp.localtime.diff
- use tcp to connect to the local SA
  patch: openslp.tcplocal.diff
- drop unused mdns support
- rename README.SuSE to README.SUSE</changelog>
  <changelog author="mls@suse.de" date="1397131200">- use AI_CANONNAME when looking up the canonical name</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406462400">- openslp.sd_notify.diff make slpd systemd service of type
  notify instead of simple, to avoid startup races.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406548800">- Do not apply previous patch to distros without systemd.
- Limit init script usage only to legacy products.</changelog>
  <changelog author="mls@suse.de" date="1409572800">- fix last commit</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
</package>
<package pkgid="a12695f1f679f4234514ce6ef65e8b58c0ccfab2dcf59710520a323388ce1403" name="openslp" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="lp150.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1345896000">- openslp-ocloexec.patch: open all internal fds with O_CLOEXEC
  so we do not leak them on fork() .. execve() particulary
  important in the shared library.</changelog>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environments (to break cycles)</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mls@suse.de" date="1373976000">- fix wrong dir modifier in filelist</changelog>
  <changelog author="mls@suse.de" date="1392292800">- frontport SLE11 patches:
  * add hardMTU option to limit the datagram package size to
    1400 bytes [bnc#648384].
    patch: openslp.hardmtu.diff
  * fix double free in SLPDKnownDAAdd error case [bnc#667953]
    patch: openslp.knowndafree.diff
  * fix libslp socket handling, check if socket is still alive
    and fix socket close code [bnc#693756]
    patch: openslp.loopbacksocket.diff
  * make openslpd reconnect to DAs if they closed the connection
    [bnc#723385]
    patch: openslp.slpdreconnect.diff
  * fixup lifetime of registrations a bit so that they
    don't get removed too early [bnc#658972]
    patch: openslp.lifetime.diff</changelog>
  <changelog author="mls@suse.de" date="1392811200">- update to openslp-2.0.0 to get IPv6 support
  * dropped patches:
    v1dadiscovery.diff, openslp.clrflags.diff
    openslp.fixdsareturn.diff, openslp.dereg.diff,
    openslp.tcpclearovr.diff, openslp.lifetime.diff,
    slptool-timeout.diff, openslp.poll.diff,
    openslp.ignorespaces.diff, openslp.checkovr.diff,
    openslp.fixaddrcheck.diff, openslp.loopbacksocket.diff,
    openslp.diff, openslp.doubleequal.diff, openslp.discovery.diff,
    openslp.parseext.diff, openslp.knowndafree.diff,
    openslp.emptyanswer.diff, openslp.v1sladdr.diff, hppa.diff
  * renamed patches:
    openslp-1.2.0-visibility.patch -&gt; openslp.visibility.diff
    openslp-1.2.0-daemon.diff -&gt; openslp.daemon.diff
    openslp.use-TCPDIAG-for-checking-listeners -&gt; openslp.netlink.diff
    openslp-ocloexec.patch -&gt; openslp.cloexec.diff
- always use localtime in the log file [bnc#855385]
  patch: openslp.localtime.diff
- use tcp to connect to the local SA
  patch: openslp.tcplocal.diff
- drop unused mdns support
- rename README.SuSE to README.SUSE</changelog>
  <changelog author="mls@suse.de" date="1397131200">- use AI_CANONNAME when looking up the canonical name</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406462400">- openslp.sd_notify.diff make slpd systemd service of type
  notify instead of simple, to avoid startup races.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406548800">- Do not apply previous patch to distros without systemd.
- Limit init script usage only to legacy products.</changelog>
  <changelog author="mls@suse.de" date="1409572800">- fix last commit</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
</package>
<package pkgid="996ed9cd983026f2c8c07aae1342520a917fc2f79bb5ed607255b7e1c7774892" name="openslp-32bit" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="lp150.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1345896000">- openslp-ocloexec.patch: open all internal fds with O_CLOEXEC
  so we do not leak them on fork() .. execve() particulary
  important in the shared library.</changelog>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environments (to break cycles)</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mls@suse.de" date="1373976000">- fix wrong dir modifier in filelist</changelog>
  <changelog author="mls@suse.de" date="1392292800">- frontport SLE11 patches:
  * add hardMTU option to limit the datagram package size to
    1400 bytes [bnc#648384].
    patch: openslp.hardmtu.diff
  * fix double free in SLPDKnownDAAdd error case [bnc#667953]
    patch: openslp.knowndafree.diff
  * fix libslp socket handling, check if socket is still alive
    and fix socket close code [bnc#693756]
    patch: openslp.loopbacksocket.diff
  * make openslpd reconnect to DAs if they closed the connection
    [bnc#723385]
    patch: openslp.slpdreconnect.diff
  * fixup lifetime of registrations a bit so that they
    don't get removed too early [bnc#658972]
    patch: openslp.lifetime.diff</changelog>
  <changelog author="mls@suse.de" date="1392811200">- update to openslp-2.0.0 to get IPv6 support
  * dropped patches:
    v1dadiscovery.diff, openslp.clrflags.diff
    openslp.fixdsareturn.diff, openslp.dereg.diff,
    openslp.tcpclearovr.diff, openslp.lifetime.diff,
    slptool-timeout.diff, openslp.poll.diff,
    openslp.ignorespaces.diff, openslp.checkovr.diff,
    openslp.fixaddrcheck.diff, openslp.loopbacksocket.diff,
    openslp.diff, openslp.doubleequal.diff, openslp.discovery.diff,
    openslp.parseext.diff, openslp.knowndafree.diff,
    openslp.emptyanswer.diff, openslp.v1sladdr.diff, hppa.diff
  * renamed patches:
    openslp-1.2.0-visibility.patch -&gt; openslp.visibility.diff
    openslp-1.2.0-daemon.diff -&gt; openslp.daemon.diff
    openslp.use-TCPDIAG-for-checking-listeners -&gt; openslp.netlink.diff
    openslp-ocloexec.patch -&gt; openslp.cloexec.diff
- always use localtime in the log file [bnc#855385]
  patch: openslp.localtime.diff
- use tcp to connect to the local SA
  patch: openslp.tcplocal.diff
- drop unused mdns support
- rename README.SuSE to README.SUSE</changelog>
  <changelog author="mls@suse.de" date="1397131200">- use AI_CANONNAME when looking up the canonical name</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406462400">- openslp.sd_notify.diff make slpd systemd service of type
  notify instead of simple, to avoid startup races.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406548800">- Do not apply previous patch to distros without systemd.
- Limit init script usage only to legacy products.</changelog>
  <changelog author="mls@suse.de" date="1409572800">- fix last commit</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
</package>
<package pkgid="e77e0f0e7045cdd06b328620424485ad41d2f430e0ea8e03d2e3453dfd09761a" name="openslp-devel" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="lp150.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1345896000">- openslp-ocloexec.patch: open all internal fds with O_CLOEXEC
  so we do not leak them on fork() .. execve() particulary
  important in the shared library.</changelog>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environments (to break cycles)</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mls@suse.de" date="1373976000">- fix wrong dir modifier in filelist</changelog>
  <changelog author="mls@suse.de" date="1392292800">- frontport SLE11 patches:
  * add hardMTU option to limit the datagram package size to
    1400 bytes [bnc#648384].
    patch: openslp.hardmtu.diff
  * fix double free in SLPDKnownDAAdd error case [bnc#667953]
    patch: openslp.knowndafree.diff
  * fix libslp socket handling, check if socket is still alive
    and fix socket close code [bnc#693756]
    patch: openslp.loopbacksocket.diff
  * make openslpd reconnect to DAs if they closed the connection
    [bnc#723385]
    patch: openslp.slpdreconnect.diff
  * fixup lifetime of registrations a bit so that they
    don't get removed too early [bnc#658972]
    patch: openslp.lifetime.diff</changelog>
  <changelog author="mls@suse.de" date="1392811200">- update to openslp-2.0.0 to get IPv6 support
  * dropped patches:
    v1dadiscovery.diff, openslp.clrflags.diff
    openslp.fixdsareturn.diff, openslp.dereg.diff,
    openslp.tcpclearovr.diff, openslp.lifetime.diff,
    slptool-timeout.diff, openslp.poll.diff,
    openslp.ignorespaces.diff, openslp.checkovr.diff,
    openslp.fixaddrcheck.diff, openslp.loopbacksocket.diff,
    openslp.diff, openslp.doubleequal.diff, openslp.discovery.diff,
    openslp.parseext.diff, openslp.knowndafree.diff,
    openslp.emptyanswer.diff, openslp.v1sladdr.diff, hppa.diff
  * renamed patches:
    openslp-1.2.0-visibility.patch -&gt; openslp.visibility.diff
    openslp-1.2.0-daemon.diff -&gt; openslp.daemon.diff
    openslp.use-TCPDIAG-for-checking-listeners -&gt; openslp.netlink.diff
    openslp-ocloexec.patch -&gt; openslp.cloexec.diff
- always use localtime in the log file [bnc#855385]
  patch: openslp.localtime.diff
- use tcp to connect to the local SA
  patch: openslp.tcplocal.diff
- drop unused mdns support
- rename README.SuSE to README.SUSE</changelog>
  <changelog author="mls@suse.de" date="1397131200">- use AI_CANONNAME when looking up the canonical name</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406462400">- openslp.sd_notify.diff make slpd systemd service of type
  notify instead of simple, to avoid startup races.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406548800">- Do not apply previous patch to distros without systemd.
- Limit init script usage only to legacy products.</changelog>
  <changelog author="mls@suse.de" date="1409572800">- fix last commit</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
</package>
<package pkgid="18b52c6405ea6b55f87905843a16fc71345b118297031f2b9f4133a81044bfd5" name="openslp-server" arch="x86_64">
  <version epoch="0" ver="2.0.0" rel="lp150.5.3.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1345896000">- openslp-ocloexec.patch: open all internal fds with O_CLOEXEC
  so we do not leak them on fork() .. execve() particulary
  important in the shared library.</changelog>
  <changelog author="coolo@suse.com" date="1350561600">- buildrequire systemd through the pkgconfig provide to get
  systemd-mini in build environments (to break cycles)</changelog>
  <changelog author="idonmez@suse.com" date="1366027200">- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="mls@suse.de" date="1373976000">- fix wrong dir modifier in filelist</changelog>
  <changelog author="mls@suse.de" date="1392292800">- frontport SLE11 patches:
  * add hardMTU option to limit the datagram package size to
    1400 bytes [bnc#648384].
    patch: openslp.hardmtu.diff
  * fix double free in SLPDKnownDAAdd error case [bnc#667953]
    patch: openslp.knowndafree.diff
  * fix libslp socket handling, check if socket is still alive
    and fix socket close code [bnc#693756]
    patch: openslp.loopbacksocket.diff
  * make openslpd reconnect to DAs if they closed the connection
    [bnc#723385]
    patch: openslp.slpdreconnect.diff
  * fixup lifetime of registrations a bit so that they
    don't get removed too early [bnc#658972]
    patch: openslp.lifetime.diff</changelog>
  <changelog author="mls@suse.de" date="1392811200">- update to openslp-2.0.0 to get IPv6 support
  * dropped patches:
    v1dadiscovery.diff, openslp.clrflags.diff
    openslp.fixdsareturn.diff, openslp.dereg.diff,
    openslp.tcpclearovr.diff, openslp.lifetime.diff,
    slptool-timeout.diff, openslp.poll.diff,
    openslp.ignorespaces.diff, openslp.checkovr.diff,
    openslp.fixaddrcheck.diff, openslp.loopbacksocket.diff,
    openslp.diff, openslp.doubleequal.diff, openslp.discovery.diff,
    openslp.parseext.diff, openslp.knowndafree.diff,
    openslp.emptyanswer.diff, openslp.v1sladdr.diff, hppa.diff
  * renamed patches:
    openslp-1.2.0-visibility.patch -&gt; openslp.visibility.diff
    openslp-1.2.0-daemon.diff -&gt; openslp.daemon.diff
    openslp.use-TCPDIAG-for-checking-listeners -&gt; openslp.netlink.diff
    openslp-ocloexec.patch -&gt; openslp.cloexec.diff
- always use localtime in the log file [bnc#855385]
  patch: openslp.localtime.diff
- use tcp to connect to the local SA
  patch: openslp.tcplocal.diff
- drop unused mdns support
- rename README.SuSE to README.SUSE</changelog>
  <changelog author="mls@suse.de" date="1397131200">- use AI_CANONNAME when looking up the canonical name</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406462400">- openslp.sd_notify.diff make slpd systemd service of type
  notify instead of simple, to avoid startup races.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1406548800">- Do not apply previous patch to distros without systemd.
- Limit init script usage only to legacy products.</changelog>
  <changelog author="mls@suse.de" date="1409572800">- fix last commit</changelog>
  <changelog author="p.drouand@gmail.com" date="1425816000">- Do not depend on fillup and insserv if the package build with
  systemd support; the dependencies are not needed in that case</changelog>
  <changelog author="mls@suse.de" date="1473681600">- remove convenience code as changes bytes in the message
  buffer breaking the verification code [bnc#994989]
  new patch: openslp.noconvenience.diff
- fix storage handling in predicate code, it clashed with gcc's
  fortify_source extension [bnc#909195]
  new patch: openslp.predicatestorage.diff
- bring back allowDoubleEqualInPredicate option
  new patch: openslp.doubleequal.diff
- fix bug in openslp.initda.diff patch
- fix rcopenslp helper
- fix _xrealloc not checking the malloc return value
  [bnc#980722] [CVE-2016-4912]
  new patch: openslp.xrealloc.diff</changelog>
  <changelog author="mls@suse.de" date="1476273600">- Fix bounds check in SLPFoldWhiteSpace
  [bnc#1001600] [CVE-2016-7567]
  new patch: openslp.foldws.diff</changelog>
  <changelog author="fbui@suse.com" date="1481544000">- Replace pkgconfig(libsystemd-*) with pkgconfig(libsystemd)
  Nowadays pkgconfig(libsystemd) replaces all libsystemd-* libs, which
  are obsolete.</changelog>
  <changelog author="fbui@suse.com" date="1483963200">- Also update openslp.sd_notify.diff to use the new systemd lib</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497355200">- Add support for OpenSSL 1.1. Commit from upstream [bsc#1042665]
  new patch: openslp.openssl-1.1.diff</changelog>
  <changelog author="ro@suse.de" date="1511956800">- add separate source openslp.logrotate.systemd to
  use systemctl reload for logrotate configuration</changelog>
  <changelog author="mls@suse.de" date="1519905600">- Use %license (boo#1082318)
- fix slpd using the peer address as local address for TCP
  connections [bnc#1076035]
  new patch: openslp.localaddr.diff
- use tcp connections for unicast requests [bnc#1080964]
  new patch: openslp.tcpunicast.diff</changelog>
  <changelog author="mls@suse.de" date="1523448000">- move systemd notification before the chroot() call, otherwise
  the notify function cannot reach systend's unix domain socket
  [bnc#1089097]</changelog>
  <changelog author="mls@suse.de" date="1530187200">- Fix memory corruption when the sendbuf gets reallocated
  [bnc#1090638] [CVE-2017-17833]
  new patch: openslp.sendbuf_move.diff
- Fix out of bounds reads in message parsing
  new patch: openslp.parseoob.diff</changelog>
</package>
<package pkgid="8ecca4f4075f07e7479d735c75fa096265af159b0fc3940d78afdc1d4aeee5f6" name="openssl-1_0_0" arch="src">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="5a2634865c4b3f080b15d65a0055aa54f441eac205a52e16ae5ef2b4d8e44eb8" name="openssl-1_0_0" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="6c8ea39b4903924ef1f8d8e64fbece8f35488179459d2e391e2a0f426967551f" name="openssl-1_0_0-cavs" arch="x86_64">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="6983582341a2bcb3ce996055d83ef432d992d66d3dc12d10e23348ae46c7b921" name="openssl-1_0_0-doc" arch="noarch">
  <version epoch="0" ver="1.0.2n" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1493726400">- Update baselibs.conf to contain all the renamed packages</changelog>
  <changelog author="tchvatal@suse.com" date="1493985600">- Add conflict on docu packages</changelog>
  <changelog author="tchvatal@suse.com" date="1494417600">- Avoid the requires conflict between 1.1 and 1.0 openssl</changelog>
  <changelog author="tchvatal@suse.com" date="1494417601">- Add conflict for any libopenssl-devel that is not in our version</changelog>
  <changelog author="vcizek@suse.com" date="1495195200">- filter out provides of the steam-32bit package by adding
  "autoreqprov off" to baselibs.conf (bsc#1039880)</changelog>
  <changelog author="vcizek@suse.com" date="1496059200">- update to 1.0.2l
  * bugfix release only
  * fixes problem with a lower-than-before version number (bsc#1040863)
- drop openssl-print_notice-NULL_crash.patch (upstream)
- refresh patches openssl-fipslocking.patch and
  0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1498219200">- Update engines location for the engines to match up 1.1 to ease
  later on migration bsc#1045803
  * openssl-engines-path.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169600">- package FIPS CAVS testing tools (bsc#1027688)
  * add openssl-fips_add_cavs_tests.patch
- FIPS CAVS: Add AES keywrap (KWVS) test tool (bsc#1044095)
  * add openssl-fips_cavs_aes_keywrap.patch
- Fix CAVS testing padding issue with RSA d values (bsc#1044107)
  * add openssl-fips_cavs_pad_with_zeroes.patch from Pedro Monreal
- FIPS CAVS: allow fips_* tools to run in FIPS mode (bnc#902364)
  * added openssl-fips_cavs_helpers_run_in_fips_mode.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169601">- remove DES-CBC3-SHA based ciphers from DEFAULT_SUSE (bsc#1027908)
  * update patches:
    openssl-1.0.1e-add-suse-default-cipher.patch
    openssl-1.0.1e-add-test-suse-default-cipher-suite.patch
- s_client sent empty client certificate (bsc#1028281)
  Add back certificate initialization set_cert_key_stuff()
  which was removed by openssl-1.0.2a-default-paths.patch
  * modified openssl-1.0.2a-default-paths.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499169602">- Don't run FIPS power-up self-tests when the checksum files aren't
  installed (bsc#1042392, boo#1038906)
  * add openssl-fips-run_selftests_only_when_module_is_complete.patch
- AES XTS key parts must not be identical in FIPS mode (bsc#1019637)
  * add openssl-fips-xts_nonidentical_key_parts.patch
- Allow runtime switching of s390x capabilities via OPENSSL_s390xcap
  environmental variable (bsc#1028723)
  * add openssl-fips-OPENSSL_s390xcap.patch</changelog>
  <changelog author="vcizek@suse.com" date="1499688000">- Ship the -cavs subpackage with the FIPS testing helper binaries</changelog>
  <changelog author="jengelh@inai.de" date="1499688001">- The description is supposed to describe the package, not the
  development process or history.</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Diversity -devel subpackage boilerplate summary.</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- Do not require openssl-1_0_0-targettype, as it will not be generated
  and is not needed.</changelog>
  <changelog author="vcizek@suse.com" date="1504180800">- Add ECDSA ciphers to DEFAULT_SUSE cipher list (bsc#1055825)
  * modified openssl-1.0.1e-add-suse-default-cipher.patch
  * modified openssl-1.0.1e-add-test-suse-default-cipher-suite.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.0.2m
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- refreshed openssl-1.0.2i-fips.patch
- revert upstream commit 0ab24083a16c8a4dd35833031bbeaeb0437a7219
  as we don't have the added function and FIPS is not interesting
  for openSUSE anyway
  * added 0001-Set-FIPS-thread-id-callback.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Do not filter out pkgconfig() provides/require.</changelog>
  <changelog author="vcizek@suse.com" date="1512734400">- update to 1.0.2n
  OpenSSL Security Advisory [07 Dec 2017]
  * Read/write after SSL object in error state
    (CVE-2017-3737, bsc#1071905)
  * rsaz_1024_mul_avx2 overflow bug on x86_64
    (CVE-2017-3738, bsc#1071906)
- refreshed patches:
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-fipslocking.patch
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.0.2i-fips.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ECDSA.patch
  * openssl-add-blinding-to-DSA.patch</changelog>
</package>
<package pkgid="a2a02f413bba685947c391819dbcbc0be9d6d374a7e34d0d6cc773079bd2196e" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="49820ca1303304baa7fb19e7df0f5aab1414bce5eac5bfc7e397e128f1063aec" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="199a99601f739320ca406a137527bc415dbe5ce9bac361876d832c5109a35e9f" name="openssl-1_1" arch="src">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="3ba8b1f1add7b2f4346c8959360529f0c43a282d26e8f9b73704e19120c4c389" name="openssl-1_1" arch="x86_64">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="730baf8768023eebd2112eeea72106b78c38ac3df997d19cd617467083820ad9" name="openssl-1_1-doc" arch="noarch">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.3.1"/>
  <changelog author="tchvatal@suse.com" date="1498392000">- Add patch openssl-no-date.patch to disable date inclusion in most
  of the binaries
- Use autopatch to make things smaller
- Enable verbose output on the tests
- Paralelize depmod</changelog>
  <changelog author="jimmy@boombatower.com" date="1500379200">- Add Provides and Conflicts for -devel package in baselibs.conf.</changelog>
  <changelog author="vcizek@suse.com" date="1500379201">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
</package>
<package pkgid="f2e3edfc132bcfa99d511f6536f27bbbaec17bc1886fb7a5accfd823091c8a0a" name="openssl-1_1-doc" arch="noarch">
  <version epoch="0" ver="1.1.0h" rel="lp150.3.6.1"/>
  <changelog author="vcizek@suse.com" date="1500379200">- Fix a race condition in tests to make the package build reliably
  * https://github.com/openssl/openssl/issues/3562
  * 0001-Fix-a-TLSProxy-race-condition.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1501761600">- Disable the verbosity of the tests as we expose yet another race
  condition in that</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- The description is supposed to describe the package, not the
  development process or history. (Synchronize with the
  already-updates descriptions in openssl-1_0_0.)
- Update historic copypasted boilerplate summaries
  ("include files mandatory for development")</changelog>
  <changelog author="meissner@suse.com" date="1502798400">- do not require openssl1_1_0-targettype in devel-targettype, as it
  is not built (it has no libraries)</changelog>
  <changelog author="vcizek@suse.com" date="1504267200">- update DEFAULT_SUSE cipher list (bsc#1055825)
  * add CHACHA20-POLY1305
  * add ECDSA ciphers
  * remove 3DES
- modified openssl-1.0.1e-add-suse-default-cipher.patch</changelog>
  <changelog author="vcizek@suse.com" date="1509624000">- Update to 1.1.0g
  OpenSSL Security Advisory [02 Nov 2017]
  * bn_sqrx8x_internal carry bug on x86_64
    (CVE-2017-3736) (bsc#1066242)
  * Malformed X.509 IPAddressFamily could cause OOB read
    (CVE-2017-3735) (bsc#1056058)
- drop 0001-Fix-a-TLSProxy-race-condition.patch (upstream)
- refresh 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870400">- Obsolete openssl-1_0_0 by openssl-1_1_0: this is required for a
  clean upgrade path as an aid to zypp (boo#1070003).</changelog>
  <changelog author="dimstar@opensuse.org" date="1511870401">- Do not filter pkgconfig() provides/requires.</changelog>
  <changelog author="vcizek@suse.com" date="1515499200">- Add support for s390x CPACF enhancements (fate#321518)
  patches taken from https://github.com/openssl/openssl/pull/2859:
  * 0002-crypto-modes-asm-ghash-s390x.pl-fix-gcm_gmult_4bit-K.patch
  * 0004-s390x-assembly-pack-add-OPENSSL_s390xcap-environment.patch
  * 0005-s390x-assembly-pack-add-OPENSSL_s390xcap-man-page.patch
  * 0006-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0007-crypto-evp-e_aes.c-add-foundations-for-extended-s390.patch
  * 0008-s390x-assembly-pack-extended-s390x-capability-vector.patch
  * 0009-crypto-aes-asm-aes-s390x.pl-add-KMA-code-path.patch
  * 0010-doc-man3-OPENSSL_s390xcap.pod-update-KMA.patch
  * 0011-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch
  * 0012-s390x-assembly-pack-add-KMA-code-path-for-aes-gcm.patch
  * 0013-crypto-aes-asm-aes-s390x.pl-add-CFI-annotations-KMA-.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- Don't disable afalgeng on aarch64</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Remove bit obsolete syntax
- Use %license macro</changelog>
  <changelog author="vcizek@suse.com" date="1518782400">- Renamed from openssl-1_1_0 (bsc#1081335)
  * All the minor versions of the 1.1.x openssl branch have the same
    sonum and keep ABI compatibility
  * obsolete the 1_1_0 packages
- update baselibs.conf with the new version names</changelog>
  <changelog author="dimstar@opensuse.org" date="1519732800">- Move the libopenssl1_1_0-32bit obsoletes in baselibs.conf to the
  new libopenssl1_1-32bit: it does not belong to the devel
  package.</changelog>
  <changelog author="vcizek@suse.com" date="1522152000">- Update to 1.1.0h
  OpenSSL Security Advisory [27 Mar 2018]
  * Constructed ASN.1 types with a recursive definition could exceed
    the stack (CVE-2018-0739) (bsc#1087102)
  * rsaz_1024_mul_avx2 overflow bug on x86_64 (CVE-2017-3738)
    (bsc#1071906)
- refresh patches:
  * 0001-Axe-builtin-printf-implementation-use-glibc-instead.patch
  * openssl-1.1.0-fips.patch
  * openssl-pkgconfig.patch
  * openssl-rsakeygen-minimum-distance.patch
  * openssl-static-deps.patch</changelog>
  <changelog author="vcizek@suse.com" date="1522238400">- Tolerate a Certificate using a non-supported group on server side
  (boo#1084651)
  * https://github.com/openssl/openssl/pull/5607
  * add 0001-Tolerate-a-Certificate-using-a-non-supported-group-o.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953600">- Fix escaping in c_rehash (boo#1091961, bsc#1091963)
  * add 0001-Revert-util-dofile.pl-only-quote-stuff-that-actually.patch</changelog>
  <changelog author="vcizek@suse.com" date="1525953601">- OpenSSL Security Advisory [16 Apr 2018]
  * Cache timing vulnerability in RSA Key Generation
    (CVE-2018-0737, bsc#1089039)
  * add openssl-CVE-2018-0737.patch</changelog>
  <changelog author="sflees@suse.de" date="1530014400">- Reject excessively large primes in DH key generation (bsc#1097158,
  CVE-2018-0732)
  * openssl-CVE-2018-0732.patch
- blinding enhancements for ECDSA and DSA (bsc#1097624, bsc#1098592)
  * openssl-add-blinding-to-ecdsa.patch
  * openssl-add-blinding-to-dsa.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520000">- Relax CN name restrictions (bsc#1084011)
  * added patches:
    0001-Limit-scope-of-CN-name-constraints.patch
    0002-Skip-CN-DNS-name-constraint-checks-when-not-needed.patch</changelog>
  <changelog author="vcizek@suse.com" date="1532520001">- Suggest libopenssl1_1-hmac from libopenssl1_1 package to avoid
  dependency issues during updates (bsc#1090765)</changelog>
</package>
<package pkgid="bbb94a73770dda2e4a0f6fabf810717f715acd9f01e2668e15c772e900d5475b" name="openvpn" arch="src">
  <version epoch="0" ver="2.4.3" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
  <changelog author="mt@suse.com" date="1440072000">- Removed obsolete --with-lzo-headers option, readded LFS_CFLAGS.
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
  <changelog author="mt@suse.com" date="1449144000">- Adjust /var/run to _rundir macro value in openvpn@.service too.</changelog>
  <changelog author="idonmez@suse.com" date="1450267200">- Update to version 2.3.9
  * Show extra-certs in current parameters.
  * Do not set the buffer size by default but rely on the operation system default.
  * Remove --enable-password-save option
  * Detect config lines that are too long and give a warning/error
  * Log serial number of revoked certificate
  * Avoid partial authentication state when using --disabled in CCD configs
  * Replace unaligned 16bit access to TCP MSS value with bytewise access
  * Fix possible heap overflow on read accessing getaddrinfo() result.
  * Fix isatty() check for good. (obsoletes revert-daemonize.patch)
  * Client-side part for server restart notification
  * Fix privilege drop if first connection attempt fails
  * Support for username-only auth file.
  * Increase control channel packet size for faster handshakes
  * hardening: add insurance to exit on a failed ASSERT()
  * Fix memory leak in auth-pam plugin
  * Fix (potential) memory leak in init_route_list()
  * Fix unintialized variable in plugin_vlog()
  * Add macro to ensure we exit on fatal errors
  * Fix memory leak in add_option() by simplifying get_ipv6_addr
  * openssl: properly check return value of RAND_bytes()
  * Fix rand_bytes return value checking
  * Fix "White space before end tags can break the config parser"</changelog>
  <changelog author="idonmez@suse.com" date="1451908800">- Update to version 2.3.10
  * Warn user if their certificate has expired
  * Fix regression in setups without a client certificate</changelog>
  <changelog author="idonmez@suse.com" date="1462881600">- Update to version 2.3.11
  * Fixed port-share bug with DoS potential
  * Fix buffer overflow by user supplied data
  * Fix undefined signed shift overflow
  * Ensure input read using systemd-ask-password is null terminated
  * Support reading the challenge-response from console
  * hardening: add safe FD_SET() wrapper openvpn_fd_set()
  * Restrict default TLS cipher list
- Add BuildRequires on xz for SLE11</changelog>
  <changelog author="astieger@suse.com" date="1473336000">- Add an example for a FIPS 140-2 approved cipher configuration to
  the sample configuration files. Fixes bsc#988522
  adding openvpn-fips140-AES-cipher-in-config-template.patch
- remove gpg-offline signature verification, now a source service</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1480334400">- Require iproute2 explicitly. openvpn uses /bin/ip from iproute2,
  so it should be installed</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- update to 2.3.13
- removed obsolete patch files openvpn-2.3.0-man-dot.diff and
  openvpn-fips140-AES-cipher-in-config-template.patch
  2016.11.02 -- Version 2.3.13
  Arne Schwabe (2):
  * Use AES ciphers in our sample configuration files and add a few modern 2.4 examples
  * Incorporate the Debian typo fixes where appropriate and make show_opt default message clearer
  David Sommerseth (4):
  * t_client.sh: Make OpenVPN write PID file to avoid various sudo issues
  * t_client.sh: Add support for Kerberos/ksu
  * t_client.sh: Improve detection if the OpenVPN process did start during tests
  * t_client.sh: Add prepare/cleanup possibilties for each test case
  Gert Doering (5):
  * Do not abort t_client run if OpenVPN instance does not start.
  * Fix t_client runs on OpenSolaris
  * make t_client robust against sudoers misconfiguration
  * add POSTINIT_CMD_suf to t_client.sh and sample config
  * Fix --multihome for IPv6 on 64bit BSD systems.
  Ilya Shipitsin (1):
  * skip t_lpback.sh and t_cltsrv.sh if openvpn configured --disable-crypto
  Lev Stipakov (2):
  * Exclude peer-id from pulled options digest
  * Fix compilation in pedantic mode
  Samuli Seppänen (1):
  * Automatically cache expected IPs for t_client.sh on the first run
  Steffan Karger (6):
  * Fix unittests for out-of-source builds
  * Make gnu89 support explicit
  * cleanup: remove code duplication in msg_test()
  * Update cipher-related man page text
  * Limit --reneg-bytes to 64MB when using small block ciphers
  * Add a revoked cert to the sample keys
  2016.08.23 -- Version 2.3.12
  Arne Schwabe (2):
  * Complete push-peer-info documentation and allow IV_PLAT_VER for other platforms than Windows if the client UI supplies it.
  * Move ASSERT so external-key with OpenSSL works again
  David Sommerseth (3):
  * Only build and run cmocka unit tests if its submodule is initialized
  * Another fix related to unit test framework
  * Remove NOP function and callers
  Dorian Harmans (1):
  * Add CHACHA20-POLY1305 ciphersuite IANA name translations.
  Ivo Manca (1):
  * Plug memory leak in mbedTLS backend
  Jeffrey Cutter (1):
  * Update contrib/pull-resolv-conf/client.up for no DOMAIN
  Jens Neuhalfen (2):
  * Add unit testing support via cmocka
  * Add a test for auth-pam searchandreplace
  Josh Cepek (1):
  * Push an IPv6 CIDR mask used by the server, not the pool's size
  Leon Klingele (1):
  * Add link to bug tracker
  Samuli Seppänen (2):
  * Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes
  * Clarify the fact that build instructions in README are for release tarballs
  Selva Nair (4):
  * Make error non-fatal while deleting address using netsh
  * Make block-outside-dns work with persist-tun
  * Ignore SIGUSR1/SIGHUP during exit notification
  * Promptly close the netcmd_semaphore handle after use
  Steffan Karger (4):
  * Fix polarssl / mbedtls builds
  * Don't limit max incoming message size based on c2-&gt;frame
  * Fix '--cipher none --cipher' crash
  * Discourage using 64-bit block ciphers</changelog>
  <changelog author="mrueckert@suse.de" date="1485086400">- update to 2.3.14
  - update year in copyright message
  - Document the --auth-token option
  - Repair topology subnet on FreeBSD 11
  - Repair topology subnet on OpenBSD
  - Drop recursively routed packets
  - Support --block-outside-dns on multiple tunnels
  - When parsing '--setenv opt xx ..' make sure a third parameter
    is present
  - Map restart signals from event loop to SIGTERM during
    exit-notification wait
  - Correctly state the default dhcp server address in man page
  - Clean up format_hex_ex()
- enabled pkcs11 support</changelog>
  <changelog author="mrueckert@suse.de" date="1485086401">- refreshed patches to apply cleanly again
  openvpn-2.3-plugin-man.dif
  openvpn-fips140-2.3.2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1485086402">- silence warning about %{_rundir}/openvpn
  - for non systemd case: just package the %{_rundir}/openvpn in
    the package
  - for systemd case: call systemd-tmpfiles and own the dir as
    %ghost in the filelist</changelog>
  <changelog author="ndas@suse.de" date="1492776000">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]
- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
  <changelog author="ndas@suse.de" date="1496750400">- Update to 2.4.2
  - auth-token: Ensure tokens are always wiped on de-auth
  - Make --cipher/--auth none more explicit on the risks
  - Use SHA256 for the internal digest, instead of MD5
  - Deprecate --ns-cert-type
  - Deprecate --no-iv
  - Support --block-outside-dns on multiple tunnels
  - Limit --reneg-bytes to 64MB when using small block ciphers
  - Fix --tls-version-max in mbed TLS builds
  Details changelogs are avilable in
  https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
  [*0001-preform-deferred-authentication-in-the-background.patch
  * openvpn-2.3.x-fixed-multiple-low-severity-issues.patch
  * openvpn-fips140-2.3.2.patch]
- pkcs11-helper-devel &gt;= 1.11 is needed for openvpn-2.4.2
- cleanup the spec file</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- use %{_tmpfilesdir} for tmpfiles.d/openvpn.conf (bsc#1044223)</changelog>
  <changelog author="ndas@suse.de" date="1498219200">- Update to 2.4.3 (bsc#1045489)
  - Ignore auth-nocache for auth-user-pass if auth-token is pushed
  - crypto: Enable SHA256 fingerprint checking in --verify-hash
  - copyright: Update GPLv2 license texts
  - auth-token with auth-nocache fix broke --disable-crypto builds
  - OpenSSL: don't use direct access to the internal of X509
  - OpenSSL: don't use direct access to the internal of EVP_PKEY
  - OpenSSL: don't use direct access to the internal of RSA
  - OpenSSL: don't use direct access to the internal of DSA
  - OpenSSL: force meth-&gt;name as non-const when we free() it
  - OpenSSL: don't use direct access to the internal of EVP_MD_CTX
  - OpenSSL: don't use direct access to the internal of EVP_CIPHER_CTX
  - OpenSSL: don't use direct access to the internal of HMAC_CTX
  - Fix NCP behaviour on TLS reconnect.
  - Remove erroneous limitation on max number of args for --plugin
  - Fix edge case with clients failing to set up cipher on empty PUSH_REPLY.
  - Fix potential 1-byte overread in TCP option parsing.
  - Fix remotely-triggerable ASSERT() on malformed IPv6 packet.
  - Preparing for release v2.4.3 (ChangeLog, version.m4, Changes.rst)
  - refactor my_strupr
  - Fix 2 memory leaks in proxy authentication routine
  - Fix memory leak in add_option() for option 'connection'
  - Ensure option array p[] is always NULL-terminated
  - Fix a null-pointer dereference in establish_http_proxy_passthru()
  - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data
  - Fix an unaligned access on OpenBSD/sparc64
  - Missing include for socket-flags TCP_NODELAY on OpenBSD
  - Make openvpn-plugin.h self-contained again.
  - Pass correct buffer size to GetModuleFileNameW()
  - Log the negotiated (NCP) cipher
  - Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c)
  - Skip tls-crypt unit tests if required crypto mode not supported
  - openssl: fix overflow check for long --tls-cipher option
  - Add a DSA test key/cert pair to sample-keys
  - Fix mbedtls fingerprint calculation
  - mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522)
  - mbedtls: require C-string compatible types for --x509-username-field
  - Fix remote-triggerable memory leaks (CVE-2017-7521)
  - Restrict --x509-alt-username extension types
  - Fix potential double-free in --x509-alt-username (CVE-2017-7521)
  - Fix gateway detection with OpenBSD routing domains</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1502452800">- Do not package empty /usr/lib64/tmpfiles.d</changelog>
  <changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0002-Fix-bounds-check-in-read_key.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1525867200">- CVE-2018-9336, bsc#1090839: Fix potential double-free() in
  Interactive Service (openvpn-CVE-2018-9336.patch).</changelog>
</package>
<package pkgid="de0b774d83f0e382abe6527d63f3f542417031947cdc57195e2b528c92fd964c" name="openvpn" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
  <changelog author="mt@suse.com" date="1440072000">- Removed obsolete --with-lzo-headers option, readded LFS_CFLAGS.
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
  <changelog author="mt@suse.com" date="1449144000">- Adjust /var/run to _rundir macro value in openvpn@.service too.</changelog>
  <changelog author="idonmez@suse.com" date="1450267200">- Update to version 2.3.9
  * Show extra-certs in current parameters.
  * Do not set the buffer size by default but rely on the operation system default.
  * Remove --enable-password-save option
  * Detect config lines that are too long and give a warning/error
  * Log serial number of revoked certificate
  * Avoid partial authentication state when using --disabled in CCD configs
  * Replace unaligned 16bit access to TCP MSS value with bytewise access
  * Fix possible heap overflow on read accessing getaddrinfo() result.
  * Fix isatty() check for good. (obsoletes revert-daemonize.patch)
  * Client-side part for server restart notification
  * Fix privilege drop if first connection attempt fails
  * Support for username-only auth file.
  * Increase control channel packet size for faster handshakes
  * hardening: add insurance to exit on a failed ASSERT()
  * Fix memory leak in auth-pam plugin
  * Fix (potential) memory leak in init_route_list()
  * Fix unintialized variable in plugin_vlog()
  * Add macro to ensure we exit on fatal errors
  * Fix memory leak in add_option() by simplifying get_ipv6_addr
  * openssl: properly check return value of RAND_bytes()
  * Fix rand_bytes return value checking
  * Fix "White space before end tags can break the config parser"</changelog>
  <changelog author="idonmez@suse.com" date="1451908800">- Update to version 2.3.10
  * Warn user if their certificate has expired
  * Fix regression in setups without a client certificate</changelog>
  <changelog author="idonmez@suse.com" date="1462881600">- Update to version 2.3.11
  * Fixed port-share bug with DoS potential
  * Fix buffer overflow by user supplied data
  * Fix undefined signed shift overflow
  * Ensure input read using systemd-ask-password is null terminated
  * Support reading the challenge-response from console
  * hardening: add safe FD_SET() wrapper openvpn_fd_set()
  * Restrict default TLS cipher list
- Add BuildRequires on xz for SLE11</changelog>
  <changelog author="astieger@suse.com" date="1473336000">- Add an example for a FIPS 140-2 approved cipher configuration to
  the sample configuration files. Fixes bsc#988522
  adding openvpn-fips140-AES-cipher-in-config-template.patch
- remove gpg-offline signature verification, now a source service</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1480334400">- Require iproute2 explicitly. openvpn uses /bin/ip from iproute2,
  so it should be installed</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- update to 2.3.13
- removed obsolete patch files openvpn-2.3.0-man-dot.diff and
  openvpn-fips140-AES-cipher-in-config-template.patch
  2016.11.02 -- Version 2.3.13
  Arne Schwabe (2):
  * Use AES ciphers in our sample configuration files and add a few modern 2.4 examples
  * Incorporate the Debian typo fixes where appropriate and make show_opt default message clearer
  David Sommerseth (4):
  * t_client.sh: Make OpenVPN write PID file to avoid various sudo issues
  * t_client.sh: Add support for Kerberos/ksu
  * t_client.sh: Improve detection if the OpenVPN process did start during tests
  * t_client.sh: Add prepare/cleanup possibilties for each test case
  Gert Doering (5):
  * Do not abort t_client run if OpenVPN instance does not start.
  * Fix t_client runs on OpenSolaris
  * make t_client robust against sudoers misconfiguration
  * add POSTINIT_CMD_suf to t_client.sh and sample config
  * Fix --multihome for IPv6 on 64bit BSD systems.
  Ilya Shipitsin (1):
  * skip t_lpback.sh and t_cltsrv.sh if openvpn configured --disable-crypto
  Lev Stipakov (2):
  * Exclude peer-id from pulled options digest
  * Fix compilation in pedantic mode
  Samuli Seppänen (1):
  * Automatically cache expected IPs for t_client.sh on the first run
  Steffan Karger (6):
  * Fix unittests for out-of-source builds
  * Make gnu89 support explicit
  * cleanup: remove code duplication in msg_test()
  * Update cipher-related man page text
  * Limit --reneg-bytes to 64MB when using small block ciphers
  * Add a revoked cert to the sample keys
  2016.08.23 -- Version 2.3.12
  Arne Schwabe (2):
  * Complete push-peer-info documentation and allow IV_PLAT_VER for other platforms than Windows if the client UI supplies it.
  * Move ASSERT so external-key with OpenSSL works again
  David Sommerseth (3):
  * Only build and run cmocka unit tests if its submodule is initialized
  * Another fix related to unit test framework
  * Remove NOP function and callers
  Dorian Harmans (1):
  * Add CHACHA20-POLY1305 ciphersuite IANA name translations.
  Ivo Manca (1):
  * Plug memory leak in mbedTLS backend
  Jeffrey Cutter (1):
  * Update contrib/pull-resolv-conf/client.up for no DOMAIN
  Jens Neuhalfen (2):
  * Add unit testing support via cmocka
  * Add a test for auth-pam searchandreplace
  Josh Cepek (1):
  * Push an IPv6 CIDR mask used by the server, not the pool's size
  Leon Klingele (1):
  * Add link to bug tracker
  Samuli Seppänen (2):
  * Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes
  * Clarify the fact that build instructions in README are for release tarballs
  Selva Nair (4):
  * Make error non-fatal while deleting address using netsh
  * Make block-outside-dns work with persist-tun
  * Ignore SIGUSR1/SIGHUP during exit notification
  * Promptly close the netcmd_semaphore handle after use
  Steffan Karger (4):
  * Fix polarssl / mbedtls builds
  * Don't limit max incoming message size based on c2-&gt;frame
  * Fix '--cipher none --cipher' crash
  * Discourage using 64-bit block ciphers</changelog>
  <changelog author="mrueckert@suse.de" date="1485086400">- update to 2.3.14
  - update year in copyright message
  - Document the --auth-token option
  - Repair topology subnet on FreeBSD 11
  - Repair topology subnet on OpenBSD
  - Drop recursively routed packets
  - Support --block-outside-dns on multiple tunnels
  - When parsing '--setenv opt xx ..' make sure a third parameter
    is present
  - Map restart signals from event loop to SIGTERM during
    exit-notification wait
  - Correctly state the default dhcp server address in man page
  - Clean up format_hex_ex()
- enabled pkcs11 support</changelog>
  <changelog author="mrueckert@suse.de" date="1485086401">- refreshed patches to apply cleanly again
  openvpn-2.3-plugin-man.dif
  openvpn-fips140-2.3.2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1485086402">- silence warning about %{_rundir}/openvpn
  - for non systemd case: just package the %{_rundir}/openvpn in
    the package
  - for systemd case: call systemd-tmpfiles and own the dir as
    %ghost in the filelist</changelog>
  <changelog author="ndas@suse.de" date="1492776000">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]
- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
  <changelog author="ndas@suse.de" date="1496750400">- Update to 2.4.2
  - auth-token: Ensure tokens are always wiped on de-auth
  - Make --cipher/--auth none more explicit on the risks
  - Use SHA256 for the internal digest, instead of MD5
  - Deprecate --ns-cert-type
  - Deprecate --no-iv
  - Support --block-outside-dns on multiple tunnels
  - Limit --reneg-bytes to 64MB when using small block ciphers
  - Fix --tls-version-max in mbed TLS builds
  Details changelogs are avilable in
  https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
  [*0001-preform-deferred-authentication-in-the-background.patch
  * openvpn-2.3.x-fixed-multiple-low-severity-issues.patch
  * openvpn-fips140-2.3.2.patch]
- pkcs11-helper-devel &gt;= 1.11 is needed for openvpn-2.4.2
- cleanup the spec file</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- use %{_tmpfilesdir} for tmpfiles.d/openvpn.conf (bsc#1044223)</changelog>
  <changelog author="ndas@suse.de" date="1498219200">- Update to 2.4.3 (bsc#1045489)
  - Ignore auth-nocache for auth-user-pass if auth-token is pushed
  - crypto: Enable SHA256 fingerprint checking in --verify-hash
  - copyright: Update GPLv2 license texts
  - auth-token with auth-nocache fix broke --disable-crypto builds
  - OpenSSL: don't use direct access to the internal of X509
  - OpenSSL: don't use direct access to the internal of EVP_PKEY
  - OpenSSL: don't use direct access to the internal of RSA
  - OpenSSL: don't use direct access to the internal of DSA
  - OpenSSL: force meth-&gt;name as non-const when we free() it
  - OpenSSL: don't use direct access to the internal of EVP_MD_CTX
  - OpenSSL: don't use direct access to the internal of EVP_CIPHER_CTX
  - OpenSSL: don't use direct access to the internal of HMAC_CTX
  - Fix NCP behaviour on TLS reconnect.
  - Remove erroneous limitation on max number of args for --plugin
  - Fix edge case with clients failing to set up cipher on empty PUSH_REPLY.
  - Fix potential 1-byte overread in TCP option parsing.
  - Fix remotely-triggerable ASSERT() on malformed IPv6 packet.
  - Preparing for release v2.4.3 (ChangeLog, version.m4, Changes.rst)
  - refactor my_strupr
  - Fix 2 memory leaks in proxy authentication routine
  - Fix memory leak in add_option() for option 'connection'
  - Ensure option array p[] is always NULL-terminated
  - Fix a null-pointer dereference in establish_http_proxy_passthru()
  - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data
  - Fix an unaligned access on OpenBSD/sparc64
  - Missing include for socket-flags TCP_NODELAY on OpenBSD
  - Make openvpn-plugin.h self-contained again.
  - Pass correct buffer size to GetModuleFileNameW()
  - Log the negotiated (NCP) cipher
  - Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c)
  - Skip tls-crypt unit tests if required crypto mode not supported
  - openssl: fix overflow check for long --tls-cipher option
  - Add a DSA test key/cert pair to sample-keys
  - Fix mbedtls fingerprint calculation
  - mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522)
  - mbedtls: require C-string compatible types for --x509-username-field
  - Fix remote-triggerable memory leaks (CVE-2017-7521)
  - Restrict --x509-alt-username extension types
  - Fix potential double-free in --x509-alt-username (CVE-2017-7521)
  - Fix gateway detection with OpenBSD routing domains</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1502452800">- Do not package empty /usr/lib64/tmpfiles.d</changelog>
  <changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0002-Fix-bounds-check-in-read_key.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1525867200">- CVE-2018-9336, bsc#1090839: Fix potential double-free() in
  Interactive Service (openvpn-CVE-2018-9336.patch).</changelog>
</package>
<package pkgid="987f0d8b7c758a60fd494fc22304db33f3ddee9e3eabc262a2229328d0478c6a" name="openvpn-auth-pam-plugin" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
  <changelog author="mt@suse.com" date="1440072000">- Removed obsolete --with-lzo-headers option, readded LFS_CFLAGS.
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
  <changelog author="mt@suse.com" date="1449144000">- Adjust /var/run to _rundir macro value in openvpn@.service too.</changelog>
  <changelog author="idonmez@suse.com" date="1450267200">- Update to version 2.3.9
  * Show extra-certs in current parameters.
  * Do not set the buffer size by default but rely on the operation system default.
  * Remove --enable-password-save option
  * Detect config lines that are too long and give a warning/error
  * Log serial number of revoked certificate
  * Avoid partial authentication state when using --disabled in CCD configs
  * Replace unaligned 16bit access to TCP MSS value with bytewise access
  * Fix possible heap overflow on read accessing getaddrinfo() result.
  * Fix isatty() check for good. (obsoletes revert-daemonize.patch)
  * Client-side part for server restart notification
  * Fix privilege drop if first connection attempt fails
  * Support for username-only auth file.
  * Increase control channel packet size for faster handshakes
  * hardening: add insurance to exit on a failed ASSERT()
  * Fix memory leak in auth-pam plugin
  * Fix (potential) memory leak in init_route_list()
  * Fix unintialized variable in plugin_vlog()
  * Add macro to ensure we exit on fatal errors
  * Fix memory leak in add_option() by simplifying get_ipv6_addr
  * openssl: properly check return value of RAND_bytes()
  * Fix rand_bytes return value checking
  * Fix "White space before end tags can break the config parser"</changelog>
  <changelog author="idonmez@suse.com" date="1451908800">- Update to version 2.3.10
  * Warn user if their certificate has expired
  * Fix regression in setups without a client certificate</changelog>
  <changelog author="idonmez@suse.com" date="1462881600">- Update to version 2.3.11
  * Fixed port-share bug with DoS potential
  * Fix buffer overflow by user supplied data
  * Fix undefined signed shift overflow
  * Ensure input read using systemd-ask-password is null terminated
  * Support reading the challenge-response from console
  * hardening: add safe FD_SET() wrapper openvpn_fd_set()
  * Restrict default TLS cipher list
- Add BuildRequires on xz for SLE11</changelog>
  <changelog author="astieger@suse.com" date="1473336000">- Add an example for a FIPS 140-2 approved cipher configuration to
  the sample configuration files. Fixes bsc#988522
  adding openvpn-fips140-AES-cipher-in-config-template.patch
- remove gpg-offline signature verification, now a source service</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1480334400">- Require iproute2 explicitly. openvpn uses /bin/ip from iproute2,
  so it should be installed</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- update to 2.3.13
- removed obsolete patch files openvpn-2.3.0-man-dot.diff and
  openvpn-fips140-AES-cipher-in-config-template.patch
  2016.11.02 -- Version 2.3.13
  Arne Schwabe (2):
  * Use AES ciphers in our sample configuration files and add a few modern 2.4 examples
  * Incorporate the Debian typo fixes where appropriate and make show_opt default message clearer
  David Sommerseth (4):
  * t_client.sh: Make OpenVPN write PID file to avoid various sudo issues
  * t_client.sh: Add support for Kerberos/ksu
  * t_client.sh: Improve detection if the OpenVPN process did start during tests
  * t_client.sh: Add prepare/cleanup possibilties for each test case
  Gert Doering (5):
  * Do not abort t_client run if OpenVPN instance does not start.
  * Fix t_client runs on OpenSolaris
  * make t_client robust against sudoers misconfiguration
  * add POSTINIT_CMD_suf to t_client.sh and sample config
  * Fix --multihome for IPv6 on 64bit BSD systems.
  Ilya Shipitsin (1):
  * skip t_lpback.sh and t_cltsrv.sh if openvpn configured --disable-crypto
  Lev Stipakov (2):
  * Exclude peer-id from pulled options digest
  * Fix compilation in pedantic mode
  Samuli Seppänen (1):
  * Automatically cache expected IPs for t_client.sh on the first run
  Steffan Karger (6):
  * Fix unittests for out-of-source builds
  * Make gnu89 support explicit
  * cleanup: remove code duplication in msg_test()
  * Update cipher-related man page text
  * Limit --reneg-bytes to 64MB when using small block ciphers
  * Add a revoked cert to the sample keys
  2016.08.23 -- Version 2.3.12
  Arne Schwabe (2):
  * Complete push-peer-info documentation and allow IV_PLAT_VER for other platforms than Windows if the client UI supplies it.
  * Move ASSERT so external-key with OpenSSL works again
  David Sommerseth (3):
  * Only build and run cmocka unit tests if its submodule is initialized
  * Another fix related to unit test framework
  * Remove NOP function and callers
  Dorian Harmans (1):
  * Add CHACHA20-POLY1305 ciphersuite IANA name translations.
  Ivo Manca (1):
  * Plug memory leak in mbedTLS backend
  Jeffrey Cutter (1):
  * Update contrib/pull-resolv-conf/client.up for no DOMAIN
  Jens Neuhalfen (2):
  * Add unit testing support via cmocka
  * Add a test for auth-pam searchandreplace
  Josh Cepek (1):
  * Push an IPv6 CIDR mask used by the server, not the pool's size
  Leon Klingele (1):
  * Add link to bug tracker
  Samuli Seppänen (2):
  * Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes
  * Clarify the fact that build instructions in README are for release tarballs
  Selva Nair (4):
  * Make error non-fatal while deleting address using netsh
  * Make block-outside-dns work with persist-tun
  * Ignore SIGUSR1/SIGHUP during exit notification
  * Promptly close the netcmd_semaphore handle after use
  Steffan Karger (4):
  * Fix polarssl / mbedtls builds
  * Don't limit max incoming message size based on c2-&gt;frame
  * Fix '--cipher none --cipher' crash
  * Discourage using 64-bit block ciphers</changelog>
  <changelog author="mrueckert@suse.de" date="1485086400">- update to 2.3.14
  - update year in copyright message
  - Document the --auth-token option
  - Repair topology subnet on FreeBSD 11
  - Repair topology subnet on OpenBSD
  - Drop recursively routed packets
  - Support --block-outside-dns on multiple tunnels
  - When parsing '--setenv opt xx ..' make sure a third parameter
    is present
  - Map restart signals from event loop to SIGTERM during
    exit-notification wait
  - Correctly state the default dhcp server address in man page
  - Clean up format_hex_ex()
- enabled pkcs11 support</changelog>
  <changelog author="mrueckert@suse.de" date="1485086401">- refreshed patches to apply cleanly again
  openvpn-2.3-plugin-man.dif
  openvpn-fips140-2.3.2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1485086402">- silence warning about %{_rundir}/openvpn
  - for non systemd case: just package the %{_rundir}/openvpn in
    the package
  - for systemd case: call systemd-tmpfiles and own the dir as
    %ghost in the filelist</changelog>
  <changelog author="ndas@suse.de" date="1492776000">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]
- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
  <changelog author="ndas@suse.de" date="1496750400">- Update to 2.4.2
  - auth-token: Ensure tokens are always wiped on de-auth
  - Make --cipher/--auth none more explicit on the risks
  - Use SHA256 for the internal digest, instead of MD5
  - Deprecate --ns-cert-type
  - Deprecate --no-iv
  - Support --block-outside-dns on multiple tunnels
  - Limit --reneg-bytes to 64MB when using small block ciphers
  - Fix --tls-version-max in mbed TLS builds
  Details changelogs are avilable in
  https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
  [*0001-preform-deferred-authentication-in-the-background.patch
  * openvpn-2.3.x-fixed-multiple-low-severity-issues.patch
  * openvpn-fips140-2.3.2.patch]
- pkcs11-helper-devel &gt;= 1.11 is needed for openvpn-2.4.2
- cleanup the spec file</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- use %{_tmpfilesdir} for tmpfiles.d/openvpn.conf (bsc#1044223)</changelog>
  <changelog author="ndas@suse.de" date="1498219200">- Update to 2.4.3 (bsc#1045489)
  - Ignore auth-nocache for auth-user-pass if auth-token is pushed
  - crypto: Enable SHA256 fingerprint checking in --verify-hash
  - copyright: Update GPLv2 license texts
  - auth-token with auth-nocache fix broke --disable-crypto builds
  - OpenSSL: don't use direct access to the internal of X509
  - OpenSSL: don't use direct access to the internal of EVP_PKEY
  - OpenSSL: don't use direct access to the internal of RSA
  - OpenSSL: don't use direct access to the internal of DSA
  - OpenSSL: force meth-&gt;name as non-const when we free() it
  - OpenSSL: don't use direct access to the internal of EVP_MD_CTX
  - OpenSSL: don't use direct access to the internal of EVP_CIPHER_CTX
  - OpenSSL: don't use direct access to the internal of HMAC_CTX
  - Fix NCP behaviour on TLS reconnect.
  - Remove erroneous limitation on max number of args for --plugin
  - Fix edge case with clients failing to set up cipher on empty PUSH_REPLY.
  - Fix potential 1-byte overread in TCP option parsing.
  - Fix remotely-triggerable ASSERT() on malformed IPv6 packet.
  - Preparing for release v2.4.3 (ChangeLog, version.m4, Changes.rst)
  - refactor my_strupr
  - Fix 2 memory leaks in proxy authentication routine
  - Fix memory leak in add_option() for option 'connection'
  - Ensure option array p[] is always NULL-terminated
  - Fix a null-pointer dereference in establish_http_proxy_passthru()
  - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data
  - Fix an unaligned access on OpenBSD/sparc64
  - Missing include for socket-flags TCP_NODELAY on OpenBSD
  - Make openvpn-plugin.h self-contained again.
  - Pass correct buffer size to GetModuleFileNameW()
  - Log the negotiated (NCP) cipher
  - Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c)
  - Skip tls-crypt unit tests if required crypto mode not supported
  - openssl: fix overflow check for long --tls-cipher option
  - Add a DSA test key/cert pair to sample-keys
  - Fix mbedtls fingerprint calculation
  - mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522)
  - mbedtls: require C-string compatible types for --x509-username-field
  - Fix remote-triggerable memory leaks (CVE-2017-7521)
  - Restrict --x509-alt-username extension types
  - Fix potential double-free in --x509-alt-username (CVE-2017-7521)
  - Fix gateway detection with OpenBSD routing domains</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1502452800">- Do not package empty /usr/lib64/tmpfiles.d</changelog>
  <changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0002-Fix-bounds-check-in-read_key.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1525867200">- CVE-2018-9336, bsc#1090839: Fix potential double-free() in
  Interactive Service (openvpn-CVE-2018-9336.patch).</changelog>
</package>
<package pkgid="d987f679e7b93480ba66f77f5f3bbab4c935ccd45d60b6928c54536edbc7e34f" name="openvpn-devel" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
  <changelog author="mt@suse.com" date="1440072000">- Removed obsolete --with-lzo-headers option, readded LFS_CFLAGS.
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
  <changelog author="mt@suse.com" date="1449144000">- Adjust /var/run to _rundir macro value in openvpn@.service too.</changelog>
  <changelog author="idonmez@suse.com" date="1450267200">- Update to version 2.3.9
  * Show extra-certs in current parameters.
  * Do not set the buffer size by default but rely on the operation system default.
  * Remove --enable-password-save option
  * Detect config lines that are too long and give a warning/error
  * Log serial number of revoked certificate
  * Avoid partial authentication state when using --disabled in CCD configs
  * Replace unaligned 16bit access to TCP MSS value with bytewise access
  * Fix possible heap overflow on read accessing getaddrinfo() result.
  * Fix isatty() check for good. (obsoletes revert-daemonize.patch)
  * Client-side part for server restart notification
  * Fix privilege drop if first connection attempt fails
  * Support for username-only auth file.
  * Increase control channel packet size for faster handshakes
  * hardening: add insurance to exit on a failed ASSERT()
  * Fix memory leak in auth-pam plugin
  * Fix (potential) memory leak in init_route_list()
  * Fix unintialized variable in plugin_vlog()
  * Add macro to ensure we exit on fatal errors
  * Fix memory leak in add_option() by simplifying get_ipv6_addr
  * openssl: properly check return value of RAND_bytes()
  * Fix rand_bytes return value checking
  * Fix "White space before end tags can break the config parser"</changelog>
  <changelog author="idonmez@suse.com" date="1451908800">- Update to version 2.3.10
  * Warn user if their certificate has expired
  * Fix regression in setups without a client certificate</changelog>
  <changelog author="idonmez@suse.com" date="1462881600">- Update to version 2.3.11
  * Fixed port-share bug with DoS potential
  * Fix buffer overflow by user supplied data
  * Fix undefined signed shift overflow
  * Ensure input read using systemd-ask-password is null terminated
  * Support reading the challenge-response from console
  * hardening: add safe FD_SET() wrapper openvpn_fd_set()
  * Restrict default TLS cipher list
- Add BuildRequires on xz for SLE11</changelog>
  <changelog author="astieger@suse.com" date="1473336000">- Add an example for a FIPS 140-2 approved cipher configuration to
  the sample configuration files. Fixes bsc#988522
  adding openvpn-fips140-AES-cipher-in-config-template.patch
- remove gpg-offline signature verification, now a source service</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1480334400">- Require iproute2 explicitly. openvpn uses /bin/ip from iproute2,
  so it should be installed</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- update to 2.3.13
- removed obsolete patch files openvpn-2.3.0-man-dot.diff and
  openvpn-fips140-AES-cipher-in-config-template.patch
  2016.11.02 -- Version 2.3.13
  Arne Schwabe (2):
  * Use AES ciphers in our sample configuration files and add a few modern 2.4 examples
  * Incorporate the Debian typo fixes where appropriate and make show_opt default message clearer
  David Sommerseth (4):
  * t_client.sh: Make OpenVPN write PID file to avoid various sudo issues
  * t_client.sh: Add support for Kerberos/ksu
  * t_client.sh: Improve detection if the OpenVPN process did start during tests
  * t_client.sh: Add prepare/cleanup possibilties for each test case
  Gert Doering (5):
  * Do not abort t_client run if OpenVPN instance does not start.
  * Fix t_client runs on OpenSolaris
  * make t_client robust against sudoers misconfiguration
  * add POSTINIT_CMD_suf to t_client.sh and sample config
  * Fix --multihome for IPv6 on 64bit BSD systems.
  Ilya Shipitsin (1):
  * skip t_lpback.sh and t_cltsrv.sh if openvpn configured --disable-crypto
  Lev Stipakov (2):
  * Exclude peer-id from pulled options digest
  * Fix compilation in pedantic mode
  Samuli Seppänen (1):
  * Automatically cache expected IPs for t_client.sh on the first run
  Steffan Karger (6):
  * Fix unittests for out-of-source builds
  * Make gnu89 support explicit
  * cleanup: remove code duplication in msg_test()
  * Update cipher-related man page text
  * Limit --reneg-bytes to 64MB when using small block ciphers
  * Add a revoked cert to the sample keys
  2016.08.23 -- Version 2.3.12
  Arne Schwabe (2):
  * Complete push-peer-info documentation and allow IV_PLAT_VER for other platforms than Windows if the client UI supplies it.
  * Move ASSERT so external-key with OpenSSL works again
  David Sommerseth (3):
  * Only build and run cmocka unit tests if its submodule is initialized
  * Another fix related to unit test framework
  * Remove NOP function and callers
  Dorian Harmans (1):
  * Add CHACHA20-POLY1305 ciphersuite IANA name translations.
  Ivo Manca (1):
  * Plug memory leak in mbedTLS backend
  Jeffrey Cutter (1):
  * Update contrib/pull-resolv-conf/client.up for no DOMAIN
  Jens Neuhalfen (2):
  * Add unit testing support via cmocka
  * Add a test for auth-pam searchandreplace
  Josh Cepek (1):
  * Push an IPv6 CIDR mask used by the server, not the pool's size
  Leon Klingele (1):
  * Add link to bug tracker
  Samuli Seppänen (2):
  * Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes
  * Clarify the fact that build instructions in README are for release tarballs
  Selva Nair (4):
  * Make error non-fatal while deleting address using netsh
  * Make block-outside-dns work with persist-tun
  * Ignore SIGUSR1/SIGHUP during exit notification
  * Promptly close the netcmd_semaphore handle after use
  Steffan Karger (4):
  * Fix polarssl / mbedtls builds
  * Don't limit max incoming message size based on c2-&gt;frame
  * Fix '--cipher none --cipher' crash
  * Discourage using 64-bit block ciphers</changelog>
  <changelog author="mrueckert@suse.de" date="1485086400">- update to 2.3.14
  - update year in copyright message
  - Document the --auth-token option
  - Repair topology subnet on FreeBSD 11
  - Repair topology subnet on OpenBSD
  - Drop recursively routed packets
  - Support --block-outside-dns on multiple tunnels
  - When parsing '--setenv opt xx ..' make sure a third parameter
    is present
  - Map restart signals from event loop to SIGTERM during
    exit-notification wait
  - Correctly state the default dhcp server address in man page
  - Clean up format_hex_ex()
- enabled pkcs11 support</changelog>
  <changelog author="mrueckert@suse.de" date="1485086401">- refreshed patches to apply cleanly again
  openvpn-2.3-plugin-man.dif
  openvpn-fips140-2.3.2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1485086402">- silence warning about %{_rundir}/openvpn
  - for non systemd case: just package the %{_rundir}/openvpn in
    the package
  - for systemd case: call systemd-tmpfiles and own the dir as
    %ghost in the filelist</changelog>
  <changelog author="ndas@suse.de" date="1492776000">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]
- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
  <changelog author="ndas@suse.de" date="1496750400">- Update to 2.4.2
  - auth-token: Ensure tokens are always wiped on de-auth
  - Make --cipher/--auth none more explicit on the risks
  - Use SHA256 for the internal digest, instead of MD5
  - Deprecate --ns-cert-type
  - Deprecate --no-iv
  - Support --block-outside-dns on multiple tunnels
  - Limit --reneg-bytes to 64MB when using small block ciphers
  - Fix --tls-version-max in mbed TLS builds
  Details changelogs are avilable in
  https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
  [*0001-preform-deferred-authentication-in-the-background.patch
  * openvpn-2.3.x-fixed-multiple-low-severity-issues.patch
  * openvpn-fips140-2.3.2.patch]
- pkcs11-helper-devel &gt;= 1.11 is needed for openvpn-2.4.2
- cleanup the spec file</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- use %{_tmpfilesdir} for tmpfiles.d/openvpn.conf (bsc#1044223)</changelog>
  <changelog author="ndas@suse.de" date="1498219200">- Update to 2.4.3 (bsc#1045489)
  - Ignore auth-nocache for auth-user-pass if auth-token is pushed
  - crypto: Enable SHA256 fingerprint checking in --verify-hash
  - copyright: Update GPLv2 license texts
  - auth-token with auth-nocache fix broke --disable-crypto builds
  - OpenSSL: don't use direct access to the internal of X509
  - OpenSSL: don't use direct access to the internal of EVP_PKEY
  - OpenSSL: don't use direct access to the internal of RSA
  - OpenSSL: don't use direct access to the internal of DSA
  - OpenSSL: force meth-&gt;name as non-const when we free() it
  - OpenSSL: don't use direct access to the internal of EVP_MD_CTX
  - OpenSSL: don't use direct access to the internal of EVP_CIPHER_CTX
  - OpenSSL: don't use direct access to the internal of HMAC_CTX
  - Fix NCP behaviour on TLS reconnect.
  - Remove erroneous limitation on max number of args for --plugin
  - Fix edge case with clients failing to set up cipher on empty PUSH_REPLY.
  - Fix potential 1-byte overread in TCP option parsing.
  - Fix remotely-triggerable ASSERT() on malformed IPv6 packet.
  - Preparing for release v2.4.3 (ChangeLog, version.m4, Changes.rst)
  - refactor my_strupr
  - Fix 2 memory leaks in proxy authentication routine
  - Fix memory leak in add_option() for option 'connection'
  - Ensure option array p[] is always NULL-terminated
  - Fix a null-pointer dereference in establish_http_proxy_passthru()
  - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data
  - Fix an unaligned access on OpenBSD/sparc64
  - Missing include for socket-flags TCP_NODELAY on OpenBSD
  - Make openvpn-plugin.h self-contained again.
  - Pass correct buffer size to GetModuleFileNameW()
  - Log the negotiated (NCP) cipher
  - Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c)
  - Skip tls-crypt unit tests if required crypto mode not supported
  - openssl: fix overflow check for long --tls-cipher option
  - Add a DSA test key/cert pair to sample-keys
  - Fix mbedtls fingerprint calculation
  - mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522)
  - mbedtls: require C-string compatible types for --x509-username-field
  - Fix remote-triggerable memory leaks (CVE-2017-7521)
  - Restrict --x509-alt-username extension types
  - Fix potential double-free in --x509-alt-username (CVE-2017-7521)
  - Fix gateway detection with OpenBSD routing domains</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1502452800">- Do not package empty /usr/lib64/tmpfiles.d</changelog>
  <changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0002-Fix-bounds-check-in-read_key.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1525867200">- CVE-2018-9336, bsc#1090839: Fix potential double-free() in
  Interactive Service (openvpn-CVE-2018-9336.patch).</changelog>
</package>
<package pkgid="18f3b89afc95c24805bb3fddaa909729bf02ed8c8abef4a428bc5e5cdef1dae9" name="openvpn-down-root-plugin" arch="x86_64">
  <version epoch="0" ver="2.4.3" rel="lp150.3.3.1"/>
  <changelog author="idonmez@suse.com" date="1439467200">- Add revert-daemonize.patch, looks like under systemd the stdin
  and stdout are not TTYs by default. This reverts to previous
  behaviour fixing bsc#941569</changelog>
  <changelog author="mt@suse.com" date="1440072000">- Removed obsolete --with-lzo-headers option, readded LFS_CFLAGS.
- Moved openvpn-plugin.h into a devel package, removed .gitignore</changelog>
  <changelog author="mt@suse.com" date="1449144000">- Adjust /var/run to _rundir macro value in openvpn@.service too.</changelog>
  <changelog author="idonmez@suse.com" date="1450267200">- Update to version 2.3.9
  * Show extra-certs in current parameters.
  * Do not set the buffer size by default but rely on the operation system default.
  * Remove --enable-password-save option
  * Detect config lines that are too long and give a warning/error
  * Log serial number of revoked certificate
  * Avoid partial authentication state when using --disabled in CCD configs
  * Replace unaligned 16bit access to TCP MSS value with bytewise access
  * Fix possible heap overflow on read accessing getaddrinfo() result.
  * Fix isatty() check for good. (obsoletes revert-daemonize.patch)
  * Client-side part for server restart notification
  * Fix privilege drop if first connection attempt fails
  * Support for username-only auth file.
  * Increase control channel packet size for faster handshakes
  * hardening: add insurance to exit on a failed ASSERT()
  * Fix memory leak in auth-pam plugin
  * Fix (potential) memory leak in init_route_list()
  * Fix unintialized variable in plugin_vlog()
  * Add macro to ensure we exit on fatal errors
  * Fix memory leak in add_option() by simplifying get_ipv6_addr
  * openssl: properly check return value of RAND_bytes()
  * Fix rand_bytes return value checking
  * Fix "White space before end tags can break the config parser"</changelog>
  <changelog author="idonmez@suse.com" date="1451908800">- Update to version 2.3.10
  * Warn user if their certificate has expired
  * Fix regression in setups without a client certificate</changelog>
  <changelog author="idonmez@suse.com" date="1462881600">- Update to version 2.3.11
  * Fixed port-share bug with DoS potential
  * Fix buffer overflow by user supplied data
  * Fix undefined signed shift overflow
  * Ensure input read using systemd-ask-password is null terminated
  * Support reading the challenge-response from console
  * hardening: add safe FD_SET() wrapper openvpn_fd_set()
  * Restrict default TLS cipher list
- Add BuildRequires on xz for SLE11</changelog>
  <changelog author="astieger@suse.com" date="1473336000">- Add an example for a FIPS 140-2 approved cipher configuration to
  the sample configuration files. Fixes bsc#988522
  adding openvpn-fips140-AES-cipher-in-config-template.patch
- remove gpg-offline signature verification, now a source service</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1480334400">- Require iproute2 explicitly. openvpn uses /bin/ip from iproute2,
  so it should be installed</changelog>
  <changelog author="michael@stroeder.com" date="1480766400">- update to 2.3.13
- removed obsolete patch files openvpn-2.3.0-man-dot.diff and
  openvpn-fips140-AES-cipher-in-config-template.patch
  2016.11.02 -- Version 2.3.13
  Arne Schwabe (2):
  * Use AES ciphers in our sample configuration files and add a few modern 2.4 examples
  * Incorporate the Debian typo fixes where appropriate and make show_opt default message clearer
  David Sommerseth (4):
  * t_client.sh: Make OpenVPN write PID file to avoid various sudo issues
  * t_client.sh: Add support for Kerberos/ksu
  * t_client.sh: Improve detection if the OpenVPN process did start during tests
  * t_client.sh: Add prepare/cleanup possibilties for each test case
  Gert Doering (5):
  * Do not abort t_client run if OpenVPN instance does not start.
  * Fix t_client runs on OpenSolaris
  * make t_client robust against sudoers misconfiguration
  * add POSTINIT_CMD_suf to t_client.sh and sample config
  * Fix --multihome for IPv6 on 64bit BSD systems.
  Ilya Shipitsin (1):
  * skip t_lpback.sh and t_cltsrv.sh if openvpn configured --disable-crypto
  Lev Stipakov (2):
  * Exclude peer-id from pulled options digest
  * Fix compilation in pedantic mode
  Samuli Seppänen (1):
  * Automatically cache expected IPs for t_client.sh on the first run
  Steffan Karger (6):
  * Fix unittests for out-of-source builds
  * Make gnu89 support explicit
  * cleanup: remove code duplication in msg_test()
  * Update cipher-related man page text
  * Limit --reneg-bytes to 64MB when using small block ciphers
  * Add a revoked cert to the sample keys
  2016.08.23 -- Version 2.3.12
  Arne Schwabe (2):
  * Complete push-peer-info documentation and allow IV_PLAT_VER for other platforms than Windows if the client UI supplies it.
  * Move ASSERT so external-key with OpenSSL works again
  David Sommerseth (3):
  * Only build and run cmocka unit tests if its submodule is initialized
  * Another fix related to unit test framework
  * Remove NOP function and callers
  Dorian Harmans (1):
  * Add CHACHA20-POLY1305 ciphersuite IANA name translations.
  Ivo Manca (1):
  * Plug memory leak in mbedTLS backend
  Jeffrey Cutter (1):
  * Update contrib/pull-resolv-conf/client.up for no DOMAIN
  Jens Neuhalfen (2):
  * Add unit testing support via cmocka
  * Add a test for auth-pam searchandreplace
  Josh Cepek (1):
  * Push an IPv6 CIDR mask used by the server, not the pool's size
  Leon Klingele (1):
  * Add link to bug tracker
  Samuli Seppänen (2):
  * Update CONTRIBUTING.rst to allow GitHub PRs for code review purposes
  * Clarify the fact that build instructions in README are for release tarballs
  Selva Nair (4):
  * Make error non-fatal while deleting address using netsh
  * Make block-outside-dns work with persist-tun
  * Ignore SIGUSR1/SIGHUP during exit notification
  * Promptly close the netcmd_semaphore handle after use
  Steffan Karger (4):
  * Fix polarssl / mbedtls builds
  * Don't limit max incoming message size based on c2-&gt;frame
  * Fix '--cipher none --cipher' crash
  * Discourage using 64-bit block ciphers</changelog>
  <changelog author="mrueckert@suse.de" date="1485086400">- update to 2.3.14
  - update year in copyright message
  - Document the --auth-token option
  - Repair topology subnet on FreeBSD 11
  - Repair topology subnet on OpenBSD
  - Drop recursively routed packets
  - Support --block-outside-dns on multiple tunnels
  - When parsing '--setenv opt xx ..' make sure a third parameter
    is present
  - Map restart signals from event loop to SIGTERM during
    exit-notification wait
  - Correctly state the default dhcp server address in man page
  - Clean up format_hex_ex()
- enabled pkcs11 support</changelog>
  <changelog author="mrueckert@suse.de" date="1485086401">- refreshed patches to apply cleanly again
  openvpn-2.3-plugin-man.dif
  openvpn-fips140-2.3.2.patch</changelog>
  <changelog author="mrueckert@suse.de" date="1485086402">- silence warning about %{_rundir}/openvpn
  - for non systemd case: just package the %{_rundir}/openvpn in
    the package
  - for systemd case: call systemd-tmpfiles and own the dir as
    %ghost in the filelist</changelog>
  <changelog author="ndas@suse.de" date="1492776000">- Preform deferred authentication in the background to not
  cause main daemon processing delays when the underlying pam mechanism (e.g.
  ldap) needs longer to response (bsc#959511).
  [+ 0001-preform-deferred-authentication-in-the-background.patch]
- Added fix for possible heap overflow on read accessing getaddrinfo
  result (bsc#959714).
  [+openvpn-2.3.9-Fix-heap-overflow-on-getaddrinfo-result.patch]
- Added a patch to fix multiple low severity issues (bsc#934237).
  [+openvpn-2.3.x-fixed-multiple-low-severity-issues.patch]</changelog>
  <changelog author="ndas@suse.de" date="1496750400">- Update to 2.4.2
  - auth-token: Ensure tokens are always wiped on de-auth
  - Make --cipher/--auth none more explicit on the risks
  - Use SHA256 for the internal digest, instead of MD5
  - Deprecate --ns-cert-type
  - Deprecate --no-iv
  - Support --block-outside-dns on multiple tunnels
  - Limit --reneg-bytes to 64MB when using small block ciphers
  - Fix --tls-version-max in mbed TLS builds
  Details changelogs are avilable in
  https://community.openvpn.net/openvpn/wiki/ChangesInOpenvpn24
  [*0001-preform-deferred-authentication-in-the-background.patch
  * openvpn-2.3.x-fixed-multiple-low-severity-issues.patch
  * openvpn-fips140-2.3.2.patch]
- pkcs11-helper-devel &gt;= 1.11 is needed for openvpn-2.4.2
- cleanup the spec file</changelog>
  <changelog author="ndas@suse.de" date="1497441600">- use %{_tmpfilesdir} for tmpfiles.d/openvpn.conf (bsc#1044223)</changelog>
  <changelog author="ndas@suse.de" date="1498219200">- Update to 2.4.3 (bsc#1045489)
  - Ignore auth-nocache for auth-user-pass if auth-token is pushed
  - crypto: Enable SHA256 fingerprint checking in --verify-hash
  - copyright: Update GPLv2 license texts
  - auth-token with auth-nocache fix broke --disable-crypto builds
  - OpenSSL: don't use direct access to the internal of X509
  - OpenSSL: don't use direct access to the internal of EVP_PKEY
  - OpenSSL: don't use direct access to the internal of RSA
  - OpenSSL: don't use direct access to the internal of DSA
  - OpenSSL: force meth-&gt;name as non-const when we free() it
  - OpenSSL: don't use direct access to the internal of EVP_MD_CTX
  - OpenSSL: don't use direct access to the internal of EVP_CIPHER_CTX
  - OpenSSL: don't use direct access to the internal of HMAC_CTX
  - Fix NCP behaviour on TLS reconnect.
  - Remove erroneous limitation on max number of args for --plugin
  - Fix edge case with clients failing to set up cipher on empty PUSH_REPLY.
  - Fix potential 1-byte overread in TCP option parsing.
  - Fix remotely-triggerable ASSERT() on malformed IPv6 packet.
  - Preparing for release v2.4.3 (ChangeLog, version.m4, Changes.rst)
  - refactor my_strupr
  - Fix 2 memory leaks in proxy authentication routine
  - Fix memory leak in add_option() for option 'connection'
  - Ensure option array p[] is always NULL-terminated
  - Fix a null-pointer dereference in establish_http_proxy_passthru()
  - Prevent two kinds of stack buffer OOB reads and a crash for invalid input data
  - Fix an unaligned access on OpenBSD/sparc64
  - Missing include for socket-flags TCP_NODELAY on OpenBSD
  - Make openvpn-plugin.h self-contained again.
  - Pass correct buffer size to GetModuleFileNameW()
  - Log the negotiated (NCP) cipher
  - Avoid a 1 byte overcopy in x509_get_subject (ssl_verify_openssl.c)
  - Skip tls-crypt unit tests if required crypto mode not supported
  - openssl: fix overflow check for long --tls-cipher option
  - Add a DSA test key/cert pair to sample-keys
  - Fix mbedtls fingerprint calculation
  - mbedtls: fix --x509-track post-authentication remote DoS (CVE-2017-7522)
  - mbedtls: require C-string compatible types for --x509-username-field
  - Fix remote-triggerable memory leaks (CVE-2017-7521)
  - Restrict --x509-alt-username extension types
  - Fix potential double-free in --x509-alt-username (CVE-2017-7521)
  - Fix gateway detection with OpenBSD routing domains</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1502452800">- Do not package empty /usr/lib64/tmpfiles.d</changelog>
  <changelog author="ndas@suse.de" date="1507636800">- Do bound check in read_key before using values(CVE-2017-12166 bsc#1060877).
  [+ 0002-Fix-bounds-check-in-read_key.patch]</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="max@suse.com" date="1525867200">- CVE-2018-9336, bsc#1090839: Fix potential double-free() in
  Interactive Service (openvpn-CVE-2018-9336.patch).</changelog>
</package>
<package pkgid="8d2e1d7e4a26fa8249b91ea4fdb8c99083e23d5a14a66c649698862f017e5425" name="openvswitch" arch="src">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="52a6386aa1dbe1041e803e4ebe0a7464e445eefad94ae72543784c868b977abe" name="openvswitch" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="7328572fa8d257d60865192ba06d1b48e5c3f20ce17a50fbfe9e77ec1115d20a" name="openvswitch-devel" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="a0495d7cbd2c914ec1ae549b1cd0e0e1597061ba5765d4c177dbdd1820df1022" name="openvswitch-doc" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="ffb68dddd3947d07153d49c8bef13013153392debd25c998bfff8c6b641e3cb5" name="openvswitch-ovn-central" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="390472cb6faac2079333ea960a656485f8c9c59ed1489c4b91fd02e80b9ff3f0" name="openvswitch-ovn-common" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="56ed17387d95264389ed218c200f40e9c8702915fc22541fbb24844595a2262b" name="openvswitch-ovn-docker" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="883100d448d56cd485a830de0f4567c9aa55d489e7cdae1137069ce3e8283d1b" name="openvswitch-ovn-host" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="e51163f75c3186dec530b7692021ca02dc5b78004eb9be52a1f856b4e7e17aa1" name="openvswitch-ovn-vtep" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="9f8a7e5e6002dd8d002c1b4c842819a810b5c9b41afc2b10735654dc20a1b911" name="openvswitch-pki" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="bf23f39f935aa9a2e2489bcee9c42c33369b0d849a9a5a7ec6b3ae74d050f352" name="openvswitch-test" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="9b902e59d6b775ed13f992cefc73746bbf8d4073ad55070271d8fb60ddcb1905" name="openvswitch-vtep" arch="x86_64">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="176cb60a94ede3cbad9640d52764218ab0af3e259ba6ddfafbd1799fd513bd5e" name="osinfo-db" arch="noarch">
  <version epoch="0" ver="20180612" rel="lp150.2.3.1"/>
  <changelog author="carnold@suse.com" date="1480593600">- bsc#1012005 - [openqa virtualization] using the wrong bootloader
  tool to boot the sles-12-sp3 pv kernel on xen platform
  add-sle12sp3-support.patch
  add-opensuse-leap-42.3-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1480593601">- Update to database version 20161026
  osinfo-db-20161026.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1481025600">- bsc#1013983 - incomplete capabilities list of SLE and openSUSE
  distributions in libosinfo
  99f7e666-fix-opensuse-derives-from-information.patch
  470b7652-add-opensuse-device-information.patch
  3c621fd8-add-opensuse-date-information.patch
  e77abec7-add-opensuse-resource-information.patch
  67c74e5f-add-opensuse-leap-42.2-support.patch
  f0d44d88-add-missing-sle10-distros.patch
  9a35cea7-fix-sle-derives-from-information.patch
  50091807-add-sle-device-information.patch
  9dec2be8-add-sle-date-information.patch
  1a7ce161-add-sle-resource-information.patch
  99ae3d72-add-sle12sp2-support.patch
- Dropped or renamed
  Fix_derives-from_and_add_tablet_item.patch
  add-opensuse-leap-42.2-support.patch
  add-sle12sp2-support.patch
  add-sle12sp2-support-for-arch.patch
  add-missing-sle10-distros.patch</changelog>
  <changelog author="carnold@suse.com" date="1484308800">- bsc#1010060 - virt-install won't start CASP installation
  add-casp-support.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485518400">- Use more appropriate RPM group
- Avoid overwriting sources during build</changelog>
  <changelog author="carnold@suse.com" date="1488542400">- fate#322156 - Virtualization: Supported Virtualizated Guests
  add-win2k16-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1490788800">- bsc#1030538 - osinf-db: casp-1.xml should be called casp-1.0.xml
  add-casp-support.patch
- fate#322156 - Update to version 20170326
  osinfo-db-20170326.tar.xz
- Dropped patches now in new tarball
  99f7e666-fix-opensuse-derives-from-information.patch
  470b7652-add-opensuse-device-information.patch
  3c621fd8-add-opensuse-date-information.patch
  e77abec7-add-opensuse-resource-information.patch
  67c74e5f-add-opensuse-leap-42.2-support.patch
  f0d44d88-add-missing-sle10-distros.patch
  9a35cea7-fix-sle-derives-from-information.patch
  50091807-add-sle-device-information.patch
  9dec2be8-add-sle-date-information.patch
  1a7ce161-add-sle-resource-information.patch
  99ae3d72-add-sle12sp2-support.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491825600">- casp is actually written CaasP.
  Rename patch add-casp-support.patch into add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1497355200">- fate#322156 - Update database to version 20170423
  osinfo-db-20170423.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1502712000">- fate#322156 - Update database to version 20170813
  osinfo-db-20170813.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1502884800">- Add support for openSUSE Leap 15 and SLE15 (bsc#1054986)
  add-opensuse-leap-15-support.patch
  add-sle15-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1504008000">- bsc#1056028 - Not able to install OES2018 as guest on Xen
  add-oes-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1504872000">- bsc#1057733 - libosinfo db entry for caasp wrong
  add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1513684800">- Fix version string for leap 15 (bsc#1054986)
  add-opensuse-leap-15-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1521028800">- fate#322156 - Update database to version 20180311
  osinfo-db-20180311.tar.xz
- Drop
  add-opensuse-leap-42.3-support.patch
  add-sle12sp3-support.patch
  add-win2k16-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1521460800">- bsc#1085757 - Leap 15 patch for osinfo-db has wrong information
  in it
  add-opensuse-leap-15-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1521806400">- bsc#1086715 - SLE15 patch for osinfo-db has wrong information
  in it
  add-sle15-support.patch</changelog>
  <changelog author="lyan@suse.com" date="1522843200">- bsc#974580 - modify volume id for some windows iso files
  First, use "X64FREE?" instead of "X64FRE".
  Second, add "IR1_SSS_X64FREV_EN-US_DV5".
  modify-volume-id-for-windows.patch</changelog>
  <changelog author="fabiano@fidencio.org" date="1523880000">- fate#322156 - Update database to version 20180416
  osinfo-db-20180416.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1529409600">- bsc#1098054 - osinfo-query and virt-install do not detect
  caasp3.0
  add-caasp-support.patch
- Update database to version 20180612
  osinfo-db-20180612.tar.xz
- Drop add-opensuse-leap-15-support.patch</changelog>
</package>
<package pkgid="1e41fb35cbb1e45c388c9442f67d588314f72cfa8a940cf6e8a6038fe39d3489" name="osinfo-db" arch="src">
  <version epoch="0" ver="20180612" rel="lp150.2.3.1"/>
  <changelog author="carnold@suse.com" date="1480593600">- bsc#1012005 - [openqa virtualization] using the wrong bootloader
  tool to boot the sles-12-sp3 pv kernel on xen platform
  add-sle12sp3-support.patch
  add-opensuse-leap-42.3-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1480593601">- Update to database version 20161026
  osinfo-db-20161026.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1481025600">- bsc#1013983 - incomplete capabilities list of SLE and openSUSE
  distributions in libosinfo
  99f7e666-fix-opensuse-derives-from-information.patch
  470b7652-add-opensuse-device-information.patch
  3c621fd8-add-opensuse-date-information.patch
  e77abec7-add-opensuse-resource-information.patch
  67c74e5f-add-opensuse-leap-42.2-support.patch
  f0d44d88-add-missing-sle10-distros.patch
  9a35cea7-fix-sle-derives-from-information.patch
  50091807-add-sle-device-information.patch
  9dec2be8-add-sle-date-information.patch
  1a7ce161-add-sle-resource-information.patch
  99ae3d72-add-sle12sp2-support.patch
- Dropped or renamed
  Fix_derives-from_and_add_tablet_item.patch
  add-opensuse-leap-42.2-support.patch
  add-sle12sp2-support.patch
  add-sle12sp2-support-for-arch.patch
  add-missing-sle10-distros.patch</changelog>
  <changelog author="carnold@suse.com" date="1484308800">- bsc#1010060 - virt-install won't start CASP installation
  add-casp-support.patch</changelog>
  <changelog author="jengelh@inai.de" date="1485518400">- Use more appropriate RPM group
- Avoid overwriting sources during build</changelog>
  <changelog author="carnold@suse.com" date="1488542400">- fate#322156 - Virtualization: Supported Virtualizated Guests
  add-win2k16-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1490788800">- bsc#1030538 - osinf-db: casp-1.xml should be called casp-1.0.xml
  add-casp-support.patch
- fate#322156 - Update to version 20170326
  osinfo-db-20170326.tar.xz
- Dropped patches now in new tarball
  99f7e666-fix-opensuse-derives-from-information.patch
  470b7652-add-opensuse-device-information.patch
  3c621fd8-add-opensuse-date-information.patch
  e77abec7-add-opensuse-resource-information.patch
  67c74e5f-add-opensuse-leap-42.2-support.patch
  f0d44d88-add-missing-sle10-distros.patch
  9a35cea7-fix-sle-derives-from-information.patch
  50091807-add-sle-device-information.patch
  9dec2be8-add-sle-date-information.patch
  1a7ce161-add-sle-resource-information.patch
  99ae3d72-add-sle12sp2-support.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1491825600">- casp is actually written CaasP.
  Rename patch add-casp-support.patch into add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1497355200">- fate#322156 - Update database to version 20170423
  osinfo-db-20170423.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1502712000">- fate#322156 - Update database to version 20170813
  osinfo-db-20170813.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1502884800">- Add support for openSUSE Leap 15 and SLE15 (bsc#1054986)
  add-opensuse-leap-15-support.patch
  add-sle15-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1504008000">- bsc#1056028 - Not able to install OES2018 as guest on Xen
  add-oes-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1504872000">- bsc#1057733 - libosinfo db entry for caasp wrong
  add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1513684800">- Fix version string for leap 15 (bsc#1054986)
  add-opensuse-leap-15-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1521028800">- fate#322156 - Update database to version 20180311
  osinfo-db-20180311.tar.xz
- Drop
  add-opensuse-leap-42.3-support.patch
  add-sle12sp3-support.patch
  add-win2k16-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1521460800">- bsc#1085757 - Leap 15 patch for osinfo-db has wrong information
  in it
  add-opensuse-leap-15-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1521806400">- bsc#1086715 - SLE15 patch for osinfo-db has wrong information
  in it
  add-sle15-support.patch</changelog>
  <changelog author="lyan@suse.com" date="1522843200">- bsc#974580 - modify volume id for some windows iso files
  First, use "X64FREE?" instead of "X64FRE".
  Second, add "IR1_SSS_X64FREV_EN-US_DV5".
  modify-volume-id-for-windows.patch</changelog>
  <changelog author="fabiano@fidencio.org" date="1523880000">- fate#322156 - Update database to version 20180416
  osinfo-db-20180416.tar.xz</changelog>
  <changelog author="carnold@suse.com" date="1529409600">- bsc#1098054 - osinfo-query and virt-install do not detect
  caasp3.0
  add-caasp-support.patch
- Update database to version 20180612
  osinfo-db-20180612.tar.xz
- Drop add-opensuse-leap-15-support.patch</changelog>
</package>
<package pkgid="d9040fecc941930fe23a084dd1e40205f8f02ed56581e6750386c15b2a2e07f1" name="ovmf" arch="src">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.3.1"/>
  <changelog author="glin@suse.com" date="1469620800">- Update openssl to 1.0.2h (bsc#990612)
  + Add the patch: ovmf-bsc990612-update-openssl-1.0.2h.patch
  + Update the openssl tarball
- Add ovmf-bsc990773-remove-stale-boot-options.patch to remove the
  stale boot options (bsc#990773)</changelog>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
</package>
<package pkgid="7a253a90fa6d2624e90d4bbdadb002b3cdea52d4968a5f8415850926ed873009" name="ovmf" arch="x86_64">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.3.1"/>
  <changelog author="glin@suse.com" date="1469620800">- Update openssl to 1.0.2h (bsc#990612)
  + Add the patch: ovmf-bsc990612-update-openssl-1.0.2h.patch
  + Update the openssl tarball
- Add ovmf-bsc990773-remove-stale-boot-options.patch to remove the
  stale boot options (bsc#990773)</changelog>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
</package>
<package pkgid="75700ca13deb213014a3cb62e2d1a427dca1c6f5c9f32eb189fd2c30d4c96c3f" name="ovmf" arch="src">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.6.1"/>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
  <changelog author="glin@suse.com" date="1531224000">- Add ovmf-bsc1099193-fix-sev-flash-variables.patch to fix the
  missing EFI variables when SEV is set (bsc#1099193)</changelog>
</package>
<package pkgid="d6cab94d48ad790d37a0a0e5d59233c3ac89084772ff32ce30021e7794689946" name="ovmf" arch="x86_64">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.6.1"/>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
  <changelog author="glin@suse.com" date="1531224000">- Add ovmf-bsc1099193-fix-sev-flash-variables.patch to fix the
  missing EFI variables when SEV is set (bsc#1099193)</changelog>
</package>
<package pkgid="62b1fba16f123f7b1c4faa4d61202cd6c17817e86eca087f585f86cf628ca1cc" name="ovmf-tools" arch="x86_64">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.3.1"/>
  <changelog author="glin@suse.com" date="1469620800">- Update openssl to 1.0.2h (bsc#990612)
  + Add the patch: ovmf-bsc990612-update-openssl-1.0.2h.patch
  + Update the openssl tarball
- Add ovmf-bsc990773-remove-stale-boot-options.patch to remove the
  stale boot options (bsc#990773)</changelog>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
</package>
<package pkgid="8e951f3fd43a295ae5eeb24a29e9e9ebbe4b4547ea5bfd68e263dcbc76217f61" name="ovmf-tools" arch="x86_64">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.6.1"/>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
  <changelog author="glin@suse.com" date="1531224000">- Add ovmf-bsc1099193-fix-sev-flash-variables.patch to fix the
  missing EFI variables when SEV is set (bsc#1099193)</changelog>
</package>
<package pkgid="113c5949a5bef9eed8567e307bc64259cbfa30082f444a45d38878805732a009" name="owncloud-client" arch="src">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="44ac73fd9abfee1b908ceae390125978deaf9bd256e1b5d7e834bae26ec480eb" name="owncloud-client" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="e434335ca6c567b90b2b4b7f64a8b2388e9c429b2a11d62b6413740555f631fc" name="owncloud-client-caja" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="929903a62889e6f818ebf4707456f9a608803e63a8f627720f74dbb0e512c9e6" name="owncloud-client-doc" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="6acdabb74305c76d92d146f5559f44daf1ad98f57e58d91ac8114f7f389ed7bc" name="owncloud-client-dolphin" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="8f0adeff1b6131c40db96f2fddcf29c0498ab2b08f6fde9cdb356576446d973e" name="owncloud-client-l10n" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="927d112059d9c22662da7dbb6aaabae8274a751953eb900e5ce9da64e0c4b97d" name="owncloud-client-nautilus" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="090d366cecbcae8331deac49e7889b482f742b54d1ed77a806760fea92e29c47" name="owncloud-client-nemo" arch="x86_64">
  <version epoch="0" ver="2.4.2" rel="lp150.2.4.1"/>
  <changelog author="badshah400@gmail.com" date="1493380800">- Use full URL for source code.
- Run post-install/uninstall scriptlets for %{name} to update the
  hicolor icon theme cache, as it installs icons to that theme.
  This fixes an issue where a generic icon instead of the app icon
  showed up in the desktop menus after installation; necessitates
  a BuildRequires on the hicolor-icon-theme, which provides the
  appropriate macros.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493380801">- update to version 2.3.2 rc1
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (3936)</changelog>
  <changelog author="klaas.freitag@suse.com" date="1493812800">- Use desktop database update script in postinstall and uninstall</changelog>
  <changelog author="klaas.freitag@suse.com" date="1494417600">- version 2.3.2 (2017-05-08)
  * Fix more crashes (thanks to everyone submitting to our crash reporter!)
  * Improve compatibility with server 10.0 (#5691, X-OC-Total-Size)
  * Share dialog: UI improvements, Bring to front on tray click
  * owncloudcmd: Align process return value with sync return value (#3936)
  * Fix disk free check on Windows when opening the local DB</changelog>
  <changelog author="klaas.freitag@suse.com" date="1497355200">- Fix: Build the dolphin overlays also for Tumbleweed.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1504526400">- Update to upstream version 2.3.3
  * Chunking NG: Don't use old chunking on new DAV endpoint (5855)
  * Selective Sync: Skip excluded folders when reading DB, don't let them show errors (5772)
  * Settings: Make window bigger so Qt version is always visible (5760)
  * Share links: Show warning that public link shares are public (5786)
  * Downloads: Re-trigger folder discovery on HTTP 404 (5799)
  * Notifications: Propagate "Dismiss" as DELETE to server (5922)
  * Overlay Icons: Fix potential hangs on Windows
  * SyncJournalDB: Don't use ._ as filename pattern if that does not work because of SMB storage settings (5844)
  * SyncJournalDB: Log reason for sqlite3 opening errors
  * Windows: Fix a memory leak in FileSystem::longWinPath
  * Switch Linux builds also to Qt 5.6.2 (5470)
  * Stopped maintaining Qt 4 support
  * Linux packaging fixes: install the owncloud-client-nemo, owncloud-client-nautilus, owncloud-client-caja, owncloud-client-dolphin package for sync-state icons and a share-with menu in your file manager.
  * Linux deprecation: Releases after 2.3.3 do not support Fedora 24 or lower, openSUSE Leap 42.1 or lower, Debian 7.0 or lower.
  * 2.4.0 deprecation: We will drop 32-bit Linux support and MacOS X 10.9 support or lower.
  * Supported platforms are documented at Desktop System Requirements.</changelog>
  <changelog author="freitag@suse.com" date="1504699200">- Added updstream patch force_qdbus_tray_workaround.patch to fix a
  problem with the Qt lib on Leap 42.2 only</changelog>
  <changelog author="freitag@opensuse.org" date="1504872000">- Reworked the source tarball coming from upstream and removed not
  needed stuff as well as questionable licensed files.
  See https://github.com/owncloud/client/issues/6005 for details
  and README.source which was added and explains that.</changelog>
  <changelog author="freitag@opensuse.org" date="1505217600">- Install README.source to doc. Make pack checker in Factory happy.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1508587200">- Do not install README.source file as requested in sr</changelog>
  <changelog author="freitag@owncloud.com" date="1514203200">- Update to version 2.4.0 with lots of fixes and additions.
  Detailed changelog:
  https://raw.githubusercontent.com/owncloud/client/master/ChangeLog
- Drop force_qdbus_tray_workaround.patch: Problem fixed upstream.</changelog>
  <changelog author="freitag@owncloud.com" date="1514376000">- Feedback from review:
  * Use %{buildroot} instead of ${RPM_BUILD_ROOT}
  * Leave license- and few other readme files with the main package</changelog>
  <changelog author="freitag@owncloud.com" date="1514462400">- Added rpath.diff: Fix the rpath to the private libs of owncloud
  Fixed documentation file list issue</changelog>
  <changelog author="freitag@owncloud.com" date="1514548800">- Fixed documentation installation by avoiding the %doc macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808000">- Bring back the doc macro to mark the documentation files.
  Fix building by utilizing the exclude macro.</changelog>
  <changelog author="freitag@owncloud.com" date="1514808001">- Removed superflous patch force_qdbus_tray_workaround.patch</changelog>
  <changelog author="klaas.freitag@suse.com" date="1519819200">- Add explicit BuildRequires on Qt5Sql to fix TW build.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1520337600">- Update to upstream version 2.4.1
  * Enhanced Nautilus integration.
  * Cleaner User Experience and overall improvements to
    notifications and the synchronization of files.
  * Better implementation and integration of Client Filesystems.
  * Improved Sharing dialogue
  * and a lot more...
  Changelog: https://github.com/owncloud/client/releases</changelog>
  <changelog author="freitag@owncloud.com" date="1521201600">- Updated changelog for upstream release.</changelog>
  <changelog author="klaas.freitag@suse.com" date="1532692800">- Update to upstream version 2.4.2 (see boo#1057832)
  * Coming with some bugfixes, Changelog:
    https://owncloud.org/changelog/desktop-client/
- Added patch fix-systray-menu-pos.patch to fix a problem with
  older Qt versions. Applies only to versions Leap 15 and older,
  fixes https://github.com/owncloud/client/issues/5968</changelog>
</package>
<package pkgid="565956ab18c9aaa579c318948acf8a73b3fc723dcad1b2d5d069bdb86a6cc802" name="pam_kwallet-32bit" arch="x86_64">
  <version epoch="0" ver="5.12.5" rel="lp150.4.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502280000">- Add various patches (pending upstream review) to fix several
  issues:
  * 0001-Several-cleanups.patch
  * 0002-Avoid-dropping-privileges-by-initializing-gcrypt-sec.patch
  * 0003-Check-for-a-graphical-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None
- Enable pam-config integration on TW</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Besides %postun, %post also uses pam-config and should specify
  this as requires.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Avoid dropping privileges by initializing gcrypt secmem
  * Check for a graphical session
  * Several cleanups
  * Handle differences in PAM headers
- Remove patches, now upstream:
  * 0001-Several-cleanups.patch
  * 0002-Avoid-dropping-privileges-by-initializing-gcrypt-sec.patch
  * 0003-Check-for-a-graphical-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525348800">- Add patches to fix boo#1090863/CVE-2018-10380:
  * 0001-Move-salt-creation-to-an-unprivileged-process.patch
  * 0002-Move-socket-creation-to-unprivileged-codepath.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525521600">- Add patch to address regression introduced by previous fixes:
  * 0001-Avoid-giving-an-stderr-to-kwallet.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530187200">- Add patches to move access to the salt file entirely into
  unprivileged processes (boo#1099421):
  * 0001-Don-t-create-salt-file-if-user-home-directory-does-n.patch
  * 0002-Ensure-the-salt-file-is-indeed-a-regular-file.patch
  * 0003-Drop-privileges-when-reading-the-salt-file.patch
  * 0004-Move-remaining-salt-file-operations-into-unprivilege.patch</changelog>
</package>
<package pkgid="509c213294ccac32b1997aeea3de0646a5c30c3fe133c8f4aa5fe88cb43d6b8f" name="pam_kwallet" arch="src">
  <version epoch="0" ver="5.12.5" rel="lp150.4.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502280000">- Add various patches (pending upstream review) to fix several
  issues:
  * 0001-Several-cleanups.patch
  * 0002-Avoid-dropping-privileges-by-initializing-gcrypt-sec.patch
  * 0003-Check-for-a-graphical-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None
- Enable pam-config integration on TW</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Besides %postun, %post also uses pam-config and should specify
  this as requires.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Avoid dropping privileges by initializing gcrypt secmem
  * Check for a graphical session
  * Several cleanups
  * Handle differences in PAM headers
- Remove patches, now upstream:
  * 0001-Several-cleanups.patch
  * 0002-Avoid-dropping-privileges-by-initializing-gcrypt-sec.patch
  * 0003-Check-for-a-graphical-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525348800">- Add patches to fix boo#1090863/CVE-2018-10380:
  * 0001-Move-salt-creation-to-an-unprivileged-process.patch
  * 0002-Move-socket-creation-to-unprivileged-codepath.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525521600">- Add patch to address regression introduced by previous fixes:
  * 0001-Avoid-giving-an-stderr-to-kwallet.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530187200">- Add patches to move access to the salt file entirely into
  unprivileged processes (boo#1099421):
  * 0001-Don-t-create-salt-file-if-user-home-directory-does-n.patch
  * 0002-Ensure-the-salt-file-is-indeed-a-regular-file.patch
  * 0003-Drop-privileges-when-reading-the-salt-file.patch
  * 0004-Move-remaining-salt-file-operations-into-unprivilege.patch</changelog>
</package>
<package pkgid="a49aea10cbb74c8a9f1167df5d3fbbb53159acebe57d33718787e64df13fefd0" name="pam_kwallet" arch="x86_64">
  <version epoch="0" ver="5.12.5" rel="lp150.4.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502280000">- Add various patches (pending upstream review) to fix several
  issues:
  * 0001-Several-cleanups.patch
  * 0002-Avoid-dropping-privileges-by-initializing-gcrypt-sec.patch
  * 0003-Check-for-a-graphical-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None
- Enable pam-config integration on TW</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Besides %postun, %post also uses pam-config and should specify
  this as requires.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Avoid dropping privileges by initializing gcrypt secmem
  * Check for a graphical session
  * Several cleanups
  * Handle differences in PAM headers
- Remove patches, now upstream:
  * 0001-Several-cleanups.patch
  * 0002-Avoid-dropping-privileges-by-initializing-gcrypt-sec.patch
  * 0003-Check-for-a-graphical-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525348800">- Add patches to fix boo#1090863/CVE-2018-10380:
  * 0001-Move-salt-creation-to-an-unprivileged-process.patch
  * 0002-Move-socket-creation-to-unprivileged-codepath.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525521600">- Add patch to address regression introduced by previous fixes:
  * 0001-Avoid-giving-an-stderr-to-kwallet.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530187200">- Add patches to move access to the salt file entirely into
  unprivileged processes (boo#1099421):
  * 0001-Don-t-create-salt-file-if-user-home-directory-does-n.patch
  * 0002-Ensure-the-salt-file-is-indeed-a-regular-file.patch
  * 0003-Drop-privileges-when-reading-the-salt-file.patch
  * 0004-Move-remaining-salt-file-operations-into-unprivilege.patch</changelog>
</package>
<package pkgid="a80e1fe7a342fac93068b06ac6be5ed1df3e4b108c375e51add0ff322edc023c" name="pam_kwallet-common" arch="x86_64">
  <version epoch="0" ver="5.12.5" rel="lp150.4.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1502280000">- Add various patches (pending upstream review) to fix several
  issues:
  * 0001-Several-cleanups.patch
  * 0002-Avoid-dropping-privileges-by-initializing-gcrypt-sec.patch
  * 0003-Check-for-a-graphical-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None
- Enable pam-config integration on TW</changelog>
  <changelog author="jengelh@inai.de" date="1503662400">- Besides %postun, %post also uses pam-config and should specify
  this as requires.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Avoid dropping privileges by initializing gcrypt secmem
  * Check for a graphical session
  * Several cleanups
  * Handle differences in PAM headers
- Remove patches, now upstream:
  * 0001-Several-cleanups.patch
  * 0002-Avoid-dropping-privileges-by-initializing-gcrypt-sec.patch
  * 0003-Check-for-a-graphical-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Remove obsolete reviewboardrc file</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525348800">- Add patches to fix boo#1090863/CVE-2018-10380:
  * 0001-Move-salt-creation-to-an-unprivileged-process.patch
  * 0002-Move-socket-creation-to-unprivileged-codepath.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525521600">- Add patch to address regression introduced by previous fixes:
  * 0001-Avoid-giving-an-stderr-to-kwallet.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530187200">- Add patches to move access to the salt file entirely into
  unprivileged processes (boo#1099421):
  * 0001-Don-t-create-salt-file-if-user-home-directory-does-n.patch
  * 0002-Ensure-the-salt-file-is-indeed-a-regular-file.patch
  * 0003-Drop-privileges-when-reading-the-salt-file.patch
  * 0004-Move-remaining-salt-file-operations-into-unprivilege.patch</changelog>
</package>
<package pkgid="1834da28f000f85d0865548a870833976b208fb3aadb3e9685f295f8f7fe0800" name="pam_ldap" arch="src">
  <version epoch="0" ver="186" rel="lp150.2.1"/>
  <changelog author="rhafer@suse.de" date="1195214400">- Cleaned up BuildRequires</changelog>
  <changelog author="rhafer@suse.de" date="1197374400">- Updating expired passwords in master-slave enviroments that use
  referrals did not work correctly. (Bug #340989)</changelog>
  <changelog author="ro@suse.de" date="1207828800">- added baselibs.conf file to build xxbit packages
  for multilib support</changelog>
  <changelog author="rhafer@suse.de" date="1210248000">- Fixed chasing of referrals and search references that are
  received during the initial (unauthenticated) search.
  (Bug#387607)</changelog>
  <changelog author="rhafer@suse.de" date="1219924800">- improve Password expiration warnings
- inform user about grace logins (bnc#420051)</changelog>
  <changelog author="rhafer@suse.de" date="1225195200">- fixed check for message buffer in ldap_get_lderrno and return
  PAM_AUTHTOK_ERR instead of PAM_PERM_DENIED when password changing
  fails. (bnc#439436)</changelog>
  <changelog author="olh@suse.de" date="1228392000">- obsolete old -XXbit packages (bnc#437293)</changelog>
  <changelog author="olh@suse.de" date="1228910400">- use Obsoletes: -XXbit only for ppc64 to help solver during distupgrade
  (bnc#437293)</changelog>
  <changelog author="rhafer@suse.de" date="1229083200">- Set PAM_USER to the value of the "pam_login_attribute"-Attribute
  after successful authentication, as the matching rule for that
  Attribute-Type might strip of whitespaces and is case-insensitive
  (bnc#458673)</changelog>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="rhafer@novell.com" date="1260878400">- Update to pam-ldap-185:
  * fix for BUG#232: LDAP write on userPassword fails
    when chasing referral and cached policy error is
    POLICY_ERROR_PASSWORD_EXPIRED
  * fix for BUG#366: only request attributes that are
    actually used
  * fix for BUG#394: canonicalize PAM_USER name
- obsoletes: pam_ldap-ppolicy-referral-fix.dif and
  pam_ldap-set_pam_user.dif</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1323259200">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="rhafer@suse.de" date="1331121600">- Remove %suse_update_libdir and %suse_update_config calls to
  unbreak built</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1335441600">- created patch pam_ldap-arm-linux-gnueabi.patch to build the
  arm binaries correctly
- Update to pam-ldap-186:
  * fix for BUG#424: build fails on Darwin</changelog>
  <changelog author="ckornacker@suse.com" date="1406635200">- rename README.SuSE to README.SUSE (bnc#889012)</changelog>
  <changelog author="dimstar@opensuse.org" date="1415016000">- Call autoreconf -fiv in place of autoreconf: ensure that
  autoreconf is successful in newer versions too.</changelog>
  <changelog author="hguo@suse.com" date="1488369600">- Patch up incorrect default value that appears in both configuration
  file and manual page for parameter "bind_timeout".
  0004-fix-bind-timelimit-description.patch (bsc#918534)</changelog>
  <changelog author="varkoly@suse.com" date="1521633600">- bsc#1081768 missing nss_ldap and pam_ldap packages (plus dependencies)</changelog>
</package>
<package pkgid="68525b5ead92b968ae2aac6b1e81ead5420e4d37da6ab58df27207519850ee59" name="pam_ldap" arch="x86_64">
  <version epoch="0" ver="186" rel="lp150.2.1"/>
  <changelog author="sbrabec@suse.cz" date="1245844800">- Supplement pam-32bit/pam-64bit in baselibs.conf (bnc#354164).</changelog>
  <changelog author="rhafer@novell.com" date="1260878400">- Update to pam-ldap-185:
  * fix for BUG#232: LDAP write on userPassword fails
    when chasing referral and cached policy error is
    POLICY_ERROR_PASSWORD_EXPIRED
  * fix for BUG#366: only request attributes that are
    actually used
  * fix for BUG#394: canonicalize PAM_USER name
- obsoletes: pam_ldap-ppolicy-referral-fix.dif and
  pam_ldap-set_pam_user.dif</changelog>
  <changelog author="jengelh@medozas.de" date="1265025600">- Package baselibs.conf</changelog>
  <changelog author="coolo@suse.com" date="1322827200">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jengelh@medozas.de" date="1323259200">- Remove redundant/unwanted tags/section (cf. specfile guidelines)
- Use %_smp_mflags for parallel building</changelog>
  <changelog author="rhafer@suse.de" date="1331121600">- Remove %suse_update_libdir and %suse_update_config calls to
  unbreak built</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1335441600">- created patch pam_ldap-arm-linux-gnueabi.patch to build the
  arm binaries correctly
- Update to pam-ldap-186:
  * fix for BUG#424: build fails on Darwin</changelog>
  <changelog author="ckornacker@suse.com" date="1406635200">- rename README.SuSE to README.SUSE (bnc#889012)</changelog>
  <changelog author="dimstar@opensuse.org" date="1415016000">- Call autoreconf -fiv in place of autoreconf: ensure that
  autoreconf is successful in newer versions too.</changelog>
  <changelog author="hguo@suse.com" date="1488369600">- Patch up incorrect default value that appears in both configuration
  file and manual page for parameter "bind_timeout".
  0004-fix-bind-timelimit-description.patch (bsc#918534)</changelog>
  <changelog author="varkoly@suse.com" date="1521633600">- bsc#1081768 missing nss_ldap and pam_ldap packages (plus dependencies)</changelog>
</package>
<package pkgid="a292e3b259c18d7cfd593b4865c7086d7164de11159c960d9ae43d27d79a0c20" name="pam_snapper" arch="x86_64">
  <version epoch="0" ver="0.5.4" rel="lp150.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1470657600">- better messages for some btrfs quota errors
  (gh#openSUSE/snapper#257)</changelog>
  <changelog author="aschnell@suse.com" date="1470744000">- merged patch to fix order of object destruction on shutdown
  (gh#openSUSE/snapper#258)</changelog>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
</package>
<package pkgid="1b3cd958d132d5bac57660319b86bec44d88d6dca10f17917228cffb57a23357" name="pam_snapper" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="lp150.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
  <changelog author="aschnell@suse.com" date="1527508800">- merged (gh#openSUSE/snapper#409) to build with boost 1.67.0
  (bsc#1096208)
- version 0.5.5</changelog>
  <changelog author="aschnell@suse.com" date="1532347200">- fixed logging during shutdown of snapperd to avoid core dumps
  (bsc#1096401 and others)
- version 0.5.6</changelog>
</package>
<package pkgid="900652591b1c1cf39c573f3ae56cb7513733b4ae6d55650f374cff50bac5e4aa" name="pam_u2f" arch="src">
  <version epoch="0" ver="1.0.7" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1421150400">- Version 0.0.0
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am: More fix to Makefile.am.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * NEWS: Updated NEWS.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/Makefile.am: Cleaned release target.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am: Changed repo variable name.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pam-u2f.c, util.c: Indent.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Fixed link in AsciiDoc.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Added more asciidoc related packets to Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * build-aux/travis: Added more ldconfig.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Added check to Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * build-aux/travis: Permissions.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Removed libhidapi from Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml, build-aux/travis: Added travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/Makefile.am: Fixed Makefile.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * configure.ac: Fixed typo in configure.ac.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Updated README.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pamu2fcfg/pamu2fcfg.c: Removed linebreak at the end of the final
  printout.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.ggo,
  pamu2fcfg/cmdline.h, pamu2fcfg/pamu2fcfg.1.txt,
  pamu2fcfg/pamu2fcfg.c: Added man page.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pamu2fcfg/pamu2fcfg.c: Improved timout presentation.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.h,
  pamu2fcfg/pamu2fcfg.c: Indent.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, Makefile.am, configure.ac, pamu2fcfg/Makefile.am,
  pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.ggo, pamu2fcfg/cmdline.h,
  pamu2fcfg/pamu2fcfg.c: Added first version of the registration tool.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pam-u2f.c, util.c: Fixed some warnings.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README, pam-u2f.c, pam_u2f.8.txt, util.h: Changed default origin
  and appid to pam://$HOSTNAME.
  2014-12-10  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Typo in README.
  2014-12-10  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, AUTHORS, BLURB, COPYING, Makefile.am, NEWS, README,
  README.adoc, README.md, configure.ac, m4/lib-ld.m4, m4/lib-link.m4,
  m4/lib-prefix.m4, m4/manywarnings.m4, m4/warnings.m4, pam-u2f.c,
  pam_u2f.8.txt, tests/Makefile.am, tests/basic.c, util.c, util.h:
  Added initial content.
  2014-12-10  Alessio Di Mauro &lt;a-dma@users.noreply.github.com&gt;
  * Initial commit</changelog>
  <changelog author="t.gruner@katodev.de" date="1421841600">- Version 0.0.1 (released 2015-01-16)
  - Changed failure mode after authentication error.
  - Added call to setcred.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- Version 1.0.1 (released 2015-06-18)
  - Minor changes to man pages and install hooks.
- Version 1.0.0 (released 2015-06-17)
  - Use XDG_CONFIG_HOME as default for config files.
  - Added manual and interactive mode.
  - Added verbose mode.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Version 1.0.2 (released 2015-10-06)
  - Changes to automake flags.
  - Improve build on OS X.
- Cleanup .spec file
- Add baselib.conf</changelog>
  <changelog author="t.gruner@katodev.de" date="1446811200">- Version 1.0.3 (released 2015-11-02)
  - Bugfix in pamu2fcfg.
  - Minor improvements for verbose mode in pamu2fcfg.</changelog>
  <changelog author="t.gruner@katodev.de" date="1452168000">- Version 1.0.4 (released 2016-01-07)
  - Fixed possible permission escalation when using XDG_CONFIG_HOME.</changelog>
  <changelog author="kbabioch@suse.com" date="1523966400">- Update to version 1.0.5:
  - General bugfixes and quality-of-life improvements.</changelog>
  <changelog author="jengelh@inai.de" date="1524052800">- Update descriptions, trim bias and other-OS stuff.
- Remove extraneous --bindir.</changelog>
  <changelog author="kbabioch@suse.com" date="1524052801">- Update to version 1.0.6:
  - Fix an issue when using syslog as a debug facility.
  - Do not honor cue if no sutable device is found.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Update to version 1.0.7:
  - Add authpending_file to signal authentication activity
  - Add nodetect to skip to avoid unnecessary cue messages</changelog>
</package>
<package pkgid="e223c9f271e976dc8dac281931d90f05f131689718089e215fc56c06e57f975b" name="pam_u2f" arch="x86_64">
  <version epoch="0" ver="1.0.7" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1421150400">- Version 0.0.0
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am: More fix to Makefile.am.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * NEWS: Updated NEWS.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/Makefile.am: Cleaned release target.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am: Changed repo variable name.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pam-u2f.c, util.c: Indent.
  2014-12-16  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Fixed link in AsciiDoc.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Added more asciidoc related packets to Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * build-aux/travis: Added more ldconfig.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Added check to Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * build-aux/travis: Permissions.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml: Removed libhidapi from Travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .travis.yml, build-aux/travis: Added travis build.
  2014-12-15  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/Makefile.am: Fixed Makefile.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * configure.ac: Fixed typo in configure.ac.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Updated README.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pamu2fcfg/pamu2fcfg.c: Removed linebreak at the end of the final
  printout.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.ggo,
  pamu2fcfg/cmdline.h, pamu2fcfg/pamu2fcfg.1.txt,
  pamu2fcfg/pamu2fcfg.c: Added man page.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pamu2fcfg/pamu2fcfg.c: Improved timout presentation.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * Makefile.am, pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.h,
  pamu2fcfg/pamu2fcfg.c: Indent.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, Makefile.am, configure.ac, pamu2fcfg/Makefile.am,
  pamu2fcfg/cmdline.c, pamu2fcfg/cmdline.ggo, pamu2fcfg/cmdline.h,
  pamu2fcfg/pamu2fcfg.c: Added first version of the registration tool.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * pam-u2f.c, util.c: Fixed some warnings.
  2014-12-12  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README, pam-u2f.c, pam_u2f.8.txt, util.h: Changed default origin
  and appid to pam://$HOSTNAME.
  2014-12-10  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * README: Typo in README.
  2014-12-10  Alessio Di Mauro &lt;alessio@yubico.com&gt;
  * .gitignore, AUTHORS, BLURB, COPYING, Makefile.am, NEWS, README,
  README.adoc, README.md, configure.ac, m4/lib-ld.m4, m4/lib-link.m4,
  m4/lib-prefix.m4, m4/manywarnings.m4, m4/warnings.m4, pam-u2f.c,
  pam_u2f.8.txt, tests/Makefile.am, tests/basic.c, util.c, util.h:
  Added initial content.
  2014-12-10  Alessio Di Mauro &lt;a-dma@users.noreply.github.com&gt;
  * Initial commit</changelog>
  <changelog author="t.gruner@katodev.de" date="1421841600">- Version 0.0.1 (released 2015-01-16)
  - Changed failure mode after authentication error.
  - Added call to setcred.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- Version 1.0.1 (released 2015-06-18)
  - Minor changes to man pages and install hooks.
- Version 1.0.0 (released 2015-06-17)
  - Use XDG_CONFIG_HOME as default for config files.
  - Added manual and interactive mode.
  - Added verbose mode.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Version 1.0.2 (released 2015-10-06)
  - Changes to automake flags.
  - Improve build on OS X.
- Cleanup .spec file
- Add baselib.conf</changelog>
  <changelog author="t.gruner@katodev.de" date="1446811200">- Version 1.0.3 (released 2015-11-02)
  - Bugfix in pamu2fcfg.
  - Minor improvements for verbose mode in pamu2fcfg.</changelog>
  <changelog author="t.gruner@katodev.de" date="1452168000">- Version 1.0.4 (released 2016-01-07)
  - Fixed possible permission escalation when using XDG_CONFIG_HOME.</changelog>
  <changelog author="kbabioch@suse.com" date="1523966400">- Update to version 1.0.5:
  - General bugfixes and quality-of-life improvements.</changelog>
  <changelog author="jengelh@inai.de" date="1524052800">- Update descriptions, trim bias and other-OS stuff.
- Remove extraneous --bindir.</changelog>
  <changelog author="kbabioch@suse.com" date="1524052801">- Update to version 1.0.6:
  - Fix an issue when using syslog as a debug facility.
  - Do not honor cue if no sutable device is found.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Update to version 1.0.7:
  - Add authpending_file to signal authentication activity
  - Add nodetect to skip to avoid unnecessary cue messages</changelog>
</package>
<package pkgid="318f3e7e48018724270b821cd692f7c966d13732524709aa62e8b9f824f90b38" name="pango" arch="src">
  <version epoch="0" ver="1.40.14" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 1.38.1:
  + Require Harfbuzz 0.9.30.
  + Fix make check with --enable-debug=no.
  + Win32 build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 1.39.0:
  + Update PangoScript to Unicode 8.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 1.40.0:
  + Fix typos.
  + Don't treat OGHAM SPACE MARK as whitespace.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.40.1 (Fate#318572):
  + Use $PKG_CONFIG consistently (bgo#764191).
  + Fix a PangoWin32FontMap memory leak (bgo#764089).</changelog>
  <changelog author="hpj@suse.com" date="1470225600">- Make libpango obsolete/provide pango-modules bsc#978972. Change
  by idonmez@suse.com.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.40.2:
  + Improve introspection builds in msvc (bgo#764984).
  + Properly handle UTF32 chars in coretext.
  + Add rebeccapurple to list of colors.
  + Correct font weight mapping in coretext (bgo#766148).
  + Use version macros for exports (bgo#767587).</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 1.40.3:
  + Fix export of pango_cairo_win32_font_map_get_type (bgo#771004).
  + Fix build on OS X (bgo#770729).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 1.40.4:
  + Fix introspection annotation of pango_lkayout_get_size
    (bgo#779232).
  + Fix some Coverity findings: bgo#778601, bgo#778602, bgo#778654,
    bgo#778656.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.40.5:
  + Add missing introspection annotations (bgo#778663).
  + Fix line-end handling in pango_read_line (bgo#778816).
  + Make alpha attribute work without color (bgo#773767).
  + win32: Enable rendering colored texti and underlines
    (bgo#768779).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 1.40.6:
  + Don't use deprecated harfbuzz api.
  + Correctly implement min-required/max-allowed support.
  + Avoid compiler warnings.
  + Drop -uninstalled.pd files.
  + Add support for building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.40.7:
  + Some fixes for meson build support.
  + Don't change fonts for variation selectors (bgo#781123).
  + Fix some bugs in the libthai glue layer.
  + Pass text along when calling into cairo (bgo#784394).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.40.8:
  + Support emoji sequences in boundary determination.
  + Choose emoji font for color emoji.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.40.9:
  + Build and dist fixes.
  + Fix build on Windows with MSVC (bgo#783274).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.40.10:
  + Update Emoji data to version 5.
  + Apply gravity across spans in markup (bgo#784243).
  + Support variation selectors for shaping.
  + CoreText: Rely on CGFont for scaling (bgo#782393).
  + Fix grapheme breaks and backspacing for Emoji.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Add help2man BuildRequires, needed to build manpages.
- Minor spec file cleanup.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 1.40.11:
  + Fix backspacing for more Emoji sequences.
  + Make tests run faster.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504180800">- Add pango-fix-default-break-function.patch: Fix
  pango_default_break function for sentence start/end (bgo#785978).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.40.12:
  + Fix pango_default_break for sentence start/end (bgo#785978).
  + Fix multilib issue in pango-enum-types.h (bgo#786887).
- Drop pango-fix-default-break-function.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 1.40.13:
  + Some performance improvements (bgo#788643).
  + Update pango_default_break for line breaks (bgo#788115).
  + Fix an introspection warning (bgo#781857).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 1.40.14:
  + Fix char break problem introduced in 1.40.13 (bgo#789625).
  + Add tests for char breaking.</changelog>
  <changelog author="sreeves@suse.com" date="1534593600">- Add pango-emoji-bsc1103877.patch: Fix denial of service
  when parsing emoji (bsc#1103877, CVE-2018-15120)</changelog>
</package>
<package pkgid="0b528f9b90e8e9970753dbeba27ffef53e3548ac2af6cfcd847c7d428dcf4a57" name="pango-devel" arch="x86_64">
  <version epoch="0" ver="1.40.14" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 1.38.1:
  + Require Harfbuzz 0.9.30.
  + Fix make check with --enable-debug=no.
  + Win32 build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 1.39.0:
  + Update PangoScript to Unicode 8.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 1.40.0:
  + Fix typos.
  + Don't treat OGHAM SPACE MARK as whitespace.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.40.1 (Fate#318572):
  + Use $PKG_CONFIG consistently (bgo#764191).
  + Fix a PangoWin32FontMap memory leak (bgo#764089).</changelog>
  <changelog author="hpj@suse.com" date="1470225600">- Make libpango obsolete/provide pango-modules bsc#978972. Change
  by idonmez@suse.com.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.40.2:
  + Improve introspection builds in msvc (bgo#764984).
  + Properly handle UTF32 chars in coretext.
  + Add rebeccapurple to list of colors.
  + Correct font weight mapping in coretext (bgo#766148).
  + Use version macros for exports (bgo#767587).</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 1.40.3:
  + Fix export of pango_cairo_win32_font_map_get_type (bgo#771004).
  + Fix build on OS X (bgo#770729).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 1.40.4:
  + Fix introspection annotation of pango_lkayout_get_size
    (bgo#779232).
  + Fix some Coverity findings: bgo#778601, bgo#778602, bgo#778654,
    bgo#778656.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.40.5:
  + Add missing introspection annotations (bgo#778663).
  + Fix line-end handling in pango_read_line (bgo#778816).
  + Make alpha attribute work without color (bgo#773767).
  + win32: Enable rendering colored texti and underlines
    (bgo#768779).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 1.40.6:
  + Don't use deprecated harfbuzz api.
  + Correctly implement min-required/max-allowed support.
  + Avoid compiler warnings.
  + Drop -uninstalled.pd files.
  + Add support for building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.40.7:
  + Some fixes for meson build support.
  + Don't change fonts for variation selectors (bgo#781123).
  + Fix some bugs in the libthai glue layer.
  + Pass text along when calling into cairo (bgo#784394).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.40.8:
  + Support emoji sequences in boundary determination.
  + Choose emoji font for color emoji.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.40.9:
  + Build and dist fixes.
  + Fix build on Windows with MSVC (bgo#783274).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.40.10:
  + Update Emoji data to version 5.
  + Apply gravity across spans in markup (bgo#784243).
  + Support variation selectors for shaping.
  + CoreText: Rely on CGFont for scaling (bgo#782393).
  + Fix grapheme breaks and backspacing for Emoji.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Add help2man BuildRequires, needed to build manpages.
- Minor spec file cleanup.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 1.40.11:
  + Fix backspacing for more Emoji sequences.
  + Make tests run faster.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504180800">- Add pango-fix-default-break-function.patch: Fix
  pango_default_break function for sentence start/end (bgo#785978).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.40.12:
  + Fix pango_default_break for sentence start/end (bgo#785978).
  + Fix multilib issue in pango-enum-types.h (bgo#786887).
- Drop pango-fix-default-break-function.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 1.40.13:
  + Some performance improvements (bgo#788643).
  + Update pango_default_break for line breaks (bgo#788115).
  + Fix an introspection warning (bgo#781857).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 1.40.14:
  + Fix char break problem introduced in 1.40.13 (bgo#789625).
  + Add tests for char breaking.</changelog>
  <changelog author="sreeves@suse.com" date="1534593600">- Add pango-emoji-bsc1103877.patch: Fix denial of service
  when parsing emoji (bsc#1103877, CVE-2018-15120)</changelog>
</package>
<package pkgid="19a49cf1ca071bee81fcaf2a036572bf2230f054beee87f40da025e77f582286" name="pango-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.40.14" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 1.38.1:
  + Require Harfbuzz 0.9.30.
  + Fix make check with --enable-debug=no.
  + Win32 build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 1.39.0:
  + Update PangoScript to Unicode 8.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 1.40.0:
  + Fix typos.
  + Don't treat OGHAM SPACE MARK as whitespace.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.40.1 (Fate#318572):
  + Use $PKG_CONFIG consistently (bgo#764191).
  + Fix a PangoWin32FontMap memory leak (bgo#764089).</changelog>
  <changelog author="hpj@suse.com" date="1470225600">- Make libpango obsolete/provide pango-modules bsc#978972. Change
  by idonmez@suse.com.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.40.2:
  + Improve introspection builds in msvc (bgo#764984).
  + Properly handle UTF32 chars in coretext.
  + Add rebeccapurple to list of colors.
  + Correct font weight mapping in coretext (bgo#766148).
  + Use version macros for exports (bgo#767587).</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 1.40.3:
  + Fix export of pango_cairo_win32_font_map_get_type (bgo#771004).
  + Fix build on OS X (bgo#770729).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 1.40.4:
  + Fix introspection annotation of pango_lkayout_get_size
    (bgo#779232).
  + Fix some Coverity findings: bgo#778601, bgo#778602, bgo#778654,
    bgo#778656.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.40.5:
  + Add missing introspection annotations (bgo#778663).
  + Fix line-end handling in pango_read_line (bgo#778816).
  + Make alpha attribute work without color (bgo#773767).
  + win32: Enable rendering colored texti and underlines
    (bgo#768779).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 1.40.6:
  + Don't use deprecated harfbuzz api.
  + Correctly implement min-required/max-allowed support.
  + Avoid compiler warnings.
  + Drop -uninstalled.pd files.
  + Add support for building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.40.7:
  + Some fixes for meson build support.
  + Don't change fonts for variation selectors (bgo#781123).
  + Fix some bugs in the libthai glue layer.
  + Pass text along when calling into cairo (bgo#784394).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.40.8:
  + Support emoji sequences in boundary determination.
  + Choose emoji font for color emoji.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.40.9:
  + Build and dist fixes.
  + Fix build on Windows with MSVC (bgo#783274).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.40.10:
  + Update Emoji data to version 5.
  + Apply gravity across spans in markup (bgo#784243).
  + Support variation selectors for shaping.
  + CoreText: Rely on CGFont for scaling (bgo#782393).
  + Fix grapheme breaks and backspacing for Emoji.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Add help2man BuildRequires, needed to build manpages.
- Minor spec file cleanup.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 1.40.11:
  + Fix backspacing for more Emoji sequences.
  + Make tests run faster.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504180800">- Add pango-fix-default-break-function.patch: Fix
  pango_default_break function for sentence start/end (bgo#785978).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.40.12:
  + Fix pango_default_break for sentence start/end (bgo#785978).
  + Fix multilib issue in pango-enum-types.h (bgo#786887).
- Drop pango-fix-default-break-function.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 1.40.13:
  + Some performance improvements (bgo#788643).
  + Update pango_default_break for line breaks (bgo#788115).
  + Fix an introspection warning (bgo#781857).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 1.40.14:
  + Fix char break problem introduced in 1.40.13 (bgo#789625).
  + Add tests for char breaking.</changelog>
  <changelog author="sreeves@suse.com" date="1534593600">- Add pango-emoji-bsc1103877.patch: Fix denial of service
  when parsing emoji (bsc#1103877, CVE-2018-15120)</changelog>
</package>
<package pkgid="ba4082dd328b265f86c532da386dc618963ced1795d5e70e78e9f5e1f85e7a53" name="pango-tools" arch="x86_64">
  <version epoch="0" ver="1.40.14" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 1.38.1:
  + Require Harfbuzz 0.9.30.
  + Fix make check with --enable-debug=no.
  + Win32 build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 1.39.0:
  + Update PangoScript to Unicode 8.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 1.40.0:
  + Fix typos.
  + Don't treat OGHAM SPACE MARK as whitespace.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.40.1 (Fate#318572):
  + Use $PKG_CONFIG consistently (bgo#764191).
  + Fix a PangoWin32FontMap memory leak (bgo#764089).</changelog>
  <changelog author="hpj@suse.com" date="1470225600">- Make libpango obsolete/provide pango-modules bsc#978972. Change
  by idonmez@suse.com.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.40.2:
  + Improve introspection builds in msvc (bgo#764984).
  + Properly handle UTF32 chars in coretext.
  + Add rebeccapurple to list of colors.
  + Correct font weight mapping in coretext (bgo#766148).
  + Use version macros for exports (bgo#767587).</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 1.40.3:
  + Fix export of pango_cairo_win32_font_map_get_type (bgo#771004).
  + Fix build on OS X (bgo#770729).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 1.40.4:
  + Fix introspection annotation of pango_lkayout_get_size
    (bgo#779232).
  + Fix some Coverity findings: bgo#778601, bgo#778602, bgo#778654,
    bgo#778656.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.40.5:
  + Add missing introspection annotations (bgo#778663).
  + Fix line-end handling in pango_read_line (bgo#778816).
  + Make alpha attribute work without color (bgo#773767).
  + win32: Enable rendering colored texti and underlines
    (bgo#768779).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 1.40.6:
  + Don't use deprecated harfbuzz api.
  + Correctly implement min-required/max-allowed support.
  + Avoid compiler warnings.
  + Drop -uninstalled.pd files.
  + Add support for building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.40.7:
  + Some fixes for meson build support.
  + Don't change fonts for variation selectors (bgo#781123).
  + Fix some bugs in the libthai glue layer.
  + Pass text along when calling into cairo (bgo#784394).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.40.8:
  + Support emoji sequences in boundary determination.
  + Choose emoji font for color emoji.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.40.9:
  + Build and dist fixes.
  + Fix build on Windows with MSVC (bgo#783274).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.40.10:
  + Update Emoji data to version 5.
  + Apply gravity across spans in markup (bgo#784243).
  + Support variation selectors for shaping.
  + CoreText: Rely on CGFont for scaling (bgo#782393).
  + Fix grapheme breaks and backspacing for Emoji.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Add help2man BuildRequires, needed to build manpages.
- Minor spec file cleanup.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 1.40.11:
  + Fix backspacing for more Emoji sequences.
  + Make tests run faster.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504180800">- Add pango-fix-default-break-function.patch: Fix
  pango_default_break function for sentence start/end (bgo#785978).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.40.12:
  + Fix pango_default_break for sentence start/end (bgo#785978).
  + Fix multilib issue in pango-enum-types.h (bgo#786887).
- Drop pango-fix-default-break-function.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 1.40.13:
  + Some performance improvements (bgo#788643).
  + Update pango_default_break for line breaks (bgo#788115).
  + Fix an introspection warning (bgo#781857).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 1.40.14:
  + Fix char break problem introduced in 1.40.13 (bgo#789625).
  + Add tests for char breaking.</changelog>
  <changelog author="sreeves@suse.com" date="1534593600">- Add pango-emoji-bsc1103877.patch: Fix denial of service
  when parsing emoji (bsc#1103877, CVE-2018-15120)</changelog>
</package>
<package pkgid="38bed4f8de45f2cac064bc802bd3788d95975379eb0915975dc352220b83882b" name="patch" arch="src">
  <version epoch="0" ver="2.7.6" rel="lp150.3.3.1"/>
  <changelog author="agruen@suse.de" date="1272974400">- Version 2.6.1.81:
  + Fix backup file detection for deleted files
  + Allow to create and delete empty files
  + Stick to the best name in the reversed-patch check
  + Various portability improvements</changelog>
  <changelog author="jengelh@medozas.de" date="1278072000">- Use %_smp_mflags</changelog>
  <changelog author="jdelvare@suse.de" date="1301918400">- Version 2.6.1.116:
  + Patch now ignores destination file names that are absolute or
    that contain a component of ".." (CVE-2010-4651, bnc#662957).
- Drop unified-reject-files-compat.diff. Compatibility has been
  provided for the past 18 months, hopefully nobody is relying on
  it any longer.</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %configure macro</changelog>
  <changelog author="jdelvare@suse.de" date="1333540800">- Version 2.6.1.136</changelog>
  <changelog author="jdelvare@suse.de" date="1333713600">- patch-revert-e0f70752.patch: Revert broken upstream commit
  (bnc#755136).</changelog>
  <changelog author="aj@suse.de" date="1342526400">- patch-stdio.in.patch:
  Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="jdelvare@suse.de" date="1354795200">- Version 2.7.1
  + Patch no longer gets a failed assertion for certain mangled
    patches.
  + Ignore destination file names that are absolute or that contain
    a component of "..", except when working in the root directory.
    This addresses CVE-2010-4651.
  + Support for most features of the "diff --git" format, including
    renames and copies, permission changes, and symlink diffs.
    Binary diffs are not supported yet; patch will complain and
    skip them.
  + Support for double-quoted filenames: when a filename starts
    with a double quote, it is interpreted as a C string literal.
    The escape sequences \\, \", \a, \b, \f, \n, \r, \t, \v, and
    \ooo (a three-digit octal number between 0 and 255) are
    recognized.
  + Refuse to apply a normal patch to a symlink. (Previous versions
    of patch were replacing the symlink with a regular file.)
  + New --follow-symlinks option to allow to treat symlinks as
    files: this was patch's behavior before version 2.7.
  + When trying to modify a read-only file, warn about the
    potential problem by default. The --read-only command line
    option allows to change this behavior.
  + Files to be deleted are deleted once the entire input has been
    processed, not immediately. This fixes a bug with numbered
    backup files.
  + When a timestamp specifies a time zone, honor that instead of
    assuming the local time zone (--set-date) or Universal
    Coordinated Time (--set-utc).
  + Support for nanosecond precision timestamps.
  + Many bug fixes.
  + Clarify the message printed when a patch is expected to empty
    out and delete a file, but the file does not become empty.
  + Various improvements to messages when applying a patch to a
    file of different type (regular file vs. symlink), when there
    are line ending differences (LF vs. CRLF), and when in
  - -dry-run mode.
  + Ignore when extended attributes cannot be preserved because
    they are unsupported or because permission to set them is
    denied.
- patch-revert-e0f70752.patch: Dropped, original bug fixed
  upstream.
- patch-stdio.in.patch: Dropped, merged upstream.</changelog>
  <changelog author="jdelvare@suse.de" date="1354795201">- Back to bz2 archive format as old products lack xz.</changelog>
  <changelog author="schwab@suse.de" date="1400587200">- error-report-crash.patch: fix crash after reporting error during option
  parsing</changelog>
  <changelog author="jdelvare@suse.de" date="1415620800">- reject-print-function-01-drop-useless-test.patch: Drop useless
  test in another_hunk().
- reject-print-function-02-handle-unified-format.patch: Preserve C
  function name in unified rejects (bnc#904519).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422014400">- patch 2.7.3
  Contains a security fix for a directory traversal flaw when
  handling git-style patches. This could allow an attacker to
  overwrite arbitrary files by applying a specially crafted patch.
  [boo#913678] [CVE-2015-1196]
  + With git-style patches, symlinks that point outside the working
    directory will no longer be created (CVE-2015-1196).
  + When a file isn't being deleted because the file contents don't
    match the patch, the resulting message is now "Not deleting
    file ... as content differs from patch" instead of "File ...
    is not empty after patch; not deleting".
  + Function names in hunks (from diff -p) are now preserved in
    reject files
    This change was previously added as a patch. [boo#904519]
- Version 2.7.2 differed from the above only slightly.
- packaging changes:
  + Verify source signatures
  + Removed patches now upstream:
  * error-report-crash.patch
  * reject-print-function-01-drop-useless-test.patch
  * reject-print-function-02-handle-unified-format.patch
  + run spec-cleaner</changelog>
  <changelog author="jdelvare@suse.de" date="1424088000">- patch 2.7.4
  Fixes a functional regression introduced by the previous security
  fix. The security fix would forbid legitimate use cases of
  relative symbolic links.
  [boo#918058]
  + Allow arbitrary symlink targets again.
  + Do not change permissions if there isn't an explicit mode
    change.
  + Fix indentation heuristic for context diffs.
- Please also note that the previous update fixed security bugs
  boo#915328 and boo#915329 even though it did not say so.</changelog>
  <changelog author="jdelvare@suse.de" date="1425729600">- patch 2.7.5
  Fixes a functional regression introduced by the previous update.
  + Patching through symbolic links works again, as long as the
    target is within the working tree.</changelog>
  <changelog author="astieger@suse.com" date="1518004800">- patch 2.7.6:
  * Files specified on the command line are no longer verified to
    be inside the current working directory, so commands like
    "patch -i foo.diff ../foo" will work again
  * Fixes CVE-2016-10713 (Out-of-bounds access within
    pch_write_line() in pch.c could possibly lead to DoS via a
    crafted input file; bsc#1080918)
  * Various fixes</changelog>
  <changelog author="jdelvare@suse.de" date="1521633600">- Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
  rename patch (bsc#1080951, CVE-2018-6951, savannah#53132).</changelog>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
</package>
<package pkgid="3a242887165c7a9ce5194f436c5e1c706487ac7a596bcfb36b09ddcba2c940cc" name="patch" arch="x86_64">
  <version epoch="0" ver="2.7.6" rel="lp150.3.3.1"/>
  <changelog author="agruen@suse.de" date="1272974400">- Version 2.6.1.81:
  + Fix backup file detection for deleted files
  + Allow to create and delete empty files
  + Stick to the best name in the reversed-patch check
  + Various portability improvements</changelog>
  <changelog author="jengelh@medozas.de" date="1278072000">- Use %_smp_mflags</changelog>
  <changelog author="jdelvare@suse.de" date="1301918400">- Version 2.6.1.116:
  + Patch now ignores destination file names that are absolute or
    that contain a component of ".." (CVE-2010-4651, bnc#662957).
- Drop unified-reject-files-compat.diff. Compatibility has been
  provided for the past 18 months, hopefully nobody is relying on
  it any longer.</changelog>
  <changelog author="uli@suse.com" date="1317816000">- cross-build fix: use %configure macro</changelog>
  <changelog author="jdelvare@suse.de" date="1333540800">- Version 2.6.1.136</changelog>
  <changelog author="jdelvare@suse.de" date="1333713600">- patch-revert-e0f70752.patch: Revert broken upstream commit
  (bnc#755136).</changelog>
  <changelog author="aj@suse.de" date="1342526400">- patch-stdio.in.patch:
  Fix build with missing gets declaration (glibc 2.16)</changelog>
  <changelog author="jdelvare@suse.de" date="1354795200">- Version 2.7.1
  + Patch no longer gets a failed assertion for certain mangled
    patches.
  + Ignore destination file names that are absolute or that contain
    a component of "..", except when working in the root directory.
    This addresses CVE-2010-4651.
  + Support for most features of the "diff --git" format, including
    renames and copies, permission changes, and symlink diffs.
    Binary diffs are not supported yet; patch will complain and
    skip them.
  + Support for double-quoted filenames: when a filename starts
    with a double quote, it is interpreted as a C string literal.
    The escape sequences \\, \", \a, \b, \f, \n, \r, \t, \v, and
    \ooo (a three-digit octal number between 0 and 255) are
    recognized.
  + Refuse to apply a normal patch to a symlink. (Previous versions
    of patch were replacing the symlink with a regular file.)
  + New --follow-symlinks option to allow to treat symlinks as
    files: this was patch's behavior before version 2.7.
  + When trying to modify a read-only file, warn about the
    potential problem by default. The --read-only command line
    option allows to change this behavior.
  + Files to be deleted are deleted once the entire input has been
    processed, not immediately. This fixes a bug with numbered
    backup files.
  + When a timestamp specifies a time zone, honor that instead of
    assuming the local time zone (--set-date) or Universal
    Coordinated Time (--set-utc).
  + Support for nanosecond precision timestamps.
  + Many bug fixes.
  + Clarify the message printed when a patch is expected to empty
    out and delete a file, but the file does not become empty.
  + Various improvements to messages when applying a patch to a
    file of different type (regular file vs. symlink), when there
    are line ending differences (LF vs. CRLF), and when in
  - -dry-run mode.
  + Ignore when extended attributes cannot be preserved because
    they are unsupported or because permission to set them is
    denied.
- patch-revert-e0f70752.patch: Dropped, original bug fixed
  upstream.
- patch-stdio.in.patch: Dropped, merged upstream.</changelog>
  <changelog author="jdelvare@suse.de" date="1354795201">- Back to bz2 archive format as old products lack xz.</changelog>
  <changelog author="schwab@suse.de" date="1400587200">- error-report-crash.patch: fix crash after reporting error during option
  parsing</changelog>
  <changelog author="jdelvare@suse.de" date="1415620800">- reject-print-function-01-drop-useless-test.patch: Drop useless
  test in another_hunk().
- reject-print-function-02-handle-unified-format.patch: Preserve C
  function name in unified rejects (bnc#904519).</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1422014400">- patch 2.7.3
  Contains a security fix for a directory traversal flaw when
  handling git-style patches. This could allow an attacker to
  overwrite arbitrary files by applying a specially crafted patch.
  [boo#913678] [CVE-2015-1196]
  + With git-style patches, symlinks that point outside the working
    directory will no longer be created (CVE-2015-1196).
  + When a file isn't being deleted because the file contents don't
    match the patch, the resulting message is now "Not deleting
    file ... as content differs from patch" instead of "File ...
    is not empty after patch; not deleting".
  + Function names in hunks (from diff -p) are now preserved in
    reject files
    This change was previously added as a patch. [boo#904519]
- Version 2.7.2 differed from the above only slightly.
- packaging changes:
  + Verify source signatures
  + Removed patches now upstream:
  * error-report-crash.patch
  * reject-print-function-01-drop-useless-test.patch
  * reject-print-function-02-handle-unified-format.patch
  + run spec-cleaner</changelog>
  <changelog author="jdelvare@suse.de" date="1424088000">- patch 2.7.4
  Fixes a functional regression introduced by the previous security
  fix. The security fix would forbid legitimate use cases of
  relative symbolic links.
  [boo#918058]
  + Allow arbitrary symlink targets again.
  + Do not change permissions if there isn't an explicit mode
    change.
  + Fix indentation heuristic for context diffs.
- Please also note that the previous update fixed security bugs
  boo#915328 and boo#915329 even though it did not say so.</changelog>
  <changelog author="jdelvare@suse.de" date="1425729600">- patch 2.7.5
  Fixes a functional regression introduced by the previous update.
  + Patching through symbolic links works again, as long as the
    target is within the working tree.</changelog>
  <changelog author="astieger@suse.com" date="1518004800">- patch 2.7.6:
  * Files specified on the command line are no longer verified to
    be inside the current working directory, so commands like
    "patch -i foo.diff ../foo" will work again
  * Fixes CVE-2016-10713 (Out-of-bounds access within
    pch_write_line() in pch.c could possibly lead to DoS via a
    crafted input file; bsc#1080918)
  * Various fixes</changelog>
  <changelog author="jdelvare@suse.de" date="1521633600">- Add AUTHORS and COPYING to %doc.
- fix-segfault-mangled-rename.patch: Fix segfault with mangled
  rename patch (bsc#1080951, CVE-2018-6951, savannah#53132).</changelog>
  <changelog author="jdelvare@suse.de" date="1521720000">- Move COPYING from %doc to %license.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052800">Fix CVE-2018-1000156 (bsc#1088420, savannah#53566).
- ed-style-01-missing-input-files.patch: Allow input files to be
  missing for ed-style patches.
- ed-style-02-fix-arbitrary-command-execution.patch,
  ed-style-03-update-test-Makefile.patch: Fix arbitrary command
  execution in ed-style patches.
- ed-style-04-invoke-ed-directly.patch: Invoke ed directly instead
  of using the shell.
- ed-style-05-minor-cleanups.patch: Minor cleanups in do_ed_script.
- ed-style-06-fix-test-failure.patch: Fix 'ed-style' test failure.</changelog>
  <changelog author="jdelvare@suse.de" date="1524052801">- Add ed as BuildRequires so ed-style patches can be checked by
  the test suite.</changelog>
  <changelog author="jdelvare@suse.de" date="1525867200">- ed-style-07-dont-leak-tmp-file.patch,
  ed-style-08-dont-leak-tmp-file-multi.patch: Fix temporary file
  leak when applying ed-style patches (bsc#1092500,
  savannah#53820).</changelog>
</package>
<package pkgid="6120052a6222d2a43fd49bf263a5de0a88bb9ac5e5359b7c7543e46b1bcdb46c" name="patterns-base" arch="src">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="6949fcd26c5d3c02bce974b08517785e6f248db76b2f450cd3d32c3cccdf5933" name="patterns-base" arch="src">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="b14833d1a67c0138bc669cf55265b6e6e02875cb12d79111fa10f1859832831a" name="patterns-base" arch="src">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="37a5bf136050ec169325e46d64f00cbc101f12168c00e63343669536be094d00" name="patterns-base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="2cb8b3d8014f35f5417fc240887223af0f1f6fd6bd6a0ece0a0944539080e22c" name="patterns-base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="5a87959a6c3cf9913673c56f191ad59a3b6193d0034a4321d4b98e2a8d07096c" name="patterns-base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="b053e049e2468f32f18836d1adac5374cc453ec57de3f45233d49fdb3b61f725" name="patterns-base-apparmor" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="a567c7d3ac1e6b26639c4eb3510788f6161ac48547ec7f75d3f08b4406cfb512" name="patterns-base-apparmor" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="8238456fbc08c7fb56e3cebc0c8b3ed4ea1e433c450e9dd883eee080cbcd1161" name="patterns-base-apparmor" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="f2f07f0c522deb80ca8a04bbda7b579aa830ee1ee9840bcb14c041e912fb2c58" name="patterns-base-apparmor-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="6872b335059eeba55efdde717277ffe1d1d6372b92888700fa7a2245a764c81b" name="patterns-base-apparmor-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="5b37ab7fe563a116043f3cd33c0ab100ebe9d2a78660d73334a9944e3359e4ad" name="patterns-base-apparmor-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="c471434b8c107cd2850867fcb77d493799d93c93ed8fe9405aabbae40601dbbf" name="patterns-base-apparmor_opt" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="43ee945b185c01d320069fc22a50c2135ee6f477b47a8c58e463bf788c14d693" name="patterns-base-apparmor_opt" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="cc137198c0c607be728f26fd889bf09b3d7386fd88d705819b0e896878141cbc" name="patterns-base-apparmor_opt" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="1d6ab0dd8204fed06ab449d9459ae6369475243b5e3e32bb9c3c08b619c69a8f" name="patterns-base-base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="5c05df5a8ce747663f7a3b62ed014171c733ce8f2d485aa1c1c7329ba1cfe16c" name="patterns-base-base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="5b817050e128745987c3ec5b69b36f06f7837533fac211950c4bbdde840107ce" name="patterns-base-base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="e34931df90d08f4114d0d66ffb5a91edec2f13deed85094d84967c6a31d222aa" name="patterns-base-base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="d6222fc51022994b3c73c0797cec7141e5b88e337e7380272823828a4d24c255" name="patterns-base-base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="c55fb7f7109804efca670fe971f7f4591b7ee0fc761fbc12f71b13f1a141c2d1" name="patterns-base-base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="6fbcdda8dacb961a0efd0cff0a0d16b8aa00a2d1f04acf316b0a1b0d273aee96" name="patterns-base-basesystem" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="735afa6ac68acc12c38be1ed4e185ba17bedbdd88daea54e277da664549a63a4" name="patterns-base-basesystem" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="c9bc017a4b6a155d3e2150d45e95b67c1997d2105de7d053d71c9181f60acbc3" name="patterns-base-basesystem" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="7c14c9d8c6c856ddcf6dcfac7a12a619cfb363c430e70fafc607bf9d42c480b0" name="patterns-base-console" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="4214fc223cab647d7c4e9e689388ecee1e79881a878e009a8fa3ca53bc6187be" name="patterns-base-console" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="7c7a2c0920dd2a0f0063860acfbd536589d674ff6a1de26ce62e6dcaaf663a3d" name="patterns-base-console" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="9a2a4435f638127bd573b98722ce4024764a99036715afe022d68c4d24fdc32f" name="patterns-base-documentation" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="115a1417c46102d9c7de0db8c77c6ddb2f98ef4b2a89ae3b6fa1ffe735b133fb" name="patterns-base-documentation" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="667b3ecfdf9c097207ea4f3e3954bb75a07a3d182a39a46d9ca373c31fcbde98" name="patterns-base-documentation" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="6be3b552f11b3bbecdcdbbb8f656ee829a02024fd6048d9cf5818b5e680f0f22" name="patterns-base-enhanced_base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="f3e640ed5d92b82dbf55688418a90a7a9fb5ec6f9ce52c48a37693a64707aa0f" name="patterns-base-enhanced_base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="a6af1043e17f84352db9d1e50c7a76d5f49d664b4049c67fe58914e1ab2f3df4" name="patterns-base-enhanced_base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="3b64673f3e0bce21805a35f42445e4455911a17c7e97213a2b953f99d499ba2b" name="patterns-base-enhanced_base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="e0b2fe4700e353874e7c2d9df88c17b275c2d13dde3f9394512eea60e04924f7" name="patterns-base-enhanced_base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="44adedc4fd6826e55a0f7b11cca9e795940e30eebf2c78900374b749edaa9ff8" name="patterns-base-enhanced_base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="b7040e87af195dad957e126aaaafd97ee5074ee8c2ec41697578bdb4c974eccc" name="patterns-base-enhanced_base_opt" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="24079be0ed2c9ea8db69e661c6f32bc298c20e97c4b60f9976992d49f883f212" name="patterns-base-enhanced_base_opt" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="196e0374ddccc88956bd7d4fa679a9d56e175c5f10693109b4f91a4a7c7122d6" name="patterns-base-enhanced_base_opt" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="e72b687013c6dd776940e0bd9f97149b60a97a49e253d6209a67e61d21e3694a" name="patterns-base-minimal_base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="0eb39d6a392f4be5690e7e681f61004a41744f0e886cbf0985356361be54778b" name="patterns-base-minimal_base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="570a4d88071df2b03c7ce9e540fed8ebd5641bc1dd0f19b753f3fad45925ba6d" name="patterns-base-minimal_base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="c0d0a067f863d1f2bab5d8e94d99f9ce16e687c5404525409ea73e639dd0b1ec" name="patterns-base-minimal_base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="83eea0f33df8beb4e0d138744962e33a67990dbd75731c58f7d6cfc4494e1644" name="patterns-base-minimal_base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="d28db6a7ca922282dcdaa165b27001366c222d9bc0e8f3acfc8d9e46455c18d8" name="patterns-base-minimal_base-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="e417601e81187b9c558aed4c1ad96b41753004f816bf235d86715acd7b8b344f" name="patterns-base-sw_management" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="10c3648f0af0ec323dab0ec8f4be2f86dcfc94e57df89f4e374eb2c352b02aaa" name="patterns-base-sw_management" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="81cc13762842045f7d98c35bea021723620c1d17f00f20ba8a4118c4ba538b2b" name="patterns-base-sw_management" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="9c47ed936175583a62697d8f59927440e5716729d13795fd2623f71bfbec5a7f" name="patterns-base-sw_management-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="ac62679b34f5338447cae336b7a94ebba70cf997ed11cf5f21d6c2e42d84c2eb" name="patterns-base-sw_management-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="88e7c227a7736cd06a058995ac66cce1e8d309140a85c2103b239ce46a62ce65" name="patterns-base-sw_management-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="415eb7bac450002603fc56b6d70bed9dba1b3c0970e3665bd66b0c64a891dc90" name="patterns-base-transactional_base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="6856586c76eedf6c9575ba3a351f0df111046ddc9fbb616a0437e62856695b1b" name="patterns-base-transactional_base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="02cca0f369012ed6349e4786232d2574348ede8bb4c0773f9a3e18f17dad3ffd" name="patterns-base-transactional_base" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="f3f65548f4a1587ef339c523b2dd26b0350c376edb48b7c0d68bd8c4cda168ae" name="patterns-base-update_test" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="5f90329daf32c5f8e5df1f24d536a7e59b1cd1466a744b8958f1c57008d0a4d8" name="patterns-base-update_test" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="9b54aa6d9e0c7bd87154cc0fafcba3dcc58c621e12a092947237ef9d72b5ed84" name="patterns-base-update_test" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="efae2463c6c6982837eedae17041bcb6411d9002201fb62ee5ef59268f926dfb" name="patterns-base-x11" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="318aa45129fa80234c07d32767a673dc67b650f0c671adb4ffbfdd61983459f9" name="patterns-base-x11" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="78d93b548be9d5bac3d528ee28b95716e716584e5b95ed05613f2b8dc7d7dbc0" name="patterns-base-x11" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="fecbcab90265490f2a8c6531c584f44d46daa664669b29d5be7744893baa6028" name="patterns-base-x11-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="8013a5d7d7f7d9f2baeae15846a3806aa3735d069a4a967671cbf71a48bf2e3d" name="patterns-base-x11-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="06066f8923be8311859919a9006cfa642fc2eb73db137c33a75dcbe154cb90c8" name="patterns-base-x11-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="e1d7864b95ae95d2ffd2d3e084acc36d91f133995e283e45e5cc79d1e8201235" name="patterns-base-x11_enhanced" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="95660bd53d22bc5ad4a302423251971fada98fd7504abd0bf6556d24a737b682" name="patterns-base-x11_enhanced" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="67ff74768e4067f9307ad90d60163b2eedaaf307667dec5af858767bde1d8bf6" name="patterns-base-x11_enhanced" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="dd4da0aa6c98aa7d1d405ff0adfe1d97035436c415089798dfe183d5855a0280" name="patterns-base-x11_enhanced-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="de8207f104d7a81e5b042cf6feb7e75036e463352b9a363d7ae550df0c10e9f7" name="patterns-base-x11_enhanced-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="fba92e3af5430885889b3d51267a6e470a84935e4b6b2a251497f5beeb0e0a5f" name="patterns-base-x11_enhanced-32bit" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="aa29e1a2c73718a3cbae9dadc07a0876942c4092e74957515b37ab17c68f5e6f" name="patterns-base-x11_opt" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.3.1"/>
  <changelog author="fvogt@suse.com" date="1515758400">- Don't require apparmor-docs, only recommend it
- Require xorg-x11-fonts-core instead of xorg-x11-fonts
- Don't require xorg-x11, only recommend it</changelog>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
</package>
<package pkgid="5d9b7f2698b25be8c890fb5ceddfe1637f4cb79516baae00115b66da450e7887" name="patterns-base-x11_opt" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.6.1"/>
  <changelog author="lnussel@suse.de" date="1518436800">- fix pattern() provides to use %2d instead of dash to avoid rpm
  parsing the string as name-version (bsc#1079353)
- don't recommend insserv-compat as anything sysvinit is obsolete</changelog>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521633600">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
</package>
<package pkgid="4b0549b69045548ab1e43fe949b6ff433dbf5044c1a963e4bd07433aaf81481a" name="patterns-base-x11_opt" arch="x86_64">
  <version epoch="0" ver="20171206" rel="lp150.15.9.1"/>
  <changelog author="lnussel@suse.de" date="1519041600">- fix pattern names packgeand() lines of 32bit patterns (bsc#1079353)
- put chrony in base system (bsc#1072351)</changelog>
  <changelog author="okurz@suse.com" date="1519646400">- put cron in base system (bsc#1072602)</changelog>
  <changelog author="rbrown@suse.com" date="1520337600">- Introduce readonly_root_tools pattern for Read-Only Root
  Filesystem (boo#1084149)</changelog>
  <changelog author="sflees@suse.de" date="1520942400">- add lightdm as a recommends to x11 pattern boo#1081760
- regenerate 32bit patterns
- Don't generate 32bit patterns for readonly_root_tools</changelog>
  <changelog author="sflees@suse.de" date="1521720000">- Don't install rollback helper on openSUSE (See why is this even
  in here.... thread on openSUSE project mailing list) boo#1086584</changelog>
  <changelog author="behlert@suse.de" date="1522756800">- ethtool is available on SLE 15, moving out of "opensuse only"
  section [bsc#1087354]</changelog>
  <changelog author="behlert@suse.de" date="1522843200">- added timezone as recommended to minimal_base pattern
  [bsc#1085075]</changelog>
  <changelog author="sflees@suse.de" date="1522929600">- Remove grub variants from patterns bsc#1064265</changelog>
  <changelog author="fbui@suse.com" date="1522929601">- Add systemd-coredump to the list of recommended packages of miminal_base
  Latest systemd package splitted off its coredump management facility
  into a sub-package. Recommend this package so this functionnality is
  still available by default on SLE (but will be disabled on Leap, see
  bsc#1083849).
  Also give the possibility to block it by using a soft dep
  (Recommends:). This might be needed on live images for example where
  space is rather low.</changelog>
  <changelog author="fbui@suse.com" date="1523016000">- Don't install systemd-coredump by default on Leap (bsc#1083849)</changelog>
  <changelog author="behlert@suse.de" date="1524139200">- drop patterns-base-32bit pattern for s390 and s390x [bsc#1088669]
- re-run create_32bit-patterns_file.pl</changelog>
  <changelog author="fcrozat@suse.com" date="1524139201">- Do not recommends on SLE patterns which aren't shipped on SLE.
- Ensure recommends on ntfs-3g and ntfsprogs are enabled on SLE
  (bsc#1087242).</changelog>
  <changelog author="rbrown@suse.com" date="1524484800">- Rename readonly_root_tools to transactional_base (boo#1089095)
- Correct transactional server role pattern to use enhanced_base
  (boo#1088884)</changelog>
  <changelog author="lnussel@suse.de" date="1524744000">- move ordering of patterns-base-base after gnome_x11 (bsc#1091102)</changelog>
  <changelog author="lnussel@suse.de" date="1524744001">- make everything in enhanced_base_opt really optional. It just
  increases the server install and SLE doesn't have the pattern at
  all either (bsc#1090189)</changelog>
  <changelog author="lnussel@suse.de" date="1526040000">- do not recommend ntp also in enhanced_base (boo#162331)</changelog>
  <changelog author="sflees@suse.de" date="1526299200">- Rework x11 pattern bsc#1086663
- Recommend terminfo in minimal_base bsc#1081747
- rpm doesn't need to be in base and minimal_base_conflicts
- dont create transactional_base-32bit pattern.
- Regenerate 32bit patterns</changelog>
  <changelog author="lnussel@suse.de" date="1526385600">- require distribution-release instead of openSUSE-release to avoid conflicts
  when migrating to SLE (boo#1089031)</changelog>
  <changelog author="lnussel@suse.de" date="1527508800">- explicitly include rsyslog in the base pattern to make sure
  logging goes to /var/log/messages as documented (bsc#1094841).</changelog>
  <changelog author="behlert@suse.de" date="1534334400">- moved xfsprogs from enhanced_base pattern to
  minimal base pattern, changed 'suggests:' to 'recommends:' while
  doing so. [bsc#1095916]</changelog>
</package>
<package pkgid="cc2abc17b29bf622c3a027cbb81e3db0800692a473eacc75de97c0f2747eaed2" name="patterns-lxqt" arch="src">
  <version epoch="0" ver="20170319" rel="lp150.2.3.1"/>
  <changelog author="sflees@suse.de" date="1489665600">- Create new package from old unified patterns package</changelog>
  <changelog author="jengelh@inai.de" date="1491825600">- Use macros over old $RPM shell vars.</changelog>
  <changelog author="mvetter@suse.com" date="1505390400">- boo#1054519:
  Recommend xdg-user-dirs so standard XDG dirs are created</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Remove deprecated lxqt-common
- Add new lxqt-themes</changelog>
  <changelog author="mvetter@suse.com" date="1526817600">- bsc#1094025: Make LXQt pattern XFCE independant:
  * Remove Recommends: xfce4-power-manager:
    we have lxqt-powermanagement
  * Remove Recommends: xfce4-screenshooter:
    lximage-qt does this via the -s option. It also has comes with
    a desktop file to have this easily available</changelog>
</package>
<package pkgid="76b3fe92da36923073ddec13015ab971d16b7e748524e89805c1e979b62d066e" name="patterns-lxqt-lxqt" arch="x86_64">
  <version epoch="0" ver="20170319" rel="lp150.2.3.1"/>
  <changelog author="sflees@suse.de" date="1489665600">- Create new package from old unified patterns package</changelog>
  <changelog author="jengelh@inai.de" date="1491825600">- Use macros over old $RPM shell vars.</changelog>
  <changelog author="mvetter@suse.com" date="1505390400">- boo#1054519:
  Recommend xdg-user-dirs so standard XDG dirs are created</changelog>
  <changelog author="mvetter@suse.com" date="1508760000">- Remove deprecated lxqt-common
- Add new lxqt-themes</changelog>
  <changelog author="mvetter@suse.com" date="1526817600">- bsc#1094025: Make LXQt pattern XFCE independant:
  * Remove Recommends: xfce4-power-manager:
    we have lxqt-powermanagement
  * Remove Recommends: xfce4-screenshooter:
    lximage-qt does this via the -s option. It also has comes with
    a desktop file to have this easily available</changelog>
</package>
<package pkgid="ac2aa9f4f9e07fad683765de93992fd5c6deab1d5c3cfc2df709f035faf62322" name="pcfclock" arch="src">
  <version epoch="0" ver="0.44" rel="lp150.2.2.1"/>
  <changelog author="ro@suse.de" date="1140696000">- created package with KMP (version 0.44)</changelog>
  <changelog author="ro@suse.de" date="1143979200">- change MODULE_PARM to module_param</changelog>
  <changelog author="agruen@suse.de" date="1144670400">- Add preamble `Enhances: kernel-$flavor' workaround to KMP
  sub-packages (156513).</changelog>
  <changelog author="ro@suse.de" date="1156161600">- devfs has been removed from 2.6.18, make kernel driver compile</changelog>
  <changelog author="lrupp@suse.de" date="1175688000">- added module-init-tools to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1178884800">- fix build with current kernel sources
- use optflags for pcfdate</changelog>
  <changelog author="ro@suse.de" date="1192795200">- add udev rule to create device nodes (#335108,#276510)</changelog>
  <changelog author="ro@suse.de" date="1193227200">- revert last change, instead
- add alias char-major-181 pcfclock to /etc/modprobe.d/pcfclock
- add device nodes to /lib/udev/devices</changelog>
  <changelog author="ro@suse.de" date="1219406400">- fix build with 2.6.27</changelog>
  <changelog author="mmarek@suse.cz" date="1236600000">- renamed modprobe config to /etc/modprobe.d/50-pcfclock.conf
  (required by new module-init-tools).</changelog>
  <changelog author="aj@suse.de" date="1349697600">- Run through spec-cleaner.
- Use tmpfiles.d instead of /lib/udev/devices for device creation.</changelog>
  <changelog author="ro@suse.de" date="1425038400">- added patch pcfclock-linux-3.19.patch
  fix build with kernel 3.19
  use file_inode to get inode from file pointer
- fix build on 11.4 (skip installing tmpfile config)</changelog>
  <changelog author="ro@suse.de" date="1505131200">- added patch pcfclock-linux-4.12.patch
  to fix build with kernel 4.12
  include linux/uaccess.h instead of asm/uaccess.h starting
  with linux kernel version 4.12</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Enable parallel building. Remove redundant %clean section.
  Use %configure call.</changelog>
  <changelog author="ro@suse.de" date="1510747200">- add libelf-devel to buildrequires (should actually be required
  by kernel-devel I guess)</changelog>
</package>
<package pkgid="fdc104e57a3a7b0bb3c67e540bd9f6b08c082b8662ad7e0d9fdc35fa7b0bf08b" name="pcfclock" arch="x86_64">
  <version epoch="0" ver="0.44" rel="lp150.2.2.1"/>
  <changelog author="ro@suse.de" date="1178884800">- fix build with current kernel sources
- use optflags for pcfdate</changelog>
  <changelog author="ro@suse.de" date="1192795200">- add udev rule to create device nodes (#335108,#276510)</changelog>
  <changelog author="ro@suse.de" date="1193227200">- revert last change, instead
- add alias char-major-181 pcfclock to /etc/modprobe.d/pcfclock
- add device nodes to /lib/udev/devices</changelog>
  <changelog author="ro@suse.de" date="1219406400">- fix build with 2.6.27</changelog>
  <changelog author="mmarek@suse.cz" date="1236600000">- renamed modprobe config to /etc/modprobe.d/50-pcfclock.conf
  (required by new module-init-tools).</changelog>
  <changelog author="aj@suse.de" date="1349697600">- Run through spec-cleaner.
- Use tmpfiles.d instead of /lib/udev/devices for device creation.</changelog>
  <changelog author="ro@suse.de" date="1425038400">- added patch pcfclock-linux-3.19.patch
  fix build with kernel 3.19
  use file_inode to get inode from file pointer
- fix build on 11.4 (skip installing tmpfile config)</changelog>
  <changelog author="ro@suse.de" date="1505131200">- added patch pcfclock-linux-4.12.patch
  to fix build with kernel 4.12
  include linux/uaccess.h instead of asm/uaccess.h starting
  with linux kernel version 4.12</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Enable parallel building. Remove redundant %clean section.
  Use %configure call.</changelog>
  <changelog author="ro@suse.de" date="1510747200">- add libelf-devel to buildrequires (should actually be required
  by kernel-devel I guess)</changelog>
</package>
<package pkgid="7c6eaffcc510d384c9aaebeb3dbc17a9c9930112c5bcec288b5368d8d93a5859" name="pcfclock-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.44_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="ro@suse.de" date="1178884800">- fix build with current kernel sources
- use optflags for pcfdate</changelog>
  <changelog author="ro@suse.de" date="1192795200">- add udev rule to create device nodes (#335108,#276510)</changelog>
  <changelog author="ro@suse.de" date="1193227200">- revert last change, instead
- add alias char-major-181 pcfclock to /etc/modprobe.d/pcfclock
- add device nodes to /lib/udev/devices</changelog>
  <changelog author="ro@suse.de" date="1219406400">- fix build with 2.6.27</changelog>
  <changelog author="mmarek@suse.cz" date="1236600000">- renamed modprobe config to /etc/modprobe.d/50-pcfclock.conf
  (required by new module-init-tools).</changelog>
  <changelog author="aj@suse.de" date="1349697600">- Run through spec-cleaner.
- Use tmpfiles.d instead of /lib/udev/devices for device creation.</changelog>
  <changelog author="ro@suse.de" date="1425038400">- added patch pcfclock-linux-3.19.patch
  fix build with kernel 3.19
  use file_inode to get inode from file pointer
- fix build on 11.4 (skip installing tmpfile config)</changelog>
  <changelog author="ro@suse.de" date="1505131200">- added patch pcfclock-linux-4.12.patch
  to fix build with kernel 4.12
  include linux/uaccess.h instead of asm/uaccess.h starting
  with linux kernel version 4.12</changelog>
  <changelog author="jengelh@inai.de" date="1505131201">- Enable parallel building. Remove redundant %clean section.
  Use %configure call.</changelog>
  <changelog author="ro@suse.de" date="1510747200">- add libelf-devel to buildrequires (should actually be required
  by kernel-devel I guess)</changelog>
</package>
<package pkgid="cf5ddcf673a1475a290ef5c1a5982daff73c219bee647dd18a26dc40c901914c" name="pdns" arch="src">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="98fc04b977ffe50869ef95053d9fe704a8ea109d82d6c83640f423d7bebd4b4e" name="pdns" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="0f784ba2dadc990db80652f59829601eeac8b4b81ac09224027cc3d31b6777c9" name="pdns-backend-geoip" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="0c07161ca219e316d799d890cd97231c1fe3adc39159f6ab2ce64e31c1b6aa2c" name="pdns-backend-godbc" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="b0708038380ce66d4f6584aa5a13858edaac709c1cceadff112b90bd7c6faf49" name="pdns-backend-ldap" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="db2238e4be296ff740a4199997aba4c097a91a474f473575619b51cf026b3548" name="pdns-backend-lua" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="65ba60e3e649084a2693614f5e1c25b33b5fee87c2bfc035612047c6d086f72d" name="pdns-backend-mydns" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="8545557c349371d6888cd769a5c847b3bfeddc56be1a0b43839c767b05f042dc" name="pdns-backend-mysql" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="1372d303aaa08c88ab57fdb0833cd5bf34e093dce64d595cb0e1c4fd0ee19644" name="pdns-backend-postgresql" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="89c2c4b0896da14399902bd0407f9521f85c8df84572fd51d47f8ad809ff417d" name="pdns-backend-remote" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="5e669de2989cf5507d4af3049820c37e8cdc99fc28d691b1e1650adb18744b8e" name="pdns-backend-sqlite3" arch="x86_64">
  <version epoch="0" ver="4.1.2" rel="lp150.3.3.1"/>
  <changelog author="michael@stroeder.com" date="1469880000">- update to 4.0.1
  Bug fixes
  - #4126 Wait for the connection to the carbon server to be established
  - #4206 Don't try to deallocate empty PG statements
  - #4245 Send the correct response when queried for an NSEC directly (Kees Monshouwer)
  - #4252 Don't include bind files if length &lt;= 2 or &gt; sizeof(filename)
  - #4255 Catch runtime_error when parsing a broken MNAME
  Improvements
  - #4044 Make DNSPacket return a ComboAddress for local and remote (Aki Tuomi)
  - #4056 OpenSSL 1.1.0 support (Christian Hofstaedtler)
  - #4169 Fix typos in a logmessage and exception (Christian Hofsteadtler)
  - #4183 pdnsutil: Remove checking of ctime and always diff the changes (Hannu Ylitalo)
  - #4192 dnsreplay: Only add Client Subnet stamp when asked
  - #4250 Use toLogString() for ringAccount (Kees Monshouwer)
  Additions
  - #4133 Add limits to the size of received {A,I}XFR (CVE-2016-6172)
  - #4142 Add used filedescriptor statistic (Kees Monshouwer)</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-daemon): these libs were merged in systemd
  209 times. The build system is capable of finding either one.</changelog>
  <changelog author="adam.majer@suse.de" date="1484308800">- update to 4.0.2:
  The following security issues were fixed:
  - 2016-02: Crafted queries can cause abnormal CPU usage
  (CVE-2016-7068, boo#1018326)
  - 2016-03: Denial of service via the web server
  (CVE-2016-7072, boo#1018327)
  - 2016-04: Insufficient validation of TSIG signatures
  (CVE-2016-7073, CVE-2016-7074, boo#1018328)
  - 2016-05: Crafted zone record can cause a denial of service
  (CVE-2016-2120, boo#1018329)
  For complete changelog, see
  https://doc.powerdns.com/md/changelog/#powerdns-authoritative-server-402</changelog>
  <changelog author="adam.majer@suse.de" date="1484308801">- b854d9f.diff: revert upstream change that caused a regression
  with multiple-backends</changelog>
  <changelog author="michael@stroeder.com" date="1484654400">- update to 4.0.3 which obsoletes b854d9f.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="mrueckert@suse.de" date="1490961600">- added pdns-4.0.3_allow_dacoverride_in_capset.patch:
  Adding CAP_DAC_OVERRIDE to fix startup problems with sqlite3
  backend</changelog>
  <changelog author="michael@stroeder.com" date="1498219200">- update to 4.0.4
  - fixes ed25519 signer. This signer hashed the message before
    signing, resulting in unverifiable signatures.
  - send a notification to all slave servers after every dnsupdate
  for complete list of changes, see
  https://blog.powerdns.com/2017/06/23/powerdns-authoritative-server-4-0-4-released/</changelog>
  <changelog author="michael@stroeder.com" date="1498219201">- fixed use of pdns_protobuf</changelog>
  <changelog author="wr@rosenauer.org" date="1501416000">- This makes the schema fit storage requirements of various
  mysql/mariadb versions. pdns-4.0.4_mysql-schema-mariadb.patch
- preset uid and gid in configuration</changelog>
  <changelog author="vcizek@suse.com" date="1506686400">- Don't BuildRequire Botan 1.x which will be dropped (bsc#1055322)
  * upstream support for Botan was dropped in favor of OpenSSL, see
  https://blog.powerdns.com/2016/07/11/powerdns-authoritative-server-4-0-0-released</changelog>
  <changelog author="adam.majer@suse.de" date="1508414400">- Added pdns.keyring linked from https://dnsdist.org/install.html</changelog>
  <changelog author="jengelh@inai.de" date="1509451200">- Ensure descriptions are neutral. Remove ineffective --with-pic.
- Do not ignore errors from useradd.
- Trim idempotent %if..%endif around %package.</changelog>
  <changelog author="adam.majer@suse.de" date="1511784000">- Update to version 4.0.5:
  + fixes CVE-2017-15091: Missing check on API operations
  + Bindbackend: do not corrupt data supplied by other backends in
    getAllDomains
  + For create-slave-zone, actually add all slaves, and not only
    first n times
  + Check return value for all getTSIGKey calls.
  + Publish inactive KSK/CSK as CDNSKEY/CDS
  + Treat requestor?s payload size lower than 512 as equal to 512
  + Correctly purge entries from the caches after a transfer
  + LuaWrapper: Allow embedded NULs in strings received from Lua
  + Stubresolver: Use only recursor setting if given
  + mydnsbackend: Add getAllDomains
  + LuaJIT 2.1: Lua fallback functionality no longer uses Lua namespace
  + gpgsql: make statement names actually unique
  + API: prevent sending nameservers list and zone-level NS in rrsets</changelog>
  <changelog author="mrueckert@suse.de" date="1511784001">- package schema files in ldap subpackage</changelog>
  <changelog author="adam.majer@suse.de" date="1512043200">- Update to version 4.1.0:
  + Recursor passthrough removal. Migration plans for users of
    recursor passthrough are in documentation and available at,
    https://doc.powerdns.com/authoritative/guides/recursion.html
  + Improved performance: 4x speedup in some scenarios
  + Crypto API: DNSSEC fully configurable via RESTful API
  + Database: enhanced reconnection logic solving problems
    associated with idle disonnection from database servers.
  + Documentation improvements
  + Support for TCP Fast Open
  + Removed deprecated SOA-EDIT values: INCEPTION and INCEPTION-WEEK
- pkgconfig(krb5) is now always required for building LDAP backend
- pdns-4.0.4_mysql-schema-mariadb.patch: removed, upstreamed</changelog>
  <changelog author="michael@stroeder.com" date="1518782400">- Update to version 4.1.1:
  bug-fix only release, with fixes to the LDAP and MySQL backends,
  the pdnsutil tool, and PDNS internals</changelog>
  <changelog author="adam.majer@suse.de" date="1523620800">- geoip not available on SLE15 but protobuf support is available.</changelog>
  <changelog author="mrueckert@suse.de" date="1524484800">- add patch for upstream issue #6228
  https://patch-diff.githubusercontent.com/raw/PowerDNS/pdns/pull/6370.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 4.1.2
  - Improvements
  * API: increase serial after dnssec related updates
  * Auth: lower ?packet too short? loglevel
  * Make check-zone error on rows that have content but shouldn?t
  * Auth: avoid an isane amount of new backend connections during an axfr
  * Report unparseable data in stoul invalid_argument exception
  * Backport: recheck serial when axfr is done
  * Backport: add tcp support for alias
  - Bug Fixes
  * Auth: allocate new statements after reconnecting to postgresql
  * Auth-bindbackend: only compare ips in ismaster() (Kees Monshouwer)
  * Rather than crash, sheepishly report no file/linenum
  * Document undocumented config vars
  * Backport #6276 (auth 4.1.x): prevent cname + other data with dnsupdate
  - misc
  * Move includes around to avoid boost L conflict
  * Backport: update edns option code list
  * Auth: link dnspcap2protobuf against librt when needed
  * Fix a warning on botan &gt;= 2.5.0
  * Auth 4.1.x: unbreak build
  * Dnsreplay: bail out on a too small outgoing buffer (CVE-2018-1046 bsc#1092540)</changelog>
</package>
<package pkgid="f42cb1f2766b3b7febef04225715d8bbe7e5b054e427f4e0ba468d7d4f07297f" name="perf" arch="src">
  <version epoch="0" ver="4.12.14" rel="lp150.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1417089600">- Build hack: if util/util.h does not (yet) define _DEFAULT_SOURCE,
  we export WERROR=0, which removes -Werror from CFLAGS. Once a
  kernel lands that defines _DEFAULT_SOURCE, we fail the build in
  to remove this hack, making it a (hopefully_ short-livinging one.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420718400">- Remove build hack for kernel not building against glibc 2.20.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425902400">- Inject libdir=%{_libdir} into make calls.</changelog>
  <changelog author="tonyj@suse.com" date="1431518400">- Fix ppc64/ppc64le breakage due to libexecdir/libdir</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix build with GCC 5
  * perf-fix-branch-stack-mode-cannot-be-set.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1437048000">- Remove perf-fix-branch-stack-mode-cannot-be-set.patch (upstreamed).</changelog>
  <changelog author="dmueller@suse.com" date="1444564800">- enable numa support for aarch64</changelog>
  <changelog author="tonyj@suse.com" date="1452513600">- Support strace/data.</changelog>
  <changelog author="tonyj@suse.com" date="1459771200">- Package perf-tips as docs.
- Include support for xz compressed images</changelog>
  <changelog author="jslaby@suse.com" date="1465214400">- disable Werror completely. It breaks build due to shadow variables
  in external (perl) headers.
- add %{?_smp_mflags}</changelog>
  <changelog author="tonyj@suse.com" date="1472731200">- Fix build error (tips.txt) on Leap42.2
- Fix doc file attributes</changelog>
  <changelog author="tonyj@suse.com" date="1505476800">- Fix x86 32bit build error
  New patch: perf-provide-definition-for-einval-on-32bit.patch</changelog>
  <changelog author="tonyj@suse.com" date="1511784000">- Update power9 events (bsc#1069737)
  New patch: perf-vendor-events-powerpc-update-power9-events.patch
- Memory corruption due to zero length symbols (bsc#1068222)
  New patch: perf-symbols-fix-memory-corruption-because-of-zero-length-symbols.patc
- Incorporate fixes identified by git-fixes and their dependencies (bsc#1070010)
  New patch: perf-annotate-browser-display-titles-in-left-frame.patch
  New patch: perf-annotate-document-show-total-period-option.patch
  New patch: perf-annotate-do-not-overwrite-sample-period.patch
  New patch: perf-annotate-introduce-struct-sym_hist_entry.patch
  New patch: perf-annotate-rename-sum-to-nr_samples-in-struct-sym_hist.patch
  New patch: perf-annotate-stdio-fix-column-header-when-using-show-total-period.patch
  New patch: perf-annotate-stdio-fix-show-total-period.patch
  New patch: perf-annotate-stdio-set-enough-columns-for-show-total-period.patch
  New patch: perf-annotate-stdio-support-show-nr-samples-option.patch
  New patch: perf-annotate-store-the-sample-period-in-each-histogram-bucket.patch
  New patch: perf-annotate-tui-clarify-calculation-of-column-header-widths.patch  New patch: perf-annotate-tui-fix-column-header-when-toggling-period-percent.patch
  New patch: perf-annotate-tui-fix-show-total-period.patch
  New patch: perf-annotate-tui-set-appropriate-column-width-for-period-percent.patch
  New patch: perf-annotate-tui-use-sym_hist_entry-in-disasm_line_samples.patch
  New patch: perf-evsel-set-attr-exclude_kernel-when-probing-max-attr-precise_ip.patch
  New patch: perf-ftrace-move-setup_pager-before-opening-trace_pipe.patch
  New patch: perf-hists-pass-perf_sample-to-_symbol__inc_addr_samples.patch
  New patch: perf-jvmti-fix-linker-error-when-libelf-config-is-disabled.patch
  New patch: perf-probe-fix-kprobe-blacklist-checking-condition.patch
  New patch: perf-report-remove-unnecessary-check-in-annotate_browser_write.patch
  New patch: perf-scripts-python-fix-missing-call_path_id-in-export-to-postgresql-script.patch
  New patch: perf-test-make-list-subcommand-match-main-perf-test-numbering-matching.patch
  New patch: perf-tests-attr-fix-no-delay-test.patch
  New patch: perf-test-sdt-handle-realpath-failure.patch
  New patch: perf-tools-really-install-manpages-via-make-install-man.patch
  New patch: perf-trace-fix-off-by-one-string-allocation-problem.patch</changelog>
  <changelog author="tonyj@suse.com" date="1516276800">- powerpc: fix 'Object code reading' test (bsc#1073195)
  New patch: perf-test-powerpc-fix-object-code-reading-test.patch</changelog>
  <changelog author="tonyj@suse.com" date="1519300800">- perf vendor events: Use more flexible pattern matching for CPU
  identification for mapfile.csv (bsc#1081960)
  New patch: perf-pmu-extract-function-to-get-json-alias-map.patch
  New patch: perf-vendor-events-use-more-flexible-pattern-matching-for-cpu-identification-for-mapfile-csv.patch</changelog>
  <changelog author="tonyj@suse.com" date="1520596800">- Fix attr.exclude_kernel setting for default cycles:p (bsc#1083691)
  Regression from commit Mon Nov 27 23:45:48 UTC 2017
  New patch: perf-evsel-fix-attr-exclude_kernel-setting-for-default-cycles-p.patch
  New patch (dependent): perf-evsel-allow-asking-for-max-precise_ip-in-new_cycles.patch
- Git-fixes change (bsc#1070010)
  Fixes: perf-annotate-fix-storing-per-line-sym_hist_entry.patch (Mon Nov 27)
  New patch: perf-annotate-fix-storing-per-line-sym_hist_entry.patch</changelog>
  <changelog author="tonyj@suse.com" date="1522756800">- Add libpython support, regression from SLE12 (bsc#1082197)</changelog>
  <changelog author="tonyj@suse.com" date="1523275200">- More Power9 event updates (bsc#1056686)
  New patch: perf-vendor-events-update-power9-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1528804800">- perf script: Show hw-cache events (bsc#1096885)
  new patch: perf-script-show-hw-cache-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1532520000">- Initial checkin for SLE12-SP4.  Rebase off SLE15.
- Add JSON perf event lists for GLP (FATE#325092)
  new patch: perf-vendor-events-add-goldmont-plus-v1-event-file.patch
- Support perf core/uncore event list for Skylake server (FATE#325122)
  new patch: perf-vendor-events-add-core-event-list-for-skylake-server.patch
  new patch: perf-vendor-events-add-skylake-server-uncore-event-list.patch
  new patch: perf-jevents-support-fcmask-and-portmask.patch</changelog>
</package>
<package pkgid="100de3843b6299a0b450ac25fbfe72159657aa5f4de7549bf40c8d24e55b5043" name="perf" arch="x86_64">
  <version epoch="0" ver="4.12.14" rel="lp150.8.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1417089600">- Build hack: if util/util.h does not (yet) define _DEFAULT_SOURCE,
  we export WERROR=0, which removes -Werror from CFLAGS. Once a
  kernel lands that defines _DEFAULT_SOURCE, we fail the build in
  to remove this hack, making it a (hopefully_ short-livinging one.</changelog>
  <changelog author="dimstar@opensuse.org" date="1420718400">- Remove build hack for kernel not building against glibc 2.20.</changelog>
  <changelog author="dimstar@opensuse.org" date="1425902400">- Inject libdir=%{_libdir} into make calls.</changelog>
  <changelog author="tonyj@suse.com" date="1431518400">- Fix ppc64/ppc64le breakage due to libexecdir/libdir</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1435492800">- Fix build with GCC 5
  * perf-fix-branch-stack-mode-cannot-be-set.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1437048000">- Remove perf-fix-branch-stack-mode-cannot-be-set.patch (upstreamed).</changelog>
  <changelog author="dmueller@suse.com" date="1444564800">- enable numa support for aarch64</changelog>
  <changelog author="tonyj@suse.com" date="1452513600">- Support strace/data.</changelog>
  <changelog author="tonyj@suse.com" date="1459771200">- Package perf-tips as docs.
- Include support for xz compressed images</changelog>
  <changelog author="jslaby@suse.com" date="1465214400">- disable Werror completely. It breaks build due to shadow variables
  in external (perl) headers.
- add %{?_smp_mflags}</changelog>
  <changelog author="tonyj@suse.com" date="1472731200">- Fix build error (tips.txt) on Leap42.2
- Fix doc file attributes</changelog>
  <changelog author="tonyj@suse.com" date="1505476800">- Fix x86 32bit build error
  New patch: perf-provide-definition-for-einval-on-32bit.patch</changelog>
  <changelog author="tonyj@suse.com" date="1511784000">- Update power9 events (bsc#1069737)
  New patch: perf-vendor-events-powerpc-update-power9-events.patch
- Memory corruption due to zero length symbols (bsc#1068222)
  New patch: perf-symbols-fix-memory-corruption-because-of-zero-length-symbols.patc
- Incorporate fixes identified by git-fixes and their dependencies (bsc#1070010)
  New patch: perf-annotate-browser-display-titles-in-left-frame.patch
  New patch: perf-annotate-document-show-total-period-option.patch
  New patch: perf-annotate-do-not-overwrite-sample-period.patch
  New patch: perf-annotate-introduce-struct-sym_hist_entry.patch
  New patch: perf-annotate-rename-sum-to-nr_samples-in-struct-sym_hist.patch
  New patch: perf-annotate-stdio-fix-column-header-when-using-show-total-period.patch
  New patch: perf-annotate-stdio-fix-show-total-period.patch
  New patch: perf-annotate-stdio-set-enough-columns-for-show-total-period.patch
  New patch: perf-annotate-stdio-support-show-nr-samples-option.patch
  New patch: perf-annotate-store-the-sample-period-in-each-histogram-bucket.patch
  New patch: perf-annotate-tui-clarify-calculation-of-column-header-widths.patch  New patch: perf-annotate-tui-fix-column-header-when-toggling-period-percent.patch
  New patch: perf-annotate-tui-fix-show-total-period.patch
  New patch: perf-annotate-tui-set-appropriate-column-width-for-period-percent.patch
  New patch: perf-annotate-tui-use-sym_hist_entry-in-disasm_line_samples.patch
  New patch: perf-evsel-set-attr-exclude_kernel-when-probing-max-attr-precise_ip.patch
  New patch: perf-ftrace-move-setup_pager-before-opening-trace_pipe.patch
  New patch: perf-hists-pass-perf_sample-to-_symbol__inc_addr_samples.patch
  New patch: perf-jvmti-fix-linker-error-when-libelf-config-is-disabled.patch
  New patch: perf-probe-fix-kprobe-blacklist-checking-condition.patch
  New patch: perf-report-remove-unnecessary-check-in-annotate_browser_write.patch
  New patch: perf-scripts-python-fix-missing-call_path_id-in-export-to-postgresql-script.patch
  New patch: perf-test-make-list-subcommand-match-main-perf-test-numbering-matching.patch
  New patch: perf-tests-attr-fix-no-delay-test.patch
  New patch: perf-test-sdt-handle-realpath-failure.patch
  New patch: perf-tools-really-install-manpages-via-make-install-man.patch
  New patch: perf-trace-fix-off-by-one-string-allocation-problem.patch</changelog>
  <changelog author="tonyj@suse.com" date="1516276800">- powerpc: fix 'Object code reading' test (bsc#1073195)
  New patch: perf-test-powerpc-fix-object-code-reading-test.patch</changelog>
  <changelog author="tonyj@suse.com" date="1519300800">- perf vendor events: Use more flexible pattern matching for CPU
  identification for mapfile.csv (bsc#1081960)
  New patch: perf-pmu-extract-function-to-get-json-alias-map.patch
  New patch: perf-vendor-events-use-more-flexible-pattern-matching-for-cpu-identification-for-mapfile-csv.patch</changelog>
  <changelog author="tonyj@suse.com" date="1520596800">- Fix attr.exclude_kernel setting for default cycles:p (bsc#1083691)
  Regression from commit Mon Nov 27 23:45:48 UTC 2017
  New patch: perf-evsel-fix-attr-exclude_kernel-setting-for-default-cycles-p.patch
  New patch (dependent): perf-evsel-allow-asking-for-max-precise_ip-in-new_cycles.patch
- Git-fixes change (bsc#1070010)
  Fixes: perf-annotate-fix-storing-per-line-sym_hist_entry.patch (Mon Nov 27)
  New patch: perf-annotate-fix-storing-per-line-sym_hist_entry.patch</changelog>
  <changelog author="tonyj@suse.com" date="1522756800">- Add libpython support, regression from SLE12 (bsc#1082197)</changelog>
  <changelog author="tonyj@suse.com" date="1523275200">- More Power9 event updates (bsc#1056686)
  New patch: perf-vendor-events-update-power9-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1528804800">- perf script: Show hw-cache events (bsc#1096885)
  new patch: perf-script-show-hw-cache-events.patch</changelog>
  <changelog author="tonyj@suse.com" date="1532520000">- Initial checkin for SLE12-SP4.  Rebase off SLE15.
- Add JSON perf event lists for GLP (FATE#325092)
  new patch: perf-vendor-events-add-goldmont-plus-v1-event-file.patch
- Support perf core/uncore event list for Skylake server (FATE#325122)
  new patch: perf-vendor-events-add-core-event-list-for-skylake-server.patch
  new patch: perf-vendor-events-add-skylake-server-uncore-event-list.patch
  new patch: perf-jevents-support-fcmask-and-portmask.patch</changelog>
</package>
<package pkgid="a39884cf63733b1cafe0ef25f0f509a43e95e4d8ed94b563d1510bbcaec58f3b" name="perl-32bit" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="lp150.6.3.1"/>
  <changelog author="idonmez@suse.com" date="1424692800">- Add multiple patches for gcc5 support, tracked by RT#123784
  * perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch
  * perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch
  * perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="hsk@imb-jena.de" date="1433851200">- update to perl-5.22.0
  * several new experimental features
  * new &lt;&lt;&gt;&gt; (double-diamond) operator
  * new "\b" boundaries in REs, w.r.t. Unicode
  * non-capturing RE flag "/n"
  * Unicode 7.0
  * "defined(@array)", "defined(%hash)" are now fatal
  * unescaped literal "{" in a pattern results in deprecation warning
  * several modules updated
  * modules CGI, Module::Build no longer included
  * for a complete list of changes see perldelta.pod
- perl-5.20.0.dif changed to fit 5.22.0, and renamed to perl-5.22.0.dif
- changed patches to fit 5.22.0: perl-5.18.2-overflow.diff,
  perl-netcmdutf8.diff, perl-regexp-refoverflow.diff,
  perl-saverecontext.diff
- dropped patches (now upstream): DataDumper-no-infinite-recursion.diff,
  perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch,
  perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch,
  perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1434974400">- Reformat baselibs.conf.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- prevent bad RPM provides for Math::BigInt and DB
  (patch file perl-5.22.0_wrong_rpm_provides.diff)</changelog>
  <changelog author="bwiedemann@suse.com" date="1452168000">- fix perl_gen_filelist macro to not fail on foo.1 man page</changelog>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
</package>
<package pkgid="ed74b80ff3d6bef78cacd9010c061769f37464a7a228eb3e357643dc0f540528" name="perl" arch="src">
  <version epoch="0" ver="5.26.1" rel="lp150.6.3.1"/>
  <changelog author="idonmez@suse.com" date="1424692800">- Add multiple patches for gcc5 support, tracked by RT#123784
  * perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch
  * perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch
  * perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="hsk@imb-jena.de" date="1433851200">- update to perl-5.22.0
  * several new experimental features
  * new &lt;&lt;&gt;&gt; (double-diamond) operator
  * new "\b" boundaries in REs, w.r.t. Unicode
  * non-capturing RE flag "/n"
  * Unicode 7.0
  * "defined(@array)", "defined(%hash)" are now fatal
  * unescaped literal "{" in a pattern results in deprecation warning
  * several modules updated
  * modules CGI, Module::Build no longer included
  * for a complete list of changes see perldelta.pod
- perl-5.20.0.dif changed to fit 5.22.0, and renamed to perl-5.22.0.dif
- changed patches to fit 5.22.0: perl-5.18.2-overflow.diff,
  perl-netcmdutf8.diff, perl-regexp-refoverflow.diff,
  perl-saverecontext.diff
- dropped patches (now upstream): DataDumper-no-infinite-recursion.diff,
  perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch,
  perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch,
  perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1434974400">- Reformat baselibs.conf.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- prevent bad RPM provides for Math::BigInt and DB
  (patch file perl-5.22.0_wrong_rpm_provides.diff)</changelog>
  <changelog author="bwiedemann@suse.com" date="1452168000">- fix perl_gen_filelist macro to not fail on foo.1 man page</changelog>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
</package>
<package pkgid="7606fdd72c3448144fd8f52fb5096a5b2625931ebac14c6dba2aab2a56f5b965" name="perl" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="lp150.6.3.1"/>
  <changelog author="idonmez@suse.com" date="1424692800">- Add multiple patches for gcc5 support, tracked by RT#123784
  * perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch
  * perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch
  * perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="hsk@imb-jena.de" date="1433851200">- update to perl-5.22.0
  * several new experimental features
  * new &lt;&lt;&gt;&gt; (double-diamond) operator
  * new "\b" boundaries in REs, w.r.t. Unicode
  * non-capturing RE flag "/n"
  * Unicode 7.0
  * "defined(@array)", "defined(%hash)" are now fatal
  * unescaped literal "{" in a pattern results in deprecation warning
  * several modules updated
  * modules CGI, Module::Build no longer included
  * for a complete list of changes see perldelta.pod
- perl-5.20.0.dif changed to fit 5.22.0, and renamed to perl-5.22.0.dif
- changed patches to fit 5.22.0: perl-5.18.2-overflow.diff,
  perl-netcmdutf8.diff, perl-regexp-refoverflow.diff,
  perl-saverecontext.diff
- dropped patches (now upstream): DataDumper-no-infinite-recursion.diff,
  perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch,
  perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch,
  perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1434974400">- Reformat baselibs.conf.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- prevent bad RPM provides for Math::BigInt and DB
  (patch file perl-5.22.0_wrong_rpm_provides.diff)</changelog>
  <changelog author="bwiedemann@suse.com" date="1452168000">- fix perl_gen_filelist macro to not fail on foo.1 man page</changelog>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
</package>
<package pkgid="8cd14eb8b673c2772efc788b789fcdd7495c36cc5a2af06928d9c733282d1dfc" name="perl-Archive-Zip" arch="noarch">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1290600000">- recreated by cpanspec 1.78
  o fix deps
- noarch pkg</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@suse.com" date="1321617600">- use original .tar.gz</changelog>
  <changelog author="coolo@suse.com" date="1385467200">- updated to 1.33
  - #59102 (Spelling error in manapage) [github.com/dsteinbrunner]
  - #86600 typo fixes [github.com/dsteinbrunner]
  - #89777 Unlink temp files generated by tempFile. [PHRED]
  - Updated Perl dependency to 5.006 to reflect implicit dependencies
    in the code exposed by Perl::MinimumVersion xt test (ADAMK)
  - Fixes: #68446: Set compressed size and uncompressed size of an entry to 0
    if either of them is 0 (HAGGAI)
  - Added $VERSION to crc32 (ADAMK)
  - Add decryption support
  - More fixes by HAGGAI, which he still doesn't detail in Changes
  - Various fixes by HAGGAI, which he has not yet provided details on:
  - Experimental Unicode in file/dir names</changelog>
  <changelog author="coolo@suse.com" date="1386590400">- updated to 1.34
  - Restore svn history from svn.ali.as (thanks H. Merijn Brand)
  - #90854 Test 17 in t/03_ex.t is failing
  - Allow reading ZIP from seekable streams (like PerlIO::Scalar)
  - RT#75197
  - Fixes: #76780: Cannot create member called "0" with addString (HAGGAI)</changelog>
  <changelog author="coolo@suse.com" date="1391947200">- updated to 1.37
  - Need newer Test::More to support done_testing() [thaljef]
  - Fix error in version update with 1.35 [RT #91744]
  - fallback on copy if move gives permission denied [github.com/plicease]</changelog>
  <changelog author="coolo@suse.com" date="1428926400">- updated to 1.46
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.46 Tue 24 Mar 2015
  - "CRC or size mismatch" when extracting member second time [github/AGWA github/pwr22]
  1.45 Mon 26 Jan 2015
  - FreeBSD unzip sets $? to 0 for empty zip file [github.com/revhippie]
  1.44 Fri 23 Jan 2015
  - Win32 with ZIP executable cannot create temp file [github.com/revhippie]
  1.43 Wed 14 Jan 2015
  - Restore 101374 - failing tests were not regressions.
  1.42 Sun 11 Jan 2015
  - Revert 101374, caused tester regression
  - https://rt.cpan.org/Public/Bug/Display.html?id=101240 [cpan/PMQS]
  1.41 Fri 09 Jan 2015
  - https://rt.cpan.org/Public/Bug/Display.html?id=101374 [zefram]
  1.40 Sun 04 Jan 2015
  - https://rt.cpan.org/Public/Bug/Display.html?id=92205 [cpan/PMQS]
  - https://rt.cpan.org/Public/Bug/Display.html?id=101092 [cpan/PMQS]
  1.39 Tue 21 Oct 2014
  - store test data in temp dirs to fix parallelism and shuffling
    [Graham Knop]
  1.38 Tue 02 Sep 2014
  - Setting unicode flag for each member when using $Archive::Zip::UNICODE [github.com/lackas]
    https://rt.cpan.org/Ticket/Display.html?id=83367</changelog>
  <changelog author="coolo@suse.com" date="1434888000">- updated to 1.48
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.48 Thu 18 Jun 2015
  - Wrap skip in a SKIP: block [github/plicease]
  1.47 Wed 17 Jun 2015
  - zip file with a deflated directory cannot be written out again [github/ntyni]
  - add missing test data to MANIFEST</changelog>
  <changelog author="coolo@suse.com" date="1438430400">- updated to 1.49
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.49 Fri 31 Jul 2015
  - Fails on unseekable file handle after desiredCompressionLevel(), RT #54827
  - Upgrade build tools to avoid tar warnings, RT #105547</changelog>
  <changelog author="coolo@suse.com" date="1440849600">- updated to 1.50
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.50 Tue 25 Aug 2015
  - Fix t/08_readmember_record_sep.t for Win32 [github/pauloscustodio]</changelog>
  <changelog author="coolo@suse.com" date="1442923200">- updated to 1.51
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.51 Tue 22 Sep 2015
  - Compare vs filename checksum in crc32 script [github/talisein]</changelog>
  <changelog author="coolo@suse.com" date="1443268800">- updated to 1.53
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.53 Wed 22 Sep 2015
  - rt.cpan.org #107268 - Archive-Zip-1.52.tar.gz is (nearly) empty
    Thanks to SREZIC for the spot on my dad brain sleep schedule error
    Creating the dist on OS X caused 'Numeric user ID too largeNumeric group ID too large'
  1.52 Tue 22 Sep 2015
  - rt.cpan.org #105902, thanks HMBRAND</changelog>
  <changelog author="coolo@suse.com" date="1449316800">- updated to 1.55
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.55 Fri 04 Dec 2015
  - rt.cpan.org #110064 - fix empty archive issue with OS X gnu tar
  1.54 Wed 02 Dec 2015
  - Ensure filehandles created by Archive::Zip::tempFile are closed [github/antoniomonty]</changelog>
  <changelog author="coolo@suse.com" date="1451131200">- updated to 1.56
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.56 Thu 17 Dec 2015
  - fix $Archive::Zip::UNICODE issues [github/xlat]
  - on MSWin32 in methods addFile, addDirectory, addTree: the externalFileName was
    used in place of newName
  - make sure that file names are utf8 in memberNames
  - use Encode on all platform</changelog>
  <changelog author="coolo@suse.com" date="1459771200">- updated to 1.57
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.57 Fri 1 Apr 2016
  - RT# 106548,106089,105330,111541 [github/ozcoder]</changelog>
  <changelog author="coolo@suse.com" date="1470225600">- updated to 1.58
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.58 Tue 2 Aug 2016
  - avoid relying on . being in @INC [github/karenetheridge]
  - update MANIFEST.SKIP [github/haarg]</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to 1.59
  see /usr/share/doc/packages/perl-Archive-Zip/Changes</changelog>
  <changelog author="coolo@suse.com" date="1513771200">- updated to 1.60
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.60 Tue 19 Dec 2017
  - RT 123913 Wrong shell bang in examples/selfex.pl</changelog>
  <changelog author="pgajdos@suse.com" date="1533729600">- security update:
  * CVE-2018-10860 [bsc#1099497]
    + perl-Archive-Zip-CVE-2018-10860.patch</changelog>
</package>
<package pkgid="e983b8ab17fcd23b48a9eb04749905a280e0f1b98ebe7921d372b99d5f541cd0" name="perl-Archive-Zip" arch="src">
  <version epoch="0" ver="1.60" rel="lp150.2.3.1"/>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="chris@computersalat.de" date="1290600000">- recreated by cpanspec 1.78
  o fix deps
- noarch pkg</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@suse.com" date="1321617600">- use original .tar.gz</changelog>
  <changelog author="coolo@suse.com" date="1385467200">- updated to 1.33
  - #59102 (Spelling error in manapage) [github.com/dsteinbrunner]
  - #86600 typo fixes [github.com/dsteinbrunner]
  - #89777 Unlink temp files generated by tempFile. [PHRED]
  - Updated Perl dependency to 5.006 to reflect implicit dependencies
    in the code exposed by Perl::MinimumVersion xt test (ADAMK)
  - Fixes: #68446: Set compressed size and uncompressed size of an entry to 0
    if either of them is 0 (HAGGAI)
  - Added $VERSION to crc32 (ADAMK)
  - Add decryption support
  - More fixes by HAGGAI, which he still doesn't detail in Changes
  - Various fixes by HAGGAI, which he has not yet provided details on:
  - Experimental Unicode in file/dir names</changelog>
  <changelog author="coolo@suse.com" date="1386590400">- updated to 1.34
  - Restore svn history from svn.ali.as (thanks H. Merijn Brand)
  - #90854 Test 17 in t/03_ex.t is failing
  - Allow reading ZIP from seekable streams (like PerlIO::Scalar)
  - RT#75197
  - Fixes: #76780: Cannot create member called "0" with addString (HAGGAI)</changelog>
  <changelog author="coolo@suse.com" date="1391947200">- updated to 1.37
  - Need newer Test::More to support done_testing() [thaljef]
  - Fix error in version update with 1.35 [RT #91744]
  - fallback on copy if move gives permission denied [github.com/plicease]</changelog>
  <changelog author="coolo@suse.com" date="1428926400">- updated to 1.46
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.46 Tue 24 Mar 2015
  - "CRC or size mismatch" when extracting member second time [github/AGWA github/pwr22]
  1.45 Mon 26 Jan 2015
  - FreeBSD unzip sets $? to 0 for empty zip file [github.com/revhippie]
  1.44 Fri 23 Jan 2015
  - Win32 with ZIP executable cannot create temp file [github.com/revhippie]
  1.43 Wed 14 Jan 2015
  - Restore 101374 - failing tests were not regressions.
  1.42 Sun 11 Jan 2015
  - Revert 101374, caused tester regression
  - https://rt.cpan.org/Public/Bug/Display.html?id=101240 [cpan/PMQS]
  1.41 Fri 09 Jan 2015
  - https://rt.cpan.org/Public/Bug/Display.html?id=101374 [zefram]
  1.40 Sun 04 Jan 2015
  - https://rt.cpan.org/Public/Bug/Display.html?id=92205 [cpan/PMQS]
  - https://rt.cpan.org/Public/Bug/Display.html?id=101092 [cpan/PMQS]
  1.39 Tue 21 Oct 2014
  - store test data in temp dirs to fix parallelism and shuffling
    [Graham Knop]
  1.38 Tue 02 Sep 2014
  - Setting unicode flag for each member when using $Archive::Zip::UNICODE [github.com/lackas]
    https://rt.cpan.org/Ticket/Display.html?id=83367</changelog>
  <changelog author="coolo@suse.com" date="1434888000">- updated to 1.48
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.48 Thu 18 Jun 2015
  - Wrap skip in a SKIP: block [github/plicease]
  1.47 Wed 17 Jun 2015
  - zip file with a deflated directory cannot be written out again [github/ntyni]
  - add missing test data to MANIFEST</changelog>
  <changelog author="coolo@suse.com" date="1438430400">- updated to 1.49
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.49 Fri 31 Jul 2015
  - Fails on unseekable file handle after desiredCompressionLevel(), RT #54827
  - Upgrade build tools to avoid tar warnings, RT #105547</changelog>
  <changelog author="coolo@suse.com" date="1440849600">- updated to 1.50
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.50 Tue 25 Aug 2015
  - Fix t/08_readmember_record_sep.t for Win32 [github/pauloscustodio]</changelog>
  <changelog author="coolo@suse.com" date="1442923200">- updated to 1.51
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.51 Tue 22 Sep 2015
  - Compare vs filename checksum in crc32 script [github/talisein]</changelog>
  <changelog author="coolo@suse.com" date="1443268800">- updated to 1.53
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.53 Wed 22 Sep 2015
  - rt.cpan.org #107268 - Archive-Zip-1.52.tar.gz is (nearly) empty
    Thanks to SREZIC for the spot on my dad brain sleep schedule error
    Creating the dist on OS X caused 'Numeric user ID too largeNumeric group ID too large'
  1.52 Tue 22 Sep 2015
  - rt.cpan.org #105902, thanks HMBRAND</changelog>
  <changelog author="coolo@suse.com" date="1449316800">- updated to 1.55
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.55 Fri 04 Dec 2015
  - rt.cpan.org #110064 - fix empty archive issue with OS X gnu tar
  1.54 Wed 02 Dec 2015
  - Ensure filehandles created by Archive::Zip::tempFile are closed [github/antoniomonty]</changelog>
  <changelog author="coolo@suse.com" date="1451131200">- updated to 1.56
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.56 Thu 17 Dec 2015
  - fix $Archive::Zip::UNICODE issues [github/xlat]
  - on MSWin32 in methods addFile, addDirectory, addTree: the externalFileName was
    used in place of newName
  - make sure that file names are utf8 in memberNames
  - use Encode on all platform</changelog>
  <changelog author="coolo@suse.com" date="1459771200">- updated to 1.57
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.57 Fri 1 Apr 2016
  - RT# 106548,106089,105330,111541 [github/ozcoder]</changelog>
  <changelog author="coolo@suse.com" date="1470225600">- updated to 1.58
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.58 Tue 2 Aug 2016
  - avoid relying on . being in @INC [github/karenetheridge]
  - update MANIFEST.SKIP [github/haarg]</changelog>
  <changelog author="coolo@suse.com" date="1471003200">- updated to 1.59
  see /usr/share/doc/packages/perl-Archive-Zip/Changes</changelog>
  <changelog author="coolo@suse.com" date="1513771200">- updated to 1.60
  see /usr/share/doc/packages/perl-Archive-Zip/Changes
  1.60 Tue 19 Dec 2017
  - RT 123913 Wrong shell bang in examples/selfex.pl</changelog>
  <changelog author="pgajdos@suse.com" date="1533729600">- security update:
  * CVE-2018-10860 [bsc#1099497]
    + perl-Archive-Zip-CVE-2018-10860.patch</changelog>
</package>
<package pkgid="9ab27f587ee4fc6fe03a413e86c678727f01d2a748ab6a3f0d73c7fe36c6011c" name="perl-Bootloader" arch="src">
  <version epoch="0" ver="0.921" rel="lp150.3.3.1"/>
  <changelog author="snwint@suse.com" date="1450440000">- added support for modifying default boot options
- 0.902</changelog>
  <changelog author="snwint@suse.com" date="1450440001">- improve add/del-option scripts
- rename uboot to u-boot
- 0.903</changelog>
  <changelog author="snwint@suse.com" date="1453464000">- fix typo
- Fix dtb searching
- 0.904</changelog>
  <changelog author="snwint@suse.com" date="1454932800">- Fix parsing of /etc/default/grub
- 0.905</changelog>
  <changelog author="snwint@suse.com" date="1454932801">- fix misleading error message (bsc#965499)
- 0.906</changelog>
  <changelog author="snwint@suse.com" date="1457006400">- grub2-efi: Allow fallback to removable booting
- grub2-efi: Make 32bit arm be a wildcard match
- 0.907</changelog>
  <changelog author="snwint@suse.com" date="1458043200">- Skip grub2-install on PowerNV
- 0.908</changelog>
  <changelog author="snwint@suse.com" date="1459252800">- Set GRUB_GFXPAYLOAD based on gfxterm
- Fix syntax errors in grub2/install
- 0.910</changelog>
  <changelog author="snwint@suse.com" date="1459425600">- Revert "Set GRUB_GFXPAYLOAD based on gfxterm"
- 0.911</changelog>
  <changelog author="snwint@suse.com" date="1461240000">- we don't need grub_installdevice on s390x (bsc#976466)
- 0.912</changelog>
  <changelog author="snwint@suse.com" date="1462968000">- Don't install grub2-efi during installation (bsc#979145)
- 0.913</changelog>
  <changelog author="snwint@suse.com" date="1469188800">- ensure trusted boot setting is used (fate#316553)
- 0.914</changelog>
  <changelog author="snwint@suse.com" date="1469188801">- also clear LC_ALL when setting locale
- run grub in RC_LANG locale taken from sysconfig (bsc#985946)
- 0.915</changelog>
  <changelog author="snwint@suse.com" date="1476792000">- run shim-install only if secure boot is set to yes (bsc#985567)
- 0.916</changelog>
  <changelog author="snwint@suse.com" date="1485259200">- grub2: drop trailing space from saved entry
- grub2: parse initrd (bsc#1007335)
- 0.917</changelog>
  <changelog author="mchang@suse.com" date="1493380800">- merge gh#openSUSE/perl-bootloader#112
- implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
  fate#315831)
- 0.918</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/perl-bootloader#113
- fix device name check (bsc#1033634, bsc#1033776)
- 0.919</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.de" date="1530792000">- merge gh#openSUSE/perl-bootloader#115
- Avoid undefined var warning
- 0.920</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530792001">- merge gh#openSUSE/perl-bootloader#116
- add --get-option to pbl (bsc#1033776, bsc#1050349)
- 0.921</changelog>
</package>
<package pkgid="05bb61819eb5b613c7268466f48ef6933d41f93de2f8ff56470267590fc62bd4" name="perl-Bootloader" arch="x86_64">
  <version epoch="0" ver="0.921" rel="lp150.3.3.1"/>
  <changelog author="snwint@suse.com" date="1450440000">- added support for modifying default boot options
- 0.902</changelog>
  <changelog author="snwint@suse.com" date="1450440001">- improve add/del-option scripts
- rename uboot to u-boot
- 0.903</changelog>
  <changelog author="snwint@suse.com" date="1453464000">- fix typo
- Fix dtb searching
- 0.904</changelog>
  <changelog author="snwint@suse.com" date="1454932800">- Fix parsing of /etc/default/grub
- 0.905</changelog>
  <changelog author="snwint@suse.com" date="1454932801">- fix misleading error message (bsc#965499)
- 0.906</changelog>
  <changelog author="snwint@suse.com" date="1457006400">- grub2-efi: Allow fallback to removable booting
- grub2-efi: Make 32bit arm be a wildcard match
- 0.907</changelog>
  <changelog author="snwint@suse.com" date="1458043200">- Skip grub2-install on PowerNV
- 0.908</changelog>
  <changelog author="snwint@suse.com" date="1459252800">- Set GRUB_GFXPAYLOAD based on gfxterm
- Fix syntax errors in grub2/install
- 0.910</changelog>
  <changelog author="snwint@suse.com" date="1459425600">- Revert "Set GRUB_GFXPAYLOAD based on gfxterm"
- 0.911</changelog>
  <changelog author="snwint@suse.com" date="1461240000">- we don't need grub_installdevice on s390x (bsc#976466)
- 0.912</changelog>
  <changelog author="snwint@suse.com" date="1462968000">- Don't install grub2-efi during installation (bsc#979145)
- 0.913</changelog>
  <changelog author="snwint@suse.com" date="1469188800">- ensure trusted boot setting is used (fate#316553)
- 0.914</changelog>
  <changelog author="snwint@suse.com" date="1469188801">- also clear LC_ALL when setting locale
- run grub in RC_LANG locale taken from sysconfig (bsc#985946)
- 0.915</changelog>
  <changelog author="snwint@suse.com" date="1476792000">- run shim-install only if secure boot is set to yes (bsc#985567)
- 0.916</changelog>
  <changelog author="snwint@suse.com" date="1485259200">- grub2: drop trailing space from saved entry
- grub2: parse initrd (bsc#1007335)
- 0.917</changelog>
  <changelog author="mchang@suse.com" date="1493380800">- merge gh#openSUSE/perl-bootloader#112
- implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
  fate#315831)
- 0.918</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/perl-bootloader#113
- fix device name check (bsc#1033634, bsc#1033776)
- 0.919</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.de" date="1530792000">- merge gh#openSUSE/perl-bootloader#115
- Avoid undefined var warning
- 0.920</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530792001">- merge gh#openSUSE/perl-bootloader#116
- add --get-option to pbl (bsc#1033776, bsc#1050349)
- 0.921</changelog>
</package>
<package pkgid="9cd7f12cf34891699dc522ec33fe094458ce7e32fe47f2e5d49b4d819b9b0908" name="perl-Bootloader-YAML" arch="x86_64">
  <version epoch="0" ver="0.921" rel="lp150.3.3.1"/>
  <changelog author="snwint@suse.com" date="1450440000">- added support for modifying default boot options
- 0.902</changelog>
  <changelog author="snwint@suse.com" date="1450440001">- improve add/del-option scripts
- rename uboot to u-boot
- 0.903</changelog>
  <changelog author="snwint@suse.com" date="1453464000">- fix typo
- Fix dtb searching
- 0.904</changelog>
  <changelog author="snwint@suse.com" date="1454932800">- Fix parsing of /etc/default/grub
- 0.905</changelog>
  <changelog author="snwint@suse.com" date="1454932801">- fix misleading error message (bsc#965499)
- 0.906</changelog>
  <changelog author="snwint@suse.com" date="1457006400">- grub2-efi: Allow fallback to removable booting
- grub2-efi: Make 32bit arm be a wildcard match
- 0.907</changelog>
  <changelog author="snwint@suse.com" date="1458043200">- Skip grub2-install on PowerNV
- 0.908</changelog>
  <changelog author="snwint@suse.com" date="1459252800">- Set GRUB_GFXPAYLOAD based on gfxterm
- Fix syntax errors in grub2/install
- 0.910</changelog>
  <changelog author="snwint@suse.com" date="1459425600">- Revert "Set GRUB_GFXPAYLOAD based on gfxterm"
- 0.911</changelog>
  <changelog author="snwint@suse.com" date="1461240000">- we don't need grub_installdevice on s390x (bsc#976466)
- 0.912</changelog>
  <changelog author="snwint@suse.com" date="1462968000">- Don't install grub2-efi during installation (bsc#979145)
- 0.913</changelog>
  <changelog author="snwint@suse.com" date="1469188800">- ensure trusted boot setting is used (fate#316553)
- 0.914</changelog>
  <changelog author="snwint@suse.com" date="1469188801">- also clear LC_ALL when setting locale
- run grub in RC_LANG locale taken from sysconfig (bsc#985946)
- 0.915</changelog>
  <changelog author="snwint@suse.com" date="1476792000">- run shim-install only if secure boot is set to yes (bsc#985567)
- 0.916</changelog>
  <changelog author="snwint@suse.com" date="1485259200">- grub2: drop trailing space from saved entry
- grub2: parse initrd (bsc#1007335)
- 0.917</changelog>
  <changelog author="mchang@suse.com" date="1493380800">- merge gh#openSUSE/perl-bootloader#112
- implemented trusted boot/TPM support in UEFI mode (bsc#1036735,
  fate#315831)
- 0.918</changelog>
  <changelog author="wfeldt@opensuse.org" date="1494590400">- merge gh#openSUSE/perl-bootloader#113
- fix device name check (bsc#1033634, bsc#1033776)
- 0.919</changelog>
  <changelog author="kukuk@suse.de" date="1522065600">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="bwiedemann@suse.de" date="1530792000">- merge gh#openSUSE/perl-bootloader#115
- Avoid undefined var warning
- 0.920</changelog>
  <changelog author="wfeldt@opensuse.org" date="1530792001">- merge gh#openSUSE/perl-bootloader#116
- add --get-option to pbl (bsc#1033776, bsc#1050349)
- 0.921</changelog>
</package>
<package pkgid="c74b3975e702e5202f9b80397b77944172556f04c2f9d9505f56c7cf805d845b" name="perl-Finance-Quote" arch="noarch">
  <version epoch="0" ver="1.47" rel="lp150.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1240488000">- Updated to version 1.16:
  * Fixed or updated site layout parsing of:
    Bourso, Morningstar, AEX, ITE is now RZR, ZA, Goldmoney,
    Ashwin, Finanzpartner.
  * New currency lookup support.
  * Fixed 12:XXpm formatted time handling.
- Require all needed perl modules (bnc#496738).</changelog>
  <changelog author="sbrabec@suse.cz" date="1255953600">- Updated to version 1.17 (bnc498310#c4):
  * Site layout updates: Cominvest, Yahoo (currencies adapted to
    yahoo denomination), ASX.
  * Fixes for: Yahoo Europe, Goldmoney, IndiaMutual, GBp, possible
    wrong year range in Yahoo.
  * New support for: Hungarian stocks, Goldmoney Platinum.
  * Removed: Broken futures support for AEX.</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="sbrabec@suse.cz" date="1277121600">- Fix of LeRevenu module crash due to a change on lerevenu.com web
  site (bnc#555687).</changelog>
  <changelog author="coolo@novell.com" date="1287489600">- add perl as explicit buildrequire</changelog>
  <changelog author="coolo@novell.com" date="1291032000">- remove /var/adm/perl-modules</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@suse.com" date="1321617600">- use original .tar.gz</changelog>
  <changelog author="sbrabec@suse.cz" date="1326715200">- Updated to the current upstream GIT snapshot (many updates for
  server changes).
- Added fixes from upstream bug tracker:
  * Fix GoldMoney server changes, add palladium (CPAN#64897).
  * Rewrite Finance Canada after server changes (CPAN#57401).
  * Partial rewrite ov VWD due to server changes (CPAN#62619).
  * Fix Cdnfundlibrary to retrieve newest NAV (CPAN#66235).
  * Fix use of /tmp file in IndiaMutual (CPAN#70690).
  * New modules:
  * Comdirect (CPAN#61750)
  * Stooq (CPAN#64474)
  * FTFunds (CPAN#65269)
- Added Fedora fix:
  * Fix TIAA-CREF (Redhat#668935).
- Added all Debian fixes.
- Yahoo fixes ported to the upstream GIT.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359115200">- Update to version 1.18 (bnc#800797):
  * many updates for server changes
  * new modules
  * code cleanup
- Drop perl-Finance-Quote-fedora-tiaa-cref.patch: New code is a
  different implementation and it supports institutional funds as
  well.
- Update Requires.</changelog>
  <changelog author="coolo@suse.com" date="1406548800">- update to 1.35:
  * BUGFIX: VWD - currency returned.
  1.34      2014-06-15 21:30:03+02:00 Europe/Brussels
  * VWD adapted to recent website change.
  1.33      2014-06-01 11:24:24+02:00 Europe/Brussels
  * BUGFIX: yahoo_json never returns currency. so don't set a default.
    yahoo_json returned current timestamp instead of quote date.
  1.32      2014-05-18 21:55:12+02:00 Europe/Brussels
  * return "symbol" for yahoo_json module
  * allow to retrieve ISIN codes with VWD module
  1.31      2014-05-04 22:56:45+02:00 Europe/Brussels
  * Case mismatch in ZA_UnitTrusts pod
  1.30      2014-05-04 21:56:34+02:00 Europe/Brussels
  * Bourso.pm works on current website changes. Thanks to Guillaume
  * New module CSE.pm by Hiranya Samarasekera. Covers Colombo Stock
    Exchange (CSE) in Sri Lanka.
  1.29      2014-04-08 08:28:25+02:00 Europe/Brussels
  * New module za_unittrusts. kudos to Rolf Endres.
  * Indiamutual patched to current website. kudos to Vinay S Shastry.
  1.28      2014-03-16 12:05:19+01:00 Europe/Brussels
  * Removed some unnecessary dependencies
  1.27      2014-03-05 15:04:22+01:00 Europe/Brussels
  * New module YahooJSON added (Abhijit Kshirsagar)
  * mtgox.t should not create errors when ONLINE_TEST is not defined
- remove all patches no longer applying (as maintainer didn't care for 18 months
  and this module is important to be half way fresh):
    perl-Finance-Quote-57401-financecanada.patch
    perl-Finance-Quote-61750-comdirect.patch
    perl-Finance-Quote-62619-vwd.patch
    perl-Finance-Quote-64474-stooq.patch
    perl-Finance-Quote-65269-ftfunds.patch
    perl-Finance-Quote-70690-IndiaMutual-temp-del.patch
    perl-Finance-Quote-70690-IndiaMutual-temp.patch
    perl-Finance-Quote-LeRevenu.patch
    perl-Finance-Quote-debian-08_deka.patch
    perl-Finance-Quote-fsf-address.patch
    perl-Finance-Quote-goldmoney-decimal-point.patch
- reworked spec file to look a bit more like a standard perl package</changelog>
  <changelog author="coolo@suse.com" date="1406548801">- ignore Mozilla:CA</changelog>
  <changelog author="coolo@suse.com" date="1429444800">- updated to 1.37 bnc#955055
  see /usr/share/doc/packages/perl-Finance-Quote/ChangeLog.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add perl(CGI) BuildRequires: needed to be able to pass the
  test suite with Perl 5.22.</changelog>
  <changelog author="jcnengel@gmail.com" date="1501848000">- Update to 1.38
  * module updates: tiaacref, yahooJSON, FTfunds, MStaruk,
    USFedBonds, GoldMoney
  * new modules: fidelityfixed (Peter Ratzlaff), yahooYQL
  * removed modules: MTGox
  * more tests: yahoo_speed.t, tiaacref.t
- Drop perl-Finance-Quote-64897-0001-adopted-to-site-changes.patch,
  perl-Finance-Quote-64897-0002-support-palladium-lookup.patch,
  perl-Finance-Quote-goldmoney-decimal-point.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1521806400">- Update to version 1.47 (boo#1077300):
  * Yahoojson: module adapted to new URL and returned json
  * Added currencies for .SA (Brazil) and .TO (Canada/Toronto)
    markets
  * Added currency for .DE market
  * BUGFIX in currency determination regex
  * BUG resolved: removed time from $last_refresh when markets are
    open
  * added AlphaVantage module (Matthew Patterson)
  * some other module changes: yahoojson, Morningstar, Bourso, TSX
    (not working)
  * Use AlphaVantage for currency quotes instead of Yahoo
- Drop perl-Finance-Quote-debian-04_deka.patch (module rewritten).</changelog>
  <changelog author="astieger@suse.com" date="1528804800">- Change package license to GPL-3.0-or-later:
  MorningstarJP.pm carries this license</changelog>
</package>
<package pkgid="9ac81100c85ac67e8656988caed7166caae09b02017037270a56fcb713cbff4e" name="perl-Finance-Quote" arch="src">
  <version epoch="0" ver="1.47" rel="lp150.2.3.1"/>
  <changelog author="sbrabec@suse.cz" date="1187870400">- New SuSE package, version 1.13 (#242504).</changelog>
  <changelog author="sbrabec@suse.cz" date="1224072000">- Updated to version 1.14:
  * Added support for Finanzpartner, Cominvest, TSX.
  * Fixed or updated site layout parsing of TIAA CREF,
    Stockhouse Canada, DWS, VWD, AEX, Yahoo Brasil, SEB,
    Association of Mutual Funds in India.
  * Fixes.
  * Reorganization of test cases.</changelog>
  <changelog author="sbrabec@suse.cz" date="1225108800">- Updated to version 1.15:
  * IndiaMutual: Fix symbol not set it module.
  * isoTime - make sure $hours and $mins are treated as numbers,
    use sprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1240488000">- Updated to version 1.16:
  * Fixed or updated site layout parsing of:
    Bourso, Morningstar, AEX, ITE is now RZR, ZA, Goldmoney,
    Ashwin, Finanzpartner.
  * New currency lookup support.
  * Fixed 12:XXpm formatted time handling.
- Require all needed perl modules (bnc#496738).</changelog>
  <changelog author="sbrabec@suse.cz" date="1255953600">- Updated to version 1.17 (bnc498310#c4):
  * Site layout updates: Cominvest, Yahoo (currencies adapted to
    yahoo denomination), ASX.
  * Fixes for: Yahoo Europe, Goldmoney, IndiaMutual, GBp, possible
    wrong year range in Yahoo.
  * New support for: Hungarian stocks, Goldmoney Platinum.
  * Removed: Broken futures support for AEX.</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="sbrabec@suse.cz" date="1277121600">- Fix of LeRevenu module crash due to a change on lerevenu.com web
  site (bnc#555687).</changelog>
  <changelog author="coolo@novell.com" date="1287489600">- add perl as explicit buildrequire</changelog>
  <changelog author="coolo@novell.com" date="1291032000">- remove /var/adm/perl-modules</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@suse.com" date="1321617600">- use original .tar.gz</changelog>
  <changelog author="sbrabec@suse.cz" date="1326715200">- Updated to the current upstream GIT snapshot (many updates for
  server changes).
- Added fixes from upstream bug tracker:
  * Fix GoldMoney server changes, add palladium (CPAN#64897).
  * Rewrite Finance Canada after server changes (CPAN#57401).
  * Partial rewrite ov VWD due to server changes (CPAN#62619).
  * Fix Cdnfundlibrary to retrieve newest NAV (CPAN#66235).
  * Fix use of /tmp file in IndiaMutual (CPAN#70690).
  * New modules:
  * Comdirect (CPAN#61750)
  * Stooq (CPAN#64474)
  * FTFunds (CPAN#65269)
- Added Fedora fix:
  * Fix TIAA-CREF (Redhat#668935).
- Added all Debian fixes.
- Yahoo fixes ported to the upstream GIT.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359115200">- Update to version 1.18 (bnc#800797):
  * many updates for server changes
  * new modules
  * code cleanup
- Drop perl-Finance-Quote-fedora-tiaa-cref.patch: New code is a
  different implementation and it supports institutional funds as
  well.
- Update Requires.</changelog>
  <changelog author="coolo@suse.com" date="1406548800">- update to 1.35:
  * BUGFIX: VWD - currency returned.
  1.34      2014-06-15 21:30:03+02:00 Europe/Brussels
  * VWD adapted to recent website change.
  1.33      2014-06-01 11:24:24+02:00 Europe/Brussels
  * BUGFIX: yahoo_json never returns currency. so don't set a default.
    yahoo_json returned current timestamp instead of quote date.
  1.32      2014-05-18 21:55:12+02:00 Europe/Brussels
  * return "symbol" for yahoo_json module
  * allow to retrieve ISIN codes with VWD module
  1.31      2014-05-04 22:56:45+02:00 Europe/Brussels
  * Case mismatch in ZA_UnitTrusts pod
  1.30      2014-05-04 21:56:34+02:00 Europe/Brussels
  * Bourso.pm works on current website changes. Thanks to Guillaume
  * New module CSE.pm by Hiranya Samarasekera. Covers Colombo Stock
    Exchange (CSE) in Sri Lanka.
  1.29      2014-04-08 08:28:25+02:00 Europe/Brussels
  * New module za_unittrusts. kudos to Rolf Endres.
  * Indiamutual patched to current website. kudos to Vinay S Shastry.
  1.28      2014-03-16 12:05:19+01:00 Europe/Brussels
  * Removed some unnecessary dependencies
  1.27      2014-03-05 15:04:22+01:00 Europe/Brussels
  * New module YahooJSON added (Abhijit Kshirsagar)
  * mtgox.t should not create errors when ONLINE_TEST is not defined
- remove all patches no longer applying (as maintainer didn't care for 18 months
  and this module is important to be half way fresh):
    perl-Finance-Quote-57401-financecanada.patch
    perl-Finance-Quote-61750-comdirect.patch
    perl-Finance-Quote-62619-vwd.patch
    perl-Finance-Quote-64474-stooq.patch
    perl-Finance-Quote-65269-ftfunds.patch
    perl-Finance-Quote-70690-IndiaMutual-temp-del.patch
    perl-Finance-Quote-70690-IndiaMutual-temp.patch
    perl-Finance-Quote-LeRevenu.patch
    perl-Finance-Quote-debian-08_deka.patch
    perl-Finance-Quote-fsf-address.patch
    perl-Finance-Quote-goldmoney-decimal-point.patch
- reworked spec file to look a bit more like a standard perl package</changelog>
  <changelog author="coolo@suse.com" date="1406548801">- ignore Mozilla:CA</changelog>
  <changelog author="coolo@suse.com" date="1429444800">- updated to 1.37 bnc#955055
  see /usr/share/doc/packages/perl-Finance-Quote/ChangeLog.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add perl(CGI) BuildRequires: needed to be able to pass the
  test suite with Perl 5.22.</changelog>
  <changelog author="jcnengel@gmail.com" date="1501848000">- Update to 1.38
  * module updates: tiaacref, yahooJSON, FTfunds, MStaruk,
    USFedBonds, GoldMoney
  * new modules: fidelityfixed (Peter Ratzlaff), yahooYQL
  * removed modules: MTGox
  * more tests: yahoo_speed.t, tiaacref.t
- Drop perl-Finance-Quote-64897-0001-adopted-to-site-changes.patch,
  perl-Finance-Quote-64897-0002-support-palladium-lookup.patch,
  perl-Finance-Quote-goldmoney-decimal-point.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1521806400">- Update to version 1.47 (boo#1077300):
  * Yahoojson: module adapted to new URL and returned json
  * Added currencies for .SA (Brazil) and .TO (Canada/Toronto)
    markets
  * Added currency for .DE market
  * BUGFIX in currency determination regex
  * BUG resolved: removed time from $last_refresh when markets are
    open
  * added AlphaVantage module (Matthew Patterson)
  * some other module changes: yahoojson, Morningstar, Bourso, TSX
    (not working)
  * Use AlphaVantage for currency quotes instead of Yahoo
- Drop perl-Finance-Quote-debian-04_deka.patch (module rewritten).</changelog>
  <changelog author="astieger@suse.com" date="1528804800">- Change package license to GPL-3.0-or-later:
  MorningstarJP.pm carries this license</changelog>
</package>
<package pkgid="fd9aa58391c9b165cfa05beb3434a45238439514119899dbcc7934fb1e91b451" name="perl-Finance-Quote" arch="noarch">
  <version epoch="0" ver="1.47" rel="lp150.2.8.1"/>
  <changelog author="sbrabec@suse.cz" date="1240488000">- Updated to version 1.16:
  * Fixed or updated site layout parsing of:
    Bourso, Morningstar, AEX, ITE is now RZR, ZA, Goldmoney,
    Ashwin, Finanzpartner.
  * New currency lookup support.
  * Fixed 12:XXpm formatted time handling.
- Require all needed perl modules (bnc#496738).</changelog>
  <changelog author="sbrabec@suse.cz" date="1255953600">- Updated to version 1.17 (bnc498310#c4):
  * Site layout updates: Cominvest, Yahoo (currencies adapted to
    yahoo denomination), ASX.
  * Fixes for: Yahoo Europe, Goldmoney, IndiaMutual, GBp, possible
    wrong year range in Yahoo.
  * New support for: Hungarian stocks, Goldmoney Platinum.
  * Removed: Broken futures support for AEX.</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="sbrabec@suse.cz" date="1277121600">- Fix of LeRevenu module crash due to a change on lerevenu.com web
  site (bnc#555687).</changelog>
  <changelog author="coolo@novell.com" date="1287489600">- add perl as explicit buildrequire</changelog>
  <changelog author="coolo@novell.com" date="1291032000">- remove /var/adm/perl-modules</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@suse.com" date="1321617600">- use original .tar.gz</changelog>
  <changelog author="sbrabec@suse.cz" date="1326715200">- Updated to the current upstream GIT snapshot (many updates for
  server changes).
- Added fixes from upstream bug tracker:
  * Fix GoldMoney server changes, add palladium (CPAN#64897).
  * Rewrite Finance Canada after server changes (CPAN#57401).
  * Partial rewrite ov VWD due to server changes (CPAN#62619).
  * Fix Cdnfundlibrary to retrieve newest NAV (CPAN#66235).
  * Fix use of /tmp file in IndiaMutual (CPAN#70690).
  * New modules:
  * Comdirect (CPAN#61750)
  * Stooq (CPAN#64474)
  * FTFunds (CPAN#65269)
- Added Fedora fix:
  * Fix TIAA-CREF (Redhat#668935).
- Added all Debian fixes.
- Yahoo fixes ported to the upstream GIT.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359115200">- Update to version 1.18 (bnc#800797):
  * many updates for server changes
  * new modules
  * code cleanup
- Drop perl-Finance-Quote-fedora-tiaa-cref.patch: New code is a
  different implementation and it supports institutional funds as
  well.
- Update Requires.</changelog>
  <changelog author="coolo@suse.com" date="1406548800">- update to 1.35:
  * BUGFIX: VWD - currency returned.
  1.34      2014-06-15 21:30:03+02:00 Europe/Brussels
  * VWD adapted to recent website change.
  1.33      2014-06-01 11:24:24+02:00 Europe/Brussels
  * BUGFIX: yahoo_json never returns currency. so don't set a default.
    yahoo_json returned current timestamp instead of quote date.
  1.32      2014-05-18 21:55:12+02:00 Europe/Brussels
  * return "symbol" for yahoo_json module
  * allow to retrieve ISIN codes with VWD module
  1.31      2014-05-04 22:56:45+02:00 Europe/Brussels
  * Case mismatch in ZA_UnitTrusts pod
  1.30      2014-05-04 21:56:34+02:00 Europe/Brussels
  * Bourso.pm works on current website changes. Thanks to Guillaume
  * New module CSE.pm by Hiranya Samarasekera. Covers Colombo Stock
    Exchange (CSE) in Sri Lanka.
  1.29      2014-04-08 08:28:25+02:00 Europe/Brussels
  * New module za_unittrusts. kudos to Rolf Endres.
  * Indiamutual patched to current website. kudos to Vinay S Shastry.
  1.28      2014-03-16 12:05:19+01:00 Europe/Brussels
  * Removed some unnecessary dependencies
  1.27      2014-03-05 15:04:22+01:00 Europe/Brussels
  * New module YahooJSON added (Abhijit Kshirsagar)
  * mtgox.t should not create errors when ONLINE_TEST is not defined
- remove all patches no longer applying (as maintainer didn't care for 18 months
  and this module is important to be half way fresh):
    perl-Finance-Quote-57401-financecanada.patch
    perl-Finance-Quote-61750-comdirect.patch
    perl-Finance-Quote-62619-vwd.patch
    perl-Finance-Quote-64474-stooq.patch
    perl-Finance-Quote-65269-ftfunds.patch
    perl-Finance-Quote-70690-IndiaMutual-temp-del.patch
    perl-Finance-Quote-70690-IndiaMutual-temp.patch
    perl-Finance-Quote-LeRevenu.patch
    perl-Finance-Quote-debian-08_deka.patch
    perl-Finance-Quote-fsf-address.patch
    perl-Finance-Quote-goldmoney-decimal-point.patch
- reworked spec file to look a bit more like a standard perl package</changelog>
  <changelog author="coolo@suse.com" date="1406548801">- ignore Mozilla:CA</changelog>
  <changelog author="coolo@suse.com" date="1429444800">- updated to 1.37 bnc#955055
  see /usr/share/doc/packages/perl-Finance-Quote/ChangeLog.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add perl(CGI) BuildRequires: needed to be able to pass the
  test suite with Perl 5.22.</changelog>
  <changelog author="jcnengel@gmail.com" date="1501848000">- Update to 1.38
  * module updates: tiaacref, yahooJSON, FTfunds, MStaruk,
    USFedBonds, GoldMoney
  * new modules: fidelityfixed (Peter Ratzlaff), yahooYQL
  * removed modules: MTGox
  * more tests: yahoo_speed.t, tiaacref.t
- Drop perl-Finance-Quote-64897-0001-adopted-to-site-changes.patch,
  perl-Finance-Quote-64897-0002-support-palladium-lookup.patch,
  perl-Finance-Quote-goldmoney-decimal-point.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1521806400">- Update to version 1.47 (boo#1077300):
  * Yahoojson: module adapted to new URL and returned json
  * Added currencies for .SA (Brazil) and .TO (Canada/Toronto)
    markets
  * Added currency for .DE market
  * BUGFIX in currency determination regex
  * BUG resolved: removed time from $last_refresh when markets are
    open
  * added AlphaVantage module (Matthew Patterson)
  * some other module changes: yahoojson, Morningstar, Bourso, TSX
    (not working)
  * Use AlphaVantage for currency quotes instead of Yahoo
- Drop perl-Finance-Quote-debian-04_deka.patch (module rewritten).</changelog>
  <changelog author="astieger@suse.com" date="1528804800">- Change package license to GPL-3.0-or-later:
  MorningstarJP.pm carries this license</changelog>
  <changelog author="sbrabec@suse.com" date="1532433600">- Fix dependencies. Require perl(CGI) (boo#1077300).</changelog>
</package>
<package pkgid="5de99e08407b39163f813c3e1e726ae1529d956e788f2b438b03beb91fe61a19" name="perl-Finance-Quote" arch="src">
  <version epoch="0" ver="1.47" rel="lp150.2.8.1"/>
  <changelog author="sbrabec@suse.cz" date="1224072000">- Updated to version 1.14:
  * Added support for Finanzpartner, Cominvest, TSX.
  * Fixed or updated site layout parsing of TIAA CREF,
    Stockhouse Canada, DWS, VWD, AEX, Yahoo Brasil, SEB,
    Association of Mutual Funds in India.
  * Fixes.
  * Reorganization of test cases.</changelog>
  <changelog author="sbrabec@suse.cz" date="1225108800">- Updated to version 1.15:
  * IndiaMutual: Fix symbol not set it module.
  * isoTime - make sure $hours and $mins are treated as numbers,
    use sprintf</changelog>
  <changelog author="sbrabec@suse.cz" date="1240488000">- Updated to version 1.16:
  * Fixed or updated site layout parsing of:
    Bourso, Morningstar, AEX, ITE is now RZR, ZA, Goldmoney,
    Ashwin, Finanzpartner.
  * New currency lookup support.
  * Fixed 12:XXpm formatted time handling.
- Require all needed perl modules (bnc#496738).</changelog>
  <changelog author="sbrabec@suse.cz" date="1255953600">- Updated to version 1.17 (bnc498310#c4):
  * Site layout updates: Cominvest, Yahoo (currencies adapted to
    yahoo denomination), ASX.
  * Fixes for: Yahoo Europe, Goldmoney, IndiaMutual, GBp, possible
    wrong year range in Yahoo.
  * New support for: Hungarian stocks, Goldmoney Platinum.
  * Removed: Broken futures support for AEX.</changelog>
  <changelog author="jengelh@medozas.de" date="1263124800">- enable parallel build</changelog>
  <changelog author="sbrabec@suse.cz" date="1277121600">- Fix of LeRevenu module crash due to a change on lerevenu.com web
  site (bnc#555687).</changelog>
  <changelog author="coolo@novell.com" date="1287489600">- add perl as explicit buildrequire</changelog>
  <changelog author="coolo@novell.com" date="1291032000">- remove /var/adm/perl-modules</changelog>
  <changelog author="coolo@novell.com" date="1291204800">- switch to perl_requires macro</changelog>
  <changelog author="coolo@suse.com" date="1321617600">- use original .tar.gz</changelog>
  <changelog author="sbrabec@suse.cz" date="1326715200">- Updated to the current upstream GIT snapshot (many updates for
  server changes).
- Added fixes from upstream bug tracker:
  * Fix GoldMoney server changes, add palladium (CPAN#64897).
  * Rewrite Finance Canada after server changes (CPAN#57401).
  * Partial rewrite ov VWD due to server changes (CPAN#62619).
  * Fix Cdnfundlibrary to retrieve newest NAV (CPAN#66235).
  * Fix use of /tmp file in IndiaMutual (CPAN#70690).
  * New modules:
  * Comdirect (CPAN#61750)
  * Stooq (CPAN#64474)
  * FTFunds (CPAN#65269)
- Added Fedora fix:
  * Fix TIAA-CREF (Redhat#668935).
- Added all Debian fixes.
- Yahoo fixes ported to the upstream GIT.</changelog>
  <changelog author="sbrabec@suse.cz" date="1359115200">- Update to version 1.18 (bnc#800797):
  * many updates for server changes
  * new modules
  * code cleanup
- Drop perl-Finance-Quote-fedora-tiaa-cref.patch: New code is a
  different implementation and it supports institutional funds as
  well.
- Update Requires.</changelog>
  <changelog author="coolo@suse.com" date="1406548800">- update to 1.35:
  * BUGFIX: VWD - currency returned.
  1.34      2014-06-15 21:30:03+02:00 Europe/Brussels
  * VWD adapted to recent website change.
  1.33      2014-06-01 11:24:24+02:00 Europe/Brussels
  * BUGFIX: yahoo_json never returns currency. so don't set a default.
    yahoo_json returned current timestamp instead of quote date.
  1.32      2014-05-18 21:55:12+02:00 Europe/Brussels
  * return "symbol" for yahoo_json module
  * allow to retrieve ISIN codes with VWD module
  1.31      2014-05-04 22:56:45+02:00 Europe/Brussels
  * Case mismatch in ZA_UnitTrusts pod
  1.30      2014-05-04 21:56:34+02:00 Europe/Brussels
  * Bourso.pm works on current website changes. Thanks to Guillaume
  * New module CSE.pm by Hiranya Samarasekera. Covers Colombo Stock
    Exchange (CSE) in Sri Lanka.
  1.29      2014-04-08 08:28:25+02:00 Europe/Brussels
  * New module za_unittrusts. kudos to Rolf Endres.
  * Indiamutual patched to current website. kudos to Vinay S Shastry.
  1.28      2014-03-16 12:05:19+01:00 Europe/Brussels
  * Removed some unnecessary dependencies
  1.27      2014-03-05 15:04:22+01:00 Europe/Brussels
  * New module YahooJSON added (Abhijit Kshirsagar)
  * mtgox.t should not create errors when ONLINE_TEST is not defined
- remove all patches no longer applying (as maintainer didn't care for 18 months
  and this module is important to be half way fresh):
    perl-Finance-Quote-57401-financecanada.patch
    perl-Finance-Quote-61750-comdirect.patch
    perl-Finance-Quote-62619-vwd.patch
    perl-Finance-Quote-64474-stooq.patch
    perl-Finance-Quote-65269-ftfunds.patch
    perl-Finance-Quote-70690-IndiaMutual-temp-del.patch
    perl-Finance-Quote-70690-IndiaMutual-temp.patch
    perl-Finance-Quote-LeRevenu.patch
    perl-Finance-Quote-debian-08_deka.patch
    perl-Finance-Quote-fsf-address.patch
    perl-Finance-Quote-goldmoney-decimal-point.patch
- reworked spec file to look a bit more like a standard perl package</changelog>
  <changelog author="coolo@suse.com" date="1406548801">- ignore Mozilla:CA</changelog>
  <changelog author="coolo@suse.com" date="1429444800">- updated to 1.37 bnc#955055
  see /usr/share/doc/packages/perl-Finance-Quote/ChangeLog.1</changelog>
  <changelog author="dimstar@opensuse.org" date="1441108800">- Add perl(CGI) BuildRequires: needed to be able to pass the
  test suite with Perl 5.22.</changelog>
  <changelog author="jcnengel@gmail.com" date="1501848000">- Update to 1.38
  * module updates: tiaacref, yahooJSON, FTfunds, MStaruk,
    USFedBonds, GoldMoney
  * new modules: fidelityfixed (Peter Ratzlaff), yahooYQL
  * removed modules: MTGox
  * more tests: yahoo_speed.t, tiaacref.t
- Drop perl-Finance-Quote-64897-0001-adopted-to-site-changes.patch,
  perl-Finance-Quote-64897-0002-support-palladium-lookup.patch,
  perl-Finance-Quote-goldmoney-decimal-point.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1521806400">- Update to version 1.47 (boo#1077300):
  * Yahoojson: module adapted to new URL and returned json
  * Added currencies for .SA (Brazil) and .TO (Canada/Toronto)
    markets
  * Added currency for .DE market
  * BUGFIX in currency determination regex
  * BUG resolved: removed time from $last_refresh when markets are
    open
  * added AlphaVantage module (Matthew Patterson)
  * some other module changes: yahoojson, Morningstar, Bourso, TSX
    (not working)
  * Use AlphaVantage for currency quotes instead of Yahoo
- Drop perl-Finance-Quote-debian-04_deka.patch (module rewritten).</changelog>
  <changelog author="astieger@suse.com" date="1528804800">- Change package license to GPL-3.0-or-later:
  MorningstarJP.pm carries this license</changelog>
  <changelog author="sbrabec@suse.com" date="1532433600">- Fix dependencies. Require perl(CGI) (boo#1077300).</changelog>
</package>
<package pkgid="223663dc0960619ad551ddd442de55d8e9bb320bc9900fe81769f09d339ece60" name="perl-GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.12.1"/>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580800">- security update (bmp.c, dib.c):
  * CVE-2018-16645 [bsc#1107604]
    + GraphicsMagick-CVE-2018-16645.patch</changelog>
  <changelog author="Petr Gajdos &lt;pgajdos@suse.com&gt;" date="1536580801">- security update (pict.c):
  * CVE-2018-16644 [bsc#1107609]
    + GraphicsMagick-CVE-2018-16644.patch</changelog>
</package>
<package pkgid="3965a0f396c7e5d8a976e7896e529a50fb6d40304b6e9797fd8fb604c3a1c48a" name="perl-GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.3.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1410868800">- Fix devel package dependencies</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1410955200">- Move library configuration files to separated package</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
</package>
<package pkgid="74dfdc4aa46743058c924a9fa9b2c42e508363fd0d0459a50bb571a2123e8ca6" name="perl-GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.6.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1426939200">- Update to version 1.3.21
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
</package>
<package pkgid="af32d4df38ef54bb2c788456fd612be1fb36786c9967fa0ededdeefe9eacc838" name="perl-GraphicsMagick" arch="x86_64">
  <version epoch="0" ver="1.3.29" rel="lp150.3.9.1"/>
  <changelog author="dmitry_r@opensuse.org" date="1444046400">- Update to version 1.3.22
  * See included NEWS.txt for details</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1446984000">- Update to version 1.3.23
  * See included NEWS.txt for details</changelog>
  <changelog author="sflees@suse.de" date="1462795200">- Multiple security issues in GraphicsMagick/ImageMagick [boo#978061]
  (CVE-2016-3714, CVE-2016-3718, CVE-2016-3715, CVE-2016-3717)
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1464609600">- security update:
  * CVE-2016-5118 [bsc#982178]
    + GraphicsMagick-CVE-2016-5118.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1465214400">- updated to 1.3.24:
  * many security related changes (incl. CVE-2016-5118), see
    ChangeLog
- removed patches:
  * GraphicsMagick-CVE-2016-5118.patch
  * GraphicsMagick-upstream-delegates-safer.patch
  * GraphicsMagick-upstream-disable-mvg-ext.patch
  * GraphicsMagick-upstream-disable-tmp-magick-prefix.patch
  * GraphicsMagick-upstream-image-sanity-check.patch</changelog>
  <changelog author="meissner@suse.com" date="1466683200">- Build "gm" as position independend executable (PIE).</changelog>
  <changelog author="pgajdos@suse.com" date="1474891200">- update to 1.3.25:
  * EscapeParenthesis(): I was notified by Gustavo Grieco of a heap
    overflow in EscapeParenthesis() used in the text annotation code.
    While not being able to reproduce the issue, the implementation of
    this function is completely redone.
  * Utah RLE: Reject truncated/absurd files which caused huge memory
    allocations and/or consumed huge CPU.  Problem was reported by
    Agostino Sarubbo based on testing with AFL.
  * SVG/MVG: Fix another case of CVE-2016-2317 (heap buffer overflow) in
    the MVG rendering code (also impacts SVG).
  * TIFF: Fix heap buffer read overflow while copying sized TIFF
    attributes.  Problem was reported by Agostino Sarubbo based on
    testing with AFL.</changelog>
  <changelog author="pgajdos@suse.com" date="1498478400">- complementary fix for CVE-2017-8350 [bsc#1036985 c13-c21]
  * GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638400">- Version update to 1.3.26:
  * DPX: Fix excessive use of memory (DOS issue) due to file header
    claiming large image dimensions but insufficient backing
    data. (CVE-2017-10799 bsc#1047054).
  * JNG: Fix memory leak when reading invalid JNG image (CVE-2017-8350).
  * MAT: Fix excessive use of memory (DOS issue) due to continuing
    processing with insufficient data and claimed large image
    size. Verify each file extent to make sure that it is within range
    of file size. (CVE-2017-10800 bsc#1047044).
  * META: Fix heap overflow while parsing 8BIM chunk (CVE-2016-7800).
  * PCX: Fix denial of service issue.
  * RLE: Fix abnomally slow operation (denial of service issue) with
    intentionally corrupt colormapped file.
  * PICT: Fix possible buffer overflow vulnerability given suitably
    truncated input file.
  * PNG: Enforce spec requirement that the dimensions of the JPEG
    embedded in a JDAT chunk must match the JHDR dimensions
    (CVE-2016-9830).
  * PNG: Avoid NULL dereference when MAGN chunk processing fails.
  * SCT: Fix stack-buffer read overflow (underflow?) while reading SCT
    header.
  * SGI: Fix denial of service issues.  Delay large memory allocations
    until file header has fully passed sanity checks.
  * TIFF: Fix out of bounds read when reading CMYKA TIFF which claims to
    have only 2 samples per pixel (CVE-2017-6335 bsc#1027255).
  * TIFF: Fix out of bounds read when reading RGB TIFF which claims to
    have only 1 sample per pixel (CVE-2017-10794).
  * WPG: Fix heap overflow (CVE-2016-7996).  Fix assertion crash
    (CVE-2016-7997).
  * DifferenceImage(): Fix Fix all-black difference image if an input
    file is colormapped.
  * EXIF orientation was not being properly detected for some files.
  * -frame: The `import` command -frame handling was improperly
    implemented and was using already freed data.
  * GIF: Fixes for "Excessive LZW string data" problem.
  * Magick++: Bug fixes to PathSmoothCurvetoRel::operator() and
    PathSmoothCurvetoRel::operator().
  * PAM: Support writing GRAYSCALE PAM format.
  * PNG: Fix memory leaks.
  * SVG: Fixed a memory leak.  Fixed a possible null pointer dereference.
  * TclMagick: Problem that TkMagick could not resolve functions from
    TclMagick under Linux is fixed.
  * TclMagick: Fix parser validatation in magickCmd() to avoid crash
    given a syntax error.
  * TIFF: Fix for reading old JPEG files (avoids "Improper call to JPEG
    library in state 0. (LibJpeg).").
  * TXT: Fixed memory leak.
  * XCF: Error checking is improved.
  * EXIF rotation: Support is added such that the EXIF orientation tag
    is updated when the image is rotated.
  * MAT: Now support reading multiple images from Matlab V4 format.
  * Magick++: Orientation method now updates orientation in EXIF
    profile, if it exists.
  * Magick++: Added Image attribute method which accepts a 'char *'
    argument, and will remove the attribute if the value argument is
    NULL.
  * -orient: The -orient command line option now also updates the
    orientation in the EXIF profile, if it exists.
  * PGX: Support PGX JPEG 2000 format for reading and writing (within
    the bounds of what JasPer supports).
  * Wand API: Added MagickAutoOrientImage(),
    MagickGetImageOrientation(), MagickSetImageOrientation(),
    MagickRemoveImageOption(), and MagickClearException().
- Drop merged patch GraphicsMagick-CVE-2017-8350.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1500638401">- Drop patches not meintioned in the changelog ever:
  * GraphicsMagick-debian-fixed.patch
  * GraphicsMagick-include.patch
  * GraphicsMagick-perl-link.patch
  * The package builds just fine without them and there is no
    refference explaining it
- Convert the deps to pkgconfig variants where possible.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Trim descriptions. Redo summaries and RPM groups.</changelog>
  <changelog author="pgajdos@suse.com" date="1505131200">- fix perl bindings
  + GraphicsMagick-perl-linkage.patch from fedora
- turn on perl test suite</changelog>
  <changelog author="pgajdos@suse.com" date="1505822400">- builds for sle11</changelog>
  <changelog author="pgajdos@suse.com" date="1515585600">- update to 1.3.27:
  * New Features:
    . PNG: Implemented eXIf chunk support.
    . WEBP: Add support for EXIF and ICC metadata provided that at
    least libwebp 0.5.0 is used.
    . Magick++ Image autoOrient(): New Image method to auto-orient an
    image so it looks right-side up by default.
  * Behavior Changes:
    . PALM: PALM writer is disabled.
    . ThrowLoggedException(): Capture the first exception
    at ErrorException level or greater, or only capture exception
    if it is more severe than an already reported exception.
    . DestroyJNG(): This internal function is now declared static
    and is removed from shared library or DLL namespace.
  * lot of security and other bug fixes, see
    https://sourceforge.net/projects/graphicsmagick/files/graphicsmagick/1.3.27/
- added GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 1.3.28:
  * Security Fixes:
    BMP: Fix non-terminal loop due to unexpected bit-field mask
    value (DOS opportunity).
    PALM: Fix heap buffer underflow in builds with QuantumDepth=8.
    SetNexus() Fix heap overwrite under certain conditions due to
    using a wrong destination buffer. This issue impacts all
    1.3.X releases.
    TIFF: Fix heap buffer read overflow in LocaleNCompare() when
    parsing NEWS profile.
  * Bug fixes:
    DescribeImage(): Eliminate possible use of null pointer.
    GIF: Fix memory leak of global colormap in error path.
    GZ: Writing to gzip files with the extension ".gz" was
    not working with Zlib 1.2.8.
    JNG: Fix buffer read overflow (a tiny fixed overflow of just
    one byte).
    JPEG: Promoting certain libjpeg warnings to errors caused
    much more problems than expected. The promotion of
    warnings to errors is removed. Claimed pixel dimensions
    are validated by file size before allocating memory for
    the pixels.
    IntegralRotateImage(): Assure that reported error in rotate by
    270 case does immediately terminate processing.
    MNG: Fix possible null pointer reference related to DEFI chunk
    parsing. Fix minor heap read overflow (constrained to just
    one byte) due to an ordering issue in a limit check. Fix
    memory leaks in error path.
    WebP: Fix stack buffer overflow in WriteWEBPImage() which
    occurs with libwebp 0.5.0 or newer due to a structure type
    change in the structure passed to the progress monitor
    callback.
    WPG: Memory leaks fixed.
  * API Updates:
    InterpolateViewColor(): This function now returns MagickPassFail
    (an unsigned int) rather than void so that errors can be
    efficiently reported.
    The magick/pixel_cache.h header is updated to add deprecation
    attributes such that code using GetPixels(), GetIndexes(),
    and GetOnePixel() will produce deprecation warnings for
    compilers which support them. These functions will not be
    removed in the 1.3.X release series and when they are
    removed, pre-processor macros will be added so a replacement
    function is used instead. There is a long-term objective to
    eliminate functionally-redundant pixel cache functions to
    only the ones with the best properties since this reduces
    maintenance and may reduce the depth of the call stack
    (improving performance).
  * removed unneded GraphicsMagick-release-date-missing-quote.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519128000">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(libpng), pkgconfig(x11), pkgconfig(xext),
  pkgconfig(zlib), libjpeg-devel. all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1527076800">- update to 1.3.29:
  * Security Fixes:
    . GraphicsMagick is now participating in Google's oss-fuzz project
    . JNG: Require that the embedded JPEG image have the same dimensions
    as the JNG image as provided by JHDR. Avoids a heap write overflow.
    . MNG: Arbitrarily limit the number of loops which may be requested by
    the MNG LOOP chunk to 512 loops, and provide the '-define
    mng:maximum-loops=value' option in case the user wants to change the
    limit.  This fixes a denial of service caused by large LOOP
    specifications.
  * Bug fixes:
    . DICOM: Pre/post rescale functions are temporarily disabled (until
    the implementation is fixed).
    . JPEG: Fix regression in last release in which reading some JPEG
    files produces the error "Improper call to JPEG library in state
    201".
    . ICON: Some DIB-based Windows ICON files were reported as corrupt to
    an unexpectedly missing opacity mask image.
    . In-memory Blob I/O: Don't implicitly increase the allocation size
    due to seek offsets.
    . MNG: Detect and handle failure to allocate global PLTE. Fix divide
    by zero.
    . DrawGetStrokeDashArray(): Check for failure to allocate memory.
    . BlobToImage(): Now produces useful exception reports to cover the
    cases where 'magick' was not set and the file format could not be
    deduced from its header.
  * API Updates:
    . Wand API: Added MagickIsPaletteImage(), MagickIsOpaqueImage(),
    MagickIsMonochromeImage(), MagickIsGrayImage(), MagickHasColormap()
    based on contributions by Troy Patteson.
    . New structure ImageExtra added and Image 'clip_mask' member is
    replaced by 'extra' which points to private ImageExtra allocation.
    The ImageGetClipMask() function now provides access to the clip mask
    image.
    . New structure DrawInfoExtra and DrawInfo 'clip_path' is replaced by
    'extra' which points to private DrawInfoExtra allocation.  The
    DrawInfoGetClipPath() function now provides access to the clip path.
    . New core library functions: GetImageCompositeMask(),
    CompositeMaskImage(), CompositePathImage(), SetImageCompositeMask(),
    ImageGetClipMask(), ImageGetCompositeMask(), DrawInfoGetClipPath(),
    DrawInfoGetCompositePath()
    . Deprecated core library functions: RegisterStaticModules(),
    UnregisterStaticModules().
  * Feature improvements:
    . Static modules (in static library or shared library without
    dynamically loadable modules) are now lazy-loaded using the same
    external interface as the lazy-loader for dynamic modules.  This
    results in more similarity between the builds and reduces the fixed
    initialization overhead by only initializing the modules which are
    used.
    . SVG: The quality of SVG support has been significantly improved due
    to the efforts of Greg Wolfe.
    . FreeType/TTF rendering: Rendering fixes for opacity.</changelog>
  <changelog author="pgajdos@suse.com" date="1528891200">- security update (dcm.c)
  * fix invalid reads in dcm.c [bsc#1075821c#14]
    GraphicsMagick-dcm.c-update.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (rgb.c, cmyk.c, gray.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + GraphicsMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3 and PDF coders by default, remove gs calls
  from delegates.mgk
  [bsc#1105592]</changelog>
</package>
<package pkgid="57830ba36c83a69f464cf57b81b389f04c56ec48d540626ff260b97d1f0b137e" name="perl-Gtk2-Unique" arch="src">
  <version epoch="0" ver="0.05" rel="lp150.2.3.1"/>
  <changelog author="saigkill@opensuse.org" date="1299326400">- first package for openSUSE</changelog>
  <changelog author="saigkill@opensuse.org" date="1299412800">- removed -devel Package and added Version Numbers in BuildRequires
  and Requires.</changelog>
  <changelog author="saigkill@opensuse.org" date="1306152000">- fixed build for Factory through adding pkgconfig(unique-1.0) as BR</changelog>
  <changelog author="saigkill@opensuse.org" date="1307707200">- prepared for factory</changelog>
  <changelog author="dimstar@opensuse.org" date="1530532800">- Add Gtk2-Unique-rt120115-Fix-crash.patch: Fix crash on starting
  second instances (rt#120115, boo#1099774).</changelog>
</package>
<package pkgid="20c13ec6b241a848a0b15c3f83fbd0cc768cfa0ac33f03d00b482dc0ae1c6aa4" name="perl-Gtk2-Unique" arch="x86_64">
  <version epoch="0" ver="0.05" rel="lp150.2.3.1"/>
  <changelog author="saigkill@opensuse.org" date="1299326400">- first package for openSUSE</changelog>
  <changelog author="saigkill@opensuse.org" date="1299412800">- removed -devel Package and added Version Numbers in BuildRequires
  and Requires.</changelog>
  <changelog author="saigkill@opensuse.org" date="1306152000">- fixed build for Factory through adding pkgconfig(unique-1.0) as BR</changelog>
  <changelog author="saigkill@opensuse.org" date="1307707200">- prepared for factory</changelog>
  <changelog author="dimstar@opensuse.org" date="1530532800">- Add Gtk2-Unique-rt120115-Fix-crash.patch: Fix crash on starting
  second instances (rt#120115, boo#1099774).</changelog>
</package>
<package pkgid="cb4d49a73a28f742bffcfdc5608e798de694b87780330068004495e252750374" name="perl-PerlMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.12.1"/>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1534939200">- disable PS, PS2, PS3, XPS and PDF coders in default policy.xml
  [bsc#1105592]</changelog>
</package>
<package pkgid="4a7e910c1b0013ac2d140b364c1566724b74f2f002472167358a97ccc6520d8e" name="perl-PerlMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516795200">- update to 7.0.7.22
  * Support aspect ratio geometry, e.g. -crop 3:2.
  * Add support for reading the HEIC image format (reference
    https://github.com/ImageMagick/ImageMagick/issues/507).
  * Fixed numerous memory leaks, credit to OSS Fuzz.</changelog>
  <changelog author="ro@suse.de" date="1517400000">- update context for ImageMagick-s390-disable-tests.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Add explicit buildrequires on: pkgconfig(libwebpmux),
  pkgconfig(cairo), pkgconfig(fontconfig), pkgconfig(libpng),
  pkgconfig(x11), pkgconfig(xext), pkgconfig(zlib). all
  of them direct build dependencies but not included in
  the spec file</changelog>
  <changelog author="pgajdos@suse.com" date="1519214400">- update to 7.0.7.23
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Add list-length policy to limit the maximum image sequence length.
- added patches
  + ImageMagick-montage.t-directory-exception.patch
  + ImageMagick-820e636.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519387200">- upstream fixes the test by changing the signature
  - ImageMagick-820e636.patch
  + ImageMagick-write.t-PICT-signature.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
</package>
<package pkgid="3a09707fbab1cf2abb5b8f7e6869c3ea29de24a6c063b3ef3265197cccc7949b" name="perl-PerlMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1519819200">- update to 7.0.7-24
  * Do not refer to page in OptimizeLayerFrames (reference
    https://github.com/ImageMagick/ImageMagick/pull/987).
  * PerlMagick unit tests pass again.
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- removed upstreamed
  - ImageMagick-write.t-PICT-signature.patch
  - ImageMagick-montage.t-directory-exception.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1520251200">- update to 7.0.7-25
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521028800">- update to 7.0.7-26
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- added ImageMagick-remove-test.tap-attributes.patch, removes
  failing test on i586
  https://github.com/ImageMagick/ImageMagick/issues/1019</changelog>
  <changelog author="pgajdos@suse.com" date="1521460800">- update to 7.0.7-27:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts.
- remove ImageMagick-remove-test.tap-attributes.patch as the perl
  testsuite fails in bunch of tests anyway. Waiting for results of
  the upstream bug (https://github.com/ImageMagick/ImageMagick/issues/1019)</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
</package>
<package pkgid="39ff863114386f44754d1716cc1365280e6e67b40577343146fede6a2e0283c6" name="perl-PerlMagick" arch="x86_64">
  <version epoch="0" ver="7.0.7.34" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1522065600">- update to 7.0.7-28:
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts
- tesuite still fails, however:
  https://github.com/ImageMagick/ImageMagick/issues/1058
- added ImageMagick-write.t-pict.patch
- added ImageMagick-tests.tap-attributes.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- do not run tests on i586 at all</changelog>
  <changelog author="fcrozat@suse.com" date="1522929600">- Remove BuildRequires on dcraw, it is not needed at buildtime.</changelog>
  <changelog author="tchvatal@suse.com" date="1523361600">- Drop buildrequire on mupdf-devel-static, there is only one occurance
  in all makefiles mentioning MUPDF_LIBS and it is always empty
- Format with minimal run of spec-cleaner
  * Use license
  * Sort BRs alphabetically</changelog>
  <changelog author="pgajdos@suse.com" date="1523361601">- consider urw-base35-fonts [bsc#1088463]</changelog>
  <changelog author="pgajdos@suse.com" date="1523448000">- security update (webp.c)
  * CVE-2018-9135 [bsc#1087825]
    + ImageMagick-CVE-2018-9135.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262400">- update to 7.0.7-29:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
- turn off drawing primitive 'circle' test:
  + ImageMagick-filter.t-primitive-circle.patch
- dropped patches (upstreamed):
  - ImageMagick-CVE-2018-9135.patch
  - ImageMagick-write.t-pict.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1525262401">- instead of disabling test, apply upstream fix introduced
  few minutes after upstream report was made
  - ImageMagick-filter.t-primitive-circle.patch
  + ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526040000">- update to 7.0.7-31:
  * Fixed numerous use of uninitialized values, integer overflow,
    memory exceeded, and timeouts (credit to OSS Fuzz).
  * Missing break when checking "compliance" element.
- removed upstreamed ImageMagick-draw-circle-primitive.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526904000">- update to 7.0.7-34:
  * Added support for reading eXIf chunks to the PNG coder.
  * Fixed numerous use of uninitialized values, integer overflow, memory
    exceeded, and timeouts (credit to OSS Fuzz).
  * Improved clip / composite mask handling.
  * Restore SetImageAlpha() behavior.
  * Fix -clip and -mask options.
- fixes [bsc#1093395]</changelog>
  <changelog author="pgajdos@suse.com" date="1527854400">- fix -gamma issues in special cases [bsc#1094745], [bsc#1094742]
  + ImageMagick-gamma-issues.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528977600">- security update (mat.c)
  * CVE-2018-11624 [bsc#1096203]
    + ImageMagick-CVE-2018-11624.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529064000">- security update (core)
  * CVE-2018-11625 [bsc#1096200]
    + ImageMagick-CVE-2018-11625.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529496000">- security update (bgr.c, rgb.c, cmyk.c, gray.c, ycbcr.c)
  * CVE-2018-10805 and similar memory leaks [bsc#1095812]
    + ImageMagick-CVE-2018-10805.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1529928000">- security update (dib.c and bmp.c)
  * CVE-2018-12600 [bsc#1098545]
    + ImageMagick-CVE-2018-12600.patch
  * CVE-2018-12599 [bsc#1098546]
    + ImageMagick-CVE-2018-12599.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1531742400">- fix Clear method [bsc#1094741]
  + ImageMagick-fix-Clear-method.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533556800">- security update (mpc.c):
  * CVE-2018-14434 [bsc#1102003]
    + ImageMagick-CVE-2018-14434.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643200">- security update (meta.c):
  * CVE-2018-14437 [bsc#1102004]
    + ImageMagick-CVE-2018-14437.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643201">- security update (miff.c):
  * CVE-2018-14436 [bsc#1102005]
    + ImageMagick-CVE-2018-14436.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533643202">- security update (pcd.c):
  * CVE-2018-14435 [bsc#1102007]
    + ImageMagick-CVE-2018-14435.patch</changelog>
</package>
<package pkgid="d0620750298b4aac4edc80f59281161f3df14631db3a6201dce8a1768dd53021" name="perl-base-32bit" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="lp150.6.3.1"/>
  <changelog author="idonmez@suse.com" date="1424692800">- Add multiple patches for gcc5 support, tracked by RT#123784
  * perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch
  * perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch
  * perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="hsk@imb-jena.de" date="1433851200">- update to perl-5.22.0
  * several new experimental features
  * new &lt;&lt;&gt;&gt; (double-diamond) operator
  * new "\b" boundaries in REs, w.r.t. Unicode
  * non-capturing RE flag "/n"
  * Unicode 7.0
  * "defined(@array)", "defined(%hash)" are now fatal
  * unescaped literal "{" in a pattern results in deprecation warning
  * several modules updated
  * modules CGI, Module::Build no longer included
  * for a complete list of changes see perldelta.pod
- perl-5.20.0.dif changed to fit 5.22.0, and renamed to perl-5.22.0.dif
- changed patches to fit 5.22.0: perl-5.18.2-overflow.diff,
  perl-netcmdutf8.diff, perl-regexp-refoverflow.diff,
  perl-saverecontext.diff
- dropped patches (now upstream): DataDumper-no-infinite-recursion.diff,
  perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch,
  perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch,
  perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1434974400">- Reformat baselibs.conf.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- prevent bad RPM provides for Math::BigInt and DB
  (patch file perl-5.22.0_wrong_rpm_provides.diff)</changelog>
  <changelog author="bwiedemann@suse.com" date="1452168000">- fix perl_gen_filelist macro to not fail on foo.1 man page</changelog>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
</package>
<package pkgid="cc0da49bf1b755e7d371a4ac7b55a1ba77f055855e98ea2be236120f2f72a2ed" name="perl-base" arch="x86_64">
  <version epoch="0" ver="5.26.1" rel="lp150.6.3.1"/>
  <changelog author="idonmez@suse.com" date="1424692800">- Add multiple patches for gcc5 support, tracked by RT#123784
  * perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch
  * perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch
  * perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="hsk@imb-jena.de" date="1433851200">- update to perl-5.22.0
  * several new experimental features
  * new &lt;&lt;&gt;&gt; (double-diamond) operator
  * new "\b" boundaries in REs, w.r.t. Unicode
  * non-capturing RE flag "/n"
  * Unicode 7.0
  * "defined(@array)", "defined(%hash)" are now fatal
  * unescaped literal "{" in a pattern results in deprecation warning
  * several modules updated
  * modules CGI, Module::Build no longer included
  * for a complete list of changes see perldelta.pod
- perl-5.20.0.dif changed to fit 5.22.0, and renamed to perl-5.22.0.dif
- changed patches to fit 5.22.0: perl-5.18.2-overflow.diff,
  perl-netcmdutf8.diff, perl-regexp-refoverflow.diff,
  perl-saverecontext.diff
- dropped patches (now upstream): DataDumper-no-infinite-recursion.diff,
  perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch,
  perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch,
  perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1434974400">- Reformat baselibs.conf.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- prevent bad RPM provides for Math::BigInt and DB
  (patch file perl-5.22.0_wrong_rpm_provides.diff)</changelog>
  <changelog author="bwiedemann@suse.com" date="1452168000">- fix perl_gen_filelist macro to not fail on foo.1 man page</changelog>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
</package>
<package pkgid="77d9575df59a2631cd4a67399b88706858f37c72412cfa4d975547e23de51b70" name="perl-biber" arch="noarch">
  <version epoch="0" ver="2017.20170520.svn30357" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="e941e3574365d122769d2bbccee00e0acd9ba3095a2eaabc1adcb1724c0b1633" name="perl-doc" arch="noarch">
  <version epoch="0" ver="5.26.1" rel="lp150.6.3.1"/>
  <changelog author="idonmez@suse.com" date="1424692800">- Add multiple patches for gcc5 support, tracked by RT#123784
  * perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch
  * perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch
  * perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="hsk@imb-jena.de" date="1433851200">- update to perl-5.22.0
  * several new experimental features
  * new &lt;&lt;&gt;&gt; (double-diamond) operator
  * new "\b" boundaries in REs, w.r.t. Unicode
  * non-capturing RE flag "/n"
  * Unicode 7.0
  * "defined(@array)", "defined(%hash)" are now fatal
  * unescaped literal "{" in a pattern results in deprecation warning
  * several modules updated
  * modules CGI, Module::Build no longer included
  * for a complete list of changes see perldelta.pod
- perl-5.20.0.dif changed to fit 5.22.0, and renamed to perl-5.22.0.dif
- changed patches to fit 5.22.0: perl-5.18.2-overflow.diff,
  perl-netcmdutf8.diff, perl-regexp-refoverflow.diff,
  perl-saverecontext.diff
- dropped patches (now upstream): DataDumper-no-infinite-recursion.diff,
  perl-5.20.2-Fix-Errno.pm-generation-for-gcc-5.0.patch,
  perl-5.21.8-h2ph-correct-handling-of-hex-constants-for-the-pream.patch,
  perl-5.21.8-lib-h2ph.t-to-test-generated-t-_h2ph_pre.ph-instead-.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1434974400">- Reformat baselibs.conf.</changelog>
  <changelog author="opensuse@dstoecker.de" date="1449489600">- prevent bad RPM provides for Math::BigInt and DB
  (patch file perl-5.22.0_wrong_rpm_provides.diff)</changelog>
  <changelog author="bwiedemann@suse.com" date="1452168000">- fix perl_gen_filelist macro to not fail on foo.1 man page</changelog>
  <changelog author="idonmez@suse.com" date="1455278400">- Update to perl-5.22.1
  * Several bugs, including a segmentation fault, have been fixed
    with the bounds checking constructs (introduced in Perl 5.22)
  * Module::CoreList has been upgraded from version 5.20150520 to
    5.20151213.
  * PerlIO::scalar has been upgraded from version 0.22 to 0.23.
  * POSIX has been upgraded from version 1.53 to 1.53_01.
  * Storable has been upgraded from version 2.53 to 2.53_01.
  * warnings has been upgraded from version 1.32 to 1.34.
  * See perldelta.pod for all the changes.
- Update perl-5.22.0.dif stop patching CPAN.pm, it was MacOS only
  and was breaking tests (due to SHA-1 mismatch).</changelog>
  <changelog author="mls@suse.de" date="1462881600">- Update to perl-5.24.0
  * postfix dereferencing is no longer experimental
  * unicode 8.0 is now supported
  * perl will now croak when closing an in-place output file fails
  * new "\b{lb}" boundary in regular expressions
  * qr/(?[ ])/" now works in UTF-8 locales
  * integer shift ("&lt;&lt;" and "&gt;&gt;") now more explicitly defined
  * printf and sprintf now allow reordered precision arguments
  * more fields provided to "sigaction" callback with "SA_SIGINFO"
  * hashbang redirection to Perl 6
  * set proper umask before calling mkstemp(3)
  * fix loss of taint in canonpath
  * remove duplicate environment variables from "environ"
- rename patch perl-5.22.0.dif to perl-5.24.0.dif</changelog>
  <changelog author="idonmez@suse.com" date="1464868800">- Add perl-avoid-warnings.patch to fix a warning in cop.h, which
  breaks perf build due to -Werror. Already upstream.</changelog>
  <changelog author="schwab@suse.de" date="1466942400">- Move parent.pm to perl-base, used by File::Temp</changelog>
  <changelog author="coolo@suse.com" date="1493812800">- Update to perl-5.24.1
  - Di switch is now required for PerlIO debugging output
    Previously PerlIO debugging output would be sent to the file specified
    by the "PERLIO_DEBUG" environment variable if perl wasn't running setuid
    and the -T or -t switches hadn't been parsed yet.
    If perl performed output at a point where it hadn't yet parsed its
    switches this could result in perl creating or overwriting the file
    named by "PERLIO_DEBUG" even when the -T switch had been supplied.
    Perl now requires the -Di switch to produce PerlIO debugging output. By
    default this is written to "stderr", but can optionally be redirected to
    a file by setting the "PERLIO_DEBUG" environment variable.
    If perl is running setuid or the -T switch was supplied "PERLIO_DEBUG"
    is ignored and the debugging output is sent to "stderr" as for any other
  - D switch.
  Core modules and tools no longer search "." for optional modules
    The tools and many modules supplied in core no longer search the default
    current directory entry in @INC for optional modules. For example,
    Storable will remove the final "." from @INC before trying to load
    Log::Agent.
    This prevents an attacker injecting an optional module into a process
    run by another user where the current directory is writable by the
    attacker, e.g. the /tmp directory.
- Refresh patches</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Fix building with zlib-1.2.10 (RT#119762):
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1495108800">- Remove patch from previous commit, does not work:
  * Compress-Raw-Zlib-2.071-Adapt-tests-to-zlib-1.2.11.patch
- Add patch taken from upstream release instead:
  * Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="mls@suse.de" date="1504094400">- update to perl-5.26.0
  * "." no longer in @INC
  * "do" may now warn
  * regexp: a literal left brace "{" should be escaped
  * lexical subroutines are no longer experimental
  * indented Here-documents
  * new regular expression modifier /xx
  * declaring a reference to a variable
  * unicode 9.0 is now supported
  * new Hash Function For 64-bit Builds
- rename perl-5.24.0.dif to perl-5.26.0.dif
- remove obsolete perl-avoid-warnings.patch
- remove obsolete Compress-Raw-Zlib-2.071-zlib-1.2.11.patch</changelog>
  <changelog author="coolo@suse.com" date="1506168000">- update to perl-5.26.1
  * [CVE-2017-12837] Heap buffer overflow in regular expression compiler
  * [CVE-2017-12883] Buffer over-read in regular expression parser
  * tons of bug fixes
- update list of obsoletes</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="bwiedemann@suse.com" date="1512388800">- Add perl-reproducible.patch to make build reproducible (boo#1047218)</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1515585600">- ignore make check transient errors for PowerPC
  that are reported since 20170907
  bypass boo#1063176
  new patch: perl_skip_flaky_tests_powerpc.patch</changelog>
  <changelog author="schwab@suse.de" date="1516622400">- posix-sigaction.patch: make sure Perl_sighandler is always installed
  with SA_SIGINFO (bsc#1064697)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1530100800">- fix Archive::Tar directory traversal vulnerability [bnc#1096718]
  [CVE-2018-12015]
  new patch: perl-archive-tar-dirtrav.diff</changelog>
</package>
<package pkgid="979c0a0e73b12298f419e6059436ccf30a2b9860016dcfc45cc7f25584feff71" name="perl-slurm" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="eba3ca7db9b4cc1d37685c15a94878d3761f7cf5028671d00383a5dadeeeb987" name="perl-slurm" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="6803998a9b62d2d94462d1ae078ab149f613e403d12ebf3433ad717ec9d9643f" name="perl-solv" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="9d5392730e1e125d01a35884685fbed17096030d320b23502999600fdea9004f" name="permissions" arch="src">
  <version epoch="0" ver="20180125" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1470139200">- Update to version 20160802:
  * list the newuidmap and newgidmap, currently 0755 until review is done (bsc#979282)
  * root:shadow 0755 for newuidmap/newgidmap</changelog>
  <changelog author="meissner@suse.com" date="1470571200">- Update to version 20160807:
  * suexec2 is a symlink, no need for permissions handling</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- Update to version 20170602:
  * make /etc/ppp owned by root:root. The group dialout usage is no longer used</changelog>
  <changelog author="meissner@suse.com" date="1496491200">- Require: group(trusted), as we are handing it out to some unsuspecting
  binaries and it is no longer default. (bsc#1041159 for fuse, also cronie, etc)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- BuildIgnore group(trusted): we don't really care for this group
  in the buildroot and do not want to get system-users into the
  bootstrap cycle as we can avoid it.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1504699200">- Update to version 20170906:
  * permissions - copy dbus-daemon-launch-helper from / to /usr - bsc#1056764
  * permissions: Adding suid bit for VBoxNetNAT (bsc#1033425)</changelog>
  <changelog author="astieger@suse.com" date="1505304000">- Update to version 20170913:
  * Allow setuid for shadow newuidmap, newgidmap bsc#979282, bsc#1048645)</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to version 20170922:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="pgajdos@suse.com" date="1506513600">- Update to version 20170927:
  * fix typos in manpages</changelog>
  <changelog author="astieger@suse.com" date="1506600000">- Update to version 20170928:
  * Fix invalid syntax bsc#1048645 bsc#1060738</changelog>
  <changelog author="jsegitz@suse.com" date="1508932800">- Update to version 20171025:
  * Stricter permissions on cron directories (paranoid) and stricter permissions on sshd_config (secure/paranoid)</changelog>
  <changelog author="eeich@suse.com" date="1509969600">- Update to version 20171106:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="krahmer@suse.com" date="1511265600">- Update to version 20171121:
  * - permissions: adding kwayland (bsc#1062182)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="astieger@suse.com" date="1511956800">- Update to version 20171129:
  * permissions: adding gvfs (bsc#1065864)
  * Allow setgid incingacmd on directory /run/icinga2/cmd bsc#1069410
  * Allow fping cap_net_raw (bsc#1047921)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Cleanup spec file with spec-cleaner
- Drop conditions/definitions related to old distros</changelog>
  <changelog author="kukuk@suse.com" date="1512388800">- fillup is required for post, not pre installation</changelog>
  <changelog author="krahmer@suse.com" date="1516017600">- Update to version 20180115:
  * - polkit-default-privs: usbauth (bsc#1066877)</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Update to version 20180125:
  * the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247)
  * make btmp root:utmp (bsc#1050467)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1534766400">- 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch: add
  whitelisting for the spice-gtk setuid binary (bsc#1101420) for improved
  usability.</changelog>
</package>
<package pkgid="e325ba88cb0442c30083ba8c692c7f15ba6070af1057489c581d235db1244963" name="permissions" arch="x86_64">
  <version epoch="0" ver="20180125" rel="lp150.2.3.1"/>
  <changelog author="meissner@suse.com" date="1470139200">- Update to version 20160802:
  * list the newuidmap and newgidmap, currently 0755 until review is done (bsc#979282)
  * root:shadow 0755 for newuidmap/newgidmap</changelog>
  <changelog author="meissner@suse.com" date="1470571200">- Update to version 20160807:
  * suexec2 is a symlink, no need for permissions handling</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- Update to version 20170602:
  * make /etc/ppp owned by root:root. The group dialout usage is no longer used</changelog>
  <changelog author="meissner@suse.com" date="1496491200">- Require: group(trusted), as we are handing it out to some unsuspecting
  binaries and it is no longer default. (bsc#1041159 for fuse, also cronie, etc)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496836800">- BuildIgnore group(trusted): we don't really care for this group
  in the buildroot and do not want to get system-users into the
  bootstrap cycle as we can avoid it.</changelog>
  <changelog author="opensuse-packaging@opensuse.org" date="1504699200">- Update to version 20170906:
  * permissions - copy dbus-daemon-launch-helper from / to /usr - bsc#1056764
  * permissions: Adding suid bit for VBoxNetNAT (bsc#1033425)</changelog>
  <changelog author="astieger@suse.com" date="1505304000">- Update to version 20170913:
  * Allow setuid for shadow newuidmap, newgidmap bsc#979282, bsc#1048645)</changelog>
  <changelog author="astieger@suse.com" date="1506081600">- Update to version 20170922:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="pgajdos@suse.com" date="1506513600">- Update to version 20170927:
  * fix typos in manpages</changelog>
  <changelog author="astieger@suse.com" date="1506600000">- Update to version 20170928:
  * Fix invalid syntax bsc#1048645 bsc#1060738</changelog>
  <changelog author="jsegitz@suse.com" date="1508932800">- Update to version 20171025:
  * Stricter permissions on cron directories (paranoid) and stricter permissions on sshd_config (secure/paranoid)</changelog>
  <changelog author="eeich@suse.com" date="1509969600">- Update to version 20171106:
  * Allow setuid root for singularity (group only) bsc#1028304</changelog>
  <changelog author="krahmer@suse.com" date="1511265600">- Update to version 20171121:
  * - permissions: adding kwayland (bsc#1062182)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="astieger@suse.com" date="1511956800">- Update to version 20171129:
  * permissions: adding gvfs (bsc#1065864)
  * Allow setgid incingacmd on directory /run/icinga2/cmd bsc#1069410
  * Allow fping cap_net_raw (bsc#1047921)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Cleanup spec file with spec-cleaner
- Drop conditions/definitions related to old distros</changelog>
  <changelog author="kukuk@suse.com" date="1512388800">- fillup is required for post, not pre installation</changelog>
  <changelog author="krahmer@suse.com" date="1516017600">- Update to version 20180115:
  * - polkit-default-privs: usbauth (bsc#1066877)</changelog>
  <changelog author="meissner@suse.com" date="1516881600">- Update to version 20180125:
  * the eror should be reported for permfiles[i], not argv[i], as these are not the same files. (bsc#1047247)
  * make btmp root:utmp (bsc#1050467)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1534766400">- 0001-whitelisting-add-spice-gtk-usb-helper-setuid-binary-.patch: add
  whitelisting for the spice-gtk setuid binary (bsc#1101420) for improved
  usability.</changelog>
</package>
<package pkgid="1f11c2ea415b4eda8050a6b2d362718e6c22784c366445be15df4b8bfbbb0de6" name="php7" arch="src">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="9787d2aabe517f910075ae59c15b29a3fa96a2c1a9f5f058467a27390b7062e4" name="php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="ca7180a14c390d0514d06bdba51c7b4c0fb26c71c38bf4896416b1bafff1b418" name="php7" arch="src">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="52b7da6d72eb74deaa85c66f6c62b49f4c55d5b4f6281a562a94ef57eca2636f" name="php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="3659f3204641db685f5580260d24d59de5b4eb9750ecf22bad7a61bf436e0e15" name="php7" arch="src">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="6c197e3d8088f69b92e4eb2612b01caab027d66c81af7e8f63bc7418dd62bbb5" name="php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="2b606c27eeb37d5ca402505e6e55b98eeb8337680c28e3cdc3ca1dcc929858b5" name="php7" arch="src">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="486e587c9b1bcc1deb8bcd3f115790e94fbbf25788b3f3847cc0469b80d1476f" name="php7" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="7b58e50f60baf6941501814deedb44a4678c39f354813826965cc8ad1ed52f79" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="a89978dbb647bbd73981567d991410460837e2ca0fa2c48700196d8bfdad0fbb" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="94ce16cc051a3f80aedc8ef11a36adb262dcf9074e637898ca2a5efac17c5ac9" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="1261e1d90acb89534862873fd0886350e77d1fa05872d9e4072d943917d1d69b" name="php7-bcmath" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="a8e85d36fa8b3adff5ab2b8e8ee7c7433125b4e174042c1c4a56d7b2edb1255e" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="3262dab1c78a14213d6dacfe1367f55866a9cbbad87dd6cebe323c6d5e2444bf" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="eea27c694733618b2e6965b71b7b4081654037ee4bb06bfb61c58c2aa4ba0c48" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="cf0f23e342851f61a859f9f0ea2dae67f2edf5e401750bfa314655f46ee7848d" name="php7-bz2" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="440a9571ca47e0f6d7a93ef6d654755ab9e011147b889ec25cb8ed32d9b50d53" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="c58d82241af4e6df6122acd621b37d4efb442f4ba773967a75129fe89bb97cc7" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="92d4fd6d2dbf93f293822e80cfdd0f215a2b3c36d4d1e335e392e0174d797558" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="b5a5667060d8052b2e19b225f50e128494a060297adb28547319fc1a32d74321" name="php7-calendar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="00a4502acdc1c28e6c0586607205345a4a2fa6b4bbc71f669a2b4e7b34d250d1" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="243f61368b04492341347514e1ec330c3535d60ab5f95583d6fc750ab3a9a917" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="a9dce2826c67c3c82d3359322154f99323a87a6eb06606067ce60a5d1d3bb18d" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="1bc66b194fa1da149e96ca8939376fb8e10aba99299054efd1c6183095cd7c83" name="php7-ctype" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="340e95564782275a55d4ebde60c6761f9c1ff591496354868c9628426fbb2454" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="2e3a06c9d5a7116d6b1db93da778fddf11527da6ccea44979b8e27a40ef26d00" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="e578a33ab8deabfdf9a8d40355719e1e3fdbccb5d996c46f317afc21f8ea4b6d" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="d02ea97a0941292c4cc2cd6666e8d8168564d358410646cab7eb102870b5bd5c" name="php7-curl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="95ded54d7d15578bdddb5cf132586bcefb14f8a2e005017556354b0c12f1b011" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="93f41e35e19cbb58292fd1beb6c479bd1f164112fe694eabff87fbade8f6b745" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="426480014356f6926776ea8417c3f13f7214419dc78caf28bf8ca78cf4bec0f9" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="7c910f2c300555d33b1de22d6ad0ea2ab7aac62f4eeaf1685b8cedd9a5a5a782" name="php7-dba" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="cbfd357a3292d66403c99db49b0ebf810f2e1520f17c3a34bd33dcf1c22ff009" name="php7-devel" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="f6cfc64b6c289b24f32a8f359fa97ffeec9d9d5357a3950d3ceb716d2ddff272" name="php7-devel" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="e7d8a2794e1910706aa0a45cf43a98e30ede21737f94a7970a0647afda971e86" name="php7-devel" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="b5d11b7fc917a09e5be0e4f1cbfdf3f5acb0a53729dfac69d1eaf01649c2dd37" name="php7-devel" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="5cc521330ae2a14160db4d3998f3de4b78cce0f5ebfa96583ecf86dfc871d354" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="2c3f5d2f951a422337e9f434c7d1902aed7687b7c9941247804a6ce27e2fd81d" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="ba05713da7dfaa073d754b1cf3a05f5dd1dbc0252b30e992760037943a0f54ab" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="85c2ff73f0fb1c2e207fcd2408d09695518790842bc821c49d130628e5d8b622" name="php7-dom" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="85516cb0d5f1040737aa26bdec1cf2a77c813cce06745e104e5fc7e29d628906" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="db883d62a48390204c998631ef6f2ed9f1703ab622c47f4a4dfd56047a72ad49" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="06442c447e4f3ab329ba80524f84737490a575b90ad221d20e27b42a885dafdc" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="e4459216ff9ea438599ca2fd0065f0bdb2a5b75c1664efb19294bfe992af645a" name="php7-embed" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="f36d6adfbe87e8cf18ae14155bccae7e09c689be00f69e9c3bb6cd2255902260" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="288a52494eec0b06327ef480878c2ea7ef9f23aefa6f610199925e92ffb00ede" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="43c5fc321e71e85b2cca5ed34e28d759b2f180db144cbed508463e9db54b9ad5" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="f80523e0b3778f81ffce442f257de509aa3b4f51da7956915f54808017b267b7" name="php7-enchant" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="cf579e2978591935b6c601c2aae05156a03e526ecfe4dab6711ffde221751242" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="b088fa34beeb5484ebe68fd1aeef47d24dd5958e3a0093b1fd534d670a8a7373" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="38157987a14df7cc30cfc148b17538f5d660a876359b8cf16aea04eb3dc6ca50" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="0acd4846b6abc8b9105b47e81cccf40f41fd61a6360f6e5f435a7d2aa691432a" name="php7-exif" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="1a6d55c0c0db8d792336221a646aaec2ce95ea8bd0962b31ab4bbc61d9e8e18b" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="f15bc158f66cad7fc0167192ce14ff275c919b31e1bfcacfd5cd2e259c4ad697" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="d0230152fa6fff051bc50a603388d79fa3556b5d85bc5dbe8f45865db60d2477" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="995271068d0f0b88c39d73487a485a41cd631e4a0e17f71fa83d02f5ca12d959" name="php7-fastcgi" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="28ce1f4c96b6579c63832f159e87cac0186af904cafbb8aab2ca1ca17964b2ac" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="bf8ab3bc7921d92a1ebc3aa5caa776f89f2bd598ae097418a075d342ae66e8f9" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="c25a02bdb7bbd150062b69e64a602f3c7c6502b65e324b7105e1b59f577c66ac" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="da3df47d6814c7a8341e1c721c5b9affb8b5aef7d3aefe9b62e0f2a791a01d9c" name="php7-fileinfo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="2be198f347ecb13cbbd05e3159c2e2f1d56aeeb31f796b0fd2cd6adbbb6153ec" name="php7-firebird" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="5c9394a727d13e25cdaebdbc6797a7869ab6fe235c69c847b7adb72cabe92f79" name="php7-firebird" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="02fb4cc1e63aef7cc9fdef01d13d527ccea1d351d545269f9b4f1b2a280ebff2" name="php7-firebird" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="013e27c801b2cd30a6e86003590479c13c058e2d603d2db513038e5897387b3b" name="php7-firebird" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="256fe7eabdb362454b80b6fc71516966c4b6c3f6e2732672e540121bd4a93451" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="b4c5e9e1de853accff1396b4f17fc32e54c85ceefe381db7c9237853e0792532" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="35b33240208128de9cee4b82418a15345274417e4f2a91669549e027e1ebb838" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="9c8a7ca6c7f5146f2f5f74406ad548ca6115e32db51680f18f867a54ecfc89ba" name="php7-fpm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="6948cc7d1ceeb746304448c66bc84f02dd8ccc044928fc61418639eee331ac7c" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="654777f1bf0d9499c9cba4a0419476e28e3a1eb142ed48b6324b7ac1f1d42bf1" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="1eee87b22d3e66791fa8583ba1d636dea2e4b4e0d8b62871b4622f5b51ee3c65" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="a0f14580f2f05e7c04cff879fe7be6c971cfbef5a44f430e934434bdbb28a2dc" name="php7-ftp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="ee0346a32feeef43a577c1a794b4e5b6b4f534373558fb18166ee906108449a5" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="c31ed6bc37d80ae09e85c66a6c32eee812c14169b3a09e03db0942c20ce71d76" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="95491ec53e0db8e46108c696eb602becf4628b4bc46b5924e3bb22989464807a" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="de93a37e3cdcfcf5c81f0ea16ac5d5a9c72f3591796d4e8d1cfc0e326e4841f2" name="php7-gd" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="aee4bf97930c8cae0cd78228d2480ae644ff3a0a7c1cb8fcfbc59f1ceefb27bc" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="5e1cbda22c2e8c41c7e316b5115292497e93f7610e2fc57c99dd742aaa2a6c21" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="c79b3cf7bb32eb480e1579c56c32d934cfc9a09d788c530fcf7b64b29e4a38a2" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="0a12a3fe539881a6acfe48c905057d0c7650ad9f0d565186836e5d7c3b6aa455" name="php7-gettext" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="e4fa59bee5d75e89a7b40c97ade9dfd20210ad383e5d2b1d522a0ef95c2aa621" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="6a55c1a77baff17652f4decbc6e034773e02f31cc674f65d0d33cbc25a4973b7" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="200ed0854e86c2bd4e36c4c84a942d3e652fdbbd348b0fa5f366bce2490c98b1" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="be9a8d97b7263762c17085700a39a6cf7972b8cb26217f4f2add2ce0adca6bbf" name="php7-gmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="b38cb21baf1a89c3cbcc658110a365664e82dadc3bb860e39c9b5c948a163aa5" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="578a405a88b32c9b00779cb752f6001248799f3ef0d074ad5e98de542faebcd2" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="3f297f596ba29a48fb800dd0b436b7c9c4418cdfc19e6cb6ee933106c9a14a55" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="7a0ce1e2e97c05dbbf14c002df9aef98db7972fdd65c1602705aa3a6d3c00d63" name="php7-iconv" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="3b57449f61aeb6411a1910b142061d33563ed34aa668c9472c87500c169e5e40" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="d9bb14d429f4fb93e6f19edc0b7cc50995f99d5983f02a3d8d62d68b13181deb" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="c55feb77bf648e6ada0a13d017d94838f4f6135ddbd53f4e533d7b36efc7aecf" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="c319897b49a85b6aa7f53e09e3ae9ec01a52b242acd01ab135525fd75f67aa6b" name="php7-intl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="7341ac80edaedf3c679ad067452fb68c379e0b52f076e40bcc6d6a61ec75e268" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="f5d4201be93615b3737c5b4d2f4df478feeaf1886084899886959d7f9627162d" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="ef729d8c23f144b15c7c2f2fd67bac946d2387caf2eed4c9d55a6c77bbb262f2" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="4a97749b281c303ccde1a084873c53bcbf5924c049a2e542c3a6535d0cd7349e" name="php7-json" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="33ae768934d769c4dca4978aa46a230c217952a20270c2dc006e5df6cc472044" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="b3ca9008ba71073390a1eafbc21aed490a1a6ab23fb438ce39605c96cdc99a23" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="337faf57a45a63af965d25ffcef62d08eb091521da4b700b320be9388aee0fa8" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="b909b4afd04a5f071e5c6d3457e400a18808148cffe4ab0af86c449607d1cc33" name="php7-ldap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="8a863fe23709218d48ae27b91e9a87c743f0e53e46ef362d2880ca7d9103abc3" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="e4a1a99cbfed1a4be63b37798a05bd263ca501cd3eccd032a2dcd16aaa8a7799" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="16b46554a2f038be081513756b828083c9b35790a3e0e974d5f1ab8883f10667" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="6fb1274f065b494085f2fbdc718ea07e158130b4ee7df042651a19dc3478ca8f" name="php7-mbstring" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="815a09e0b1ea4185b718f0bf826a2646271783b7329c9378524dc2dcf361c0c7" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="dcdd9ca0dfa85034eabb670a5895ae0c3ef7540a29a7e3a51dce88559cec6d3c" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="b99aee9e60f94c86ea8c70a94427da4ea82926a1e4369b5f65034b1bbdf53a56" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="2ef88ede6afabe81d32cf5fa01b1e5cd5ee2b2262e57a407df6955f6aa9779eb" name="php7-mysql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="dc46a039b0f44f09f0216695a42f240be93d857f27df738b854646dceff05bba" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="741511d832ced69ef0a1c5ee8cd2fed6530adcb61153d47e07cd15e5e37f38ff" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="16fe774fc3a831d7aa4cd35e0af95aff31677d9e77d93159a6cbda1fddc55955" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="60357ac7ed2c261ac39200a00115cc4b61a75c0bb5cf56d9bdc992897376a34d" name="php7-odbc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="38f2dc3e3bd30d562232f37699ce74750cc0de035137f1c5f22cbf7738f22b89" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="68764f814db7ac9bd1ca9f1ae57cace1cacf1a7246fac576952febeb17e20f66" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="95ef8578c713287a5b6b8ee3b721e75e40431ca26a18ab1bd717414ae781774e" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="f1124c965945541a0ff79a09483dae203dc53421492350be151083cef2b774c9" name="php7-opcache" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="d8b9dcb5853a78d86893c281b3bf16728f26c9c806e8a7b4d29b263e038f4c3e" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="cf2c48e2d0d31cfd21d62a7459454b8ad6bd06fdba81dbab4c66b1d4ea5addb6" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="f1e7f6d1b346ef3f91884a01c239488533699d96b8c306ed84ab547be5c7ae52" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="222cb3197d64178af10b9825f1be88a73bd87f351cf3dbd3265e40615f965c1f" name="php7-openssl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="846a200020e225ddbc08cb4937d84a469ad06993624c7d4a3bd557ee7102bf1f" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="0742d590f9ccf7da3fdc701588751a8925f6de6837ca9fd37ddf38189de1626a" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="9baf4d51e8477a7b7658135d3f13e4080013b6f11d36bcb5f65671a83818a311" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="8b67e59921509f5527ec4f7027807090972948c60bfda72fa7208f8440443867" name="php7-pcntl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="181c952bdc1eec28a3e4798148999ebaf88e2c6dfbda231a7a19fca1b453e99a" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="f1494241ac1088f24c40504bde6577e5efdd5dee8892732b9f8b0f8ff5807669" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="2e28245a9c9603b1bc7db08d706e3dbbaab2c8355c1ff94fd377326df990bd9e" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="4d26caea93c764c28e88b0f31205c48e26911b413c4a19eb0ffba3a5b7236893" name="php7-pdo" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="163abc19e29b0b59a65f73706388600a967320e04b352009d1221966ff60a057" name="php7-pear" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="6885e6617f381073a03a2ff485baf12522b6e2feb930becf60948a350ad3e8b4" name="php7-pear" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="848f6f455e88401d2235d8d093e7b732219aa83c0d81bf837b3b6b5bb2bd7c0f" name="php7-pear" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="bc9ac044c6f736c3b9a7ecefb707a69613f522e0e5f6227875a2c068464fe38f" name="php7-pear" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="3ce0669bc54641218f61c007e782fd2f204022470a927ea95bee7969b99d54f8" name="php7-pear-Archive_Tar" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="92f65aa7150f7b09d804eb9e6b30df50b05096cc1c20f84dd26cc5a63b2c1f6a" name="php7-pear-Archive_Tar" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="f0858b3b0a8971eff9aa9be3a5676741d85404972789c6814bb6df2d52d1fe3a" name="php7-pear-Archive_Tar" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="a4449f366a51cfab17ca6e93948a90d7db0a8de93a457f96b0c50fd5d2ef4213" name="php7-pear-Archive_Tar" arch="noarch">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="9247953533a4d7dc52fe073eba6820f5278a859f69c26222b39bab94b956866e" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="2dcd8f0d4c61b28af704a7ba5fa1610eed13d016e1ca0cdfdc19f44bf8736101" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="c020a4d148df8a3692d9ab5f323b1ba0f3e04af6fa747fe755a1ab9b3f0afe77" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="946b175763787d9b88752d8dcf120207abe14e82ff50cc641b1b624c56e722bd" name="php7-pgsql" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="0a28f614e8b0bca930e6c00dd07590b9856cc26092a609b0bb45781e366a16b7" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="735dd960abe9a9e136bf1338fce741829ffb5973e19ecc3c56869ecfebf277af" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="00306882ae388ca4311edc96da34ebfbe6e9626b223ba57305351d94ea791679" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="cc8efe3f70eddfe8a197bb7fd2770ba716b983db858816b652eed35196b3f610" name="php7-phar" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="ad59eccdbe05ef7dd348cfe4b768ae5e14f0108079bdcaeb812f14ebca5a2c52" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="7019c04b6eb6db6860c25f060e6dd05f95b117d1ebbd209bc04d6959361f6a68" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="180faa49e8a5a9581f75f2d81d1e3f668774272716c8d2a759d5415d1c611ad6" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="1d18f770c98d3ec15320dca54fd138ae560f8e36839a0da6ec3cd21d02e7e396" name="php7-posix" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="f03f11636991bcadc68e966e081b0d1d959037496d1dea2702c216c13e3d0ee7" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="adae2707a3a861cba2764505ebb6088ea67619a2884e1df22fec2f8a84b74bab" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="38dd151d79418285d978b78b9bf203dd2f491d18ae35ef15f57cc4ca74af3a51" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="de8d03183187eba77de62d7a68485d08776728f37423cf85091c9576b47131de" name="php7-readline" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="2eabbe58a5ca8d0f1588dcff01f512e289668b6813dd9bcae7d13649adb40874" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="d89c0c7518a1e43b2131165ae5771e96ad1da3f45931dae622882ba6740c2b9b" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="da1461c16a0e19a0b9eac624a14b4fe9aa0e97eb0f4c752236bec99a4d6dde84" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="b1fb5011d1da0c476dc11d5ae6cea15f9da15e4a7cede641ec6516ea38261d51" name="php7-shmop" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="7c7ffe01adeb73bc4936a5324d65da115cf8452d6f7173218106037ad8799002" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="2cee64b55d4f210652eb368a1bddbd7c7fc0bacea07d6c570576d2a7a3c72123" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="f2a08615c422b7ea5febc1b4e53de3ab72e9100b4c20969d0b658733b4d78066" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="ee114b21b9ab78e33055960f61409029cedc67e4200dcb63b15a2073d754794c" name="php7-snmp" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="f0188898edf54b73e730943d97b09ac5142fd99d1f620215788bb6209b6d62d3" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="ae0ca60f66e5df5136ba7a89bee95d5bade2d988f92f621bfe0c0831499cec0a" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="972c79481333bc7037f99324fd486abeb95af0f11b0cca6ded5da47a1ebe445f" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="edbeb96ddd13376d22c46ea7187acd87dc281c84ef2906f0adc287326805ddb9" name="php7-soap" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="eec94a3cdf4383095aec9a00cf18bfe42c1017aa85fbd6ae25ab1b102bd1c2bb" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="1f1419ab9b748a9d9d31ded4087dc1359476c9042860e9426952799f84185562" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="f67101660f736fc5aea70f9a3c2c217a78e9b7acf19e2d44f790e52e84cb42a7" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="d6671eecce8d8f78099341932999e4197f7d73591d1e7accf6e812e8cf582c0b" name="php7-sockets" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="2725a13578c0c7edd3602ebe2e0554027c59ba2e5e352107cfa1808834324d0a" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="d7c4f397fbae1a47b00285337bf39bee31595c1ce77545520f0dd4249a2184bc" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="4f52aab0c6a7ce23f5003b201eef3264f69db17e87cb0a2664d65450dc03b5c9" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="4b26fdc829c160c99d2d7701808af2e8bbfe5ddd352724bb19491a59bca04531" name="php7-sodium" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="a716a927a96a512c52a027984231f9924346e8155a2a29203b0409dcab92f7ff" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="6a50196ac09e76afd47453ead5a7a919f8e5796dc11056c6f67f6a0cae031ad2" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="be0d8669bab823e663642dbae84012d3b9f6344b1b7e9cb11645cb1ba68ee4d0" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="57ecb36044d7ed671893522cb9c6df0074f5e1ba01f04c546aa1c88f15cf0a04" name="php7-sqlite" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="aafb94afca04ba194c6c148b8fe177d7114eab1e3376c8b72b5357e3213e1b30" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="5a921d997ab7957196ad2aa6b0c5cf25159c506b55934d20275cbe3638bb3998" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="b500202e9caa7d8799819130b4c976cddf1d09c3af8f63c795ca2bc4872a0d6d" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="baa119968185b35ee29d598dc0cbef718364650b698d2b60e1a45d7413a12650" name="php7-sysvmsg" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="59c519854fcc1198d0ccea8189581639b23145d17b9f5777a911c00df129ab20" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="3ebe030505a7651015ff47ec54febf7db8ec04fe8acb8e6ae9e52248adeb1541" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="e6daeb0cdcd4c9b4fe8e20f01e936f288a921ea2e588dc66947748098178f12d" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="69aafc867e0e9e82c58f493b5819213dd92d5d831c2d2678dc1077bcb56e3211" name="php7-sysvsem" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="fd249e5844bdf6f6fbfbd3d9a89f8568e0105e9fb5436d874215b2585f434431" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="d598284dbaa15f35e0e5f8c87741c624ea2913718654b27f44896f7fa2c02121" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="43e9bd1344b4a1f3cd6186fe362c3f7a5cef1e6e52476cf5c1dfaf511f9ac099" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="db180842e271371806736db49649feb719864c3f311ed9ee72bdc237daae276e" name="php7-sysvshm" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="1e1377f68a5c8fc818fa9dbb9e05cfdd1c30f93251706db1f62b0db2599d053d" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="386e94d5b92166599dd02cc202bd4da4112b2611beb62b249ec57ebccae74565" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="b03e59ff284362c0239b4023e974644147bdeb7b9bf489e1ac584720b5ac735e" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="5d4c203b6010cc4cab4078d86a3bfd343955bd5c94c2d43710bb97f6a1ba7fa1" name="php7-tidy" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="4f89ff587de1d9c9d52ea921f5f8ba8540fd8771c8889949c0a28f8bf6a07cf9" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="f2a41be55dcce76bd09a65bcbe9e103b847f055ba8e54ba042eb9006e0b64a8c" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="a9991ba3bf849993fd39bc0e1ed554fa166c76adc8ea6525d7358b41d3550277" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="2e4accdb3a0e75f07d334ed9fdc95fe6a248539a2634428c5cd1f9d3d58ef054" name="php7-tokenizer" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="6b24fdf7b398fdf10eed8939f0dcf0ab5b8aa06d6243d00982b96ccf379d62f8" name="php7-wddx" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="b08718f802f419882153ed12b559fa5b0eb2461d6b6a1cdab9f521166cc8a16c" name="php7-wddx" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="afde43cd2e2c4dce163e981cd86e957abff8cfed6e917d7a8b8d8eecc13d0384" name="php7-wddx" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="1ce6e2a7a368d2b8c17ba4cb2d5a3bb2d240e835cbeaffedd3e6e85d82424386" name="php7-wddx" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="add7418e70d910248f8c77fcb4d3922259654e161592949165ed81698e45ce72" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="c8336a0031b4e2a9151a3a63e72b5f51296cb3ea4e486f5d75d9adddf86b6eba" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="e891ca227ef481f0f771a4776aa35c3589a9dda6de40a8cdf285c563b05d016f" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="59e18a6919f4b07dae5db0e3c454172a43bb4ea1bc67bbd9e1ed7b48513bd3a7" name="php7-xmlreader" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="2ec971134474158fcd1cbfe98c8092b52ffefbe6c64d158b81a3400ffe0bda89" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="ee957b349c4bbd3e81641fce40e058b0baec8627030fedd5d653c92237ab6798" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="cd19ac40ca75b3a823a6e5f8c25432db6210c1fd518a6ccf6fb360a7505b5ac7" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="5ebdfd6329d6b6bcb8dac8c1f57f0615bd29eb0b96fc44f58c8cbb0c511ac0be" name="php7-xmlrpc" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="c8834868c1580d7e3c5be2e5a997f8ba0d4e0fb72bf8c807e0322208de0bb829" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="e43bbf012d3b484ab5ada6ce36e467899081612575cd29a52537cc8bf7debcdd" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="7e83b7d1ff60eee9d8ae56e082f59c74aab0f90dca7a063f90b50141ab8fbc9d" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="9d01dfd58f3e6de2d95e41fa437dc6efe5d8ccdd89f9b218da0f10b29276f9bf" name="php7-xmlwriter" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="7b91cf08f589c244d447512f9c4d3f96b56fde6a4c7e0aa2a85ea8ae6126ec13" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="551f3e6a635e6551e0342bd7ec3bae6ee978c3cb628d904d034bfc0580fba6c7" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="fc6f961c415bf50b5ced408dbdf034ab404187e0516e3bb910a573a6d2667fee" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="18e452cf6b120101d8141fe58495f1b1395248b74ec6185dfba4e936ab220053" name="php7-xsl" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="ab8a4b2d2af04e378884f9509077c3121ea721b9834fef7764f4cb1df4a05867" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="6c10c21ccc6f266d0414d366bfb9abeb5340651fccd26511e39a2c0babc1bbb9" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="7ed0bb16049d7236027c9adb4a4c9cc61b32bfa81a66a585b72f6760f983717d" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="3f3db3e051ed963ce0a2eedb01f8e98e1e966ab5a281f9b649928f5020228e6a" name="php7-zip" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="9ab12192f5341ce11bfde3a997c96dcd87e52ce0ae4b38b553854f42a173b775" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.12.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1519041600">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1535371200">- security update:
  * CVE-2018-1000222 [bsc#1105434]
    + php-CVE-2018-1000222.patch</changelog>
</package>
<package pkgid="08718d2f3afd427d1502fe52be827018229e4cba9eafa351f496b080dad6b3f6" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.3.1"/>
  <changelog author="pgajdos@suse.com" date="1516968000">- do not build against system gd when suse_version &lt; 1500</changelog>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
</package>
<package pkgid="17145567d7d698346d14fda15a4b90a7e6d9d2ea21a20330bd7b5a3c00f2b117" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.6.1"/>
  <changelog author="pgajdos@suse.com" date="1518004800">- updated to 7.2.2: This is a bugfix release, with several bug
  fixes included.
  http://php.net/ChangeLog-7.php#7.2.2</changelog>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
</package>
<package pkgid="f228cb464f0b86d5320791ef53c39ca88a79c95136a2c986e20ddae070def966" name="php7-zlib" arch="x86_64">
  <version epoch="0" ver="7.2.5" rel="lp150.2.9.1"/>
  <changelog author="pgajdos@suse.com" date="1519041600">- fixed memory leak in pgsql extension, php function pg_escape_bytea
  https://bugs.php.net/bug.php?id=75838
  [bsc#1076970] (internal)
  + php7-pgsql-memory-leak.patch</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519041601">- Remove buildRequires on:
  * libevent-devel: php7-fpm does not use it.
  * pam-devel: not used
- Add buildrequire on zlib-devel explicitly.
- libvpx is not needed but libwebp is, only when not building
  against system gd. xft likewise.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300800">-  Support password_hash("...", PASSWORD_ARGON2I), buildrequire
  libargon2 in supported products.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300801">- php7-date-regenerate-lexers.patch: honor RE2C_FLAGS</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1519300802">- php7-honor-re2c-flags.patch: honor RE2C_FLAGS everywhere.
- remove generated lexers so they are recreated at build time</changelog>
  <changelog author="pgajdos@suse.com" date="1520596800">- updated to 7.2.3: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.3
- removed upstreamed php7-pgsql-memory-leak.patch
- php7-systzdata-v15.patch refreshed and renamed to
  php7-systzdata-v16.patch</changelog>
  <changelog author="dimstar@opensuse.org" date="1520683200">- BuildRequire pkgconfig(enchant) instead of enchant-devel: enchant
  is moving to version 2.2, with an enchant-1 as compatibility
  package. By using the pkgconfig symbol, we don't have to care for
  the actual package name.</changelog>
  <changelog author="pgajdos@suse.com" date="1521201600">- drop imap extension [bsc#1084461]</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1521547200">- Fix build for %arm and aarch64</changelog>
  <changelog author="pgajdos@suse.com" date="1522065600">- build firebird extension only for openSUSE (sle15 requirement)</changelog>
  <changelog author="pgajdos@suse.com" date="1522843200">- updated to 7.2.4: This is a security release with also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.4
- php7-no-build-date.patch refreshed</changelog>
  <changelog author="pgajdos@suse.com" date="1523880000">- apache2-mod_php7 does not provide libphp7.so [bsc#1089487]</changelog>
  <changelog author="pgajdos@suse.com" date="1524139200">- build-test.sh: generic spec file name</changelog>
  <changelog author="pgajdos@suse.com" date="1525089600">- updated to 7.2.5: This is a security release which also contains
  several minor bug fixes.
  http://php.net/ChangeLog-7.php#7.2.5</changelog>
  <changelog author="idonmez@suse.com" date="1525694400">- Add freetype-pkgconfig.patch to fix build with new Freetype:
  use pkg-config to find Freetype libraries</changelog>
  <changelog author="pgajdos@suse.com" date="1525867200">- rename freetype-pkgconfig.patch to php7-freetype-pkgconfig.patch
  to align with the rest of patch names</changelog>
  <changelog author="pgajdos@suse.com" date="1525953600">- better workaround for [bsc#1089487]: build mod_phpN.so
  instead of libphpN.so</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- main package requires wwwrun:www user [bsc#1093025]</changelog>
  <changelog author="pgajdos@suse.com" date="1530014400">- security update
  * CVE-2018-12882 [bsc#1099098]
    + php-CVE-2018-12882.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1533384000">- security update
  * CVE-2018-14851 [bsc#1103659]
    + php-CVE-2018-14851.patch
  * CVE-2017-9120 [bsc#1103661]
    + php-CVE-2017-9120.patch</changelog>
</package>
<package pkgid="618f7665954483db0fb4b650acf577c297412aebe11d3781ecae09d614e69c77" name="phpMyAdmin" arch="noarch">
  <version epoch="0" ver="4.8.2" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1491048000">- update to 4.7.0 (2017-03-28)
  * gh#12233 [Display] Improve message when renaming database to
    same name
  * gh#6146  Log authentication attempts to syslog
  * gh#11981 Remove support for Swekey authentication
  * gh#11987 Remove code for no longer supported MSIE versions
  * gh#11962 Remove embedded PHP libraries, use composer to install
    them
  * gh#12017 Cannot easily select multiple tables when exporting
  * gh#12047 Add javascript filtering for databases
  * gh#12166 More compact rendering of navigation tree
  * gh#12129 Improve performance with SkipLockedTables
  * gh#12173 Do not hide indexes under a slider
  * Improve performance of zip file import
  * gh#12196 Removed $cfg['ThemePath']
  * gh#6274  Add support for export user settings as config.inc.php
    snippet
  * gh#5555  Better report query errors while generating SQL exports
  * gh#12307 Produce valid JSON on export
  * gh#12325 Setup script icons broken
  * gh#12378 Support IPv6 proxies
  * Removed MySQL connection retry without password
  * gh#12218 Allow to specify further parameters for control
    connection
  * gh#12162 Show charset for each table on Database structure page
  * gh#12463 Incorrect link in the href of icon at Hide/Show unhide
    links
  * gh#12330 Shortcut for closing console
  * gh#12465 Improved handling of http requests
  * gh#12474 Broken links in Setup forms Navigation
  * gh#12494 Can't add a new User
  * gh#12523 Add 'token' Parameter in all POST requests
    (Fix 'Token mismatch' errors)
  * gh#12302 Improved usage of number_format
  * gh#12656 Server selection not working
  * gh#12543 NULL results in dataset are colored grey
  * gh#12664 Create Bookmark broken
  * gh#12688 Use unsigned int for storing bookmark ID
  * gh#12352 Added password strength indicator
  * gh#12713 Correctly handle HTTP status when doing requests
  * gh#12247 Add option to delete settings from browser storage
  * gh#12783 Remove unused PMA_addJSCode function
  * gh#12069 Add table filtering to database structure
  * gh#12799 Allow to configure signon session parameters
  * gh#12854 Drop database is broken
  * gh#12863 Can't toggle Event Scheduler on
  * gh#12742 Finish removing dead code references to xls/xlsx
    import and export, which was removed some time ago.
  * gh#12536 Rename "Relations" to "Relationships" in many places
    as it's the more proper term
  * gh#12834 Fixed margins in central columns feature
  * gh#12903 Document more export configuration options
  * gh#12897 Use consistent numeric format for table overhead
  * gh#12901 Use server returned table name on renaming table
  * gh#12918 Always use \r\n as newline when editing fields
  * gh#12923 Fixed server side search in navigation panel
  * gh#12929 Undefined index warning with ssl_ca_paths
  * gh#12924 Do not show errors from OpenSSL cookie
    encryption/decryption
  * gh#12945 Fixed hint rendering on adding new user
  * gh#12941 Fixed sorting of tables in relation view
  * gh#12936 Fixed tables pagination in navigation panel
  * gh#12904 Do not collapse add form for central columns if there
    are none
  * gh#12955 Fixed database renaming
  * gh#12954 Fixed export of tracking data
  * gh#12960 Enclose exports in transaction by default
  * gh#12966 After adding a column ADD INDEX option won't be
    displayed when enabling AI
  * gh#12972 Better error message when Composer has not been run
  * gh#12988 Do not show language selector without choices
  * gh#12993 Fixed external links to php documentation
  * gh#12990 Fixed error when loading favorite tables to console
  * gh#12981 Improved rendering of new version information
  * gh#12922 Fixed bookmarks ordering
  * gh#12964 Fixed table search in navigation
  * gh#12985 Fixed rendering of foreign key browsing
  * gh#12957 Fixed manipulation with GIS data having zero
    coordinates
  * gh#12804 Fixed various designer javascript errors
  * gh#12934 Fixed possible javascript error on server status page
  * gh#12927 Fixed javascript error on 3NF normalization
  * gh#12996 List all databses in navigation panel database
    dropdown
  * gh#12980 Better defaults when creating multi field foreign key
  * gh#12976 Improved foreign key editor behavior
  * gh#12958 Always show error reporting dialog on top
  * gh#12693 Improved support for TokuDB
  * gh#11231 Try harder to honor LoginCookieValidity setting
  * gh#13016 and #13017 Slight improvements to the table layout of
    Relation view
  * gh#12345 Correctly show affected rows for LOAD DATA queries
  * gh#13010 Copy database: SQL error for copying PMADB metadata
  * gh#13002 Fixed OpenDocument exports
  * gh#13000 Align NULL values according to the column alignment
  * gh#13021 Show phpMyAdmin errors even with error_reporting
    set to 0
  * gh#13020 Removed warning about client and server versions
    mismatch
  * Hide comments on table Structure tab when no comment is set
  * Fixed submission of error reports
  * gh#13033 Use Referrer-Policy header to specify referrer policy
  * Fixed javascript confirmation of dangerous queries
  * gh#13040 Compatibility with hhvm 3.18
  * gh#13031 Fixed displaying of all rows
  * gh#12967 Fixed related field selection for native relations
  * gh#13045 Properly escape MIME transformatoin names
  * gh#13028 Always show 100% in font selector
  * gh#13047 Fix query simulating for more servers
  * gh#12846 Fix new version check for sites with wrongly
    configured curl
  * gh#12951 When exporting to Excel, the default is now to include
    column names in the first row
  * gh#13059 Removed debugging code
  * gh#13029 Fixed table tracking for nested table groups
  * gh#13053 Fixed broken links in setup
  * gh#12708 Removed phpMyAdmin version from User-Agent header
  * gh#13084 Do not point users to setup when it is disabled
  * gh#12660 Delete only phpMyAdmin cookies on upgrade
  * gh#13088 Fixed editing of rows with text primary key
  * gh#13092 Do not try to sync favorite tables if configuration
    storage is not enabled
  * gh#13105 Fixed changing attribute for virtual field
  * gh#12757 Fixed setting password on recent MariaDB with non
    working plugins
  * gh#12349 Fixed undefined variable on import from some formats
  * gh#13103 Do not offer default names for copying/renaming
    databases
  * [security] Possible to bypass
    $cfg['Servers'][$i]['AllowNoPassword'], see PMASA-2017-08
- Drop patch phpMyAdmin-pma.patch because now in upstream</changelog>
  <changelog author="chris@computersalat.de" date="1492862400">- restore phpMyAdmin-pma.patch
  * because it is NOT upstream and needed for configuration storage
- restore previous phpMyAdmin-config.patch
  * merge with upstream config VAR changes
  - removed $cfg['Servers'][$i]['designer_coords']</changelog>
  <changelog author="ecsos@opensuse.org" date="1496404800">- update to 4.7.1 (2017-05-25)
  * gh#13132 Always execute tracking queries as controluser
  * gh#13125 Focus on SQL editor after inserting field name
  * gh#13133 Fixed broken links in setup
  * gh#13135 Database list Tooltips: Show wrong value
  * gh#13150 Fixed pagination while browsing resuls
  * gh#13149 Fixed outbound links in changelog.php
  * gh#13146 Do not include devel dependencies in the release
  * gh#13144 Do not show New as a database in database dropdown
  * gh#13130 Fixed handling of errors in AJAX requests
  * gh#13152 Fixed PHP error in case of invalid table preferences
  * gh#13154 Fixed PHP error on password change
  * gh#13219 Fix Refresh of Process List
  * gh#13182 Fix refresh of long queries
  * gh#12301 Improved handling of logout with disabled
    LoginCookieDeleteAll
  * gh#13216 Add support for MySQL 8.0 collations
  * gh#13218 Fixed rendering of phpMyAdmin logos
  * gh#13234 Properly report not working sessions
  * gh#13256 Fixed password check on server replication
  * gh#13252 Fixed grid editing time column
  * gh#13258 Fixed detection of Amazon RDS
  * gh#13241 Redirect user to last page that has any tables to
    display
  * gh#13266 Fix link to User accounts overview page
  * gh#13274 Fix error in query builder
  * gh#13177 Grid editing repeats action after error</changelog>
  <changelog author="ecsos@opensuse.org" date="1498996800">- update to 4.7.2 (2017-06-29)
  * gh#13314 Make theme selection keep current server
  * gh#13311 Fixed direct login for accounts without password
  * gh#13316 Fixed check for mbstring.func_overload
  * gh#13323 Fixed wrong encoding of table at triggers
  * gh#12976 Fixed natural sorting in several places
  * gh#12718 Show warning for users removed from mysql.user table
  * gh#13362 Fixed loading additional javascripts
  * gh#13343 Fixed editing QBE
  * gh#13193 Improved documentation on user settings
  * gh#13092 Gracefully handle early fatal errors in AJAX requests
  * gh#13327 Fixed Incorrect NavigationTreeEnableExpansion default
    value in the documentation
  * gh#13008 Fixed export of database with a lot of tables
  * gh#13318 Improved performance when importing with enabled
    tracking
  * gh#13386 Avoid PHP errors with non existing configuration on
    OS X
  * gh#13388 Show only supported charsets for conversion
  * gh#13392 Fixed operation with session.auto_start enabled
  * gh#13383 "Create PHP code" is broken
  * gh#13189 Fixed links to resume timeouted import</changelog>
  <changelog author="ecsos@opensuse.org" date="1500724800">- update to 4.7.3
  * gh#13447 Large multi-line query removes Export operation and
    blanks query box options
  * gh#13445 Fixed rendering of query results
  * gh#13437 Fixed version check when not connected to a database
  * gh#13465 Fixed creating relation
  * gh#13475 Fixed export without backquotes
  * gh#13482 Improved handling of uploaded files with open_basedir
  * gh#13387 Fixed inline editing of hex values
  * gh#13382 Fixed size of index edit dialog
  * gh#13489 Fixed rendering SQL lint errors
  * gh#13468 Avoid breakage if set_time_limit is disabled
  * gh#13471 Fail if ini_set/ini_get are disabled
  * gh#13436 Automatically connect using SSL when server is
    configured so
  * gh#13478 Fixed usage of some browser transformations</changelog>
  <changelog author="chris@computersalat.de" date="1501243200">- fix for boo#1050980
  * replace mcrypt with openssl, see
    https://github.com/phpseclib/phpseclib/issues/1028
- update changes (update to 4.6.6 (2017-01-23))
  * add missing (CVE-Not yet available) CVE's</changelog>
  <changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
  <changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
  <changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
  <changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>
  <changelog author="ecsos@opensuse.org" date="1512216000">- update to 4.7.6 (2017-11-29)
  * gh#13517 Fixed check all interaction with filtering
  * gh#13803 Add SJIS-win to default list of allowed charsets
  * gh#13436 Improve detection that MySQL server needs SSL connection
  * gh#13038 Support JSON datatype on MariaDB 10.2.7 and newer
  * gh#13824 Fixed constructing ALTER query with AFTER
  * gh#13821 Lock page when changes are done in the SQL editor
  * gh#13842 Prefer iconv for encoding conversions
  * gh#13737 Fixed changing password on MariaDB cluster</changelog>
  <changelog author="astieger@suse.com" date="1514203200">- phpMyAdmin 4.7.7:
  * Fixed displaying of formatted numeric values for some locales
  * Ensure datetimepicker is always loaded for datetime fields
  * Fixed PHP error when browsing certain results
  * Fix XSRF/CSRF vulnerability (bsc#1074066, PMASA-2017-09)
    CVE-2017-1000499</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- phpMyAdmin 4.7.8:
  * Fixed error handling with PHP 7.2
  * Fixed resetting default setting values
  * Fixed fallback value for collation connection
- fix for boo#1082188
  * PMASA-2018-1 (CVE-2018-7260, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-1/
  - Fix XSS in Central Columns Feature</changelog>
  <changelog author="ecsos@opensuse.org" date="1520337600">- update to 4.7.9 (2018-03-05)
  * gh#13931 Fixed browsing tables with more results
  * gh#13927 "Not an integer" when browsing a table
  * gh#13887 "Input variables exceeded 1000" error relating
    to PHP's max_input_vars directive</changelog>
  <changelog author="javier@opensuse.org" date="1523448000">- update to 4.8.0 (2018-04-07)
  * gh#12946 Allow to export JSON with unescaped unicode chars
  * gh#12983 Disable login button without solved reCaptcha
  * gh#12315 Allow to remove individual segments from pie charts
  * gh       Change label from "Improve table structure" to
  "Normalize" to match standard terminology
  * gh#13087 Offer login as different user on access denied from
  MySQL
  * gh#13110 Indicate when HTTPS is not properly reported on the
  server
  * gh#13119 No database selected error when adding foreign key
  * gh#12388 Improved database search to allow search for exact
  phrase match
  * gh#13099 Report error when trying to copy database to same
  name
  * gh#13167 Themes now have to contain metadata in theme.json
  * gh#6363  phpMyAdmin no longer requires eval() in PHP
  * gh#12386 The mbstring dependency is now optional
  * gh#13269 Small refactoring in preparation to CSP
  * gh#13384 Database link broken in Databases Page
  * gh#13391 Configurable authentication logging using
  $cfg['AuthLog']
  * gh#13086 Add support for Google Invisible Captcha
  * gh#13058 Improved error reporting for reCAPTCHA
  * gh#12899 Improved rendering of server variables table
  * gh#12948 Fixed javascript editor for TIME values
  * gh#13095 Fixed alignment of foreign keys editing
  * gh#12944 Improved inline editor for JSON
  * gh#13145 Improved layout of operations pages
  * gh#13448 Add "format" query button in edit view form
  * gh#6241  Implement Responsive Design/mobile interface
  * gh       Use a single location for classes under PhpMyAdmin
  namespace
  * gh#12354 Indicate SSL status on main page
  * gh#5666  Configuration directives for defaults of Transformation
  options
  * gh#12261 Remove inline JavaScript
  * gh#13408 Show MySQL warnings when executing SQL queries
  * gh#5827  Allow Designer to show tables from other databases
  * gh#13268 Replace Query-By-Example with multi-table query
  generator interface
  * gh#13576 Add privileges export to per-database listing
  * gh       Consolidate functions into class files
  * gh#13560 Add support for changing collation for all tables and
  columns in database
  * gh#13303 Add support for creating fulltext index from table
  structure
  * gh#13711 Lower default value for $cfg['MaxExactCount']
  * gh#13722 DisableIS is not fully honored
  * gh#6197  Added support for authentication using U2F and 2FA
  * gh#13480 Avoid removing cookies on upgrade
  * gh#13397 Remember state of navigation panel
  * gh#11688 Reduced cookie usage
  * gh#13466 Better utilization of user preferences
  * gh#14042 Rename PMD to Designer
  * gh#13940 Honor arg_separator in AJAX requests
  * gh#14060 Can't edit rows in Internet Explorer
  * gh#14096 Internet Explorer compatibility; fixes JavaScript error
  Object doesn't support property or method 'startsWith'</changelog>
  <changelog author="javier@opensuse.org" date="1523448001">- spec clean up
  * Let rpm find the library dependencies by itself. Remove
    unneeded explicit Requires: tags (php-zlib)
  * Remove logic for obsolete openSUSE releases
  * Ignore pem-certificate rpmlint warning (see
    libraries/certs/README.rst)
  * Remove hidden .github, .php_cs.dist, .scrutinizer.yml and
    .editorconfig
  * Remove php_twig.h and twig.c (devel)
  * Set proper shebang for bash and php scripts
  * Make phpmyadmin/sql-parser/bin/*-query and
    paragonie/random_compat/*.sh executable</changelog>
  <changelog author="ecsos@opensuse.org" date="1523448002">- fix wrong require /usr/bin/bash to /bin/bash so phpMyAdmin could
  install
- insert missing templates dir in htaccess
  See https://docs.phpmyadmin.net/de/latest/setup.html#securing-your-phpmyadmin-installation
- create tmp dir and insert this in htaccess to fix the errormessage
  after login</changelog>
  <changelog author="ecsos@opensuse.org" date="1524225600">- update to 4.8.0.1 (2018-04-19)
- fix for boo#1090309
  * PMASA-2018-2 (CVE-2018-10188, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-2/
  - Multiple CSRF vulnerabilities</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 4.8.1 (2018-05-25)
  * gh#12772 Fix case where the central columns attributes don't
    get filled in
  * gh#14049 Fix case where the query builder doesn't work when
    selected column is *
  * gh#14029 Revert "Browse" table CSS overflow
  * gh#14241 Dropping indexes and foreign keys fail
  * gh#14227 Relational linking broken
  * gh#14246 Fixed error in configuration storage zero config
  * gh#14128 Show 2FA Secret next to QR code
  * gh#14212 XML Export from single table throws fatal error
  * gh#14239 Line and some other charts ignore result set order of
    values chosen for the x-axis
  * gh#14260 Fixed configuration for DefaultLang and Lang
  * gh#14264 Linking for 'Distinct values' broken
  * gh#13968 Fix MariaDB 10.2 current_timestamp()
  * gh#14249 Fix for missing go button in view edit
  * gh#14125 Fix for issues with spatial fields
  * gh#14189 Remember table's sorting broken
  * gh#14289 Fix multi-column sorting
  * gh#14278 Fix central columns in-line edit bug
  * gh#14066 Fix AUTO_INCREMENT error when only exporting table
    structure in database-level exports
  * gh#13893 Simulating queries produces unexpected results
  * gh#14309 Setup script icons missing</changelog>
  <changelog author="chris@computersalat.de" date="1529668800">- update to 4.8.2 (2018-06-21)
  * issue #14370 WHERE 0 causes Fatal error
  * issue #14225 Fix missing index icon
- fix for boo#1098752
  * PMASA-2018-3 (CVE-2018-12581, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-3/
  - XSS in Designer feature
- fix for boo#1098751
  * PMASA-2018-4 (CVE-2018-12613, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-4/
  - File inclusion and remote code execution attack
- some minor changelog fixes about security fix entries</changelog>
</package>
<package pkgid="db99181139b52a5231c51c40cb7a87864c8fb788ae41338a6819fa9f1894d1df" name="phpMyAdmin" arch="src">
  <version epoch="0" ver="4.8.2" rel="lp150.2.3.1"/>
  <changelog author="ecsos@opensuse.org" date="1491048000">- update to 4.7.0 (2017-03-28)
  * gh#12233 [Display] Improve message when renaming database to
    same name
  * gh#6146  Log authentication attempts to syslog
  * gh#11981 Remove support for Swekey authentication
  * gh#11987 Remove code for no longer supported MSIE versions
  * gh#11962 Remove embedded PHP libraries, use composer to install
    them
  * gh#12017 Cannot easily select multiple tables when exporting
  * gh#12047 Add javascript filtering for databases
  * gh#12166 More compact rendering of navigation tree
  * gh#12129 Improve performance with SkipLockedTables
  * gh#12173 Do not hide indexes under a slider
  * Improve performance of zip file import
  * gh#12196 Removed $cfg['ThemePath']
  * gh#6274  Add support for export user settings as config.inc.php
    snippet
  * gh#5555  Better report query errors while generating SQL exports
  * gh#12307 Produce valid JSON on export
  * gh#12325 Setup script icons broken
  * gh#12378 Support IPv6 proxies
  * Removed MySQL connection retry without password
  * gh#12218 Allow to specify further parameters for control
    connection
  * gh#12162 Show charset for each table on Database structure page
  * gh#12463 Incorrect link in the href of icon at Hide/Show unhide
    links
  * gh#12330 Shortcut for closing console
  * gh#12465 Improved handling of http requests
  * gh#12474 Broken links in Setup forms Navigation
  * gh#12494 Can't add a new User
  * gh#12523 Add 'token' Parameter in all POST requests
    (Fix 'Token mismatch' errors)
  * gh#12302 Improved usage of number_format
  * gh#12656 Server selection not working
  * gh#12543 NULL results in dataset are colored grey
  * gh#12664 Create Bookmark broken
  * gh#12688 Use unsigned int for storing bookmark ID
  * gh#12352 Added password strength indicator
  * gh#12713 Correctly handle HTTP status when doing requests
  * gh#12247 Add option to delete settings from browser storage
  * gh#12783 Remove unused PMA_addJSCode function
  * gh#12069 Add table filtering to database structure
  * gh#12799 Allow to configure signon session parameters
  * gh#12854 Drop database is broken
  * gh#12863 Can't toggle Event Scheduler on
  * gh#12742 Finish removing dead code references to xls/xlsx
    import and export, which was removed some time ago.
  * gh#12536 Rename "Relations" to "Relationships" in many places
    as it's the more proper term
  * gh#12834 Fixed margins in central columns feature
  * gh#12903 Document more export configuration options
  * gh#12897 Use consistent numeric format for table overhead
  * gh#12901 Use server returned table name on renaming table
  * gh#12918 Always use \r\n as newline when editing fields
  * gh#12923 Fixed server side search in navigation panel
  * gh#12929 Undefined index warning with ssl_ca_paths
  * gh#12924 Do not show errors from OpenSSL cookie
    encryption/decryption
  * gh#12945 Fixed hint rendering on adding new user
  * gh#12941 Fixed sorting of tables in relation view
  * gh#12936 Fixed tables pagination in navigation panel
  * gh#12904 Do not collapse add form for central columns if there
    are none
  * gh#12955 Fixed database renaming
  * gh#12954 Fixed export of tracking data
  * gh#12960 Enclose exports in transaction by default
  * gh#12966 After adding a column ADD INDEX option won't be
    displayed when enabling AI
  * gh#12972 Better error message when Composer has not been run
  * gh#12988 Do not show language selector without choices
  * gh#12993 Fixed external links to php documentation
  * gh#12990 Fixed error when loading favorite tables to console
  * gh#12981 Improved rendering of new version information
  * gh#12922 Fixed bookmarks ordering
  * gh#12964 Fixed table search in navigation
  * gh#12985 Fixed rendering of foreign key browsing
  * gh#12957 Fixed manipulation with GIS data having zero
    coordinates
  * gh#12804 Fixed various designer javascript errors
  * gh#12934 Fixed possible javascript error on server status page
  * gh#12927 Fixed javascript error on 3NF normalization
  * gh#12996 List all databses in navigation panel database
    dropdown
  * gh#12980 Better defaults when creating multi field foreign key
  * gh#12976 Improved foreign key editor behavior
  * gh#12958 Always show error reporting dialog on top
  * gh#12693 Improved support for TokuDB
  * gh#11231 Try harder to honor LoginCookieValidity setting
  * gh#13016 and #13017 Slight improvements to the table layout of
    Relation view
  * gh#12345 Correctly show affected rows for LOAD DATA queries
  * gh#13010 Copy database: SQL error for copying PMADB metadata
  * gh#13002 Fixed OpenDocument exports
  * gh#13000 Align NULL values according to the column alignment
  * gh#13021 Show phpMyAdmin errors even with error_reporting
    set to 0
  * gh#13020 Removed warning about client and server versions
    mismatch
  * Hide comments on table Structure tab when no comment is set
  * Fixed submission of error reports
  * gh#13033 Use Referrer-Policy header to specify referrer policy
  * Fixed javascript confirmation of dangerous queries
  * gh#13040 Compatibility with hhvm 3.18
  * gh#13031 Fixed displaying of all rows
  * gh#12967 Fixed related field selection for native relations
  * gh#13045 Properly escape MIME transformatoin names
  * gh#13028 Always show 100% in font selector
  * gh#13047 Fix query simulating for more servers
  * gh#12846 Fix new version check for sites with wrongly
    configured curl
  * gh#12951 When exporting to Excel, the default is now to include
    column names in the first row
  * gh#13059 Removed debugging code
  * gh#13029 Fixed table tracking for nested table groups
  * gh#13053 Fixed broken links in setup
  * gh#12708 Removed phpMyAdmin version from User-Agent header
  * gh#13084 Do not point users to setup when it is disabled
  * gh#12660 Delete only phpMyAdmin cookies on upgrade
  * gh#13088 Fixed editing of rows with text primary key
  * gh#13092 Do not try to sync favorite tables if configuration
    storage is not enabled
  * gh#13105 Fixed changing attribute for virtual field
  * gh#12757 Fixed setting password on recent MariaDB with non
    working plugins
  * gh#12349 Fixed undefined variable on import from some formats
  * gh#13103 Do not offer default names for copying/renaming
    databases
  * [security] Possible to bypass
    $cfg['Servers'][$i]['AllowNoPassword'], see PMASA-2017-08
- Drop patch phpMyAdmin-pma.patch because now in upstream</changelog>
  <changelog author="chris@computersalat.de" date="1492862400">- restore phpMyAdmin-pma.patch
  * because it is NOT upstream and needed for configuration storage
- restore previous phpMyAdmin-config.patch
  * merge with upstream config VAR changes
  - removed $cfg['Servers'][$i]['designer_coords']</changelog>
  <changelog author="ecsos@opensuse.org" date="1496404800">- update to 4.7.1 (2017-05-25)
  * gh#13132 Always execute tracking queries as controluser
  * gh#13125 Focus on SQL editor after inserting field name
  * gh#13133 Fixed broken links in setup
  * gh#13135 Database list Tooltips: Show wrong value
  * gh#13150 Fixed pagination while browsing resuls
  * gh#13149 Fixed outbound links in changelog.php
  * gh#13146 Do not include devel dependencies in the release
  * gh#13144 Do not show New as a database in database dropdown
  * gh#13130 Fixed handling of errors in AJAX requests
  * gh#13152 Fixed PHP error in case of invalid table preferences
  * gh#13154 Fixed PHP error on password change
  * gh#13219 Fix Refresh of Process List
  * gh#13182 Fix refresh of long queries
  * gh#12301 Improved handling of logout with disabled
    LoginCookieDeleteAll
  * gh#13216 Add support for MySQL 8.0 collations
  * gh#13218 Fixed rendering of phpMyAdmin logos
  * gh#13234 Properly report not working sessions
  * gh#13256 Fixed password check on server replication
  * gh#13252 Fixed grid editing time column
  * gh#13258 Fixed detection of Amazon RDS
  * gh#13241 Redirect user to last page that has any tables to
    display
  * gh#13266 Fix link to User accounts overview page
  * gh#13274 Fix error in query builder
  * gh#13177 Grid editing repeats action after error</changelog>
  <changelog author="ecsos@opensuse.org" date="1498996800">- update to 4.7.2 (2017-06-29)
  * gh#13314 Make theme selection keep current server
  * gh#13311 Fixed direct login for accounts without password
  * gh#13316 Fixed check for mbstring.func_overload
  * gh#13323 Fixed wrong encoding of table at triggers
  * gh#12976 Fixed natural sorting in several places
  * gh#12718 Show warning for users removed from mysql.user table
  * gh#13362 Fixed loading additional javascripts
  * gh#13343 Fixed editing QBE
  * gh#13193 Improved documentation on user settings
  * gh#13092 Gracefully handle early fatal errors in AJAX requests
  * gh#13327 Fixed Incorrect NavigationTreeEnableExpansion default
    value in the documentation
  * gh#13008 Fixed export of database with a lot of tables
  * gh#13318 Improved performance when importing with enabled
    tracking
  * gh#13386 Avoid PHP errors with non existing configuration on
    OS X
  * gh#13388 Show only supported charsets for conversion
  * gh#13392 Fixed operation with session.auto_start enabled
  * gh#13383 "Create PHP code" is broken
  * gh#13189 Fixed links to resume timeouted import</changelog>
  <changelog author="ecsos@opensuse.org" date="1500724800">- update to 4.7.3
  * gh#13447 Large multi-line query removes Export operation and
    blanks query box options
  * gh#13445 Fixed rendering of query results
  * gh#13437 Fixed version check when not connected to a database
  * gh#13465 Fixed creating relation
  * gh#13475 Fixed export without backquotes
  * gh#13482 Improved handling of uploaded files with open_basedir
  * gh#13387 Fixed inline editing of hex values
  * gh#13382 Fixed size of index edit dialog
  * gh#13489 Fixed rendering SQL lint errors
  * gh#13468 Avoid breakage if set_time_limit is disabled
  * gh#13471 Fail if ini_set/ini_get are disabled
  * gh#13436 Automatically connect using SSL when server is
    configured so
  * gh#13478 Fixed usage of some browser transformations</changelog>
  <changelog author="chris@computersalat.de" date="1501243200">- fix for boo#1050980
  * replace mcrypt with openssl, see
    https://github.com/phpseclib/phpseclib/issues/1028
- update changes (update to 4.6.6 (2017-01-23))
  * add missing (CVE-Not yet available) CVE's</changelog>
  <changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
  <changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
  <changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
  <changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>
  <changelog author="ecsos@opensuse.org" date="1512216000">- update to 4.7.6 (2017-11-29)
  * gh#13517 Fixed check all interaction with filtering
  * gh#13803 Add SJIS-win to default list of allowed charsets
  * gh#13436 Improve detection that MySQL server needs SSL connection
  * gh#13038 Support JSON datatype on MariaDB 10.2.7 and newer
  * gh#13824 Fixed constructing ALTER query with AFTER
  * gh#13821 Lock page when changes are done in the SQL editor
  * gh#13842 Prefer iconv for encoding conversions
  * gh#13737 Fixed changing password on MariaDB cluster</changelog>
  <changelog author="astieger@suse.com" date="1514203200">- phpMyAdmin 4.7.7:
  * Fixed displaying of formatted numeric values for some locales
  * Ensure datetimepicker is always loaded for datetime fields
  * Fixed PHP error when browsing certain results
  * Fix XSRF/CSRF vulnerability (bsc#1074066, PMASA-2017-09)
    CVE-2017-1000499</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- phpMyAdmin 4.7.8:
  * Fixed error handling with PHP 7.2
  * Fixed resetting default setting values
  * Fixed fallback value for collation connection
- fix for boo#1082188
  * PMASA-2018-1 (CVE-2018-7260, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-1/
  - Fix XSS in Central Columns Feature</changelog>
  <changelog author="ecsos@opensuse.org" date="1520337600">- update to 4.7.9 (2018-03-05)
  * gh#13931 Fixed browsing tables with more results
  * gh#13927 "Not an integer" when browsing a table
  * gh#13887 "Input variables exceeded 1000" error relating
    to PHP's max_input_vars directive</changelog>
  <changelog author="javier@opensuse.org" date="1523448000">- update to 4.8.0 (2018-04-07)
  * gh#12946 Allow to export JSON with unescaped unicode chars
  * gh#12983 Disable login button without solved reCaptcha
  * gh#12315 Allow to remove individual segments from pie charts
  * gh       Change label from "Improve table structure" to
  "Normalize" to match standard terminology
  * gh#13087 Offer login as different user on access denied from
  MySQL
  * gh#13110 Indicate when HTTPS is not properly reported on the
  server
  * gh#13119 No database selected error when adding foreign key
  * gh#12388 Improved database search to allow search for exact
  phrase match
  * gh#13099 Report error when trying to copy database to same
  name
  * gh#13167 Themes now have to contain metadata in theme.json
  * gh#6363  phpMyAdmin no longer requires eval() in PHP
  * gh#12386 The mbstring dependency is now optional
  * gh#13269 Small refactoring in preparation to CSP
  * gh#13384 Database link broken in Databases Page
  * gh#13391 Configurable authentication logging using
  $cfg['AuthLog']
  * gh#13086 Add support for Google Invisible Captcha
  * gh#13058 Improved error reporting for reCAPTCHA
  * gh#12899 Improved rendering of server variables table
  * gh#12948 Fixed javascript editor for TIME values
  * gh#13095 Fixed alignment of foreign keys editing
  * gh#12944 Improved inline editor for JSON
  * gh#13145 Improved layout of operations pages
  * gh#13448 Add "format" query button in edit view form
  * gh#6241  Implement Responsive Design/mobile interface
  * gh       Use a single location for classes under PhpMyAdmin
  namespace
  * gh#12354 Indicate SSL status on main page
  * gh#5666  Configuration directives for defaults of Transformation
  options
  * gh#12261 Remove inline JavaScript
  * gh#13408 Show MySQL warnings when executing SQL queries
  * gh#5827  Allow Designer to show tables from other databases
  * gh#13268 Replace Query-By-Example with multi-table query
  generator interface
  * gh#13576 Add privileges export to per-database listing
  * gh       Consolidate functions into class files
  * gh#13560 Add support for changing collation for all tables and
  columns in database
  * gh#13303 Add support for creating fulltext index from table
  structure
  * gh#13711 Lower default value for $cfg['MaxExactCount']
  * gh#13722 DisableIS is not fully honored
  * gh#6197  Added support for authentication using U2F and 2FA
  * gh#13480 Avoid removing cookies on upgrade
  * gh#13397 Remember state of navigation panel
  * gh#11688 Reduced cookie usage
  * gh#13466 Better utilization of user preferences
  * gh#14042 Rename PMD to Designer
  * gh#13940 Honor arg_separator in AJAX requests
  * gh#14060 Can't edit rows in Internet Explorer
  * gh#14096 Internet Explorer compatibility; fixes JavaScript error
  Object doesn't support property or method 'startsWith'</changelog>
  <changelog author="javier@opensuse.org" date="1523448001">- spec clean up
  * Let rpm find the library dependencies by itself. Remove
    unneeded explicit Requires: tags (php-zlib)
  * Remove logic for obsolete openSUSE releases
  * Ignore pem-certificate rpmlint warning (see
    libraries/certs/README.rst)
  * Remove hidden .github, .php_cs.dist, .scrutinizer.yml and
    .editorconfig
  * Remove php_twig.h and twig.c (devel)
  * Set proper shebang for bash and php scripts
  * Make phpmyadmin/sql-parser/bin/*-query and
    paragonie/random_compat/*.sh executable</changelog>
  <changelog author="ecsos@opensuse.org" date="1523448002">- fix wrong require /usr/bin/bash to /bin/bash so phpMyAdmin could
  install
- insert missing templates dir in htaccess
  See https://docs.phpmyadmin.net/de/latest/setup.html#securing-your-phpmyadmin-installation
- create tmp dir and insert this in htaccess to fix the errormessage
  after login</changelog>
  <changelog author="ecsos@opensuse.org" date="1524225600">- update to 4.8.0.1 (2018-04-19)
- fix for boo#1090309
  * PMASA-2018-2 (CVE-2018-10188, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-2/
  - Multiple CSRF vulnerabilities</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 4.8.1 (2018-05-25)
  * gh#12772 Fix case where the central columns attributes don't
    get filled in
  * gh#14049 Fix case where the query builder doesn't work when
    selected column is *
  * gh#14029 Revert "Browse" table CSS overflow
  * gh#14241 Dropping indexes and foreign keys fail
  * gh#14227 Relational linking broken
  * gh#14246 Fixed error in configuration storage zero config
  * gh#14128 Show 2FA Secret next to QR code
  * gh#14212 XML Export from single table throws fatal error
  * gh#14239 Line and some other charts ignore result set order of
    values chosen for the x-axis
  * gh#14260 Fixed configuration for DefaultLang and Lang
  * gh#14264 Linking for 'Distinct values' broken
  * gh#13968 Fix MariaDB 10.2 current_timestamp()
  * gh#14249 Fix for missing go button in view edit
  * gh#14125 Fix for issues with spatial fields
  * gh#14189 Remember table's sorting broken
  * gh#14289 Fix multi-column sorting
  * gh#14278 Fix central columns in-line edit bug
  * gh#14066 Fix AUTO_INCREMENT error when only exporting table
    structure in database-level exports
  * gh#13893 Simulating queries produces unexpected results
  * gh#14309 Setup script icons missing</changelog>
  <changelog author="chris@computersalat.de" date="1529668800">- update to 4.8.2 (2018-06-21)
  * issue #14370 WHERE 0 causes Fatal error
  * issue #14225 Fix missing index icon
- fix for boo#1098752
  * PMASA-2018-3 (CVE-2018-12581, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-3/
  - XSS in Designer feature
- fix for boo#1098751
  * PMASA-2018-4 (CVE-2018-12613, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-4/
  - File inclusion and remote code execution attack
- some minor changelog fixes about security fix entries</changelog>
</package>
<package pkgid="b2370a733461d8fa27354e8dae6190ec596e90eb9a72cd592d55465fbc204c5f" name="phpMyAdmin" arch="noarch">
  <version epoch="0" ver="4.8.2" rel="lp150.2.6.1"/>
  <changelog author="chris@computersalat.de" date="1492862400">- restore phpMyAdmin-pma.patch
  * because it is NOT upstream and needed for configuration storage
- restore previous phpMyAdmin-config.patch
  * merge with upstream config VAR changes
  - removed $cfg['Servers'][$i]['designer_coords']</changelog>
  <changelog author="ecsos@opensuse.org" date="1496404800">- update to 4.7.1 (2017-05-25)
  * gh#13132 Always execute tracking queries as controluser
  * gh#13125 Focus on SQL editor after inserting field name
  * gh#13133 Fixed broken links in setup
  * gh#13135 Database list Tooltips: Show wrong value
  * gh#13150 Fixed pagination while browsing resuls
  * gh#13149 Fixed outbound links in changelog.php
  * gh#13146 Do not include devel dependencies in the release
  * gh#13144 Do not show New as a database in database dropdown
  * gh#13130 Fixed handling of errors in AJAX requests
  * gh#13152 Fixed PHP error in case of invalid table preferences
  * gh#13154 Fixed PHP error on password change
  * gh#13219 Fix Refresh of Process List
  * gh#13182 Fix refresh of long queries
  * gh#12301 Improved handling of logout with disabled
    LoginCookieDeleteAll
  * gh#13216 Add support for MySQL 8.0 collations
  * gh#13218 Fixed rendering of phpMyAdmin logos
  * gh#13234 Properly report not working sessions
  * gh#13256 Fixed password check on server replication
  * gh#13252 Fixed grid editing time column
  * gh#13258 Fixed detection of Amazon RDS
  * gh#13241 Redirect user to last page that has any tables to
    display
  * gh#13266 Fix link to User accounts overview page
  * gh#13274 Fix error in query builder
  * gh#13177 Grid editing repeats action after error</changelog>
  <changelog author="ecsos@opensuse.org" date="1498996800">- update to 4.7.2 (2017-06-29)
  * gh#13314 Make theme selection keep current server
  * gh#13311 Fixed direct login for accounts without password
  * gh#13316 Fixed check for mbstring.func_overload
  * gh#13323 Fixed wrong encoding of table at triggers
  * gh#12976 Fixed natural sorting in several places
  * gh#12718 Show warning for users removed from mysql.user table
  * gh#13362 Fixed loading additional javascripts
  * gh#13343 Fixed editing QBE
  * gh#13193 Improved documentation on user settings
  * gh#13092 Gracefully handle early fatal errors in AJAX requests
  * gh#13327 Fixed Incorrect NavigationTreeEnableExpansion default
    value in the documentation
  * gh#13008 Fixed export of database with a lot of tables
  * gh#13318 Improved performance when importing with enabled
    tracking
  * gh#13386 Avoid PHP errors with non existing configuration on
    OS X
  * gh#13388 Show only supported charsets for conversion
  * gh#13392 Fixed operation with session.auto_start enabled
  * gh#13383 "Create PHP code" is broken
  * gh#13189 Fixed links to resume timeouted import</changelog>
  <changelog author="ecsos@opensuse.org" date="1500724800">- update to 4.7.3
  * gh#13447 Large multi-line query removes Export operation and
    blanks query box options
  * gh#13445 Fixed rendering of query results
  * gh#13437 Fixed version check when not connected to a database
  * gh#13465 Fixed creating relation
  * gh#13475 Fixed export without backquotes
  * gh#13482 Improved handling of uploaded files with open_basedir
  * gh#13387 Fixed inline editing of hex values
  * gh#13382 Fixed size of index edit dialog
  * gh#13489 Fixed rendering SQL lint errors
  * gh#13468 Avoid breakage if set_time_limit is disabled
  * gh#13471 Fail if ini_set/ini_get are disabled
  * gh#13436 Automatically connect using SSL when server is
    configured so
  * gh#13478 Fixed usage of some browser transformations</changelog>
  <changelog author="chris@computersalat.de" date="1501243200">- fix for boo#1050980
  * replace mcrypt with openssl, see
    https://github.com/phpseclib/phpseclib/issues/1028
- update changes (update to 4.6.6 (2017-01-23))
  * add missing (CVE-Not yet available) CVE's</changelog>
  <changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
  <changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
  <changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
  <changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>
  <changelog author="ecsos@opensuse.org" date="1512216000">- update to 4.7.6 (2017-11-29)
  * gh#13517 Fixed check all interaction with filtering
  * gh#13803 Add SJIS-win to default list of allowed charsets
  * gh#13436 Improve detection that MySQL server needs SSL connection
  * gh#13038 Support JSON datatype on MariaDB 10.2.7 and newer
  * gh#13824 Fixed constructing ALTER query with AFTER
  * gh#13821 Lock page when changes are done in the SQL editor
  * gh#13842 Prefer iconv for encoding conversions
  * gh#13737 Fixed changing password on MariaDB cluster</changelog>
  <changelog author="astieger@suse.com" date="1514203200">- phpMyAdmin 4.7.7:
  * Fixed displaying of formatted numeric values for some locales
  * Ensure datetimepicker is always loaded for datetime fields
  * Fixed PHP error when browsing certain results
  * Fix XSRF/CSRF vulnerability (bsc#1074066, PMASA-2017-09)
    CVE-2017-1000499</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- phpMyAdmin 4.7.8:
  * Fixed error handling with PHP 7.2
  * Fixed resetting default setting values
  * Fixed fallback value for collation connection
- fix for boo#1082188
  * PMASA-2018-1 (CVE-2018-7260, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-1/
  - Fix XSS in Central Columns Feature</changelog>
  <changelog author="ecsos@opensuse.org" date="1520337600">- update to 4.7.9 (2018-03-05)
  * gh#13931 Fixed browsing tables with more results
  * gh#13927 "Not an integer" when browsing a table
  * gh#13887 "Input variables exceeded 1000" error relating
    to PHP's max_input_vars directive</changelog>
  <changelog author="javier@opensuse.org" date="1523448000">- update to 4.8.0 (2018-04-07)
  * gh#12946 Allow to export JSON with unescaped unicode chars
  * gh#12983 Disable login button without solved reCaptcha
  * gh#12315 Allow to remove individual segments from pie charts
  * gh       Change label from "Improve table structure" to
  "Normalize" to match standard terminology
  * gh#13087 Offer login as different user on access denied from
  MySQL
  * gh#13110 Indicate when HTTPS is not properly reported on the
  server
  * gh#13119 No database selected error when adding foreign key
  * gh#12388 Improved database search to allow search for exact
  phrase match
  * gh#13099 Report error when trying to copy database to same
  name
  * gh#13167 Themes now have to contain metadata in theme.json
  * gh#6363  phpMyAdmin no longer requires eval() in PHP
  * gh#12386 The mbstring dependency is now optional
  * gh#13269 Small refactoring in preparation to CSP
  * gh#13384 Database link broken in Databases Page
  * gh#13391 Configurable authentication logging using
  $cfg['AuthLog']
  * gh#13086 Add support for Google Invisible Captcha
  * gh#13058 Improved error reporting for reCAPTCHA
  * gh#12899 Improved rendering of server variables table
  * gh#12948 Fixed javascript editor for TIME values
  * gh#13095 Fixed alignment of foreign keys editing
  * gh#12944 Improved inline editor for JSON
  * gh#13145 Improved layout of operations pages
  * gh#13448 Add "format" query button in edit view form
  * gh#6241  Implement Responsive Design/mobile interface
  * gh       Use a single location for classes under PhpMyAdmin
  namespace
  * gh#12354 Indicate SSL status on main page
  * gh#5666  Configuration directives for defaults of Transformation
  options
  * gh#12261 Remove inline JavaScript
  * gh#13408 Show MySQL warnings when executing SQL queries
  * gh#5827  Allow Designer to show tables from other databases
  * gh#13268 Replace Query-By-Example with multi-table query
  generator interface
  * gh#13576 Add privileges export to per-database listing
  * gh       Consolidate functions into class files
  * gh#13560 Add support for changing collation for all tables and
  columns in database
  * gh#13303 Add support for creating fulltext index from table
  structure
  * gh#13711 Lower default value for $cfg['MaxExactCount']
  * gh#13722 DisableIS is not fully honored
  * gh#6197  Added support for authentication using U2F and 2FA
  * gh#13480 Avoid removing cookies on upgrade
  * gh#13397 Remember state of navigation panel
  * gh#11688 Reduced cookie usage
  * gh#13466 Better utilization of user preferences
  * gh#14042 Rename PMD to Designer
  * gh#13940 Honor arg_separator in AJAX requests
  * gh#14060 Can't edit rows in Internet Explorer
  * gh#14096 Internet Explorer compatibility; fixes JavaScript error
  Object doesn't support property or method 'startsWith'</changelog>
  <changelog author="javier@opensuse.org" date="1523448001">- spec clean up
  * Let rpm find the library dependencies by itself. Remove
    unneeded explicit Requires: tags (php-zlib)
  * Remove logic for obsolete openSUSE releases
  * Ignore pem-certificate rpmlint warning (see
    libraries/certs/README.rst)
  * Remove hidden .github, .php_cs.dist, .scrutinizer.yml and
    .editorconfig
  * Remove php_twig.h and twig.c (devel)
  * Set proper shebang for bash and php scripts
  * Make phpmyadmin/sql-parser/bin/*-query and
    paragonie/random_compat/*.sh executable</changelog>
  <changelog author="ecsos@opensuse.org" date="1523448002">- fix wrong require /usr/bin/bash to /bin/bash so phpMyAdmin could
  install
- insert missing templates dir in htaccess
  See https://docs.phpmyadmin.net/de/latest/setup.html#securing-your-phpmyadmin-installation
- create tmp dir and insert this in htaccess to fix the errormessage
  after login</changelog>
  <changelog author="ecsos@opensuse.org" date="1524225600">- update to 4.8.0.1 (2018-04-19)
- fix for boo#1090309
  * PMASA-2018-2 (CVE-2018-10188, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-2/
  - Multiple CSRF vulnerabilities</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 4.8.1 (2018-05-25)
  * gh#12772 Fix case where the central columns attributes don't
    get filled in
  * gh#14049 Fix case where the query builder doesn't work when
    selected column is *
  * gh#14029 Revert "Browse" table CSS overflow
  * gh#14241 Dropping indexes and foreign keys fail
  * gh#14227 Relational linking broken
  * gh#14246 Fixed error in configuration storage zero config
  * gh#14128 Show 2FA Secret next to QR code
  * gh#14212 XML Export from single table throws fatal error
  * gh#14239 Line and some other charts ignore result set order of
    values chosen for the x-axis
  * gh#14260 Fixed configuration for DefaultLang and Lang
  * gh#14264 Linking for 'Distinct values' broken
  * gh#13968 Fix MariaDB 10.2 current_timestamp()
  * gh#14249 Fix for missing go button in view edit
  * gh#14125 Fix for issues with spatial fields
  * gh#14189 Remember table's sorting broken
  * gh#14289 Fix multi-column sorting
  * gh#14278 Fix central columns in-line edit bug
  * gh#14066 Fix AUTO_INCREMENT error when only exporting table
    structure in database-level exports
  * gh#13893 Simulating queries produces unexpected results
  * gh#14309 Setup script icons missing</changelog>
  <changelog author="chris@computersalat.de" date="1529668800">- update to 4.8.2 (2018-06-21)
  * issue #14370 WHERE 0 causes Fatal error
  * issue #14225 Fix missing index icon
- fix for boo#1098752
  * PMASA-2018-3 (CVE-2018-12581, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-3/
  - XSS in Designer feature
- fix for boo#1098751
  * PMASA-2018-4 (CVE-2018-12613, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-4/
  - File inclusion and remote code execution attack
- some minor changelog fixes about security fix entries</changelog>
  <changelog author="chris@computersalat.de" date="1533038400">- fix for boo#1103305
  * add missing dependency for php-ctype</changelog>
</package>
<package pkgid="9d9cee6317d76fe60b94ae40386b4ad5a29763e39df11ac661d8d8bbe1ffb2c2" name="phpMyAdmin" arch="src">
  <version epoch="0" ver="4.8.2" rel="lp150.2.6.1"/>
  <changelog author="chris@computersalat.de" date="1492862400">- restore phpMyAdmin-pma.patch
  * because it is NOT upstream and needed for configuration storage
- restore previous phpMyAdmin-config.patch
  * merge with upstream config VAR changes
  - removed $cfg['Servers'][$i]['designer_coords']</changelog>
  <changelog author="ecsos@opensuse.org" date="1496404800">- update to 4.7.1 (2017-05-25)
  * gh#13132 Always execute tracking queries as controluser
  * gh#13125 Focus on SQL editor after inserting field name
  * gh#13133 Fixed broken links in setup
  * gh#13135 Database list Tooltips: Show wrong value
  * gh#13150 Fixed pagination while browsing resuls
  * gh#13149 Fixed outbound links in changelog.php
  * gh#13146 Do not include devel dependencies in the release
  * gh#13144 Do not show New as a database in database dropdown
  * gh#13130 Fixed handling of errors in AJAX requests
  * gh#13152 Fixed PHP error in case of invalid table preferences
  * gh#13154 Fixed PHP error on password change
  * gh#13219 Fix Refresh of Process List
  * gh#13182 Fix refresh of long queries
  * gh#12301 Improved handling of logout with disabled
    LoginCookieDeleteAll
  * gh#13216 Add support for MySQL 8.0 collations
  * gh#13218 Fixed rendering of phpMyAdmin logos
  * gh#13234 Properly report not working sessions
  * gh#13256 Fixed password check on server replication
  * gh#13252 Fixed grid editing time column
  * gh#13258 Fixed detection of Amazon RDS
  * gh#13241 Redirect user to last page that has any tables to
    display
  * gh#13266 Fix link to User accounts overview page
  * gh#13274 Fix error in query builder
  * gh#13177 Grid editing repeats action after error</changelog>
  <changelog author="ecsos@opensuse.org" date="1498996800">- update to 4.7.2 (2017-06-29)
  * gh#13314 Make theme selection keep current server
  * gh#13311 Fixed direct login for accounts without password
  * gh#13316 Fixed check for mbstring.func_overload
  * gh#13323 Fixed wrong encoding of table at triggers
  * gh#12976 Fixed natural sorting in several places
  * gh#12718 Show warning for users removed from mysql.user table
  * gh#13362 Fixed loading additional javascripts
  * gh#13343 Fixed editing QBE
  * gh#13193 Improved documentation on user settings
  * gh#13092 Gracefully handle early fatal errors in AJAX requests
  * gh#13327 Fixed Incorrect NavigationTreeEnableExpansion default
    value in the documentation
  * gh#13008 Fixed export of database with a lot of tables
  * gh#13318 Improved performance when importing with enabled
    tracking
  * gh#13386 Avoid PHP errors with non existing configuration on
    OS X
  * gh#13388 Show only supported charsets for conversion
  * gh#13392 Fixed operation with session.auto_start enabled
  * gh#13383 "Create PHP code" is broken
  * gh#13189 Fixed links to resume timeouted import</changelog>
  <changelog author="ecsos@opensuse.org" date="1500724800">- update to 4.7.3
  * gh#13447 Large multi-line query removes Export operation and
    blanks query box options
  * gh#13445 Fixed rendering of query results
  * gh#13437 Fixed version check when not connected to a database
  * gh#13465 Fixed creating relation
  * gh#13475 Fixed export without backquotes
  * gh#13482 Improved handling of uploaded files with open_basedir
  * gh#13387 Fixed inline editing of hex values
  * gh#13382 Fixed size of index edit dialog
  * gh#13489 Fixed rendering SQL lint errors
  * gh#13468 Avoid breakage if set_time_limit is disabled
  * gh#13471 Fail if ini_set/ini_get are disabled
  * gh#13436 Automatically connect using SSL when server is
    configured so
  * gh#13478 Fixed usage of some browser transformations</changelog>
  <changelog author="chris@computersalat.de" date="1501243200">- fix for boo#1050980
  * replace mcrypt with openssl, see
    https://github.com/phpseclib/phpseclib/issues/1028
- update changes (update to 4.6.6 (2017-01-23))
  * add missing (CVE-Not yet available) CVE's</changelog>
  <changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
  <changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
  <changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
  <changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>
  <changelog author="ecsos@opensuse.org" date="1512216000">- update to 4.7.6 (2017-11-29)
  * gh#13517 Fixed check all interaction with filtering
  * gh#13803 Add SJIS-win to default list of allowed charsets
  * gh#13436 Improve detection that MySQL server needs SSL connection
  * gh#13038 Support JSON datatype on MariaDB 10.2.7 and newer
  * gh#13824 Fixed constructing ALTER query with AFTER
  * gh#13821 Lock page when changes are done in the SQL editor
  * gh#13842 Prefer iconv for encoding conversions
  * gh#13737 Fixed changing password on MariaDB cluster</changelog>
  <changelog author="astieger@suse.com" date="1514203200">- phpMyAdmin 4.7.7:
  * Fixed displaying of formatted numeric values for some locales
  * Ensure datetimepicker is always loaded for datetime fields
  * Fixed PHP error when browsing certain results
  * Fix XSRF/CSRF vulnerability (bsc#1074066, PMASA-2017-09)
    CVE-2017-1000499</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- phpMyAdmin 4.7.8:
  * Fixed error handling with PHP 7.2
  * Fixed resetting default setting values
  * Fixed fallback value for collation connection
- fix for boo#1082188
  * PMASA-2018-1 (CVE-2018-7260, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-1/
  - Fix XSS in Central Columns Feature</changelog>
  <changelog author="ecsos@opensuse.org" date="1520337600">- update to 4.7.9 (2018-03-05)
  * gh#13931 Fixed browsing tables with more results
  * gh#13927 "Not an integer" when browsing a table
  * gh#13887 "Input variables exceeded 1000" error relating
    to PHP's max_input_vars directive</changelog>
  <changelog author="javier@opensuse.org" date="1523448000">- update to 4.8.0 (2018-04-07)
  * gh#12946 Allow to export JSON with unescaped unicode chars
  * gh#12983 Disable login button without solved reCaptcha
  * gh#12315 Allow to remove individual segments from pie charts
  * gh       Change label from "Improve table structure" to
  "Normalize" to match standard terminology
  * gh#13087 Offer login as different user on access denied from
  MySQL
  * gh#13110 Indicate when HTTPS is not properly reported on the
  server
  * gh#13119 No database selected error when adding foreign key
  * gh#12388 Improved database search to allow search for exact
  phrase match
  * gh#13099 Report error when trying to copy database to same
  name
  * gh#13167 Themes now have to contain metadata in theme.json
  * gh#6363  phpMyAdmin no longer requires eval() in PHP
  * gh#12386 The mbstring dependency is now optional
  * gh#13269 Small refactoring in preparation to CSP
  * gh#13384 Database link broken in Databases Page
  * gh#13391 Configurable authentication logging using
  $cfg['AuthLog']
  * gh#13086 Add support for Google Invisible Captcha
  * gh#13058 Improved error reporting for reCAPTCHA
  * gh#12899 Improved rendering of server variables table
  * gh#12948 Fixed javascript editor for TIME values
  * gh#13095 Fixed alignment of foreign keys editing
  * gh#12944 Improved inline editor for JSON
  * gh#13145 Improved layout of operations pages
  * gh#13448 Add "format" query button in edit view form
  * gh#6241  Implement Responsive Design/mobile interface
  * gh       Use a single location for classes under PhpMyAdmin
  namespace
  * gh#12354 Indicate SSL status on main page
  * gh#5666  Configuration directives for defaults of Transformation
  options
  * gh#12261 Remove inline JavaScript
  * gh#13408 Show MySQL warnings when executing SQL queries
  * gh#5827  Allow Designer to show tables from other databases
  * gh#13268 Replace Query-By-Example with multi-table query
  generator interface
  * gh#13576 Add privileges export to per-database listing
  * gh       Consolidate functions into class files
  * gh#13560 Add support for changing collation for all tables and
  columns in database
  * gh#13303 Add support for creating fulltext index from table
  structure
  * gh#13711 Lower default value for $cfg['MaxExactCount']
  * gh#13722 DisableIS is not fully honored
  * gh#6197  Added support for authentication using U2F and 2FA
  * gh#13480 Avoid removing cookies on upgrade
  * gh#13397 Remember state of navigation panel
  * gh#11688 Reduced cookie usage
  * gh#13466 Better utilization of user preferences
  * gh#14042 Rename PMD to Designer
  * gh#13940 Honor arg_separator in AJAX requests
  * gh#14060 Can't edit rows in Internet Explorer
  * gh#14096 Internet Explorer compatibility; fixes JavaScript error
  Object doesn't support property or method 'startsWith'</changelog>
  <changelog author="javier@opensuse.org" date="1523448001">- spec clean up
  * Let rpm find the library dependencies by itself. Remove
    unneeded explicit Requires: tags (php-zlib)
  * Remove logic for obsolete openSUSE releases
  * Ignore pem-certificate rpmlint warning (see
    libraries/certs/README.rst)
  * Remove hidden .github, .php_cs.dist, .scrutinizer.yml and
    .editorconfig
  * Remove php_twig.h and twig.c (devel)
  * Set proper shebang for bash and php scripts
  * Make phpmyadmin/sql-parser/bin/*-query and
    paragonie/random_compat/*.sh executable</changelog>
  <changelog author="ecsos@opensuse.org" date="1523448002">- fix wrong require /usr/bin/bash to /bin/bash so phpMyAdmin could
  install
- insert missing templates dir in htaccess
  See https://docs.phpmyadmin.net/de/latest/setup.html#securing-your-phpmyadmin-installation
- create tmp dir and insert this in htaccess to fix the errormessage
  after login</changelog>
  <changelog author="ecsos@opensuse.org" date="1524225600">- update to 4.8.0.1 (2018-04-19)
- fix for boo#1090309
  * PMASA-2018-2 (CVE-2018-10188, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-2/
  - Multiple CSRF vulnerabilities</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 4.8.1 (2018-05-25)
  * gh#12772 Fix case where the central columns attributes don't
    get filled in
  * gh#14049 Fix case where the query builder doesn't work when
    selected column is *
  * gh#14029 Revert "Browse" table CSS overflow
  * gh#14241 Dropping indexes and foreign keys fail
  * gh#14227 Relational linking broken
  * gh#14246 Fixed error in configuration storage zero config
  * gh#14128 Show 2FA Secret next to QR code
  * gh#14212 XML Export from single table throws fatal error
  * gh#14239 Line and some other charts ignore result set order of
    values chosen for the x-axis
  * gh#14260 Fixed configuration for DefaultLang and Lang
  * gh#14264 Linking for 'Distinct values' broken
  * gh#13968 Fix MariaDB 10.2 current_timestamp()
  * gh#14249 Fix for missing go button in view edit
  * gh#14125 Fix for issues with spatial fields
  * gh#14189 Remember table's sorting broken
  * gh#14289 Fix multi-column sorting
  * gh#14278 Fix central columns in-line edit bug
  * gh#14066 Fix AUTO_INCREMENT error when only exporting table
    structure in database-level exports
  * gh#13893 Simulating queries produces unexpected results
  * gh#14309 Setup script icons missing</changelog>
  <changelog author="chris@computersalat.de" date="1529668800">- update to 4.8.2 (2018-06-21)
  * issue #14370 WHERE 0 causes Fatal error
  * issue #14225 Fix missing index icon
- fix for boo#1098752
  * PMASA-2018-3 (CVE-2018-12581, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-3/
  - XSS in Designer feature
- fix for boo#1098751
  * PMASA-2018-4 (CVE-2018-12613, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-4/
  - File inclusion and remote code execution attack
- some minor changelog fixes about security fix entries</changelog>
  <changelog author="chris@computersalat.de" date="1533038400">- fix for boo#1103305
  * add missing dependency for php-ctype</changelog>
</package>
<package pkgid="f0e5f9019319aee9dd161763ec2525157c6d89f8830dee4adf3fae5e9ab15aef" name="phpMyAdmin" arch="noarch">
  <version epoch="0" ver="4.8.3" rel="lp150.2.9.1"/>
  <changelog author="ecsos@opensuse.org" date="1496404800">- update to 4.7.1 (2017-05-25)
  * gh#13132 Always execute tracking queries as controluser
  * gh#13125 Focus on SQL editor after inserting field name
  * gh#13133 Fixed broken links in setup
  * gh#13135 Database list Tooltips: Show wrong value
  * gh#13150 Fixed pagination while browsing resuls
  * gh#13149 Fixed outbound links in changelog.php
  * gh#13146 Do not include devel dependencies in the release
  * gh#13144 Do not show New as a database in database dropdown
  * gh#13130 Fixed handling of errors in AJAX requests
  * gh#13152 Fixed PHP error in case of invalid table preferences
  * gh#13154 Fixed PHP error on password change
  * gh#13219 Fix Refresh of Process List
  * gh#13182 Fix refresh of long queries
  * gh#12301 Improved handling of logout with disabled
    LoginCookieDeleteAll
  * gh#13216 Add support for MySQL 8.0 collations
  * gh#13218 Fixed rendering of phpMyAdmin logos
  * gh#13234 Properly report not working sessions
  * gh#13256 Fixed password check on server replication
  * gh#13252 Fixed grid editing time column
  * gh#13258 Fixed detection of Amazon RDS
  * gh#13241 Redirect user to last page that has any tables to
    display
  * gh#13266 Fix link to User accounts overview page
  * gh#13274 Fix error in query builder
  * gh#13177 Grid editing repeats action after error</changelog>
  <changelog author="ecsos@opensuse.org" date="1498996800">- update to 4.7.2 (2017-06-29)
  * gh#13314 Make theme selection keep current server
  * gh#13311 Fixed direct login for accounts without password
  * gh#13316 Fixed check for mbstring.func_overload
  * gh#13323 Fixed wrong encoding of table at triggers
  * gh#12976 Fixed natural sorting in several places
  * gh#12718 Show warning for users removed from mysql.user table
  * gh#13362 Fixed loading additional javascripts
  * gh#13343 Fixed editing QBE
  * gh#13193 Improved documentation on user settings
  * gh#13092 Gracefully handle early fatal errors in AJAX requests
  * gh#13327 Fixed Incorrect NavigationTreeEnableExpansion default
    value in the documentation
  * gh#13008 Fixed export of database with a lot of tables
  * gh#13318 Improved performance when importing with enabled
    tracking
  * gh#13386 Avoid PHP errors with non existing configuration on
    OS X
  * gh#13388 Show only supported charsets for conversion
  * gh#13392 Fixed operation with session.auto_start enabled
  * gh#13383 "Create PHP code" is broken
  * gh#13189 Fixed links to resume timeouted import</changelog>
  <changelog author="ecsos@opensuse.org" date="1500724800">- update to 4.7.3
  * gh#13447 Large multi-line query removes Export operation and
    blanks query box options
  * gh#13445 Fixed rendering of query results
  * gh#13437 Fixed version check when not connected to a database
  * gh#13465 Fixed creating relation
  * gh#13475 Fixed export without backquotes
  * gh#13482 Improved handling of uploaded files with open_basedir
  * gh#13387 Fixed inline editing of hex values
  * gh#13382 Fixed size of index edit dialog
  * gh#13489 Fixed rendering SQL lint errors
  * gh#13468 Avoid breakage if set_time_limit is disabled
  * gh#13471 Fail if ini_set/ini_get are disabled
  * gh#13436 Automatically connect using SSL when server is
    configured so
  * gh#13478 Fixed usage of some browser transformations</changelog>
  <changelog author="chris@computersalat.de" date="1501243200">- fix for boo#1050980
  * replace mcrypt with openssl, see
    https://github.com/phpseclib/phpseclib/issues/1028
- update changes (update to 4.6.6 (2017-01-23))
  * add missing (CVE-Not yet available) CVE's</changelog>
  <changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
  <changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
  <changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
  <changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>
  <changelog author="ecsos@opensuse.org" date="1512216000">- update to 4.7.6 (2017-11-29)
  * gh#13517 Fixed check all interaction with filtering
  * gh#13803 Add SJIS-win to default list of allowed charsets
  * gh#13436 Improve detection that MySQL server needs SSL connection
  * gh#13038 Support JSON datatype on MariaDB 10.2.7 and newer
  * gh#13824 Fixed constructing ALTER query with AFTER
  * gh#13821 Lock page when changes are done in the SQL editor
  * gh#13842 Prefer iconv for encoding conversions
  * gh#13737 Fixed changing password on MariaDB cluster</changelog>
  <changelog author="astieger@suse.com" date="1514203200">- phpMyAdmin 4.7.7:
  * Fixed displaying of formatted numeric values for some locales
  * Ensure datetimepicker is always loaded for datetime fields
  * Fixed PHP error when browsing certain results
  * Fix XSRF/CSRF vulnerability (bsc#1074066, PMASA-2017-09)
    CVE-2017-1000499</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- phpMyAdmin 4.7.8:
  * Fixed error handling with PHP 7.2
  * Fixed resetting default setting values
  * Fixed fallback value for collation connection
- fix for boo#1082188
  * PMASA-2018-1 (CVE-2018-7260, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-1/
  - Fix XSS in Central Columns Feature</changelog>
  <changelog author="ecsos@opensuse.org" date="1520337600">- update to 4.7.9 (2018-03-05)
  * gh#13931 Fixed browsing tables with more results
  * gh#13927 "Not an integer" when browsing a table
  * gh#13887 "Input variables exceeded 1000" error relating
    to PHP's max_input_vars directive</changelog>
  <changelog author="javier@opensuse.org" date="1523448000">- update to 4.8.0 (2018-04-07)
  * gh#12946 Allow to export JSON with unescaped unicode chars
  * gh#12983 Disable login button without solved reCaptcha
  * gh#12315 Allow to remove individual segments from pie charts
  * gh       Change label from "Improve table structure" to
  "Normalize" to match standard terminology
  * gh#13087 Offer login as different user on access denied from
  MySQL
  * gh#13110 Indicate when HTTPS is not properly reported on the
  server
  * gh#13119 No database selected error when adding foreign key
  * gh#12388 Improved database search to allow search for exact
  phrase match
  * gh#13099 Report error when trying to copy database to same
  name
  * gh#13167 Themes now have to contain metadata in theme.json
  * gh#6363  phpMyAdmin no longer requires eval() in PHP
  * gh#12386 The mbstring dependency is now optional
  * gh#13269 Small refactoring in preparation to CSP
  * gh#13384 Database link broken in Databases Page
  * gh#13391 Configurable authentication logging using
  $cfg['AuthLog']
  * gh#13086 Add support for Google Invisible Captcha
  * gh#13058 Improved error reporting for reCAPTCHA
  * gh#12899 Improved rendering of server variables table
  * gh#12948 Fixed javascript editor for TIME values
  * gh#13095 Fixed alignment of foreign keys editing
  * gh#12944 Improved inline editor for JSON
  * gh#13145 Improved layout of operations pages
  * gh#13448 Add "format" query button in edit view form
  * gh#6241  Implement Responsive Design/mobile interface
  * gh       Use a single location for classes under PhpMyAdmin
  namespace
  * gh#12354 Indicate SSL status on main page
  * gh#5666  Configuration directives for defaults of Transformation
  options
  * gh#12261 Remove inline JavaScript
  * gh#13408 Show MySQL warnings when executing SQL queries
  * gh#5827  Allow Designer to show tables from other databases
  * gh#13268 Replace Query-By-Example with multi-table query
  generator interface
  * gh#13576 Add privileges export to per-database listing
  * gh       Consolidate functions into class files
  * gh#13560 Add support for changing collation for all tables and
  columns in database
  * gh#13303 Add support for creating fulltext index from table
  structure
  * gh#13711 Lower default value for $cfg['MaxExactCount']
  * gh#13722 DisableIS is not fully honored
  * gh#6197  Added support for authentication using U2F and 2FA
  * gh#13480 Avoid removing cookies on upgrade
  * gh#13397 Remember state of navigation panel
  * gh#11688 Reduced cookie usage
  * gh#13466 Better utilization of user preferences
  * gh#14042 Rename PMD to Designer
  * gh#13940 Honor arg_separator in AJAX requests
  * gh#14060 Can't edit rows in Internet Explorer
  * gh#14096 Internet Explorer compatibility; fixes JavaScript error
  Object doesn't support property or method 'startsWith'</changelog>
  <changelog author="javier@opensuse.org" date="1523448001">- spec clean up
  * Let rpm find the library dependencies by itself. Remove
    unneeded explicit Requires: tags (php-zlib)
  * Remove logic for obsolete openSUSE releases
  * Ignore pem-certificate rpmlint warning (see
    libraries/certs/README.rst)
  * Remove hidden .github, .php_cs.dist, .scrutinizer.yml and
    .editorconfig
  * Remove php_twig.h and twig.c (devel)
  * Set proper shebang for bash and php scripts
  * Make phpmyadmin/sql-parser/bin/*-query and
    paragonie/random_compat/*.sh executable</changelog>
  <changelog author="ecsos@opensuse.org" date="1523448002">- fix wrong require /usr/bin/bash to /bin/bash so phpMyAdmin could
  install
- insert missing templates dir in htaccess
  See https://docs.phpmyadmin.net/de/latest/setup.html#securing-your-phpmyadmin-installation
- create tmp dir and insert this in htaccess to fix the errormessage
  after login</changelog>
  <changelog author="ecsos@opensuse.org" date="1524225600">- update to 4.8.0.1 (2018-04-19)
- fix for boo#1090309
  * PMASA-2018-2 (CVE-2018-10188, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-2/
  - Multiple CSRF vulnerabilities</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 4.8.1 (2018-05-25)
  * gh#12772 Fix case where the central columns attributes don't
    get filled in
  * gh#14049 Fix case where the query builder doesn't work when
    selected column is *
  * gh#14029 Revert "Browse" table CSS overflow
  * gh#14241 Dropping indexes and foreign keys fail
  * gh#14227 Relational linking broken
  * gh#14246 Fixed error in configuration storage zero config
  * gh#14128 Show 2FA Secret next to QR code
  * gh#14212 XML Export from single table throws fatal error
  * gh#14239 Line and some other charts ignore result set order of
    values chosen for the x-axis
  * gh#14260 Fixed configuration for DefaultLang and Lang
  * gh#14264 Linking for 'Distinct values' broken
  * gh#13968 Fix MariaDB 10.2 current_timestamp()
  * gh#14249 Fix for missing go button in view edit
  * gh#14125 Fix for issues with spatial fields
  * gh#14189 Remember table's sorting broken
  * gh#14289 Fix multi-column sorting
  * gh#14278 Fix central columns in-line edit bug
  * gh#14066 Fix AUTO_INCREMENT error when only exporting table
    structure in database-level exports
  * gh#13893 Simulating queries produces unexpected results
  * gh#14309 Setup script icons missing</changelog>
  <changelog author="chris@computersalat.de" date="1529668800">- update to 4.8.2 (2018-06-21)
  * issue #14370 WHERE 0 causes Fatal error
  * issue #14225 Fix missing index icon
- fix for boo#1098752
  * PMASA-2018-3 (CVE-2018-12581, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-3/
  - XSS in Designer feature
- fix for boo#1098751
  * PMASA-2018-4 (CVE-2018-12613, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-4/
  - File inclusion and remote code execution attack
- some minor changelog fixes about security fix entries</changelog>
  <changelog author="chris@computersalat.de" date="1533038400">- fix for boo#1103305
  * add missing dependency for php-ctype</changelog>
  <changelog author="ecsos@opensuse.org" date="1535025600">- update to 4.8.3 (2018-08-22)
  - gh#14314 Error when naming a database '0'
  - gh#14333 Fix NULL as default not shown
  - gh#14229 Fixes issue with recent table list
  - gh#14045 Fix slow performance on DB structure filtering
  - gh#14327 Fix Editing server variable not showing save or cancel
    option
  - gh#14377 Populate options for view create and edit
  - gh#14171 2FA configuration fails if PHP doesn't have GD support
  - gh#14390 Can't unhide tables
  - gh#14382 "Visualize GIS data" icon missing
  - gh#14435 Event scheduler status toggle doesn't work
  - gh#14365 View not working on multiple servers
  - gh#14207 Partition actions in table structure do not work
  - gh#14375 Fixes ERR_BLOCKED_BY_XSS_AUDITOR on export table
  - gh#14552 Blank message shown instead of MySQL error when adding
    trigger and other locations
  - gh#14525 Fix PHP 7.3 warning: "continue" in "switch" is equal
    to "break"
  - gh#14554 Icon missing when creating a new trigger, routine,
    and event
  - gh#14422 Table comment not showing since 4.8.1
  - gh#14426 Drop table doesn't work when you copy tables to
    another database
  - gh#14581 Escaped HTML in 'Add a new server' setup
  - gh#14548 [security] HTML injection in import warning messages,
    see PMASA-2018-5
- fix for boo#1105726
  - PMASA-2018-5 (CVE-2018-15605, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-5/</changelog>
</package>
<package pkgid="4576d88036d915ae3883eeee1ed5782827bd464dbf2378ecea7f4a417415dad1" name="phpMyAdmin" arch="src">
  <version epoch="0" ver="4.8.3" rel="lp150.2.9.1"/>
  <changelog author="ecsos@opensuse.org" date="1496404800">- update to 4.7.1 (2017-05-25)
  * gh#13132 Always execute tracking queries as controluser
  * gh#13125 Focus on SQL editor after inserting field name
  * gh#13133 Fixed broken links in setup
  * gh#13135 Database list Tooltips: Show wrong value
  * gh#13150 Fixed pagination while browsing resuls
  * gh#13149 Fixed outbound links in changelog.php
  * gh#13146 Do not include devel dependencies in the release
  * gh#13144 Do not show New as a database in database dropdown
  * gh#13130 Fixed handling of errors in AJAX requests
  * gh#13152 Fixed PHP error in case of invalid table preferences
  * gh#13154 Fixed PHP error on password change
  * gh#13219 Fix Refresh of Process List
  * gh#13182 Fix refresh of long queries
  * gh#12301 Improved handling of logout with disabled
    LoginCookieDeleteAll
  * gh#13216 Add support for MySQL 8.0 collations
  * gh#13218 Fixed rendering of phpMyAdmin logos
  * gh#13234 Properly report not working sessions
  * gh#13256 Fixed password check on server replication
  * gh#13252 Fixed grid editing time column
  * gh#13258 Fixed detection of Amazon RDS
  * gh#13241 Redirect user to last page that has any tables to
    display
  * gh#13266 Fix link to User accounts overview page
  * gh#13274 Fix error in query builder
  * gh#13177 Grid editing repeats action after error</changelog>
  <changelog author="ecsos@opensuse.org" date="1498996800">- update to 4.7.2 (2017-06-29)
  * gh#13314 Make theme selection keep current server
  * gh#13311 Fixed direct login for accounts without password
  * gh#13316 Fixed check for mbstring.func_overload
  * gh#13323 Fixed wrong encoding of table at triggers
  * gh#12976 Fixed natural sorting in several places
  * gh#12718 Show warning for users removed from mysql.user table
  * gh#13362 Fixed loading additional javascripts
  * gh#13343 Fixed editing QBE
  * gh#13193 Improved documentation on user settings
  * gh#13092 Gracefully handle early fatal errors in AJAX requests
  * gh#13327 Fixed Incorrect NavigationTreeEnableExpansion default
    value in the documentation
  * gh#13008 Fixed export of database with a lot of tables
  * gh#13318 Improved performance when importing with enabled
    tracking
  * gh#13386 Avoid PHP errors with non existing configuration on
    OS X
  * gh#13388 Show only supported charsets for conversion
  * gh#13392 Fixed operation with session.auto_start enabled
  * gh#13383 "Create PHP code" is broken
  * gh#13189 Fixed links to resume timeouted import</changelog>
  <changelog author="ecsos@opensuse.org" date="1500724800">- update to 4.7.3
  * gh#13447 Large multi-line query removes Export operation and
    blanks query box options
  * gh#13445 Fixed rendering of query results
  * gh#13437 Fixed version check when not connected to a database
  * gh#13465 Fixed creating relation
  * gh#13475 Fixed export without backquotes
  * gh#13482 Improved handling of uploaded files with open_basedir
  * gh#13387 Fixed inline editing of hex values
  * gh#13382 Fixed size of index edit dialog
  * gh#13489 Fixed rendering SQL lint errors
  * gh#13468 Avoid breakage if set_time_limit is disabled
  * gh#13471 Fail if ini_set/ini_get are disabled
  * gh#13436 Automatically connect using SSL when server is
    configured so
  * gh#13478 Fixed usage of some browser transformations</changelog>
  <changelog author="chris@computersalat.de" date="1501243200">- fix for boo#1050980
  * replace mcrypt with openssl, see
    https://github.com/phpseclib/phpseclib/issues/1028
- update changes (update to 4.6.6 (2017-01-23))
  * add missing (CVE-Not yet available) CVE's</changelog>
  <changelog author="ecsos@opensuse.org" date="1503662400">- update to 4.7.4
  * gh#13415 Remove shadow from the logo
  * gh#13507 Fixed per server theme feature
  * gh#13523 Missing newline in ALTER exports
  * gh#13414 Fixed several compatibility issues with PHP 7.2
  * gh#13550 Fixed copy results to clipboard
  * gh#13562 Add limitation for user group length
  * gh#13561 Fixed edit variable link in advisor
  * gh#13579 Optimize table link should not be visible in print
    page
  * gh#13553 Improved error handling on corrupted tables
  * gh#13512 Fixed rendering of add index dialog
  * gh#13606 Fixed refreshing server variables</changelog>
  <changelog author="chris@computersalat.de" date="1504872000">- fix recommends
  * php5-curl -&gt; php-curl
  * php5-zip -&gt; php-zip
- fix post step
  * enable correct phpX module</changelog>
  <changelog author="ecsos@opensuse.org" date="1508846400">- update to 4.7.5 (2017-10-23)
  * gh#13615 Avoid problems with browsing unknown query types
  * gh#13612 Integrate tooltip into datetime pickers
  * gh#13628 Fixed javascript error in server monitor
  * gh#13444 Fixed server monitor on non Linux and Windows systems
  * gh#13633 Reload javscript messages when changing language
  * gh#13604 Fixed crash on invalid ordering data
  * gh#13639 Fixed error when browsing non SELECT results
  * gh#13533 Fixed saving column to display
  * gh#13647 Fixed export of tables with VIRTUAL columns
  * gh#13669 Fixed selecting multiple rows accidentally selects
    the next row too
  * gh#13513 Fixed edit index Column alignment issue
  * gh#13515 Fixed rendering of add index dialog
  * gh#13710 Fixed possible error in server advisor
  * gh#13477 Fixed setting input transformations
  * gh#13552 Fixed IPv4/IPv6 To Binary input transformation
  * gh#13686 Clicking on column name to trigger sort with an active
    search leads to logout
  * gh#13725 Fixed copying tables with specific PARTITION
    definition
  * gh#13761 Fixed listing of bookmarks for a database</changelog>
  <changelog author="suse+build@de-korte.org" date="1511697600">- fix for boo#1057661
  * no longer require php_mod_any (recommend it instead)
  * only enable php5 / php7 if running Apache prefork MPM
- fix %post
  * use sed instead of grep/awk to determine PHP version</changelog>
  <changelog author="ecsos@opensuse.org" date="1512216000">- update to 4.7.6 (2017-11-29)
  * gh#13517 Fixed check all interaction with filtering
  * gh#13803 Add SJIS-win to default list of allowed charsets
  * gh#13436 Improve detection that MySQL server needs SSL connection
  * gh#13038 Support JSON datatype on MariaDB 10.2.7 and newer
  * gh#13824 Fixed constructing ALTER query with AFTER
  * gh#13821 Lock page when changes are done in the SQL editor
  * gh#13842 Prefer iconv for encoding conversions
  * gh#13737 Fixed changing password on MariaDB cluster</changelog>
  <changelog author="astieger@suse.com" date="1514203200">- phpMyAdmin 4.7.7:
  * Fixed displaying of formatted numeric values for some locales
  * Ensure datetimepicker is always loaded for datetime fields
  * Fixed PHP error when browsing certain results
  * Fix XSRF/CSRF vulnerability (bsc#1074066, PMASA-2017-09)
    CVE-2017-1000499</changelog>
  <changelog author="astieger@suse.com" date="1519300800">- phpMyAdmin 4.7.8:
  * Fixed error handling with PHP 7.2
  * Fixed resetting default setting values
  * Fixed fallback value for collation connection
- fix for boo#1082188
  * PMASA-2018-1 (CVE-2018-7260, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-1/
  - Fix XSS in Central Columns Feature</changelog>
  <changelog author="ecsos@opensuse.org" date="1520337600">- update to 4.7.9 (2018-03-05)
  * gh#13931 Fixed browsing tables with more results
  * gh#13927 "Not an integer" when browsing a table
  * gh#13887 "Input variables exceeded 1000" error relating
    to PHP's max_input_vars directive</changelog>
  <changelog author="javier@opensuse.org" date="1523448000">- update to 4.8.0 (2018-04-07)
  * gh#12946 Allow to export JSON with unescaped unicode chars
  * gh#12983 Disable login button without solved reCaptcha
  * gh#12315 Allow to remove individual segments from pie charts
  * gh       Change label from "Improve table structure" to
  "Normalize" to match standard terminology
  * gh#13087 Offer login as different user on access denied from
  MySQL
  * gh#13110 Indicate when HTTPS is not properly reported on the
  server
  * gh#13119 No database selected error when adding foreign key
  * gh#12388 Improved database search to allow search for exact
  phrase match
  * gh#13099 Report error when trying to copy database to same
  name
  * gh#13167 Themes now have to contain metadata in theme.json
  * gh#6363  phpMyAdmin no longer requires eval() in PHP
  * gh#12386 The mbstring dependency is now optional
  * gh#13269 Small refactoring in preparation to CSP
  * gh#13384 Database link broken in Databases Page
  * gh#13391 Configurable authentication logging using
  $cfg['AuthLog']
  * gh#13086 Add support for Google Invisible Captcha
  * gh#13058 Improved error reporting for reCAPTCHA
  * gh#12899 Improved rendering of server variables table
  * gh#12948 Fixed javascript editor for TIME values
  * gh#13095 Fixed alignment of foreign keys editing
  * gh#12944 Improved inline editor for JSON
  * gh#13145 Improved layout of operations pages
  * gh#13448 Add "format" query button in edit view form
  * gh#6241  Implement Responsive Design/mobile interface
  * gh       Use a single location for classes under PhpMyAdmin
  namespace
  * gh#12354 Indicate SSL status on main page
  * gh#5666  Configuration directives for defaults of Transformation
  options
  * gh#12261 Remove inline JavaScript
  * gh#13408 Show MySQL warnings when executing SQL queries
  * gh#5827  Allow Designer to show tables from other databases
  * gh#13268 Replace Query-By-Example with multi-table query
  generator interface
  * gh#13576 Add privileges export to per-database listing
  * gh       Consolidate functions into class files
  * gh#13560 Add support for changing collation for all tables and
  columns in database
  * gh#13303 Add support for creating fulltext index from table
  structure
  * gh#13711 Lower default value for $cfg['MaxExactCount']
  * gh#13722 DisableIS is not fully honored
  * gh#6197  Added support for authentication using U2F and 2FA
  * gh#13480 Avoid removing cookies on upgrade
  * gh#13397 Remember state of navigation panel
  * gh#11688 Reduced cookie usage
  * gh#13466 Better utilization of user preferences
  * gh#14042 Rename PMD to Designer
  * gh#13940 Honor arg_separator in AJAX requests
  * gh#14060 Can't edit rows in Internet Explorer
  * gh#14096 Internet Explorer compatibility; fixes JavaScript error
  Object doesn't support property or method 'startsWith'</changelog>
  <changelog author="javier@opensuse.org" date="1523448001">- spec clean up
  * Let rpm find the library dependencies by itself. Remove
    unneeded explicit Requires: tags (php-zlib)
  * Remove logic for obsolete openSUSE releases
  * Ignore pem-certificate rpmlint warning (see
    libraries/certs/README.rst)
  * Remove hidden .github, .php_cs.dist, .scrutinizer.yml and
    .editorconfig
  * Remove php_twig.h and twig.c (devel)
  * Set proper shebang for bash and php scripts
  * Make phpmyadmin/sql-parser/bin/*-query and
    paragonie/random_compat/*.sh executable</changelog>
  <changelog author="ecsos@opensuse.org" date="1523448002">- fix wrong require /usr/bin/bash to /bin/bash so phpMyAdmin could
  install
- insert missing templates dir in htaccess
  See https://docs.phpmyadmin.net/de/latest/setup.html#securing-your-phpmyadmin-installation
- create tmp dir and insert this in htaccess to fix the errormessage
  after login</changelog>
  <changelog author="ecsos@opensuse.org" date="1524225600">- update to 4.8.0.1 (2018-04-19)
- fix for boo#1090309
  * PMASA-2018-2 (CVE-2018-10188, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-2/
  - Multiple CSRF vulnerabilities</changelog>
  <changelog author="ecsos@opensuse.org" date="1527336000">- update to 4.8.1 (2018-05-25)
  * gh#12772 Fix case where the central columns attributes don't
    get filled in
  * gh#14049 Fix case where the query builder doesn't work when
    selected column is *
  * gh#14029 Revert "Browse" table CSS overflow
  * gh#14241 Dropping indexes and foreign keys fail
  * gh#14227 Relational linking broken
  * gh#14246 Fixed error in configuration storage zero config
  * gh#14128 Show 2FA Secret next to QR code
  * gh#14212 XML Export from single table throws fatal error
  * gh#14239 Line and some other charts ignore result set order of
    values chosen for the x-axis
  * gh#14260 Fixed configuration for DefaultLang and Lang
  * gh#14264 Linking for 'Distinct values' broken
  * gh#13968 Fix MariaDB 10.2 current_timestamp()
  * gh#14249 Fix for missing go button in view edit
  * gh#14125 Fix for issues with spatial fields
  * gh#14189 Remember table's sorting broken
  * gh#14289 Fix multi-column sorting
  * gh#14278 Fix central columns in-line edit bug
  * gh#14066 Fix AUTO_INCREMENT error when only exporting table
    structure in database-level exports
  * gh#13893 Simulating queries produces unexpected results
  * gh#14309 Setup script icons missing</changelog>
  <changelog author="chris@computersalat.de" date="1529668800">- update to 4.8.2 (2018-06-21)
  * issue #14370 WHERE 0 causes Fatal error
  * issue #14225 Fix missing index icon
- fix for boo#1098752
  * PMASA-2018-3 (CVE-2018-12581, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-3/
  - XSS in Designer feature
- fix for boo#1098751
  * PMASA-2018-4 (CVE-2018-12613, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-4/
  - File inclusion and remote code execution attack
- some minor changelog fixes about security fix entries</changelog>
  <changelog author="chris@computersalat.de" date="1533038400">- fix for boo#1103305
  * add missing dependency for php-ctype</changelog>
  <changelog author="ecsos@opensuse.org" date="1535025600">- update to 4.8.3 (2018-08-22)
  - gh#14314 Error when naming a database '0'
  - gh#14333 Fix NULL as default not shown
  - gh#14229 Fixes issue with recent table list
  - gh#14045 Fix slow performance on DB structure filtering
  - gh#14327 Fix Editing server variable not showing save or cancel
    option
  - gh#14377 Populate options for view create and edit
  - gh#14171 2FA configuration fails if PHP doesn't have GD support
  - gh#14390 Can't unhide tables
  - gh#14382 "Visualize GIS data" icon missing
  - gh#14435 Event scheduler status toggle doesn't work
  - gh#14365 View not working on multiple servers
  - gh#14207 Partition actions in table structure do not work
  - gh#14375 Fixes ERR_BLOCKED_BY_XSS_AUDITOR on export table
  - gh#14552 Blank message shown instead of MySQL error when adding
    trigger and other locations
  - gh#14525 Fix PHP 7.3 warning: "continue" in "switch" is equal
    to "break"
  - gh#14554 Icon missing when creating a new trigger, routine,
    and event
  - gh#14422 Table comment not showing since 4.8.1
  - gh#14426 Drop table doesn't work when you copy tables to
    another database
  - gh#14581 Escaped HTML in 'Add a new server' setup
  - gh#14548 [security] HTML injection in import warning messages,
    see PMASA-2018-5
- fix for boo#1105726
  - PMASA-2018-5 (CVE-2018-15605, CWE-661)
    https://www.phpmyadmin.net/security/PMASA-2018-5/</changelog>
</package>
<package pkgid="9f5f023f4e00017004bb674064dcb532b67f272230f5152a64759640f525d13f" name="pidentd" arch="src">
  <version epoch="0" ver="3.0.19" rel="lp150.3.3.1"/>
  <changelog author="mjancar@suse.cz" date="1063972800">- fix xinetd configuration file
  * start as root - pidentd switches to nobody itself and complains when can't
  * non waiting mode requires -i switch</changelog>
  <changelog author="kukuk@suse.de" date="1066392000">- Build without DES support (broken on all 64bit archs)</changelog>
  <changelog author="adrian@suse.de" date="1073822400">- build as user</changelog>
  <changelog author="postadal@suse.cz" date="1077883200">- fixed mazy syslog messaged with "buffer overflow" and compilation warnings
  [#33438]</changelog>
  <changelog author="postadal@suse.cz" date="1083067200">- redirected std* streams to /dev/null in init script [#38860]</changelog>
  <changelog author="postadal@suse.cz" date="1083153600">- fixed rewind(3) issue and examining local connections in both directions
  [#38558]</changelog>
  <changelog author="mjancar@suse.cz" date="1126872000">- fix ipv6 support (#53558)</changelog>
  <changelog author="mjancar@suse.cz" date="1129118400">- more fixes to the ipv6 support
- split patches by subject</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="ro@suse.de" date="1219406400">- remove deprecated startvar from fillup_and_insserv call</changelog>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1270641600">- require inet-daemon</changelog>
  <changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1332849600">- license update: GPL-2.0+
  SeSee plib/strmatch.c</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1337688000">- Make build with current tools
  * Fix autoheader errors by adding descriptions to AC_DEFINE
  calls
  * Copy config.* manually since suse_update_config is not doing
  it anymore and autoreconf does not take care of it because
  pidentd doesn't use automake.</changelog>
  <changelog author="tchvatal@suse.com" date="1497614400">- Switch to github url
- Remove pidentd-SuSE.tar.bz2 as it contains only sysv initscript
- Remove xinetd service as we should be using socket activation if needed
  (atm it really is not required so do not provide it by default)
- Switch to released upstream tarball 3.0.19 used by all other distributions
- Drop all the patches, upstream seem to merge or include them one
  way or another:
  * pidentd-3.1a25-allocfix.diff
  * pidentd-3.1a25-autoconf.diff
  * pidentd-3.1a25-autoheader.diff
  * pidentd-3.1a25-buffer-overflow.diff
  * pidentd-3.1a25-config.diff
  * pidentd-3.1a25-fmt.diff
  * pidentd-3.1a25-ipv6.diff
  * pidentd-3.1a25-prototypes.diff
  * pidentd-3.1a25-send.diff
  * pidentd-3.1a25-warnings-fix.diff
- Add patch to respect destdir in install:
  * pidentd-destdir.patch
- Add patch from debian:
  * 01-legacy.patch
- Add patch to fix gcc errors found by brp checks:
  * pidentd-rpmlint-gcc-checks.patch
- Add patch to not include date/time in binaries:
  * pidentd-no-date.patch
- Install proper systemd service</changelog>
  <changelog author="kukuk@suse.de" date="1523016000">- Remove obsolete requires for inetd</changelog>
  <changelog author="coolo@suse.com" date="1523016001">- latest sources dropped plib/strmatch.c and as such all the sources
  are PD now. License is basically 'you can do whatever you want
  as long as you don't claim you wrote it'</changelog>
  <changelog author="bwiedemann@suse.com" date="1531483200">- Add reproducible.patch to drop uname -r from binary (boo#1101107)</changelog>
  <changelog author="max@suse.com" date="1537358400">- bsc#1101600: IPv6 support was accidentally dropped when upgrading
  to 3.0.19 and pidentd-ipv6.patch adds it back.</changelog>
</package>
<package pkgid="7210526d9764fb52f4ebff1c9d705a4b3e95dcae066f501e152a8f24c241363f" name="pidentd" arch="x86_64">
  <version epoch="0" ver="3.0.19" rel="lp150.3.3.1"/>
  <changelog author="mls@suse.de" date="1251288000">- make patch0 usage consistent</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1270641600">- require inet-daemon</changelog>
  <changelog author="coolo@suse.com" date="1322395200">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1332849600">- license update: GPL-2.0+
  SeSee plib/strmatch.c</changelog>
  <changelog author="frank.lichtenheld@sophos.com" date="1337688000">- Make build with current tools
  * Fix autoheader errors by adding descriptions to AC_DEFINE
  calls
  * Copy config.* manually since suse_update_config is not doing
  it anymore and autoreconf does not take care of it because
  pidentd doesn't use automake.</changelog>
  <changelog author="tchvatal@suse.com" date="1497614400">- Switch to github url
- Remove pidentd-SuSE.tar.bz2 as it contains only sysv initscript
- Remove xinetd service as we should be using socket activation if needed
  (atm it really is not required so do not provide it by default)
- Switch to released upstream tarball 3.0.19 used by all other distributions
- Drop all the patches, upstream seem to merge or include them one
  way or another:
  * pidentd-3.1a25-allocfix.diff
  * pidentd-3.1a25-autoconf.diff
  * pidentd-3.1a25-autoheader.diff
  * pidentd-3.1a25-buffer-overflow.diff
  * pidentd-3.1a25-config.diff
  * pidentd-3.1a25-fmt.diff
  * pidentd-3.1a25-ipv6.diff
  * pidentd-3.1a25-prototypes.diff
  * pidentd-3.1a25-send.diff
  * pidentd-3.1a25-warnings-fix.diff
- Add patch to respect destdir in install:
  * pidentd-destdir.patch
- Add patch from debian:
  * 01-legacy.patch
- Add patch to fix gcc errors found by brp checks:
  * pidentd-rpmlint-gcc-checks.patch
- Add patch to not include date/time in binaries:
  * pidentd-no-date.patch
- Install proper systemd service</changelog>
  <changelog author="kukuk@suse.de" date="1523016000">- Remove obsolete requires for inetd</changelog>
  <changelog author="coolo@suse.com" date="1523016001">- latest sources dropped plib/strmatch.c and as such all the sources
  are PD now. License is basically 'you can do whatever you want
  as long as you don't claim you wrote it'</changelog>
  <changelog author="bwiedemann@suse.com" date="1531483200">- Add reproducible.patch to drop uname -r from binary (boo#1101107)</changelog>
  <changelog author="max@suse.com" date="1537358400">- bsc#1101600: IPv6 support was accidentally dropped when upgrading
  to 3.0.19 and pidentd-ipv6.patch adds it back.</changelog>
</package>
<package pkgid="dcee9613e8d3d6b80a31046e0cbe3f74c5687264663521c41081e7024b7085c1" name="pin" arch="noarch">
  <version epoch="0" ver="0.38" rel="lp150.2.3.1"/>
  <changelog author="mlasars@suse.de" date="1162814400">- fixed wrong su command (bug #188068)
- throw error message if cd/dvd is not mounted</changelog>
  <changelog author="mlasars@suse.de" date="1175601600">- --nosignature --nodigest for rpm -qa to speedup (thanks Pascal)
- su &amp; tcsh fix (bug #188068) (thanks Volker)</changelog>
  <changelog author="mlasars@suse.de" date="1178712000">- package with cboltz fixes subbmitted
  Sun May  6 19:58:00 CET 2007 - cboltz
- fixed fix for bug #188068, copying ARCHIVES.gz should now work
  with any shell
- clean up tempfile if pin gets killed or Ctrl-c'ed (bug #218263)</changelog>
  <changelog author="adrian@suse.de" date="1182427200">- fix changelog entry order</changelog>
  <changelog author="jw@suse.de" date="1229256000">- added stty sane to cleanup trap. (bug #458980, jw)</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="jengelh@inai.de" date="1412769600">- Remove old specfile tags and sections</changelog>
  <changelog author="ledest@gmail.com" date="1413720000">- fix bashisms</changelog>
  <changelog author="tchvatal@suse.com" date="1452686400">- Clean up with spec-cleaner and silence rpmlint warnings</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1528545600">- fix for bug #1095723, pin broken on systems without
  /etc/SuSE-release file [bsc#1095723]</changelog>
</package>
<package pkgid="d27584000f42b06f1a6cf35ec827be5faff650b9f1dc2e3338dce03e7c46ee88" name="pin" arch="src">
  <version epoch="0" ver="0.38" rel="lp150.2.3.1"/>
  <changelog author="mlasars@suse.de" date="1094472000">- changed cd/dvd mounting</changelog>
  <changelog author="mlasars@suse.de" date="1095076800">- wrong mountpoint, its dvdram instead of dvd-ram</changelog>
  <changelog author="mlasars@suse.de" date="1095422400">- forget one dvd-ram fix</changelog>
  <changelog author="mlasars@suse.de" date="1123156800">- fixed update problem</changelog>
  <changelog author="mlasars@suse.de" date="1124712000">- fixed bug #104800</changelog>
  <changelog author="mlasars@suse.de" date="1125057600">- removed test</changelog>
  <changelog author="mlasars@suse.de" date="1126008000">- updated text (bug #115333)</changelog>
  <changelog author="dmueller@suse.de" date="1127908800">- add norootforbuild</changelog>
  <changelog author="mlasars@suse.de" date="1138017600">- fixed error in cd/dvd handling (bug #144395)</changelog>
  <changelog author="mls@suse.de" date="1138190400">- converted neededforbuild to BuildRequires</changelog>
  <changelog author="mlasars@suse.de" date="1162814400">- fixed wrong su command (bug #188068)
- throw error message if cd/dvd is not mounted</changelog>
  <changelog author="mlasars@suse.de" date="1175601600">- --nosignature --nodigest for rpm -qa to speedup (thanks Pascal)
- su &amp; tcsh fix (bug #188068) (thanks Volker)</changelog>
  <changelog author="mlasars@suse.de" date="1178712000">- package with cboltz fixes subbmitted
  Sun May  6 19:58:00 CET 2007 - cboltz
- fixed fix for bug #188068, copying ARCHIVES.gz should now work
  with any shell
- clean up tempfile if pin gets killed or Ctrl-c'ed (bug #218263)</changelog>
  <changelog author="adrian@suse.de" date="1182427200">- fix changelog entry order</changelog>
  <changelog author="jw@suse.de" date="1229256000">- added stty sane to cleanup trap. (bug #458980, jw)</changelog>
  <changelog author="coolo@suse.com" date="1329134400">- patch license to follow spdx.org standard</changelog>
  <changelog author="jengelh@inai.de" date="1412769600">- Remove old specfile tags and sections</changelog>
  <changelog author="ledest@gmail.com" date="1413720000">- fix bashisms</changelog>
  <changelog author="tchvatal@suse.com" date="1452686400">- Clean up with spec-cleaner and silence rpmlint warnings</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1528545600">- fix for bug #1095723, pin broken on systems without
  /etc/SuSE-release file [bsc#1095723]</changelog>
</package>
<package pkgid="b38144de1555b3c1949112d58dd8d5b665c57067d3e2caef2507dba3729769fa" name="plasma-nm5" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="3d07b3d718259c26ff8a34708d500518fa2cc05d1fdd54053b2fad3f5c42ee45" name="plasma-nm5" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="33034568744c472eda5b98f7ac929b9a78ee7c9a7d4b074bbe932ae029b0ec95" name="plasma-nm5-fortisslvpn" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="7491dca39929d5b0b2c1ccd65ac4b22e779f3cc8f7ccbeca71989d8589f5818d" name="plasma-nm5-iodine" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="71ecae4e7045b4cccb72505da141ec0b42f74e1bebefd7857893f4158a571001" name="plasma-nm5-l2tp" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="442692f275567a9a9fab4dc73c7d7608e40fa982ae5cc2c876c5b4cfffb9d791" name="plasma-nm5-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="6c7097807d7ecbc96caf8852987c6b0685bd6cf05e6b18c11c17aa782fbf20ff" name="plasma-nm5-openconnect" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="91663175f654a6f718525a07c9d87e87e16cfce4e3a87c588bf27d725e2c3e0c" name="plasma-nm5-openswan" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="472d04bc603dfa81fb47c32ab984264c63910b8b961106985eb3f66741595b64" name="plasma-nm5-openvpn" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="eb9c49b37442d34670cb1f587536872809986fba0a8c7149042b86c695c59dd3" name="plasma-nm5-pptp" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="65ef46dd1bd0c1fcbb0a620ab4045827ebc875863dd0085f5dd9764e7389acef" name="plasma-nm5-ssh" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="2404fa8719fcb3843b5df595fb8673cc460aa0feb7b8ea80a7735e9ff919e3a2" name="plasma-nm5-sstp" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="76064ba37d7b47283b5a065ca8f785d37a6e28e07a84caf42b37cf4f31c9730e" name="plasma-nm5-strongswan" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="16e54b09aaebe50a8c5d57fed7907b3dadb47e13a951bb4fc12186a5f092f0ad" name="plasma-nm5-vpnc" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Drop the old legacy connection editor
  * Add option to allow managing virtual connections (kde#376664)
  * Summary: L2TP: pre-sharedkey should be mask
  * Add support for fortisslvpn
  * Openconnect: make sure the UI fits into the password dialog (kde#380399)
  * UI updates for NetworkManager-l2tp 1.2.6
  * Add missing file with UI for configuration
  * Allow to have wider password dialog while preffering minimum size (kde#380399)
  * Openconnect: make sure we accept the dialog (kde#380299)
  * Openconnect: Add option to select protocol
  * Properly pass specific vpn type when selecting new connection by double click
  * Openconnect (juniper): Properly make sure we are compatible with the rest of nm tools
  * Openconnect (juniper): Make sure we are compatible with the rest of nm tools (kde#380244)
  * Add option to disable unlocking modem on detection (kde#380150)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Don't duplicate UI option for automatic speed detection (kde#383505)
  * Remove unused identity model
  * It makes sense to show VPN connections only when we are connected to internet</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Do not load initially selected connection twice BUG: 379756 (kde#379756)
  * Fix focus in DNS servers and DNS domains dialogs BUG: 385839 (kde#385839)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Do not set password field as readonly, it doesn't make sense
  * Disable password field when password is not needed (kde#386426)
  * Make sure we store password for all users when kwallet is diabled (kde#386343)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * Use ScrollView from QtQuickControls (kde#390846)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522756800">- Fix plasma-nm5-openconnect supplements
- Don't provide the -vpnc subpackage anymore on TW and Leap 15</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1525262401">- Unconditionally provide the -vpnc subpackage again for now, vpnc
  is still in Tumbleweed and has been revived for Leap 15.0
- Activate proper Requires and Supplements for the -openswan,
  - l2tp, and -iodine subpackages, the corresponding NetworkManager
  packages are in Factory (and Leap) meanwhile</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add supplements to avoid hard requires (part of fix for boo#982962)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Unquote remote when importing OpenVPN connections (kde#393657)
  * Use ScrollView from QtQuickControls in the main connection view (kde#393794)
  * Check for device not being null</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="7187ef8ef4c4d30e43f5e0a2413b4ad4fd79392832c6bbbb7ac2dc85699f96ac" name="plasma5-addons" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * fix no-display of CPU bars per core (and fix some warnings)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * Fix check for missing engine in comic applet (kde#372313)
  * [Color Picker] Fix picking colors in multi-screen (kde#382261)
  * Replace XML parsing in National Geographic dataengine (kde#379003)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Update comic KNS providers to https</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Try to get higher quality image for flickr potd. (kde#377917)
  * spdx syntax fix http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-dataengines-addons.html
  * fix .desktop files for appstream compliance http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-widgets-addons.html
  * fixes for appstream compliance http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-wallpapers-addons.html
  * [Color Picker] Add drag pixmap for color
  * [Color Picker] Allow running color picker applet standalone
  * [Notes applet] Wrap in FocusScope
  * remove wrong X-Ubuntu-Gettext-Domain key
  * Restore original formatButtonsRow.opacity
  * [Notes Applet] Show formatting options when it has focus
  * Use Q_DECL_OVERRIDE
  * Fix fifteen puzzle solveability (kde#358940)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix ksysguard not starting on plasmoid click</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Dictionary Engine: fix synchronization issues.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Use wakeOne() instead of notify_one()</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [comic] Fix update interval
  * [comic] Make sure KNS download dialog is destroyed</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Use PURPOSE property with Qt5WebEngine to note reason for dependency
  * [konsoleprofiles applet] Fix name of translations catalog
  * [mediaframe applet] Fix creation of file search filter by QImageReader data
  * Remove unused old pre-plasma5 file binaryclock.cpp
  * Remove bogus additional cmake project() calls in subdirs
  * Remove dead groupingdesktop containment code, replaced by applets//grouping
  * [comic applet] Don't compare iterators from different return values
  * Removal of all unported/unbuilt applets, dataengines, runners, wallpapers
  * Make WebEngine really optional
  * Skip the dict applet if Qt5WebEngine isn't available
  * [binary clock] Fix some broken entries in metadata
  * [weather applet] Fix badly sized comboboxes in config by switching to QQC2 (kde#389474)
  * Dump unported code of contactsrunner, akonadi-search has pimcontactsrunner
  * [katesessions runner] Fix unwanted creation of multiple KDirWatch'ers
  * Bump Qt version to 5.9
  * Require KDE Frameworks 5.42</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Remove dead code &amp; translation extraction from release branch
  * [Media Frame] Use Label instead of Text (kde#389259)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [grouping applet] Use "object-group" as icon
  * [grouping applet] Add missing Comment entry to metadata</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [konsoleprofiles applet] Do not try to set plasmoid.aspectRatioMode
  * Fix default colour used by Swap monitor
  * Drop unused X-Plasma-Requires-* entries from applet metadata
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Fix run-time warnings on quick-share
  * [mediaframe applet] Enable wrapping of fill mode description in config UI (kde#393232)
  * [quickshare applet] Fix sizing of complete color config page
  * [quickshare applet] Fix layout of elements in config page
  * [mediaframe applet] Fix defunct adding of new files/folder per DnD
  * [mediaframe applet] Fix broken selection of fill mode
  * [notes applet] Remove unused/unneeded import of private.notifications
  * [potd dataengine] Fix Wikimedia Picture of the Day provider
  * [Media Frame] Fix config pages to fit themselves into dialog
  * [weather applet] Fix wind direction arrows to adapt to color theme
  * [potd wallpaper] Add missing Messages.sh, use wallpaper catalog name
  * [potd wallpaper] Config UI: fix spacing between UI elements
  * [potd dataengine] Do not leak pimpl object of PotdProvider class</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Timer applet] Fix double speed countdown &amp; commands run multiple times (kde#381173)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="1df97621b658ba0259366199519bb799821101d6823b0bbb8c140e80a13074bf" name="plasma5-addons" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * fix no-display of CPU bars per core (and fix some warnings)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * Fix check for missing engine in comic applet (kde#372313)
  * [Color Picker] Fix picking colors in multi-screen (kde#382261)
  * Replace XML parsing in National Geographic dataengine (kde#379003)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Update comic KNS providers to https</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Try to get higher quality image for flickr potd. (kde#377917)
  * spdx syntax fix http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-dataengines-addons.html
  * fix .desktop files for appstream compliance http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-widgets-addons.html
  * fixes for appstream compliance http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-wallpapers-addons.html
  * [Color Picker] Add drag pixmap for color
  * [Color Picker] Allow running color picker applet standalone
  * [Notes applet] Wrap in FocusScope
  * remove wrong X-Ubuntu-Gettext-Domain key
  * Restore original formatButtonsRow.opacity
  * [Notes Applet] Show formatting options when it has focus
  * Use Q_DECL_OVERRIDE
  * Fix fifteen puzzle solveability (kde#358940)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix ksysguard not starting on plasmoid click</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Dictionary Engine: fix synchronization issues.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Use wakeOne() instead of notify_one()</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [comic] Fix update interval
  * [comic] Make sure KNS download dialog is destroyed</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Use PURPOSE property with Qt5WebEngine to note reason for dependency
  * [konsoleprofiles applet] Fix name of translations catalog
  * [mediaframe applet] Fix creation of file search filter by QImageReader data
  * Remove unused old pre-plasma5 file binaryclock.cpp
  * Remove bogus additional cmake project() calls in subdirs
  * Remove dead groupingdesktop containment code, replaced by applets//grouping
  * [comic applet] Don't compare iterators from different return values
  * Removal of all unported/unbuilt applets, dataengines, runners, wallpapers
  * Make WebEngine really optional
  * Skip the dict applet if Qt5WebEngine isn't available
  * [binary clock] Fix some broken entries in metadata
  * [weather applet] Fix badly sized comboboxes in config by switching to QQC2 (kde#389474)
  * Dump unported code of contactsrunner, akonadi-search has pimcontactsrunner
  * [katesessions runner] Fix unwanted creation of multiple KDirWatch'ers
  * Bump Qt version to 5.9
  * Require KDE Frameworks 5.42</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Remove dead code &amp; translation extraction from release branch
  * [Media Frame] Use Label instead of Text (kde#389259)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [grouping applet] Use "object-group" as icon
  * [grouping applet] Add missing Comment entry to metadata</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [konsoleprofiles applet] Do not try to set plasmoid.aspectRatioMode
  * Fix default colour used by Swap monitor
  * Drop unused X-Plasma-Requires-* entries from applet metadata
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Fix run-time warnings on quick-share
  * [mediaframe applet] Enable wrapping of fill mode description in config UI (kde#393232)
  * [quickshare applet] Fix sizing of complete color config page
  * [quickshare applet] Fix layout of elements in config page
  * [mediaframe applet] Fix defunct adding of new files/folder per DnD
  * [mediaframe applet] Fix broken selection of fill mode
  * [notes applet] Remove unused/unneeded import of private.notifications
  * [potd dataengine] Fix Wikimedia Picture of the Day provider
  * [Media Frame] Fix config pages to fit themselves into dialog
  * [weather applet] Fix wind direction arrows to adapt to color theme
  * [potd wallpaper] Add missing Messages.sh, use wallpaper catalog name
  * [potd wallpaper] Config UI: fix spacing between UI elements
  * [potd dataengine] Do not leak pimpl object of PotdProvider class</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Timer applet] Fix double speed countdown &amp; commands run multiple times (kde#381173)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="f3777b83a6898fe6dad3b4bc78b72c8132e9acd109275701bc53b84700f6eb78" name="plasma5-addons-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1498564800">- Update to 5.10.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.3.php
- Changes since 5.10.2:
  * fix no-display of CPU bars per core (and fix some warnings)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * Fix check for missing engine in comic applet (kde#372313)
  * [Color Picker] Fix picking colors in multi-screen (kde#382261)
  * Replace XML parsing in National Geographic dataengine (kde#379003)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * Update comic KNS providers to https</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Try to get higher quality image for flickr potd. (kde#377917)
  * spdx syntax fix http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-dataengines-addons.html
  * fix .desktop files for appstream compliance http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-widgets-addons.html
  * fixes for appstream compliance http://metadata.neon.kde.org/appstream/html/xenial/main/issues/plasma-wallpapers-addons.html
  * [Color Picker] Add drag pixmap for color
  * [Color Picker] Allow running color picker applet standalone
  * [Notes applet] Wrap in FocusScope
  * remove wrong X-Ubuntu-Gettext-Domain key
  * Restore original formatButtonsRow.opacity
  * [Notes Applet] Show formatting options when it has focus
  * Use Q_DECL_OVERRIDE
  * Fix fifteen puzzle solveability (kde#358940)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * Fix ksysguard not starting on plasmoid click</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Dictionary Engine: fix synchronization issues.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Use wakeOne() instead of notify_one()</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [comic] Fix update interval
  * [comic] Make sure KNS download dialog is destroyed</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Use PURPOSE property with Qt5WebEngine to note reason for dependency
  * [konsoleprofiles applet] Fix name of translations catalog
  * [mediaframe applet] Fix creation of file search filter by QImageReader data
  * Remove unused old pre-plasma5 file binaryclock.cpp
  * Remove bogus additional cmake project() calls in subdirs
  * Remove dead groupingdesktop containment code, replaced by applets//grouping
  * [comic applet] Don't compare iterators from different return values
  * Removal of all unported/unbuilt applets, dataengines, runners, wallpapers
  * Make WebEngine really optional
  * Skip the dict applet if Qt5WebEngine isn't available
  * [binary clock] Fix some broken entries in metadata
  * [weather applet] Fix badly sized comboboxes in config by switching to QQC2 (kde#389474)
  * Dump unported code of contactsrunner, akonadi-search has pimcontactsrunner
  * [katesessions runner] Fix unwanted creation of multiple KDirWatch'ers
  * Bump Qt version to 5.9
  * Require KDE Frameworks 5.42</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Remove dead code &amp; translation extraction from release branch
  * [Media Frame] Use Label instead of Text (kde#389259)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [grouping applet] Use "object-group" as icon
  * [grouping applet] Add missing Comment entry to metadata</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [konsoleprofiles applet] Do not try to set plasmoid.aspectRatioMode
  * Fix default colour used by Swap monitor
  * Drop unused X-Plasma-Requires-* entries from applet metadata
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * Fix run-time warnings on quick-share
  * [mediaframe applet] Enable wrapping of fill mode description in config UI (kde#393232)
  * [quickshare applet] Fix sizing of complete color config page
  * [quickshare applet] Fix layout of elements in config page
  * [mediaframe applet] Fix defunct adding of new files/folder per DnD
  * [mediaframe applet] Fix broken selection of fill mode
  * [notes applet] Remove unused/unneeded import of private.notifications
  * [potd dataengine] Fix Wikimedia Picture of the Day provider
  * [Media Frame] Fix config pages to fit themselves into dialog
  * [weather applet] Fix wind direction arrows to adapt to color theme
  * [potd wallpaper] Add missing Messages.sh, use wallpaper catalog name
  * [potd wallpaper] Config UI: fix spacing between UI elements
  * [potd dataengine] Do not leak pimpl object of PotdProvider class</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Timer applet] Fix double speed countdown &amp; commands run multiple times (kde#381173)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="89d655eb8e8219c7037f5adefe9153ceff24b76c6d79509d6b2c0b65d6f7d710" name="plasma5-desktop" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Default X font DPI to 96 on wayland
  * kcm baloo: Fix extraction of folder basename for error message</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Default X font DPI to 96 on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Fix crash in KAStatsFavouritesModel (kde#386439)
  * Be more explicit about Qt5::Widgets dependencies</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513512000">- Add patch to fix issue appearing with Qt 5.10 (kde#387199):
  * 0001-Folder-View-Accept-mouse-events-if-we-handled-them.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Don't show "Edit Application..." action for non-app services. (kde#388340)
  * Use automoc keyword for kimpanel-scim-panel
  * [Folder View] Show "Widgets unlocked" help only for containment (kde#387589)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1515758400">- Add patch to fix generation of font previews:
  * 0001-Support-font-ttf-and-font-otf-mimetypes-in-kfontinst.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-Support-font-ttf-and-font-otf-mimetypes-in-kfontinst.patch
  * 0001-Folder-View-Accept-mouse-events-if-we-handled-them.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Require KDE Frameworks 5.42
  * fix applying color effects of the theme
  * Fix iterator
  * [Look and feel KCM] Destroy and recreate GHNS button when palette changes (kde#389351)
  * [Look and feel KCM] Keep cursor size when applying theme
  * [Look and feel KCM] Sync color group after copying over color file values (kde#370162)
  * Remove QT_VERSION checks
  * Bump Qt version to 5.9
  * Make sure the search result that Return will run is highlighted
  * Don't close plasmoid when closing a subdialog (kde#388669)
  * Fix missing action arguments. (kde#389234)
  * [Folder View] Don't trash local files
  * [Style KCM] Sync KConfig before announcing change</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Implement Tab/Backtab navigation (kde#387316)
  * [touchpad kcm] No KLocalizedString::setApplicationDomain() in kded plugin
  * [knetattach] Fix i18n calls being made before QApp creation
  * [Mouse KCM] Check libinput Atom availability before using them (kde#389978)
  * [Task Manager] Use KFilePlacesModel::isHidden
  * Improve preview thumbnail quality (kde#376848)
  * minor optimization: use reserve()
  * [kwin &amp; plasma-desktop runners] add missing TRANSLATION_DOMAIN definition
  * Fix kded5 startup warning:
  * Fix warnings in kded5 startup, due to i18n("")
  * Require KDE Frameworks 5.42</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Disable positioning in popup folderviews
  * [lookandfeel kcm] Do not declare plugin in lookandfeeltool code version, v2
  * Revert "[lookandfeel kcm] Do not declare plugin in lookandfeeltool code version"
  * Keep item highlighted when context menu opens
  * [Look and feel KCM] Fix copying color scheme data
  * Unbreak DND.
  * [Application Dashboard] Fix erroneously using Plasma icons for applications (kde#390353)
  * [Kickoff] Enable smooth scaling for icon
  * Workaround the touchpad toggle button not working
  * [lookandfeel kcm] Do not declare plugin in lookandfeeltool code version
  * Fix launching by touchscreen tap (kde#366527)
  * Fix window pin not showing (kde#390428)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1519905600">- Backport upstream commit to move the toolbox away from the desktop icons:
  * 0001-Place-toolbox-in-the-top-right-corner-of-the-screen.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [kaccess] Improve the port away from kdelibs4support
  * [taskmanager applet] Disable MPRIS Stop entry in context menu if stopped
  * [taskmanager applet] Fix MPRIS entries in context menu for CanPause==false
  * [taskmanager applet] Fix MPRIS buttons in tooltip for CanPause==false
  * Prevent duplicate entries in the Baloo kcm folders list.
  * Improve detecting D&amp;D between two screen showing the same URL
  * [Task Manager] Limit badge label to a sane size</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [Folder View] Fix selecting text with Shift+Home/End (kde#392318)
  * Make Select/Deselect All operate on the filtered rows.
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [touchpad kded] Work around kded fail on X-KDE-OnlyShowOnQtPlatforms lists
  * [Touchpad KCM] Sync values to UI on Defaults in Wayland session (kde#392029)
  * [Workspace Options KCM] sync() after writing settings
  * bad textarea width for rename file if filename too short (kde#386546)
  * Fix scrollbar on empty search results (kde#391644)
  * kimpanel: Fix the window positioning when plasma uses native-qt scaling.
  * Load correct wallpaper plugin configuration in the dialog
  * Don't skip certain recent documents in kicker and taskmanager
  * Improve multi-desktop folderview behavior (kde#390676)
  * Use QUrl in the ScreenMapper API
  * use opacity instead of visible (kde#391432)</changelog>
  <changelog author="wbauer@tmo.at" date="1523275200">- Add Make-automounting-work-even-if-StorageAccess-is-ignored.patch
  to fix Auto-mounting not working in some cases (kde#389479)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [Desktop Theme KCM] Workaround bug in FileDialog
  * FunnelModel: fix invalid model API usage.
  * [Window List] Show pin icon only when in panel (kde#391145)
  * Make automounting work even if StorageAccess is ignored (kde#389479)
  * [Folder View] Set shortcut on plasmoid.action (kde#392730)
  * [Folder View] Use KStandardAction for rename, delete, and trash
  * [Folder View] Simplify clearing of lists
  * [Folder View] Update "Empty Trash" enabled state for files inside Trash and links to Trash (kde#392738)
  * [System Model] Support actions
  * Do clamping in the model and add missing lower bound check (kde#390888)
- Remove patches, now upstream:
  * Make-automounting-work-even-if-StorageAccess-is-ignored.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add patch to fix display of certain submenus in kicker (kde#394013):
  * 0001-Fix-submenus-not-updating-when-switching-between-cat.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here
- Remove patches, now upstream:
  * 0001-Fix-submenus-not-updating-when-switching-between-cat.patch
- Refresh patches:
  * 0001-Use-themed-user-face-icon-in-kickoff.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1533038400">- Add fontinst-quits-after-KJob-is-done.patch to fix problems when
  installing/removing multiple fonts system-wide at once
  (kde#379524, kde#379324, kde#349673, kde#361960, kde#392267)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="eef2170a64e3d1cf613852e5094356496302e6b4bd4d81b159140d374689cc2f" name="plasma5-desktop" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Default X font DPI to 96 on wayland
  * kcm baloo: Fix extraction of folder basename for error message</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Default X font DPI to 96 on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Fix crash in KAStatsFavouritesModel (kde#386439)
  * Be more explicit about Qt5::Widgets dependencies</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513512000">- Add patch to fix issue appearing with Qt 5.10 (kde#387199):
  * 0001-Folder-View-Accept-mouse-events-if-we-handled-them.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Don't show "Edit Application..." action for non-app services. (kde#388340)
  * Use automoc keyword for kimpanel-scim-panel
  * [Folder View] Show "Widgets unlocked" help only for containment (kde#387589)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1515758400">- Add patch to fix generation of font previews:
  * 0001-Support-font-ttf-and-font-otf-mimetypes-in-kfontinst.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-Support-font-ttf-and-font-otf-mimetypes-in-kfontinst.patch
  * 0001-Folder-View-Accept-mouse-events-if-we-handled-them.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Require KDE Frameworks 5.42
  * fix applying color effects of the theme
  * Fix iterator
  * [Look and feel KCM] Destroy and recreate GHNS button when palette changes (kde#389351)
  * [Look and feel KCM] Keep cursor size when applying theme
  * [Look and feel KCM] Sync color group after copying over color file values (kde#370162)
  * Remove QT_VERSION checks
  * Bump Qt version to 5.9
  * Make sure the search result that Return will run is highlighted
  * Don't close plasmoid when closing a subdialog (kde#388669)
  * Fix missing action arguments. (kde#389234)
  * [Folder View] Don't trash local files
  * [Style KCM] Sync KConfig before announcing change</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Implement Tab/Backtab navigation (kde#387316)
  * [touchpad kcm] No KLocalizedString::setApplicationDomain() in kded plugin
  * [knetattach] Fix i18n calls being made before QApp creation
  * [Mouse KCM] Check libinput Atom availability before using them (kde#389978)
  * [Task Manager] Use KFilePlacesModel::isHidden
  * Improve preview thumbnail quality (kde#376848)
  * minor optimization: use reserve()
  * [kwin &amp; plasma-desktop runners] add missing TRANSLATION_DOMAIN definition
  * Fix kded5 startup warning:
  * Fix warnings in kded5 startup, due to i18n("")
  * Require KDE Frameworks 5.42</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Disable positioning in popup folderviews
  * [lookandfeel kcm] Do not declare plugin in lookandfeeltool code version, v2
  * Revert "[lookandfeel kcm] Do not declare plugin in lookandfeeltool code version"
  * Keep item highlighted when context menu opens
  * [Look and feel KCM] Fix copying color scheme data
  * Unbreak DND.
  * [Application Dashboard] Fix erroneously using Plasma icons for applications (kde#390353)
  * [Kickoff] Enable smooth scaling for icon
  * Workaround the touchpad toggle button not working
  * [lookandfeel kcm] Do not declare plugin in lookandfeeltool code version
  * Fix launching by touchscreen tap (kde#366527)
  * Fix window pin not showing (kde#390428)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1519905600">- Backport upstream commit to move the toolbox away from the desktop icons:
  * 0001-Place-toolbox-in-the-top-right-corner-of-the-screen.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [kaccess] Improve the port away from kdelibs4support
  * [taskmanager applet] Disable MPRIS Stop entry in context menu if stopped
  * [taskmanager applet] Fix MPRIS entries in context menu for CanPause==false
  * [taskmanager applet] Fix MPRIS buttons in tooltip for CanPause==false
  * Prevent duplicate entries in the Baloo kcm folders list.
  * Improve detecting D&amp;D between two screen showing the same URL
  * [Task Manager] Limit badge label to a sane size</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [Folder View] Fix selecting text with Shift+Home/End (kde#392318)
  * Make Select/Deselect All operate on the filtered rows.
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [touchpad kded] Work around kded fail on X-KDE-OnlyShowOnQtPlatforms lists
  * [Touchpad KCM] Sync values to UI on Defaults in Wayland session (kde#392029)
  * [Workspace Options KCM] sync() after writing settings
  * bad textarea width for rename file if filename too short (kde#386546)
  * Fix scrollbar on empty search results (kde#391644)
  * kimpanel: Fix the window positioning when plasma uses native-qt scaling.
  * Load correct wallpaper plugin configuration in the dialog
  * Don't skip certain recent documents in kicker and taskmanager
  * Improve multi-desktop folderview behavior (kde#390676)
  * Use QUrl in the ScreenMapper API
  * use opacity instead of visible (kde#391432)</changelog>
  <changelog author="wbauer@tmo.at" date="1523275200">- Add Make-automounting-work-even-if-StorageAccess-is-ignored.patch
  to fix Auto-mounting not working in some cases (kde#389479)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [Desktop Theme KCM] Workaround bug in FileDialog
  * FunnelModel: fix invalid model API usage.
  * [Window List] Show pin icon only when in panel (kde#391145)
  * Make automounting work even if StorageAccess is ignored (kde#389479)
  * [Folder View] Set shortcut on plasmoid.action (kde#392730)
  * [Folder View] Use KStandardAction for rename, delete, and trash
  * [Folder View] Simplify clearing of lists
  * [Folder View] Update "Empty Trash" enabled state for files inside Trash and links to Trash (kde#392738)
  * [System Model] Support actions
  * Do clamping in the model and add missing lower bound check (kde#390888)
- Remove patches, now upstream:
  * Make-automounting-work-even-if-StorageAccess-is-ignored.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add patch to fix display of certain submenus in kicker (kde#394013):
  * 0001-Fix-submenus-not-updating-when-switching-between-cat.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here
- Remove patches, now upstream:
  * 0001-Fix-submenus-not-updating-when-switching-between-cat.patch
- Refresh patches:
  * 0001-Use-themed-user-face-icon-in-kickoff.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1533038400">- Add fontinst-quits-after-KJob-is-done.patch to fix problems when
  installing/removing multiple fonts system-wide at once
  (kde#379524, kde#379324, kde#349673, kde#361960, kde#392267)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="24cddc51291b936495c560520f7ff0b3e45e5cda5f2a95516f6b27343c4b7135" name="plasma5-desktop-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.3.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1508587200">- Add #!BuildIgnore to break the
  plasma5-workspace-devel -&gt; plasma5-workspace -&gt; kwin5 -&gt; kdialog
  dep chain which results in pulling in kdebase4-runtime on 42.2</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * Default X font DPI to 96 on wayland
  * kcm baloo: Fix extraction of folder basename for error message</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Default X font DPI to 96 on wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * Fix crash in KAStatsFavouritesModel (kde#386439)
  * Be more explicit about Qt5::Widgets dependencies</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513512000">- Add patch to fix issue appearing with Qt 5.10 (kde#387199):
  * 0001-Folder-View-Accept-mouse-events-if-we-handled-them.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * Don't show "Edit Application..." action for non-app services. (kde#388340)
  * Use automoc keyword for kimpanel-scim-panel
  * [Folder View] Show "Widgets unlocked" help only for containment (kde#387589)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1515758400">- Add patch to fix generation of font previews:
  * 0001-Support-font-ttf-and-font-otf-mimetypes-in-kfontinst.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Drop patches, now upstream:
  * 0001-Support-font-ttf-and-font-otf-mimetypes-in-kfontinst.patch
  * 0001-Folder-View-Accept-mouse-events-if-we-handled-them.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * Require KDE Frameworks 5.42
  * fix applying color effects of the theme
  * Fix iterator
  * [Look and feel KCM] Destroy and recreate GHNS button when palette changes (kde#389351)
  * [Look and feel KCM] Keep cursor size when applying theme
  * [Look and feel KCM] Sync color group after copying over color file values (kde#370162)
  * Remove QT_VERSION checks
  * Bump Qt version to 5.9
  * Make sure the search result that Return will run is highlighted
  * Don't close plasmoid when closing a subdialog (kde#388669)
  * Fix missing action arguments. (kde#389234)
  * [Folder View] Don't trash local files
  * [Style KCM] Sync KConfig before announcing change</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Implement Tab/Backtab navigation (kde#387316)
  * [touchpad kcm] No KLocalizedString::setApplicationDomain() in kded plugin
  * [knetattach] Fix i18n calls being made before QApp creation
  * [Mouse KCM] Check libinput Atom availability before using them (kde#389978)
  * [Task Manager] Use KFilePlacesModel::isHidden
  * Improve preview thumbnail quality (kde#376848)
  * minor optimization: use reserve()
  * [kwin &amp; plasma-desktop runners] add missing TRANSLATION_DOMAIN definition
  * Fix kded5 startup warning:
  * Fix warnings in kded5 startup, due to i18n("")
  * Require KDE Frameworks 5.42</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Disable positioning in popup folderviews
  * [lookandfeel kcm] Do not declare plugin in lookandfeeltool code version, v2
  * Revert "[lookandfeel kcm] Do not declare plugin in lookandfeeltool code version"
  * Keep item highlighted when context menu opens
  * [Look and feel KCM] Fix copying color scheme data
  * Unbreak DND.
  * [Application Dashboard] Fix erroneously using Plasma icons for applications (kde#390353)
  * [Kickoff] Enable smooth scaling for icon
  * Workaround the touchpad toggle button not working
  * [lookandfeel kcm] Do not declare plugin in lookandfeeltool code version
  * Fix launching by touchscreen tap (kde#366527)
  * Fix window pin not showing (kde#390428)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1519905600">- Backport upstream commit to move the toolbox away from the desktop icons:
  * 0001-Place-toolbox-in-the-top-right-corner-of-the-screen.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [kaccess] Improve the port away from kdelibs4support
  * [taskmanager applet] Disable MPRIS Stop entry in context menu if stopped
  * [taskmanager applet] Fix MPRIS entries in context menu for CanPause==false
  * [taskmanager applet] Fix MPRIS buttons in tooltip for CanPause==false
  * Prevent duplicate entries in the Baloo kcm folders list.
  * Improve detecting D&amp;D between two screen showing the same URL
  * [Task Manager] Limit badge label to a sane size</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [Folder View] Fix selecting text with Shift+Home/End (kde#392318)
  * Make Select/Deselect All operate on the filtered rows.
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [touchpad kded] Work around kded fail on X-KDE-OnlyShowOnQtPlatforms lists
  * [Touchpad KCM] Sync values to UI on Defaults in Wayland session (kde#392029)
  * [Workspace Options KCM] sync() after writing settings
  * bad textarea width for rename file if filename too short (kde#386546)
  * Fix scrollbar on empty search results (kde#391644)
  * kimpanel: Fix the window positioning when plasma uses native-qt scaling.
  * Load correct wallpaper plugin configuration in the dialog
  * Don't skip certain recent documents in kicker and taskmanager
  * Improve multi-desktop folderview behavior (kde#390676)
  * Use QUrl in the ScreenMapper API
  * use opacity instead of visible (kde#391432)</changelog>
  <changelog author="wbauer@tmo.at" date="1523275200">- Add Make-automounting-work-even-if-StorageAccess-is-ignored.patch
  to fix Auto-mounting not working in some cases (kde#389479)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [Desktop Theme KCM] Workaround bug in FileDialog
  * FunnelModel: fix invalid model API usage.
  * [Window List] Show pin icon only when in panel (kde#391145)
  * Make automounting work even if StorageAccess is ignored (kde#389479)
  * [Folder View] Set shortcut on plasmoid.action (kde#392730)
  * [Folder View] Use KStandardAction for rename, delete, and trash
  * [Folder View] Simplify clearing of lists
  * [Folder View] Update "Empty Trash" enabled state for files inside Trash and links to Trash (kde#392738)
  * [System Model] Support actions
  * Do clamping in the model and add missing lower bound check (kde#390888)
- Remove patches, now upstream:
  * Make-automounting-work-even-if-StorageAccess-is-ignored.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add patch to fix display of certain submenus in kicker (kde#394013):
  * 0001-Fix-submenus-not-updating-when-switching-between-cat.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Too many changes to list here
- Remove patches, now upstream:
  * 0001-Fix-submenus-not-updating-when-switching-between-cat.patch
- Refresh patches:
  * 0001-Use-themed-user-face-icon-in-kickoff.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1533038400">- Add fontinst-quits-after-KJob-is-done.patch to fix problems when
  installing/removing multiple fonts system-wide at once
  (kde#379524, kde#379324, kde#349673, kde#361960, kde#392267)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)</changelog>
</package>
<package pkgid="2acfc3931ddcab2baa758898da2a0c5ea49189e5c1b3fe5fa296b1e2f9fbc9b7" name="plasma5-integration" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1499169600">- Move the Recommends: %{name}-plugin-lang to the
  plasma5-integration-plugin sub package, otherwise the
  translations won't get installed as there is no main package
  (boo#1027925)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Add ~/.local/share/icons to icons search paths
  * Group find_package(KF5*) calls together
  * Fix faulty merge
  * Allow to change toolbar font separately again (kde#358254)
  * [KHintsSettings] Update AA_DontShowIconsInMenus at runtime
  * Also specify a default StyleName for fonts (kde#383191)
  * Middle-click on QSystemTrayIcon ?auses context menu (kde#382855)
  * KDE QFileDialog helper: support name filters without parenthesis.
  * Introduce KDE_NO_GLOBAL_MENU env variable to disable global menu
  * Introduce KDE_NO_GLOBAL_MENU env variable to disable global menu
  * check window visibility at expose event
  * Allow to disable blinking cursor completely
  * Fix deprecation warnings. setSelection -&gt; setSelectedUrl ui -&gt; uiDelegate
  * Replace Q_DECL_OVERRIDE with override.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * link test against QuickControls2 to fix compile
  * Use QQuickStyle to set the QQC2 style (kde#384481)
  * Set QtQuickControls theme in QPT (kde#384466,kde#384481)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Show shortcuts in menus</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Display exclusive actions correctly in systray menus
  * Support submenus in context menu for systray icon
  * Use explicit palette interface
  * Remove obsolete reviewboardrc file
  * Remove now unused set window property
  * Update AppMenu for an app having multiple windows
  * Add manual test for win deco palettes
  * Require Qt 5.9
  * Port plasma-integration to explicit wayland AppMenu protocol
  * Check return value from QTest::qWaitForWindowExposed
  * Extend the testing capabilities of the qfiledialogtest</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [KFileTreeView] Manually expand tree when model tells us to (kde#389305)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1524052800">- Add Fix-initial-directory-selection-for-remote-files.patch to
  show the proper (remote) directory also for remote files when
  opening KDE's file dialog (boo#1085364, kde#374913)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * KDEPlatformFileDialog: Fix initial directory selection for remote files (kde#374913)
- Remove patches, now upstream:
  * Fix-initial-directory-selection-for-remote-files.patch
- Use %license</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Don't manipulate foreign windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-QDBusMenuBar-Guard-m_window-with-a-QPointer.patch (kde#376340,kde#379719)
  * 0002-Fix-QFileDialog-not-remembering-the-last-visited-dir.patch
- Add patch to fix build with breeze in a different version:
  * 0001-Don-t-depend-on-the-exact-version-of-Breeze.patch</changelog>
</package>
<package pkgid="a40f31981b2f8a872f62e500378c4d7224a635f74e660b3127e3f4115b04507d" name="plasma5-integration-plugin" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1499169600">- Move the Recommends: %{name}-plugin-lang to the
  plasma5-integration-plugin sub package, otherwise the
  translations won't get installed as there is no main package
  (boo#1027925)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Add ~/.local/share/icons to icons search paths
  * Group find_package(KF5*) calls together
  * Fix faulty merge
  * Allow to change toolbar font separately again (kde#358254)
  * [KHintsSettings] Update AA_DontShowIconsInMenus at runtime
  * Also specify a default StyleName for fonts (kde#383191)
  * Middle-click on QSystemTrayIcon ?auses context menu (kde#382855)
  * KDE QFileDialog helper: support name filters without parenthesis.
  * Introduce KDE_NO_GLOBAL_MENU env variable to disable global menu
  * Introduce KDE_NO_GLOBAL_MENU env variable to disable global menu
  * check window visibility at expose event
  * Allow to disable blinking cursor completely
  * Fix deprecation warnings. setSelection -&gt; setSelectedUrl ui -&gt; uiDelegate
  * Replace Q_DECL_OVERRIDE with override.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * link test against QuickControls2 to fix compile
  * Use QQuickStyle to set the QQC2 style (kde#384481)
  * Set QtQuickControls theme in QPT (kde#384466,kde#384481)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Show shortcuts in menus</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Display exclusive actions correctly in systray menus
  * Support submenus in context menu for systray icon
  * Use explicit palette interface
  * Remove obsolete reviewboardrc file
  * Remove now unused set window property
  * Update AppMenu for an app having multiple windows
  * Add manual test for win deco palettes
  * Require Qt 5.9
  * Port plasma-integration to explicit wayland AppMenu protocol
  * Check return value from QTest::qWaitForWindowExposed
  * Extend the testing capabilities of the qfiledialogtest</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [KFileTreeView] Manually expand tree when model tells us to (kde#389305)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1524052800">- Add Fix-initial-directory-selection-for-remote-files.patch to
  show the proper (remote) directory also for remote files when
  opening KDE's file dialog (boo#1085364, kde#374913)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * KDEPlatformFileDialog: Fix initial directory selection for remote files (kde#374913)
- Remove patches, now upstream:
  * Fix-initial-directory-selection-for-remote-files.patch
- Use %license</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Don't manipulate foreign windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-QDBusMenuBar-Guard-m_window-with-a-QPointer.patch (kde#376340,kde#379719)
  * 0002-Fix-QFileDialog-not-remembering-the-last-visited-dir.patch
- Add patch to fix build with breeze in a different version:
  * 0001-Don-t-depend-on-the-exact-version-of-Breeze.patch</changelog>
</package>
<package pkgid="4a0095b7793f6dc4359339136339c718ba02583406358a65e3ea5bc6d7290987" name="plasma5-integration-plugin-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="wbauer@tmo.at" date="1499169600">- Move the Recommends: %{name}-plugin-lang to the
  plasma5-integration-plugin sub package, otherwise the
  translations won't get installed as there is no main package
  (boo#1027925)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1500379200">- Update to 5.10.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.4.php
- Changes since 5.10.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1503403200">- Update to 5.10.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.5.php
- Changes since 5.10.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 5.10.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.10.95.php
- Changes since 5.10.5:
  * Add ~/.local/share/icons to icons search paths
  * Group find_package(KF5*) calls together
  * Fix faulty merge
  * Allow to change toolbar font separately again (kde#358254)
  * [KHintsSettings] Update AA_DontShowIconsInMenus at runtime
  * Also specify a default StyleName for fonts (kde#383191)
  * Middle-click on QSystemTrayIcon ?auses context menu (kde#382855)
  * KDE QFileDialog helper: support name filters without parenthesis.
  * Introduce KDE_NO_GLOBAL_MENU env variable to disable global menu
  * Introduce KDE_NO_GLOBAL_MENU env variable to disable global menu
  * check window visibility at expose event
  * Allow to disable blinking cursor completely
  * Fix deprecation warnings. setSelection -&gt; setSelectedUrl ui -&gt; uiDelegate
  * Replace Q_DECL_OVERRIDE with override.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1507204800">- Update to 5.11.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.0.php
- Changes since 5.10.95:
  * link test against QuickControls2 to fix compile
  * Use QQuickStyle to set the QQC2 style (kde#384481)
  * Set QtQuickControls theme in QPT (kde#384466,kde#384481)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508241600">- Update to 5.11.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.1.php
- Changes since 5.11.0:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1508846400">- Update to 5.11.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.2.php
- Changes since 5.11.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1510056000">- Update to 5.11.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.3.php
- Changes since 5.11.2:
  * Show shortcuts in menus</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Update to 5.11.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.4.php
- Changes since 5.11.3:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Changes since 5.11.5:
  * Display exclusive actions correctly in systray menus
  * Support submenus in context menu for systray icon
  * Use explicit palette interface
  * Remove obsolete reviewboardrc file
  * Remove now unused set window property
  * Update AppMenu for an app having multiple windows
  * Add manual test for win deco palettes
  * Require Qt 5.9
  * Port plasma-integration to explicit wayland AppMenu protocol
  * Check return value from QTest::qWaitForWindowExposed
  * Extend the testing capabilities of the qfiledialogtest</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [KFileTreeView] Manually expand tree when model tells us to (kde#389305)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * None</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * None</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * None</changelog>
  <changelog author="wbauer@tmo.at" date="1524052800">- Add Fix-initial-directory-selection-for-remote-files.patch to
  show the proper (remote) directory also for remote files when
  opening KDE's file dialog (boo#1085364, kde#374913)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * KDEPlatformFileDialog: Fix initial directory selection for remote files (kde#374913)
- Remove patches, now upstream:
  * Fix-initial-directory-selection-for-remote-files.patch
- Use %license</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * Don't manipulate foreign windows</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Add additional fixes:
  * 0001-QDBusMenuBar-Guard-m_window-with-a-QPointer.patch (kde#376340,kde#379719)
  * 0002-Fix-QFileDialog-not-remembering-the-last-visited-dir.patch
- Add patch to fix build with breeze in a different version:
  * 0001-Don-t-depend-on-the-exact-version-of-Breeze.patch</changelog>
</package>
<package pkgid="ac0a2f96a85dd16da92b6ed1f1f383fc34bc3b6b55db930241d21f348dcf9e6a" name="plasma5-pk-updates" arch="src">
  <version epoch="0" ver="0.3.2" rel="lp150.9.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1445428800">- Obsolete apper</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1454673600">- Change the obsoletes for apper to a higher version number to
  make sure that it gets removed. Current apper version is 0.9.2 and
  therefore higher than the version of plasma5-pk-updates</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1455192000">- Add patch change-refresh-logic.patch. This prevents the plasmoid
  from starting the PackageKit Daemon on a hourly basis. This also
  prevents unnecessary notifications.
  (boo#955352)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1455278400">- Add translations  (plasma-pk-updates-lang.tar.xz)</changelog>
  <changelog author="wbauer@tmo.at" date="1455537600">- Add use-native-plasma-components.patch: fixes problems with dark
  Plasma themes (boo#953669, kde#359308)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1471003200">- Adjust filelist for the plasmoid appdata, installed with KF &gt; 5.25.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1471262400">- Add upstream commits fix-typo-in-icon-name.patch and
  use-new-breeze-icons.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1474718400">- Add add-desktopfile-translations.patch to translate the name and
  description of the plasmoid
- Update translations to the latest versions from SVN (boo#990362)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484827200">- Add upstream commits:
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0002-Remove-Plasma-PopupApplet-from-desktop-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 0.3.1. Changes:
  * concat the string
  * reload the cache when the updates had been installed meanwhile manually
  * Re-check selected packages once any is selected/deselected
  * Remove Plasma/PopupApplet from desktop file
  * Add notification about required restart/logout
  * Fix typo in icon name
  * Use new breeze icons
  * Make it compile with GCC &lt; 5
  * Simplify the logic a bit
  * Change the refresh logic and avoid unnecessary calls to the Packagekit Daemon
  * Add a checkbox to select/deselect all packages
  * Use native plasma components
- Remove patches, now upstream:
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0002-Remove-Plasma-PopupApplet-from-desktop-file.patch
  * fix-typo-in-icon-name.patch
  * use-new-breeze-icons.patch
  * use-native-plasma-components.patch
  * change-refresh-logic.patch
  * gcc48.diff
  * add-desktopfile-translations.patch
- Add patch to fix relogin/restart notification (boo#951580)
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch
- Add patch to fix translation of status string:
  * 0001-concat-the-string.patch
- Generate an updated plasma-pk-updates-lang.tar.xz</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1515067200">- Fix refresh logic on startup:
  * 0001-Only-save-the-last-update-timestep-on-success.patch
  * 0002-Show-that-the-last-check-failed-if-no-updates-availa.patch
  * 0003-List-known-updates-on-startup.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1517054400">- Update translations (boo#1077851)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518177600">- Add patch to close the plasmoid after update installation (boo#1077633):
  * 0001-Close-the-plasmoid-after-updates-got-installed.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add patch to fix tooltip text with security or important updates (boo#1090375):
  * 0001-Use-n-instead-of-br-for-the-extra-part-of-the-summar.patch</changelog>
  <changelog author="christophe@krop.fr" date="1526558400">- Update translations (boo#1093743)</changelog>
  <changelog author="wbauer@tmo.at" date="1527249600">- Update to 0.3.2. Changes:
  * Use \n instead of &lt;br&gt; for the extra part of the summary
  * Close the plasmoid after updates got installed
  * Fix build with PackageKit-Qt 1.0.x
  * List known updates on startup
  * Show that the last check failed if no updates available
  * Only save the last update timestep on success
  * Add DefaultEvent flag to fix notification for relogin/restart
  * concat the string
- Change Source URL to download.kde.org
- Drop plasma-pk-updates-lang.tar.xz, the translations are
  included in the released source tarball now
- Drop patches merged upstream:
  * 0001-concat-the-string.patch
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch
  * 0001-Only-save-the-last-update-timestep-on-success.patch
  * 0002-Show-that-the-last-check-failed-if-no-updates-availa.patch
  * 0003-List-known-updates-on-startup.patch
  * 0001-Close-the-plasmoid-after-updates-got-installed.patch
  * 0001-Use-n-instead-of-br-for-the-extra-part-of-the-summar.patch
- Mark LICENSE file with %license instead of %doc</changelog>
</package>
<package pkgid="cd21347ca84976113cea9d35e8f765d52f28937afe69e0391e74e8b05fa10d68" name="plasma5-pk-updates" arch="x86_64">
  <version epoch="0" ver="0.3.2" rel="lp150.9.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1445428800">- Obsolete apper</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1454673600">- Change the obsoletes for apper to a higher version number to
  make sure that it gets removed. Current apper version is 0.9.2 and
  therefore higher than the version of plasma5-pk-updates</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1455192000">- Add patch change-refresh-logic.patch. This prevents the plasmoid
  from starting the PackageKit Daemon on a hourly basis. This also
  prevents unnecessary notifications.
  (boo#955352)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1455278400">- Add translations  (plasma-pk-updates-lang.tar.xz)</changelog>
  <changelog author="wbauer@tmo.at" date="1455537600">- Add use-native-plasma-components.patch: fixes problems with dark
  Plasma themes (boo#953669, kde#359308)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1471003200">- Adjust filelist for the plasmoid appdata, installed with KF &gt; 5.25.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1471262400">- Add upstream commits fix-typo-in-icon-name.patch and
  use-new-breeze-icons.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1474718400">- Add add-desktopfile-translations.patch to translate the name and
  description of the plasmoid
- Update translations to the latest versions from SVN (boo#990362)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484827200">- Add upstream commits:
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0002-Remove-Plasma-PopupApplet-from-desktop-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 0.3.1. Changes:
  * concat the string
  * reload the cache when the updates had been installed meanwhile manually
  * Re-check selected packages once any is selected/deselected
  * Remove Plasma/PopupApplet from desktop file
  * Add notification about required restart/logout
  * Fix typo in icon name
  * Use new breeze icons
  * Make it compile with GCC &lt; 5
  * Simplify the logic a bit
  * Change the refresh logic and avoid unnecessary calls to the Packagekit Daemon
  * Add a checkbox to select/deselect all packages
  * Use native plasma components
- Remove patches, now upstream:
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0002-Remove-Plasma-PopupApplet-from-desktop-file.patch
  * fix-typo-in-icon-name.patch
  * use-new-breeze-icons.patch
  * use-native-plasma-components.patch
  * change-refresh-logic.patch
  * gcc48.diff
  * add-desktopfile-translations.patch
- Add patch to fix relogin/restart notification (boo#951580)
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch
- Add patch to fix translation of status string:
  * 0001-concat-the-string.patch
- Generate an updated plasma-pk-updates-lang.tar.xz</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1515067200">- Fix refresh logic on startup:
  * 0001-Only-save-the-last-update-timestep-on-success.patch
  * 0002-Show-that-the-last-check-failed-if-no-updates-availa.patch
  * 0003-List-known-updates-on-startup.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1517054400">- Update translations (boo#1077851)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518177600">- Add patch to close the plasmoid after update installation (boo#1077633):
  * 0001-Close-the-plasmoid-after-updates-got-installed.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add patch to fix tooltip text with security or important updates (boo#1090375):
  * 0001-Use-n-instead-of-br-for-the-extra-part-of-the-summar.patch</changelog>
  <changelog author="christophe@krop.fr" date="1526558400">- Update translations (boo#1093743)</changelog>
  <changelog author="wbauer@tmo.at" date="1527249600">- Update to 0.3.2. Changes:
  * Use \n instead of &lt;br&gt; for the extra part of the summary
  * Close the plasmoid after updates got installed
  * Fix build with PackageKit-Qt 1.0.x
  * List known updates on startup
  * Show that the last check failed if no updates available
  * Only save the last update timestep on success
  * Add DefaultEvent flag to fix notification for relogin/restart
  * concat the string
- Change Source URL to download.kde.org
- Drop plasma-pk-updates-lang.tar.xz, the translations are
  included in the released source tarball now
- Drop patches merged upstream:
  * 0001-concat-the-string.patch
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch
  * 0001-Only-save-the-last-update-timestep-on-success.patch
  * 0002-Show-that-the-last-check-failed-if-no-updates-availa.patch
  * 0003-List-known-updates-on-startup.patch
  * 0001-Close-the-plasmoid-after-updates-got-installed.patch
  * 0001-Use-n-instead-of-br-for-the-extra-part-of-the-summar.patch
- Mark LICENSE file with %license instead of %doc</changelog>
</package>
<package pkgid="91dd3ec47dc0149215f92206e35930affa6304f2b7a3e7872dc752670028b5e1" name="plasma5-pk-updates-lang" arch="noarch">
  <version epoch="0" ver="0.3.2" rel="lp150.9.3.1"/>
  <changelog author="hrvoje.senjan@gmail.com" date="1445428800">- Obsolete apper</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1454673600">- Change the obsoletes for apper to a higher version number to
  make sure that it gets removed. Current apper version is 0.9.2 and
  therefore higher than the version of plasma5-pk-updates</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1455192000">- Add patch change-refresh-logic.patch. This prevents the plasmoid
  from starting the PackageKit Daemon on a hourly basis. This also
  prevents unnecessary notifications.
  (boo#955352)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1455278400">- Add translations  (plasma-pk-updates-lang.tar.xz)</changelog>
  <changelog author="wbauer@tmo.at" date="1455537600">- Add use-native-plasma-components.patch: fixes problems with dark
  Plasma themes (boo#953669, kde#359308)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1471003200">- Adjust filelist for the plasmoid appdata, installed with KF &gt; 5.25.0</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1471262400">- Add upstream commits fix-typo-in-icon-name.patch and
  use-new-breeze-icons.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1474718400">- Add add-desktopfile-translations.patch to translate the name and
  description of the plasmoid
- Update translations to the latest versions from SVN (boo#990362)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1484827200">- Add upstream commits:
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0002-Remove-Plasma-PopupApplet-from-desktop-file.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1505390400">- Update to 0.3.1. Changes:
  * concat the string
  * reload the cache when the updates had been installed meanwhile manually
  * Re-check selected packages once any is selected/deselected
  * Remove Plasma/PopupApplet from desktop file
  * Add notification about required restart/logout
  * Fix typo in icon name
  * Use new breeze icons
  * Make it compile with GCC &lt; 5
  * Simplify the logic a bit
  * Change the refresh logic and avoid unnecessary calls to the Packagekit Daemon
  * Add a checkbox to select/deselect all packages
  * Use native plasma components
- Remove patches, now upstream:
  * 0001-Add-notification-about-required-restart-logout.patch
  * 0002-Remove-Plasma-PopupApplet-from-desktop-file.patch
  * fix-typo-in-icon-name.patch
  * use-new-breeze-icons.patch
  * use-native-plasma-components.patch
  * change-refresh-logic.patch
  * gcc48.diff
  * add-desktopfile-translations.patch
- Add patch to fix relogin/restart notification (boo#951580)
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch
- Add patch to fix translation of status string:
  * 0001-concat-the-string.patch
- Generate an updated plasma-pk-updates-lang.tar.xz</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1515067200">- Fix refresh logic on startup:
  * 0001-Only-save-the-last-update-timestep-on-success.patch
  * 0002-Show-that-the-last-check-failed-if-no-updates-availa.patch
  * 0003-List-known-updates-on-startup.patch</changelog>
  <changelog author="wbauer@tmo.at" date="1517054400">- Update translations (boo#1077851)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518177600">- Add patch to close the plasmoid after update installation (boo#1077633):
  * 0001-Close-the-plasmoid-after-updates-got-installed.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Add patch to fix tooltip text with security or important updates (boo#1090375):
  * 0001-Use-n-instead-of-br-for-the-extra-part-of-the-summar.patch</changelog>
  <changelog author="christophe@krop.fr" date="1526558400">- Update translations (boo#1093743)</changelog>
  <changelog author="wbauer@tmo.at" date="1527249600">- Update to 0.3.2. Changes:
  * Use \n instead of &lt;br&gt; for the extra part of the summary
  * Close the plasmoid after updates got installed
  * Fix build with PackageKit-Qt 1.0.x
  * List known updates on startup
  * Show that the last check failed if no updates available
  * Only save the last update timestep on success
  * Add DefaultEvent flag to fix notification for relogin/restart
  * concat the string
- Change Source URL to download.kde.org
- Drop plasma-pk-updates-lang.tar.xz, the translations are
  included in the released source tarball now
- Drop patches merged upstream:
  * 0001-concat-the-string.patch
  * 0001-Add-DefaultEvent-flag-to-fix-notification-for-relogi.patch
  * 0001-Only-save-the-last-update-timestep-on-success.patch
  * 0002-Show-that-the-last-check-failed-if-no-updates-availa.patch
  * 0003-List-known-updates-on-startup.patch
  * 0001-Close-the-plasmoid-after-updates-got-installed.patch
  * 0001-Use-n-instead-of-br-for-the-extra-part-of-the-summar.patch
- Mark LICENSE file with %license instead of %doc</changelog>
</package>
<package pkgid="5072ec3db0fa3399a70f1cbb484c7990f269b42033361b830d8a89d5561947a8" name="plasma5-session" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add explicit BuildRequires for xrender and xtst</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512388800">- Only recommend, not require, kio-extras5</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [widgetexplorer] Fix trying to show deleted dialog
  * Remove i18n() calls from iconSource names
  * [widgetexplorer] Make sure KNS download dialog is destroyed
  * [weather] NOAA ion: Show some icons for "Hot" and "Cold" forecasts (kde#365715)
  * [weather] NOAA ion: update link in comments</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Adjust 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [Notifications] Fix grouping
  * Make sure device paths are quoted
  * Add license header to test
  * Revert "Set GTK scaling env vars" (kde#389523)
  * Revert "Replace bc with awk"
  * Sanitise notification HTML
  * Add missing find_dependency calls to libs' CMake config files
  * Fix krunner's alt+f2 on wayland (kde#385693)
  * Further improve quality of images in notifications (kde#385097)
  * Fix autohide panels on wayland (kde#377838)
  * Improve quality of images in notifications (Bug 385097) (kde#385097)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Put history into a ListView (kde#389132)
  * [Notifications] Disable history check box when notifications are disabled
  * [PanelView] Also requestActivate config dialog
  * Require KDE Frameworks 5.42
  * [Calculator Runner] Fix unused variable warning
  * [Calculator Runner] Move action check outside of ifdef</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Improve appearance of the logout dialog on wayland
  * Fix Breeze LnF theme data for window decoration
  * Fix dupe handling in requestAddLauncherToActivities; improve unit test
  * [Notifications] Let clear entry also clear history
  * [LauncherTasksModel] Support applications: URLs in requestOpenUrls
  * [appstream runner] Add missing Messages.sh file and set TRANSLATION_DOMAIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix favicons in firefox bookmarks runner (kde#363136)
  * Remove uninstalled themerc files for no longer existing Qt themes
  * Have all krunner plugin desktop files prefixed with "plasma-runner-"
  - Refreshed patches:
  * 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [media controller applet] Support MPRIS services where CanPause==false
  * [mpris2 dataengine] Fix media key handling to match MediaPlayer2.Player
  * [media controller applet] Fix JS error on no xesam:url data set
  * [mediacontroller applet] Remove de-funct "General" configuration page
  * Fix the userswitcher when using the mouse for switching (kde#391007)
  * Adapt to further nullpointers from prison</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add upstream patch to fix starting a wayland session from gdm and
  lightdm: (boo#1085772):
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patches to not set QT_QPA_PLATFORM in a wayland session:
  * 0001-Call-KLocalizedString-setApplicationDomain-after-Q-A.patch
  * 0002-Add-platform-detection-to-KWorkspace-library-to-adju.patch
  * 0003-No-longer-export-QT_QPA_PLATFORM-env-variable-to-the.patch
  * 0001-Set-XDG_SESSION_TYPE-wayland-in-startplasmacomposito.patch
- Set GDK_BACKEND=x11 to work around GTK3 bugs:
  * 0001-Set-GTK_BACKEND-x11-in-a-wayland-session.patch
- Add a suffix to the wayland session's name:
  * 0001-Add-suffix-to-the-wayland-session-s-name.patch
- Apply upstream patches before downstream patches</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [notifications applet] Fix two qml warnings about assigning [undefined]
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [Run Command] Pass "event" to runCurrentIndex
  * Move to KRunner's second results item with a single keypress (kde#392197)
  * Pass proper click coordinates to SNI ContextMenu calls
  * libdbusmenu-qt: Remove nonexistant actions directly from the menu
  * Set a transient parent for SNI context menus
  * [DeviceNotifications Engine] Never show safely remove message when mounting (kde#391180)
  * Use dbus-run-session instead of dbus-launch --exit-with-session
  * [System Tray] Fix hiding applets with HiddenStatus
  * [Notifications] Remove NoAccessNetworkAccessManagerFactory
  * Improve By Desktop sorting for task groups (kde#384747)
  * Use separate config group for each wallpaper plugin
  * Fix duplicated [Desktop Entry] sections in two menu directory files
- Remove patches, now upstream:
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522238400">- Don't require plasma5-workspace in plasma5-workspace-devel,
  it pulls in a lot of unnecessary requirements and can cause
  build loops</changelog>
  <changelog author="wbauer@tmo.at" date="1522497600">- Add Fix-weather-engine-BBC-provider.patch to adapt the BBC
  weather engine provider to changes in the RSS feed that broke it
  (kde#392510)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Add patch to add a clear button to the notification history (kde#386068):
  * 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to avoid listing all users over NIS:
  * lazy-sddm-theme.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ksmserver] Use QUrl::fromUserInput to construct sound url (kde#392725)
  * [Image Wallpaper] Fix auto transform for blurred fill (kde#393498)
  * sddm-theme: Focus the password field if enter pressed in the username field
  * [Notifications] Always scroll to the top when opening (kde#391646)
  * [ContextMenu Containment Action] Fix checking for KIOSK (kde#393329)
  * [Power Management Engine] Fix kiosk restriction for lockscreen (kde#393331)
  * [weather dataengine] envcan: fix forecast terms to match "ice pellets"
  * [weather dataengine] bbc: handle and ignore condition "Not Available"
  * [weather dataengine] bbc: handle and skip visbility "--"
  * [OSD] Enforce plain text
  * [weather] BBCUKMET: add missing "thundery showers"
  * [weather] BBCUKMET: add missing "light rain showers"/"heavy rain showers"
  * [weather dataengine] Fix BBC provider to adapt to change RSS feed (kde#392510)
  * KDE logout screen background color fix (kde#382264)
  * fix: Klipper notifications visually broken since plasma 5.12 (kde#390375)
  * [notifications applet] Fix two qml warnings about assigning [undefined]
- Remove patches, now upstream:
  * Fix-weather-engine-BBC-provider.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525694400">- Remove runtime dep on update-desktop-files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526731200">- Refresh 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Slideshow Wallpaper] Ignore hidden files and folders (kde#394882)
  * Weigh matching services by relating data used in query to their menuids
  * Add mappings for VirtualBox
  * Remove legacy Wine hack-around from rules rc. (kde#393787)
  * [Service Runner] Do startsWith check case-insensitive (kde#394202)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Relax version requirements for partial Plasma version bump
- Add additional fixes:
  * 0001-Notifications-Engine-Guard-this.patch (kde#397105)
  * 0001-Notifications-Engine-Never-group-notifications-with-.patch (kde#396741)
  * 0001-Notification-dataengine-debug-category.patch (boo#1101873)
- Use %define instead of %global to workaround spec-cleaner/rpm 4.14 incompatibility</changelog>
</package>
<package pkgid="9dbaf0344cacd9dfdf433c2ac7e5053dc274fa5226b62d1c8e586a6239c64229" name="plasma5-session-wayland" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add explicit BuildRequires for xrender and xtst</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512388800">- Only recommend, not require, kio-extras5</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [widgetexplorer] Fix trying to show deleted dialog
  * Remove i18n() calls from iconSource names
  * [widgetexplorer] Make sure KNS download dialog is destroyed
  * [weather] NOAA ion: Show some icons for "Hot" and "Cold" forecasts (kde#365715)
  * [weather] NOAA ion: update link in comments</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Adjust 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [Notifications] Fix grouping
  * Make sure device paths are quoted
  * Add license header to test
  * Revert "Set GTK scaling env vars" (kde#389523)
  * Revert "Replace bc with awk"
  * Sanitise notification HTML
  * Add missing find_dependency calls to libs' CMake config files
  * Fix krunner's alt+f2 on wayland (kde#385693)
  * Further improve quality of images in notifications (kde#385097)
  * Fix autohide panels on wayland (kde#377838)
  * Improve quality of images in notifications (Bug 385097) (kde#385097)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Put history into a ListView (kde#389132)
  * [Notifications] Disable history check box when notifications are disabled
  * [PanelView] Also requestActivate config dialog
  * Require KDE Frameworks 5.42
  * [Calculator Runner] Fix unused variable warning
  * [Calculator Runner] Move action check outside of ifdef</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Improve appearance of the logout dialog on wayland
  * Fix Breeze LnF theme data for window decoration
  * Fix dupe handling in requestAddLauncherToActivities; improve unit test
  * [Notifications] Let clear entry also clear history
  * [LauncherTasksModel] Support applications: URLs in requestOpenUrls
  * [appstream runner] Add missing Messages.sh file and set TRANSLATION_DOMAIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix favicons in firefox bookmarks runner (kde#363136)
  * Remove uninstalled themerc files for no longer existing Qt themes
  * Have all krunner plugin desktop files prefixed with "plasma-runner-"
  - Refreshed patches:
  * 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [media controller applet] Support MPRIS services where CanPause==false
  * [mpris2 dataengine] Fix media key handling to match MediaPlayer2.Player
  * [media controller applet] Fix JS error on no xesam:url data set
  * [mediacontroller applet] Remove de-funct "General" configuration page
  * Fix the userswitcher when using the mouse for switching (kde#391007)
  * Adapt to further nullpointers from prison</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add upstream patch to fix starting a wayland session from gdm and
  lightdm: (boo#1085772):
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patches to not set QT_QPA_PLATFORM in a wayland session:
  * 0001-Call-KLocalizedString-setApplicationDomain-after-Q-A.patch
  * 0002-Add-platform-detection-to-KWorkspace-library-to-adju.patch
  * 0003-No-longer-export-QT_QPA_PLATFORM-env-variable-to-the.patch
  * 0001-Set-XDG_SESSION_TYPE-wayland-in-startplasmacomposito.patch
- Set GDK_BACKEND=x11 to work around GTK3 bugs:
  * 0001-Set-GTK_BACKEND-x11-in-a-wayland-session.patch
- Add a suffix to the wayland session's name:
  * 0001-Add-suffix-to-the-wayland-session-s-name.patch
- Apply upstream patches before downstream patches</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [notifications applet] Fix two qml warnings about assigning [undefined]
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [Run Command] Pass "event" to runCurrentIndex
  * Move to KRunner's second results item with a single keypress (kde#392197)
  * Pass proper click coordinates to SNI ContextMenu calls
  * libdbusmenu-qt: Remove nonexistant actions directly from the menu
  * Set a transient parent for SNI context menus
  * [DeviceNotifications Engine] Never show safely remove message when mounting (kde#391180)
  * Use dbus-run-session instead of dbus-launch --exit-with-session
  * [System Tray] Fix hiding applets with HiddenStatus
  * [Notifications] Remove NoAccessNetworkAccessManagerFactory
  * Improve By Desktop sorting for task groups (kde#384747)
  * Use separate config group for each wallpaper plugin
  * Fix duplicated [Desktop Entry] sections in two menu directory files
- Remove patches, now upstream:
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522238400">- Don't require plasma5-workspace in plasma5-workspace-devel,
  it pulls in a lot of unnecessary requirements and can cause
  build loops</changelog>
  <changelog author="wbauer@tmo.at" date="1522497600">- Add Fix-weather-engine-BBC-provider.patch to adapt the BBC
  weather engine provider to changes in the RSS feed that broke it
  (kde#392510)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Add patch to add a clear button to the notification history (kde#386068):
  * 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to avoid listing all users over NIS:
  * lazy-sddm-theme.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ksmserver] Use QUrl::fromUserInput to construct sound url (kde#392725)
  * [Image Wallpaper] Fix auto transform for blurred fill (kde#393498)
  * sddm-theme: Focus the password field if enter pressed in the username field
  * [Notifications] Always scroll to the top when opening (kde#391646)
  * [ContextMenu Containment Action] Fix checking for KIOSK (kde#393329)
  * [Power Management Engine] Fix kiosk restriction for lockscreen (kde#393331)
  * [weather dataengine] envcan: fix forecast terms to match "ice pellets"
  * [weather dataengine] bbc: handle and ignore condition "Not Available"
  * [weather dataengine] bbc: handle and skip visbility "--"
  * [OSD] Enforce plain text
  * [weather] BBCUKMET: add missing "thundery showers"
  * [weather] BBCUKMET: add missing "light rain showers"/"heavy rain showers"
  * [weather dataengine] Fix BBC provider to adapt to change RSS feed (kde#392510)
  * KDE logout screen background color fix (kde#382264)
  * fix: Klipper notifications visually broken since plasma 5.12 (kde#390375)
  * [notifications applet] Fix two qml warnings about assigning [undefined]
- Remove patches, now upstream:
  * Fix-weather-engine-BBC-provider.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525694400">- Remove runtime dep on update-desktop-files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526731200">- Refresh 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Slideshow Wallpaper] Ignore hidden files and folders (kde#394882)
  * Weigh matching services by relating data used in query to their menuids
  * Add mappings for VirtualBox
  * Remove legacy Wine hack-around from rules rc. (kde#393787)
  * [Service Runner] Do startsWith check case-insensitive (kde#394202)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Relax version requirements for partial Plasma version bump
- Add additional fixes:
  * 0001-Notifications-Engine-Guard-this.patch (kde#397105)
  * 0001-Notifications-Engine-Never-group-notifications-with-.patch (kde#396741)
  * 0001-Notification-dataengine-debug-category.patch (boo#1101873)
- Use %define instead of %global to workaround spec-cleaner/rpm 4.14 incompatibility</changelog>
</package>
<package pkgid="3e3301fdda31839a245c7c5f75c5a5a3cd609ca7783d21635f02014e9878cf82" name="plasma5-workspace" arch="src">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add explicit BuildRequires for xrender and xtst</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512388800">- Only recommend, not require, kio-extras5</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [widgetexplorer] Fix trying to show deleted dialog
  * Remove i18n() calls from iconSource names
  * [widgetexplorer] Make sure KNS download dialog is destroyed
  * [weather] NOAA ion: Show some icons for "Hot" and "Cold" forecasts (kde#365715)
  * [weather] NOAA ion: update link in comments</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Adjust 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [Notifications] Fix grouping
  * Make sure device paths are quoted
  * Add license header to test
  * Revert "Set GTK scaling env vars" (kde#389523)
  * Revert "Replace bc with awk"
  * Sanitise notification HTML
  * Add missing find_dependency calls to libs' CMake config files
  * Fix krunner's alt+f2 on wayland (kde#385693)
  * Further improve quality of images in notifications (kde#385097)
  * Fix autohide panels on wayland (kde#377838)
  * Improve quality of images in notifications (Bug 385097) (kde#385097)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Put history into a ListView (kde#389132)
  * [Notifications] Disable history check box when notifications are disabled
  * [PanelView] Also requestActivate config dialog
  * Require KDE Frameworks 5.42
  * [Calculator Runner] Fix unused variable warning
  * [Calculator Runner] Move action check outside of ifdef</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Improve appearance of the logout dialog on wayland
  * Fix Breeze LnF theme data for window decoration
  * Fix dupe handling in requestAddLauncherToActivities; improve unit test
  * [Notifications] Let clear entry also clear history
  * [LauncherTasksModel] Support applications: URLs in requestOpenUrls
  * [appstream runner] Add missing Messages.sh file and set TRANSLATION_DOMAIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix favicons in firefox bookmarks runner (kde#363136)
  * Remove uninstalled themerc files for no longer existing Qt themes
  * Have all krunner plugin desktop files prefixed with "plasma-runner-"
  - Refreshed patches:
  * 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [media controller applet] Support MPRIS services where CanPause==false
  * [mpris2 dataengine] Fix media key handling to match MediaPlayer2.Player
  * [media controller applet] Fix JS error on no xesam:url data set
  * [mediacontroller applet] Remove de-funct "General" configuration page
  * Fix the userswitcher when using the mouse for switching (kde#391007)
  * Adapt to further nullpointers from prison</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add upstream patch to fix starting a wayland session from gdm and
  lightdm: (boo#1085772):
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patches to not set QT_QPA_PLATFORM in a wayland session:
  * 0001-Call-KLocalizedString-setApplicationDomain-after-Q-A.patch
  * 0002-Add-platform-detection-to-KWorkspace-library-to-adju.patch
  * 0003-No-longer-export-QT_QPA_PLATFORM-env-variable-to-the.patch
  * 0001-Set-XDG_SESSION_TYPE-wayland-in-startplasmacomposito.patch
- Set GDK_BACKEND=x11 to work around GTK3 bugs:
  * 0001-Set-GTK_BACKEND-x11-in-a-wayland-session.patch
- Add a suffix to the wayland session's name:
  * 0001-Add-suffix-to-the-wayland-session-s-name.patch
- Apply upstream patches before downstream patches</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [notifications applet] Fix two qml warnings about assigning [undefined]
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [Run Command] Pass "event" to runCurrentIndex
  * Move to KRunner's second results item with a single keypress (kde#392197)
  * Pass proper click coordinates to SNI ContextMenu calls
  * libdbusmenu-qt: Remove nonexistant actions directly from the menu
  * Set a transient parent for SNI context menus
  * [DeviceNotifications Engine] Never show safely remove message when mounting (kde#391180)
  * Use dbus-run-session instead of dbus-launch --exit-with-session
  * [System Tray] Fix hiding applets with HiddenStatus
  * [Notifications] Remove NoAccessNetworkAccessManagerFactory
  * Improve By Desktop sorting for task groups (kde#384747)
  * Use separate config group for each wallpaper plugin
  * Fix duplicated [Desktop Entry] sections in two menu directory files
- Remove patches, now upstream:
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522238400">- Don't require plasma5-workspace in plasma5-workspace-devel,
  it pulls in a lot of unnecessary requirements and can cause
  build loops</changelog>
  <changelog author="wbauer@tmo.at" date="1522497600">- Add Fix-weather-engine-BBC-provider.patch to adapt the BBC
  weather engine provider to changes in the RSS feed that broke it
  (kde#392510)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Add patch to add a clear button to the notification history (kde#386068):
  * 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to avoid listing all users over NIS:
  * lazy-sddm-theme.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ksmserver] Use QUrl::fromUserInput to construct sound url (kde#392725)
  * [Image Wallpaper] Fix auto transform for blurred fill (kde#393498)
  * sddm-theme: Focus the password field if enter pressed in the username field
  * [Notifications] Always scroll to the top when opening (kde#391646)
  * [ContextMenu Containment Action] Fix checking for KIOSK (kde#393329)
  * [Power Management Engine] Fix kiosk restriction for lockscreen (kde#393331)
  * [weather dataengine] envcan: fix forecast terms to match "ice pellets"
  * [weather dataengine] bbc: handle and ignore condition "Not Available"
  * [weather dataengine] bbc: handle and skip visbility "--"
  * [OSD] Enforce plain text
  * [weather] BBCUKMET: add missing "thundery showers"
  * [weather] BBCUKMET: add missing "light rain showers"/"heavy rain showers"
  * [weather dataengine] Fix BBC provider to adapt to change RSS feed (kde#392510)
  * KDE logout screen background color fix (kde#382264)
  * fix: Klipper notifications visually broken since plasma 5.12 (kde#390375)
  * [notifications applet] Fix two qml warnings about assigning [undefined]
- Remove patches, now upstream:
  * Fix-weather-engine-BBC-provider.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525694400">- Remove runtime dep on update-desktop-files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526731200">- Refresh 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Slideshow Wallpaper] Ignore hidden files and folders (kde#394882)
  * Weigh matching services by relating data used in query to their menuids
  * Add mappings for VirtualBox
  * Remove legacy Wine hack-around from rules rc. (kde#393787)
  * [Service Runner] Do startsWith check case-insensitive (kde#394202)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Relax version requirements for partial Plasma version bump
- Add additional fixes:
  * 0001-Notifications-Engine-Guard-this.patch (kde#397105)
  * 0001-Notifications-Engine-Never-group-notifications-with-.patch (kde#396741)
  * 0001-Notification-dataengine-debug-category.patch (boo#1101873)
- Use %define instead of %global to workaround spec-cleaner/rpm 4.14 incompatibility</changelog>
</package>
<package pkgid="143fd7bbf2a7d9dfb2b19a6ec3a718efe9577259b702a78a5362fb46e15d481e" name="plasma5-workspace" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add explicit BuildRequires for xrender and xtst</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512388800">- Only recommend, not require, kio-extras5</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [widgetexplorer] Fix trying to show deleted dialog
  * Remove i18n() calls from iconSource names
  * [widgetexplorer] Make sure KNS download dialog is destroyed
  * [weather] NOAA ion: Show some icons for "Hot" and "Cold" forecasts (kde#365715)
  * [weather] NOAA ion: update link in comments</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Adjust 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [Notifications] Fix grouping
  * Make sure device paths are quoted
  * Add license header to test
  * Revert "Set GTK scaling env vars" (kde#389523)
  * Revert "Replace bc with awk"
  * Sanitise notification HTML
  * Add missing find_dependency calls to libs' CMake config files
  * Fix krunner's alt+f2 on wayland (kde#385693)
  * Further improve quality of images in notifications (kde#385097)
  * Fix autohide panels on wayland (kde#377838)
  * Improve quality of images in notifications (Bug 385097) (kde#385097)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Put history into a ListView (kde#389132)
  * [Notifications] Disable history check box when notifications are disabled
  * [PanelView] Also requestActivate config dialog
  * Require KDE Frameworks 5.42
  * [Calculator Runner] Fix unused variable warning
  * [Calculator Runner] Move action check outside of ifdef</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Improve appearance of the logout dialog on wayland
  * Fix Breeze LnF theme data for window decoration
  * Fix dupe handling in requestAddLauncherToActivities; improve unit test
  * [Notifications] Let clear entry also clear history
  * [LauncherTasksModel] Support applications: URLs in requestOpenUrls
  * [appstream runner] Add missing Messages.sh file and set TRANSLATION_DOMAIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix favicons in firefox bookmarks runner (kde#363136)
  * Remove uninstalled themerc files for no longer existing Qt themes
  * Have all krunner plugin desktop files prefixed with "plasma-runner-"
  - Refreshed patches:
  * 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [media controller applet] Support MPRIS services where CanPause==false
  * [mpris2 dataengine] Fix media key handling to match MediaPlayer2.Player
  * [media controller applet] Fix JS error on no xesam:url data set
  * [mediacontroller applet] Remove de-funct "General" configuration page
  * Fix the userswitcher when using the mouse for switching (kde#391007)
  * Adapt to further nullpointers from prison</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add upstream patch to fix starting a wayland session from gdm and
  lightdm: (boo#1085772):
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patches to not set QT_QPA_PLATFORM in a wayland session:
  * 0001-Call-KLocalizedString-setApplicationDomain-after-Q-A.patch
  * 0002-Add-platform-detection-to-KWorkspace-library-to-adju.patch
  * 0003-No-longer-export-QT_QPA_PLATFORM-env-variable-to-the.patch
  * 0001-Set-XDG_SESSION_TYPE-wayland-in-startplasmacomposito.patch
- Set GDK_BACKEND=x11 to work around GTK3 bugs:
  * 0001-Set-GTK_BACKEND-x11-in-a-wayland-session.patch
- Add a suffix to the wayland session's name:
  * 0001-Add-suffix-to-the-wayland-session-s-name.patch
- Apply upstream patches before downstream patches</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [notifications applet] Fix two qml warnings about assigning [undefined]
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [Run Command] Pass "event" to runCurrentIndex
  * Move to KRunner's second results item with a single keypress (kde#392197)
  * Pass proper click coordinates to SNI ContextMenu calls
  * libdbusmenu-qt: Remove nonexistant actions directly from the menu
  * Set a transient parent for SNI context menus
  * [DeviceNotifications Engine] Never show safely remove message when mounting (kde#391180)
  * Use dbus-run-session instead of dbus-launch --exit-with-session
  * [System Tray] Fix hiding applets with HiddenStatus
  * [Notifications] Remove NoAccessNetworkAccessManagerFactory
  * Improve By Desktop sorting for task groups (kde#384747)
  * Use separate config group for each wallpaper plugin
  * Fix duplicated [Desktop Entry] sections in two menu directory files
- Remove patches, now upstream:
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522238400">- Don't require plasma5-workspace in plasma5-workspace-devel,
  it pulls in a lot of unnecessary requirements and can cause
  build loops</changelog>
  <changelog author="wbauer@tmo.at" date="1522497600">- Add Fix-weather-engine-BBC-provider.patch to adapt the BBC
  weather engine provider to changes in the RSS feed that broke it
  (kde#392510)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Add patch to add a clear button to the notification history (kde#386068):
  * 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to avoid listing all users over NIS:
  * lazy-sddm-theme.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ksmserver] Use QUrl::fromUserInput to construct sound url (kde#392725)
  * [Image Wallpaper] Fix auto transform for blurred fill (kde#393498)
  * sddm-theme: Focus the password field if enter pressed in the username field
  * [Notifications] Always scroll to the top when opening (kde#391646)
  * [ContextMenu Containment Action] Fix checking for KIOSK (kde#393329)
  * [Power Management Engine] Fix kiosk restriction for lockscreen (kde#393331)
  * [weather dataengine] envcan: fix forecast terms to match "ice pellets"
  * [weather dataengine] bbc: handle and ignore condition "Not Available"
  * [weather dataengine] bbc: handle and skip visbility "--"
  * [OSD] Enforce plain text
  * [weather] BBCUKMET: add missing "thundery showers"
  * [weather] BBCUKMET: add missing "light rain showers"/"heavy rain showers"
  * [weather dataengine] Fix BBC provider to adapt to change RSS feed (kde#392510)
  * KDE logout screen background color fix (kde#382264)
  * fix: Klipper notifications visually broken since plasma 5.12 (kde#390375)
  * [notifications applet] Fix two qml warnings about assigning [undefined]
- Remove patches, now upstream:
  * Fix-weather-engine-BBC-provider.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525694400">- Remove runtime dep on update-desktop-files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526731200">- Refresh 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Slideshow Wallpaper] Ignore hidden files and folders (kde#394882)
  * Weigh matching services by relating data used in query to their menuids
  * Add mappings for VirtualBox
  * Remove legacy Wine hack-around from rules rc. (kde#393787)
  * [Service Runner] Do startsWith check case-insensitive (kde#394202)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Relax version requirements for partial Plasma version bump
- Add additional fixes:
  * 0001-Notifications-Engine-Guard-this.patch (kde#397105)
  * 0001-Notifications-Engine-Never-group-notifications-with-.patch (kde#396741)
  * 0001-Notification-dataengine-debug-category.patch (boo#1101873)
- Use %define instead of %global to workaround spec-cleaner/rpm 4.14 incompatibility</changelog>
</package>
<package pkgid="75a75afd5b9e0515cc77bb8e00bd4da1567acf844ae5340b79fda77e6f8695e5" name="plasma5-workspace-devel" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add explicit BuildRequires for xrender and xtst</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512388800">- Only recommend, not require, kio-extras5</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [widgetexplorer] Fix trying to show deleted dialog
  * Remove i18n() calls from iconSource names
  * [widgetexplorer] Make sure KNS download dialog is destroyed
  * [weather] NOAA ion: Show some icons for "Hot" and "Cold" forecasts (kde#365715)
  * [weather] NOAA ion: update link in comments</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Adjust 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [Notifications] Fix grouping
  * Make sure device paths are quoted
  * Add license header to test
  * Revert "Set GTK scaling env vars" (kde#389523)
  * Revert "Replace bc with awk"
  * Sanitise notification HTML
  * Add missing find_dependency calls to libs' CMake config files
  * Fix krunner's alt+f2 on wayland (kde#385693)
  * Further improve quality of images in notifications (kde#385097)
  * Fix autohide panels on wayland (kde#377838)
  * Improve quality of images in notifications (Bug 385097) (kde#385097)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Put history into a ListView (kde#389132)
  * [Notifications] Disable history check box when notifications are disabled
  * [PanelView] Also requestActivate config dialog
  * Require KDE Frameworks 5.42
  * [Calculator Runner] Fix unused variable warning
  * [Calculator Runner] Move action check outside of ifdef</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Improve appearance of the logout dialog on wayland
  * Fix Breeze LnF theme data for window decoration
  * Fix dupe handling in requestAddLauncherToActivities; improve unit test
  * [Notifications] Let clear entry also clear history
  * [LauncherTasksModel] Support applications: URLs in requestOpenUrls
  * [appstream runner] Add missing Messages.sh file and set TRANSLATION_DOMAIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix favicons in firefox bookmarks runner (kde#363136)
  * Remove uninstalled themerc files for no longer existing Qt themes
  * Have all krunner plugin desktop files prefixed with "plasma-runner-"
  - Refreshed patches:
  * 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [media controller applet] Support MPRIS services where CanPause==false
  * [mpris2 dataengine] Fix media key handling to match MediaPlayer2.Player
  * [media controller applet] Fix JS error on no xesam:url data set
  * [mediacontroller applet] Remove de-funct "General" configuration page
  * Fix the userswitcher when using the mouse for switching (kde#391007)
  * Adapt to further nullpointers from prison</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add upstream patch to fix starting a wayland session from gdm and
  lightdm: (boo#1085772):
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patches to not set QT_QPA_PLATFORM in a wayland session:
  * 0001-Call-KLocalizedString-setApplicationDomain-after-Q-A.patch
  * 0002-Add-platform-detection-to-KWorkspace-library-to-adju.patch
  * 0003-No-longer-export-QT_QPA_PLATFORM-env-variable-to-the.patch
  * 0001-Set-XDG_SESSION_TYPE-wayland-in-startplasmacomposito.patch
- Set GDK_BACKEND=x11 to work around GTK3 bugs:
  * 0001-Set-GTK_BACKEND-x11-in-a-wayland-session.patch
- Add a suffix to the wayland session's name:
  * 0001-Add-suffix-to-the-wayland-session-s-name.patch
- Apply upstream patches before downstream patches</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [notifications applet] Fix two qml warnings about assigning [undefined]
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [Run Command] Pass "event" to runCurrentIndex
  * Move to KRunner's second results item with a single keypress (kde#392197)
  * Pass proper click coordinates to SNI ContextMenu calls
  * libdbusmenu-qt: Remove nonexistant actions directly from the menu
  * Set a transient parent for SNI context menus
  * [DeviceNotifications Engine] Never show safely remove message when mounting (kde#391180)
  * Use dbus-run-session instead of dbus-launch --exit-with-session
  * [System Tray] Fix hiding applets with HiddenStatus
  * [Notifications] Remove NoAccessNetworkAccessManagerFactory
  * Improve By Desktop sorting for task groups (kde#384747)
  * Use separate config group for each wallpaper plugin
  * Fix duplicated [Desktop Entry] sections in two menu directory files
- Remove patches, now upstream:
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522238400">- Don't require plasma5-workspace in plasma5-workspace-devel,
  it pulls in a lot of unnecessary requirements and can cause
  build loops</changelog>
  <changelog author="wbauer@tmo.at" date="1522497600">- Add Fix-weather-engine-BBC-provider.patch to adapt the BBC
  weather engine provider to changes in the RSS feed that broke it
  (kde#392510)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Add patch to add a clear button to the notification history (kde#386068):
  * 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to avoid listing all users over NIS:
  * lazy-sddm-theme.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ksmserver] Use QUrl::fromUserInput to construct sound url (kde#392725)
  * [Image Wallpaper] Fix auto transform for blurred fill (kde#393498)
  * sddm-theme: Focus the password field if enter pressed in the username field
  * [Notifications] Always scroll to the top when opening (kde#391646)
  * [ContextMenu Containment Action] Fix checking for KIOSK (kde#393329)
  * [Power Management Engine] Fix kiosk restriction for lockscreen (kde#393331)
  * [weather dataengine] envcan: fix forecast terms to match "ice pellets"
  * [weather dataengine] bbc: handle and ignore condition "Not Available"
  * [weather dataengine] bbc: handle and skip visbility "--"
  * [OSD] Enforce plain text
  * [weather] BBCUKMET: add missing "thundery showers"
  * [weather] BBCUKMET: add missing "light rain showers"/"heavy rain showers"
  * [weather dataengine] Fix BBC provider to adapt to change RSS feed (kde#392510)
  * KDE logout screen background color fix (kde#382264)
  * fix: Klipper notifications visually broken since plasma 5.12 (kde#390375)
  * [notifications applet] Fix two qml warnings about assigning [undefined]
- Remove patches, now upstream:
  * Fix-weather-engine-BBC-provider.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525694400">- Remove runtime dep on update-desktop-files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526731200">- Refresh 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Slideshow Wallpaper] Ignore hidden files and folders (kde#394882)
  * Weigh matching services by relating data used in query to their menuids
  * Add mappings for VirtualBox
  * Remove legacy Wine hack-around from rules rc. (kde#393787)
  * [Service Runner] Do startsWith check case-insensitive (kde#394202)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Relax version requirements for partial Plasma version bump
- Add additional fixes:
  * 0001-Notifications-Engine-Guard-this.patch (kde#397105)
  * 0001-Notifications-Engine-Never-group-notifications-with-.patch (kde#396741)
  * 0001-Notification-dataengine-debug-category.patch (boo#1101873)
- Use %define instead of %global to workaround spec-cleaner/rpm 4.14 incompatibility</changelog>
</package>
<package pkgid="3ad44a8afd4356be1ba60adc7c9887222064e3ae71bb7464b88f11923026f33e" name="plasma5-workspace-lang" arch="noarch">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add explicit BuildRequires for xrender and xtst</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512388800">- Only recommend, not require, kio-extras5</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [widgetexplorer] Fix trying to show deleted dialog
  * Remove i18n() calls from iconSource names
  * [widgetexplorer] Make sure KNS download dialog is destroyed
  * [weather] NOAA ion: Show some icons for "Hot" and "Cold" forecasts (kde#365715)
  * [weather] NOAA ion: update link in comments</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Adjust 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [Notifications] Fix grouping
  * Make sure device paths are quoted
  * Add license header to test
  * Revert "Set GTK scaling env vars" (kde#389523)
  * Revert "Replace bc with awk"
  * Sanitise notification HTML
  * Add missing find_dependency calls to libs' CMake config files
  * Fix krunner's alt+f2 on wayland (kde#385693)
  * Further improve quality of images in notifications (kde#385097)
  * Fix autohide panels on wayland (kde#377838)
  * Improve quality of images in notifications (Bug 385097) (kde#385097)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Put history into a ListView (kde#389132)
  * [Notifications] Disable history check box when notifications are disabled
  * [PanelView] Also requestActivate config dialog
  * Require KDE Frameworks 5.42
  * [Calculator Runner] Fix unused variable warning
  * [Calculator Runner] Move action check outside of ifdef</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Improve appearance of the logout dialog on wayland
  * Fix Breeze LnF theme data for window decoration
  * Fix dupe handling in requestAddLauncherToActivities; improve unit test
  * [Notifications] Let clear entry also clear history
  * [LauncherTasksModel] Support applications: URLs in requestOpenUrls
  * [appstream runner] Add missing Messages.sh file and set TRANSLATION_DOMAIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix favicons in firefox bookmarks runner (kde#363136)
  * Remove uninstalled themerc files for no longer existing Qt themes
  * Have all krunner plugin desktop files prefixed with "plasma-runner-"
  - Refreshed patches:
  * 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [media controller applet] Support MPRIS services where CanPause==false
  * [mpris2 dataengine] Fix media key handling to match MediaPlayer2.Player
  * [media controller applet] Fix JS error on no xesam:url data set
  * [mediacontroller applet] Remove de-funct "General" configuration page
  * Fix the userswitcher when using the mouse for switching (kde#391007)
  * Adapt to further nullpointers from prison</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add upstream patch to fix starting a wayland session from gdm and
  lightdm: (boo#1085772):
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patches to not set QT_QPA_PLATFORM in a wayland session:
  * 0001-Call-KLocalizedString-setApplicationDomain-after-Q-A.patch
  * 0002-Add-platform-detection-to-KWorkspace-library-to-adju.patch
  * 0003-No-longer-export-QT_QPA_PLATFORM-env-variable-to-the.patch
  * 0001-Set-XDG_SESSION_TYPE-wayland-in-startplasmacomposito.patch
- Set GDK_BACKEND=x11 to work around GTK3 bugs:
  * 0001-Set-GTK_BACKEND-x11-in-a-wayland-session.patch
- Add a suffix to the wayland session's name:
  * 0001-Add-suffix-to-the-wayland-session-s-name.patch
- Apply upstream patches before downstream patches</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [notifications applet] Fix two qml warnings about assigning [undefined]
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [Run Command] Pass "event" to runCurrentIndex
  * Move to KRunner's second results item with a single keypress (kde#392197)
  * Pass proper click coordinates to SNI ContextMenu calls
  * libdbusmenu-qt: Remove nonexistant actions directly from the menu
  * Set a transient parent for SNI context menus
  * [DeviceNotifications Engine] Never show safely remove message when mounting (kde#391180)
  * Use dbus-run-session instead of dbus-launch --exit-with-session
  * [System Tray] Fix hiding applets with HiddenStatus
  * [Notifications] Remove NoAccessNetworkAccessManagerFactory
  * Improve By Desktop sorting for task groups (kde#384747)
  * Use separate config group for each wallpaper plugin
  * Fix duplicated [Desktop Entry] sections in two menu directory files
- Remove patches, now upstream:
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522238400">- Don't require plasma5-workspace in plasma5-workspace-devel,
  it pulls in a lot of unnecessary requirements and can cause
  build loops</changelog>
  <changelog author="wbauer@tmo.at" date="1522497600">- Add Fix-weather-engine-BBC-provider.patch to adapt the BBC
  weather engine provider to changes in the RSS feed that broke it
  (kde#392510)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Add patch to add a clear button to the notification history (kde#386068):
  * 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to avoid listing all users over NIS:
  * lazy-sddm-theme.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ksmserver] Use QUrl::fromUserInput to construct sound url (kde#392725)
  * [Image Wallpaper] Fix auto transform for blurred fill (kde#393498)
  * sddm-theme: Focus the password field if enter pressed in the username field
  * [Notifications] Always scroll to the top when opening (kde#391646)
  * [ContextMenu Containment Action] Fix checking for KIOSK (kde#393329)
  * [Power Management Engine] Fix kiosk restriction for lockscreen (kde#393331)
  * [weather dataengine] envcan: fix forecast terms to match "ice pellets"
  * [weather dataengine] bbc: handle and ignore condition "Not Available"
  * [weather dataengine] bbc: handle and skip visbility "--"
  * [OSD] Enforce plain text
  * [weather] BBCUKMET: add missing "thundery showers"
  * [weather] BBCUKMET: add missing "light rain showers"/"heavy rain showers"
  * [weather dataengine] Fix BBC provider to adapt to change RSS feed (kde#392510)
  * KDE logout screen background color fix (kde#382264)
  * fix: Klipper notifications visually broken since plasma 5.12 (kde#390375)
  * [notifications applet] Fix two qml warnings about assigning [undefined]
- Remove patches, now upstream:
  * Fix-weather-engine-BBC-provider.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525694400">- Remove runtime dep on update-desktop-files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526731200">- Refresh 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Slideshow Wallpaper] Ignore hidden files and folders (kde#394882)
  * Weigh matching services by relating data used in query to their menuids
  * Add mappings for VirtualBox
  * Remove legacy Wine hack-around from rules rc. (kde#393787)
  * [Service Runner] Do startsWith check case-insensitive (kde#394202)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Relax version requirements for partial Plasma version bump
- Add additional fixes:
  * 0001-Notifications-Engine-Guard-this.patch (kde#397105)
  * 0001-Notifications-Engine-Never-group-notifications-with-.patch (kde#396741)
  * 0001-Notification-dataengine-debug-category.patch (boo#1101873)
- Use %define instead of %global to workaround spec-cleaner/rpm 4.14 incompatibility</changelog>
</package>
<package pkgid="328c482a77840bab6d94feabb029cb7cf33080f395a39e71f64017ca6fdfb6e7" name="plasma5-workspace-libs" arch="x86_64">
  <version epoch="0" ver="5.12.6" rel="lp150.2.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1512216000">- Add explicit BuildRequires for xrender and xtst</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512388800">- Only recommend, not require, kio-extras5</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1514894400">- Update to 5.11.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.5.php
- Changes since 5.11.4:
  * [widgetexplorer] Fix trying to show deleted dialog
  * Remove i18n() calls from iconSource names
  * [widgetexplorer] Make sure KNS download dialog is destroyed
  * [weather] NOAA ion: Show some icons for "Hot" and "Cold" forecasts (kde#365715)
  * [weather] NOAA ion: update link in comments</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1516017600">- Update to 5.11.95
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.11.95.php
- Too many changes to list here
- Adjust 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1517572800">- Update to 5.12.0
  * New feature release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.0.php
- Changes since 5.11.95:
  * [Notifications] Fix grouping
  * Make sure device paths are quoted
  * Add license header to test
  * Revert "Set GTK scaling env vars" (kde#389523)
  * Revert "Replace bc with awk"
  * Sanitise notification HTML
  * Add missing find_dependency calls to libs' CMake config files
  * Fix krunner's alt+f2 on wayland (kde#385693)
  * Further improve quality of images in notifications (kde#385097)
  * Fix autohide panels on wayland (kde#377838)
  * Improve quality of images in notifications (Bug 385097) (kde#385097)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Unset Heading default height (kde#381154)
  * [Notifications] Put history into a ListView (kde#389132)
  * [Notifications] Disable history check box when notifications are disabled
  * [PanelView] Also requestActivate config dialog
  * Require KDE Frameworks 5.42
  * [Calculator Runner] Fix unused variable warning
  * [Calculator Runner] Move action check outside of ifdef</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1518523200">- Update to 5.12.1
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.1.php
- Changes since 5.12.0:
  * Improve appearance of the logout dialog on wayland
  * Fix Breeze LnF theme data for window decoration
  * Fix dupe handling in requestAddLauncherToActivities; improve unit test
  * [Notifications] Let clear entry also clear history
  * [LauncherTasksModel] Support applications: URLs in requestOpenUrls
  * [appstream runner] Add missing Messages.sh file and set TRANSLATION_DOMAIN</changelog>
  <changelog author="lbeltrame@kde.org" date="1519214400">- Update to 5.12.2
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.2.php
- Changes since 5.12.1:
  * Fix favicons in firefox bookmarks runner (kde#363136)
  * Remove uninstalled themerc files for no longer existing Qt themes
  * Have all krunner plugin desktop files prefixed with "plasma-runner-"
  - Refreshed patches:
  * 0001-Rename-qdbus-in-startkde.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520337600">- Update to 5.12.3
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.3.php
- Changes since 5.12.2:
  * [media controller applet] Support MPRIS services where CanPause==false
  * [mpris2 dataengine] Fix media key handling to match MediaPlayer2.Player
  * [media controller applet] Fix JS error on no xesam:url data set
  * [mediacontroller applet] Remove de-funct "General" configuration page
  * Fix the userswitcher when using the mouse for switching (kde#391007)
  * Adapt to further nullpointers from prison</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521460800">- Add upstream patch to fix starting a wayland session from gdm and
  lightdm: (boo#1085772):
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Add patches to not set QT_QPA_PLATFORM in a wayland session:
  * 0001-Call-KLocalizedString-setApplicationDomain-after-Q-A.patch
  * 0002-Add-platform-detection-to-KWorkspace-library-to-adju.patch
  * 0003-No-longer-export-QT_QPA_PLATFORM-env-variable-to-the.patch
  * 0001-Set-XDG_SESSION_TYPE-wayland-in-startplasmacomposito.patch
- Set GDK_BACKEND=x11 to work around GTK3 bugs:
  * 0001-Set-GTK_BACKEND-x11-in-a-wayland-session.patch
- Add a suffix to the wayland session's name:
  * 0001-Add-suffix-to-the-wayland-session-s-name.patch
- Apply upstream patches before downstream patches</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522152000">- Update to 5.12.4
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.4.php
- Changes since 5.12.3:
  * [notifications applet] Fix two qml warnings about assigning [undefined]
  * Remove long-time deprecated Encoding=UTF-8 from desktop format files
  * [Run Command] Pass "event" to runCurrentIndex
  * Move to KRunner's second results item with a single keypress (kde#392197)
  * Pass proper click coordinates to SNI ContextMenu calls
  * libdbusmenu-qt: Remove nonexistant actions directly from the menu
  * Set a transient parent for SNI context menus
  * [DeviceNotifications Engine] Never show safely remove message when mounting (kde#391180)
  * Use dbus-run-session instead of dbus-launch --exit-with-session
  * [System Tray] Fix hiding applets with HiddenStatus
  * [Notifications] Remove NoAccessNetworkAccessManagerFactory
  * Improve By Desktop sorting for task groups (kde#384747)
  * Use separate config group for each wallpaper plugin
  * Fix duplicated [Desktop Entry] sections in two menu directory files
- Remove patches, now upstream:
  * 0001-Use-dbus-run-session-instead-of-dbus-launch-exit-wit.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1522238400">- Don't require plasma5-workspace in plasma5-workspace-devel,
  it pulls in a lot of unnecessary requirements and can cause
  build loops</changelog>
  <changelog author="wbauer@tmo.at" date="1522497600">- Add Fix-weather-engine-BBC-provider.patch to adapt the BBC
  weather engine provider to changes in the RSS feed that broke it
  (kde#392510)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523966400">- Add patch to add a clear button to the notification history (kde#386068):
  * 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to avoid listing all users over NIS:
  * lazy-sddm-theme.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525262400">- Update to 5.12.5
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.5.php
- Changes since 5.12.4:
  * [ksmserver] Use QUrl::fromUserInput to construct sound url (kde#392725)
  * [Image Wallpaper] Fix auto transform for blurred fill (kde#393498)
  * sddm-theme: Focus the password field if enter pressed in the username field
  * [Notifications] Always scroll to the top when opening (kde#391646)
  * [ContextMenu Containment Action] Fix checking for KIOSK (kde#393329)
  * [Power Management Engine] Fix kiosk restriction for lockscreen (kde#393331)
  * [weather dataengine] envcan: fix forecast terms to match "ice pellets"
  * [weather dataengine] bbc: handle and ignore condition "Not Available"
  * [weather dataengine] bbc: handle and skip visbility "--"
  * [OSD] Enforce plain text
  * [weather] BBCUKMET: add missing "thundery showers"
  * [weather] BBCUKMET: add missing "light rain showers"/"heavy rain showers"
  * [weather dataengine] Fix BBC provider to adapt to change RSS feed (kde#392510)
  * KDE logout screen background color fix (kde#382264)
  * fix: Klipper notifications visually broken since plasma 5.12 (kde#390375)
  * [notifications applet] Fix two qml warnings about assigning [undefined]
- Remove patches, now upstream:
  * Fix-weather-engine-BBC-provider.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525694400">- Remove runtime dep on update-desktop-files</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526731200">- Refresh 0001-Add-a-button-to-clear-the-notification-history.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530100800">- Update to 5.12.6
  * New bugfix release
  * For more details please see:
  * https://www.kde.org/announcements/plasma-5.12.6.php
- Changes since 5.12.5:
  * [Slideshow Wallpaper] Ignore hidden files and folders (kde#394882)
  * Weigh matching services by relating data used in query to their menuids
  * Add mappings for VirtualBox
  * Remove legacy Wine hack-around from rules rc. (kde#393787)
  * [Service Runner] Do startsWith check case-insensitive (kde#394202)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1534939200">- Update to 5.12.6 (boo#1105686)
- Relax version requirements for partial Plasma version bump
- Add additional fixes:
  * 0001-Notifications-Engine-Guard-this.patch (kde#397105)
  * 0001-Notifications-Engine-Never-group-notifications-with-.patch (kde#396741)
  * 0001-Notification-dataengine-debug-category.patch (boo#1101873)
- Use %define instead of %global to workaround spec-cleaner/rpm 4.14 incompatibility</changelog>
</package>
<package pkgid="25f7f11a71a224b460595d644d72292fce88df57d51147ae5c3a53dc7a935cb4" name="polkit" arch="src">
  <version epoch="0" ver="0.114" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
  <changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
  <changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
  <changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
</package>
<package pkgid="c336a2f6383030444addc710c30a04966f2d03c6e1a76f5e1bde700d53eb3021" name="polkit" arch="x86_64">
  <version epoch="0" ver="0.114" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
  <changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
  <changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
  <changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
</package>
<package pkgid="057536baf33a5fccafd8f94dde0a61853135c05b143e7d3a3df82ae76e60d889" name="polkit-default-privs" arch="noarch">
  <version epoch="0" ver="13.2" rel="lp150.8.3.1"/>
  <changelog author="krahmer@suse.com" date="1485777600">- adding kde powerdevil gpu helper (bsc#1019644)</changelog>
  <changelog author="krahmer@suse.com" date="1486382400">- polkit-default-privs: adding blueman actions (bsc#987141)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1491912000">- added polkit rules for tuned (bsc#1007279)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1491912001">- added polkit rules for renamed kcmwallet -&gt; kcmwallet5 (bsc#1033296)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493380800">- added polkit rules for backintime (bnc#1007723, bnc#1032717)
- relaxing powerdevil rules (bsc#1026038)</changelog>
  <changelog author="krahmer@suse.com" date="1497960000">- relaxing action "org.opensuse.cupspkhelper.mechanism.job-edit" (bsc#827331)</changelog>
  <changelog author="krahmer@suse.com" date="1499083200">- polkit-default-privs: adjusting brltty (bsc#967436)</changelog>
  <changelog author="krahmer@suse.com" date="1500465600">- polkit-default-privs: adding new realmd action (bsc#1048025)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500638400">- Added new tuned method verify_profile_ignore_missing (bnc#1048961)</changelog>
  <changelog author="krahmer@suse.com" date="1503489600">- adding more flatpak rules (bsc#1012961)</changelog>
  <changelog author="krahmer@suse.com" date="1504699200">- polkit-default-privs: adding fwupd (bsc#932807)</changelog>
  <changelog author="krahmer@suse.com" date="1507723200">- polkit-default-privs: adding deja-dup (bsc#1058935)</changelog>
  <changelog author="krahmer@suse.com" date="1508932800">- polkit-default-privs: adding flatpak (bsc#1064011)
- polkit-default-privs: adding connman (bsc#1057697)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1511524800">- Fixed usage of %_fillupdir macro, needs to be passed to `make install` such
  that the file is installed into the right location.</changelog>
  <changelog author="krahmer@suse.com" date="1511956800">- polkit-default-privs: adding new sddm kcm actions (bsc#1065563)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1513598400">- polkit-default-privs: added connectivity-check for NetworkManager (bnc#1072702)</changelog>
  <changelog author="krahmer@suse.com" date="1516190400">- polkit-default-privs: adding new udisks2 rules (bsc#1073216)</changelog>
  <changelog author="krahmer@suse.com" date="1517400000">- polkit-default-privs: adding more NM actions (bsc#1077504)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1531915200">- polkit-default-privs: whitelist incremental libvirt actions (bnc#1100328)</changelog>
</package>
<package pkgid="224b307c1a0ad505e6dab4ced2e8fb35d45b5a5dada49669a71b74f3e6eb6491" name="polkit-default-privs" arch="src">
  <version epoch="0" ver="13.2" rel="lp150.8.3.1"/>
  <changelog author="krahmer@suse.com" date="1485777600">- adding kde powerdevil gpu helper (bsc#1019644)</changelog>
  <changelog author="krahmer@suse.com" date="1486382400">- polkit-default-privs: adding blueman actions (bsc#987141)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1491912000">- added polkit rules for tuned (bsc#1007279)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1491912001">- added polkit rules for renamed kcmwallet -&gt; kcmwallet5 (bsc#1033296)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1493380800">- added polkit rules for backintime (bnc#1007723, bnc#1032717)
- relaxing powerdevil rules (bsc#1026038)</changelog>
  <changelog author="krahmer@suse.com" date="1497960000">- relaxing action "org.opensuse.cupspkhelper.mechanism.job-edit" (bsc#827331)</changelog>
  <changelog author="krahmer@suse.com" date="1499083200">- polkit-default-privs: adjusting brltty (bsc#967436)</changelog>
  <changelog author="krahmer@suse.com" date="1500465600">- polkit-default-privs: adding new realmd action (bsc#1048025)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1500638400">- Added new tuned method verify_profile_ignore_missing (bnc#1048961)</changelog>
  <changelog author="krahmer@suse.com" date="1503489600">- adding more flatpak rules (bsc#1012961)</changelog>
  <changelog author="krahmer@suse.com" date="1504699200">- polkit-default-privs: adding fwupd (bsc#932807)</changelog>
  <changelog author="krahmer@suse.com" date="1507723200">- polkit-default-privs: adding deja-dup (bsc#1058935)</changelog>
  <changelog author="krahmer@suse.com" date="1508932800">- polkit-default-privs: adding flatpak (bsc#1064011)
- polkit-default-privs: adding connman (bsc#1057697)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1511524800">- Fixed usage of %_fillupdir macro, needs to be passed to `make install` such
  that the file is installed into the right location.</changelog>
  <changelog author="krahmer@suse.com" date="1511956800">- polkit-default-privs: adding new sddm kcm actions (bsc#1065563)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1513598400">- polkit-default-privs: added connectivity-check for NetworkManager (bnc#1072702)</changelog>
  <changelog author="krahmer@suse.com" date="1516190400">- polkit-default-privs: adding new udisks2 rules (bsc#1073216)</changelog>
  <changelog author="krahmer@suse.com" date="1517400000">- polkit-default-privs: adding more NM actions (bsc#1077504)</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1531915200">- polkit-default-privs: whitelist incremental libvirt actions (bnc#1100328)</changelog>
</package>
<package pkgid="ceb3b947910630f1facff23bb0898b14c6a78a99eb616d5af2313c9b7c680bac" name="polkit-devel" arch="x86_64">
  <version epoch="0" ver="0.114" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
  <changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
  <changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
  <changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
</package>
<package pkgid="edee905fa7c224f7e6e07e95b017036e8486e3692f7d53291ff193816da36885" name="polkit-doc" arch="noarch">
  <version epoch="0" ver="0.114" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
  <changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
  <changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
  <changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
</package>
<package pkgid="1f379df28d065ebb5b279de38b1ea05e55b134c69d72ffbe91f5c7df5e3d93df" name="postfix" arch="src">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
</package>
<package pkgid="d3e90dfaa5bb7ca34bee72dcd05da6d7b23ad75c8d3cf9e1b7742f1170b7c1bd" name="postfix" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
</package>
<package pkgid="9c0e9bb9bd7eb3bfaba31a44ff09cd287288bcf9c30fa0eb6cc10b4769d573af" name="postfix-devel" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
</package>
<package pkgid="b5d68d4286e3183271f851f11995ae85c21b112398bda05f220ea4b65d12a09c" name="postfix-doc" arch="noarch">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
</package>
<package pkgid="4078553de566c7faa12b0a4c80f0d456b4344b3210aaa5033b5db6ba2aba1cd4" name="postfix-lmdb" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
</package>
<package pkgid="4133178d0ae2e6b33707942e6b3199e61b85ab2c62a155bb047b179364732d5b" name="postfix-mysql" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
</package>
<package pkgid="339d0ed5a3596d504b83483d856be72cfdcd4f301d837a614b50f96305601d75" name="postfix-postgresql" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="chris@computersalat.de" date="1492603200">- revert changes of postfix-main.cf.patch from rev=261
  * config.postfix will not 'enable' (remove #) var, but place
    modified (enabled) var at end of file, far away from place
    where it should be
  * keep vars enabled but empty</changelog>
  <changelog author="michael@stroeder.com" date="1497614400">- update to 3.2.2
  * Security: Berkeley DB versions 2 and later try to read settings
    from a file DB_CONFIG in the current directory. This undocumented
    feature may introduce undisclosed vulnerabilities resulting in
    privilege escalation with Postfix set-gid programs (postdrop,
    postqueue) before they chdir to the Postfix queue directory,
    and with the postmap and postalias commands depending on whether
    the user's current directory is writable by other users. This
    fix does not change Postfix behavior for Berkeley DB versions
    &lt; 3, but it does reduce postmap and postalias 'create' performance
    with Berkeley DB versions 3.0 .. 4.6.
  * The SMTP server receive_override_options were not restored at
    the end of an SMTP session, after the options were modified by
    an smtpd_milter_maps setting of "DISABLE". Milter support
    remained disabled for the life time of the smtpd process.
  * After the Postfix 3.2 address/domain table lookup overhaul, the
    check_sender_access and check_recipient_access features ignored
    a non-default parent_domain_matches_subdomains setting.</changelog>
  <changelog author="varkoly@suse.com" date="1501156800">- bnc#1045264 L3: postmap problem
  * Applying proposed patch of leen.meyer@ziggo.nl in bnc#771811</changelog>
  <changelog author="kukuk@suse.de" date="1502971200">- Add libnsl-devel build requires for glibc obsoleting libnsl</changelog>
  <changelog author="michael@stroeder.com" date="1506340800">- update to 3.2.3
  * Extension propagation was broken with "recipient_delimiter = .".
  This change reverts a change that was trying to be too clever.
  * The postqueue command would abort with a panic message after it
  experienced an output write error while listing the mail queue.
  This change restores a write error check that was lost with the
  Postfix 3.2 rewrite of the vbuf_print formatter.
  * Restored sanity checks for dynamically-specified width and precision
  in format strings (%*, %.*, and %*.*). These checks were lost with
  the Postfix 3.2 rewrite of the vbuf_print formatter.</changelog>
  <changelog author="varkoly@suse.com" date="1506600000">- bnc#1016491 postfix raported to log "warning: group or other writable:"
  on each symlink in config.
  * Add fix-postfix-script.patch</changelog>
  <changelog author="varkoly@suse.com" date="1507118400">- bnc#1059512 L3: Postfix Problem
  To manage multiple Postfix instances on a single host requires
  that daemon_directory and shlib_directory is different to
  avoid use of the shared directories also as per-instance directories.
  For this reason daemon_directory was set to /usr/lib/postfix/bin/.
  shlib_directory stands /usr/lib/postfix/.</changelog>
  <changelog author="chris@computersalat.de" date="1508068800">- fix build for SLE
  * nothing provides libnsl-devel
  * add bcond_with libnsl</changelog>
  <changelog author="varkoly@suse.com" date="1508500800">- bnc#1059512 L3: Postfix Problem
  The applied changes breaks existing postfix configurations because
  daemon_directory was not adapted to the new value.</changelog>
  <changelog author="michael@stroeder.com" date="1509364800">- update to 3.2.4
  * DANE interoperability. Postfix builds with OpenSSL 1.0.0 or
    1.0.1 failed to send email to some sites with "TLSA 2 X X" DNS
    records associated with an intermediate CA certificate. Problem
    report and initial fix by Erwan Legrand.
  * Missing dynamicmaps support in the Postfix sendmail command.
    This broke authorized_submit_users settings that use a
    dynamically-loaded map type. Problem reported by Ulrich Zehl.</changelog>
  <changelog author="kukuk@suse.de" date="1510142400">- Don't mark postfix.service as config file, this is no config
  file.
- Some of the Requires(pre) are needed for post-install and at
  runtime, fix the requires.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Fix usage of fillup_only:-y is not a valid option to this macro.</changelog>
  <changelog author="varkoly@suse.com" date="1518523200">- bsc#1065411 Package postfix should require package system-user-nobody
- bsc#1080772 postfix smtpd throttle getting "hello" if no sasl auth
  was configured</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1520856000">- Refresh spec-file via spec-cleaner and manual optinizations.
  * Add %license macro.
  * Set license to IPL-1.0 OR EPL-2.0.
- Update to 3.3.0
  * http://cdn.postfix.johnriley.me/mirrors/postfix-release/official/postfix-3.3.0.RELEASE_NOTES
  * Dual license: in addition to the historical IBM Public License
    1.0, Postfix is now also distributed with the more recent Eclipse
    Public License 2.0. Recipients can choose to take the software
    under the license of their choice. Those who are more comfortable
    with the IPL can continue with that license.
  * The postconf command now warns about unknown parameter names
    in a Postfix database configuration file. As with other unknown
    parameter names, these warnings can help to find typos early.
  * Container support: Postfix 3.3 will run in the foreground with
    "postfix start-fg". This requires that Postfix multi-instance
    support is disabled (the default). To collect Postfix syslog
    information on the container's host, mount the host's /dev/log
    socket into the container, for example with "docker run -v
    /dev/log:/dev/log ...other options...", and specify a distinct
    Postfix syslog_name setting in the container (for example with
    "postconf syslog_name=the-name-here").
  * Milter support: applications can now send RET and ENVID parameters
    in SMFIR_CHGFROM (change envelope sender) requests.
  * Postfix-generated From: headers with 'full name' information
    are now formatted as "From: name &lt;address&gt;" by default. Specify
    "header_from_format = obsolete" to get the earlier form "From:
    address (name)".
  * Interoperability: when Postfix IPv6 and IPv4 support are both
    enabled, the Postfix SMTP client will now relax MX preferences
    and attempt to schedule similar numbers of IPv4 and IPv6
    addresses. This works around mail delivery problems when a
    destination announces lots of primary MX addresses on IPv6, but
    is reachable only over IPv4 (or vice versa). The new behavior
    is controlled with the smtp_balance_mx_inet_protocols parameter.
  * Compatibility safety net: with compatibility_level &lt; 1, the
    Postfix SMTP server now warns for mail that would be blocked
    by the Postfix 2.10 smtpd_relay_restrictions feature, without
    blocking that mail. There still is a steady trickle of sites
    that upgrade from an earlier Postfix version.</changelog>
  <changelog author="varkoly@suse.com" date="1521720000">- bsc#1082514 autoyast: postfix gets not set myhostname properly -
  set to localhost</changelog>
  <changelog author="adam.majer@suse.de" date="1523275200">- bsc#1071807 postfix-SuSE/config.postfix: only reload postfix
  if the actual service is running. This prevents spurious
  and irrelevant error messages in system logs.</changelog>
  <changelog author="lnussel@suse.de" date="1525867200">- remove pre-requirements on sysvinit(network) and sysvinit(syslog).
  There seems to be no good reason for that other than blowing up
  the dependencies (bsc#1092408).</changelog>
  <changelog author="michael@stroeder.com" date="1526904000">- Update to 3.3.1 (bsc#1094965)
  * Postfix did not support running as a PID=1 process, which
    complicated Postfix deployment in containers. The "postfix
    start-fg" command will now run the Postfix master daemon as a
    PID=1 process if possible. Thanks for inputs from Andreas
    Schulze, Eray Aslan, and Viktor Dukhovni.
  * Segfault in the postconf(1) command after it could not open a
    Postfix database configuration file due to a file permission
    error (dereferencing a null pointer). Reported by Andreas
    Hasenack, fixed by Viktor Dukhovni.
  * The luser_relay feature became a black hole, when the luser_relay
    parameter was set to a non-existent local address (i.e. mail
    disappeared silently). Reported by J?rgen Thomsen.
  * Missing error propagation in the tlsproxy(8) daemon could result
    in a segfault after TLS handshake error (dereferencing a
    0xffff...ffff pointer). This daemon handles the TLS protocol
    when a non-whitelisted client sends a STARTTLS command to
    postscreen(8).</changelog>
  <changelog author="varkoly@suse.com" date="1527249600">- bsc#1087471 Unreleased Postfix update breaks SUSE Manager
  o Removing setting smtpd_sasl_path and smtpd_sasl_type to empty</changelog>
</package>
<package pkgid="7c0a14129ac1461ca3c7f114a2c2e2889866b4244690fdce9831a662f459c6b4" name="postgresql10" arch="src">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="df2394c90b55e223b782c9538c5af6b1b4954eafd2efe6a68bcf0be6a14c08bb" name="postgresql10" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="c1e02a55ce6ec7b5a912292b59428c1950edbf92a5159cd948b13d82e1435242" name="postgresql10-contrib" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="913c071ccd44cda8d919ccd06a63cc3ac3c0f0478056bd7c3a8e815ce075cfb3" name="postgresql10-devel" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="49fd07b22454c257ff4ba5f17f8b312acb1cf199d9015ed770c3a6ff1b902c13" name="postgresql10-docs" arch="noarch">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="38e7c487aee7fd7162c7ffe121bd92872f839ed1433debe120085f4cc2608090" name="postgresql10-plperl" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="06e71b8cb7d8d7d2b7d2448b2937d059fa961fa9f520a0c69f97473dabe23e05" name="postgresql10-plpython" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="788df2a1c5e62bb1e6add5ea1817201cfc0badc7699cca88ee79417e7cef85b7" name="postgresql10-pltcl" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="20904116bf5dc2da388ef2879d15275d54717d65559314b0fc8496c45436436b" name="postgresql10-server" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="fe2aa61ab1f45834df04fccd7b6af97e9a8d6f32f21a99fbd356a0093f66a1b8" name="postgresql10-test" arch="x86_64">
  <version epoch="0" ver="10.5" rel="lp150.3.3.1"/>
  <changelog author="mrueckert@suse.de" date="1501761600">- initial package</changelog>
  <changelog author="mrueckert@suse.de" date="1501848000">- use multibuild</changelog>
  <changelog author="mrueckert@suse.de" date="1501848001">- bump version in update-alternatives call</changelog>
  <changelog author="mrueckert@suse.de" date="1502366400">- update to 10beta3
  - hash: Fix write-ahead logging bugs related to init forks
  - Fix oddity in error handling of constraint violation in
    ExecConstraints for partitioned tables
  - Use a real RT index when setting up partition tuple routing
  - Fix serious performance problems in json(b) to_tsvector()
  - Fix problems defining multi-column range partition bounds
  - Fix partitioning crashes during error reporting
  - Fix race conditions in replication slot operations
  - Fix very minor memory leaks in psql's command.c
  - PL/Perl portability fix: avoid including XSUB.h in plperl.c
  - Fix inadequate stack depth checking in the wake of expression
    execution changes
  - Allow creation of C/POSIX collations without depending on libc
    behavior
  - Fix OBJECT_TYPE/OBJECT_DOMAIN confusion
  - Remove duplicate setting of SSL_OP_SINGLE_DH_USE option
  - Fix crash with logical replication on a function index
  - Teach map_partition_varattnos to handle whole-row expressions
  - Fix lock upgrade hazard in ATExecAttachPartition
  - Apply ALTER ... SET NOT NULL recursively in ALTER ... ADD
    PRIMARY KEY
  - hash: Increase the number of possible overflow bitmaps by 8x
  - Only kill sync workers at commit time in subscription DDL
  - Fix bug in deciding whether to scan newly-attached partition
  - Make pg_stop_backup's wait_for_archive flag work on standbys
  - Fix handling of dropped columns in logical replication
  - Fix local/remote attribute mix-up in logical replication</changelog>
  <changelog author="mrueckert@suse.de" date="1504872000">- update to 10beta4
  PostgreSQL 10 beta 4 requires an upgrade from beta 3, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Any bugfixes applied to 9.6 or earlier that also affected 10 are
  included in beta 4. Our users and contributors also reported bugs
  against 10 beta 3, and many of them have been fixed in this
  release. We urge our community to re-test to ensure that these
  bugs are actually fixed, including:
  - Show foreign tables in information_schema.table_privileges
    view. This fix applies to new databases, see the release notes
    for the procedure to apply the fix to an existing database.
  - Clean up handling of a fatal exit (e.g., due to receipt of
    SIGTERM) that occurs while trying to execute a ROLLBACK of a
    failed transaction
  - Remove assertion that could trigger during a fatal exit
  - Correctly identify columns that are of a range type or domain
    type over a composite type or domain type being searched for
  - Prevent crash when passing fixed-length pass-by-reference data
    types to parallel worker processes
  - Fix crash in pg_restore when using parallel mode and using a
    list file to select a subset of items to restore
  - Change ecpg?s parser to allow RETURNING clauses without
    attached C variables
  - Change ecpg?s parser to recognize backslash continuation of C
    preprocessor command lines
  - Improve selection of compiler flags for PL/Perl on Windows
  - Fix make check to behave correctly when invoked via a non-GNU
    make program
  Note that some known issues remain unfixed. Before reporting a
  bug in the beta, please check the Open Items page.
  https://wiki.postgresql.org/wiki/PostgreSQL_10_Open_Items</changelog>
  <changelog author="max@suse.com" date="1506081600">- Update to 10rc1
  PostgreSQL 10 RC 1 requires an upgrade from beta 4, or earlier
  either using pg_dump / pg_restore or pg_upgrade.
  Changes since beta4 include:
  * Add psql variables showing server version and psql version.
  * Several fixes for partitioning
  * Several fixes for logical replication
  * Several fixes for transition tables
  * Fix for query that could end up in an uninterruptible state
- Adjust dependencies to the new packaging schema.</changelog>
  <changelog author="max@suse.com" date="1506945600">- Break a build dependency loop in the server packages that led to
  bootstrap problems.</changelog>
  <changelog author="max@suse.com" date="1507204800">- Update to the final 10.0 release. Major enhancements include:
  * Logical replication using publish/subscribe
  * Declarative table partitioning
  * Improved query parallelism
  * Significant general performance improvements
  * Stronger password authentication based on SCRAM-SHA-256
  * Improved monitoring and control
  A dump/restore using pg_dumpall, or use of pg_upgrade, is
  required for those wishing to migrate data from any previous
  release.
  Version 10 contains a number of changes that may affect
  compatibility with previous releases.
  See the release notes for details:
  https://www.postgresql.org/docs/10/static/release-10.html
- Reduce the number of version-related macros in the spec file.</changelog>
  <changelog author="max@suse.com" date="1509710400">- Use /usr/share/postgresql/install-alternatives in the respective
  scriptlets.
- Fix the logic around restart on upgrade and stop on removal.
  We bring the binaries, but we don't own the unit file.</changelog>
  <changelog author="mrueckert@suse.de" date="1511438400">- update to 10.1
  * Security Issues
  - CVE-2017-15098: Memory disclosure in JSON functions
  - CVE-2017-15099: INSERT ... ON CONFLICT DO UPDATE fails to
    enforce SELECT privileges
    Prior to this release, the "INSERT ... ON CONFLICT DO UPDATE"
    would not check to see if the executing user had permission
    to perform a "SELECT" on the index performing the conflicting
    check. Additionally, in a table with row-level security
    enabled, the "INSERT ... ON CONFLICT DO UPDATE" would not
    check the SELECT policies for that table before performing
    the update.
    This fix ensures that "INSERT ... ON CONFLICT DO UPDATE"
    checks against table permissions and RLS policies before
    executing.
  * Bug Fixes and Improvements
    This update also fixes a number of bugs reported in the last
    few months. Some of these issues affect only version 10, but
    many affect all supported versions:
  - Fix a race condition in BRIN indexing that could cause some
    rows to not be included in the indexing.
  - Fix crash when logical decoding is invoked from a PL language
    function.
  - Several fixes for logical replication.
  - Restored behavior for CTEs attached to INSERT/UPDATE/DELETE
    statements to pre-version 10.
  - Prevent low-probability crash in processing of nested trigger
    firings.
  - Do not evaluate an aggregate function's argument expressions
    when the conditions in the FILTER clause evaluate to FALSE.
    This complies with SQL-standard behavior.
  - Fix incorrect query results when multiple GROUPING SETS
    columns contain the same simple variable.
  - Fix memory leak over the lifespan of a query when evaluating
    a set-returning function from the target list in a SELECT.
  - Several fixes for parallel query execution, including fixing
    a crash in the parallel execution of certain queries that
    contain a certain type of bitmap scan.
  - Fix json_build_array(), json_build_object(),
    jsonb_build_array(), and jsonb_build_object() to handle
    explicit VARIADIC arguments correctly.
  - Prevent infinite float values from being casted to the
    numeric type.
  - Fix autovacuum's ?work item? logic to prevent possible
    crashes and silent loss of work items.
  - Several fixes for VIEWs around adding columns to the end of a
    view.
  - Fix for hashability detection of range data types that are
    created by a user.
  - Improvements on using extended statistics on columns for the
    purposes of query planning.
  - Prevent idle_in_transaction_session_timeout from being
    ignored when a statement_timeout occurred earlier.
  - Fix low-probability loss of NOTIFY messages due more than 2
    billion transactions processing before any queries are
    executed in the session.
  - Several file system interaction fixes.
  - Correctly restore the umask setting when file creation fails
    in COPY or lo_export().
  - Fix pg_dump to ensure that it emits GRANT commands in a valid
    order.
  - Fix pg_basebackup's matching of tablespace paths to
    canonicalize both paths before comparing to help improve
    Windows compatibility.
  - Fix libpq to not require user's home directory to exist when
    trying to read the "~/.pgpass" file.
  - Several fixes for ecpg.
  - This update also contains tzdata release 2017c, with updates
    for Fiji, Namibia, Northern Cyprus, Sudan, Tonga, and Turks &amp;
    Caicos Islands, plus historical corrections for Alaska,
    Apia, Burma, Calcutta, Detroit, Ireland, Namibia, and Pago
    Pago.
  For more details see:
  https://www.postgresql.org/docs/current/static/release-10-1.html</changelog>
  <changelog author="mrueckert@suse.de" date="1511438401">- port /usr/share/postgresql/install-alternatives usage to the new
  scheme</changelog>
  <changelog author="mrueckert@suse.de" date="1513252800">- make sure that also the server gets at least its own version of
  libpq5
- also change all libpq requires to &gt;= %version instead of just
  %pgmajor</changelog>
  <changelog author="mrueckert@suse.de" date="1513252801">- enable support for ICU (new BR: libicu-devel)
- enable support for selinux (new BR: libselinux-devel)
- enable support for systemd (new BR: pkgconfig(libsystemd))</changelog>
  <changelog author="mrueckert@suse.de" date="1513252802">- also package %define pgcontribdir %pgdatadir/contrib</changelog>
  <changelog author="max@suse.com" date="1516363200">- Use Python 3 for building PL/Python (boo#1067699).
- Don't %config the symlinks to /etc/alternatives to avoid rpmlint
  warnings.</changelog>
  <changelog author="max@suse.com" date="1518177600">- Update to PostgreSQL 10.2
  * https://www.postgresql.org/docs/10/static/release-10-2.html
  * CVE-2018-1052, bsc#1080253: Fix processing of partition keys
    containing multiple expressions.
  * CVE-2018-1053, bsc#1077983: Ensure that all temporary files
    made by pg_upgrade are non-world-readable.
  * bsc#1079757: Rename pg_rewind's copy_file_range function to
    avoid conflict with new Linux system call of that name.</changelog>
  <changelog author="mrueckert@suse.de" date="1520596800">- Update to 10.3
  * https://www.postgresql.org/docs/current/static/release-10-3.html
    A dump/restore is not required for those running 10.X.
    However, if you run an installation in which not all users are
    mutually trusting, or if you maintain an application or
    extension that is intended for use in arbitrary situations, it
    is strongly recommended that you read the documentation changes
    described in the first changelog entry in the link above, and
    take suitable steps to ensure that your installation or code is
    secure.
    Also, the changes described in the second changelog entry in
    the link above may cause functions used in index expressions or
    materialized views to fail during auto-analyze, or when
    reloading from a dump. After upgrading, monitor the server logs
    for such problems, and fix affected functions.
  * CVE-2018-1058 bsc#1081925 Uncontrolled search path element in
    pg_dump and other client applications</changelog>
  <changelog author="max@suse.com" date="1525262400">- bsc#1091412: server prerequires server-noarch to make sure that
  the postgresql user and group exist.</changelog>
  <changelog author="max@suse.com" date="1525780800">- Update to 10.4:
  https://www.postgresql.org/about/news/1851/
  https://www.postgresql.org/docs/current/static/release-10-4.html
  A dump/restore is not required for those running 10.X.
  However, if you use the adminpack extension, you should update
  it as per the first changelog entry below.
  Also, if the function marking mistakes mentioned in the second
  and third changelog entries below affect you, you will want to
  take steps to correct your database catalogs.
  * CVE-2018-1115, bsc#1091610: Remove public execute privilege
    from contrib/adminpack's pg_logfile_rotate() function
    pg_logfile_rotate() is a deprecated wrapper for the core
    function pg_rotate_logfile(). When that function was changed
    to rely on SQL privileges for access control rather than a
    hard-coded superuser check, pg_logfile_rotate() should have
    been updated as well, but the need for this was missed. Hence,
    if adminpack is installed, any user could request a logfile
    rotation, creating a minor security issue.
    After installing this update, administrators should update
    adminpack by performing ALTER EXTENSION adminpack UPDATE in
    each database in which adminpack is installed.
  * Fix incorrect volatility markings on a few built-in functions
  * Fix incorrect parallel-safety markings on a few built-in
    functions.</changelog>
  <changelog author="max@suse.com" date="1533729600">- Update to 10.5:
  https://www.postgresql.org/docs/current/static/release-10-5.html
  * CVE-2018-10915, bsc#1104199: Fix failure to reset libpq's state
    fully between connection attempts.
  * CVE-2018-10925, bsc#1104202: Fix INSERT ... ON CONFLICT UPDATE
    through a view that isn't just SELECT * FROM ...</changelog>
</package>
<package pkgid="acb123900f175e11b5a727492855a26e9cbfef65fa5da6f2085f412b4df0fb00" name="powerline" arch="src">
  <version epoch="0" ver="2.6" rel="lp150.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1394625600">- Update to revision 70a94ee7d39a0958a06436aaeba05bd830830cc8.</changelog>
  <changelog author="asn@cryptomilk.org" date="1399464000">- Update to revision 9e7c6cf0bed52e47451c81377b5a1a96366b053f.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931200">- Update to revisiion 7453e58680c27a3435fd95d03f502d25eb80e98b.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931201">- Fix package type.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417521600">- Update to version 1.3.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417694400">- Fix powerline-config.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418126400">- Update to version 1.3.1
- Fixed some packaging issues.
- Added patch to support CFLAGS.</changelog>
  <changelog author="asn@cryptomilk.org" date="1421755200">- Update to version 2.0
  * Added fbterm (framebuffer terminal emulator) support.
  * Added theme with unicode-7.0 symbols.
  * Added support for PyPy3.
  * Compiler is now called with CFLAGS from environment in setup.py if present.
  * Added support for pyuv-1.*.
  * Added a way to write error log to Vim global variable.
  * powerline script now supports overrides from $POWERLINE_CONFIG_OVERRIDES,
    $POWERLINE_THEME_OVERRIDES environment variables, so does powerline-config
    script.
  * powerline and powerline-config scripts now support taking paths from
    $POWERLINE_CONFIG_PATHS.
  * powerline-lint is now able to report dictionaries which were merged in to
    form marked dictionary and what were the previous values of overridden
    values.
  * Added support for Byron Rakitzis? rc shell reimplementation.
  * Added support for querying battery status on cygwin platform.</changelog>
  <changelog author="asn@cryptomilk.org" date="1424433600">- Update to version 2.1
  * Added BAR support.
  * Added support for pdb (Python debugger) prompt.
  * Added more highlight groups to solarized colorscheme.
  * Updated zpython bindings.
  * Fixed C version of the client on non-Linux platforms.
  * Fixed some errors in powerline-lint code.
  * Fixed Python-2.6 incompatibilities in setup.py.</changelog>
  <changelog author="asn@cryptomilk.org" date="1431432000">- Update to version 2.1.4
  * Added support for placing powerline on the left in qtile.
  * Added qtile-1.9 support.
  * Fixed tmux-2.0 support.
  * Made it easier to run tests outside of travis.
  * Added some missing highlight groups.
  * Made it omit writing empty above lines.
  * Fixed UnicodeEncodeError when running powerline-lint with non-ASCII
    characters in error messages.
  * Fixed code that replaces &amp;statusline value: it now is able to replace
    non-ASCII &amp;statuslines as well.
  * Fixed powerline-render arguments parsing.</changelog>
  <changelog author="asn@cryptomilk.org" date="1436184000">- Update to version 2.2
  * Added support for newest psutil version.
  * Added support for non-SSL IMAP4 connection.
  * Added support for clickable tab names in Vim.
  * Added support for truncating tmux segments.
  * Added support for new (i3ipc) module that interacts with i3.
  * Added support for i3 modes.
  * Fixed coloring of network_load segment.
  * Fixed dash bindings on OS X.
  * Fixed parsing numbers starting with 2 supplied by POWERLINE_*_OVERRIDES
    environment variables.</changelog>
  <changelog author="asn@cryptomilk.org" date="1445342400">- Update to version 2.3
  * Added ability to hide domain part of the user name to common.env.user segment.
  * Added ability to show conda environment to virtualenv segment.
  * Added systemd service file.
  * Added ability to detect internal_ip interface using default gateway.
  * Added support for password-protected connections in mpd player bindings.
  * Added `output` option to i3wm.workspaces segment to filter workspaces based on
    their output.
  * Added ?charging? indicator to battery segment.
  * Made tmux bindings show zoom indicator in window status.
  * Fixed tmux bindings so that they support tmux-2.1.
  * Fixed support for unicode characters in common.time.date segment.</changelog>
  <changelog author="asn@cryptomilk.org" date="1461067200">- Update to version 2.4
  * Added short parameter for system_load segment that leaves only one load
    average number out of three.
  * Added powerline.segments.i3wm.scratchpad segment used to list windows
    that are currently on the scratchpad.
  * Added support for multiple batteries in battery segment.
  * Added ?.i3wm.workspace segment which describes single i3wm workspace and
    workspaces lister. Old .i3wm.workspaces segment was deprecated.
  * Added support for multiple monitors in lemonbar bindings.
  * Added support for most recent tmux version (2.2).
  * Fixed battery status support on some linux systems.
  * Fixed MPD bindings: they sometimes were not able to handle names if they
    did not fit ASCII.
  * Fixed MPD bindings: they did not correctly get elapsed time.
  * Fixed AttributeError on some systems: LC_MESSAGES is not always available.
  * Fixed Mac OS-specific variant of spotify player support when Python-3 is used.
  * Fixed performance of the tabline.</changelog>
  <changelog author="fcrozat@suse.com" date="1469620800">- Update to version 2.5:
  * Fix trailing whitespace segment on Python 3.
  * Fix left segments support in tmux-2.1
  * Add support for IPython-5
  * Increase socket backlog number for `powerline-daemon`
  * Use different query to retrieve weather
  * implement stash backend for git
  * provide stash counter
  * include stash in default shell layout
  * expose stash to Vim</changelog>
  <changelog author="asn@cryptomilk.org" date="1486728000">- Update to version 2.5.2:
  * Fixed ipython-5.2* support.
  * Made more robust theme default.
  * Made it use hglib in place of unstable mercurial plugin API.
  * Fixed latest fish version support.
  * Some other fixes and documentation adjustments.</changelog>
  <changelog author="lbeltrame@kde.org" date="1490702400">- Reformat spec properly
- Add a license</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Improve package summary.
- Avoid unnecessary %__-type macro indirections.
  Replace find -exec rm by just find -delete.</changelog>
  <changelog author="asn@cryptomilk.org" date="1494417600">- Update to version 2.6:
  * Added support for new Vim modes.
  * Added ability to control output padding.
  * Added iTunes player segment.
  * Added support for tmux development builds.
  * Added a workaround for a fish bug sometimes occurring when using eval from
  * config.fish (upstream status unknown).
  * Added a workaround for tmux 2.4 bug: excessive CPU usage when having multiple
  * panes (also fixed upstream).
  * Fixed clean file status support in mercurial.
  * Fixed error when battery capacity is zero and using DBus.
  * Fixed mercurial command servers leakage.
  * Refactored awesome bindings to use powerline daemon.</changelog>
  <changelog author="asn@cryptomilk.org" date="1519819200">- Fix powerline requiring both python2 and python3</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533902400">- add powerline-2.6-gcc7_fixes.patch
- add powerline-py2v3-fix.patch fixes boo#1101303
- cleanup spec
- correctly install systemd service</changelog>
</package>
<package pkgid="3f433cdb3cac353b295ac09c981d331113ff0af75b2a3c70fafcc4fc8ddce690" name="powerline" arch="x86_64">
  <version epoch="0" ver="2.6" rel="lp150.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1394625600">- Update to revision 70a94ee7d39a0958a06436aaeba05bd830830cc8.</changelog>
  <changelog author="asn@cryptomilk.org" date="1399464000">- Update to revision 9e7c6cf0bed52e47451c81377b5a1a96366b053f.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931200">- Update to revisiion 7453e58680c27a3435fd95d03f502d25eb80e98b.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931201">- Fix package type.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417521600">- Update to version 1.3.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417694400">- Fix powerline-config.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418126400">- Update to version 1.3.1
- Fixed some packaging issues.
- Added patch to support CFLAGS.</changelog>
  <changelog author="asn@cryptomilk.org" date="1421755200">- Update to version 2.0
  * Added fbterm (framebuffer terminal emulator) support.
  * Added theme with unicode-7.0 symbols.
  * Added support for PyPy3.
  * Compiler is now called with CFLAGS from environment in setup.py if present.
  * Added support for pyuv-1.*.
  * Added a way to write error log to Vim global variable.
  * powerline script now supports overrides from $POWERLINE_CONFIG_OVERRIDES,
    $POWERLINE_THEME_OVERRIDES environment variables, so does powerline-config
    script.
  * powerline and powerline-config scripts now support taking paths from
    $POWERLINE_CONFIG_PATHS.
  * powerline-lint is now able to report dictionaries which were merged in to
    form marked dictionary and what were the previous values of overridden
    values.
  * Added support for Byron Rakitzis? rc shell reimplementation.
  * Added support for querying battery status on cygwin platform.</changelog>
  <changelog author="asn@cryptomilk.org" date="1424433600">- Update to version 2.1
  * Added BAR support.
  * Added support for pdb (Python debugger) prompt.
  * Added more highlight groups to solarized colorscheme.
  * Updated zpython bindings.
  * Fixed C version of the client on non-Linux platforms.
  * Fixed some errors in powerline-lint code.
  * Fixed Python-2.6 incompatibilities in setup.py.</changelog>
  <changelog author="asn@cryptomilk.org" date="1431432000">- Update to version 2.1.4
  * Added support for placing powerline on the left in qtile.
  * Added qtile-1.9 support.
  * Fixed tmux-2.0 support.
  * Made it easier to run tests outside of travis.
  * Added some missing highlight groups.
  * Made it omit writing empty above lines.
  * Fixed UnicodeEncodeError when running powerline-lint with non-ASCII
    characters in error messages.
  * Fixed code that replaces &amp;statusline value: it now is able to replace
    non-ASCII &amp;statuslines as well.
  * Fixed powerline-render arguments parsing.</changelog>
  <changelog author="asn@cryptomilk.org" date="1436184000">- Update to version 2.2
  * Added support for newest psutil version.
  * Added support for non-SSL IMAP4 connection.
  * Added support for clickable tab names in Vim.
  * Added support for truncating tmux segments.
  * Added support for new (i3ipc) module that interacts with i3.
  * Added support for i3 modes.
  * Fixed coloring of network_load segment.
  * Fixed dash bindings on OS X.
  * Fixed parsing numbers starting with 2 supplied by POWERLINE_*_OVERRIDES
    environment variables.</changelog>
  <changelog author="asn@cryptomilk.org" date="1445342400">- Update to version 2.3
  * Added ability to hide domain part of the user name to common.env.user segment.
  * Added ability to show conda environment to virtualenv segment.
  * Added systemd service file.
  * Added ability to detect internal_ip interface using default gateway.
  * Added support for password-protected connections in mpd player bindings.
  * Added `output` option to i3wm.workspaces segment to filter workspaces based on
    their output.
  * Added ?charging? indicator to battery segment.
  * Made tmux bindings show zoom indicator in window status.
  * Fixed tmux bindings so that they support tmux-2.1.
  * Fixed support for unicode characters in common.time.date segment.</changelog>
  <changelog author="asn@cryptomilk.org" date="1461067200">- Update to version 2.4
  * Added short parameter for system_load segment that leaves only one load
    average number out of three.
  * Added powerline.segments.i3wm.scratchpad segment used to list windows
    that are currently on the scratchpad.
  * Added support for multiple batteries in battery segment.
  * Added ?.i3wm.workspace segment which describes single i3wm workspace and
    workspaces lister. Old .i3wm.workspaces segment was deprecated.
  * Added support for multiple monitors in lemonbar bindings.
  * Added support for most recent tmux version (2.2).
  * Fixed battery status support on some linux systems.
  * Fixed MPD bindings: they sometimes were not able to handle names if they
    did not fit ASCII.
  * Fixed MPD bindings: they did not correctly get elapsed time.
  * Fixed AttributeError on some systems: LC_MESSAGES is not always available.
  * Fixed Mac OS-specific variant of spotify player support when Python-3 is used.
  * Fixed performance of the tabline.</changelog>
  <changelog author="fcrozat@suse.com" date="1469620800">- Update to version 2.5:
  * Fix trailing whitespace segment on Python 3.
  * Fix left segments support in tmux-2.1
  * Add support for IPython-5
  * Increase socket backlog number for `powerline-daemon`
  * Use different query to retrieve weather
  * implement stash backend for git
  * provide stash counter
  * include stash in default shell layout
  * expose stash to Vim</changelog>
  <changelog author="asn@cryptomilk.org" date="1486728000">- Update to version 2.5.2:
  * Fixed ipython-5.2* support.
  * Made more robust theme default.
  * Made it use hglib in place of unstable mercurial plugin API.
  * Fixed latest fish version support.
  * Some other fixes and documentation adjustments.</changelog>
  <changelog author="lbeltrame@kde.org" date="1490702400">- Reformat spec properly
- Add a license</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Improve package summary.
- Avoid unnecessary %__-type macro indirections.
  Replace find -exec rm by just find -delete.</changelog>
  <changelog author="asn@cryptomilk.org" date="1494417600">- Update to version 2.6:
  * Added support for new Vim modes.
  * Added ability to control output padding.
  * Added iTunes player segment.
  * Added support for tmux development builds.
  * Added a workaround for a fish bug sometimes occurring when using eval from
  * config.fish (upstream status unknown).
  * Added a workaround for tmux 2.4 bug: excessive CPU usage when having multiple
  * panes (also fixed upstream).
  * Fixed clean file status support in mercurial.
  * Fixed error when battery capacity is zero and using DBus.
  * Fixed mercurial command servers leakage.
  * Refactored awesome bindings to use powerline daemon.</changelog>
  <changelog author="asn@cryptomilk.org" date="1519819200">- Fix powerline requiring both python2 and python3</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533902400">- add powerline-2.6-gcc7_fixes.patch
- add powerline-py2v3-fix.patch fixes boo#1101303
- cleanup spec
- correctly install systemd service</changelog>
</package>
<package pkgid="3bcb39046dc6d58fd1c4de8d4de8699660b2ad203e8832579b0cb8ea03cbae24" name="powerline-docs" arch="noarch">
  <version epoch="0" ver="2.6" rel="lp150.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1394625600">- Update to revision 70a94ee7d39a0958a06436aaeba05bd830830cc8.</changelog>
  <changelog author="asn@cryptomilk.org" date="1399464000">- Update to revision 9e7c6cf0bed52e47451c81377b5a1a96366b053f.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931200">- Update to revisiion 7453e58680c27a3435fd95d03f502d25eb80e98b.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931201">- Fix package type.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417521600">- Update to version 1.3.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417694400">- Fix powerline-config.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418126400">- Update to version 1.3.1
- Fixed some packaging issues.
- Added patch to support CFLAGS.</changelog>
  <changelog author="asn@cryptomilk.org" date="1421755200">- Update to version 2.0
  * Added fbterm (framebuffer terminal emulator) support.
  * Added theme with unicode-7.0 symbols.
  * Added support for PyPy3.
  * Compiler is now called with CFLAGS from environment in setup.py if present.
  * Added support for pyuv-1.*.
  * Added a way to write error log to Vim global variable.
  * powerline script now supports overrides from $POWERLINE_CONFIG_OVERRIDES,
    $POWERLINE_THEME_OVERRIDES environment variables, so does powerline-config
    script.
  * powerline and powerline-config scripts now support taking paths from
    $POWERLINE_CONFIG_PATHS.
  * powerline-lint is now able to report dictionaries which were merged in to
    form marked dictionary and what were the previous values of overridden
    values.
  * Added support for Byron Rakitzis? rc shell reimplementation.
  * Added support for querying battery status on cygwin platform.</changelog>
  <changelog author="asn@cryptomilk.org" date="1424433600">- Update to version 2.1
  * Added BAR support.
  * Added support for pdb (Python debugger) prompt.
  * Added more highlight groups to solarized colorscheme.
  * Updated zpython bindings.
  * Fixed C version of the client on non-Linux platforms.
  * Fixed some errors in powerline-lint code.
  * Fixed Python-2.6 incompatibilities in setup.py.</changelog>
  <changelog author="asn@cryptomilk.org" date="1431432000">- Update to version 2.1.4
  * Added support for placing powerline on the left in qtile.
  * Added qtile-1.9 support.
  * Fixed tmux-2.0 support.
  * Made it easier to run tests outside of travis.
  * Added some missing highlight groups.
  * Made it omit writing empty above lines.
  * Fixed UnicodeEncodeError when running powerline-lint with non-ASCII
    characters in error messages.
  * Fixed code that replaces &amp;statusline value: it now is able to replace
    non-ASCII &amp;statuslines as well.
  * Fixed powerline-render arguments parsing.</changelog>
  <changelog author="asn@cryptomilk.org" date="1436184000">- Update to version 2.2
  * Added support for newest psutil version.
  * Added support for non-SSL IMAP4 connection.
  * Added support for clickable tab names in Vim.
  * Added support for truncating tmux segments.
  * Added support for new (i3ipc) module that interacts with i3.
  * Added support for i3 modes.
  * Fixed coloring of network_load segment.
  * Fixed dash bindings on OS X.
  * Fixed parsing numbers starting with 2 supplied by POWERLINE_*_OVERRIDES
    environment variables.</changelog>
  <changelog author="asn@cryptomilk.org" date="1445342400">- Update to version 2.3
  * Added ability to hide domain part of the user name to common.env.user segment.
  * Added ability to show conda environment to virtualenv segment.
  * Added systemd service file.
  * Added ability to detect internal_ip interface using default gateway.
  * Added support for password-protected connections in mpd player bindings.
  * Added `output` option to i3wm.workspaces segment to filter workspaces based on
    their output.
  * Added ?charging? indicator to battery segment.
  * Made tmux bindings show zoom indicator in window status.
  * Fixed tmux bindings so that they support tmux-2.1.
  * Fixed support for unicode characters in common.time.date segment.</changelog>
  <changelog author="asn@cryptomilk.org" date="1461067200">- Update to version 2.4
  * Added short parameter for system_load segment that leaves only one load
    average number out of three.
  * Added powerline.segments.i3wm.scratchpad segment used to list windows
    that are currently on the scratchpad.
  * Added support for multiple batteries in battery segment.
  * Added ?.i3wm.workspace segment which describes single i3wm workspace and
    workspaces lister. Old .i3wm.workspaces segment was deprecated.
  * Added support for multiple monitors in lemonbar bindings.
  * Added support for most recent tmux version (2.2).
  * Fixed battery status support on some linux systems.
  * Fixed MPD bindings: they sometimes were not able to handle names if they
    did not fit ASCII.
  * Fixed MPD bindings: they did not correctly get elapsed time.
  * Fixed AttributeError on some systems: LC_MESSAGES is not always available.
  * Fixed Mac OS-specific variant of spotify player support when Python-3 is used.
  * Fixed performance of the tabline.</changelog>
  <changelog author="fcrozat@suse.com" date="1469620800">- Update to version 2.5:
  * Fix trailing whitespace segment on Python 3.
  * Fix left segments support in tmux-2.1
  * Add support for IPython-5
  * Increase socket backlog number for `powerline-daemon`
  * Use different query to retrieve weather
  * implement stash backend for git
  * provide stash counter
  * include stash in default shell layout
  * expose stash to Vim</changelog>
  <changelog author="asn@cryptomilk.org" date="1486728000">- Update to version 2.5.2:
  * Fixed ipython-5.2* support.
  * Made more robust theme default.
  * Made it use hglib in place of unstable mercurial plugin API.
  * Fixed latest fish version support.
  * Some other fixes and documentation adjustments.</changelog>
  <changelog author="lbeltrame@kde.org" date="1490702400">- Reformat spec properly
- Add a license</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Improve package summary.
- Avoid unnecessary %__-type macro indirections.
  Replace find -exec rm by just find -delete.</changelog>
  <changelog author="asn@cryptomilk.org" date="1494417600">- Update to version 2.6:
  * Added support for new Vim modes.
  * Added ability to control output padding.
  * Added iTunes player segment.
  * Added support for tmux development builds.
  * Added a workaround for a fish bug sometimes occurring when using eval from
  * config.fish (upstream status unknown).
  * Added a workaround for tmux 2.4 bug: excessive CPU usage when having multiple
  * panes (also fixed upstream).
  * Fixed clean file status support in mercurial.
  * Fixed error when battery capacity is zero and using DBus.
  * Fixed mercurial command servers leakage.
  * Refactored awesome bindings to use powerline daemon.</changelog>
  <changelog author="asn@cryptomilk.org" date="1519819200">- Fix powerline requiring both python2 and python3</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533902400">- add powerline-2.6-gcc7_fixes.patch
- add powerline-py2v3-fix.patch fixes boo#1101303
- cleanup spec
- correctly install systemd service</changelog>
</package>
<package pkgid="81be5536c67c7a8a67a5be1761485e3914a84fdf959d848661fbc82083a17f18" name="powerline-fonts" arch="noarch">
  <version epoch="0" ver="2.6" rel="lp150.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1394625600">- Update to revision 70a94ee7d39a0958a06436aaeba05bd830830cc8.</changelog>
  <changelog author="asn@cryptomilk.org" date="1399464000">- Update to revision 9e7c6cf0bed52e47451c81377b5a1a96366b053f.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931200">- Update to revisiion 7453e58680c27a3435fd95d03f502d25eb80e98b.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931201">- Fix package type.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417521600">- Update to version 1.3.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417694400">- Fix powerline-config.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418126400">- Update to version 1.3.1
- Fixed some packaging issues.
- Added patch to support CFLAGS.</changelog>
  <changelog author="asn@cryptomilk.org" date="1421755200">- Update to version 2.0
  * Added fbterm (framebuffer terminal emulator) support.
  * Added theme with unicode-7.0 symbols.
  * Added support for PyPy3.
  * Compiler is now called with CFLAGS from environment in setup.py if present.
  * Added support for pyuv-1.*.
  * Added a way to write error log to Vim global variable.
  * powerline script now supports overrides from $POWERLINE_CONFIG_OVERRIDES,
    $POWERLINE_THEME_OVERRIDES environment variables, so does powerline-config
    script.
  * powerline and powerline-config scripts now support taking paths from
    $POWERLINE_CONFIG_PATHS.
  * powerline-lint is now able to report dictionaries which were merged in to
    form marked dictionary and what were the previous values of overridden
    values.
  * Added support for Byron Rakitzis? rc shell reimplementation.
  * Added support for querying battery status on cygwin platform.</changelog>
  <changelog author="asn@cryptomilk.org" date="1424433600">- Update to version 2.1
  * Added BAR support.
  * Added support for pdb (Python debugger) prompt.
  * Added more highlight groups to solarized colorscheme.
  * Updated zpython bindings.
  * Fixed C version of the client on non-Linux platforms.
  * Fixed some errors in powerline-lint code.
  * Fixed Python-2.6 incompatibilities in setup.py.</changelog>
  <changelog author="asn@cryptomilk.org" date="1431432000">- Update to version 2.1.4
  * Added support for placing powerline on the left in qtile.
  * Added qtile-1.9 support.
  * Fixed tmux-2.0 support.
  * Made it easier to run tests outside of travis.
  * Added some missing highlight groups.
  * Made it omit writing empty above lines.
  * Fixed UnicodeEncodeError when running powerline-lint with non-ASCII
    characters in error messages.
  * Fixed code that replaces &amp;statusline value: it now is able to replace
    non-ASCII &amp;statuslines as well.
  * Fixed powerline-render arguments parsing.</changelog>
  <changelog author="asn@cryptomilk.org" date="1436184000">- Update to version 2.2
  * Added support for newest psutil version.
  * Added support for non-SSL IMAP4 connection.
  * Added support for clickable tab names in Vim.
  * Added support for truncating tmux segments.
  * Added support for new (i3ipc) module that interacts with i3.
  * Added support for i3 modes.
  * Fixed coloring of network_load segment.
  * Fixed dash bindings on OS X.
  * Fixed parsing numbers starting with 2 supplied by POWERLINE_*_OVERRIDES
    environment variables.</changelog>
  <changelog author="asn@cryptomilk.org" date="1445342400">- Update to version 2.3
  * Added ability to hide domain part of the user name to common.env.user segment.
  * Added ability to show conda environment to virtualenv segment.
  * Added systemd service file.
  * Added ability to detect internal_ip interface using default gateway.
  * Added support for password-protected connections in mpd player bindings.
  * Added `output` option to i3wm.workspaces segment to filter workspaces based on
    their output.
  * Added ?charging? indicator to battery segment.
  * Made tmux bindings show zoom indicator in window status.
  * Fixed tmux bindings so that they support tmux-2.1.
  * Fixed support for unicode characters in common.time.date segment.</changelog>
  <changelog author="asn@cryptomilk.org" date="1461067200">- Update to version 2.4
  * Added short parameter for system_load segment that leaves only one load
    average number out of three.
  * Added powerline.segments.i3wm.scratchpad segment used to list windows
    that are currently on the scratchpad.
  * Added support for multiple batteries in battery segment.
  * Added ?.i3wm.workspace segment which describes single i3wm workspace and
    workspaces lister. Old .i3wm.workspaces segment was deprecated.
  * Added support for multiple monitors in lemonbar bindings.
  * Added support for most recent tmux version (2.2).
  * Fixed battery status support on some linux systems.
  * Fixed MPD bindings: they sometimes were not able to handle names if they
    did not fit ASCII.
  * Fixed MPD bindings: they did not correctly get elapsed time.
  * Fixed AttributeError on some systems: LC_MESSAGES is not always available.
  * Fixed Mac OS-specific variant of spotify player support when Python-3 is used.
  * Fixed performance of the tabline.</changelog>
  <changelog author="fcrozat@suse.com" date="1469620800">- Update to version 2.5:
  * Fix trailing whitespace segment on Python 3.
  * Fix left segments support in tmux-2.1
  * Add support for IPython-5
  * Increase socket backlog number for `powerline-daemon`
  * Use different query to retrieve weather
  * implement stash backend for git
  * provide stash counter
  * include stash in default shell layout
  * expose stash to Vim</changelog>
  <changelog author="asn@cryptomilk.org" date="1486728000">- Update to version 2.5.2:
  * Fixed ipython-5.2* support.
  * Made more robust theme default.
  * Made it use hglib in place of unstable mercurial plugin API.
  * Fixed latest fish version support.
  * Some other fixes and documentation adjustments.</changelog>
  <changelog author="lbeltrame@kde.org" date="1490702400">- Reformat spec properly
- Add a license</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Improve package summary.
- Avoid unnecessary %__-type macro indirections.
  Replace find -exec rm by just find -delete.</changelog>
  <changelog author="asn@cryptomilk.org" date="1494417600">- Update to version 2.6:
  * Added support for new Vim modes.
  * Added ability to control output padding.
  * Added iTunes player segment.
  * Added support for tmux development builds.
  * Added a workaround for a fish bug sometimes occurring when using eval from
  * config.fish (upstream status unknown).
  * Added a workaround for tmux 2.4 bug: excessive CPU usage when having multiple
  * panes (also fixed upstream).
  * Fixed clean file status support in mercurial.
  * Fixed error when battery capacity is zero and using DBus.
  * Fixed mercurial command servers leakage.
  * Refactored awesome bindings to use powerline daemon.</changelog>
  <changelog author="asn@cryptomilk.org" date="1519819200">- Fix powerline requiring both python2 and python3</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533902400">- add powerline-2.6-gcc7_fixes.patch
- add powerline-py2v3-fix.patch fixes boo#1101303
- cleanup spec
- correctly install systemd service</changelog>
</package>
<package pkgid="8fdc73f216d47a8209e4ecec87ec8aeffd1be10fb292b8980c06921870a27db3" name="prosody" arch="src">
  <version epoch="0" ver="0.10.1" rel="lp150.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1464004800">- Move rcprosody into systemd section until we have proper sysvinit support</changelog>
  <changelog author="mvetter@suse.com" date="1464004801">- Add:
  * prosody-0.9.10.tar.gz.asc
  * prosody.keyring containing Matthew and Zashs keys
- Enable source verification</changelog>
  <changelog author="mvetter@suse.com" date="1466164800">- Remove prosody-rpmlintrc: Not needed since last cleanup</changelog>
  <changelog author="mvetter@suse.com" date="1473940800">- Add prosody-upstream-0.9-branch-fixes.patch:
  Upstream pushes all fixes for a certain release to its own branch.
  See: https://prosody.im/files/branches_explained.png
  After some time, mostly when a security bug is found, they do a
  new minor release.
  The fixes however are often needed to make prosody run smoothly
  with its community modules. Thus I monitor them and add the patch
  set. It's only fixes no new features.</changelog>
  <changelog author="mvetter@suse.com" date="1476187200">- Change license to MIT</changelog>
  <changelog author="mvetter@suse.com" date="1478260800">- Update to 0.9.11:
  * HTTP parser: Improve buffering of incoming HTTP data and add size
  limits (#603)
  * Sessionmanager: Fix for an issue which caused people to be kicked from conferences if mod_smacks was enabled (#648)
  * Dependencies: Workaround for compatibility with LuaSec 0.6 (#749)
  * MUC: Accept missing form as "instant room" request (#377)
  * C2S: Fix issues with destroying disconnected connections (#590), (#641)
  * mod_privacy: Fix selection of the top resource(s) #694
  * mod_presence: Make sure both users get each others presence after adding each other (#673)
  * mod_http_files: Fix traceback when serving a non-wildcard path (#611)
  * mod_http_files: Preserve a trailing slash in paths (#639)
  * util.datamanager: Fix error handling (#632)
  * net.server_event: Fix internal socket API to allow writing from socket.ondrain callback (#661)
  * net.server_event: Fix timeout (commit 1909bde0e79f)
  * net.server_event: Fix traceback due to write during TLS handshake (commit c774622ad9db)
  * net.server_event: Fix buffer length check (commit 206f9b0485ad)
- Remove prosody-upstream-0.9-branch-fixes.patch: included in update</changelog>
  <changelog author="mvetter@suse.com" date="1484136000">- Update to 0.9.12:
  * Dependencies: Fix certificate verification failures when using LuaSec 0.6 (fixes #781)
  * mod_s2s: Lower log message to 'warn' level, standard for remotely-triggered protocol issues
  * certs/Makefile: Remove -c flag from chmod call (a GNU extension)
  * Networking: Prevent writes after a handler is closed (fixes #783)</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1484136001">- added patch: prosody-lua51coexist.patch
  * makes prosody work on systems that have lua 5.1 and lua 5.2 installed.</changelog>
  <changelog author="tchvatal@suse.com" date="1499774400">- Fix build with namespaced lua</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Build against lua5.3 instead of lua5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Drop the systemd conditional as all systems have systemd now for
  our purposes.
- Switch back to lua5.1 as 0.9 prosody works only with that</changelog>
  <changelog author="tchvatal@suse.com" date="1500552001">- Add patch to fix crash "attempt to index global 'socket'":
  * prosody-local-socket.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Replace filler wording in description with content.</changelog>
  <changelog author="mvetter@suse.com" date="1501761600">- Add prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch to
  get the following bugfixes:
  * core.rostermanager: Add method for checking if the user is subscribed to a contact
  * mod_presence: Send probe once subscribed (fixes #794)
  * mod_net_multiplex: Enable SSL on the SSL port (fixes #803)
  * mod_register: Require encryption before registration if c2s_require_encryption is set (fixes #595)
  * mod_saslauth: Log SASL failure reason
  * mod_disco: Correctly set the 'node' attr (fixes #449)
  * mod_bosh: Update session.conn to point to the current connection (fixes #890)
  * net.dns: Simplify expiry calculation (fixes #919)
  * mod_watchregistrations: Return the pointer to the root of the stanza, fixes #922.
  * mod_disco: Add an account/registered identity on subscribed accounts, fixes #826.
  * mod_welcome: Return the pointer to the root of the stanza, fixes a bug similar to #922.
  * net.dns: Prevent answers from immediately expiring even if TTL=0 (see #919)
  * mod_saslauth: Use correct varible name (thanks Roi)
  * util.dependencies: Add compatibility code for LuaSocket no longer exporting as a global
  * util.dependencies: Add comment about LuaSec compat</changelog>
  <changelog author="benedikt@g5r.eu" date="1505044800">- Add prosody-backport-555.patch to backport the fix of issue #555:
  * net.dns: Use new IPv4-specific socket factory if available (fixes dns on libevent with latest development version of luasocket)</changelog>
  <changelog author="mvetter@suse.com" date="1505476800">- Update prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch:
  * mod_c2s: Iterate over child tags instead of child nodes in
    stream error (fixes traceback from #987)
  * mod_component, mod_s2s: Iterate over child tags instead of
    child nodes (can include text) in stream error
  (same as 176b7f4e4ac9)</changelog>
  <changelog author="mvetter@suse.com" date="1507032000">- Update to 0.10.0:
  See https://blog.prosody.im/prosody-0-10-0-released/ for details
- Remove because contained in new upstream:
  * prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch
  * prosody-backport-555.patch
  * prosody-local-socket.patch
- Update:
  * prosody-configure.patch
  * prosody-makefile.patch
  * prosody-cfg.patch</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1512820800">- add lua51-BitOp as dependency for mod_websocket
  https://prosody.im/doc/packagers#section010</changelog>
  <changelog author="mvetter@suse.com" date="1513339200">- Add pid file location to default config
  Seems this got lost with the update to 0.10.0
- enable mod_posix</changelog>
  <changelog author="mvetter@suse.com" date="1526472000">- boo#1093671 Update to 0.10.1:
  Security:
  * SQL: Ensure user archives are purged when a user account is deleted (fixes #1009[1])
  Fixes and improvements:
  * Core: More robust signal handling (fixes #1047[2], #1029[3])
  * MUC: Ensure that elements which match our from are stripped (fixes #1055[4])
  * MUC: More robust handling of storage failures (fixes #1091[5], #1091[5])
  * mod_mam: Ensure a user's archiving preferences apply even when they are offline (fixes #1024[6])
  * Compatibility improvements with LuaSec 0.7, improving curve support
  * mod_stanza_debug: New module that logs full stanzas sent and received for debugging purposes
  * mod_mam: Implement option to enable MAM implicitly when client support is detected (#867[7])
  * mod_mam: Add an option for whether to include 'total' counts by default in queries (for performance)
  * MUC: send muc#stanza_id feature as per XEP-0045 v1.31 (fixes #1097[8])
  Minor changes:
  * SQL: Suppress error log if a transaction failed but was retried ok
  * core.stanza_router: Verify that xmlns exists for firing stanza/iq/xmlns/name events (fixes #1022[9]) (thanks SamWhited)
  * mod_carbons: Synthesize a 'to' attribute for carbons of stanzas to "self" (fixes #956[10])
  * Core: Re-enable timestamps by default when logging to files (fixes #1004[11])
  * HTTP: Report HTML Content-Type on error pages (fixes #1030[12])
  * mod_c2s: Set a default value for c2s_timeout (fixes #1036[13])
  * prosodyctl: Fix traceback with lfs &lt; 1.6.2 and show warning
  * Fix incorrect '::' compression of a single 0-group which broke some IPv6 address matching
  * mod_dialback: Copy function from mod_s2s instead of depending on it, which made it harder to disable s2s (fixes #1050[14])
  * mod_storage_sql: Add an index to SQL archive stores to improve performance of some queries
  * MUC: Don't attempt to reply to errors with more errors (fixes #1122[15])
  * Module API: Fix parameter order to http client callbacks
  * mod_blocklist: Allow mod_presence to handle subscription stanzas before bouncing outgoing presence (fixes #575[16])
  * mod_http_files: Fix directory listing cache entries not expiring (fixes #1130[17])</changelog>
</package>
<package pkgid="a29860b5dd0adf3efce8cb54f780cc3799eebb0e4853db7685da1761d8f643bd" name="prosody" arch="x86_64">
  <version epoch="0" ver="0.10.1" rel="lp150.3.3.1"/>
  <changelog author="mvetter@suse.com" date="1464004800">- Move rcprosody into systemd section until we have proper sysvinit support</changelog>
  <changelog author="mvetter@suse.com" date="1464004801">- Add:
  * prosody-0.9.10.tar.gz.asc
  * prosody.keyring containing Matthew and Zashs keys
- Enable source verification</changelog>
  <changelog author="mvetter@suse.com" date="1466164800">- Remove prosody-rpmlintrc: Not needed since last cleanup</changelog>
  <changelog author="mvetter@suse.com" date="1473940800">- Add prosody-upstream-0.9-branch-fixes.patch:
  Upstream pushes all fixes for a certain release to its own branch.
  See: https://prosody.im/files/branches_explained.png
  After some time, mostly when a security bug is found, they do a
  new minor release.
  The fixes however are often needed to make prosody run smoothly
  with its community modules. Thus I monitor them and add the patch
  set. It's only fixes no new features.</changelog>
  <changelog author="mvetter@suse.com" date="1476187200">- Change license to MIT</changelog>
  <changelog author="mvetter@suse.com" date="1478260800">- Update to 0.9.11:
  * HTTP parser: Improve buffering of incoming HTTP data and add size
  limits (#603)
  * Sessionmanager: Fix for an issue which caused people to be kicked from conferences if mod_smacks was enabled (#648)
  * Dependencies: Workaround for compatibility with LuaSec 0.6 (#749)
  * MUC: Accept missing form as "instant room" request (#377)
  * C2S: Fix issues with destroying disconnected connections (#590), (#641)
  * mod_privacy: Fix selection of the top resource(s) #694
  * mod_presence: Make sure both users get each others presence after adding each other (#673)
  * mod_http_files: Fix traceback when serving a non-wildcard path (#611)
  * mod_http_files: Preserve a trailing slash in paths (#639)
  * util.datamanager: Fix error handling (#632)
  * net.server_event: Fix internal socket API to allow writing from socket.ondrain callback (#661)
  * net.server_event: Fix timeout (commit 1909bde0e79f)
  * net.server_event: Fix traceback due to write during TLS handshake (commit c774622ad9db)
  * net.server_event: Fix buffer length check (commit 206f9b0485ad)
- Remove prosody-upstream-0.9-branch-fixes.patch: included in update</changelog>
  <changelog author="mvetter@suse.com" date="1484136000">- Update to 0.9.12:
  * Dependencies: Fix certificate verification failures when using LuaSec 0.6 (fixes #781)
  * mod_s2s: Lower log message to 'warn' level, standard for remotely-triggered protocol issues
  * certs/Makefile: Remove -c flag from chmod call (a GNU extension)
  * Networking: Prevent writes after a handler is closed (fixes #783)</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1484136001">- added patch: prosody-lua51coexist.patch
  * makes prosody work on systems that have lua 5.1 and lua 5.2 installed.</changelog>
  <changelog author="tchvatal@suse.com" date="1499774400">- Fix build with namespaced lua</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Build against lua5.3 instead of lua5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Drop the systemd conditional as all systems have systemd now for
  our purposes.
- Switch back to lua5.1 as 0.9 prosody works only with that</changelog>
  <changelog author="tchvatal@suse.com" date="1500552001">- Add patch to fix crash "attempt to index global 'socket'":
  * prosody-local-socket.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Replace filler wording in description with content.</changelog>
  <changelog author="mvetter@suse.com" date="1501761600">- Add prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch to
  get the following bugfixes:
  * core.rostermanager: Add method for checking if the user is subscribed to a contact
  * mod_presence: Send probe once subscribed (fixes #794)
  * mod_net_multiplex: Enable SSL on the SSL port (fixes #803)
  * mod_register: Require encryption before registration if c2s_require_encryption is set (fixes #595)
  * mod_saslauth: Log SASL failure reason
  * mod_disco: Correctly set the 'node' attr (fixes #449)
  * mod_bosh: Update session.conn to point to the current connection (fixes #890)
  * net.dns: Simplify expiry calculation (fixes #919)
  * mod_watchregistrations: Return the pointer to the root of the stanza, fixes #922.
  * mod_disco: Add an account/registered identity on subscribed accounts, fixes #826.
  * mod_welcome: Return the pointer to the root of the stanza, fixes a bug similar to #922.
  * net.dns: Prevent answers from immediately expiring even if TTL=0 (see #919)
  * mod_saslauth: Use correct varible name (thanks Roi)
  * util.dependencies: Add compatibility code for LuaSocket no longer exporting as a global
  * util.dependencies: Add comment about LuaSec compat</changelog>
  <changelog author="benedikt@g5r.eu" date="1505044800">- Add prosody-backport-555.patch to backport the fix of issue #555:
  * net.dns: Use new IPv4-specific socket factory if available (fixes dns on libevent with latest development version of luasocket)</changelog>
  <changelog author="mvetter@suse.com" date="1505476800">- Update prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch:
  * mod_c2s: Iterate over child tags instead of child nodes in
    stream error (fixes traceback from #987)
  * mod_component, mod_s2s: Iterate over child tags instead of
    child nodes (can include text) in stream error
  (same as 176b7f4e4ac9)</changelog>
  <changelog author="mvetter@suse.com" date="1507032000">- Update to 0.10.0:
  See https://blog.prosody.im/prosody-0-10-0-released/ for details
- Remove because contained in new upstream:
  * prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch
  * prosody-backport-555.patch
  * prosody-local-socket.patch
- Update:
  * prosody-configure.patch
  * prosody-makefile.patch
  * prosody-cfg.patch</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1512820800">- add lua51-BitOp as dependency for mod_websocket
  https://prosody.im/doc/packagers#section010</changelog>
  <changelog author="mvetter@suse.com" date="1513339200">- Add pid file location to default config
  Seems this got lost with the update to 0.10.0
- enable mod_posix</changelog>
  <changelog author="mvetter@suse.com" date="1526472000">- boo#1093671 Update to 0.10.1:
  Security:
  * SQL: Ensure user archives are purged when a user account is deleted (fixes #1009[1])
  Fixes and improvements:
  * Core: More robust signal handling (fixes #1047[2], #1029[3])
  * MUC: Ensure that elements which match our from are stripped (fixes #1055[4])
  * MUC: More robust handling of storage failures (fixes #1091[5], #1091[5])
  * mod_mam: Ensure a user's archiving preferences apply even when they are offline (fixes #1024[6])
  * Compatibility improvements with LuaSec 0.7, improving curve support
  * mod_stanza_debug: New module that logs full stanzas sent and received for debugging purposes
  * mod_mam: Implement option to enable MAM implicitly when client support is detected (#867[7])
  * mod_mam: Add an option for whether to include 'total' counts by default in queries (for performance)
  * MUC: send muc#stanza_id feature as per XEP-0045 v1.31 (fixes #1097[8])
  Minor changes:
  * SQL: Suppress error log if a transaction failed but was retried ok
  * core.stanza_router: Verify that xmlns exists for firing stanza/iq/xmlns/name events (fixes #1022[9]) (thanks SamWhited)
  * mod_carbons: Synthesize a 'to' attribute for carbons of stanzas to "self" (fixes #956[10])
  * Core: Re-enable timestamps by default when logging to files (fixes #1004[11])
  * HTTP: Report HTML Content-Type on error pages (fixes #1030[12])
  * mod_c2s: Set a default value for c2s_timeout (fixes #1036[13])
  * prosodyctl: Fix traceback with lfs &lt; 1.6.2 and show warning
  * Fix incorrect '::' compression of a single 0-group which broke some IPv6 address matching
  * mod_dialback: Copy function from mod_s2s instead of depending on it, which made it harder to disable s2s (fixes #1050[14])
  * mod_storage_sql: Add an index to SQL archive stores to improve performance of some queries
  * MUC: Don't attempt to reply to errors with more errors (fixes #1122[15])
  * Module API: Fix parameter order to http client callbacks
  * mod_blocklist: Allow mod_presence to handle subscription stanzas before bouncing outgoing presence (fixes #575[16])
  * mod_http_files: Fix directory listing cache entries not expiring (fixes #1130[17])</changelog>
</package>
<package pkgid="494dfdd859db29ce22d9afdce359a49b215fe91a4e1bb87ee90afbd19c8feca4" name="prosody" arch="src">
  <version epoch="0" ver="0.10.2" rel="lp150.3.6.2"/>
  <changelog author="mvetter@suse.com" date="1466164800">- Remove prosody-rpmlintrc: Not needed since last cleanup</changelog>
  <changelog author="mvetter@suse.com" date="1473940800">- Add prosody-upstream-0.9-branch-fixes.patch:
  Upstream pushes all fixes for a certain release to its own branch.
  See: https://prosody.im/files/branches_explained.png
  After some time, mostly when a security bug is found, they do a
  new minor release.
  The fixes however are often needed to make prosody run smoothly
  with its community modules. Thus I monitor them and add the patch
  set. It's only fixes no new features.</changelog>
  <changelog author="mvetter@suse.com" date="1476187200">- Change license to MIT</changelog>
  <changelog author="mvetter@suse.com" date="1478260800">- Update to 0.9.11:
  * HTTP parser: Improve buffering of incoming HTTP data and add size
  limits (#603)
  * Sessionmanager: Fix for an issue which caused people to be kicked from conferences if mod_smacks was enabled (#648)
  * Dependencies: Workaround for compatibility with LuaSec 0.6 (#749)
  * MUC: Accept missing form as "instant room" request (#377)
  * C2S: Fix issues with destroying disconnected connections (#590), (#641)
  * mod_privacy: Fix selection of the top resource(s) #694
  * mod_presence: Make sure both users get each others presence after adding each other (#673)
  * mod_http_files: Fix traceback when serving a non-wildcard path (#611)
  * mod_http_files: Preserve a trailing slash in paths (#639)
  * util.datamanager: Fix error handling (#632)
  * net.server_event: Fix internal socket API to allow writing from socket.ondrain callback (#661)
  * net.server_event: Fix timeout (commit 1909bde0e79f)
  * net.server_event: Fix traceback due to write during TLS handshake (commit c774622ad9db)
  * net.server_event: Fix buffer length check (commit 206f9b0485ad)
- Remove prosody-upstream-0.9-branch-fixes.patch: included in update</changelog>
  <changelog author="mvetter@suse.com" date="1484136000">- Update to 0.9.12:
  * Dependencies: Fix certificate verification failures when using LuaSec 0.6 (fixes #781)
  * mod_s2s: Lower log message to 'warn' level, standard for remotely-triggered protocol issues
  * certs/Makefile: Remove -c flag from chmod call (a GNU extension)
  * Networking: Prevent writes after a handler is closed (fixes #783)</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1484136001">- added patch: prosody-lua51coexist.patch
  * makes prosody work on systems that have lua 5.1 and lua 5.2 installed.</changelog>
  <changelog author="tchvatal@suse.com" date="1499774400">- Fix build with namespaced lua</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Build against lua5.3 instead of lua5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Drop the systemd conditional as all systems have systemd now for
  our purposes.
- Switch back to lua5.1 as 0.9 prosody works only with that</changelog>
  <changelog author="tchvatal@suse.com" date="1500552001">- Add patch to fix crash "attempt to index global 'socket'":
  * prosody-local-socket.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Replace filler wording in description with content.</changelog>
  <changelog author="mvetter@suse.com" date="1501761600">- Add prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch to
  get the following bugfixes:
  * core.rostermanager: Add method for checking if the user is subscribed to a contact
  * mod_presence: Send probe once subscribed (fixes #794)
  * mod_net_multiplex: Enable SSL on the SSL port (fixes #803)
  * mod_register: Require encryption before registration if c2s_require_encryption is set (fixes #595)
  * mod_saslauth: Log SASL failure reason
  * mod_disco: Correctly set the 'node' attr (fixes #449)
  * mod_bosh: Update session.conn to point to the current connection (fixes #890)
  * net.dns: Simplify expiry calculation (fixes #919)
  * mod_watchregistrations: Return the pointer to the root of the stanza, fixes #922.
  * mod_disco: Add an account/registered identity on subscribed accounts, fixes #826.
  * mod_welcome: Return the pointer to the root of the stanza, fixes a bug similar to #922.
  * net.dns: Prevent answers from immediately expiring even if TTL=0 (see #919)
  * mod_saslauth: Use correct varible name (thanks Roi)
  * util.dependencies: Add compatibility code for LuaSocket no longer exporting as a global
  * util.dependencies: Add comment about LuaSec compat</changelog>
  <changelog author="benedikt@g5r.eu" date="1505044800">- Add prosody-backport-555.patch to backport the fix of issue #555:
  * net.dns: Use new IPv4-specific socket factory if available (fixes dns on libevent with latest development version of luasocket)</changelog>
  <changelog author="mvetter@suse.com" date="1505476800">- Update prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch:
  * mod_c2s: Iterate over child tags instead of child nodes in
    stream error (fixes traceback from #987)
  * mod_component, mod_s2s: Iterate over child tags instead of
    child nodes (can include text) in stream error
  (same as 176b7f4e4ac9)</changelog>
  <changelog author="mvetter@suse.com" date="1507032000">- Update to 0.10.0:
  See https://blog.prosody.im/prosody-0-10-0-released/ for details
- Remove because contained in new upstream:
  * prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch
  * prosody-backport-555.patch
  * prosody-local-socket.patch
- Update:
  * prosody-configure.patch
  * prosody-makefile.patch
  * prosody-cfg.patch</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1512820800">- add lua51-BitOp as dependency for mod_websocket
  https://prosody.im/doc/packagers#section010</changelog>
  <changelog author="mvetter@suse.com" date="1513339200">- Add pid file location to default config
  Seems this got lost with the update to 0.10.0
- enable mod_posix</changelog>
  <changelog author="mvetter@suse.com" date="1526472000">- Update to 0.10.1:
  Security:
  * SQL: Ensure user archives are purged when a user account is deleted (fixes #1009[1])
  Fixes and improvements:
  * Core: More robust signal handling (fixes #1047[2], #1029[3])
  * MUC: Ensure that elements which match our from are stripped (fixes #1055[4])
  * MUC: More robust handling of storage failures (fixes #1091[5], #1091[5])
  * mod_mam: Ensure a user's archiving preferences apply even when they are offline (fixes #1024[6])
  * Compatibility improvements with LuaSec 0.7, improving curve support
  * mod_stanza_debug: New module that logs full stanzas sent and received for debugging purposes
  * mod_mam: Implement option to enable MAM implicitly when client support is detected (#867[7])
  * mod_mam: Add an option for whether to include 'total' counts by default in queries (for performance)
  * MUC: send muc#stanza_id feature as per XEP-0045 v1.31 (fixes #1097[8])
  Minor changes:
  * SQL: Suppress error log if a transaction failed but was retried ok
  * core.stanza_router: Verify that xmlns exists for firing stanza/iq/xmlns/name events (fixes #1022[9]) (thanks SamWhited)
  * mod_carbons: Synthesize a 'to' attribute for carbons of stanzas to "self" (fixes #956[10])
  * Core: Re-enable timestamps by default when logging to files (fixes #1004[11])
  * HTTP: Report HTML Content-Type on error pages (fixes #1030[12])
  * mod_c2s: Set a default value for c2s_timeout (fixes #1036[13])
  * prosodyctl: Fix traceback with lfs &lt; 1.6.2 and show warning
  * Fix incorrect '::' compression of a single 0-group which broke some IPv6 address matching
  * mod_dialback: Copy function from mod_s2s instead of depending on it, which made it harder to disable s2s (fixes #1050[14])
  * mod_storage_sql: Add an index to SQL archive stores to improve performance of some queries
  * MUC: Don't attempt to reply to errors with more errors (fixes #1122[15])
  * Module API: Fix parameter order to http client callbacks
  * mod_blocklist: Allow mod_presence to handle subscription stanzas before bouncing outgoing presence (fixes #575[16])
  * mod_http_files: Fix directory listing cache entries not expiring (fixes #1130[17])</changelog>
  <changelog author="benedikt@g5r.eu" date="1527768000">- Update to 0.10.2:
  Security:
  * mod_c2s: Do not allow the stream ?to? to change across stream restarts (fixes #1147)
  Minor changes:
  * mod_websocket: Store the request object on the session for use by other modules (fixes #1153)
  * mod_c2s: Avoid concatenating potential nil value (fixes #753)
  * core.certmanager: Allow all non-whitespace in service name (fixes #1019)
  * mod_disco: Skip code specific to disco on user accounts (avoids invoking usermanager, fixes #1150)
  * mod_bosh: Store the normalized hostname on session (fixes #1151)
  * MUC: Fix error logged when no persistent rooms present (fixes #1154)
- change /usr/bin/env lua5.1 to /usr/bin/lua5.1 to fix the env-script-interpreter rpmlint error</changelog>
  <changelog author="mvetter@suse.com" date="1527940800">- bsc#1094890 - (CVE-2018-10847):
  Submit 0.10.2 containing the fix to Leap 15.0</changelog>
</package>
<package pkgid="2095b0031984581c66574a68d64a3c1582d697f4409c3ef2773bc41c572a089a" name="prosody" arch="x86_64">
  <version epoch="0" ver="0.10.2" rel="lp150.3.6.2"/>
  <changelog author="mvetter@suse.com" date="1466164800">- Remove prosody-rpmlintrc: Not needed since last cleanup</changelog>
  <changelog author="mvetter@suse.com" date="1473940800">- Add prosody-upstream-0.9-branch-fixes.patch:
  Upstream pushes all fixes for a certain release to its own branch.
  See: https://prosody.im/files/branches_explained.png
  After some time, mostly when a security bug is found, they do a
  new minor release.
  The fixes however are often needed to make prosody run smoothly
  with its community modules. Thus I monitor them and add the patch
  set. It's only fixes no new features.</changelog>
  <changelog author="mvetter@suse.com" date="1476187200">- Change license to MIT</changelog>
  <changelog author="mvetter@suse.com" date="1478260800">- Update to 0.9.11:
  * HTTP parser: Improve buffering of incoming HTTP data and add size
  limits (#603)
  * Sessionmanager: Fix for an issue which caused people to be kicked from conferences if mod_smacks was enabled (#648)
  * Dependencies: Workaround for compatibility with LuaSec 0.6 (#749)
  * MUC: Accept missing form as "instant room" request (#377)
  * C2S: Fix issues with destroying disconnected connections (#590), (#641)
  * mod_privacy: Fix selection of the top resource(s) #694
  * mod_presence: Make sure both users get each others presence after adding each other (#673)
  * mod_http_files: Fix traceback when serving a non-wildcard path (#611)
  * mod_http_files: Preserve a trailing slash in paths (#639)
  * util.datamanager: Fix error handling (#632)
  * net.server_event: Fix internal socket API to allow writing from socket.ondrain callback (#661)
  * net.server_event: Fix timeout (commit 1909bde0e79f)
  * net.server_event: Fix traceback due to write during TLS handshake (commit c774622ad9db)
  * net.server_event: Fix buffer length check (commit 206f9b0485ad)
- Remove prosody-upstream-0.9-branch-fixes.patch: included in update</changelog>
  <changelog author="mvetter@suse.com" date="1484136000">- Update to 0.9.12:
  * Dependencies: Fix certificate verification failures when using LuaSec 0.6 (fixes #781)
  * mod_s2s: Lower log message to 'warn' level, standard for remotely-triggered protocol issues
  * certs/Makefile: Remove -c flag from chmod call (a GNU extension)
  * Networking: Prevent writes after a handler is closed (fixes #783)</changelog>
  <changelog author="Mathias.Homann@opensuse.org" date="1484136001">- added patch: prosody-lua51coexist.patch
  * makes prosody work on systems that have lua 5.1 and lua 5.2 installed.</changelog>
  <changelog author="tchvatal@suse.com" date="1499774400">- Fix build with namespaced lua</changelog>
  <changelog author="tchvatal@suse.com" date="1500033600">- Build against lua5.3 instead of lua5.1</changelog>
  <changelog author="tchvatal@suse.com" date="1500552000">- Drop the systemd conditional as all systems have systemd now for
  our purposes.
- Switch back to lua5.1 as 0.9 prosody works only with that</changelog>
  <changelog author="tchvatal@suse.com" date="1500552001">- Add patch to fix crash "attempt to index global 'socket'":
  * prosody-local-socket.patch</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Replace filler wording in description with content.</changelog>
  <changelog author="mvetter@suse.com" date="1501761600">- Add prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch to
  get the following bugfixes:
  * core.rostermanager: Add method for checking if the user is subscribed to a contact
  * mod_presence: Send probe once subscribed (fixes #794)
  * mod_net_multiplex: Enable SSL on the SSL port (fixes #803)
  * mod_register: Require encryption before registration if c2s_require_encryption is set (fixes #595)
  * mod_saslauth: Log SASL failure reason
  * mod_disco: Correctly set the 'node' attr (fixes #449)
  * mod_bosh: Update session.conn to point to the current connection (fixes #890)
  * net.dns: Simplify expiry calculation (fixes #919)
  * mod_watchregistrations: Return the pointer to the root of the stanza, fixes #922.
  * mod_disco: Add an account/registered identity on subscribed accounts, fixes #826.
  * mod_welcome: Return the pointer to the root of the stanza, fixes a bug similar to #922.
  * net.dns: Prevent answers from immediately expiring even if TTL=0 (see #919)
  * mod_saslauth: Use correct varible name (thanks Roi)
  * util.dependencies: Add compatibility code for LuaSocket no longer exporting as a global
  * util.dependencies: Add comment about LuaSec compat</changelog>
  <changelog author="benedikt@g5r.eu" date="1505044800">- Add prosody-backport-555.patch to backport the fix of issue #555:
  * net.dns: Use new IPv4-specific socket factory if available (fixes dns on libevent with latest development version of luasocket)</changelog>
  <changelog author="mvetter@suse.com" date="1505476800">- Update prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch:
  * mod_c2s: Iterate over child tags instead of child nodes in
    stream error (fixes traceback from #987)
  * mod_component, mod_s2s: Iterate over child tags instead of
    child nodes (can include text) in stream error
  (same as 176b7f4e4ac9)</changelog>
  <changelog author="mvetter@suse.com" date="1507032000">- Update to 0.10.0:
  See https://blog.prosody.im/prosody-0-10-0-released/ for details
- Remove because contained in new upstream:
  * prosody-upstream-0.9-branch-fixes-since-0.12-tag.patch
  * prosody-backport-555.patch
  * prosody-local-socket.patch
- Update:
  * prosody-configure.patch
  * prosody-makefile.patch
  * prosody-cfg.patch</changelog>
  <changelog author="sleep_walker@opensuse.org" date="1512820800">- add lua51-BitOp as dependency for mod_websocket
  https://prosody.im/doc/packagers#section010</changelog>
  <changelog author="mvetter@suse.com" date="1513339200">- Add pid file location to default config
  Seems this got lost with the update to 0.10.0
- enable mod_posix</changelog>
  <changelog author="mvetter@suse.com" date="1526472000">- Update to 0.10.1:
  Security:
  * SQL: Ensure user archives are purged when a user account is deleted (fixes #1009[1])
  Fixes and improvements:
  * Core: More robust signal handling (fixes #1047[2], #1029[3])
  * MUC: Ensure that elements which match our from are stripped (fixes #1055[4])
  * MUC: More robust handling of storage failures (fixes #1091[5], #1091[5])
  * mod_mam: Ensure a user's archiving preferences apply even when they are offline (fixes #1024[6])
  * Compatibility improvements with LuaSec 0.7, improving curve support
  * mod_stanza_debug: New module that logs full stanzas sent and received for debugging purposes
  * mod_mam: Implement option to enable MAM implicitly when client support is detected (#867[7])
  * mod_mam: Add an option for whether to include 'total' counts by default in queries (for performance)
  * MUC: send muc#stanza_id feature as per XEP-0045 v1.31 (fixes #1097[8])
  Minor changes:
  * SQL: Suppress error log if a transaction failed but was retried ok
  * core.stanza_router: Verify that xmlns exists for firing stanza/iq/xmlns/name events (fixes #1022[9]) (thanks SamWhited)
  * mod_carbons: Synthesize a 'to' attribute for carbons of stanzas to "self" (fixes #956[10])
  * Core: Re-enable timestamps by default when logging to files (fixes #1004[11])
  * HTTP: Report HTML Content-Type on error pages (fixes #1030[12])
  * mod_c2s: Set a default value for c2s_timeout (fixes #1036[13])
  * prosodyctl: Fix traceback with lfs &lt; 1.6.2 and show warning
  * Fix incorrect '::' compression of a single 0-group which broke some IPv6 address matching
  * mod_dialback: Copy function from mod_s2s instead of depending on it, which made it harder to disable s2s (fixes #1050[14])
  * mod_storage_sql: Add an index to SQL archive stores to improve performance of some queries
  * MUC: Don't attempt to reply to errors with more errors (fixes #1122[15])
  * Module API: Fix parameter order to http client callbacks
  * mod_blocklist: Allow mod_presence to handle subscription stanzas before bouncing outgoing presence (fixes #575[16])
  * mod_http_files: Fix directory listing cache entries not expiring (fixes #1130[17])</changelog>
  <changelog author="benedikt@g5r.eu" date="1527768000">- Update to 0.10.2:
  Security:
  * mod_c2s: Do not allow the stream ?to? to change across stream restarts (fixes #1147)
  Minor changes:
  * mod_websocket: Store the request object on the session for use by other modules (fixes #1153)
  * mod_c2s: Avoid concatenating potential nil value (fixes #753)
  * core.certmanager: Allow all non-whitespace in service name (fixes #1019)
  * mod_disco: Skip code specific to disco on user accounts (avoids invoking usermanager, fixes #1150)
  * mod_bosh: Store the normalized hostname on session (fixes #1151)
  * MUC: Fix error logged when no persistent rooms present (fixes #1154)
- change /usr/bin/env lua5.1 to /usr/bin/lua5.1 to fix the env-script-interpreter rpmlint error</changelog>
  <changelog author="mvetter@suse.com" date="1527940800">- bsc#1094890 - (CVE-2018-10847):
  Submit 0.10.2 containing the fix to Leap 15.0</changelog>
</package>
<package pkgid="18bd507ee236803653c4e799cce9f2cee176c49843c84fc8ba592e6f95d5c303" name="proteus" arch="noarch">
  <version epoch="0" ver="4.2.4" rel="lp150.2.4.1"/>
  <changelog author="axel.braun@gmx.de" date="1382788800">- initial build on OBS</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1463227200">- version 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.1 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.4 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="3720620be70548e34cae44f48028df45e41762c1be51a8f7fd8d637050f4b2fd" name="proteus" arch="src">
  <version epoch="0" ver="4.2.4" rel="lp150.2.4.1"/>
  <changelog author="axel.braun@gmx.de" date="1382788800">- initial build on OBS</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1463227200">- version 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.1 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.4 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="a7b1d7f69f6fbddf8521d3dd45fa61ea672364b9c0291e880b80e55dea9a2db2" name="psmisc" arch="src">
  <version epoch="0" ver="23.0" rel="lp150.4.3.1"/>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="werner@suse.de" date="1330344000">- Update to version 22.16
  * Use strncpy for COMM_LEN and make it 18 characters to cover
    brackets in name.
  * don't change COMM_LEN, it breaks matching long commands
    Debian #661145
  * Enable some harden AM_CFLAGS by default, use configure option
  - -disable-harden-flags to not use it.
  * Use ENOENT not EBADE for FreeBSD Debian #631566
  * Fix prstat typos
  * Stop zombies by using waitpid Ubuntu #876387 by Peter Holik, SF#3429674
  * Fixed minor older/younger typo in killall.1 thanks to Maikel Linke
  * Correct defines for timeout in configure.ac</changelog>
  <changelog author="werner@suse.de" date="1331640000">- Submit ASCII null fix in pstree upsrtream
- Submit support for static background process for stat system call
  upstream
- Rebuild package with upstream patches</changelog>
  <changelog author="werner@suse.de" date="1355832000">- Update to version 22.20 + upstream patch
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * pstree sorts properly on names Debian #682014
  * fuser -m regresion fixed SF #3559232, thanks to hanpt
  * pstree finds orphaned processes SF#3537508
  * fuser finds unix sockets again SF #3502649
  * pstree finds pid 0 stops looping Debian #687829
  * killall with no args exits again SF #3536526
  * Added AC_CANONICAL_TARGET for target_os Debian #673485
  * sed doesn't have [0-9]+ replace with [0-9][0-9]*
  * assert in killall triggered for small lifetimes Debian #628617
  * killall MAX_NAMES off by one Debian #677428
  * Removed remaining parts of pidof
  * fuser uses correct timeout_stat define Debian #661723
  * fuser is not compiled on hurd-i386 Debian #673485
  * No TEXTRELS in src/lists built as PIE on x86
  * Fake pstree root for kernels with hidepid turned on
  * More fixes for Cygwin SF Patch #3511920
  * pstree can show PGIDs SF Patch #3471056
- This should fix the bug reported by Madhu</changelog>
  <changelog author="schwab@suse.de" date="1360411200">- peekfd hasn't been ported to aarch64 yet</changelog>
  <changelog author="schwab@suse.de" date="1381320000">- peekfd-m68k.patch: Port peekfd to m68k</changelog>
  <changelog author="p.drouand@gmail.com" date="1382529600">- Remove %fillup_prereq %insserv_prereq PreReq; package provides
  neither sysconfigfile or sysvinit script
- Use %lang_package instead of define a lang subpackage manually
- Use %configure instead of ./configure
- Don't define CC and CXX flags manually
- Remove redundant %clean section</changelog>
  <changelog author="werner@suse.de" date="1395662400">- Update to version 22.21
  * Missing comma in fuser(1) added Debian #702391
  * pstree uses COLUMN env variable Debian #717017
  * pstree shows proper thread names SF Bug#57
  * pstree shows namespace options SF Patch#30
  * killall.1 minor fixes SF Bug#59
  * peekfd for m68k SF Patch#31
  * Fixing some derefefed pointers SF Patch#32
  * Minor typos in man pages SF Bug#61 Bug#60
  * fuser -m and -M flags work either way Debian #606178
- Remove patch
  psmisc-22.20-pstree.patch as now part of upstream
  peekfd-m68k.patch as now part of upstream
- Port the patches
  psmisc-22.20-upstream.patch which becomes psmisc-22.21-upstream.patch
  psmisc-22.20.dif which becomes psmisc-22.21.dif
  psmisc-22.12-pstree.patch which becomes psmisc-22.21-pstree.patch</changelog>
  <changelog author="ro@suse.de" date="1398340800">- add patch to fix fuser -M option active all the time (bnc#874983)
  psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch</changelog>
  <changelog author="werner@suse.de" date="1427198400">- Add patch psmisc-22.21-boo908063.patch to avoid to close files
  which are never open (boo#908063)</changelog>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
</package>
<package pkgid="1c052adeae617a96c1be84f1c55297318830c40f6492793d47250249b0fcd961" name="psmisc" arch="x86_64">
  <version epoch="0" ver="23.0" rel="lp150.4.3.1"/>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="werner@suse.de" date="1330344000">- Update to version 22.16
  * Use strncpy for COMM_LEN and make it 18 characters to cover
    brackets in name.
  * don't change COMM_LEN, it breaks matching long commands
    Debian #661145
  * Enable some harden AM_CFLAGS by default, use configure option
  - -disable-harden-flags to not use it.
  * Use ENOENT not EBADE for FreeBSD Debian #631566
  * Fix prstat typos
  * Stop zombies by using waitpid Ubuntu #876387 by Peter Holik, SF#3429674
  * Fixed minor older/younger typo in killall.1 thanks to Maikel Linke
  * Correct defines for timeout in configure.ac</changelog>
  <changelog author="werner@suse.de" date="1331640000">- Submit ASCII null fix in pstree upsrtream
- Submit support for static background process for stat system call
  upstream
- Rebuild package with upstream patches</changelog>
  <changelog author="werner@suse.de" date="1355832000">- Update to version 22.20 + upstream patch
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * pstree sorts properly on names Debian #682014
  * fuser -m regresion fixed SF #3559232, thanks to hanpt
  * pstree finds orphaned processes SF#3537508
  * fuser finds unix sockets again SF #3502649
  * pstree finds pid 0 stops looping Debian #687829
  * killall with no args exits again SF #3536526
  * Added AC_CANONICAL_TARGET for target_os Debian #673485
  * sed doesn't have [0-9]+ replace with [0-9][0-9]*
  * assert in killall triggered for small lifetimes Debian #628617
  * killall MAX_NAMES off by one Debian #677428
  * Removed remaining parts of pidof
  * fuser uses correct timeout_stat define Debian #661723
  * fuser is not compiled on hurd-i386 Debian #673485
  * No TEXTRELS in src/lists built as PIE on x86
  * Fake pstree root for kernels with hidepid turned on
  * More fixes for Cygwin SF Patch #3511920
  * pstree can show PGIDs SF Patch #3471056
- This should fix the bug reported by Madhu</changelog>
  <changelog author="schwab@suse.de" date="1360411200">- peekfd hasn't been ported to aarch64 yet</changelog>
  <changelog author="schwab@suse.de" date="1381320000">- peekfd-m68k.patch: Port peekfd to m68k</changelog>
  <changelog author="p.drouand@gmail.com" date="1382529600">- Remove %fillup_prereq %insserv_prereq PreReq; package provides
  neither sysconfigfile or sysvinit script
- Use %lang_package instead of define a lang subpackage manually
- Use %configure instead of ./configure
- Don't define CC and CXX flags manually
- Remove redundant %clean section</changelog>
  <changelog author="werner@suse.de" date="1395662400">- Update to version 22.21
  * Missing comma in fuser(1) added Debian #702391
  * pstree uses COLUMN env variable Debian #717017
  * pstree shows proper thread names SF Bug#57
  * pstree shows namespace options SF Patch#30
  * killall.1 minor fixes SF Bug#59
  * peekfd for m68k SF Patch#31
  * Fixing some derefefed pointers SF Patch#32
  * Minor typos in man pages SF Bug#61 Bug#60
  * fuser -m and -M flags work either way Debian #606178
- Remove patch
  psmisc-22.20-pstree.patch as now part of upstream
  peekfd-m68k.patch as now part of upstream
- Port the patches
  psmisc-22.20-upstream.patch which becomes psmisc-22.21-upstream.patch
  psmisc-22.20.dif which becomes psmisc-22.21.dif
  psmisc-22.12-pstree.patch which becomes psmisc-22.21-pstree.patch</changelog>
  <changelog author="ro@suse.de" date="1398340800">- add patch to fix fuser -M option active all the time (bnc#874983)
  psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch</changelog>
  <changelog author="werner@suse.de" date="1427198400">- Add patch psmisc-22.21-boo908063.patch to avoid to close files
  which are never open (boo#908063)</changelog>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
</package>
<package pkgid="f56e70eadc05a5b12a42498b0805c359522f501bf242ac4515931bfc9b0409bd" name="psmisc-lang" arch="noarch">
  <version epoch="0" ver="23.0" rel="lp150.4.3.1"/>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="werner@suse.de" date="1330344000">- Update to version 22.16
  * Use strncpy for COMM_LEN and make it 18 characters to cover
    brackets in name.
  * don't change COMM_LEN, it breaks matching long commands
    Debian #661145
  * Enable some harden AM_CFLAGS by default, use configure option
  - -disable-harden-flags to not use it.
  * Use ENOENT not EBADE for FreeBSD Debian #631566
  * Fix prstat typos
  * Stop zombies by using waitpid Ubuntu #876387 by Peter Holik, SF#3429674
  * Fixed minor older/younger typo in killall.1 thanks to Maikel Linke
  * Correct defines for timeout in configure.ac</changelog>
  <changelog author="werner@suse.de" date="1331640000">- Submit ASCII null fix in pstree upsrtream
- Submit support for static background process for stat system call
  upstream
- Rebuild package with upstream patches</changelog>
  <changelog author="werner@suse.de" date="1355832000">- Update to version 22.20 + upstream patch
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * pstree sorts properly on names Debian #682014
  * fuser -m regresion fixed SF #3559232, thanks to hanpt
  * pstree finds orphaned processes SF#3537508
  * fuser finds unix sockets again SF #3502649
  * pstree finds pid 0 stops looping Debian #687829
  * killall with no args exits again SF #3536526
  * Added AC_CANONICAL_TARGET for target_os Debian #673485
  * sed doesn't have [0-9]+ replace with [0-9][0-9]*
  * assert in killall triggered for small lifetimes Debian #628617
  * killall MAX_NAMES off by one Debian #677428
  * Removed remaining parts of pidof
  * fuser uses correct timeout_stat define Debian #661723
  * fuser is not compiled on hurd-i386 Debian #673485
  * No TEXTRELS in src/lists built as PIE on x86
  * Fake pstree root for kernels with hidepid turned on
  * More fixes for Cygwin SF Patch #3511920
  * pstree can show PGIDs SF Patch #3471056
- This should fix the bug reported by Madhu</changelog>
  <changelog author="schwab@suse.de" date="1360411200">- peekfd hasn't been ported to aarch64 yet</changelog>
  <changelog author="schwab@suse.de" date="1381320000">- peekfd-m68k.patch: Port peekfd to m68k</changelog>
  <changelog author="p.drouand@gmail.com" date="1382529600">- Remove %fillup_prereq %insserv_prereq PreReq; package provides
  neither sysconfigfile or sysvinit script
- Use %lang_package instead of define a lang subpackage manually
- Use %configure instead of ./configure
- Don't define CC and CXX flags manually
- Remove redundant %clean section</changelog>
  <changelog author="werner@suse.de" date="1395662400">- Update to version 22.21
  * Missing comma in fuser(1) added Debian #702391
  * pstree uses COLUMN env variable Debian #717017
  * pstree shows proper thread names SF Bug#57
  * pstree shows namespace options SF Patch#30
  * killall.1 minor fixes SF Bug#59
  * peekfd for m68k SF Patch#31
  * Fixing some derefefed pointers SF Patch#32
  * Minor typos in man pages SF Bug#61 Bug#60
  * fuser -m and -M flags work either way Debian #606178
- Remove patch
  psmisc-22.20-pstree.patch as now part of upstream
  peekfd-m68k.patch as now part of upstream
- Port the patches
  psmisc-22.20-upstream.patch which becomes psmisc-22.21-upstream.patch
  psmisc-22.20.dif which becomes psmisc-22.21.dif
  psmisc-22.12-pstree.patch which becomes psmisc-22.21-pstree.patch</changelog>
  <changelog author="ro@suse.de" date="1398340800">- add patch to fix fuser -M option active all the time (bnc#874983)
  psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch</changelog>
  <changelog author="werner@suse.de" date="1427198400">- Add patch psmisc-22.21-boo908063.patch to avoid to close files
  which are never open (boo#908063)</changelog>
  <changelog author="schwab@suse.de" date="1432209600">- Replace negative list %nopeek with positive list %have_peekfd</changelog>
  <changelog author="werner@suse.de" date="1497960000">- Modify psmisc-22.21.dif to enforce the usage of `m' flag in
  sscanf() instead of `a' for allocation. Also avoid to small
  buffers and include sys/sysmacros.h for makedev macro.
- Add the patch psmisc-22.21-lessnfs.patch to support device
  files of mount points as well (boo#1044638)
- Add the patch psmisc-22.21-mntpt.patch to do strinfg comparision
  only for NFS shares</changelog>
  <changelog author="werner@suse.de" date="1497960001">- Update to version 23.0
  * killall: Fix process age race condition !11 Debian #822861
  * killall: only use scope of current namespace by default
  * killall: better parsing of command names
  * pstree: add cgroup namespaces !10
  * peekfd: Help give long options too !5
  * killall: correctly report when 32+ procs match !8
  * prtat: Remove duplicate options in man page !3 Debian #846387
  * pslog: New program to check what logs are open merge !1
  * fuser: increase path length for octal escaping SF [#37]
  * Make usage of linked lists of devices found in
    /proc/self/mountinfo optional
  * Make timeout() in timeout.c work with shared mmap to
    reduce the load due write/read the stat buffers
  * Add list_sort() to lists.h to be able to sort lists
  * fuser: Fixed typo for  -M flag. Debian #740275
  * pstree: by default doesn't show threadnames, use -t to show
    as it disables compaction. SF [#33] Debian #815902
  * pstree: Removed need for PATH_MAX Debian #750405
  * pstree: ignores disappeared processes. SF [#34]
  * killall: -o and -y work with -r flags. SF [#64]
  * m4/gettext.m4: Upgrade to gettext-0.19.4.
  * m4/iconv.m4: Upgrade to gettext-0.19.4.
  * m4/lib-ld.m4: Upgrade to gettext-0.19.4.
  * m4/lib-link.m4: Upgrade to gettext-0.19.4.
  * m4/lib-prefix.m4: Upgrade to gettext-0.19.4.
  * m4/nls.m4: Upgrade to gettext-0.19.4.
  * m4/po.m4: Upgrade to gettext-0.19.4.
  * m4/progtest.m4: Upgrade to gettext-0.19.4.
  * configure.ac (AM_GNU_GETTEXT_VERSION): Bump to 0.19.4.
- Make it build, that is create a po/POTFILES.in
- Remove obsolete patches
  * psmisc-22.21-boo908063.patch
  * psmisc-22.12-tigetstr.patch
  * psmisc-22.21-upstream.patch
  * psmisc-git-3638cc55b4d08851faba46635d737b24d016665b.patch
- Rename patch psmisc-22.21.dif which becomes psmisc-23.0.dif
- Make /bin/fuser a symblic link of /usr/bin/fuser (boo#1029973)
- Last revision was 78</changelog>
  <changelog author="werner@suse.de" date="1498651200">- Add patch psmisc-23.0-killall.patch to remove left over debug
  output in killall utility (boo#1046237)</changelog>
  <changelog author="werner@suse.de" date="1498651201">- Add patch psmisc-23.0-net.patch to reenable network support
  broken to my own upstream commit</changelog>
  <changelog author="werner@suse.de" date="1499256000">- Remove patches
  * psmisc-22.21-lessnfs.patch
  * psmisc-22.21-mntpt.patch
  * psmisc-23.0-net.patch
- Add patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  from https://gitlab.com/bitstreamout/psmisc/tree/mountinfo
  which is a heavily rework fuser used on NFS
  * Use mountinfo to be able to use the mount identity
    which allows to distinguish different mounts with the
    same device number as it happens with NFS shares.
  * Smaller cleanup as support of chroot environments
    and older systems.
  * Add support for name_to_handle_at() system call to
    get the real mount ID for each file
- Use test suite of psmisc in %check rpm section</changelog>
  <changelog author="werner@suse.de" date="1499342400">- Update patch
  0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch</changelog>
  <changelog author="werner@suse.de" date="1505736000">- Add patch psmisc-23.0-killall-signals.patch to fix boo#1058990
  by prior scanning for signal names in the arguments of killall</changelog>
  <changelog author="werner@suse.de" date="1507896000">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to run even on older kernels missing mnt_id tag in fdinfo</changelog>
  <changelog author="werner@suse.de" date="1526558400">- Modify patch 0001-Use-mountinfo-to-be-able-to-use-the-mount-identity.patch
  to let fuser -m also work for private mounts as well (boo#1093665)</changelog>
</package>
<package pkgid="3af3ad515db5bee5b6ef2af74d5c0f6c3b230805fbfaa100e95acf70b751ed77" name="putty" arch="src">
  <version epoch="0" ver="0.70" rel="lp150.4.3.1"/>
  <changelog author="jengelh@medozas.de" date="1311681600">- Initial package for build.opensuse.org</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1323604800">- update to upstream 0.62:
  * Security fix: PuTTY no longer retains passwords in memory by
  mistake.
  * Bug fix: Pageant now talks to both new-style clients (0.61 and
  above) and old-style (0.60 and below).
  * Bug fix: PuTTY no longer prints a spurious "Access denied"
  message when GSSAPI authentication fails.
  * Bug fix: PSCP and PSFTP now honour nonstandard port numbers in
  SSH saved sessions.
  * Bug fix: Pageant no longer leaks a file handle when an
  authentication fails.
  * Bug fix: PuTTYtel no longer crashes when saving a session.
  * Bug fix: PuTTY now draws underlines under the underlined text
  instead of sometimes putting them somewhere off to the right.
  * Bug fix: PuTTY now should not draw VT100 line drawing characters
  at the wrong vertical offset.
- fix SLE build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375790400">- update to 0.63
  * Security fix: prevent a nefarious SSH server or network attacker
    from crashing PuTTY at startup in three different ways by
    presenting a maliciously constructed public key and signature.
    [bnc#833567] CVE-2013-4852
  * Security fix: PuTTY no longer retains the private half of users'
    keys in memory by mistake after authenticating with them.
  * Revamped the internal configuration storage system to remove all
    fixed arbitrary limits on string lengths. In particular, there
    should now no longer be an unreasonably small limit on the number
    of port forwardings PuTTY can store.
  * Forwarded TCP connections which close one direction before the
    other should now be reliably supported, with EOF propagated
    independently in the two directions. This also fixes some instances
    of forwarding data corruption (if the corruption consisted of
    losing data from the very end of the connection) and some instances
    of PuTTY failing to close when the session is over (because it
    wrongly thought a forwarding channel was still active when it was
    not).
  * The terminal emulation now supports xterm's bracketed paste mode
    (allowing aware applications to tell the difference between typed
    and pasted text, so that e.g. editors need not apply inappropriate
    auto-indent).
  * You can now choose to display bold text by both brightening the
    foreground colour and changing the font, not just one or the other.
  * PuTTYgen will now never generate a 2047-bit key when asked for 2048
    (or more generally n?1 bits when asked for n).
  * Some updates to default settings: PuTTYgen now generates 2048-bit
    keys by default (rather than 1024), and PuTTY defaults to UTF-8
    encoding and 2000 lines of scrollback (rather than ISO 8859-1 and
    200).
  * Unix: PSCP and PSFTP now preserve the Unix file permissions, on
    copies in both directions.
  * Unix: dead keys and compose-character sequences are now supported.
  * Unix: PuTTY and pterm now permit font fallback (where glyphs not
    present in your selected font are automatically filled in from other
    fonts on the system) even if you are using a server-side X11 font
    rather than a Pango client-side one.
  * Bug fixes too numerous to list, mostly resulting from running the
    code through Coverity Scan which spotted an assortment of memory
    and resource leaks, logic errors, and crashes in various circumstances.
- packaging changes:
  * run make from base directory
  * run tests
  * remove putty-01-werror.diff (currently not needed)
  * remove putty-02-remove-gtk1.diff, putty-05-glib-deprecated.diff,
    putty-06-gtk2-indivhdr.diff (no longer needed)
  * refresh putty-03-config.diff
  * remove autoconf calls and requirements
  * package HTML documentation
  * package LICENCE file</changelog>
  <changelog author="jengelh@inai.de" date="1375790401">- Do signature verification</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Add 0001-Revert-the-default-for-font-bolding-style.patch
  (upstream patch fixing a cosmetic change introduced in 0.63)
- Add Conflict tag against pssh package (Parallel SSH) due to
  conflicting files in /usr/bin</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1425297600">- Update to new upstream release 0.64
  * Security fix: PuTTY no longer retains the private half of users'
  keys in memory by mistake after authenticating with them.
  [bnc#920167] (CVE-2015-2157)
  * Support for SSH connection sharing, so that multiple instances of
  PuTTY to the same host can share a single SSH connection instead
  of all having to log in independently.
  * Bug fix: IPv6 literals are handled sensibly throughout the suite,
  if you enclose them in square brackets to prevent the colons
  being mistaken for a :port suffix.
- Remove 0001-Revert-the-default-for-font-bolding-style.patch
  (merged upstream), putty-04-nodate.diff (no longer needed).</changelog>
  <changelog author="aj@ajaissle.de" date="1431518400">- Build icons and add a .desktop file for putty</changelog>
  <changelog author="jengelh@inai.de" date="1437998400">- Update to new upstream release 0.65
  * Cryptography speedup on 64-bit Unix platforms by using gcc and
  clang's __uint128_t built-in type.
  * Bug fix: PSFTP now returns a failure exit status if a command
  fails in a batch-mode script.
  * Bug fix: ESC [ 13 t can no longer elicit an invalid escape
  sequence as a response.</changelog>
  <changelog author="jengelh@inai.de" date="1447070400">- Update to new upstream release 0.66
  * Resolve integer overflow, buffer underrun in terminal emulator's
  ECH handling. [CVE-2015-5309, bnc#954191]
  * Resolve format string vulnerabilities</changelog>
  <changelog author="jengelh@inai.de" date="1457438400">- Update to new upstream release 0.67
  * resolved a security issue with the PSCP protocol implementation</changelog>
  <changelog author="bwiedemann@suse.com" date="1457438401">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 0.68
  * resolve integer overflow in the ssh_agent_channel_data
    [CVE-2017-6542, boo#1029256]
- Drop reproducible.patch, no longer applies</changelog>
  <changelog author="idonmez@suse.com" date="1493726400">- Update to new upstream release 0.69
  * You can now explicitly configure SSH terminal mode settings
    not to be sent to the server, if your server objects to them.
- Switch to gtk+3 interface, add gtk-buildfix.diff.</changelog>
  <changelog author="bwiedemann@suse.com" date="1493726401">- Add reproducible.patch to use convert -strip to not have timestamps
  in png files to make build fully reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Update to new upstream release 0.70
  * Update Unicode data to version 9
- Remove gtk-buildfix.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add missing python BuildRequire (for mkicon.py)</changelog>
  <changelog author="jengelh@inai.de" date="1513252801">- Update python BuildRequire to python-base</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Turn off -Werror.</changelog>
  <changelog author="jnwang@suse.com" date="1528372800">- Turn on -DNOT_X_WINDOWS, for Wayland system.
  Fixes a crash occurring in libX11 when running under
  Wayland [boo#1098962].</changelog>
</package>
<package pkgid="2468f0c534b41c2560dd0f654cbd89956a56c20faa106402b57aac0e97b1880b" name="putty" arch="x86_64">
  <version epoch="0" ver="0.70" rel="lp150.4.3.1"/>
  <changelog author="jengelh@medozas.de" date="1311681600">- Initial package for build.opensuse.org</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1323604800">- update to upstream 0.62:
  * Security fix: PuTTY no longer retains passwords in memory by
  mistake.
  * Bug fix: Pageant now talks to both new-style clients (0.61 and
  above) and old-style (0.60 and below).
  * Bug fix: PuTTY no longer prints a spurious "Access denied"
  message when GSSAPI authentication fails.
  * Bug fix: PSCP and PSFTP now honour nonstandard port numbers in
  SSH saved sessions.
  * Bug fix: Pageant no longer leaks a file handle when an
  authentication fails.
  * Bug fix: PuTTYtel no longer crashes when saving a session.
  * Bug fix: PuTTY now draws underlines under the underlined text
  instead of sometimes putting them somewhere off to the right.
  * Bug fix: PuTTY now should not draw VT100 line drawing characters
  at the wrong vertical offset.
- fix SLE build</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1375790400">- update to 0.63
  * Security fix: prevent a nefarious SSH server or network attacker
    from crashing PuTTY at startup in three different ways by
    presenting a maliciously constructed public key and signature.
    [bnc#833567] CVE-2013-4852
  * Security fix: PuTTY no longer retains the private half of users'
    keys in memory by mistake after authenticating with them.
  * Revamped the internal configuration storage system to remove all
    fixed arbitrary limits on string lengths. In particular, there
    should now no longer be an unreasonably small limit on the number
    of port forwardings PuTTY can store.
  * Forwarded TCP connections which close one direction before the
    other should now be reliably supported, with EOF propagated
    independently in the two directions. This also fixes some instances
    of forwarding data corruption (if the corruption consisted of
    losing data from the very end of the connection) and some instances
    of PuTTY failing to close when the session is over (because it
    wrongly thought a forwarding channel was still active when it was
    not).
  * The terminal emulation now supports xterm's bracketed paste mode
    (allowing aware applications to tell the difference between typed
    and pasted text, so that e.g. editors need not apply inappropriate
    auto-indent).
  * You can now choose to display bold text by both brightening the
    foreground colour and changing the font, not just one or the other.
  * PuTTYgen will now never generate a 2047-bit key when asked for 2048
    (or more generally n?1 bits when asked for n).
  * Some updates to default settings: PuTTYgen now generates 2048-bit
    keys by default (rather than 1024), and PuTTY defaults to UTF-8
    encoding and 2000 lines of scrollback (rather than ISO 8859-1 and
    200).
  * Unix: PSCP and PSFTP now preserve the Unix file permissions, on
    copies in both directions.
  * Unix: dead keys and compose-character sequences are now supported.
  * Unix: PuTTY and pterm now permit font fallback (where glyphs not
    present in your selected font are automatically filled in from other
    fonts on the system) even if you are using a server-side X11 font
    rather than a Pango client-side one.
  * Bug fixes too numerous to list, mostly resulting from running the
    code through Coverity Scan which spotted an assortment of memory
    and resource leaks, logic errors, and crashes in various circumstances.
- packaging changes:
  * run make from base directory
  * run tests
  * remove putty-01-werror.diff (currently not needed)
  * remove putty-02-remove-gtk1.diff, putty-05-glib-deprecated.diff,
    putty-06-gtk2-indivhdr.diff (no longer needed)
  * refresh putty-03-config.diff
  * remove autoconf calls and requirements
  * package HTML documentation
  * package LICENCE file</changelog>
  <changelog author="jengelh@inai.de" date="1375790401">- Do signature verification</changelog>
  <changelog author="jengelh@inai.de" date="1375876800">- Add 0001-Revert-the-default-for-font-bolding-style.patch
  (upstream patch fixing a cosmetic change introduced in 0.63)
- Add Conflict tag against pssh package (Parallel SSH) due to
  conflicting files in /usr/bin</changelog>
  <changelog author="jengelh@inai.de" date="1411473600">- Drop gpg-offline build-time requirement; this is now handled by
  the local source validator</changelog>
  <changelog author="jengelh@inai.de" date="1425297600">- Update to new upstream release 0.64
  * Security fix: PuTTY no longer retains the private half of users'
  keys in memory by mistake after authenticating with them.
  [bnc#920167] (CVE-2015-2157)
  * Support for SSH connection sharing, so that multiple instances of
  PuTTY to the same host can share a single SSH connection instead
  of all having to log in independently.
  * Bug fix: IPv6 literals are handled sensibly throughout the suite,
  if you enclose them in square brackets to prevent the colons
  being mistaken for a :port suffix.
- Remove 0001-Revert-the-default-for-font-bolding-style.patch
  (merged upstream), putty-04-nodate.diff (no longer needed).</changelog>
  <changelog author="aj@ajaissle.de" date="1431518400">- Build icons and add a .desktop file for putty</changelog>
  <changelog author="jengelh@inai.de" date="1437998400">- Update to new upstream release 0.65
  * Cryptography speedup on 64-bit Unix platforms by using gcc and
  clang's __uint128_t built-in type.
  * Bug fix: PSFTP now returns a failure exit status if a command
  fails in a batch-mode script.
  * Bug fix: ESC [ 13 t can no longer elicit an invalid escape
  sequence as a response.</changelog>
  <changelog author="jengelh@inai.de" date="1447070400">- Update to new upstream release 0.66
  * Resolve integer overflow, buffer underrun in terminal emulator's
  ECH handling. [CVE-2015-5309, bnc#954191]
  * Resolve format string vulnerabilities</changelog>
  <changelog author="jengelh@inai.de" date="1457438400">- Update to new upstream release 0.67
  * resolved a security issue with the PSCP protocol implementation</changelog>
  <changelog author="bwiedemann@suse.com" date="1457438401">- Add reproducible.patch to fix build-compare</changelog>
  <changelog author="jengelh@inai.de" date="1489579200">- Update to new upstream release 0.68
  * resolve integer overflow in the ssh_agent_channel_data
    [CVE-2017-6542, boo#1029256]
- Drop reproducible.patch, no longer applies</changelog>
  <changelog author="idonmez@suse.com" date="1493726400">- Update to new upstream release 0.69
  * You can now explicitly configure SSH terminal mode settings
    not to be sent to the server, if your server objects to them.
- Switch to gtk+3 interface, add gtk-buildfix.diff.</changelog>
  <changelog author="bwiedemann@suse.com" date="1493726401">- Add reproducible.patch to use convert -strip to not have timestamps
  in png files to make build fully reproducible</changelog>
  <changelog author="jengelh@inai.de" date="1499774400">- Update to new upstream release 0.70
  * Update Unicode data to version 9
- Remove gtk-buildfix.diff (merged upstream)</changelog>
  <changelog author="jengelh@inai.de" date="1513252800">- Add missing python BuildRequire (for mkicon.py)</changelog>
  <changelog author="jengelh@inai.de" date="1513252801">- Update python BuildRequire to python-base</changelog>
  <changelog author="jengelh@inai.de" date="1520078400">- Turn off -Werror.</changelog>
  <changelog author="jnwang@suse.com" date="1528372800">- Turn on -DNOT_X_WINDOWS, for Wayland system.
  Fixes a crash occurring in libX11 when running under
  Wayland [boo#1098962].</changelog>
</package>
<package pkgid="2b8c521f8dc4a27b4c2f1354c1c1d2f273daea391aa2302b50f6f72348065225" name="python-Django" arch="src">
  <version epoch="0" ver="2.0.8" rel="lp150.2.3.1"/>
  <changelog author="aplanas@suse.com" date="1462276800">- Update to 1.9.6
  Bugfixes
  * Added support for relative path redirects to the test client and
    to SimpleTestCase.assertRedirects() because Django 1.9 no longer
    converts redirects to absolute URIs (#26428).
  * Fixed TimeField microseconds round-tripping on MySQL and SQLite
    (#26498).
  * Prevented makemigrations from generating infinite migrations for a
    model field that references a functools.partial (#26475).
  * Fixed a regression where SessionBase.pop() returned None rather
    than raising a KeyError for nonexistent values (#26520).
  * Fixed a regression causing the cached template loader to crash
    when using template names starting with a dash (#26536).
  * Restored conversion of an empty string to null when saving values
    of GenericIPAddressField on SQLite and MySQL (#26557).
  * Fixed a makemessages regression where temporary .py extensions
    were leaked in source file paths (#26341).</changelog>
  <changelog author="aplanas@suse.com" date="1470744000">- Update to 1.9.9
  Bugfixes
  * Fixed invalid HTML in template postmortem on the debug page
    (#26938).
  * Fixed some GIS database function crashes on MySQL 5.7 (#26657).
- Update to 1.9.8
  Fix XSS in admin?s add/change related popup (bsc#988420)
  Unsafe usage of JavaScript?s Element.innerHTML could result in XSS
  in the admin?s add/change related popup. Element.textContent is now
  used to prevent execution of the data.
  The debug view also used innerHTML. Although a security issue wasn?t
  identified there, out of an abundance of caution it?s also updated
  to use textContent.
  Bugfixes
  * Fixed missing varchar/text_pattern_ops index on CharField and
    TextField respectively when using AddField on PostgreSQL (#26889).
  * Fixed makemessages crash on Python 2 with non-ASCII file names
    (#26897).
- Update to 1.9.7
  Bugfixes
  * Removed the need for the request context processor on the admin
    login page to fix a regression in 1.9 (#26558).
  * Fixed translation of password validators? help_text in forms
    (#26544).
  * Fixed a regression causing the cached template loader to crash
    when using lazy template names (#26603).
  * Fixed on_commit callbacks execution order when callbacks make
    transactions (#26627).
  * Fixed HStoreField to raise a ValidationError instead of crashing
    on non-dictionary JSON input (#26672).
  * Fixed dbshell crash on PostgreSQL with an empty database name
    (#26698).
  * Fixed a regression in queries on a OneToOneField that has to_field
    and primary_key=True (#26667).</changelog>
  <changelog author="sbahling@suse.com" date="1474718400">- Change Requires: python-Pillow to python-imaging for compatibility
  with SLE-12 which provides PIL instead of Pillow.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1480680000">- Update to 1.9.12
  Bugfixes
  * Quoted the Oracle test user?s password in queries to fix the ?ORA-00922: missing
    or invalid option? error when the password starts with a number or
    special character (#27420)
  * DNS rebinding vulnerability when DEBUG=True
  * CSRF protection bypass on a site with Google Analytics</changelog>
  <changelog author="michal@cihar.com" date="1485864000">- Update to 1.10.5
  * See https://docs.djangoproject.com/en/1.10/releases/1.10/
  * Full text search for PostgreSQL
  * New-style middleware
  * Official support for Unicode usernames</changelog>
  <changelog author="appleonkel@opensuse.org" date="1488369600">- Update to 1.10.6
  Bugfixes
  * Fixed ClearableFileInput?s ?Clear? checkbox on model form fields where the
    model field has a default
  * Fixed RequestDataTooBig and TooManyFieldsSent exceptions crashing rather than
    generating a bad request response
  * Fixed a crash on Oracle and PostgreSQL when subtracting DurationField or
    IntegerField from DateField
  * Fixed query expression date subtraction accuracy on PostgreSQL for differences
    large an a month
  * Fixed a GDALException raised by GDALClose on GDAL &gt;= 2.0</changelog>
  <changelog author="appleonkel@opensuse.org" date="1491307200">- Update to 1.10.7
  Bugfixes
  * Made admin?s RelatedFieldWidgetWrapper use the wrapped widget?s
    value_omitted_from_data() method (#27905)
  * Fixed model form default fallback for SelectMultiple (#27993)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493899200">- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Don't provide python2-django or python2-South, singlespec
  packages should use correct name.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494244800">- django-admin.py should be the master, not django-admin.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502280000">- Fix building on older Python versions.</changelog>
  <changelog author="tbechtold@suse.com" date="1502366400">- update to version 1.11.4:
  * Fixed #27939 -- Updated OpenLayersWidget.map_srid for OpenLayers 3.
  * Fixed #27956 -- Fixed display of errors in an {% extends %} child.
  * Updated various links in docs to avoid redirects
  * Fixed typo in docs/topics/auth/default.txt.
  * Double quoted HTML attributes in widget docs
  * Fixed #28303 -- Prevented localization of attribute values in the DTL attrs.html widget template.
  * Added stub release notes for 1.11.3.
  * Documented OSMWidget.default_lat/lon.
  * Fixed #28101 -- Fixed a regression with nested __in subquery lookups and to_field.
  * Bumped version for 1.11.4 release.
  * Bumped version for 1.11.3 release.
  * Updated translations from Transifex
  * Fixed #28039 -- Fixed crash in BaseGeometryWidget.subwidgets().
  * Fixed #28242 -- Moved ImageField file extension validation to the form field.
  * Made docs/topics/migrations.txt use single quotes consistently.
  * Fixed #28355 -- Fixed widget rendering of non-ASCII date/time formats on Python 2.
  * Updated name of topics/db/queries link on index.
  * Fixed #28025 -- Fixed typo in docs/ref/models/querysets.txt.
  * Fixed #28043 -- Prevented AddIndex and RemoveIndex from mutating model state.
  * Fixed #28207 -- Fixed contrib.auth.authenticate() if multiple auth backends don't accept a request.
  * Fixed #28361 -- Fixed possible time-related failure in was_published_recently() tutorial test.
  * Fixed #28265 -- Prevented renderer warning on Widget.render() with **kwargs.
  * Fixed typo in docs/topics/testing/advanced.txt.
  * Fixed #28125 -- Clarified 1.11 release note about Template.render() prohibiting non-dict context.
  * Refs #18974 -- Added stacklevel for permalink() deprecation.
  * Fixed #28350 -- Fixed UnboundLocalError crash in RenameField with nonexistent field.
  * Fixed #28051 -- Made migrations respect Index's name argument.
  * Fixed #28420 -- Doc'd 'is' comparison restriction for User.is_authenticated/anonymous.
  * Added release date for 1.11.4.
  * Refs #28174 -- Fixed autoreload test crash on Python 2/non-ASCII path.
  * Fixed #28389 -- Fixed pickling of LazyObject on Python 2 when wrapped object doesn't have __reduce__().
  * Fixed #28148 -- Doc'd ImageField name validation concerns with the test client.
  * Added stub release notes for 1.11.2.
  * Fixed #27890 -- Fixed FileNotFoundError cleanup exception in runtests.py on Python 3.6+.
  * Fixed #28138 -- Used output type handler instead of numbersAsStrings on Oracle cursor.
  * Fixed widgets module path in docs/ref/contrib/gis/forms-api.txt.
  * Fixed #27947 -- Doc'd that model Field.error_messages often don't propagate to forms.
  * Fixed #28067 -- Clarified __str__() return type when using python_2_unicode_compatible().
  * Fixed docstring typo in django/contrib/admin/actions.py.
  * Fixed #28102 -- Doc'd how to compute path to built-in widget template directories.
  * Fixed #28352 -- Corrected QuerySet.values_list() return type in docs examples.
  * Fixed #28181 -- Added detection for GDAL 2.1 and 2.0.
  * Refs #23853 -- Updated sql.query.Query.join() docstring.
  * Added a test for Model._meta._property_names.
  * Refs #27919 -- Changed Widget.get_context() attrs kwarg to an arg.
  * Fixed #28415 -- Clarified what characters ASCII/UnicodeUsernameValidator accept.
  * Fixed #28074 -- Doc'd template-based widget rendering changes for contrib.gis.
  * Fixed #28278 -- Fixed invalid HTML for a required AdminFileWidget.
  * Added content_type filtering in Permission querying example.
  * Corrected FileExtensionValidator doc regarding the value being validated.
  * Fixed #27960 -- Set errcheck=False for GDALAllRegister to prevent crash.
  * Fixed #28097 -- Fixed layout of ReadOnlyPasswordHashWidget.
  * Fixed #27969 -- Fixed models.Field.formfield() setting 'disabled' for fields with choices.
  * Post-release version bump.
  * Fixed #28298 -- Prevented a primary key alteration from adding a foreign key constraint if db_constraint=False.
  * Refs #28192 -- Fixed documentation of ChoiceField choices requirement
  * Fixed #27966 -- Bumped required psycopg2 version to 2.5.4.
  * Linked GIS QuerySet API docs to corresponding PostGIS docs.
  * Fixed #27974 -- Kept resolved templates constant during one rendering cycle.
  * Refs #28100 -- Fixed URL in el, es_MX, and pt auth translations
  * Fixed typo in docs/ref/request-response.txt.
  * Fixed #27963 -- Removed unneeded docstring example in contributing docs.
  * Added stub release notes for security releases.
  * Fixed #28349 -- Doc'd how to upgrade Django from LTS to LTS.
  * Fixed typo in docs/ref/forms/fields.txt.
  * Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().
  * Fixed #28170 -- Fixed file_move_safe() crash when moving files to a CIFS mount.
  * Fixed broken links to Oracle docs.
  * Fixed #27554 -- Fixed prefetch_related() crash when fetching relations in nested Prefetches.
  * Added links and cosmetic edits to docs/ref/request-response.txt.
  * Added stub release notes for 1.11.1.
  * Fixed #28079 -- Restored "No POST data" (rather than an empty table) in HTML debug page.
  * Removed incorrect "required" attribute in docs/ref/forms/fields.txt.
  * Fixed #28176 -- Restored the uncasted option value in ChoiceWidget template context.
  * Refs #24423 -- Readded inadvertently deleted i18n tests.
  * Fixed #27965 -- Fixed precision comparison in a geoforms test (refs #27939).
  * Corrected post-release version bump.
  * Made runtests.py run gis_tests only when using a GIS database backend.
  * Fixed #28230 -- Allowed DjangoJsonEncoder to serialize CallableBool.
  * Fixed broken link to QUnit docs.
  * Removed MySQL (unsupported) from Perimeter docs.
  * Fixed #28266 -- Fixed typo in docs/ref/models/instances.txt.
  * Fixed #28139 -- Added another level of headings in the topics index.
  * Fixed #28003 -- Doc'd what an auto-created OneToOneField parent_link looks like.
  * Fixed #28160 -- Prevented hiding GDAL exceptions when it's not installed.
  * Updated man page for Django 1.11.
  * Fixed #27988 -- Fixed typo in docs/ref/django-admin.txt.
  * Fixed #28199 -- Fixed Subquery generating unnecessary/invalid CAST.
  * Fixed #28122 -- Fixed crash when overriding views.static.directory_index()'s template.
  * Fixed AppRegistryNotReady error when running gis_tests in isolation on PostGIS.
  * Fixed #28435 -- Removed inaccurate warning about SECURE_HSTS_PRELOAD.
  * Fixed #28040 -- Updated SplitArrayWidget to use template-based widget rendering.
  * Fixed #28269 -- Fixed Model.__init__() crash on models with a field that has an instance only descriptor.
  * Tested EmailMessage(attachments=[MIMEText])
  * Clarified return value of NumGeometries GIS function.
  * Refs #27935 -- Fixed BrinIndex.max_name_length if a project's default database isn't PostgreSQL.
  * Fixed #28058 -- Restored empty BoundFields evaluating to True.
  * Replaced "not A== B" with "A != B" in docs/howto/writing-migrations.txt.
  * Added CVE-2017-7233,4 to the security release archive.
  * Fixed #28204 -- Fixed MultipleObjectMixin.paginate_queryset() crash on Python 2 if InvalidPage message contains non-ASCII.
  * Fixed #27935 -- Fixed crash with BrinIndex name &gt; 30 characters.
  * Fixed #28293 -- Fixed union(), intersection(), and difference() when combining with an EmptyQuerySet.
  * Fixed #28222 -- Allowed settable properties in QuerySet.update_or_create()/get_or_create() defaults.
  * Refs #27556, #27488 -- Updated support backends docs for isvalid lookup.
  * Fixed nondeterministic ordering test failure in model_forms.
  * Fixed #28345 -- Applied limit_choices_to during ModelForm.__init__().
  * Fixed #27981 -- Doc'd date/time filter l10n changes in refs #25758.
  * Made a few cosmetic updates to "Migrations that add unique fields".
  * Bumped version for 1.11 release.
  * Fixed #28004 -- Doc'd how to create migrations for an app without a migrations directory.
  * Fixed #28202 -- Fixed FieldListFilter.get_queryset() crash on invalid input.
  * Fixed #27949 -- Doc'd how OpenLayers 3 widgets work.
  * Pass type to sql_alter_column_* where it was missing.
  * Fixed #27866 -- Made ChoiceWidget.format_value() return a list
  * Fixed #28308 -- Doc'd removal of Select.render_option() (refs #15667).
  * Fixed #28178 -- Changed contrib.gis to raise ImproperlyConfigured if gdal isn't installed.
  * Fixed #28284 -- Prevented Paginator's unordered object list warning from evaluating a QuerySet.
  * Fixed #28209 -- Made date-based generic views return a 404 rather than crash when given an out of range date.
  * Fixed #28161 -- Fixed return type of ArrayField(CITextField()).
  * Corrected docs regarding MySQL support of Length GIS function.
  * Fixed #28175 -- Fixed __in lookups on a foreign key when using the foreign key's parent model as the lookup value.
  * Refs #18247 -- Fixed SQLite QuerySet filtering on decimal result of Least and Greatest.
  * Refs #28207 -- Fixed contrib.auth.authenticate() if 'backend' is in the credentials.
  * Fixed #27644 -- Doc'd FileSystemStorage.get_created_time().
  * Added test for intersection() when combining with a queryset raising EmptyResultSet.
  * Fixed #28197 -- Fixed introspection of index field ordering on PostgreSQL.
  * Removed extra characters in docs header underlines.
  * Fixed GEOSGeometry reference in GIS tutorial.
  * Refs #28066 -- Fixed Python 2 failures in sessions_tests.
  * Removed obsolete Widget.format_output() in tests.
  * Fixed #28059 -- Restored class attribute in &lt;ul&gt; of widgets that use multiple_input.html.
  * Fixed typo in docs/ref/contrib/postgres/fields.txt.
  * Refs #27025 -- Fixed "invalid escape sequence" warning in auth_tests on Python 3.6.
  * Fixed #28031 -- Removed notes about old uWSGI/sentry versions (refs #20537).
  * Removed unexpected initial attribute in data migration examples.
  * Renamed "Mac OS X" to "macOS" in docs.
  * Sorted imports per isort 4.2.9.
  * Refs #28138 -- Added release notes for d52577b62b3138674807ac74251fab7faed48331.
  * Back to the future.
  * Fixed #27993 -- Fixed model form default fallback for SelectMultiple.
  * Refs #27866 -- Adapted backport for Python 2 compatibility
  * Removed unused links in docs/internals/contributing/triaging-tickets.txt.
  * Clarified QuerySet.iterator()'s docs on server-side cursors.
  * Fixed #28096 -- Allowed prefetch calls with ModelIterable subclasses
  * Fixed #28414 -- Fixed ClearableFileInput rendering as a subwidget of MultiWidget.
  * Corrected REPL example in forms docs for Python 3.
  * Refs #28181 -- Corrected detection of GDAL 2.1 on Windows.
  * Fixed #28075 -- Prevented ChoiceWidget from localizing option values.
  * Fixed #28282 -- Fixed class-based indexes name for models that only inherit Model.
  * Fixed #28038 -- Restored casting to text of builtin lookups on PostgreSQL.
  * Fixed #28418 -- Fixed queryset crash when using a GenericRelation to a proxy model.
  * Fixed #28062 -- Added a setting to disable server-side cursors on PostgreSQL.
  * Fixed #28105 -- Fixed crash in BaseGeometryWidget.get_context() when overriding existing attrs.
  * Refs #28160 -- Skipped a GeoManager test if not using a GIS database backend.
  * Fixed #28157 -- Fixed choice ordering in form fields with grouped and non-grouped options.
  * Fixed #28095 -- Doc'd Widget.build_attrs() signature change in Django 1.11.
  * Fixed a forms test after updated translations.
  * Fixed 403 link in docs/ref/contrib/gis/install/spatialite.txt.
  * Simplified schema.tests with assertForeignKeyExists()/assertForeignKeyNotExists().
  * Fixed #28336 -- Fixed typo in docs/ref/settings.txt.
  * Fixed #28378 -- Fixed union() and difference() when combining with a queryset raising EmptyResultSet.
  * Refs #28052 -- Cleaned up some indexes in schema tests.
  * Fixed #28047 -- Fixed QuerySet.filter() crash when it uses the name of a OneToOneField pk.
  * Added release date for 1.11.1.
  * Fixed #28327 -- Removed contradictory description of mod_wsgi docs.
  * Clarified "newly-introduced features" in the supported versions policy.
  * Fixed docs build with Sphinx 1.6.
  * Fixed #28239 -- Removed docs for a removed arg of template.Context.
  * Bumped version for 1.11.2 release.
  * Refs #28066 -- Fixed nondeterministic ordering test failure in sessions_tests.
  * Updated postgis.net and gaia-gis.it links to https.
  * Fixed typos in docs/topic/db/search.txt.
  * Fixed #28174 -- Fixed crash in runserver's autoreload with Python 2 on Windows with non-str environment variables.
  * Fixed typos in docs/howto/static-files/index.txt.
  * Fixed #28294 -- Doc'd request/args/kwargs attributes of class-based views.
  * Fixed #27967 -- Fixed KeyError in admin's inline form with inherited non-editable pk.
  * Fixed db backend discovery in admin_scripts tests.
  * Fixed outdated TIME_FORMAT in docs/ref/templates/builtins.txt.
  * Fixed #26028 -- Added overriding templates howto.
  * Updated was_published_recently() tutorial test to check boundary condition.
  * Fix a typo in django/db/transaction.py
  * Fixed #28109 -- Corrected the stack level of unordered queryset pagination warnings.
  * Fixed #28142 -- Fixed is_safe_url() crash on invalid IPv6 URLs.
  * Refs #22397 -- Removed model in test cleanup
  * Fixed #28052 -- Prevented dropping Meta.indexes when changing db_index to False.
  * Fixed #18485 -- Doc'd behavior of PostgreSQL when manually setting AutoField.
  * Updated core translations from Transifex
  * Fixed #28166 -- Fixed Model._state.db on MTI parent model after saving child model.
  * Added missing import in docs/topics/db/queries.txt.
  * Refs #27919 -- Passed ChoiceWidget.create_option() kwargs as expected.
  * Fixed #28229 -- Fixed the value of LoginView's "next" template variable.
  * Fixed #27975 -- Fixed crash if ModelChoiceField's queryset=None.
  * Added release date for 1.11.2.
  * Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.
  * Fixed #28159 -- Fixed BaseInlineFormSet._construct_form() crash when using save_as_new.
  * Removed an obsolete temporal reference in docs/faq/general.txt.
  * Fixed #28042 -- Fixed crash when using a two-tuple in EmailMessage's attachments arg.
  * Fixed #27945 -- Clarified that RegexValidator searches with the regex.
  * Linked GIS functions docs to corresponding PostGIS docs.
  * Refs #17453 -- Fixed broken link to #django IRC logs.
  * Fixed gis_tests.geoapp test with incorrect geodetic coordinates.
  * Fixed #28066 -- Prevented SessionBase.cycle_key() from discarding data.
  * Fixed #27730 -- Doc'd that template vars created outside a block can't be used in it.
  * Fixed #28069 -- Moved setup_test_environment() warning in tutorial 5.
  * Fixed #28130 -- Fixed formset min_num validation with initial, unchanged forms.
  * Fixed #28091 -- Re-raised original exception when closing cursor cleanup fails
  * Clarified backend support of Area GIS function.
  * Fixed #28387 -- Fixed has_changed() for disabled form fields that subclass it.
  * Fixed #27915 -- Allowed Meta.indexes to be defined in abstract models.
  * Fixed #26755 -- Fixed test_middleware_classes_headers if Django source isn't writable.
  * Fixed #28188 -- Fixed crash when pickling model fields.
  * Fixed typo in docs/ref/models/querysets.txt.
  * Pointed Dive into Python links to python3 site
  * Refs #25240 -- Added ExtractWeek examples.
  * Added some shell output in tutorial 2.
  * Removed inappropriate highlighting in committing-code.txt.
  * Fixed #28399 -- Fixed QuerySet.count() for union(), difference(), and intersection() queries.
  * Fixed #28212 -- Allowed customizing the port that LiveServerTestCase uses.
  * Fixed flake8 warning on Python 2.
  * Clarified meaning of "Optional" in auth.models.User field docs.
  * Clarified HStoreField model/form difference in 1.11 release notes.
  * Removed self from method signatures in docs.
  * Added stub release notes for 1.11.4.
  * Updated tests after French translation update
  * Fixed #27603 -- Fixed AsKML when queryset is evaluated more than once.
  * Fixed #28262 -- Fixed incorrect DisallowedModelAdminLookup when a nested reverse relation is in list_filter.
  * Fixed #27434 -- Doc'd how to raise a model validation error for a field not in a model form.
  * Refs #21415 -- Fixed contrib.humanize translations for es_AR
  * Fixed #27655 -- Added some guidelines to the coding style docs.
  * Updated contrib translations from Transifex
  * Removed nonexistent methods from File's docs.
  * Doc'd the need to remove default ordering on Subquery aggregates.
  * Fixed broken link to mysqlclient docs.
  * Fixed #28210 -- Fixed Model._state.adding on MTI parent model after saving child model.
  * Removed usage of deprecated sphinx.util.compat.Directive.
  * Refs #28100 -- Added 1.11.1 release note for e6bfd3d751278d7cfd09af1120c4bbce509c05da.
  * Fixed #28190 -- Clarifed how include/extends treat template names.
  * Refs #26294 -- Fixed typo in docs/ref/django-admin.txt.
  * Refs #28091 -- Fixed typo and rephrased 1.11.1 release note.
  * Fixed typo in docs/ref/class-based-views/mixins-single-object.txt.
  * Bumped version for 1.11.1 release.
  * Added release date for 1.11.3.
  * Bumped version for 1.11 release candidate 1.
  * Simplified tutorial's test names and docstrings.
  * Fixed typo in django/db/backends/base/schema.py comment.
  * Fixed #28233 -- Used a simpler example in the aggregation "cheat sheet" docs.
- Require python-pytz and Recommend python-bcrypt</changelog>
  <changelog author="toddrme2178@gmail.com" date="1505908800">- update to version 1.11.5
  * CVE-2017-12794: Possible XSS in traceback section of technical 500 debug page
  * Fixed GEOS version parsing if the version has a commit hash at the end (new
    in GEOS 3.6.2) (:ticket:`28441`).
  * Added compatibility for ``cx_Oracle`` 6 (:ticket:`28498`).
  * Fixed select widget rendering when option values are tuples (:ticket:`28502`).
  * Django 1.11 inadvertently changed the sequence and trigger naming scheme on
    Oracle. This causes errors on INSERTs for some tables if
    ``'use_returning_into': False`` is in the ``OPTIONS`` part of ``DATABASES``.
    The pre-1.11 naming scheme is now restored. Unfortunately, it necessarily
    requires an update to Oracle tables created with Django 1.11.[1-4]. Use the
    upgrade script in :ticket:`28451` comment 8 to update sequence and trigger
    names to use the pre-1.11 naming scheme.
  * Added POST request support to ``LogoutView``, for equivalence with the
    function-based ``logout()`` view (:ticket:`28513`).
  * Omitted ``pages_per_range`` from ``BrinIndex.deconstruct()`` if it's ``None``
    (:ticket:`25809`).
  * Fixed a regression where ``SelectDateWidget`` localized the years in the
    select box (:ticket:`28530`).
  * Fixed a regression in 1.11.4 where ``runserver`` crashed with non-Unicode
    system encodings on Python 2 + Windows (:ticket:`28487`).
  * Fixed a regression in Django 1.10 where changes to a ``ManyToManyField``
    weren't logged in the admin change history (:ticket:`27998`) and prevented
    ``ManyToManyField`` initial data in model forms from being affected by
    subsequent model changes (:ticket:`28543`).
  * Fixed non-deterministic results or an ``AssertionError`` crash in some
    queries with multiple joins (:ticket:`26522`).
  * Fixed a regression in ``contrib.auth``'s ``login()`` and ``logout()`` views
    where they ignored positional arguments (:ticket:`28550`).</changelog>
  <changelog author="tbechtold@suse.com" date="1513080000">- update to 1.11.8:
  * Fixed #28488 -- Reallowed error handlers to access CSRF tokens.
  * Fixed #28856 -- Fixed a regression in caching of a GenericForeignKey
    pointing to a MTI model.
  * Fixed #28597 -- Fixed crash with the name of a model's autogenerated primary
    key in an Index's fields.
  * Added stub release notes for 1.11.7.
  * Fixed #28305 -- Fixed "Cannot change column 'x': used in a foreign key constraint"
    crash on MySQL with a sequence of AlterField or RenameField operations.
  * Fixed #28689 -- Fixed unquoted table names in Subquery SQL when using OuterRef.
  * Added assertion helpers for PostgreSQL's server-side cursor tests.
  * Fixed #28729 -- Replaced a numbered list with unordered list in TemplatesSetting docs.
  * Fixed #28786 -- Doc'd middleware ordering considerations due to
    CommonMiddleware setting Content-Length.
  * Added release date for 1.11.8.
  * Fixed #28702 -- Made query lookups for CIText fields use citext.
  * Added 2017-12794 to the security release archive.
  * Fixed typo in docs/topics/cache.txt.
  * Bumped version for 1.11.6 release.
  * Added release date for 1.11.6.
  * Fixed #28648 -- Corrected typo in docs/topics/db/queries.txt.
  * Bumped version for 1.11.7 release.
  * Added stub release notes for 1.11.8.
  * Fixed #28848 -- Fixed SQLite/MySQL crash when ordering by a filtered
    subquery that uses nulls_first/nulls_last.
  * Fixed typo in docs/topics/db/aggregation.txt.
  * Fixed #28802 -- Fixed typo in docs/topics/auth/default.txt.
  * Fixed typo in docs/topics/forms/media.txt.
  * Bumped version for 1.11.8 release.
  * Fixed typo in docs/ref/models/querysets.txt.
  * Fixed test failures due to ordering differences on PostgreSQL 10.
  * Fixed #28710 -- Fixed the Basque DATE_FORMAT string
  * Added stub release notes for 1.11.6.
  * Fixed #28747 -- Fixed typos in django/conf/global_settings.py comments.
  * Fixed #28817 -- Made QuerySet.iterator() use server-side cursors after
    values() and values_list().
  * Post-release version bump.
  * Fixed #28792 -- Fixed index name truncation of namespaced tables.
  * Fixed #28781 -- Added QuerySet.values()/values_list() support for union(),
    difference(), and intersection().
  * Fixed #28722 -- Made QuerySet.reverse() affect nulls_first/nulls_last.
  * Refs #28710 -- Simplified l10n format test
  * Initialized CsrfViewMiddleware once in csrf_tests.
  * Added release date for 1.11.7.
  * Linked to prefetch_related_objects func in DB optimization docs.
  * Fixed #28645 -- Reallowed AuthenticationForm to raise the inactive user
    error when using ModelBackend.
  * Fixed #28653 -- Added missing ForeignKey.on_delete argument in docs.
  * Fixed #28561 -- Removed inaccurate docs about QuerySet.order_by() and joins.
  * Fixed #28555 -- Made CharField convert whitespace-only values to the
    empty_value when strip is enabled.
  * Fixed #28601 -- Prevented cache.get_or_set() from caching None if default
    is a callable that returns None.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1513080001">- update to 2.0
  * drop python 2 support
  * Simplified URL routing syntax
  * Mobile-friendly contrib.admin
  * Window expressions
  * Removed support for bytestrings in some places
  * Dropped support for Oracle 11.2
- Please read Release Notes - https://docs.djangoproject.com/en/2.0/releases/2.0/</changelog>
  <changelog author="tbechtold@suse.com" date="1518004800">- update to 2.0.2 (bsc#1077714, CVE-2018-6188):
  * Fixed #28883 -- Doc'd that the uuid URL path converter matches lowercase only letters.
  * Fixed a GeoIP2 test failure with the latest GeoIP2 database.
  * Added stub release notes for 2.0.1.
  * Bumped version for 2.0.2 release.
  * Fixed location of spatialite_source label.
  * Fixed #28958 -- Fixed admin changelist crash when using a query expression in the page's ordering.
  * Fixed #28231 -- Doc'd that QuerySet.bulk_create() casts objs to a list.
  * Fixed #29032 -- Fixed an example of using expressions in QuerySet.values().
  * Disambiguated "settings" in SpatiaLite note.
  * Fixed typo in docs/topics/testing/advanced.txt.
  * Post-release version bump.
  * Refs #25604 -- Removed docs for makemigrations --exit.
  * Fixed #29002 -- Corrected cached template loader docs about when it's automatically enabled.
  * Fixed typo in TemplateCommand argument help text.
  * Added stub release notes for 1.11.9.
  * Fixed #28915 -- Prevented SQLite from truncating trailing zeros in the fractional part of DecimalField.
  * Refs #29086 -- Doc'd how to detect bytestring mistakes.
  * Fixed #28886 -- Updated prefix for example django.contrib.auth.urls URLs.
  * Fixed #29081 -- Clarified comments in QuerySet.select_related() example.
  * Refs #27985 -- Reallowed using __exact=None as an alias for __isnull=True if a custom lookup class with lookup_name != None is registered as the exact lookup.
  * Refs #28876 -- Fixed incorrect class-based model index name generation for models with quoted db_table.
  * Removed 'development' word in contributing docs
  * Fixed #29055 -- Doc'd that escapejs doesn't make template literals safe.
  * Fixed #29016 -- Fixed incorrect foreign key nullification on related instance deletion.
  * Fixed grammar in docs/releases/2.0.txt.
  * Fixed #29071 -- Fixed contrib.auth.authenticate() crash if a backend doesn't accept a request but a later one does.
  * Fixed #28944 -- Fixed crash when chaining values()/values_list() after QuerySet.select_for_update(of=()).
  * Fixed #29091 -- Fixed makemigrations crash if migrations directory doesn't have __init__.py.
  * Fixed #28898 -- Corrected admin check to allow a OneToOneField in ModelAdmin.autocomplete_fields.
  * Fixed #28896 -- Reallowed filtering a queryset with GeometryField=None.
  * Fixed #28891 -- Documented Origin's loader attribute.
  * Confirmed support for PostGIS 2.4.
  * Wrapped an import per isort.
  * Added release date for 2.0.1 and 1.11.9.
  * Fixed #28884 -- Fixed crash on SQLite when renaming a field in a model referenced by a ManyToManyField.
  * Fixed "template tag" spelling in docs.
  * Fixed #28947 -- Fixed crash when coercing a translatable URL pattern to str.
  * Fixed typo in docs/topics/i18n/translation.txt.
  * Refs #28932 -- Skipped the failing test for refs #28915 on Oracle.
  * Refs #25181 -- Updated timezone.now() docs about obtaining the time in the current time zone.
  * Updated documented mysqlclient requirement to 1.3.7.
  * Fixed #28885 -- Fixed hidden content at the bottom of the "The install worked successfully!" page for some languages.
  * Fixed #28403 -- Added missing formats in FORMAT_MODULE_PATH docs.
  * Fixed #29067 -- Fixed regression in QuerySet.values_list(..., flat=True) followed by annotate().
  * Removed note in tutorial about bypassing manage.py.
  * Fixed #28929 -- Corrected QUnit examples.
  * Refs #28958 -- Added a test for ModelAdmin with query expressions in ordering.
  * Updated various links in docs to use HTTPS.
  * Expanded docs for AbstractBaseUser.has_usable_password().
  * Fixed #29017 -- Updated BaseCommand.leave_locale_alone doc per refs #24073.
  * Doc'd specifying the ENGINE setting as part of configuring contrib.gis.
  * Added stub release notes for 1.11.10.
  * Fixed #28881 -- Doc'd that CommonPasswordValidator's password list must be lowercase.
  * Fixed #28784 -- Clarified how migrate --fake works.
  * Fixed typo in docs/ref/models/expressions.txt.
  * Fixed #29094 -- Fixed crash when entering an invalid uuid in ModelAdmin.raw_id_fields.
  * Refs #28876 -- Fixed incorrect foreign key constraint name for models with quoted db_table.
  * Bumped version for 2.0.1 release.
  * Fixed #25277 -- Restored test dependency to the original python-memcached.
  * Fixed #28761 -- Documented how an inline formset's prefix works.
  * Refs #28856 -- Fixed caching of a GenericForeignKey pointing to a model that uses more than one level of MTI.
  * Fixed #28966 -- Doc'd that the uuid URL path converter requires dashes
  * Fixed #29054 -- Fixed a regression where a queryset that annotates with geometry objects crashes.
  * Reverted "[1.11.x] Refs #28856 -- Fixed caching of a GenericForeignKey pointing to a model that uses more than one level of MTI."
  * Added "Python 3 Only" trove classifier.
  * Fixed #28941 -- Fixed crash in testserver command startup.
  * Fixed import in docs/ref/models/conditional-expressions.txt example.
  * Fixed CVE-2018-6188 -- Fixed information leakage in AuthenticationForm.
  * Fixed #28594 -- Removed Jython docs and specific code
  * Renamed the "Supported versions" label.
  * Fixed #28878 -- Added python_requires in setup.py and a warning for older pips that don't recognize it.
  * Fixed typo in docs/ref/contrib/admin/index.txt.
  * Refs #28856 -- Fixed caching of a GenericForeignKey pointing to a model that uses more than one level of MTI.
  * Added stub release notes for 2.0.2.
  * Fixed #28938 -- Corrected Python compatibility in the tutorial.
  * Fixed #28890 -- Removed newlines between MultiWidget's subwidgets.</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- update to 2.0.3 (bsc#1083305, bsc#1083304, CVE-2018-7536, CVE-2018-7537):
  * Fixed #29108 -- Fixed crash in aggregation of distinct+ordered+sliced querysets.
  * Added CVE-2018-6188 to the security release archive.
  * Post-release version bump.
  * Updated translations from Transifex
  * Added stub release notes for security releases.
  * Fixed incorrect regex in re_path() example.
  * Fixed #29125 -- Made Q.deconstruct() deterministic with multiple keyword arguments.
  * Fixed #29126 -- Doc'd the behavior of QuerySet.update_or_create() with manually specified pks.
  * Used a CSS positioning in tutorial 6 that doesn't differ across browsers.
  * Fixed typo in bulk_create() documentation.
  * Fixed #29176 -- Fixed AbstractBaseUser.normalize_username() crash if username isn't a string.
  * Removed blank lines per isort 4.3.0.
  * Added stub release notes for 2.0.3.
  * Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters.
  * Fixed #29172 -- Fixed crash with Window expression in a subquery.
  * Fixed #29166 -- Fixed crash in When() expression with a list argument.
  * Fixed #24270 -- Doc'd that django_bash_completion is only in the source distribution.
  * Improved clarity of docs/topics/install.txt.
  * Refs #29125 -- Made Q.deconstruct() omit 'query_utils' in the path and _connector='AND' since it's a default value.
  * Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in django.utils.text.Truncator.
  * Bumped version for 2.0.3 release.
  * Corrected doc'd type of some parameters from string to str.
  * Fixed #29146 -- Readded ^ and $ inadvertently removed from re_path() examples.
  * Fixed #29107 -- Doc'd that ModelForm doesn't actually inherit from Form.
  * Switched test requirement to new psycopg2-binary package.
  * Added backticks around obj argument in admin docs.
  * Fixed typo in docs/topics/forms/media.txt.
  * Fixed #29109 -- Fixed the admin time picker widget for the Thai locale.
  * Fixed #29118 -- Fixed crash with QuerySet.order_by(Exists(...)).</changelog>
  <changelog author="tbechtold@suse.com" date="1523102400">- update to version 2.0.4:
  * Fixed #29265 -- Removed the suggestion to hardcode static URLs.
  * Fixed #29206 -- Fixed PasswordResetConfirmView crash when the URL contains a non-UUID where one is expected.
  * Fixed #29195 -- Fixed Exists.output_field resolution on single-valued queries.
  * Fixed links to Sphinx docs.
  * Fixed typo in docs/releases/2.0.4.txt.
  * Clarified docs about ISO 8601 week numbering.
  * Fixed #29116 -- Fixed OpenLayersWidget deserialization ignoring the widget map's SRID.
  * Added CVE-2018-7536,7 to the security release archive.
  * Fixed #29221 -- Corrected admin's autocomplete widget to add a space after custom classes.
  * Fixed #29273 -- Prevented initial selection of empty choice in multiple choice widgets.
  * Added a pagination example to ListView docs.
  * Fixed #28514 -- Clarifed docs about idempotence of RelatedManager.add().
  * isorted import statements in tutorial example.
  * Fixed #29192 -- Corrected docs regarding overriding fields from abstract base classes.
  * Refs #11278 -- Clarified RelatedManager differences between reverse one-to-many and many-to-many relations.
  * Added stub release notes for 1.11.12.
  * Fixed #29165 -- Clarified how to load initial data with migrations.
  * Fixed #29213 -- Fixed autocomplete widget's translations for zh-hans/zh-hant.
  * Reverted "Expanded docs for AbstractBaseUser.has_usable_password()."
  * Fixed typo in docs/releases/2.0.4/1.11.12.txt.
  * Bumped version for 2.0.4 release.
  * Fixed #29250 -- Added 'django_version' context to startapp/project docs.
  * Added release date for 2.0.4 and 1.11.12.
  * Post-release version bump.
  * Clarified a sentence in docs/topics/i18n/translation.txt.
  * Fixed #29229 -- Fixed column mismatch crash when combining two annotated values_list() querysets with union(), difference(), or intersection().
  * Added stub release notes for 2.0.4.
  * Fixed a couple mistakes in docs/ref/forms/widgets.txt.
  * Fixed #28655 -- Added more examples for customizing widgets in a form.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533902400">- update to 2.0.8
  * CVE-2018-14574: Open redirect possibility in CommonMiddleware boo#1102680
  * Fixed a regression in Django 2.0.7 that broke the regex lookup on MariaD
  * Fixed a regression where django.template.Template crashed if
    the template_string argument is lazy
  * Fixed __regex and __iregex lookups with MySQL
  * Fixed admin check crash when using a query expression in ModelAdmin.ordering
  * Fixed admin changelist crash when using a query expression without asc()
    or desc() in the page?s ordering
  * Fixed a regression that broke custom template filters that use decorators
  * Fixed detection of custom URL converters in included pattern
  * Fixed a regression that added an unnecessary subquery to the GROUP BY clause
    on MySQL when using a RawSQL annotation
  * Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS 3.6.1+
  * Fixed a regression in Django 1.10 that could result in large memory usage
    when making edits using ModelAdmin.list_editable
  * Corrected the import paths that inspectdb generates for django.contrib.postgres fields
  * Fixed crashes in django.contrib.admindocs when a view is a callable object,
    such as django.contrib.syndication.views.Feed
  * Fixed a regression in Django 1.11.12 where QuerySet.values() or values_list()
    after combining an annotated and unannotated queryset with union(),
    difference(), or intersection() crashed due to mismatching columns</changelog>
</package>
<package pkgid="e037eae061ae8d3902be9f8a0e0c7a8ba70cff5961141f046aa839c5d530b002" name="python-Django1" arch="src">
  <version epoch="0" ver="1.11.15" rel="lp150.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1462104000">- Update to 1.9.5</changelog>
  <changelog author="aplanas@suse.com" date="1462276800">- Update to 1.9.6
  Bugfixes
  * Added support for relative path redirects to the test client and
    to SimpleTestCase.assertRedirects() because Django 1.9 no longer
    converts redirects to absolute URIs (#26428).
  * Fixed TimeField microseconds round-tripping on MySQL and SQLite
    (#26498).
  * Prevented makemigrations from generating infinite migrations for a
    model field that references a functools.partial (#26475).
  * Fixed a regression where SessionBase.pop() returned None rather
    than raising a KeyError for nonexistent values (#26520).
  * Fixed a regression causing the cached template loader to crash
    when using template names starting with a dash (#26536).
  * Restored conversion of an empty string to null when saving values
    of GenericIPAddressField on SQLite and MySQL (#26557).
  * Fixed a makemessages regression where temporary .py extensions
    were leaked in source file paths (#26341).</changelog>
  <changelog author="aplanas@suse.com" date="1470744000">- Update to 1.9.9
  Bugfixes
  * Fixed invalid HTML in template postmortem on the debug page
    (#26938).
  * Fixed some GIS database function crashes on MySQL 5.7 (#26657).
- Update to 1.9.8
  Fix XSS in admin?s add/change related popup (bsc#988420)
  Unsafe usage of JavaScript?s Element.innerHTML could result in XSS
  in the admin?s add/change related popup. Element.textContent is now
  used to prevent execution of the data.
  The debug view also used innerHTML. Although a security issue wasn?t
  identified there, out of an abundance of caution it?s also updated
  to use textContent.
  Bugfixes
  * Fixed missing varchar/text_pattern_ops index on CharField and
    TextField respectively when using AddField on PostgreSQL (#26889).
  * Fixed makemessages crash on Python 2 with non-ASCII file names
    (#26897).
- Update to 1.9.7
  Bugfixes
  * Removed the need for the request context processor on the admin
    login page to fix a regression in 1.9 (#26558).
  * Fixed translation of password validators? help_text in forms
    (#26544).
  * Fixed a regression causing the cached template loader to crash
    when using lazy template names (#26603).
  * Fixed on_commit callbacks execution order when callbacks make
    transactions (#26627).
  * Fixed HStoreField to raise a ValidationError instead of crashing
    on non-dictionary JSON input (#26672).
  * Fixed dbshell crash on PostgreSQL with an empty database name
    (#26698).
  * Fixed a regression in queries on a OneToOneField that has to_field
    and primary_key=True (#26667).</changelog>
  <changelog author="sbahling@suse.com" date="1474718400">- Change Requires: python-Pillow to python-imaging for compatibility
  with SLE-12 which provides PIL instead of Pillow.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1480680000">- Update to 1.9.12
  Bugfixes
  * Quoted the Oracle test user?s password in queries to fix the ?ORA-00922: missing
    or invalid option? error when the password starts with a number or
    special character (#27420)
  * DNS rebinding vulnerability when DEBUG=True
  * CSRF protection bypass on a site with Google Analytics</changelog>
  <changelog author="michal@cihar.com" date="1485864000">- Update to 1.10.5
  * See https://docs.djangoproject.com/en/1.10/releases/1.10/
  * Full text search for PostgreSQL
  * New-style middleware
  * Official support for Unicode usernames</changelog>
  <changelog author="appleonkel@opensuse.org" date="1488369600">- Update to 1.10.6
  Bugfixes
  * Fixed ClearableFileInput?s ?Clear? checkbox on model form fields where the
    model field has a default
  * Fixed RequestDataTooBig and TooManyFieldsSent exceptions crashing rather than
    generating a bad request response
  * Fixed a crash on Oracle and PostgreSQL when subtracting DurationField or
    IntegerField from DateField
  * Fixed query expression date subtraction accuracy on PostgreSQL for differences
    large an a month
  * Fixed a GDALException raised by GDALClose on GDAL &gt;= 2.0</changelog>
  <changelog author="appleonkel@opensuse.org" date="1491307200">- Update to 1.10.7
  Bugfixes
  * Made admin?s RelatedFieldWidgetWrapper use the wrapped widget?s
    value_omitted_from_data() method (#27905)
  * Fixed model form default fallback for SelectMultiple (#27993)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493899200">- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Don't provide python2-django or python2-South, singlespec
  packages should use correct name.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494244800">- django-admin.py should be the master, not django-admin.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502280000">- Fix building on older Python versions.</changelog>
  <changelog author="tbechtold@suse.com" date="1502366400">- update to version 1.11.4:
  * Fixed #27939 -- Updated OpenLayersWidget.map_srid for OpenLayers 3.
  * Fixed #27956 -- Fixed display of errors in an {% extends %} child.
  * Updated various links in docs to avoid redirects
  * Fixed typo in docs/topics/auth/default.txt.
  * Double quoted HTML attributes in widget docs
  * Fixed #28303 -- Prevented localization of attribute values in the DTL attrs.html widget template.
  * Added stub release notes for 1.11.3.
  * Documented OSMWidget.default_lat/lon.
  * Fixed #28101 -- Fixed a regression with nested __in subquery lookups and to_field.
  * Bumped version for 1.11.4 release.
  * Bumped version for 1.11.3 release.
  * Updated translations from Transifex
  * Fixed #28039 -- Fixed crash in BaseGeometryWidget.subwidgets().
  * Fixed #28242 -- Moved ImageField file extension validation to the form field.
  * Made docs/topics/migrations.txt use single quotes consistently.
  * Fixed #28355 -- Fixed widget rendering of non-ASCII date/time formats on Python 2.
  * Updated name of topics/db/queries link on index.
  * Fixed #28025 -- Fixed typo in docs/ref/models/querysets.txt.
  * Fixed #28043 -- Prevented AddIndex and RemoveIndex from mutating model state.
  * Fixed #28207 -- Fixed contrib.auth.authenticate() if multiple auth backends don't accept a request.
  * Fixed #28361 -- Fixed possible time-related failure in was_published_recently() tutorial test.
  * Fixed #28265 -- Prevented renderer warning on Widget.render() with **kwargs.
  * Fixed typo in docs/topics/testing/advanced.txt.
  * Fixed #28125 -- Clarified 1.11 release note about Template.render() prohibiting non-dict context.
  * Refs #18974 -- Added stacklevel for permalink() deprecation.
  * Fixed #28350 -- Fixed UnboundLocalError crash in RenameField with nonexistent field.
  * Fixed #28051 -- Made migrations respect Index's name argument.
  * Fixed #28420 -- Doc'd 'is' comparison restriction for User.is_authenticated/anonymous.
  * Added release date for 1.11.4.
  * Refs #28174 -- Fixed autoreload test crash on Python 2/non-ASCII path.
  * Fixed #28389 -- Fixed pickling of LazyObject on Python 2 when wrapped object doesn't have __reduce__().
  * Fixed #28148 -- Doc'd ImageField name validation concerns with the test client.
  * Added stub release notes for 1.11.2.
  * Fixed #27890 -- Fixed FileNotFoundError cleanup exception in runtests.py on Python 3.6+.
  * Fixed #28138 -- Used output type handler instead of numbersAsStrings on Oracle cursor.
  * Fixed widgets module path in docs/ref/contrib/gis/forms-api.txt.
  * Fixed #27947 -- Doc'd that model Field.error_messages often don't propagate to forms.
  * Fixed #28067 -- Clarified __str__() return type when using python_2_unicode_compatible().
  * Fixed docstring typo in django/contrib/admin/actions.py.
  * Fixed #28102 -- Doc'd how to compute path to built-in widget template directories.
  * Fixed #28352 -- Corrected QuerySet.values_list() return type in docs examples.
  * Fixed #28181 -- Added detection for GDAL 2.1 and 2.0.
  * Refs #23853 -- Updated sql.query.Query.join() docstring.
  * Added a test for Model._meta._property_names.
  * Refs #27919 -- Changed Widget.get_context() attrs kwarg to an arg.
  * Fixed #28415 -- Clarified what characters ASCII/UnicodeUsernameValidator accept.
  * Fixed #28074 -- Doc'd template-based widget rendering changes for contrib.gis.
  * Fixed #28278 -- Fixed invalid HTML for a required AdminFileWidget.
  * Added content_type filtering in Permission querying example.
  * Corrected FileExtensionValidator doc regarding the value being validated.
  * Fixed #27960 -- Set errcheck=False for GDALAllRegister to prevent crash.
  * Fixed #28097 -- Fixed layout of ReadOnlyPasswordHashWidget.
  * Fixed #27969 -- Fixed models.Field.formfield() setting 'disabled' for fields with choices.
  * Post-release version bump.
  * Fixed #28298 -- Prevented a primary key alteration from adding a foreign key constraint if db_constraint=False.
  * Refs #28192 -- Fixed documentation of ChoiceField choices requirement
  * Fixed #27966 -- Bumped required psycopg2 version to 2.5.4.
  * Linked GIS QuerySet API docs to corresponding PostGIS docs.
  * Fixed #27974 -- Kept resolved templates constant during one rendering cycle.
  * Refs #28100 -- Fixed URL in el, es_MX, and pt auth translations
  * Fixed typo in docs/ref/request-response.txt.
  * Fixed #27963 -- Removed unneeded docstring example in contributing docs.
  * Added stub release notes for security releases.
  * Fixed #28349 -- Doc'd how to upgrade Django from LTS to LTS.
  * Fixed typo in docs/ref/forms/fields.txt.
  * Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().
  * Fixed #28170 -- Fixed file_move_safe() crash when moving files to a CIFS mount.
  * Fixed broken links to Oracle docs.
  * Fixed #27554 -- Fixed prefetch_related() crash when fetching relations in nested Prefetches.
  * Added links and cosmetic edits to docs/ref/request-response.txt.
  * Added stub release notes for 1.11.1.
  * Fixed #28079 -- Restored "No POST data" (rather than an empty table) in HTML debug page.
  * Removed incorrect "required" attribute in docs/ref/forms/fields.txt.
  * Fixed #28176 -- Restored the uncasted option value in ChoiceWidget template context.
  * Refs #24423 -- Readded inadvertently deleted i18n tests.
  * Fixed #27965 -- Fixed precision comparison in a geoforms test (refs #27939).
  * Corrected post-release version bump.
  * Made runtests.py run gis_tests only when using a GIS database backend.
  * Fixed #28230 -- Allowed DjangoJsonEncoder to serialize CallableBool.
  * Fixed broken link to QUnit docs.
  * Removed MySQL (unsupported) from Perimeter docs.
  * Fixed #28266 -- Fixed typo in docs/ref/models/instances.txt.
  * Fixed #28139 -- Added another level of headings in the topics index.
  * Fixed #28003 -- Doc'd what an auto-created OneToOneField parent_link looks like.
  * Fixed #28160 -- Prevented hiding GDAL exceptions when it's not installed.
  * Updated man page for Django 1.11.
  * Fixed #27988 -- Fixed typo in docs/ref/django-admin.txt.
  * Fixed #28199 -- Fixed Subquery generating unnecessary/invalid CAST.
  * Fixed #28122 -- Fixed crash when overriding views.static.directory_index()'s template.
  * Fixed AppRegistryNotReady error when running gis_tests in isolation on PostGIS.
  * Fixed #28435 -- Removed inaccurate warning about SECURE_HSTS_PRELOAD.
  * Fixed #28040 -- Updated SplitArrayWidget to use template-based widget rendering.
  * Fixed #28269 -- Fixed Model.__init__() crash on models with a field that has an instance only descriptor.
  * Tested EmailMessage(attachments=[MIMEText])
  * Clarified return value of NumGeometries GIS function.
  * Refs #27935 -- Fixed BrinIndex.max_name_length if a project's default database isn't PostgreSQL.
  * Fixed #28058 -- Restored empty BoundFields evaluating to True.
  * Replaced "not A== B" with "A != B" in docs/howto/writing-migrations.txt.
  * Added CVE-2017-7233,4 to the security release archive.
  * Fixed #28204 -- Fixed MultipleObjectMixin.paginate_queryset() crash on Python 2 if InvalidPage message contains non-ASCII.
  * Fixed #27935 -- Fixed crash with BrinIndex name &gt; 30 characters.
  * Fixed #28293 -- Fixed union(), intersection(), and difference() when combining with an EmptyQuerySet.
  * Fixed #28222 -- Allowed settable properties in QuerySet.update_or_create()/get_or_create() defaults.
  * Refs #27556, #27488 -- Updated support backends docs for isvalid lookup.
  * Fixed nondeterministic ordering test failure in model_forms.
  * Fixed #28345 -- Applied limit_choices_to during ModelForm.__init__().
  * Fixed #27981 -- Doc'd date/time filter l10n changes in refs #25758.
  * Made a few cosmetic updates to "Migrations that add unique fields".
  * Bumped version for 1.11 release.
  * Fixed #28004 -- Doc'd how to create migrations for an app without a migrations directory.
  * Fixed #28202 -- Fixed FieldListFilter.get_queryset() crash on invalid input.
  * Fixed #27949 -- Doc'd how OpenLayers 3 widgets work.
  * Pass type to sql_alter_column_* where it was missing.
  * Fixed #27866 -- Made ChoiceWidget.format_value() return a list
  * Fixed #28308 -- Doc'd removal of Select.render_option() (refs #15667).
  * Fixed #28178 -- Changed contrib.gis to raise ImproperlyConfigured if gdal isn't installed.
  * Fixed #28284 -- Prevented Paginator's unordered object list warning from evaluating a QuerySet.
  * Fixed #28209 -- Made date-based generic views return a 404 rather than crash when given an out of range date.
  * Fixed #28161 -- Fixed return type of ArrayField(CITextField()).
  * Corrected docs regarding MySQL support of Length GIS function.
  * Fixed #28175 -- Fixed __in lookups on a foreign key when using the foreign key's parent model as the lookup value.
  * Refs #18247 -- Fixed SQLite QuerySet filtering on decimal result of Least and Greatest.
  * Refs #28207 -- Fixed contrib.auth.authenticate() if 'backend' is in the credentials.
  * Fixed #27644 -- Doc'd FileSystemStorage.get_created_time().
  * Added test for intersection() when combining with a queryset raising EmptyResultSet.
  * Fixed #28197 -- Fixed introspection of index field ordering on PostgreSQL.
  * Removed extra characters in docs header underlines.
  * Fixed GEOSGeometry reference in GIS tutorial.
  * Refs #28066 -- Fixed Python 2 failures in sessions_tests.
  * Removed obsolete Widget.format_output() in tests.
  * Fixed #28059 -- Restored class attribute in &lt;ul&gt; of widgets that use multiple_input.html.
  * Fixed typo in docs/ref/contrib/postgres/fields.txt.
  * Refs #27025 -- Fixed "invalid escape sequence" warning in auth_tests on Python 3.6.
  * Fixed #28031 -- Removed notes about old uWSGI/sentry versions (refs #20537).
  * Removed unexpected initial attribute in data migration examples.
  * Renamed "Mac OS X" to "macOS" in docs.
  * Sorted imports per isort 4.2.9.
  * Refs #28138 -- Added release notes for d52577b62b3138674807ac74251fab7faed48331.
  * Back to the future.
  * Fixed #27993 -- Fixed model form default fallback for SelectMultiple.
  * Refs #27866 -- Adapted backport for Python 2 compatibility
  * Removed unused links in docs/internals/contributing/triaging-tickets.txt.
  * Clarified QuerySet.iterator()'s docs on server-side cursors.
  * Fixed #28096 -- Allowed prefetch calls with ModelIterable subclasses
  * Fixed #28414 -- Fixed ClearableFileInput rendering as a subwidget of MultiWidget.
  * Corrected REPL example in forms docs for Python 3.
  * Refs #28181 -- Corrected detection of GDAL 2.1 on Windows.
  * Fixed #28075 -- Prevented ChoiceWidget from localizing option values.
  * Fixed #28282 -- Fixed class-based indexes name for models that only inherit Model.
  * Fixed #28038 -- Restored casting to text of builtin lookups on PostgreSQL.
  * Fixed #28418 -- Fixed queryset crash when using a GenericRelation to a proxy model.
  * Fixed #28062 -- Added a setting to disable server-side cursors on PostgreSQL.
  * Fixed #28105 -- Fixed crash in BaseGeometryWidget.get_context() when overriding existing attrs.
  * Refs #28160 -- Skipped a GeoManager test if not using a GIS database backend.
  * Fixed #28157 -- Fixed choice ordering in form fields with grouped and non-grouped options.
  * Fixed #28095 -- Doc'd Widget.build_attrs() signature change in Django 1.11.
  * Fixed a forms test after updated translations.
  * Fixed 403 link in docs/ref/contrib/gis/install/spatialite.txt.
  * Simplified schema.tests with assertForeignKeyExists()/assertForeignKeyNotExists().
  * Fixed #28336 -- Fixed typo in docs/ref/settings.txt.
  * Fixed #28378 -- Fixed union() and difference() when combining with a queryset raising EmptyResultSet.
  * Refs #28052 -- Cleaned up some indexes in schema tests.
  * Fixed #28047 -- Fixed QuerySet.filter() crash when it uses the name of a OneToOneField pk.
  * Added release date for 1.11.1.
  * Fixed #28327 -- Removed contradictory description of mod_wsgi docs.
  * Clarified "newly-introduced features" in the supported versions policy.
  * Fixed docs build with Sphinx 1.6.
  * Fixed #28239 -- Removed docs for a removed arg of template.Context.
  * Bumped version for 1.11.2 release.
  * Refs #28066 -- Fixed nondeterministic ordering test failure in sessions_tests.
  * Updated postgis.net and gaia-gis.it links to https.
  * Fixed typos in docs/topic/db/search.txt.
  * Fixed #28174 -- Fixed crash in runserver's autoreload with Python 2 on Windows with non-str environment variables.
  * Fixed typos in docs/howto/static-files/index.txt.
  * Fixed #28294 -- Doc'd request/args/kwargs attributes of class-based views.
  * Fixed #27967 -- Fixed KeyError in admin's inline form with inherited non-editable pk.
  * Fixed db backend discovery in admin_scripts tests.
  * Fixed outdated TIME_FORMAT in docs/ref/templates/builtins.txt.
  * Fixed #26028 -- Added overriding templates howto.
  * Updated was_published_recently() tutorial test to check boundary condition.
  * Fix a typo in django/db/transaction.py
  * Fixed #28109 -- Corrected the stack level of unordered queryset pagination warnings.
  * Fixed #28142 -- Fixed is_safe_url() crash on invalid IPv6 URLs.
  * Refs #22397 -- Removed model in test cleanup
  * Fixed #28052 -- Prevented dropping Meta.indexes when changing db_index to False.
  * Fixed #18485 -- Doc'd behavior of PostgreSQL when manually setting AutoField.
  * Updated core translations from Transifex
  * Fixed #28166 -- Fixed Model._state.db on MTI parent model after saving child model.
  * Added missing import in docs/topics/db/queries.txt.
  * Refs #27919 -- Passed ChoiceWidget.create_option() kwargs as expected.
  * Fixed #28229 -- Fixed the value of LoginView's "next" template variable.
  * Fixed #27975 -- Fixed crash if ModelChoiceField's queryset=None.
  * Added release date for 1.11.2.
  * Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.
  * Fixed #28159 -- Fixed BaseInlineFormSet._construct_form() crash when using save_as_new.
  * Removed an obsolete temporal reference in docs/faq/general.txt.
  * Fixed #28042 -- Fixed crash when using a two-tuple in EmailMessage's attachments arg.
  * Fixed #27945 -- Clarified that RegexValidator searches with the regex.
  * Linked GIS functions docs to corresponding PostGIS docs.
  * Refs #17453 -- Fixed broken link to #django IRC logs.
  * Fixed gis_tests.geoapp test with incorrect geodetic coordinates.
  * Fixed #28066 -- Prevented SessionBase.cycle_key() from discarding data.
  * Fixed #27730 -- Doc'd that template vars created outside a block can't be used in it.
  * Fixed #28069 -- Moved setup_test_environment() warning in tutorial 5.
  * Fixed #28130 -- Fixed formset min_num validation with initial, unchanged forms.
  * Fixed #28091 -- Re-raised original exception when closing cursor cleanup fails
  * Clarified backend support of Area GIS function.
  * Fixed #28387 -- Fixed has_changed() for disabled form fields that subclass it.
  * Fixed #27915 -- Allowed Meta.indexes to be defined in abstract models.
  * Fixed #26755 -- Fixed test_middleware_classes_headers if Django source isn't writable.
  * Fixed #28188 -- Fixed crash when pickling model fields.
  * Fixed typo in docs/ref/models/querysets.txt.
  * Pointed Dive into Python links to python3 site
  * Refs #25240 -- Added ExtractWeek examples.
  * Added some shell output in tutorial 2.
  * Removed inappropriate highlighting in committing-code.txt.
  * Fixed #28399 -- Fixed QuerySet.count() for union(), difference(), and intersection() queries.
  * Fixed #28212 -- Allowed customizing the port that LiveServerTestCase uses.
  * Fixed flake8 warning on Python 2.
  * Clarified meaning of "Optional" in auth.models.User field docs.
  * Clarified HStoreField model/form difference in 1.11 release notes.
  * Removed self from method signatures in docs.
  * Added stub release notes for 1.11.4.
  * Updated tests after French translation update
  * Fixed #27603 -- Fixed AsKML when queryset is evaluated more than once.
  * Fixed #28262 -- Fixed incorrect DisallowedModelAdminLookup when a nested reverse relation is in list_filter.
  * Fixed #27434 -- Doc'd how to raise a model validation error for a field not in a model form.
  * Refs #21415 -- Fixed contrib.humanize translations for es_AR
  * Fixed #27655 -- Added some guidelines to the coding style docs.
  * Updated contrib translations from Transifex
  * Removed nonexistent methods from File's docs.
  * Doc'd the need to remove default ordering on Subquery aggregates.
  * Fixed broken link to mysqlclient docs.
  * Fixed #28210 -- Fixed Model._state.adding on MTI parent model after saving child model.
  * Removed usage of deprecated sphinx.util.compat.Directive.
  * Refs #28100 -- Added 1.11.1 release note for e6bfd3d751278d7cfd09af1120c4bbce509c05da.
  * Fixed #28190 -- Clarifed how include/extends treat template names.
  * Refs #26294 -- Fixed typo in docs/ref/django-admin.txt.
  * Refs #28091 -- Fixed typo and rephrased 1.11.1 release note.
  * Fixed typo in docs/ref/class-based-views/mixins-single-object.txt.
  * Bumped version for 1.11.1 release.
  * Added release date for 1.11.3.
  * Bumped version for 1.11 release candidate 1.
  * Simplified tutorial's test names and docstrings.
  * Fixed typo in django/db/backends/base/schema.py comment.
  * Fixed #28233 -- Used a simpler example in the aggregation "cheat sheet" docs.
- Require python-pytz and Recommend python-bcrypt</changelog>
  <changelog author="toddrme2178@gmail.com" date="1505908800">- update to version 1.11.5
  * CVE-2017-12794: Possible XSS in traceback section of technical 500 debug page
  * Fixed GEOS version parsing if the version has a commit hash at the end (new
    in GEOS 3.6.2) (:ticket:`28441`).
  * Added compatibility for ``cx_Oracle`` 6 (:ticket:`28498`).
  * Fixed select widget rendering when option values are tuples (:ticket:`28502`).
  * Django 1.11 inadvertently changed the sequence and trigger naming scheme on
    Oracle. This causes errors on INSERTs for some tables if
    ``'use_returning_into': False`` is in the ``OPTIONS`` part of ``DATABASES``.
    The pre-1.11 naming scheme is now restored. Unfortunately, it necessarily
    requires an update to Oracle tables created with Django 1.11.[1-4]. Use the
    upgrade script in :ticket:`28451` comment 8 to update sequence and trigger
    names to use the pre-1.11 naming scheme.
  * Added POST request support to ``LogoutView``, for equivalence with the
    function-based ``logout()`` view (:ticket:`28513`).
  * Omitted ``pages_per_range`` from ``BrinIndex.deconstruct()`` if it's ``None``
    (:ticket:`25809`).
  * Fixed a regression where ``SelectDateWidget`` localized the years in the
    select box (:ticket:`28530`).
  * Fixed a regression in 1.11.4 where ``runserver`` crashed with non-Unicode
    system encodings on Python 2 + Windows (:ticket:`28487`).
  * Fixed a regression in Django 1.10 where changes to a ``ManyToManyField``
    weren't logged in the admin change history (:ticket:`27998`) and prevented
    ``ManyToManyField`` initial data in model forms from being affected by
    subsequent model changes (:ticket:`28543`).
  * Fixed non-deterministic results or an ``AssertionError`` crash in some
    queries with multiple joins (:ticket:`26522`).
  * Fixed a regression in ``contrib.auth``'s ``login()`` and ``logout()`` views
    where they ignored positional arguments (:ticket:`28550`).</changelog>
  <changelog author="tbechtold@suse.com" date="1513080000">- update to 1.11.8:
  * Fixed #28488 -- Reallowed error handlers to access CSRF tokens.
  * Fixed #28856 -- Fixed a regression in caching of a GenericForeignKey
    pointing to a MTI model.
  * Fixed #28597 -- Fixed crash with the name of a model's autogenerated primary
    key in an Index's fields.
  * Added stub release notes for 1.11.7.
  * Fixed #28305 -- Fixed "Cannot change column 'x': used in a foreign key constraint"
    crash on MySQL with a sequence of AlterField or RenameField operations.
  * Fixed #28689 -- Fixed unquoted table names in Subquery SQL when using OuterRef.
  * Added assertion helpers for PostgreSQL's server-side cursor tests.
  * Fixed #28729 -- Replaced a numbered list with unordered list in TemplatesSetting docs.
  * Fixed #28786 -- Doc'd middleware ordering considerations due to
    CommonMiddleware setting Content-Length.
  * Added release date for 1.11.8.
  * Fixed #28702 -- Made query lookups for CIText fields use citext.
  * Added 2017-12794 to the security release archive.
  * Fixed typo in docs/topics/cache.txt.
  * Bumped version for 1.11.6 release.
  * Added release date for 1.11.6.
  * Fixed #28648 -- Corrected typo in docs/topics/db/queries.txt.
  * Bumped version for 1.11.7 release.
  * Added stub release notes for 1.11.8.
  * Fixed #28848 -- Fixed SQLite/MySQL crash when ordering by a filtered
    subquery that uses nulls_first/nulls_last.
  * Fixed typo in docs/topics/db/aggregation.txt.
  * Fixed #28802 -- Fixed typo in docs/topics/auth/default.txt.
  * Fixed typo in docs/topics/forms/media.txt.
  * Bumped version for 1.11.8 release.
  * Fixed typo in docs/ref/models/querysets.txt.
  * Fixed test failures due to ordering differences on PostgreSQL 10.
  * Fixed #28710 -- Fixed the Basque DATE_FORMAT string
  * Added stub release notes for 1.11.6.
  * Fixed #28747 -- Fixed typos in django/conf/global_settings.py comments.
  * Fixed #28817 -- Made QuerySet.iterator() use server-side cursors after
    values() and values_list().
  * Post-release version bump.
  * Fixed #28792 -- Fixed index name truncation of namespaced tables.
  * Fixed #28781 -- Added QuerySet.values()/values_list() support for union(),
    difference(), and intersection().
  * Fixed #28722 -- Made QuerySet.reverse() affect nulls_first/nulls_last.
  * Refs #28710 -- Simplified l10n format test
  * Initialized CsrfViewMiddleware once in csrf_tests.
  * Added release date for 1.11.7.
  * Linked to prefetch_related_objects func in DB optimization docs.
  * Fixed #28645 -- Reallowed AuthenticationForm to raise the inactive user
    error when using ModelBackend.
  * Fixed #28653 -- Added missing ForeignKey.on_delete argument in docs.
  * Fixed #28561 -- Removed inaccurate docs about QuerySet.order_by() and joins.
  * Fixed #28555 -- Made CharField convert whitespace-only values to the
    empty_value when strip is enabled.
  * Fixed #28601 -- Prevented cache.get_or_set() from caching None if default
    is a callable that returns None.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1513857600">- build only for python2 - Python3 provided by Django-2.0</changelog>
  <changelog author="tbechtold@suse.com" date="1518004800">- update to 1.11.10 (bsc#1077714, CVE-2018-6188):
  * Fixed GeoIP test failure with the latest data.
  * Bumped version for 1.11.9 release.
  * Fixed #28890 -- Removed newlines between MultiWidget's subwidgets.
  * Fixed #29016 -- Fixed incorrect foreign key nullification on related instance deletion.
  * Fixed #29032 -- Fixed an example of using expressions in QuerySet.values().
  * Added stub release notes for 1.11.10.
  * Fixed typo in docs/topics/testing/advanced.txt.
  * Fixed CVE-2018-6188 -- Fixed information leakage in AuthenticationForm.
  * Fixed #29017 -- Updated BaseCommand.leave_locale_alone doc per refs #24073.
  * Refs #28876 -- Fixed incorrect class-based model index name generation for models with quoted db_table.
  * Fixed location of spatialite_source label.
  * Fixed #29002 -- Corrected cached template loader docs about when it's automatically enabled.
  * Fixed #29094 -- Fixed crash when entering an invalid uuid in ModelAdmin.raw_id_fields.
  * Added release date for 1.11.9.
  * Refs #28876 -- Fixed incorrect foreign key constraint name for models with quoted db_table.
  * Fixed a GeoIP2 test failure with the latest GeoIP2 database.
  * Post-release version bump.
  * Fixed typo in docs/topics/i18n/translation.txt.
  * Bumped version for 1.11.10 release.
  * Added stub release notes for 1.11.9.
  * Fixed #29071 -- Fixed contrib.auth.authenticate() crash if a backend doesn't accept a request but a later one does.
  * Fixed #25277 -- Restored test dependency to the original python-memcached.
  * Refs #28856 -- Fixed caching of a GenericForeignKey pointing to a model that uses more than one level of MTI.</changelog>
  <changelog author="tbechtold@suse.com" date="1523880000">update to version 1.11.12 (CVE-2018-7537, CVE-2018-7536):
  * Fixed #29273 -- Prevented initial selection of empty choice in multiple choice widgets.
  * Fixed links to Sphinx docs.
  * Fixed #29192 -- Removed inaccurate statement regarding overriding fields from abstract base classes.
  * Added CVE-2018-7536,7 to the security release archive.
  * Added release date for 1.11.12.
  * Bumped version for 1.11.12 release.
  * Fixed #29229 -- Fixed column mismatch crash when combining two annotated values_list() querysets with union(), difference(), or intersection().
  * Added stub release notes for 1.11.12.
  * Fixed typo in docs/releases/1.11.12.txt.
  * Post-release version bump.
  * Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in django.utils.text.Truncator.
  * Bumped version for 1.11.11 release.
  * Post-release version bump.
  * Removed blank lines per isort 4.3.0.
  * Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters.
  * Switched test requirement to new psycopg2-binary package.
  * Added stub release notes for security releases.
  * Corrected doc'd type of some parameters from string to str.
  * Added CVE-2018-6188 to the security release archive.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533729600">- update to version 1.11.15
  * CVE-2018-14574 Open redirect possibility in CommonMiddleware - boo#1102680
  * Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS 3.6.1+
  * Fixed a regression in Django 1.11.8 where altering a field with a unique
    constraint may drop and rebuild more foreign keys than necessary
  * Fixed crashes in django.contrib.admindocs when a view is a callable object,
    such as django.contrib.syndication.views.Feed
  * Fixed a regression in Django 1.11.12 where QuerySet.values() or values_list()
    after combining an annotated and unannotated queryset with union(),
    difference(), or intersection() crashed due to mismatching columns</changelog>
</package>
<package pkgid="c490cd4753be7b473dd11ef718c30ff96043c5bd1fb8b92494ac88f3cce6450b" name="python-aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1486382400">- Initial release</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Use singlespec macros
- Update to 0.4.5:
  * aubio: New python command line tool to extract information
  * Improved default parameters for onset detection, using adaptive
    spectral whitening and compression
  * Add support for libswresample
  * New options --miditap-note and --miditap-velo have been added to
    aubioonset and aubiotrack to adjust the note and velocity of the
    midi note emitted by onsets and beats.
  * Add a bunch of fixes, including improved documentation, build
    system fixes, and platform compatibility.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
</package>
<package pkgid="49074fd3012f803b798aeec12ab6c9a0455ebf7a50f97e89a93024c752fba710" name="python-aubio" arch="src">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="alarrosa@suse.com" date="1486382400">- Initial release</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Use singlespec macros
- Update to 0.4.5:
  * aubio: New python command line tool to extract information
  * Improved default parameters for onset detection, using adaptive
    spectral whitening and compression
  * Add support for libswresample
  * New options --miditap-note and --miditap-velo have been added to
    aubioonset and aubiotrack to adjust the note and velocity of the
    midi note emitted by onsets and beats.
  * Add a bunch of fixes, including improved documentation, build
    system fixes, and platform compatibility.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
</package>
<package pkgid="a43de6a8dd32a1f57672403729a87e1e4a3113d71bddb38616255125d60ac83c" name="python-azure-agent" arch="noarch">
  <version epoch="0" ver="2.2.18" rel="lp150.5.3.1"/>
  <changelog author="rjschwei@rjsdomain" date="1485518400">- Update to version 2.2.3 (bsc#1018369)
  + NSG improvements
  + CoreOS fix
  + Debian fixes
  + Apply patch from Debian
  + Unhandled errors
  + Handle ExtensionError from decide_version
  + Correct mkfile size check
  + Add a log message when primary nic is not found
  + Add telemetry event for host plugin usage
  + Fix typo in log message
  + Prevent duplicates in sysinfo
  + Add support for Match blocks in sshd config
  + Fix the logic for agent version
  + Support offline hostname changes
  + Ensure config file is updated correctly
  + Support NetworkManager leases
  + Fix password encoding
  + Minor bug fixes
  + Fix for hostnamectl
  + RHEL-7 hostname
  + Fix password encrypting failure in python 2.*
  + Handle interrupt signal
  + Fix the issues for mounting resourcedisk
- From 2.2.2
  + Cleanup SUSE config
  + Support for F5 Networks BIG-IP
  + Fix sfdisk options
  + Fix for fetch manifest
  + Fix config options for RDMA
  + Fix issue with xfs swapon
  + Add Clear Linux distro support
  + Handle deprovisioning interruption
  + Reduce goal state logging
  + Increase polling rate
  + RHUI cleanup
  + Add restart_if function for Alpine
  + Support OnHold flag
  + Fix for decode_config
  + Azure stack certificate fix
  + Enable over-provisioning support
  + Enable host plugin scenarios
  + RDMA updates
  + sfdisk logging fix
  + Big IP updates
- From 2.2.1
  + Correct the installed version check in decide_version</changelog>
  <changelog author="rjschwei@suse.com" date="1489406400">- Update to version 2.2.6 (bsc#1029223, bsc#1029224)
  + [#611] Improve logging when interface detection fails
  + [#603] Retry when get thuimbprint fails
  + [#602] Ensure host plugin calls fail gracefully
  + [#601] Handle interface resets more gracefully
  + [#600] Wait for partition before mounting
  + [#599] Correct check for heartbeat freshness
  + [#594] Fix RDMA reboot issue
  + [#588] Changed permissions for log directory
- From 2.2.5
  + [#587] Fix potential sync issue with incarnation number and cache
- From 2.2.4
  + [#579] Extend VM health status
  + [#578] Fix FreeBSD deprovision
  + [#577] Improve mount call and logging
  + [#573] Centos 7.0 hostnamectl fix</changelog>
  <changelog author="rjschwei@suse.com" date="1492776000">- Update to version 2.2.10 (bsc#1035418, bsc#1035419)
  + [#675] Clean up extension directories
  + [#673] Provisioning logging improvements
  + [#674] Override decode custom data
  + [#670] Add Arch distro support
- From version 2.2.9
  + [#665] Networking logging cleanup
  + [#666] Keygen logging cleanup
  + [#667] Reduce the monitoring loop wait time
- From version 2.2.8
  + [#649] Improve host plugin failure handling
  + [#647] Add telemetry for put status failures
  + [#646] Improve extension handler logging
  + [#645] Reduce guest agent update logging
  + [#644] Add basic 32-bit support to interface detection
  + [#641] Better heartbeat exception handling
  + [#640] Better unhandled exception logging
  + [#638] Improve NSG state management
  + [#637] Better handling and cleanup of old events
  + [#635] Pass environment variables to subprocess
  + [#634] Improve RDMA package matching
  + [#629] Better handling of resource disk mounting
  + [#624] Data disks udev rule
  + [#614] Add support for EulerOS
- From version 2.2.7
  + [#625] Enabled PageBlob support through HostGAPlugin</changelog>
  <changelog author="rjschwei@suse.com" date="1496923200">- Update to version 2.2.13 (bsc#1042202, bsc#1042203)
  + [#712] Initial support for OpenBSD
  + [#730] Archlinux documentation
  + [#743] Fix for FreeBSD resource disk discovery
  + [#748] Fix for host plugin response encoding
  + [#750] Fix for GAiA public key handling
  + [#751] Fix for host plugin channel initialization
  + [#752] Fix for AzureStack protocol error handling
  + [#753] Removal of iptables rules from AzureStack protocol
- From 2.2.12
  + [#711] -- There are too many log print to /var/log/waagent.log
  + [#714] -- Questionable split call in common/conf.py
  + [#717] -- Remove extension logs during deprovision
  + [#720] -- Reset of RDMA drivers not taking effect
  + [#721] -- WALA deprovision process not clean up all cloudinit files
  + [#724] -- Location of configuration file should be editable issue
  + [#725] -- v2.2.11 can throw unexpected exceptions on provisioned VMs
  + [#727] -- v2.2.11 cannot update status for RDFE VMs
- From 2.2.11
  + [#463] Ensure the transport certificate expires in no more than two
    years enhancement
  + [#470] Emit goal state processing performance metrics enhancement
  + [#518] Align with the Azure Stack protocol enhancement
  + [#531] Location of configuration file should be editable feature request
  + [#604] v2.2.x - Need new OS.SshDir in waagent.conf feature request
  + [#631] Will "waagent -deprovision[+user]" wipe the cloud-init data?
    feature request
  + [#668] Agent continuously logs error on FIPS compliant server
  + [#679] Enable auto-update for AzureStack feature request
  + [#682] Default route is not added if it already exists cla-not-required
  + [#684] mkfs options out of order
  + [#685] Change option order for mkfs. Alpine is being picky
  + [#686] Use of hostnameclt causes hostname rename lowercase for RHEL 7.x
  + [#687] Enable customer-supported cloud-init
  + [#688] Agent should purge /var/lib/waagent/events if it gets full
  + [#689] Remove superseded extension folders / zip files
  + [#693] Agent should remove unused extension directories and zip
    files enhancement
  + [#694] Agent should not issue an HTTP HEAD to determine status blob
    type enhancement
  + [#695] Ensure all udev rules are copied in Ubuntu cla-not-required
  + [#699] [2.2.10] Some questions about Extension clean up
  + [#701] Reduce polling time for extension processing
  + [#706] Provision Event is not Fired if Customer Forgets to Deprovision VM</changelog>
  <changelog author="rjschwei@suse.com" date="1497355200">- Modify dependencies, systemd is runtime, not build</changelog>
  <changelog author="rjschwei@suse.com" date="1500811200">- Remove timeout udev rules (bsc#1049480)
  + 99-azure-timeout.rules
  + Rule is broken
  + Timeout is being set by the eagent code</changelog>
  <changelog author="rjschwei@suse.com" date="1500811201">- Update to version 2.2.14 (bsc#1050000)
  + [#777] -- Deprovisioning when VM identifier changes is too aggressive
  + [#769] -- HostGAPlugin requests should never go through proxy
  + [#764] -- waagent -configuration-path:/path -start not take effect
  + [#761] -- MetadataProtocol has no client object
  + [#757] -- deprovision is executed even if input 'n'
  + [#754] -- /etc/resolv.conf is removed if create a VM base on
    an specialized image
  + [#746] -- Agent WALinuxAgent-2.2.12 is blacklisted - skipping download
  + [#740] -- Duplicate logging on RHEL/CentOS</changelog>
  <changelog author="rjschwei@suse.com" date="1500897600">- Add paa_noref_local_install.patch (bsc#1050229)
  + Do not refresh the repos when we install the local RDMA kmp,
    repo access has already failed, no need to try again</changelog>
  <changelog author="rjschwei@suse.com" date="1504872000">- Add paa_fix_driver_install_detect.patch (bsc#1057888)
  + Avoid the driver from re-installing if the same version is already
    installed, this avoids an enless reboot loop</changelog>
  <changelog author="rjschwei@suse.com" date="1505563200">- Update to version 2.2.17 (bsc#1058974, bsc#1058975)
  + Remove paa_noref_local_install.patch, included upstream
  + Setup build for Python 3 for distros &gt; SLE 12
  + [#879] -- OS.EnableFirewall=y breaks load balanced sets probing
- From 2.2.16
  + [#865] -- The agent should retry ETIMEDOUT (110) IOErrors
- From 2.2.15
  + [#783] -- The agent fails to use the standard Linux environment variables
    for HTTP proxy
  + [#784] -- Adjust http retry and logging
  + [#786] -- Add Provisioning.SshHostKeyPairType=auto to support ssh-keygen -A
  + [#791] -- Prevent bloating sudoers waagent when agent has problem
  + [#792] -- Clearlinux distro_name does not match
  + [#796] -- Accommodate new Clear Linux distro string in os-release
  + [#798] -- Support Ubuntu RDMA driver update
  + [#800] -- HostGAPlugin still use proxy while auto-updating
  + [#801] -- Agent fails to clean-up PID files
  + [#807] -- The agent should not emit duplicate events
  + [#808] -- The agent should more gracefully handle out-of-space disk
    errors (IOError 28)
  + [#811] -- Comments inline in /etc/waagent.conf cause config to not be read
  + [#812] -- Agent fails and isn't recoverable if an extension's log
    directory is not present anymore
  + [#823] -- Show config options in use
  + [#830] -- Ensure VM identifier is properly ordered
  + [#845] -- ')' is missed in show-configuration
  + [#850] -- Cannot get to state 'Running' with Provisioning.Enabled=n</changelog>
  <changelog author="rjschwei@suse.com" date="1505908800">- Fix typo in dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- BuildRequire distribution-release instead of
  openSUSE/sles-release.</changelog>
  <changelog author="rjschwei@suse.com" date="1507809600">- Update to version 2.2.18
  + [#868] Fix for sudoer update
  + [#886] Agent should not update outside of goal state
  + [#889] Firewall removal should not retry
  - Fixes issues introduces with 2.2.17</changelog>
  <changelog author="rjschwei@suse.com" date="1515153600">- Fix RDMA driver package version install issue (bsc#1074865)
  + Added paa_rdma_install_proper_driver.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1518091200">- Add 0001-Obtain-platform-information-in-Python-version-depend.patch
  to fix build on distribution with Python 3.6 and later (boo#997614)</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Modify 0001-Obtain-platform-information-in-Python-version-depend.patch to
  reflect agreed upon solution with upstream</changelog>
  <changelog author="rjschwei@suse.com" date="1519732800">- Add paa_force_py3_sle15.patch
  + Force use of Python 3 for SLE 15 and later</changelog>
  <changelog author="rjschwei@suse.com" date="1521547200">- Update paa_force_py3_sle15.patch (bsc#1061584)
  + Another reference to python, which points to python2</changelog>
  <changelog author="rjschwei@suse.com" date="1522670400">- Add 0001-Detect-openSUSE-and-SLES.patch (bsc#1087764)
  + Properly detect SLES 15 and openSUSE Leap 15 in Python 3</changelog>
  <changelog author="rjschwei@suse.com" date="1525953600">- Add 0001-Handle-the-disapperance-of-net-tools.patch (bsc#1092831)
  + Switch to using "ip route" command
- Add paa_sudo_sle15_nopwd.patch
  + Work around issue where SLE 15 will not accept the user password when
    using sudo, cause unknown, needed to time constraints w.r.t. release
- Add 0001-Properly-detect-SLES-15-for-rdma-support.patch
  + Properly detect SLES 15 for RDMA support</changelog>
</package>
<package pkgid="988a04b33bd737b900f3b34fedd35568bd24be58b682ca91b259e8ad932a5dba" name="python-azure-agent" arch="src">
  <version epoch="0" ver="2.2.18" rel="lp150.5.3.1"/>
  <changelog author="rjschwei@rjsdomain" date="1485518400">- Update to version 2.2.3 (bsc#1018369)
  + NSG improvements
  + CoreOS fix
  + Debian fixes
  + Apply patch from Debian
  + Unhandled errors
  + Handle ExtensionError from decide_version
  + Correct mkfile size check
  + Add a log message when primary nic is not found
  + Add telemetry event for host plugin usage
  + Fix typo in log message
  + Prevent duplicates in sysinfo
  + Add support for Match blocks in sshd config
  + Fix the logic for agent version
  + Support offline hostname changes
  + Ensure config file is updated correctly
  + Support NetworkManager leases
  + Fix password encoding
  + Minor bug fixes
  + Fix for hostnamectl
  + RHEL-7 hostname
  + Fix password encrypting failure in python 2.*
  + Handle interrupt signal
  + Fix the issues for mounting resourcedisk
- From 2.2.2
  + Cleanup SUSE config
  + Support for F5 Networks BIG-IP
  + Fix sfdisk options
  + Fix for fetch manifest
  + Fix config options for RDMA
  + Fix issue with xfs swapon
  + Add Clear Linux distro support
  + Handle deprovisioning interruption
  + Reduce goal state logging
  + Increase polling rate
  + RHUI cleanup
  + Add restart_if function for Alpine
  + Support OnHold flag
  + Fix for decode_config
  + Azure stack certificate fix
  + Enable over-provisioning support
  + Enable host plugin scenarios
  + RDMA updates
  + sfdisk logging fix
  + Big IP updates
- From 2.2.1
  + Correct the installed version check in decide_version</changelog>
  <changelog author="rjschwei@suse.com" date="1489406400">- Update to version 2.2.6 (bsc#1029223, bsc#1029224)
  + [#611] Improve logging when interface detection fails
  + [#603] Retry when get thuimbprint fails
  + [#602] Ensure host plugin calls fail gracefully
  + [#601] Handle interface resets more gracefully
  + [#600] Wait for partition before mounting
  + [#599] Correct check for heartbeat freshness
  + [#594] Fix RDMA reboot issue
  + [#588] Changed permissions for log directory
- From 2.2.5
  + [#587] Fix potential sync issue with incarnation number and cache
- From 2.2.4
  + [#579] Extend VM health status
  + [#578] Fix FreeBSD deprovision
  + [#577] Improve mount call and logging
  + [#573] Centos 7.0 hostnamectl fix</changelog>
  <changelog author="rjschwei@suse.com" date="1492776000">- Update to version 2.2.10 (bsc#1035418, bsc#1035419)
  + [#675] Clean up extension directories
  + [#673] Provisioning logging improvements
  + [#674] Override decode custom data
  + [#670] Add Arch distro support
- From version 2.2.9
  + [#665] Networking logging cleanup
  + [#666] Keygen logging cleanup
  + [#667] Reduce the monitoring loop wait time
- From version 2.2.8
  + [#649] Improve host plugin failure handling
  + [#647] Add telemetry for put status failures
  + [#646] Improve extension handler logging
  + [#645] Reduce guest agent update logging
  + [#644] Add basic 32-bit support to interface detection
  + [#641] Better heartbeat exception handling
  + [#640] Better unhandled exception logging
  + [#638] Improve NSG state management
  + [#637] Better handling and cleanup of old events
  + [#635] Pass environment variables to subprocess
  + [#634] Improve RDMA package matching
  + [#629] Better handling of resource disk mounting
  + [#624] Data disks udev rule
  + [#614] Add support for EulerOS
- From version 2.2.7
  + [#625] Enabled PageBlob support through HostGAPlugin</changelog>
  <changelog author="rjschwei@suse.com" date="1496923200">- Update to version 2.2.13 (bsc#1042202, bsc#1042203)
  + [#712] Initial support for OpenBSD
  + [#730] Archlinux documentation
  + [#743] Fix for FreeBSD resource disk discovery
  + [#748] Fix for host plugin response encoding
  + [#750] Fix for GAiA public key handling
  + [#751] Fix for host plugin channel initialization
  + [#752] Fix for AzureStack protocol error handling
  + [#753] Removal of iptables rules from AzureStack protocol
- From 2.2.12
  + [#711] -- There are too many log print to /var/log/waagent.log
  + [#714] -- Questionable split call in common/conf.py
  + [#717] -- Remove extension logs during deprovision
  + [#720] -- Reset of RDMA drivers not taking effect
  + [#721] -- WALA deprovision process not clean up all cloudinit files
  + [#724] -- Location of configuration file should be editable issue
  + [#725] -- v2.2.11 can throw unexpected exceptions on provisioned VMs
  + [#727] -- v2.2.11 cannot update status for RDFE VMs
- From 2.2.11
  + [#463] Ensure the transport certificate expires in no more than two
    years enhancement
  + [#470] Emit goal state processing performance metrics enhancement
  + [#518] Align with the Azure Stack protocol enhancement
  + [#531] Location of configuration file should be editable feature request
  + [#604] v2.2.x - Need new OS.SshDir in waagent.conf feature request
  + [#631] Will "waagent -deprovision[+user]" wipe the cloud-init data?
    feature request
  + [#668] Agent continuously logs error on FIPS compliant server
  + [#679] Enable auto-update for AzureStack feature request
  + [#682] Default route is not added if it already exists cla-not-required
  + [#684] mkfs options out of order
  + [#685] Change option order for mkfs. Alpine is being picky
  + [#686] Use of hostnameclt causes hostname rename lowercase for RHEL 7.x
  + [#687] Enable customer-supported cloud-init
  + [#688] Agent should purge /var/lib/waagent/events if it gets full
  + [#689] Remove superseded extension folders / zip files
  + [#693] Agent should remove unused extension directories and zip
    files enhancement
  + [#694] Agent should not issue an HTTP HEAD to determine status blob
    type enhancement
  + [#695] Ensure all udev rules are copied in Ubuntu cla-not-required
  + [#699] [2.2.10] Some questions about Extension clean up
  + [#701] Reduce polling time for extension processing
  + [#706] Provision Event is not Fired if Customer Forgets to Deprovision VM</changelog>
  <changelog author="rjschwei@suse.com" date="1497355200">- Modify dependencies, systemd is runtime, not build</changelog>
  <changelog author="rjschwei@suse.com" date="1500811200">- Remove timeout udev rules (bsc#1049480)
  + 99-azure-timeout.rules
  + Rule is broken
  + Timeout is being set by the eagent code</changelog>
  <changelog author="rjschwei@suse.com" date="1500811201">- Update to version 2.2.14 (bsc#1050000)
  + [#777] -- Deprovisioning when VM identifier changes is too aggressive
  + [#769] -- HostGAPlugin requests should never go through proxy
  + [#764] -- waagent -configuration-path:/path -start not take effect
  + [#761] -- MetadataProtocol has no client object
  + [#757] -- deprovision is executed even if input 'n'
  + [#754] -- /etc/resolv.conf is removed if create a VM base on
    an specialized image
  + [#746] -- Agent WALinuxAgent-2.2.12 is blacklisted - skipping download
  + [#740] -- Duplicate logging on RHEL/CentOS</changelog>
  <changelog author="rjschwei@suse.com" date="1500897600">- Add paa_noref_local_install.patch (bsc#1050229)
  + Do not refresh the repos when we install the local RDMA kmp,
    repo access has already failed, no need to try again</changelog>
  <changelog author="rjschwei@suse.com" date="1504872000">- Add paa_fix_driver_install_detect.patch (bsc#1057888)
  + Avoid the driver from re-installing if the same version is already
    installed, this avoids an enless reboot loop</changelog>
  <changelog author="rjschwei@suse.com" date="1505563200">- Update to version 2.2.17 (bsc#1058974, bsc#1058975)
  + Remove paa_noref_local_install.patch, included upstream
  + Setup build for Python 3 for distros &gt; SLE 12
  + [#879] -- OS.EnableFirewall=y breaks load balanced sets probing
- From 2.2.16
  + [#865] -- The agent should retry ETIMEDOUT (110) IOErrors
- From 2.2.15
  + [#783] -- The agent fails to use the standard Linux environment variables
    for HTTP proxy
  + [#784] -- Adjust http retry and logging
  + [#786] -- Add Provisioning.SshHostKeyPairType=auto to support ssh-keygen -A
  + [#791] -- Prevent bloating sudoers waagent when agent has problem
  + [#792] -- Clearlinux distro_name does not match
  + [#796] -- Accommodate new Clear Linux distro string in os-release
  + [#798] -- Support Ubuntu RDMA driver update
  + [#800] -- HostGAPlugin still use proxy while auto-updating
  + [#801] -- Agent fails to clean-up PID files
  + [#807] -- The agent should not emit duplicate events
  + [#808] -- The agent should more gracefully handle out-of-space disk
    errors (IOError 28)
  + [#811] -- Comments inline in /etc/waagent.conf cause config to not be read
  + [#812] -- Agent fails and isn't recoverable if an extension's log
    directory is not present anymore
  + [#823] -- Show config options in use
  + [#830] -- Ensure VM identifier is properly ordered
  + [#845] -- ')' is missed in show-configuration
  + [#850] -- Cannot get to state 'Running' with Provisioning.Enabled=n</changelog>
  <changelog author="rjschwei@suse.com" date="1505908800">- Fix typo in dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- BuildRequire distribution-release instead of
  openSUSE/sles-release.</changelog>
  <changelog author="rjschwei@suse.com" date="1507809600">- Update to version 2.2.18
  + [#868] Fix for sudoer update
  + [#886] Agent should not update outside of goal state
  + [#889] Firewall removal should not retry
  - Fixes issues introduces with 2.2.17</changelog>
  <changelog author="rjschwei@suse.com" date="1515153600">- Fix RDMA driver package version install issue (bsc#1074865)
  + Added paa_rdma_install_proper_driver.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1518091200">- Add 0001-Obtain-platform-information-in-Python-version-depend.patch
  to fix build on distribution with Python 3.6 and later (boo#997614)</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Modify 0001-Obtain-platform-information-in-Python-version-depend.patch to
  reflect agreed upon solution with upstream</changelog>
  <changelog author="rjschwei@suse.com" date="1519732800">- Add paa_force_py3_sle15.patch
  + Force use of Python 3 for SLE 15 and later</changelog>
  <changelog author="rjschwei@suse.com" date="1521547200">- Update paa_force_py3_sle15.patch (bsc#1061584)
  + Another reference to python, which points to python2</changelog>
  <changelog author="rjschwei@suse.com" date="1522670400">- Add 0001-Detect-openSUSE-and-SLES.patch (bsc#1087764)
  + Properly detect SLES 15 and openSUSE Leap 15 in Python 3</changelog>
  <changelog author="rjschwei@suse.com" date="1525953600">- Add 0001-Handle-the-disapperance-of-net-tools.patch (bsc#1092831)
  + Switch to using "ip route" command
- Add paa_sudo_sle15_nopwd.patch
  + Work around issue where SLE 15 will not accept the user password when
    using sudo, cause unknown, needed to time constraints w.r.t. release
- Add 0001-Properly-detect-SLES-15-for-rdma-support.patch
  + Properly detect SLES 15 for RDMA support</changelog>
</package>
<package pkgid="ab79ffc4f13cf8782c1655f490d247e4ab74b9b15416be833401924e312f82e4" name="python-azure-agent-test" arch="noarch">
  <version epoch="0" ver="2.2.18" rel="lp150.5.3.1"/>
  <changelog author="rjschwei@rjsdomain" date="1485518400">- Update to version 2.2.3 (bsc#1018369)
  + NSG improvements
  + CoreOS fix
  + Debian fixes
  + Apply patch from Debian
  + Unhandled errors
  + Handle ExtensionError from decide_version
  + Correct mkfile size check
  + Add a log message when primary nic is not found
  + Add telemetry event for host plugin usage
  + Fix typo in log message
  + Prevent duplicates in sysinfo
  + Add support for Match blocks in sshd config
  + Fix the logic for agent version
  + Support offline hostname changes
  + Ensure config file is updated correctly
  + Support NetworkManager leases
  + Fix password encoding
  + Minor bug fixes
  + Fix for hostnamectl
  + RHEL-7 hostname
  + Fix password encrypting failure in python 2.*
  + Handle interrupt signal
  + Fix the issues for mounting resourcedisk
- From 2.2.2
  + Cleanup SUSE config
  + Support for F5 Networks BIG-IP
  + Fix sfdisk options
  + Fix for fetch manifest
  + Fix config options for RDMA
  + Fix issue with xfs swapon
  + Add Clear Linux distro support
  + Handle deprovisioning interruption
  + Reduce goal state logging
  + Increase polling rate
  + RHUI cleanup
  + Add restart_if function for Alpine
  + Support OnHold flag
  + Fix for decode_config
  + Azure stack certificate fix
  + Enable over-provisioning support
  + Enable host plugin scenarios
  + RDMA updates
  + sfdisk logging fix
  + Big IP updates
- From 2.2.1
  + Correct the installed version check in decide_version</changelog>
  <changelog author="rjschwei@suse.com" date="1489406400">- Update to version 2.2.6 (bsc#1029223, bsc#1029224)
  + [#611] Improve logging when interface detection fails
  + [#603] Retry when get thuimbprint fails
  + [#602] Ensure host plugin calls fail gracefully
  + [#601] Handle interface resets more gracefully
  + [#600] Wait for partition before mounting
  + [#599] Correct check for heartbeat freshness
  + [#594] Fix RDMA reboot issue
  + [#588] Changed permissions for log directory
- From 2.2.5
  + [#587] Fix potential sync issue with incarnation number and cache
- From 2.2.4
  + [#579] Extend VM health status
  + [#578] Fix FreeBSD deprovision
  + [#577] Improve mount call and logging
  + [#573] Centos 7.0 hostnamectl fix</changelog>
  <changelog author="rjschwei@suse.com" date="1492776000">- Update to version 2.2.10 (bsc#1035418, bsc#1035419)
  + [#675] Clean up extension directories
  + [#673] Provisioning logging improvements
  + [#674] Override decode custom data
  + [#670] Add Arch distro support
- From version 2.2.9
  + [#665] Networking logging cleanup
  + [#666] Keygen logging cleanup
  + [#667] Reduce the monitoring loop wait time
- From version 2.2.8
  + [#649] Improve host plugin failure handling
  + [#647] Add telemetry for put status failures
  + [#646] Improve extension handler logging
  + [#645] Reduce guest agent update logging
  + [#644] Add basic 32-bit support to interface detection
  + [#641] Better heartbeat exception handling
  + [#640] Better unhandled exception logging
  + [#638] Improve NSG state management
  + [#637] Better handling and cleanup of old events
  + [#635] Pass environment variables to subprocess
  + [#634] Improve RDMA package matching
  + [#629] Better handling of resource disk mounting
  + [#624] Data disks udev rule
  + [#614] Add support for EulerOS
- From version 2.2.7
  + [#625] Enabled PageBlob support through HostGAPlugin</changelog>
  <changelog author="rjschwei@suse.com" date="1496923200">- Update to version 2.2.13 (bsc#1042202, bsc#1042203)
  + [#712] Initial support for OpenBSD
  + [#730] Archlinux documentation
  + [#743] Fix for FreeBSD resource disk discovery
  + [#748] Fix for host plugin response encoding
  + [#750] Fix for GAiA public key handling
  + [#751] Fix for host plugin channel initialization
  + [#752] Fix for AzureStack protocol error handling
  + [#753] Removal of iptables rules from AzureStack protocol
- From 2.2.12
  + [#711] -- There are too many log print to /var/log/waagent.log
  + [#714] -- Questionable split call in common/conf.py
  + [#717] -- Remove extension logs during deprovision
  + [#720] -- Reset of RDMA drivers not taking effect
  + [#721] -- WALA deprovision process not clean up all cloudinit files
  + [#724] -- Location of configuration file should be editable issue
  + [#725] -- v2.2.11 can throw unexpected exceptions on provisioned VMs
  + [#727] -- v2.2.11 cannot update status for RDFE VMs
- From 2.2.11
  + [#463] Ensure the transport certificate expires in no more than two
    years enhancement
  + [#470] Emit goal state processing performance metrics enhancement
  + [#518] Align with the Azure Stack protocol enhancement
  + [#531] Location of configuration file should be editable feature request
  + [#604] v2.2.x - Need new OS.SshDir in waagent.conf feature request
  + [#631] Will "waagent -deprovision[+user]" wipe the cloud-init data?
    feature request
  + [#668] Agent continuously logs error on FIPS compliant server
  + [#679] Enable auto-update for AzureStack feature request
  + [#682] Default route is not added if it already exists cla-not-required
  + [#684] mkfs options out of order
  + [#685] Change option order for mkfs. Alpine is being picky
  + [#686] Use of hostnameclt causes hostname rename lowercase for RHEL 7.x
  + [#687] Enable customer-supported cloud-init
  + [#688] Agent should purge /var/lib/waagent/events if it gets full
  + [#689] Remove superseded extension folders / zip files
  + [#693] Agent should remove unused extension directories and zip
    files enhancement
  + [#694] Agent should not issue an HTTP HEAD to determine status blob
    type enhancement
  + [#695] Ensure all udev rules are copied in Ubuntu cla-not-required
  + [#699] [2.2.10] Some questions about Extension clean up
  + [#701] Reduce polling time for extension processing
  + [#706] Provision Event is not Fired if Customer Forgets to Deprovision VM</changelog>
  <changelog author="rjschwei@suse.com" date="1497355200">- Modify dependencies, systemd is runtime, not build</changelog>
  <changelog author="rjschwei@suse.com" date="1500811200">- Remove timeout udev rules (bsc#1049480)
  + 99-azure-timeout.rules
  + Rule is broken
  + Timeout is being set by the eagent code</changelog>
  <changelog author="rjschwei@suse.com" date="1500811201">- Update to version 2.2.14 (bsc#1050000)
  + [#777] -- Deprovisioning when VM identifier changes is too aggressive
  + [#769] -- HostGAPlugin requests should never go through proxy
  + [#764] -- waagent -configuration-path:/path -start not take effect
  + [#761] -- MetadataProtocol has no client object
  + [#757] -- deprovision is executed even if input 'n'
  + [#754] -- /etc/resolv.conf is removed if create a VM base on
    an specialized image
  + [#746] -- Agent WALinuxAgent-2.2.12 is blacklisted - skipping download
  + [#740] -- Duplicate logging on RHEL/CentOS</changelog>
  <changelog author="rjschwei@suse.com" date="1500897600">- Add paa_noref_local_install.patch (bsc#1050229)
  + Do not refresh the repos when we install the local RDMA kmp,
    repo access has already failed, no need to try again</changelog>
  <changelog author="rjschwei@suse.com" date="1504872000">- Add paa_fix_driver_install_detect.patch (bsc#1057888)
  + Avoid the driver from re-installing if the same version is already
    installed, this avoids an enless reboot loop</changelog>
  <changelog author="rjschwei@suse.com" date="1505563200">- Update to version 2.2.17 (bsc#1058974, bsc#1058975)
  + Remove paa_noref_local_install.patch, included upstream
  + Setup build for Python 3 for distros &gt; SLE 12
  + [#879] -- OS.EnableFirewall=y breaks load balanced sets probing
- From 2.2.16
  + [#865] -- The agent should retry ETIMEDOUT (110) IOErrors
- From 2.2.15
  + [#783] -- The agent fails to use the standard Linux environment variables
    for HTTP proxy
  + [#784] -- Adjust http retry and logging
  + [#786] -- Add Provisioning.SshHostKeyPairType=auto to support ssh-keygen -A
  + [#791] -- Prevent bloating sudoers waagent when agent has problem
  + [#792] -- Clearlinux distro_name does not match
  + [#796] -- Accommodate new Clear Linux distro string in os-release
  + [#798] -- Support Ubuntu RDMA driver update
  + [#800] -- HostGAPlugin still use proxy while auto-updating
  + [#801] -- Agent fails to clean-up PID files
  + [#807] -- The agent should not emit duplicate events
  + [#808] -- The agent should more gracefully handle out-of-space disk
    errors (IOError 28)
  + [#811] -- Comments inline in /etc/waagent.conf cause config to not be read
  + [#812] -- Agent fails and isn't recoverable if an extension's log
    directory is not present anymore
  + [#823] -- Show config options in use
  + [#830] -- Ensure VM identifier is properly ordered
  + [#845] -- ')' is missed in show-configuration
  + [#850] -- Cannot get to state 'Running' with Provisioning.Enabled=n</changelog>
  <changelog author="rjschwei@suse.com" date="1505908800">- Fix typo in dependency</changelog>
  <changelog author="dimstar@opensuse.org" date="1507032000">- BuildRequire distribution-release instead of
  openSUSE/sles-release.</changelog>
  <changelog author="rjschwei@suse.com" date="1507809600">- Update to version 2.2.18
  + [#868] Fix for sudoer update
  + [#886] Agent should not update outside of goal state
  + [#889] Firewall removal should not retry
  - Fixes issues introduces with 2.2.17</changelog>
  <changelog author="rjschwei@suse.com" date="1515153600">- Fix RDMA driver package version install issue (bsc#1074865)
  + Added paa_rdma_install_proper_driver.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1518091200">- Add 0001-Obtain-platform-information-in-Python-version-depend.patch
  to fix build on distribution with Python 3.6 and later (boo#997614)</changelog>
  <changelog author="rjschwei@suse.com" date="1519214400">- Modify 0001-Obtain-platform-information-in-Python-version-depend.patch to
  reflect agreed upon solution with upstream</changelog>
  <changelog author="rjschwei@suse.com" date="1519732800">- Add paa_force_py3_sle15.patch
  + Force use of Python 3 for SLE 15 and later</changelog>
  <changelog author="rjschwei@suse.com" date="1521547200">- Update paa_force_py3_sle15.patch (bsc#1061584)
  + Another reference to python, which points to python2</changelog>
  <changelog author="rjschwei@suse.com" date="1522670400">- Add 0001-Detect-openSUSE-and-SLES.patch (bsc#1087764)
  + Properly detect SLES 15 and openSUSE Leap 15 in Python 3</changelog>
  <changelog author="rjschwei@suse.com" date="1525953600">- Add 0001-Handle-the-disapperance-of-net-tools.patch (bsc#1092831)
  + Switch to using "ip route" command
- Add paa_sudo_sle15_nopwd.patch
  + Work around issue where SLE 15 will not accept the user password when
    using sudo, cause unknown, needed to time constraints w.r.t. release
- Add 0001-Properly-detect-SLES-15-for-rdma-support.patch
  + Properly detect SLES 15 for RDMA support</changelog>
</package>
<package pkgid="142cc25cd94886d76fafbc0b5aec4508d1ee95e12d9f114ba33192177ef2422e" name="python-configargparse" arch="src">
  <version epoch="0" ver="0.10.0" rel="lp150.2.3.1"/>
  <changelog author="freitag@opensuse.org" date="1425384000">- Initial package release</changelog>
  <changelog author="freitag@owncloud.com" date="1425470400">- Update to upstream version 0.9.3 to make mitmproxy work.</changelog>
  <changelog author="freitag@owncloud.com" date="1425470401">- Some minor cleanups.</changelog>
  <changelog author="freitag@owncloud.com" date="1425902400">- Add LICENSE file to doc section of the package
- Use python-setuptools as dependency
- Use full link to source.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1450353600">- Updated to version 0.10.0
  * config file syntax is now easier to override or extend using the new
    constructor arg: config_file_parser (via merged gh#bw2/ConfigArgParse#28 - thanks @lahwaacz )
  * support for python 2.6 (via merged gh#bw2/ConfigArgParse#18 - thanks @kuba )
  * replace dashes with underscores in env. var names when using the
    auto-env-var feature (via merged gh#bw2/ConfigArgParse#29 - thanks @helgi )
- Fixed download-link and homepage
- Fixed license</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mcepl@suse.com" date="1526644800">- Cleanup SPEC file and add check section</changelog>
</package>
<package pkgid="54705e471a0828d5b145352849a719ef9f27ca54fb2f62fc83aba4e547b1f495" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="658306c6f600a5a6ae9f979ac0083e107c1942ae998bce4dd6f7cc41b6522c31" name="python-kiwi" arch="src">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="46a0c492f4f8d50aea1f9e8e59771a15d645a30aba103c15a6f6335e9b497cec" name="python-libmount" arch="src">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="4abf49a1f0cd982aa2197db38dbf034acf1188000b48a57bae0fd348f2c44dcb" name="python-libmount" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="89385baa35ec6d23fcf323b6977b82bd70f0ea03295d466203b3ef39dcf6adf7" name="python-libmount" arch="src">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="378832153e5de932f2ae544a1d7bb6c6d7bb98af8837e2bdf528abda85d0287a" name="python-libmount" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="933b3abbbddd12b6a681038db75ed7f84ee04ddaa009718cd072b1774abaa6f6" name="python-llfuse" arch="src">
  <version epoch="0" ver="1.3.5" rel="lp150.2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1293796800">- initial version (0.29.4)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1305288000">- update to 0.31</changelog>
  <changelog author="chris@computersalat.de" date="1323604800">- update to 0.37.1
  * Fixed a segfault-causing race condition in Lock.acquire() and
    Lock.yield().
- 2011-12-05, llfuse 0.37
  * Explicitly call fuse_chan_destroy() in llfuse.close(), so
    that the mountpoint becomes inaccessible right away, even
    while the process is still running.
  * Added get_ino_t_bytes() and get_off_t_bytes() that return
    the number of bytes used for representing inode numbers
    and file offsets.
  * The yield_() method of the global lock now takes an additional
  * count* argument that can be used to yield the lock more than
    once.
  * Changed implementation of global lock. The global lock is
    no longer a mutex, but a boolean variable protected by a mutex,
    and changes are tracked with a condition object. This allows
    lock.yield() to work properly: if there are other threads waiting
    for the lock, they are guaranteed to run. If there are no other
    threads waiting for the lock, execution of the active thread
    continues immediately.
    The previous implementation using sched_yield() was mostly
    broken: threads trying to acquire the global lock were calling
    pthread_mutex_lock, so they got removed from the kernels
    runqueue. However, calls to sched_yield() would just put the
    active thread into the expired runqueue, and calls to
    pthread_mutex_unlock apparently do not synchronously move the
    threads waiting for the lock back to a runqueue. Therefore, most
    of the time the active thread would be the only thread in any
    runqueue and thus continue to run.
  * The Operations.forget() method now receives a list of
    (inode, nlookup) tuples rather than just one such tuple.
  * invalidate_entry() and invalidate_inode() no longer work
    synchronously. Instead, the message is put in a queue and send by
    a background thread.
  * The acquire() method of the global lock now has an optional
  * timeout* parameter.
  * The create() request handler now receives the open flags
    as an additional parameter.
- for more info please see Changes.txt</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.40
  * Re-raising an exception from a request handler now works
    correctly under Python 3. Problems were caused by a Cython bug,
    but llfuse now works around the issue.
  * File atime, ctime and mtime can now also be represented as
    nanosecond integer values for increased resolution.
  * Python-llfuse no longer includes the setuptools/distribute
    bootstrap script. This module thus has to be installed manually
    if not already present on the system.
  * Duck-typing of the Operations instance is now supported.
  * Python-llfuse no longer requires a re-compilation of the
    Cython code (setup.py build_cython step) when compiling for MacOS
    or FreeBSD.
  * Extended attributes are now properly supported under FreeBSD.
- General spec file clean-up</changelog>
  <changelog author="t.gruner@katodev.de" date="1503576000">- change spec-file for multi-python build
- Update to version 1.2
  * The attr argument of the ~Operations.setattr handler now contains
    valid values only for the attributes that are to be set.
  * Previously, the documentation assorted that other attributes would
    be set to the original (unchanged) values. However, that was actually
    never the case.
- Release 1.1.1 (2016-07-27)
  * Fixed the description of the ~Operations.lookup handler (should
    return zero if there is no such entry, not a negative value).
  * Fixed the description of the EntryAttributes structure (descriptions
    of ~EntryAttributes.attr_timeout and ~EntryAttributes.entry_timeout
    were switched).
- Release 1.1 (2016-05-23)
  * Added support for nanosecond resolution time-stamps in GNU/kFreeBSD.
  * Fixed another set of build issues on FreeBSD.
- Release 1.0 (2016-03-08)
  * Note: The 1.0 version number does not imply any special stability or
    an API freeze. It's a consequence of switching to semantic versioning,
    where backwards incompatible changes will always result in increased
    major version.
  * Fixed an overflow when accessing the *st_xtime_ns attributes of the
    ~llfuse.EntryAttributes class from Python on 32-bit systems.
  * POTENTIAL COMPATIBILITY BREAK: The ~Operations.destroy handler is
    now called with the global lock acquired.
- Release 0.43 (2016-02-23)
  * Fixed build-failure under OS-X.
  * Fixed some build failures under FreeBSD (hopefully all of them,
    but no testers were available before the release).
  * The workers parameter to llfuse.main may now be None.
- Release 0.42.1 (2016-02-01)
  * Include HTML documentation.
- Release 0.42 (2016-01-30)
  * The documentation has been clarified and extended - please take
    a look even if you're already familiar with Python-LLFUSE.
  * Extended coverage of unit tests.
  * Fixed a compile error under OS-X.
  * Added notify_store function.
  * Added get_sup_groups function.
  * The ~Operations.read handler may now return arbitrary objects that
    as long as they implement the buffer protocol.
  * Implemented a forget_multi handler (used behind the scenes).
  * Many classes were rewritten in Cython for improved performance.
  * Python thread-specific data is now initialized only once rather
    than every time a handler is called.
  * SIGINT (Ctrl-C) now properly terminates llfuse.main also when
    running with multiple workers.
  * The return value of llfuse.main now indicates if the loop was
    terminated due to an unmount request or due to a signal.
  * BACKWARDS INCOMPATIBLE CHANGES:
  * Ducktyping the EntryAttributes class is no longer allowed, Operations
    methods must return instances of this class (rather than any object
    that provides the neccessary attributes).
  * The !st_Xtime attributes of the EntryAttributes have been dropped
    in favor of the !st_Xtime_ns attributes.
  * The setattr method now always receives a completely filled
    EntryAttributes instance. To determine which attributes should be
    changed, a new fields argument has been introduced.
  * The ~Operations.setattr method now also receives an fh parameter.
  * The llfuse.main function now has a workers parameter, and the
    single parameter was dropped.
  * Almost all request handlers now receive a RequestContext instance
    in an additional parameter.
- Release 0.41.1 (2015-08-22)
  * Added some files in :file:`test/` that were missing in the
    0.41 tarball. Tests now support the --installed option, produce
    prettier output, and check for error messages printed to stderr
    or stdout.
  * Python-LLFUSE can now also be built on NetBSD.
  * Added support for FUSE_SET_ATTR_ATIME_NOW and
    FUSE_SET_ATTR_MTIME_NOW setattr flags. Previosly, these would be
    silently ignored.
  * Fixed an AssertionError in :file:`examples/passthroughfs.py`
- Release 0.41 (2015-08-20)
  * Fixed a syntax error in contrib/tmpfs.py
  * Introduced an !llfuse.__version__ attribute.
  * Added more reasonable default values for llfuse.EntryAttributes.
  * Added new minimal example, :file:`examples/lltest.py`.
  * Added unit tests.
  * Added an example for a pass-through file system,
    `examples/passthroughfs.py`.</changelog>
  <changelog author="alarrosa@suse.com" date="1504699200">- Split documentation into a new python-llfuse-docs package.
- Added full changelog in the previous changelog entry</changelog>
  <changelog author="alarrosa@suse.com" date="1515153600">- Update to version 1.3.2
  * Minor bugfixes.
- Update to version 1.3.1
  * The main loop now terminates properly again when terminated by a signal.
- Update to version 1.3
  * The StatvfsData class now has an !~StatvfsData.f_namemax attribute.
  * EntryAttributes and StatvfsData instances can now be pickled and copied.
    Other llfuse classes now raise an exception when the do not support
    pickling/copying.</changelog>
  <changelog author="alarrosa@suse.com" date="1515499200">- Remove %check section since it's not checking anything</changelog>
  <changelog author="alarrosa@suse.com" date="1529323200">- Update to version 1.3.4
  * No-change rebuild with Cython 0.28.2.
- Update to version 1.3.3
  * Dropped pytest-catchlog dependency and add support for Pytest 3.3.0.
  * Minor bugfixes.
- Add fix-char-cast-to-unsigned-int.patch to fix a compiler error when
  casting from char to Py_UNICODE (unsigned int) due to a possible change
  of sign.
- Add fix-test-for-fusermount.patch to skip the tests that rely on
  fusermount since it doesn't work in OBS's chroot.
- Add %check section back. It's not possible to check all tests since for
  that, the user that runs the test should be in the trusted group, but
  at least some tests are run.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Add patch to build with new attr:
  * llfuse-attr-2.4.48.patch
- Drop contextlib2 dependency
- Run tests unconditionally</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1537358400">- Update to version 1.3.5
  * Add `handle_signals` option to `llfuse.main`
  * Several fixes to `examples/passthroughfs.py`
  * Now compatible with Python 3.7
- Remove patch already in upstream.
  * llfuse-attr-2.4.48.patch</changelog>
</package>
<package pkgid="6eaa26dd88c71a29ea222146e63ec3c1ded97bdf3b3951ed0fdcd2696ed839b9" name="python-llfuse-docs" arch="noarch">
  <version epoch="0" ver="1.3.5" rel="lp150.2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1293796800">- initial version (0.29.4)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1305288000">- update to 0.31</changelog>
  <changelog author="chris@computersalat.de" date="1323604800">- update to 0.37.1
  * Fixed a segfault-causing race condition in Lock.acquire() and
    Lock.yield().
- 2011-12-05, llfuse 0.37
  * Explicitly call fuse_chan_destroy() in llfuse.close(), so
    that the mountpoint becomes inaccessible right away, even
    while the process is still running.
  * Added get_ino_t_bytes() and get_off_t_bytes() that return
    the number of bytes used for representing inode numbers
    and file offsets.
  * The yield_() method of the global lock now takes an additional
  * count* argument that can be used to yield the lock more than
    once.
  * Changed implementation of global lock. The global lock is
    no longer a mutex, but a boolean variable protected by a mutex,
    and changes are tracked with a condition object. This allows
    lock.yield() to work properly: if there are other threads waiting
    for the lock, they are guaranteed to run. If there are no other
    threads waiting for the lock, execution of the active thread
    continues immediately.
    The previous implementation using sched_yield() was mostly
    broken: threads trying to acquire the global lock were calling
    pthread_mutex_lock, so they got removed from the kernels
    runqueue. However, calls to sched_yield() would just put the
    active thread into the expired runqueue, and calls to
    pthread_mutex_unlock apparently do not synchronously move the
    threads waiting for the lock back to a runqueue. Therefore, most
    of the time the active thread would be the only thread in any
    runqueue and thus continue to run.
  * The Operations.forget() method now receives a list of
    (inode, nlookup) tuples rather than just one such tuple.
  * invalidate_entry() and invalidate_inode() no longer work
    synchronously. Instead, the message is put in a queue and send by
    a background thread.
  * The acquire() method of the global lock now has an optional
  * timeout* parameter.
  * The create() request handler now receives the open flags
    as an additional parameter.
- for more info please see Changes.txt</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.40
  * Re-raising an exception from a request handler now works
    correctly under Python 3. Problems were caused by a Cython bug,
    but llfuse now works around the issue.
  * File atime, ctime and mtime can now also be represented as
    nanosecond integer values for increased resolution.
  * Python-llfuse no longer includes the setuptools/distribute
    bootstrap script. This module thus has to be installed manually
    if not already present on the system.
  * Duck-typing of the Operations instance is now supported.
  * Python-llfuse no longer requires a re-compilation of the
    Cython code (setup.py build_cython step) when compiling for MacOS
    or FreeBSD.
  * Extended attributes are now properly supported under FreeBSD.
- General spec file clean-up</changelog>
  <changelog author="t.gruner@katodev.de" date="1503576000">- change spec-file for multi-python build
- Update to version 1.2
  * The attr argument of the ~Operations.setattr handler now contains
    valid values only for the attributes that are to be set.
  * Previously, the documentation assorted that other attributes would
    be set to the original (unchanged) values. However, that was actually
    never the case.
- Release 1.1.1 (2016-07-27)
  * Fixed the description of the ~Operations.lookup handler (should
    return zero if there is no such entry, not a negative value).
  * Fixed the description of the EntryAttributes structure (descriptions
    of ~EntryAttributes.attr_timeout and ~EntryAttributes.entry_timeout
    were switched).
- Release 1.1 (2016-05-23)
  * Added support for nanosecond resolution time-stamps in GNU/kFreeBSD.
  * Fixed another set of build issues on FreeBSD.
- Release 1.0 (2016-03-08)
  * Note: The 1.0 version number does not imply any special stability or
    an API freeze. It's a consequence of switching to semantic versioning,
    where backwards incompatible changes will always result in increased
    major version.
  * Fixed an overflow when accessing the *st_xtime_ns attributes of the
    ~llfuse.EntryAttributes class from Python on 32-bit systems.
  * POTENTIAL COMPATIBILITY BREAK: The ~Operations.destroy handler is
    now called with the global lock acquired.
- Release 0.43 (2016-02-23)
  * Fixed build-failure under OS-X.
  * Fixed some build failures under FreeBSD (hopefully all of them,
    but no testers were available before the release).
  * The workers parameter to llfuse.main may now be None.
- Release 0.42.1 (2016-02-01)
  * Include HTML documentation.
- Release 0.42 (2016-01-30)
  * The documentation has been clarified and extended - please take
    a look even if you're already familiar with Python-LLFUSE.
  * Extended coverage of unit tests.
  * Fixed a compile error under OS-X.
  * Added notify_store function.
  * Added get_sup_groups function.
  * The ~Operations.read handler may now return arbitrary objects that
    as long as they implement the buffer protocol.
  * Implemented a forget_multi handler (used behind the scenes).
  * Many classes were rewritten in Cython for improved performance.
  * Python thread-specific data is now initialized only once rather
    than every time a handler is called.
  * SIGINT (Ctrl-C) now properly terminates llfuse.main also when
    running with multiple workers.
  * The return value of llfuse.main now indicates if the loop was
    terminated due to an unmount request or due to a signal.
  * BACKWARDS INCOMPATIBLE CHANGES:
  * Ducktyping the EntryAttributes class is no longer allowed, Operations
    methods must return instances of this class (rather than any object
    that provides the neccessary attributes).
  * The !st_Xtime attributes of the EntryAttributes have been dropped
    in favor of the !st_Xtime_ns attributes.
  * The setattr method now always receives a completely filled
    EntryAttributes instance. To determine which attributes should be
    changed, a new fields argument has been introduced.
  * The ~Operations.setattr method now also receives an fh parameter.
  * The llfuse.main function now has a workers parameter, and the
    single parameter was dropped.
  * Almost all request handlers now receive a RequestContext instance
    in an additional parameter.
- Release 0.41.1 (2015-08-22)
  * Added some files in :file:`test/` that were missing in the
    0.41 tarball. Tests now support the --installed option, produce
    prettier output, and check for error messages printed to stderr
    or stdout.
  * Python-LLFUSE can now also be built on NetBSD.
  * Added support for FUSE_SET_ATTR_ATIME_NOW and
    FUSE_SET_ATTR_MTIME_NOW setattr flags. Previosly, these would be
    silently ignored.
  * Fixed an AssertionError in :file:`examples/passthroughfs.py`
- Release 0.41 (2015-08-20)
  * Fixed a syntax error in contrib/tmpfs.py
  * Introduced an !llfuse.__version__ attribute.
  * Added more reasonable default values for llfuse.EntryAttributes.
  * Added new minimal example, :file:`examples/lltest.py`.
  * Added unit tests.
  * Added an example for a pass-through file system,
    `examples/passthroughfs.py`.</changelog>
  <changelog author="alarrosa@suse.com" date="1504699200">- Split documentation into a new python-llfuse-docs package.
- Added full changelog in the previous changelog entry</changelog>
  <changelog author="alarrosa@suse.com" date="1515153600">- Update to version 1.3.2
  * Minor bugfixes.
- Update to version 1.3.1
  * The main loop now terminates properly again when terminated by a signal.
- Update to version 1.3
  * The StatvfsData class now has an !~StatvfsData.f_namemax attribute.
  * EntryAttributes and StatvfsData instances can now be pickled and copied.
    Other llfuse classes now raise an exception when the do not support
    pickling/copying.</changelog>
  <changelog author="alarrosa@suse.com" date="1515499200">- Remove %check section since it's not checking anything</changelog>
  <changelog author="alarrosa@suse.com" date="1529323200">- Update to version 1.3.4
  * No-change rebuild with Cython 0.28.2.
- Update to version 1.3.3
  * Dropped pytest-catchlog dependency and add support for Pytest 3.3.0.
  * Minor bugfixes.
- Add fix-char-cast-to-unsigned-int.patch to fix a compiler error when
  casting from char to Py_UNICODE (unsigned int) due to a possible change
  of sign.
- Add fix-test-for-fusermount.patch to skip the tests that rely on
  fusermount since it doesn't work in OBS's chroot.
- Add %check section back. It's not possible to check all tests since for
  that, the user that runs the test should be in the trusted group, but
  at least some tests are run.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Add patch to build with new attr:
  * llfuse-attr-2.4.48.patch
- Drop contextlib2 dependency
- Run tests unconditionally</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1537358400">- Update to version 1.3.5
  * Add `handle_signals` option to `llfuse.main`
  * Several fixes to `examples/passthroughfs.py`
  * Now compatible with Python 3.7
- Remove patch already in upstream.
  * llfuse-attr-2.4.48.patch</changelog>
</package>
<package pkgid="70d65169d0a3add1f17e443be839c320300904add7c64f3f75b0082dcf963c1d" name="python-mitmproxy" arch="src">
  <version epoch="0" ver="3.0.4" rel="lp150.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1350388800">- created initial package for version 0.8</changelog>
  <changelog author="fcastelli@suse.com" date="1354104000">- update to git rev 8c976ac7f0.</changelog>
  <changelog author="fcastelli@suse.com" date="1354104001">- Fix build on 12.2 x86_64.</changelog>
  <changelog author="fcastelli@suse.com" date="1354190400">- Ensure libmproxy is found
- Require python-netlib at runtime</changelog>
  <changelog author="fcastelli@suse.com" date="1355140800">- Cleanup .spec file</changelog>
  <changelog author="fcastelli@suse.com" date="1355400000">- Another cleanup of the .spec file</changelog>
  <changelog author="freitag@owncloud.com" date="1425470400">- Fixed license.</changelog>
  <changelog author="freitag@owncloud.com" date="1425902400">- Fixed download URL to use the one from python.org
- Fixed group
- Year in the header</changelog>
  <changelog author="freitag@owncloud.com" date="1437912000">- Update to upstream version 0.13
  * Upstream certificate validation.
  * Add HTTP transparent proxy mode.
  * Add ~src and ~dst REGEX filters
  * mitmproxy console: change g/G keyboard shortcuts to match less.
  * mitmproxy console: Flow marking and unmarking.
  * mitmproxy console: add marking of flows
  * Remove the certforward feature</changelog>
  <changelog author="freitag@owncloud.com" date="1453896000">- Fix a repo in requires list</changelog>
  <changelog author="aloisio@gmx.com" date="1482753600">- Switched to python3 package
- Update to version  1.0
  * All mitmproxy tools are now Python 3 only! We plan to
    support Python 3.5 and higher.
  * Web-Based User Interface: Mitmproxy now offically has a
    web-based user interface called mitmweb. We consider it
    stable for all features currently exposed in the UI,
    but it still misses a lot of mitmproxy?s options.
  * Windows Compatibility: With mitmweb, mitmproxy is now
    useable on Windows.
    We are also introducing an installer (kindly sponsored
    by BitRock) that simplifies setup.
  * Configuration: The config file format is now a single
    YAML file. In most cases, converting to the new format
    should be trivial - please see the docs for more
    information.
  * Console: Significant UI improvements - including sorting
    of flows by size, type and url, status bar improvements,
    much faster indentation for HTTP views, and more.
  * HTTP/2: Significant improvements, but is temporarily
    disabled by default due to wide-spread protocol
    implementation errors on some large website
  * WebSocket: The protocol implementation is now mature,
    and is enabled by
    default. Complete UI support is coming in the next
    release. Hooks for message interception and manipulation
    are available.
  * A myriad of other small improvements throughout the
    project.
  version 0.18:
  * Python 3 Compatibility for mitmproxy and pathod (Shadab
    Zafar, GSoC 2016)
  * Major improvements to mitmweb (Clemens Brunner &amp; Jason
    Hao, GSoC 2016)
  * Internal Core Refactor: Separation of most features into
    isolated Addons
  * Initial Support for WebSockets
  * Improved HTTP/2 Support
  * Reverse Proxy Mode now automatically adjusts host
    headers and TLS Server Name Indication
  * Improved HAR export
  * Improved export functionality for curl, python code, raw
    http etc.
  * Flow URLs are now truncated in the console for better
    visibility
  * New filters for TCP, HTTP and marked flows.
  * Mitmproxy now handles comma-separated Cookie headers
  * Merge mitmproxy and pathod documentation
  * Mitmdump now sanitizes its console output to not include
    control characters
  * Improved message body handling for HTTP messages:
    .raw_content provides the message body as seen on the
    wire
    .content provides the decompressed body (e.g. un-gzipped)
    .text provides the body decompressed and decoded body
  * New HTTP Message getters/setters for cookies and form
    contents.
  * Add ability to view only marked flows in mitmproxy
  * Improved Script Reloader (Always use polling, watch for
    whole directory)
  * Use tox for testing
  * Unicode support for tnetstrings
  * Add dumpfile converters for mitmproxy versions 0.11 and
    version 0.12
  * Numerous bugfixes
  version 0.17:
  * Simplify repository and release structure. mitmproxy now
    comes as a single package, including netlib and pathod.
  * Rename the Python package from libmproxy to mitmproxy.
  * New option to add server certs to client chain
    (CVE-2016-2402, John Kozyrakis)
  * Enable HTTP/2 by default (Thomas Kriechbaumer)
  * Improved HAR extractor (Shadab Zafar)
  * Add icon for OSX and Windows binaries
  * Add content view for query parameters (Will Coster)
  * Initial work on Python 3 compatibility
  * locust.io export (Zohar Lorberbaum)
  * Fix XSS vulnerability in HTTP errors (Will Coster)
  * Numerous bugfixes and minor improvements
  version 0.16:
  * Completely revised HTTP2 implementation based on
    hyper-h2 (Thomas Kriechbaumer)
  * Export flows as cURL command, Python code or raw HTTP
    (Shadab Zafar)
  * Fixed compatibility with the Android Emulator (Will
    Coster)
  * Script Reloader: Inline scripts are reloaded
    automatically if modified (Matthew Shao)
  * Inline script hooks for TCP mode (Michael J. Bazzinotti)
  * Add default ciphers to support iOS9 App Transport
    Security (Jorge Villacorta)
  * Basic Authentication for mitmweb (Guillem Anguera)
  * Exempt connections from interception based on TLS Server
    Name Indication (David Weinstein)
  * Provide Python Wheels for faster installation
  * Numerous bugfixes and minor improvements
  version 0.15:
  * Support for loading and converting older dumpfile
    formats (0.13 and up)
  * Content views for inline script (@chrisczub)
  * Better handling of empty header values (Benjamin
    Lee/@bltb)
  * Fix a gnarly memory leak in mitmdump
  * A number of bugfixes and small improvements
  version 0.14:
  * Statistics: 399 commits, 13 contributors, 79 closed
    issues, 37 closed
    PRs, 103 days
  * Docs: Greatly updated docs now hosted on ReadTheDocs!
    http://docs.mitmproxy.org
  * Docs: Fixed Typos, updated URLs etc. (Nick Badger, Ben
    Lerner, Choongwoo
    Han, onlywade, Jurriaan Bremer)
  * mitmdump: Colorized TTY output
  * mitmdump: Use mitmproxy's content views for
    human-readable output (Chris Czub)
  * mitmproxy and mitmdump: Support for displaying UTF8
    contents
  * mitmproxy: add command line switch to disable mouse
    interaction (Timothy Elliott)
  * mitmproxy: bug fixes (Choongwoo Han, sethp-jive,
    FreeArtMan)
  * mitmweb: bug fixes (Colin Bendell)
  * libmproxy: Add ability to fall back to TCP passthrough
    for non-HTTP connections.
  * libmproxy: Avoid double-connect in case of TLS Server
    Name Indication. This yields a massive speedup for
    TLS handshakes.
  * libmproxy: Prevent unneccessary upstream connections
    (macmantrl)
  * Inline Scripts: New API for HTTP Headers:
    http://docs.mitmproxy.org/en/latest/dev/models.html#netlib.http.Headers
  * Inline Scripts: Properly handle exceptions in `done` hook
  * Inline Scripts: Allow relative imports, provide
    `__file__`
  * Examples: Add probabilistic TLS passthrough as an inline
    script
  * netlib: Refactored HTTP protocol handling code
  * netlib: ALPN support
  * netlib: fixed a bug in the optional certificate
    verification.
  * netlib: Initial Python 3.5 support (this is the first
    prerequisite for 3.x support in mitmproxy)
- Added python3-mitmproxy-rpmlintrc</changelog>
  <changelog author="aloisio@gmx.com" date="1486036800">- Update to version 1.0.2
  * Fix compatibility with Python 3.5.0
  1.0.1:
  * Fix compatibility with Python 3.6</changelog>
  <changelog author="aloisio@gmx.com" date="1487678400">- Update to version 2.0.0
  * HTTP/2 is now enabled by default.
  * Image ContentView: Parse images with Kaitai Struct
    (kaitai.io) instead of Pillow.
    This simplifies installation, reduces binary size, and
    allows parsing in pure Python.
  * Web: Add missing flow filters.
  * Add transparent proxy support for OpenBSD.
  * Check the mitmproxy CA for expiration and warn the user to
    regenerate it if necessary.
  * Testing: Tremendous improvements, enforced 100% coverage
    for large parts of the  codebase, increased overall
    coverage.
  * Enforce individual coverage: one source file -&gt; one test
    file with 100% coverage.
  * A myriad of other small improvements throughout the
    project.
  * Numerous bugfixes.
- Added python3-mitmproxy-no_git.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1489579200">- Update to version 2.0.1
  * http2: fix h2 header normalization test (#2080)</changelog>
  <changelog author="aloisio@gmx.com" date="1493380800">- Update to version 2.0.2
  * Fix mitmweb's Content-Security-Policy to work with Chrome
    58+ (#2284)</changelog>
  <changelog author="aloisio@gmx.com" date="1519300800">- Update to version 3.0.3
  * A minor release that actually includes the fix meant for 3.0.2.
  version 3.0.2
  * Fix an issue that caused mitmproxy to lose keyboard control
    after spawning an external editor.
  version 3.0.1
  * A quick point release to fix a bug that broke quoted arguments
    in the console command editor.
  version 3.0
  Major Changes:
  * Commands: A consistent, typed mechanism that allows addons to
    expose actions to users.
  * Options: A typed settings store for use by mitmproxy and
    addons.
  * Shift most of mitmproxy's own functionality into addons.
  * Major improvements to mitmproxy console, including an almost
    complete rewrite of the user interface, integration of
    commands, key bindings, and multi-pane layouts.
  * Major Improvements to mitmproxy?s web interface, mitmweb.
    (Matthew Shao, Google Summer of Code 2017)
  * Major Improvements to mitmproxy?s content views and protocol
    layers (Ujjwal Verma, Google Summer of Code 2017)
  * Faster JavaScript and CSS beautifiers. (Ujjwal Verma)
  Minor Changes:
  * Vastly improved JavaScript test coverage (Matthew Shao)
  * Options editor for mitmweb (Matthew Shao)
  * Static web-based flow viewer (Matthew Shao)
  * Request streaming for HTTP/1.x and HTTP/2 (Ujjwal Verma)
  * Implement more robust content views using Kaitai Struct
    (Ujjwal Verma)
  * Protobuf decoding now works without protoc being installed on
    the host system (Ujjwal Verma)
  * PNG, GIF, and JPEG can now be parsed without Pillow, which
    simplifies mitmproxy installation and moves parsing from unsafe
    C to pure Python (Ujjwal Verma)
  * Add parser for ICO files (Ujjwal Verma)
  * Migrate WebSockets implementation to wsproto. This reduces
    code size and adds WebSocket compression support.
    (Ujjwal Verma)
  * Add ?split view? to split mitmproxy?s UI into two separate
    panes.
  * Add key binding viewer and editor
  * Add a command to spawn a preconfigured Chrome browser instance
    from mitmproxy
  * Fully support mitmproxy under the Windows Subsystem for Linux
    (WSL), work around display errors
  * Add XSS scanner addon (@ddworken)
  * Add ability to toggle interception (@mattweidner)
  * Numerous documentation improvements (@pauloromeira, @rst0git,
    @rgerganov, @fulldecent, @zhigang1992, @F1ashhimself,
    @vinaydargar, @jonathanrfisher1, @BasThomas, @LuD1161,
    @ayamamori, @TomTasche)
  * Add filters for websocket flows (@s4chin)
  * Make it possible to create a response to CONNECT requests in
    http_connect (@mengbiping)
  * Redirect stdout in scripts to ctx.log.warn (@nikofil)
  * Fix a crash when clearing the event log (@krsoninikhil)
  * Store the generated certificate for each flow (@dlenski)
  * Add --keep-host-header to retain the host header in reverse
    proxy mode (@krsoninikhil)
  * Fix setting palette options (@JordanLoehr)
  * Fix a crash with brotli encoding (@whackashoe)
  * Provide certificate installation instructions on mitm.it
    (@ritiek)
  * Fix a bug where we did not properly fall back to IPv4 when
    IPv6 is unavailable (@titeuf87)
  * Fix transparent mode on IPv6-enabled macOS systems (@Ga-ryo)
  * Fix handling of HTTP messages with multiple Content-Length
    headers (@surajt97)
  * Fix IPv6 authority form parsing in CONNECT requests (@r1b)
  * Fix event log display in mitmweb (@syahn)
  * Remove private key from PKCS12 file in ~/.mitmproxy (@ograff).
  * Add LDAP as a proxy authentication backend (@charlesdhdt)
  * Use mypy to check the whole codebase (@iharsh234)
  * Fix a crash when duplicating flows (@iharsh234)
  * Fix testsuite when the path contains a ?.? (@felixonmars)
  * Store proxy authentication with flows (@lymanZerga11)
  * Match ~d and ~u filters against pretty_host (@dequis)
  * Update WBXML content view (@davidpshaw)
  * Handle HEAD requests for mitm.it to support Chrome in
    transparent mode on iOS (@tomlabaude)
  * Update dns spoofing example to use --keep-host-header
    (@krsoninikhil)
  * Call error handler on HTTPException (@tarnacious)
  * Make it possible to remove TLS from upstream HTTP connections
  * Update to pyOpenSSL 17.5, cryptography 2.1.4, and OpenSSL
    1.1.0g
  * Make it possible to retroactively increase log verbosity.
  * Make logging from addons thread-safe
  * Tolerate imports in user scripts that match hook names (`from
    mitmproxy import log`)
  * Update mitmweb to React 16, which brings performance
    improvements
  * Fix a bug where reverting duplicated flows crashes mitmproxy
  * Fix a bug where successive requests are sent to the wrong host
    after a request has been redirected.
  * Fix a bug that binds outgoing connections to the wrong
    interface
  * Fix a bug where custom certificates are ignored in reverse
    proxy mode
  * Fix import of flows that have been created with mitmproxy 0.17
  * Fix formatting of (IPv6) IP addresses in a number of places
  * Fix replay for HTTP/2 flows
  * Decouple mitmproxy version and flow file format version
  * Fix a bug where ?mitmdump -nr? does not exit automatically
  * Fix a crash when exporting flows to curl
  * Fix formatting of sticky cookies
  * Improve script reloading reliability by polling the filesystem
    instead of using watchdog
  * Fix a crash when refreshing Set-Cookie headers
  * Add connection indicator to mitmweb to alert users when the
    proxy server stops running
  * Add support for certificates with cyrillic domains
  * Simplify output of mitmproxy --version
  * Add Request.make to simplify request creation in scripts
  * Pathoc: Include a host header on CONNECT requests
  * Remove HTML outline contentview (#2572)
  * Remove Python and Locust export (#2465)
  * Remove emojis from tox.ini because flake8 cannot parse that. :(
- Dropped python-mitmproxy-no_git.patch (no longer necessary)</changelog>
  <changelog author="aloisio@gmx.com" date="1522929600">- Update to version 3.0.4
  * Fix an issue that caused mitmproxy to not retry HTTP requests
    on timeout.
  * Various other fixes (@kira0204, @fenilgandhi, @tran-tien-dat,
    @smonami, @luzpaz, @fristonio, @kajojify, @Oliver-Fish,
    @hcbarry, @jplochocki, @MikeShi42, @ghillu, @emilstahl)</changelog>
  <changelog author="aloisio@gmx.com" date="1533124800">- Added protect_against_DNS_rebinding.patch and
  improve_DNS_rebinding_protection_support_IPv6.patch to address
  CVE-2018-14505 (fixes boo#1102178)
- Added update_ldap3_dependency.patch for the package to work
  with python3-ldap3 2.5 (fixes boo#1101457)
- Minor spec improvements</changelog>
</package>
<package pkgid="ee8ef4cfdcf2178d1072f90299fa5b2f2b62dc40735e3939fb8096245a9ac00a" name="python-nbxmpp" arch="src">
  <version epoch="0" ver="0.6.6" rel="lp150.2.3.1"/>
  <changelog author="nekolayer@yandex.ru" date="1365249600">- Initial package.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1366459200">- Fixed up to submit.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1376568000">- Heads up: Python2 / Python3 parallel installation.
  %fdupes will not work if files are installed via %doc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.2
  + Add some namespace
  + do TLS handshake without blocking
  + store all SSL errors instead of only last one
- Set correct Group : Devel/Languages/Python
- Use download Url as source
- Remove unwanted comments in specfile
- Package the two directories in /doc to avoid providing epydoc build
  configuration file</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1413028800">- Update to 0.5.1 (changes since 0.2):
  * Fix printing network errors in a non-utf-8 console
  * Support both python2 and python3
  * Fix storing server certificate when there is no error
  * Ability to configure TLS protocol version
  * Add support for SCRAM-SHA-1-PLUS
  * Security improvements
  * Improve security level
  * Ability to configure cipher list
  * Store only depth 0 SSL certificate</changelog>
  <changelog author="p.drouand@gmail.com" date="1413547200">- Correct Group is Development/Languages/Python
- Remove depreciated %py_requires
- Do not pass -O1 --skip-build options
- Call python instead of python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1420891200">- Update to 0.5.2:
  * Fix BOSH HTTP requests.
  * Fix handling of binary SASL data for mechanism GSSAPI.
  * Update MAM namespace.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437393600">- Update to 0.5.3:
  * Fix issue with pyopenssl 0.15.1.
  * Fix decoding issues.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1441281600">- Shouldn't be noarch in SLE 11</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.5.4:
  * Fix SCRAM authentication.
  * Fix BOSH connection with UTF-8 messages.
  * Fix smacks implementation.
  * Use uuid in stanza ids.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495022400">- Update to version 0.5.5:
  * Add some namespaces.
  * Some cleanup.
- Update for the multipython build.</changelog>
  <changelog author="vilene@posteo.net" date="1509883200">- Update to version 0.6.0:
  * Add new getOriginID/SetOriginID method for Messages
  * Add new getJid() method for Protocol
  * getTagAttr() accepts now a namespace argument
  * Add new `protocol` argument for getTag()
  * Add new XEP Namespaces
  * Support XEP-0198 Version 1.5.2</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Update to version 0.6.1
  * Add new getStanzaIDAttrs method
  * Fix BOSH connexion
  * stop using PyOpenSSL for random generator</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 0.6.4 (changes since 0.6.1):
  * Correctly load client certs.
  * Warn on any error in the certificate chain.
  * Fixed a traceback loop.
  * Add ALPN and SNI support for when using DirectTLS.
  * Fix SOCKS5 usage.
  * Bugfixes.</changelog>
  <changelog author="tbro@opensuse.org" date="1526040000">- Update to version 0.6.5 (30 April 2018)
  * Fix BOSH usage (don't set ALPN)
  * Better handling of certificate files
  * needed for newest gajim version 1.0.2, as it broke with 0.6.4</changelog>
  <changelog author="mvetter@suse.com" date="1526990400">- Update to 0.6.6:
  * Record all SSL errors instead of only the first
  * Pass arguments to plugin/plugout methods
  * Allow the Roster to be initalized without requesting it from the server</changelog>
  <changelog author="tchvatal@suse.com" date="1526990401">- Use setuptools not devel to reduce dependency requirements</changelog>
</package>
<package pkgid="242d8c4cf8a3c4bb6eca4cc2cae5a55b7f0b497b3062501230738905864f1d57" name="python-nemo" arch="x86_64">
  <version epoch="0" ver="3.6.0" rel="lp150.2.3.1"/>
  <changelog author="i@marguerite.su" date="1382961600">- initial version 2.0.0
  * a meta package</changelog>
  <changelog author="johann.luce@wanadoo.fr" date="1385467200">- add nemo-dropbox and nemo-preview in 2.0.1 version</changelog>
  <changelog author="i@marguerite.su" date="1415188800">- update version 2.4.0
  * add new extensions: emblems, gtkhash, image-converter
    repairer, terminal</changelog>
  <changelog author="stefan@fam-elser.de" date="1433246400">- update to version 2.6.0
- Added patch for newer gpg versions than 2.0</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1445428800">- Update to 2.8.0.
- Build and install sections generalisation.
- Rename every extension package from nemo-foo to nemo-extension-foo.
- Add nemo-extension-audio-tab package.
- Remove nemo-extensions metapackage.
- Add nemo-dropbox_no-dropbox-bin.patch: strip dropbox binary
  installation, and make nemo-extension-dropbox depend on dropbox.
- Add nemo-terminal_vte-2.91.patch.
- Use pygobject-3.0 instead of pygobject-2.0.
- Generate Python bytecode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1450008000">- Add nemo-media-columns_use-exiftool.patch: use exiftool as exiv2
  shows some instability under nemo-python (boo#958867).
- Add nemo-seahorse_no-nautilus-conflicts.patch: do not install
  files that conflict with nautilus-extension-seahorse.
- nemo-extension-media-columns to depend on exiftool instead of
  python-pyexiv2.
- nemo-extension-seahorse to depend on nautilus-extension-seahorse.
- Fix srcpackage licence to "GPL-2.0 and GPL-3.0 and GPL-3.0+".</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1452772800">- Remove nemo-extension-media-columns package completely:
  extension slows Nemo down considerably, both with and without
  nemo-media-columns_use-exiftool.patch.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1461585600">- Update to version 3.0.0 (changes since 2.8.0):
  * nemo-share: Purge useless samba auto-installation code.
  * nemo-terminal: Change default shell from bash to user's shell.
  * nemo-terminal: Change key event from release to press.
  * nemo-compare, nemo-emblems, nemo-share: Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1462363200">- nemo-extension-{emblems,pastebin,terminal}: add a missing
  python-gobject-Gdk dependency.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1475668800">- Add nemo-gtkhash_mbedtls-2.x.patch: Add mbed TLS 2.x+ support.
- Enable gcrypt in nemo-gtkhash for openSUSE Leap 42.x.
- Separate locales into nemo-extension-compare-lang,
  nemo-extension-emblems-lang, nemo-extension-gtkhash-lang,
  nemo-extension-image-converter-lang, nemo-extension-preview-lang,
  nemo-extension-pastebin-lang, nemo-extension-repairer-lang,
  nemo-extension-seahorse-lang, nemo-extension-share-lang.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1478606400">- Update to version 3.2.0 (changes since 3.0.0):
  * seahorse: Allow building with gnupg 2.1
    (gh#linuxmint/nemo-extensions#159).
  * emblems: Fix a wrong version in setup.py
  * nemo-terminal: Add VTE 2.91 support.
  * nemo-preview: Fix a deadlock when closing the window, change
    the key.
  * nemo-preview, image.js: Apply embedded orientation if it exists.
  * nemo-preview: Port to ClutterGst 3.0 (restores video playback).
  * image-converter: Add more resize sizes.
  * nemo-terminal: Clear 'cd' line after changing directory.
  * Add support for Nemo's plugin manager.
  * nemo-pastebin: Add gi.require_version().
  * nemo-preview, mainWindow.js: move to current desktop before
    setting a transient parent.
  * nemo-preview, audio: Fix missing import.
  * nemo-preview: Fix EXIF rotation.
  * nemo-preview: Fix invalid CSS values
    (gh#linuxmint/nemo-extensions#189).
  * Update translations.
- Remove nemo-seahorse_gpg-2.1.patch, nemo-terminal_vte-2.91.patch:
  fixed upstream.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1494158400">- Update to version 3.4.0 (changes since 3.2.0):
  * Rename configure.in to configure.ac.
  * nemo-fileroller: Use a triplet-prefixed pkg-config for cross
    compilation.
  * nemo-compare, nemo-emblems: Fix some errors.
  * nemo-audio-tab, nemo-fileroller, nemo-media-columns,
    nemo-pastebin, nemo-rabbitvcs, nemo-terminal: Remove _ from
    get_name_and_desc.
  * nemo-emblems: Don't change the mtime when changing a file's
    emblems.
  * nemo-preview: Fix some GTK+ warnings.
  * nemo-preview: Fix assignment to undeclared variables warning.
  * Update translations.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505044800">- Add nemo-seahorse_gpg-2.2.patch: Add GPG 2.2 to accepted versions
  in nemo-seahorse.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1509192000">- Update to version 3.6.0 (changes since 3.4.0):
  * nemo-preview: Don't ship another copy of format.js.
  * nemo-dropbox: Fix an error in the Makefile.
  * nemo-preview: Specify GObject Introspection versions.
  * nemo-preview: Fix schema_name not defined and switch to xed.
  * nemo-rabbitvcs: Specify nemo import version.
  * Fix nemo-seahorse - update tool from upstream, rename files and
    schemas to allow concurrent installation with seahorse-nautilus,
    move gsettings schemas to org.nemo.plugins.seahorse.*
  * nemo-share: Detect and fix samba and group membership problem
    when attempting to modify file sharing properties.
  * image: Add support for GIF animations.
  * nemo-preview: port to xreader.
  * nemo-compare, nemo-pastebin: Remove menu entry for config tool,
    provide the launcher through Nemo.
  * nemo-media-columns: Provide file info asynchronously.
  * nemo-media-columns: Cache info and serve it synchronously when
    possible.
  * nemo-media-columns: Delete file info after 30 sec.
  * Simplify nemo-media-columns to behave as expected by the fixed
    nemo info provider apparatus.
  * nemo-python: nemo-python-object.c: We must expect a return
    value from PyObject_CallMethod() or else it silently fails
    against the provider object and cancel_update never gets
    called.
  * media columns: Don't use the handle for idle id storage, use
    the class.
  * Fix the post-samba-install message for nemo-share - smbd will
    not start on just a logout-in.
  * nemo-gtkhash: Add mbed TLS 2.x support.
  * Move translations to cinnamon-translations.
- Rebase nemo-dropbox_no-dropbox-bin.patch.
- Remove nemo-gtkhash_mbedtls-2.x.patch: merged upstream.</changelog>
  <changelog author="cfarrell@suse.com" date="1512475200">- Add nemo-gtkhash_openssl-1.1.patch: Add basic OpenSSL 1.1+
  compatibility in Nemo-GtkHash.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514548800">- Update pkgconfig's xreader version for 1.6.2+.
- Add nemo-preview_xreader-versioning.patch: update versioning of
  xreader libs and introspection in nemo-preview (commit 52767dc).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1533556800">- Add nemo-share-prevent-privilege-escalation.patch: Prevent
  unprivileged users from adding other users to sambashare
  (commit a831e7b, bsc#1084703).</changelog>
</package>
<package pkgid="45cb07207ff40fb592dce9a2238089a8ff6049c33a998a9428325c17e6831dfe" name="python-python-gnupg" arch="src">
  <version epoch="0" ver="0.4.3" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1504699200">- Initial version</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Ensure description neutrality.</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- uppate to 0.4.3:
  * Add --no-verbose to the gpg command line, in case verbose is
    specified is gpg.conf.
  * This is mitigation against CVE-2018-12020 boo#1096745
- includes changes from 0.4.2:
  * Subkey information is now collected and returned in a
    subkey_info dictionary keyed by the subkey's ID
  * Add expect_passphrase password for use on GnuPG &gt;= 2.1 when
    passing passphrase to gpg via pinentry
  * Provid a trust_keys method to allow setting the trust level
    for keys
  * When the gpg executable is not found, note the path used in the
    exception message
  * Make error messages nor informational</changelog>
</package>
<package pkgid="0bb453495d19569c902d0af2189d0e7e957b0e529e9cd864cf6445b5e9ca32e6" name="python-rpm" arch="src">
  <version epoch="0" ver="4.14.1" rel="lp150.9.3.1"/>
  <changelog author="mls@suse.de" date="1221134400">- update to 4.4.2.3 to get rid of &gt;50 patches</changelog>
  <changelog author="cthiel@suse.de" date="1223467200">- added libelf-devel to BuildRequires to fix build</changelog>
  <changelog author="ro@suse.de" date="1234440000">- adapt buildrequires</changelog>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
</package>
<package pkgid="588ddaf8f17ecd2e7746f87a6aa9507b9e1f914c35bbe3a1fa8f288a9f7d9a9b" name="python-solv" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="af259ce51b606e8492c1c01e7ac14e3d9e172b485fc14c7bdb446f0366bf150f" name="python-talloc" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="9767465e346f8a1692fca254ca837c8ba58521de413b52b508c5186346de2331" name="python-talloc-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="718105ea332ada07648860c2c52034725617183e2b8d60bf599b339a3c79882b" name="python-talloc-devel" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="b9dd22b620b9d140ce99ff4ab9d5388c6bf5a9402c508356d94a67dc80a3e829" name="python-tevent" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="6664e18e04473bcfb64bfae69eab422a320e10a8ea5b51856737f947057f1acc" name="python-tevent-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="9ac07064cd678bc55862595fd62d516d9caaa78b2d8148838d4e3491849c42ca" name="python-websocket-client" arch="src">
  <version epoch="0" ver="0.44.0" rel="lp150.2.3.1"/>
  <changelog author="rschweikert@suse.com" date="1402056000">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1402142400">- Add Group to sub package, fixes build for SLE 11</changelog>
  <changelog author="rschweikert@suse.com" date="1402920000">- Clean up spec file</changelog>
  <changelog author="rschweikert@suse.com" date="1403524800">- Simplify conditionals in spec file
- Fix patch webSoc_useSystemCert.patch, eliminate tab use spaces</changelog>
  <changelog author="toddrme2178@gmail.com" date="1412251200">- Update to version 0.18.0
  - allow override of match_hostname usage on ssl (#105)
- Update to version 0.17.0
  - can't set timeout on a standing websocket connection (#102)
  - fixed local variable 'error' referenced before assignment (#102, #98)
- Update to version 0.16.0
  - lock some method for multithread. (#92)
  - disable cert verification. (#89)
- Remove upstreamed webSoc_useSystemCert.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1423396800">- Update to version 0.23.0
  - Remove spurious print statement. (#135)
  - Fix not thread-safe of Websocket.close() (#120)
  - Try to get proxy info from environment if not explicitly provided (#124)
  - support proxy basic authenticaiton. (#125)
  - Fix NoneType exception at WebsocketApp.send (#126)
  - not use proxy for localhost (#132)
  - Check for socket before attempting to close (#115)
  - Enable turning off SSL verification in wsdump.py(#116)
  - Enable to set subprotocol(#118)
  - Better support for Autobahn test suite (http://autobahn.ws/testsuite) (#117)  - suppress close event message(#107)
  - detect socket connection state(#109)
  - support for code and reason in on_close callback(#111)
  - continuation frame handling seems suspicious(#113)</changelog>
  <changelog author="rjschwei@suse.com" date="1423569600">- Add fixTestTimeoutIssue.patch
  + fixes test case in factory</changelog>
  <changelog author="rjschwei@suse.com" date="1423656000">- Update fixTestTimeoutIssue.patch to handle different behavior between
  python 2.7.x versions</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431604800">- update to version 0.30.0:
  * fixed if client is behind proxy (#169)
  * support SNI for python 2.7.9+ and 3.2+ (#172)
  * update Host HTTP header by user. (#171)
  * fix typo for isEnabledFor (#173)
  * can set verify_mode to CERT_NONE when check_hostname is
    enabled.(#175)
  * make websockets iterable (#178)
- additional changes from version 0.29.0
  * fixed ssl socket bug
- additional changes from version 0.28.0
  * Fix erroneous argument shadowing(#168)
- additional changes from version 0.27.0
  * remove unittest2 requirements for python 2.6 (#156)
  * fixed subprotocol case during header validation (#158)
  * get response status and headers (#160)
  * fix out-of-memory due to fragmentation when recieving a very
    large frame(#163)
  * fix error if the payload data is nothing.(#166)
  * refactoring.
- additional changes from version 0.26.0
  * all WebSocketException provide message string (#152)
  * fixed tests fail when not connected to the network (#155)
  * Add command line options and handle closed socket to wsdump.py
    (#153)
- additional changes from version 0.25.0
  * fixed for Python 2.6(#151)
- additional changes from version 0.24.0
  * Supporting http-basic auth in WebSocketApp (#143)
  * fix failer of test.testInternalRecvStrict(#141)
  * skip utf8 validation by skip_utf8_validation argument (#137)
  * WebsocketProxyException will be raised if we got error about
    proxy.(#138)
- drop fixTestTimeoutIssue.patch: fixed upstream
- point the source URL to pypi
- add new dependency python-backports.ssl_match_hostname
- fix archive name when calling %setup</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1437739200">- fix dependencies for RHEL/CentOS 7: they provide their own
  python-backports-ssl_match_hostname</changelog>
  <changelog author="dmueller@suse.com" date="1445428800">- update to 0.32.0 (bsc#954486):
  - fix http proxy bug (#189)
  - Avoid deprecated BaseException.message (#180)
  - Add travis builds (#182)
  - fixed wsdump to work with piped input (#183)
  - fixed output of wsdump.py with python3 (#185)
  - add raw mode to wsdump.py (#186)</changelog>
  <changelog author="andrea@opensuse.org" date="1460462400">- added update-alternatives to allow the python3 version to be installed</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.37.0:
  - fixed fialer that `websocket.create_connection` does not accept `origin` as a parameter (#246 )
  - added support for using custom connection class (#235)
  - use Named logger (#238)
  - implement ping/pong timeout (#241)
  - Corrects the syntax highlight code (#243)
  - fixed failure to join thread before it is started (#242)
  - Prints timings in console (#217)
  - use inspect.getfullargspec with Python 3.x (#219)
  - Check that exception message is actually a string before trying for substring check (#224)
  - Use pre-initialized stream socket (#226)
  - fixed TypeError: cafile, capath and cadata cannot be all omitted (#227)
  - Change import style (#203)
  - fix attribute error on the older python. (#215)
  - fixed timeout+ssl error handling bug  on python 2.7.10 (#190)
  - add proxy support to wsdump.py (#194)
  - use wsaccel if available (#193)
  - add support for ssl cert chains to support client certs (#195)
  - fix string formatting in exception (#196)
  - fix typo in README.rst (#197)
  - introduce on_data callback to pass data type. (#198)
  - WebSocketBadStatusException for Handshake error (#199)
  - set close timeout (#192)
  - Map dict to headers list (#204)
  - support client certification (#207)
  - security improvement during handshake (#211)
  - improve logging of error from callback (#212)</changelog>
  <changelog author="tbechtold@suse.com" date="1499256000">- update to 0.44.0:
  - renames key in sslopt dict (#326)
  - Unkown kwarg 'ca_cert' when calling ssl wrap_socket() (#326)
  - Race condition in WebSocket ping/pong (#327)
  - Implement simple cookie jar(#292)
  - fix: when using pppoe redial will block.(#301)
  - Fix insecure_pythons list in setup.py(#304)
  - Support WEBSOCKET_CLIENT_CA_BUNDLE being directory(#307)
  - WebSocketPayloadException under high traffic and limited network connection(#306)
  - Not working --nocert parameter in wsdump.py(#315)
  - Avoid the app to block on close on certain systems (#320)
  - Fix warning is not defined. (#323)
  - move to repository to https://github.com/websocket-client/websocket-client.git
  - _send_ping warning fails due to missing reference in _logging.__all__ (#294)
  - Fix opcode -&gt; op_code (#286)
  - Shuffled around example code (#256)
  - _send_ping graceful error handling (#262)
  - Allow closing WebSocketApp with status/reason/timeout (#265)
  - Support universal wheels (#267)
  - _url: Added subnet IP address matching in no_proxy host detection (#270)
  - fixed Incorrect encoding in continued messages python3 (#261)
  - Pass headers for websocket handshake (#271)
  - setup.py: Import `logging` before calling it. (#272)
  - Implemented close code 1014 (#273)
  - Support CA bundle specified by environment variable (#279)
  - Response header values should not be converted to lower case (#264)
  - Exclude port 443 from host http header (#248)
  - Cleanup code (#249)
  - Modify a code block directive in README (#250)
  - fixed ping/pong timeouet (#253)
- convert to singlespec
- merge -test package</changelog>
  <changelog author="toddrme2178@gmail.com" date="1500638400">- Fix singlespec macro usage
- Fix source URL.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Grammatical/Typographic corrections to the description.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502798400">- Update license to LGPL 3
- Fix rpmlint issues</changelog>
  <changelog author="tbechtold@suse.com" date="1503921600">- Fix build for Leap 42.3</changelog>
  <changelog author="dmueller@suse.com" date="1504612800">- properly provide/obsolete python3-websocket-client-test</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1534420800">- use systems ca bundle file by default (boo#1076519)
  add use_system_cabundle.patch</changelog>
</package>
<package pkgid="b77678346ce36d8038a664f57c4fedb8978e8e6fc6185c38cb6c402456ea4a29" name="python-youtube-dl" arch="src">
  <version epoch="0" ver="2018.09.08" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 2017.08.06
  * amcnetworks: Make rating optional
  * yandexdisk: Add extractor
  * ard: Add support for liveS
  * pbs: Add support for new URL schema
  * vidme: Extract DASH and HLS formats</changelog>
  <changelog author="jengelh@inai.de" date="1502971200">- Update to new upstream release 2017.08.18
  * Sanitize byte string format URLs
  * Make sure format id is not empty</changelog>
  <changelog author="jengelh@inai.de" date="1506340800">- Update to new upstream release 2017.09.24
  * YoutubeDL: write raw subtitle files
  * laola1tv: Add support for tv.ittf.com
  * liveleak: Support multi-video pages
  * googledrive: Add support for subtitles
  * googledrive: Add support for source format
  * bbccouk: Add support for w-prefixed ids
  * charlierose: Add support for episodes
  * manyvids: Add support for preview videos
  * animeondemand: Add support for flash videos
  * downloader/fragment: Restart inconsistent incomplete fragment downloads
  * orf: Add new extractor for f4m stories
  * twitch: Add support for go.twitch.tv URLs
  * heise: Add support for YouTube embeds
  * lynda: Add support for educourse.ga
  * options: Accept lrc as a subtitle conversion target format
  * twitter: Add support for user_id-less URLs</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- update to 2017.11.15:
  * many update to various downloaders and extractors</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Update to new upstream release 2018.01.27
  * JWPlatform: Support iframes
  * openload: Add support for openload.link
  * utils: add hvc1 codec code to parse_codecs
  * downloader/fragment: Commit part file after each fragment In
    order to obtain correct resume_len on next iteration
  * mailru: Add support for embed URLs
  * downloader/fragment: Encode filename of fragment being
    removed
  * extractor/common: Introduce uploader, uploader_id and
    uploader_url meta fields for playlists
  * openload: Add support for oload.stream
  * extractor/common: Improve DASH formats extraction for jwplayer</changelog>
  <changelog author="jengelh@inai.de" date="1517832000">- Update to new upstream release 2018.02.04
  * Randomize HTTP chunk size
  * Fix HTTP/302 infinite loops by not reusing requests
  * brightcove: Pass embed page URL as referrer
  * youtube: enforce using chunked HTTP downloading for DASH formats</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Update to new upstream release 2018.02.26
  * veoh: Add support for embed URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523707200">- Update to new upstream release 2018.04.09
  * Do not save/restore console title while simulate
  * Relax JSON-LD context check
  * Add support for tube8 embeds
  * Add support for share-videos.se embeds
  * Extend URL regular expression
  * Bypass mature content check
  * Extract more metadata
  * Fix extraction
  * Fix extraction
  * Fix title extraction
  * Extend URL regular expression
  * Add support for oload.xyz
  * Relax stream URL regular expression
  * Fix extraction
  * Add support for season URLs
  * Add support for series</changelog>
  <changelog author="jengelh@inai.de" date="1523880000">- Update to new upstream release 2018.04.16
  * Add support for picarto.tv
  * Add support for mobile URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1524657600">- Update to new upstream release 2018.04.25
  * Fix match_str for boolean meta fields
  * Add support for pandoc 2 and disable smart extension (#16251)
  * Fix typo in media extension compatibility checker (#16215)
  * Recognize IPv6 stream URLs (#16136, #16137, #16205, #16246,
  [#16250])
  * Extract is_live according to status (#16259)
  * Relax URL regular expression (#16258)
  * Remove extractor (#16256)
  * Fix extraction (#16254)
  * Add ability to authenticate with cookies
  * Implement lazy playlist extraction (#10184)
  * Add support for TV channel live streams (#15279, #15809)
  * Fix video extraction (#15931)
  * Fix extraction (#15227)
  * Add support for nickjr.nl (#16230)
  * Fix metadata extraction
  * Add support for generic embeds (#16134, #16154)
  * Extract new azure URLs (#16223)
  * Fix extraction (#16217)
  * Improve embeds detection (#16201)
  * Fix extraction (#16119)
  * Skip DRM asset types (#16104)</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 2018.05.01
  * Restart download if .ytdl file is corrupt
  * Add support for old.reddit.com URLs</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Update to new upstream release 2018.05.18
  * youtube: fix extraction for embed restricted live streams
  * youtube: Make uploader extraction non fatal
  * youtube: Improve format filesize extraction
  * youtube: fix hd720 format position</changelog>
  <changelog author="jengelh@inai.de" date="1527595200">- Update to new upstream release 2018.05.26
  * imgur: Fix extraction
  * hidive: add support for authentication
  * nbc: add support for stream.nbcsports.com</changelog>
  <changelog author="jengelh@inai.de" date="1528286400">- Update to new upstream release 2018.06.04
  * tumblr: add support for authentication
  * soundcloud: detect format extension
  * rtmp: gracefully handle live streams interrupted by user
  * openload: add support for oload.win and oload.download
  * facebook: add support for tahoe player videos
  * youtube: extract track and artist</changelog>
  <changelog author="jengelh@inai.de" date="1532606400">- Update to new upstream releases 2018.07.21
  * pbs: Add another cove id pattern
  * dailymotion: add support for password protected videos
  * vidzi: Fix extraction
  * Prefer ffmpeg over avconv by default
  * dctptv: Restore extraction based on REST API
  * nrktv: Add support for new episode URL schema
  * nrktv: Add support for new season and serie URL schema</changelog>
  <changelog author="jengelh@inai.de" date="1532952000">- Update to new upstream release 2018.07.29
  * crunchyroll/playlist: restrict URL regular expression
  * ted: fix extraction for videos without nativeDownloads
  * vk: Fix extraction for inline-only videos</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 2018.08.04
  * viqeo: add extractor</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 2018.08.22
  * raywenderlich: Adapt to site redesign
  * imdb: Fix extension extraction</changelog>
  <changelog author="jengelh@inai.de" date="1535457600">- Update to new upstream release 2018.08.28
  * nova:embed: Add extractor (closes #17282)
  * Add support for vidzi.nu, vidto.se
  * youtube:playlist: Add support for music album playlists
    (OLAK5uy_ prefix)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Update to new upstream release 2018.09.08
  * ard: Add support for Beta ARD Mediathek
  * crunchyroll: parse vilos media data</changelog>
</package>
<package pkgid="f0e69822fef7600d8a84794bcdceed5d36b3693a452d0c851b705c36657d8578" name="python2-Django1" arch="noarch">
  <version epoch="0" ver="1.11.15" rel="lp150.2.3.1"/>
  <changelog author="michael@stroeder.com" date="1462104000">- Update to 1.9.5</changelog>
  <changelog author="aplanas@suse.com" date="1462276800">- Update to 1.9.6
  Bugfixes
  * Added support for relative path redirects to the test client and
    to SimpleTestCase.assertRedirects() because Django 1.9 no longer
    converts redirects to absolute URIs (#26428).
  * Fixed TimeField microseconds round-tripping on MySQL and SQLite
    (#26498).
  * Prevented makemigrations from generating infinite migrations for a
    model field that references a functools.partial (#26475).
  * Fixed a regression where SessionBase.pop() returned None rather
    than raising a KeyError for nonexistent values (#26520).
  * Fixed a regression causing the cached template loader to crash
    when using template names starting with a dash (#26536).
  * Restored conversion of an empty string to null when saving values
    of GenericIPAddressField on SQLite and MySQL (#26557).
  * Fixed a makemessages regression where temporary .py extensions
    were leaked in source file paths (#26341).</changelog>
  <changelog author="aplanas@suse.com" date="1470744000">- Update to 1.9.9
  Bugfixes
  * Fixed invalid HTML in template postmortem on the debug page
    (#26938).
  * Fixed some GIS database function crashes on MySQL 5.7 (#26657).
- Update to 1.9.8
  Fix XSS in admin?s add/change related popup (bsc#988420)
  Unsafe usage of JavaScript?s Element.innerHTML could result in XSS
  in the admin?s add/change related popup. Element.textContent is now
  used to prevent execution of the data.
  The debug view also used innerHTML. Although a security issue wasn?t
  identified there, out of an abundance of caution it?s also updated
  to use textContent.
  Bugfixes
  * Fixed missing varchar/text_pattern_ops index on CharField and
    TextField respectively when using AddField on PostgreSQL (#26889).
  * Fixed makemessages crash on Python 2 with non-ASCII file names
    (#26897).
- Update to 1.9.7
  Bugfixes
  * Removed the need for the request context processor on the admin
    login page to fix a regression in 1.9 (#26558).
  * Fixed translation of password validators? help_text in forms
    (#26544).
  * Fixed a regression causing the cached template loader to crash
    when using lazy template names (#26603).
  * Fixed on_commit callbacks execution order when callbacks make
    transactions (#26627).
  * Fixed HStoreField to raise a ValidationError instead of crashing
    on non-dictionary JSON input (#26672).
  * Fixed dbshell crash on PostgreSQL with an empty database name
    (#26698).
  * Fixed a regression in queries on a OneToOneField that has to_field
    and primary_key=True (#26667).</changelog>
  <changelog author="sbahling@suse.com" date="1474718400">- Change Requires: python-Pillow to python-imaging for compatibility
  with SLE-12 which provides PIL instead of Pillow.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1480680000">- Update to 1.9.12
  Bugfixes
  * Quoted the Oracle test user?s password in queries to fix the ?ORA-00922: missing
    or invalid option? error when the password starts with a number or
    special character (#27420)
  * DNS rebinding vulnerability when DEBUG=True
  * CSRF protection bypass on a site with Google Analytics</changelog>
  <changelog author="michal@cihar.com" date="1485864000">- Update to 1.10.5
  * See https://docs.djangoproject.com/en/1.10/releases/1.10/
  * Full text search for PostgreSQL
  * New-style middleware
  * Official support for Unicode usernames</changelog>
  <changelog author="appleonkel@opensuse.org" date="1488369600">- Update to 1.10.6
  Bugfixes
  * Fixed ClearableFileInput?s ?Clear? checkbox on model form fields where the
    model field has a default
  * Fixed RequestDataTooBig and TooManyFieldsSent exceptions crashing rather than
    generating a bad request response
  * Fixed a crash on Oracle and PostgreSQL when subtracting DurationField or
    IntegerField from DateField
  * Fixed query expression date subtraction accuracy on PostgreSQL for differences
    large an a month
  * Fixed a GDALException raised by GDALClose on GDAL &gt;= 2.0</changelog>
  <changelog author="appleonkel@opensuse.org" date="1491307200">- Update to 1.10.7
  Bugfixes
  * Made admin?s RelatedFieldWidgetWrapper use the wrapped widget?s
    value_omitted_from_data() method (#27905)
  * Fixed model form default fallback for SelectMultiple (#27993)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493899200">- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Don't provide python2-django or python2-South, singlespec
  packages should use correct name.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494244800">- django-admin.py should be the master, not django-admin.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502280000">- Fix building on older Python versions.</changelog>
  <changelog author="tbechtold@suse.com" date="1502366400">- update to version 1.11.4:
  * Fixed #27939 -- Updated OpenLayersWidget.map_srid for OpenLayers 3.
  * Fixed #27956 -- Fixed display of errors in an {% extends %} child.
  * Updated various links in docs to avoid redirects
  * Fixed typo in docs/topics/auth/default.txt.
  * Double quoted HTML attributes in widget docs
  * Fixed #28303 -- Prevented localization of attribute values in the DTL attrs.html widget template.
  * Added stub release notes for 1.11.3.
  * Documented OSMWidget.default_lat/lon.
  * Fixed #28101 -- Fixed a regression with nested __in subquery lookups and to_field.
  * Bumped version for 1.11.4 release.
  * Bumped version for 1.11.3 release.
  * Updated translations from Transifex
  * Fixed #28039 -- Fixed crash in BaseGeometryWidget.subwidgets().
  * Fixed #28242 -- Moved ImageField file extension validation to the form field.
  * Made docs/topics/migrations.txt use single quotes consistently.
  * Fixed #28355 -- Fixed widget rendering of non-ASCII date/time formats on Python 2.
  * Updated name of topics/db/queries link on index.
  * Fixed #28025 -- Fixed typo in docs/ref/models/querysets.txt.
  * Fixed #28043 -- Prevented AddIndex and RemoveIndex from mutating model state.
  * Fixed #28207 -- Fixed contrib.auth.authenticate() if multiple auth backends don't accept a request.
  * Fixed #28361 -- Fixed possible time-related failure in was_published_recently() tutorial test.
  * Fixed #28265 -- Prevented renderer warning on Widget.render() with **kwargs.
  * Fixed typo in docs/topics/testing/advanced.txt.
  * Fixed #28125 -- Clarified 1.11 release note about Template.render() prohibiting non-dict context.
  * Refs #18974 -- Added stacklevel for permalink() deprecation.
  * Fixed #28350 -- Fixed UnboundLocalError crash in RenameField with nonexistent field.
  * Fixed #28051 -- Made migrations respect Index's name argument.
  * Fixed #28420 -- Doc'd 'is' comparison restriction for User.is_authenticated/anonymous.
  * Added release date for 1.11.4.
  * Refs #28174 -- Fixed autoreload test crash on Python 2/non-ASCII path.
  * Fixed #28389 -- Fixed pickling of LazyObject on Python 2 when wrapped object doesn't have __reduce__().
  * Fixed #28148 -- Doc'd ImageField name validation concerns with the test client.
  * Added stub release notes for 1.11.2.
  * Fixed #27890 -- Fixed FileNotFoundError cleanup exception in runtests.py on Python 3.6+.
  * Fixed #28138 -- Used output type handler instead of numbersAsStrings on Oracle cursor.
  * Fixed widgets module path in docs/ref/contrib/gis/forms-api.txt.
  * Fixed #27947 -- Doc'd that model Field.error_messages often don't propagate to forms.
  * Fixed #28067 -- Clarified __str__() return type when using python_2_unicode_compatible().
  * Fixed docstring typo in django/contrib/admin/actions.py.
  * Fixed #28102 -- Doc'd how to compute path to built-in widget template directories.
  * Fixed #28352 -- Corrected QuerySet.values_list() return type in docs examples.
  * Fixed #28181 -- Added detection for GDAL 2.1 and 2.0.
  * Refs #23853 -- Updated sql.query.Query.join() docstring.
  * Added a test for Model._meta._property_names.
  * Refs #27919 -- Changed Widget.get_context() attrs kwarg to an arg.
  * Fixed #28415 -- Clarified what characters ASCII/UnicodeUsernameValidator accept.
  * Fixed #28074 -- Doc'd template-based widget rendering changes for contrib.gis.
  * Fixed #28278 -- Fixed invalid HTML for a required AdminFileWidget.
  * Added content_type filtering in Permission querying example.
  * Corrected FileExtensionValidator doc regarding the value being validated.
  * Fixed #27960 -- Set errcheck=False for GDALAllRegister to prevent crash.
  * Fixed #28097 -- Fixed layout of ReadOnlyPasswordHashWidget.
  * Fixed #27969 -- Fixed models.Field.formfield() setting 'disabled' for fields with choices.
  * Post-release version bump.
  * Fixed #28298 -- Prevented a primary key alteration from adding a foreign key constraint if db_constraint=False.
  * Refs #28192 -- Fixed documentation of ChoiceField choices requirement
  * Fixed #27966 -- Bumped required psycopg2 version to 2.5.4.
  * Linked GIS QuerySet API docs to corresponding PostGIS docs.
  * Fixed #27974 -- Kept resolved templates constant during one rendering cycle.
  * Refs #28100 -- Fixed URL in el, es_MX, and pt auth translations
  * Fixed typo in docs/ref/request-response.txt.
  * Fixed #27963 -- Removed unneeded docstring example in contributing docs.
  * Added stub release notes for security releases.
  * Fixed #28349 -- Doc'd how to upgrade Django from LTS to LTS.
  * Fixed typo in docs/ref/forms/fields.txt.
  * Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().
  * Fixed #28170 -- Fixed file_move_safe() crash when moving files to a CIFS mount.
  * Fixed broken links to Oracle docs.
  * Fixed #27554 -- Fixed prefetch_related() crash when fetching relations in nested Prefetches.
  * Added links and cosmetic edits to docs/ref/request-response.txt.
  * Added stub release notes for 1.11.1.
  * Fixed #28079 -- Restored "No POST data" (rather than an empty table) in HTML debug page.
  * Removed incorrect "required" attribute in docs/ref/forms/fields.txt.
  * Fixed #28176 -- Restored the uncasted option value in ChoiceWidget template context.
  * Refs #24423 -- Readded inadvertently deleted i18n tests.
  * Fixed #27965 -- Fixed precision comparison in a geoforms test (refs #27939).
  * Corrected post-release version bump.
  * Made runtests.py run gis_tests only when using a GIS database backend.
  * Fixed #28230 -- Allowed DjangoJsonEncoder to serialize CallableBool.
  * Fixed broken link to QUnit docs.
  * Removed MySQL (unsupported) from Perimeter docs.
  * Fixed #28266 -- Fixed typo in docs/ref/models/instances.txt.
  * Fixed #28139 -- Added another level of headings in the topics index.
  * Fixed #28003 -- Doc'd what an auto-created OneToOneField parent_link looks like.
  * Fixed #28160 -- Prevented hiding GDAL exceptions when it's not installed.
  * Updated man page for Django 1.11.
  * Fixed #27988 -- Fixed typo in docs/ref/django-admin.txt.
  * Fixed #28199 -- Fixed Subquery generating unnecessary/invalid CAST.
  * Fixed #28122 -- Fixed crash when overriding views.static.directory_index()'s template.
  * Fixed AppRegistryNotReady error when running gis_tests in isolation on PostGIS.
  * Fixed #28435 -- Removed inaccurate warning about SECURE_HSTS_PRELOAD.
  * Fixed #28040 -- Updated SplitArrayWidget to use template-based widget rendering.
  * Fixed #28269 -- Fixed Model.__init__() crash on models with a field that has an instance only descriptor.
  * Tested EmailMessage(attachments=[MIMEText])
  * Clarified return value of NumGeometries GIS function.
  * Refs #27935 -- Fixed BrinIndex.max_name_length if a project's default database isn't PostgreSQL.
  * Fixed #28058 -- Restored empty BoundFields evaluating to True.
  * Replaced "not A== B" with "A != B" in docs/howto/writing-migrations.txt.
  * Added CVE-2017-7233,4 to the security release archive.
  * Fixed #28204 -- Fixed MultipleObjectMixin.paginate_queryset() crash on Python 2 if InvalidPage message contains non-ASCII.
  * Fixed #27935 -- Fixed crash with BrinIndex name &gt; 30 characters.
  * Fixed #28293 -- Fixed union(), intersection(), and difference() when combining with an EmptyQuerySet.
  * Fixed #28222 -- Allowed settable properties in QuerySet.update_or_create()/get_or_create() defaults.
  * Refs #27556, #27488 -- Updated support backends docs for isvalid lookup.
  * Fixed nondeterministic ordering test failure in model_forms.
  * Fixed #28345 -- Applied limit_choices_to during ModelForm.__init__().
  * Fixed #27981 -- Doc'd date/time filter l10n changes in refs #25758.
  * Made a few cosmetic updates to "Migrations that add unique fields".
  * Bumped version for 1.11 release.
  * Fixed #28004 -- Doc'd how to create migrations for an app without a migrations directory.
  * Fixed #28202 -- Fixed FieldListFilter.get_queryset() crash on invalid input.
  * Fixed #27949 -- Doc'd how OpenLayers 3 widgets work.
  * Pass type to sql_alter_column_* where it was missing.
  * Fixed #27866 -- Made ChoiceWidget.format_value() return a list
  * Fixed #28308 -- Doc'd removal of Select.render_option() (refs #15667).
  * Fixed #28178 -- Changed contrib.gis to raise ImproperlyConfigured if gdal isn't installed.
  * Fixed #28284 -- Prevented Paginator's unordered object list warning from evaluating a QuerySet.
  * Fixed #28209 -- Made date-based generic views return a 404 rather than crash when given an out of range date.
  * Fixed #28161 -- Fixed return type of ArrayField(CITextField()).
  * Corrected docs regarding MySQL support of Length GIS function.
  * Fixed #28175 -- Fixed __in lookups on a foreign key when using the foreign key's parent model as the lookup value.
  * Refs #18247 -- Fixed SQLite QuerySet filtering on decimal result of Least and Greatest.
  * Refs #28207 -- Fixed contrib.auth.authenticate() if 'backend' is in the credentials.
  * Fixed #27644 -- Doc'd FileSystemStorage.get_created_time().
  * Added test for intersection() when combining with a queryset raising EmptyResultSet.
  * Fixed #28197 -- Fixed introspection of index field ordering on PostgreSQL.
  * Removed extra characters in docs header underlines.
  * Fixed GEOSGeometry reference in GIS tutorial.
  * Refs #28066 -- Fixed Python 2 failures in sessions_tests.
  * Removed obsolete Widget.format_output() in tests.
  * Fixed #28059 -- Restored class attribute in &lt;ul&gt; of widgets that use multiple_input.html.
  * Fixed typo in docs/ref/contrib/postgres/fields.txt.
  * Refs #27025 -- Fixed "invalid escape sequence" warning in auth_tests on Python 3.6.
  * Fixed #28031 -- Removed notes about old uWSGI/sentry versions (refs #20537).
  * Removed unexpected initial attribute in data migration examples.
  * Renamed "Mac OS X" to "macOS" in docs.
  * Sorted imports per isort 4.2.9.
  * Refs #28138 -- Added release notes for d52577b62b3138674807ac74251fab7faed48331.
  * Back to the future.
  * Fixed #27993 -- Fixed model form default fallback for SelectMultiple.
  * Refs #27866 -- Adapted backport for Python 2 compatibility
  * Removed unused links in docs/internals/contributing/triaging-tickets.txt.
  * Clarified QuerySet.iterator()'s docs on server-side cursors.
  * Fixed #28096 -- Allowed prefetch calls with ModelIterable subclasses
  * Fixed #28414 -- Fixed ClearableFileInput rendering as a subwidget of MultiWidget.
  * Corrected REPL example in forms docs for Python 3.
  * Refs #28181 -- Corrected detection of GDAL 2.1 on Windows.
  * Fixed #28075 -- Prevented ChoiceWidget from localizing option values.
  * Fixed #28282 -- Fixed class-based indexes name for models that only inherit Model.
  * Fixed #28038 -- Restored casting to text of builtin lookups on PostgreSQL.
  * Fixed #28418 -- Fixed queryset crash when using a GenericRelation to a proxy model.
  * Fixed #28062 -- Added a setting to disable server-side cursors on PostgreSQL.
  * Fixed #28105 -- Fixed crash in BaseGeometryWidget.get_context() when overriding existing attrs.
  * Refs #28160 -- Skipped a GeoManager test if not using a GIS database backend.
  * Fixed #28157 -- Fixed choice ordering in form fields with grouped and non-grouped options.
  * Fixed #28095 -- Doc'd Widget.build_attrs() signature change in Django 1.11.
  * Fixed a forms test after updated translations.
  * Fixed 403 link in docs/ref/contrib/gis/install/spatialite.txt.
  * Simplified schema.tests with assertForeignKeyExists()/assertForeignKeyNotExists().
  * Fixed #28336 -- Fixed typo in docs/ref/settings.txt.
  * Fixed #28378 -- Fixed union() and difference() when combining with a queryset raising EmptyResultSet.
  * Refs #28052 -- Cleaned up some indexes in schema tests.
  * Fixed #28047 -- Fixed QuerySet.filter() crash when it uses the name of a OneToOneField pk.
  * Added release date for 1.11.1.
  * Fixed #28327 -- Removed contradictory description of mod_wsgi docs.
  * Clarified "newly-introduced features" in the supported versions policy.
  * Fixed docs build with Sphinx 1.6.
  * Fixed #28239 -- Removed docs for a removed arg of template.Context.
  * Bumped version for 1.11.2 release.
  * Refs #28066 -- Fixed nondeterministic ordering test failure in sessions_tests.
  * Updated postgis.net and gaia-gis.it links to https.
  * Fixed typos in docs/topic/db/search.txt.
  * Fixed #28174 -- Fixed crash in runserver's autoreload with Python 2 on Windows with non-str environment variables.
  * Fixed typos in docs/howto/static-files/index.txt.
  * Fixed #28294 -- Doc'd request/args/kwargs attributes of class-based views.
  * Fixed #27967 -- Fixed KeyError in admin's inline form with inherited non-editable pk.
  * Fixed db backend discovery in admin_scripts tests.
  * Fixed outdated TIME_FORMAT in docs/ref/templates/builtins.txt.
  * Fixed #26028 -- Added overriding templates howto.
  * Updated was_published_recently() tutorial test to check boundary condition.
  * Fix a typo in django/db/transaction.py
  * Fixed #28109 -- Corrected the stack level of unordered queryset pagination warnings.
  * Fixed #28142 -- Fixed is_safe_url() crash on invalid IPv6 URLs.
  * Refs #22397 -- Removed model in test cleanup
  * Fixed #28052 -- Prevented dropping Meta.indexes when changing db_index to False.
  * Fixed #18485 -- Doc'd behavior of PostgreSQL when manually setting AutoField.
  * Updated core translations from Transifex
  * Fixed #28166 -- Fixed Model._state.db on MTI parent model after saving child model.
  * Added missing import in docs/topics/db/queries.txt.
  * Refs #27919 -- Passed ChoiceWidget.create_option() kwargs as expected.
  * Fixed #28229 -- Fixed the value of LoginView's "next" template variable.
  * Fixed #27975 -- Fixed crash if ModelChoiceField's queryset=None.
  * Added release date for 1.11.2.
  * Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.
  * Fixed #28159 -- Fixed BaseInlineFormSet._construct_form() crash when using save_as_new.
  * Removed an obsolete temporal reference in docs/faq/general.txt.
  * Fixed #28042 -- Fixed crash when using a two-tuple in EmailMessage's attachments arg.
  * Fixed #27945 -- Clarified that RegexValidator searches with the regex.
  * Linked GIS functions docs to corresponding PostGIS docs.
  * Refs #17453 -- Fixed broken link to #django IRC logs.
  * Fixed gis_tests.geoapp test with incorrect geodetic coordinates.
  * Fixed #28066 -- Prevented SessionBase.cycle_key() from discarding data.
  * Fixed #27730 -- Doc'd that template vars created outside a block can't be used in it.
  * Fixed #28069 -- Moved setup_test_environment() warning in tutorial 5.
  * Fixed #28130 -- Fixed formset min_num validation with initial, unchanged forms.
  * Fixed #28091 -- Re-raised original exception when closing cursor cleanup fails
  * Clarified backend support of Area GIS function.
  * Fixed #28387 -- Fixed has_changed() for disabled form fields that subclass it.
  * Fixed #27915 -- Allowed Meta.indexes to be defined in abstract models.
  * Fixed #26755 -- Fixed test_middleware_classes_headers if Django source isn't writable.
  * Fixed #28188 -- Fixed crash when pickling model fields.
  * Fixed typo in docs/ref/models/querysets.txt.
  * Pointed Dive into Python links to python3 site
  * Refs #25240 -- Added ExtractWeek examples.
  * Added some shell output in tutorial 2.
  * Removed inappropriate highlighting in committing-code.txt.
  * Fixed #28399 -- Fixed QuerySet.count() for union(), difference(), and intersection() queries.
  * Fixed #28212 -- Allowed customizing the port that LiveServerTestCase uses.
  * Fixed flake8 warning on Python 2.
  * Clarified meaning of "Optional" in auth.models.User field docs.
  * Clarified HStoreField model/form difference in 1.11 release notes.
  * Removed self from method signatures in docs.
  * Added stub release notes for 1.11.4.
  * Updated tests after French translation update
  * Fixed #27603 -- Fixed AsKML when queryset is evaluated more than once.
  * Fixed #28262 -- Fixed incorrect DisallowedModelAdminLookup when a nested reverse relation is in list_filter.
  * Fixed #27434 -- Doc'd how to raise a model validation error for a field not in a model form.
  * Refs #21415 -- Fixed contrib.humanize translations for es_AR
  * Fixed #27655 -- Added some guidelines to the coding style docs.
  * Updated contrib translations from Transifex
  * Removed nonexistent methods from File's docs.
  * Doc'd the need to remove default ordering on Subquery aggregates.
  * Fixed broken link to mysqlclient docs.
  * Fixed #28210 -- Fixed Model._state.adding on MTI parent model after saving child model.
  * Removed usage of deprecated sphinx.util.compat.Directive.
  * Refs #28100 -- Added 1.11.1 release note for e6bfd3d751278d7cfd09af1120c4bbce509c05da.
  * Fixed #28190 -- Clarifed how include/extends treat template names.
  * Refs #26294 -- Fixed typo in docs/ref/django-admin.txt.
  * Refs #28091 -- Fixed typo and rephrased 1.11.1 release note.
  * Fixed typo in docs/ref/class-based-views/mixins-single-object.txt.
  * Bumped version for 1.11.1 release.
  * Added release date for 1.11.3.
  * Bumped version for 1.11 release candidate 1.
  * Simplified tutorial's test names and docstrings.
  * Fixed typo in django/db/backends/base/schema.py comment.
  * Fixed #28233 -- Used a simpler example in the aggregation "cheat sheet" docs.
- Require python-pytz and Recommend python-bcrypt</changelog>
  <changelog author="toddrme2178@gmail.com" date="1505908800">- update to version 1.11.5
  * CVE-2017-12794: Possible XSS in traceback section of technical 500 debug page
  * Fixed GEOS version parsing if the version has a commit hash at the end (new
    in GEOS 3.6.2) (:ticket:`28441`).
  * Added compatibility for ``cx_Oracle`` 6 (:ticket:`28498`).
  * Fixed select widget rendering when option values are tuples (:ticket:`28502`).
  * Django 1.11 inadvertently changed the sequence and trigger naming scheme on
    Oracle. This causes errors on INSERTs for some tables if
    ``'use_returning_into': False`` is in the ``OPTIONS`` part of ``DATABASES``.
    The pre-1.11 naming scheme is now restored. Unfortunately, it necessarily
    requires an update to Oracle tables created with Django 1.11.[1-4]. Use the
    upgrade script in :ticket:`28451` comment 8 to update sequence and trigger
    names to use the pre-1.11 naming scheme.
  * Added POST request support to ``LogoutView``, for equivalence with the
    function-based ``logout()`` view (:ticket:`28513`).
  * Omitted ``pages_per_range`` from ``BrinIndex.deconstruct()`` if it's ``None``
    (:ticket:`25809`).
  * Fixed a regression where ``SelectDateWidget`` localized the years in the
    select box (:ticket:`28530`).
  * Fixed a regression in 1.11.4 where ``runserver`` crashed with non-Unicode
    system encodings on Python 2 + Windows (:ticket:`28487`).
  * Fixed a regression in Django 1.10 where changes to a ``ManyToManyField``
    weren't logged in the admin change history (:ticket:`27998`) and prevented
    ``ManyToManyField`` initial data in model forms from being affected by
    subsequent model changes (:ticket:`28543`).
  * Fixed non-deterministic results or an ``AssertionError`` crash in some
    queries with multiple joins (:ticket:`26522`).
  * Fixed a regression in ``contrib.auth``'s ``login()`` and ``logout()`` views
    where they ignored positional arguments (:ticket:`28550`).</changelog>
  <changelog author="tbechtold@suse.com" date="1513080000">- update to 1.11.8:
  * Fixed #28488 -- Reallowed error handlers to access CSRF tokens.
  * Fixed #28856 -- Fixed a regression in caching of a GenericForeignKey
    pointing to a MTI model.
  * Fixed #28597 -- Fixed crash with the name of a model's autogenerated primary
    key in an Index's fields.
  * Added stub release notes for 1.11.7.
  * Fixed #28305 -- Fixed "Cannot change column 'x': used in a foreign key constraint"
    crash on MySQL with a sequence of AlterField or RenameField operations.
  * Fixed #28689 -- Fixed unquoted table names in Subquery SQL when using OuterRef.
  * Added assertion helpers for PostgreSQL's server-side cursor tests.
  * Fixed #28729 -- Replaced a numbered list with unordered list in TemplatesSetting docs.
  * Fixed #28786 -- Doc'd middleware ordering considerations due to
    CommonMiddleware setting Content-Length.
  * Added release date for 1.11.8.
  * Fixed #28702 -- Made query lookups for CIText fields use citext.
  * Added 2017-12794 to the security release archive.
  * Fixed typo in docs/topics/cache.txt.
  * Bumped version for 1.11.6 release.
  * Added release date for 1.11.6.
  * Fixed #28648 -- Corrected typo in docs/topics/db/queries.txt.
  * Bumped version for 1.11.7 release.
  * Added stub release notes for 1.11.8.
  * Fixed #28848 -- Fixed SQLite/MySQL crash when ordering by a filtered
    subquery that uses nulls_first/nulls_last.
  * Fixed typo in docs/topics/db/aggregation.txt.
  * Fixed #28802 -- Fixed typo in docs/topics/auth/default.txt.
  * Fixed typo in docs/topics/forms/media.txt.
  * Bumped version for 1.11.8 release.
  * Fixed typo in docs/ref/models/querysets.txt.
  * Fixed test failures due to ordering differences on PostgreSQL 10.
  * Fixed #28710 -- Fixed the Basque DATE_FORMAT string
  * Added stub release notes for 1.11.6.
  * Fixed #28747 -- Fixed typos in django/conf/global_settings.py comments.
  * Fixed #28817 -- Made QuerySet.iterator() use server-side cursors after
    values() and values_list().
  * Post-release version bump.
  * Fixed #28792 -- Fixed index name truncation of namespaced tables.
  * Fixed #28781 -- Added QuerySet.values()/values_list() support for union(),
    difference(), and intersection().
  * Fixed #28722 -- Made QuerySet.reverse() affect nulls_first/nulls_last.
  * Refs #28710 -- Simplified l10n format test
  * Initialized CsrfViewMiddleware once in csrf_tests.
  * Added release date for 1.11.7.
  * Linked to prefetch_related_objects func in DB optimization docs.
  * Fixed #28645 -- Reallowed AuthenticationForm to raise the inactive user
    error when using ModelBackend.
  * Fixed #28653 -- Added missing ForeignKey.on_delete argument in docs.
  * Fixed #28561 -- Removed inaccurate docs about QuerySet.order_by() and joins.
  * Fixed #28555 -- Made CharField convert whitespace-only values to the
    empty_value when strip is enabled.
  * Fixed #28601 -- Prevented cache.get_or_set() from caching None if default
    is a callable that returns None.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1513857600">- build only for python2 - Python3 provided by Django-2.0</changelog>
  <changelog author="tbechtold@suse.com" date="1518004800">- update to 1.11.10 (bsc#1077714, CVE-2018-6188):
  * Fixed GeoIP test failure with the latest data.
  * Bumped version for 1.11.9 release.
  * Fixed #28890 -- Removed newlines between MultiWidget's subwidgets.
  * Fixed #29016 -- Fixed incorrect foreign key nullification on related instance deletion.
  * Fixed #29032 -- Fixed an example of using expressions in QuerySet.values().
  * Added stub release notes for 1.11.10.
  * Fixed typo in docs/topics/testing/advanced.txt.
  * Fixed CVE-2018-6188 -- Fixed information leakage in AuthenticationForm.
  * Fixed #29017 -- Updated BaseCommand.leave_locale_alone doc per refs #24073.
  * Refs #28876 -- Fixed incorrect class-based model index name generation for models with quoted db_table.
  * Fixed location of spatialite_source label.
  * Fixed #29002 -- Corrected cached template loader docs about when it's automatically enabled.
  * Fixed #29094 -- Fixed crash when entering an invalid uuid in ModelAdmin.raw_id_fields.
  * Added release date for 1.11.9.
  * Refs #28876 -- Fixed incorrect foreign key constraint name for models with quoted db_table.
  * Fixed a GeoIP2 test failure with the latest GeoIP2 database.
  * Post-release version bump.
  * Fixed typo in docs/topics/i18n/translation.txt.
  * Bumped version for 1.11.10 release.
  * Added stub release notes for 1.11.9.
  * Fixed #29071 -- Fixed contrib.auth.authenticate() crash if a backend doesn't accept a request but a later one does.
  * Fixed #25277 -- Restored test dependency to the original python-memcached.
  * Refs #28856 -- Fixed caching of a GenericForeignKey pointing to a model that uses more than one level of MTI.</changelog>
  <changelog author="tbechtold@suse.com" date="1523880000">update to version 1.11.12 (CVE-2018-7537, CVE-2018-7536):
  * Fixed #29273 -- Prevented initial selection of empty choice in multiple choice widgets.
  * Fixed links to Sphinx docs.
  * Fixed #29192 -- Removed inaccurate statement regarding overriding fields from abstract base classes.
  * Added CVE-2018-7536,7 to the security release archive.
  * Added release date for 1.11.12.
  * Bumped version for 1.11.12 release.
  * Fixed #29229 -- Fixed column mismatch crash when combining two annotated values_list() querysets with union(), difference(), or intersection().
  * Added stub release notes for 1.11.12.
  * Fixed typo in docs/releases/1.11.12.txt.
  * Post-release version bump.
  * Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in django.utils.text.Truncator.
  * Bumped version for 1.11.11 release.
  * Post-release version bump.
  * Removed blank lines per isort 4.3.0.
  * Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters.
  * Switched test requirement to new psycopg2-binary package.
  * Added stub release notes for security releases.
  * Corrected doc'd type of some parameters from string to str.
  * Added CVE-2018-6188 to the security release archive.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533729600">- update to version 1.11.15
  * CVE-2018-14574 Open redirect possibility in CommonMiddleware - boo#1102680
  * Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS 3.6.1+
  * Fixed a regression in Django 1.11.8 where altering a field with a unique
    constraint may drop and rebuild more foreign keys than necessary
  * Fixed crashes in django.contrib.admindocs when a view is a callable object,
    such as django.contrib.syndication.views.Feed
  * Fixed a regression in Django 1.11.12 where QuerySet.values() or values_list()
    after combining an annotated and unannotated queryset with union(),
    difference(), or intersection() crashed due to mismatching columns</changelog>
</package>
<package pkgid="0b10f38fc5182e9b5fbc2bd9c974f89d6e241c2beee5f98c8aad5e15a7b5aef2" name="python2-aubio" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1486382400">- Initial release</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Use singlespec macros
- Update to 0.4.5:
  * aubio: New python command line tool to extract information
  * Improved default parameters for onset detection, using adaptive
    spectral whitening and compression
  * Add support for libswresample
  * New options --miditap-note and --miditap-velo have been added to
    aubioonset and aubiotrack to adjust the note and velocity of the
    midi note emitted by onsets and beats.
  * Add a bunch of fixes, including improved documentation, build
    system fixes, and platform compatibility.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
</package>
<package pkgid="9e5990ef90e8d75f899ae0e6ea016aa91c6fca57de51a17f44cd39fcf29b762b" name="python2-aubio" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="alarrosa@suse.com" date="1486382400">- Initial release</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Use singlespec macros
- Update to 0.4.5:
  * aubio: New python command line tool to extract information
  * Improved default parameters for onset detection, using adaptive
    spectral whitening and compression
  * Add support for libswresample
  * New options --miditap-note and --miditap-velo have been added to
    aubioonset and aubiotrack to adjust the note and velocity of the
    midi note emitted by onsets and beats.
  * Add a bunch of fixes, including improved documentation, build
    system fixes, and platform compatibility.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
</package>
<package pkgid="7c32e42f459f497cb8794a97c7d09e08223a3558c5230f33f5ca204653980a49" name="python2-configargparse" arch="noarch">
  <version epoch="0" ver="0.10.0" rel="lp150.2.3.1"/>
  <changelog author="freitag@opensuse.org" date="1425384000">- Initial package release</changelog>
  <changelog author="freitag@owncloud.com" date="1425470400">- Update to upstream version 0.9.3 to make mitmproxy work.</changelog>
  <changelog author="freitag@owncloud.com" date="1425470401">- Some minor cleanups.</changelog>
  <changelog author="freitag@owncloud.com" date="1425902400">- Add LICENSE file to doc section of the package
- Use python-setuptools as dependency
- Use full link to source.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1450353600">- Updated to version 0.10.0
  * config file syntax is now easier to override or extend using the new
    constructor arg: config_file_parser (via merged gh#bw2/ConfigArgParse#28 - thanks @lahwaacz )
  * support for python 2.6 (via merged gh#bw2/ConfigArgParse#18 - thanks @kuba )
  * replace dashes with underscores in env. var names when using the
    auto-env-var feature (via merged gh#bw2/ConfigArgParse#29 - thanks @helgi )
- Fixed download-link and homepage
- Fixed license</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mcepl@suse.com" date="1526644800">- Cleanup SPEC file and add check section</changelog>
</package>
<package pkgid="14ab987f13f905d2340815cf8925ad564986a463d24ad3de6c440e8bc0fd2fd5" name="python2-kiwi" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="be3d05914eff66466fc5317c0cb071502623462ef491bb9fffa575f9d76a1b34" name="python2-kiwi" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="3cc9a9e6281c6ae96d3a5a09dbbdf24672d7aa7a2f538ec785efbb67e77f0bbf" name="python2-llfuse" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="lp150.2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1293796800">- initial version (0.29.4)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1305288000">- update to 0.31</changelog>
  <changelog author="chris@computersalat.de" date="1323604800">- update to 0.37.1
  * Fixed a segfault-causing race condition in Lock.acquire() and
    Lock.yield().
- 2011-12-05, llfuse 0.37
  * Explicitly call fuse_chan_destroy() in llfuse.close(), so
    that the mountpoint becomes inaccessible right away, even
    while the process is still running.
  * Added get_ino_t_bytes() and get_off_t_bytes() that return
    the number of bytes used for representing inode numbers
    and file offsets.
  * The yield_() method of the global lock now takes an additional
  * count* argument that can be used to yield the lock more than
    once.
  * Changed implementation of global lock. The global lock is
    no longer a mutex, but a boolean variable protected by a mutex,
    and changes are tracked with a condition object. This allows
    lock.yield() to work properly: if there are other threads waiting
    for the lock, they are guaranteed to run. If there are no other
    threads waiting for the lock, execution of the active thread
    continues immediately.
    The previous implementation using sched_yield() was mostly
    broken: threads trying to acquire the global lock were calling
    pthread_mutex_lock, so they got removed from the kernels
    runqueue. However, calls to sched_yield() would just put the
    active thread into the expired runqueue, and calls to
    pthread_mutex_unlock apparently do not synchronously move the
    threads waiting for the lock back to a runqueue. Therefore, most
    of the time the active thread would be the only thread in any
    runqueue and thus continue to run.
  * The Operations.forget() method now receives a list of
    (inode, nlookup) tuples rather than just one such tuple.
  * invalidate_entry() and invalidate_inode() no longer work
    synchronously. Instead, the message is put in a queue and send by
    a background thread.
  * The acquire() method of the global lock now has an optional
  * timeout* parameter.
  * The create() request handler now receives the open flags
    as an additional parameter.
- for more info please see Changes.txt</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.40
  * Re-raising an exception from a request handler now works
    correctly under Python 3. Problems were caused by a Cython bug,
    but llfuse now works around the issue.
  * File atime, ctime and mtime can now also be represented as
    nanosecond integer values for increased resolution.
  * Python-llfuse no longer includes the setuptools/distribute
    bootstrap script. This module thus has to be installed manually
    if not already present on the system.
  * Duck-typing of the Operations instance is now supported.
  * Python-llfuse no longer requires a re-compilation of the
    Cython code (setup.py build_cython step) when compiling for MacOS
    or FreeBSD.
  * Extended attributes are now properly supported under FreeBSD.
- General spec file clean-up</changelog>
  <changelog author="t.gruner@katodev.de" date="1503576000">- change spec-file for multi-python build
- Update to version 1.2
  * The attr argument of the ~Operations.setattr handler now contains
    valid values only for the attributes that are to be set.
  * Previously, the documentation assorted that other attributes would
    be set to the original (unchanged) values. However, that was actually
    never the case.
- Release 1.1.1 (2016-07-27)
  * Fixed the description of the ~Operations.lookup handler (should
    return zero if there is no such entry, not a negative value).
  * Fixed the description of the EntryAttributes structure (descriptions
    of ~EntryAttributes.attr_timeout and ~EntryAttributes.entry_timeout
    were switched).
- Release 1.1 (2016-05-23)
  * Added support for nanosecond resolution time-stamps in GNU/kFreeBSD.
  * Fixed another set of build issues on FreeBSD.
- Release 1.0 (2016-03-08)
  * Note: The 1.0 version number does not imply any special stability or
    an API freeze. It's a consequence of switching to semantic versioning,
    where backwards incompatible changes will always result in increased
    major version.
  * Fixed an overflow when accessing the *st_xtime_ns attributes of the
    ~llfuse.EntryAttributes class from Python on 32-bit systems.
  * POTENTIAL COMPATIBILITY BREAK: The ~Operations.destroy handler is
    now called with the global lock acquired.
- Release 0.43 (2016-02-23)
  * Fixed build-failure under OS-X.
  * Fixed some build failures under FreeBSD (hopefully all of them,
    but no testers were available before the release).
  * The workers parameter to llfuse.main may now be None.
- Release 0.42.1 (2016-02-01)
  * Include HTML documentation.
- Release 0.42 (2016-01-30)
  * The documentation has been clarified and extended - please take
    a look even if you're already familiar with Python-LLFUSE.
  * Extended coverage of unit tests.
  * Fixed a compile error under OS-X.
  * Added notify_store function.
  * Added get_sup_groups function.
  * The ~Operations.read handler may now return arbitrary objects that
    as long as they implement the buffer protocol.
  * Implemented a forget_multi handler (used behind the scenes).
  * Many classes were rewritten in Cython for improved performance.
  * Python thread-specific data is now initialized only once rather
    than every time a handler is called.
  * SIGINT (Ctrl-C) now properly terminates llfuse.main also when
    running with multiple workers.
  * The return value of llfuse.main now indicates if the loop was
    terminated due to an unmount request or due to a signal.
  * BACKWARDS INCOMPATIBLE CHANGES:
  * Ducktyping the EntryAttributes class is no longer allowed, Operations
    methods must return instances of this class (rather than any object
    that provides the neccessary attributes).
  * The !st_Xtime attributes of the EntryAttributes have been dropped
    in favor of the !st_Xtime_ns attributes.
  * The setattr method now always receives a completely filled
    EntryAttributes instance. To determine which attributes should be
    changed, a new fields argument has been introduced.
  * The ~Operations.setattr method now also receives an fh parameter.
  * The llfuse.main function now has a workers parameter, and the
    single parameter was dropped.
  * Almost all request handlers now receive a RequestContext instance
    in an additional parameter.
- Release 0.41.1 (2015-08-22)
  * Added some files in :file:`test/` that were missing in the
    0.41 tarball. Tests now support the --installed option, produce
    prettier output, and check for error messages printed to stderr
    or stdout.
  * Python-LLFUSE can now also be built on NetBSD.
  * Added support for FUSE_SET_ATTR_ATIME_NOW and
    FUSE_SET_ATTR_MTIME_NOW setattr flags. Previosly, these would be
    silently ignored.
  * Fixed an AssertionError in :file:`examples/passthroughfs.py`
- Release 0.41 (2015-08-20)
  * Fixed a syntax error in contrib/tmpfs.py
  * Introduced an !llfuse.__version__ attribute.
  * Added more reasonable default values for llfuse.EntryAttributes.
  * Added new minimal example, :file:`examples/lltest.py`.
  * Added unit tests.
  * Added an example for a pass-through file system,
    `examples/passthroughfs.py`.</changelog>
  <changelog author="alarrosa@suse.com" date="1504699200">- Split documentation into a new python-llfuse-docs package.
- Added full changelog in the previous changelog entry</changelog>
  <changelog author="alarrosa@suse.com" date="1515153600">- Update to version 1.3.2
  * Minor bugfixes.
- Update to version 1.3.1
  * The main loop now terminates properly again when terminated by a signal.
- Update to version 1.3
  * The StatvfsData class now has an !~StatvfsData.f_namemax attribute.
  * EntryAttributes and StatvfsData instances can now be pickled and copied.
    Other llfuse classes now raise an exception when the do not support
    pickling/copying.</changelog>
  <changelog author="alarrosa@suse.com" date="1515499200">- Remove %check section since it's not checking anything</changelog>
  <changelog author="alarrosa@suse.com" date="1529323200">- Update to version 1.3.4
  * No-change rebuild with Cython 0.28.2.
- Update to version 1.3.3
  * Dropped pytest-catchlog dependency and add support for Pytest 3.3.0.
  * Minor bugfixes.
- Add fix-char-cast-to-unsigned-int.patch to fix a compiler error when
  casting from char to Py_UNICODE (unsigned int) due to a possible change
  of sign.
- Add fix-test-for-fusermount.patch to skip the tests that rely on
  fusermount since it doesn't work in OBS's chroot.
- Add %check section back. It's not possible to check all tests since for
  that, the user that runs the test should be in the trusted group, but
  at least some tests are run.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Add patch to build with new attr:
  * llfuse-attr-2.4.48.patch
- Drop contextlib2 dependency
- Run tests unconditionally</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1537358400">- Update to version 1.3.5
  * Add `handle_signals` option to `llfuse.main`
  * Several fixes to `examples/passthroughfs.py`
  * Now compatible with Python 3.7
- Remove patch already in upstream.
  * llfuse-attr-2.4.48.patch</changelog>
</package>
<package pkgid="b7a8a006665b4f546b68800a939f556fee86c46edd21242af42d42f672bcd5d8" name="python2-matrix-synapse" arch="noarch">
  <version epoch="0" ver="0.28.1" rel="lp150.2.4.1"/>
  <changelog author="okurz@suse.com" date="1497787200">- Initial version of matrix-synapse version 0.19.2</changelog>
  <changelog author="okurz@suse.com" date="1498737600">- Prevent conflicts between python2/3 version of packages</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Do not suppress errors from useradd procedure.
- Trim description to the essence of the package. It is not
  supposed to be a manual or architectural document.
- Remove redundant %clean section. Replace %__-type macro
  indirections.</changelog>
  <changelog author="okurz@suse.com" date="1510660800">- Update to version v0.24.1+4.632baf79:
  * Disallow capital letters in userids
  * Allow = in mxids and groupids
  * Validate group ids when parsing
  * Fix a logcontext leak in the media repo
  * Correctly wire in update group profile over federation
  * replace 'except:' with 'except Exception:'
  * fix vars named `l`
  * Bump version and changelog
  * Add jitter to validity period of attestations
  * Revert "Add jitter to validity period of attestations"</changelog>
  <changelog author="okurz@suse.com" date="1510660801">- Update to version v0.24.1:
  * Bug fixes:
  * Fix updating group profiles over federation (PR #2567)
  * Fix handling SERVFAILs when doing AAAA lookups for federation (PR #2477)
  * Fix incompatibility with newer versions of ujson (PR #2483) Thanks to
    @jeremycline!
  * Fix notification keywords that start/end with non-word chars (PR #2500)
  * Fix stack overflow and logcontexts from linearizer (PR #2532)
  * Fix 500 error when fields missing from power_levels event (PR #2552)
  * Fix 500 error when we get an error handling a PDU (PR #2553)
  * Fix regression in performance of syncs (PR #2470)
  * Fix caching error in the push evaluator (PR #2332)
  * Fix bug where pusherpool didn't start and broke some rooms (PR #2342)
  * Fix port script for user directory tables (PR #2375)
  * Fix device lists notifications when user rejoins a room (PR #2443, #2449)
  * Fix sync to always send down current state events in timeline (PR #2451)
  * Fix bug where guest users were incorrectly kicked (PR #2453)
  * Fix bug talking to IPv6 only servers using SRV records (PR #2462)
  * Fix synapse_port_db failure. Thanks to Pneumaticat! (PR #1904)
  * Fix caching to not cache error responses (PR #1913)
  * Fix APIs to make kick &amp; ban reasons work (PR #1917)
  * Fix bugs in the /keys/changes api (PR #1921)
  * Fix bug where users couldn't forget rooms they were banned from (PR #1922)
  * Fix issue with long language values in pushers API (PR #1925)
  * Fix a race in transaction queue (PR #1930)
  * Fix dynamic thumbnailing to preserve aspect ratio. Thanks to jkolo! (PR
    [#1945])
  * Fix device list update to not constantly resync (PR #1964)
  * Fix potential for huge memory usage when getting device that have
    changed (PR #1969)
  * Fix bug where pusher pool didn't start and caused issues when
    interacting with some rooms (PR #2342)
  * Fix bug with storing registration sessions that caused frequent CPU churn
    (PR #2319)
  * Fix users not getting notifications when AS listened to that user_id (PR
    [#2216]) Thanks to @slipeer!
  * Fix users without push set up not getting notifications after joining rooms
    (PR #2236)
  * Fix preview url API to trim long descriptions (PR #2243)
  * Fix bug where we used cached but unpersisted state group as prev group,
    resulting in broken state of restart (PR #2263)
  * Fix removing of pushers when using workers (PR #2267)
  * Fix CORS headers to allow Authorization header (PR #2285) Thanks to @krombel!
  * Fix bug in anonymous usage statistic reporting (PR #2281)
  * Fix API to allow clients to upload one-time-keys with new sigs (PR #2206)
  * Fix bug where users got pushed for rooms they had muted (PR #2200)
  * Fix nuke-room script to work with current schema (PR #1927) Thanks
    @zuckschwerdt!
  * Fix db port script to not assume postgres tables are in the public schema
    (PR #2024) Thanks @jerrykan!
  * Fix getting latest device IP for user with no devices (PR #2118)
  * Fix rejection of invites to unreachable servers (PR #2145)
  * Fix code for reporting old verify keys in synapse (PR #2156)
  * Fix invite state to always include all events (PR #2163)
  * Fix bug where synapse would always fetch state for any missing event (PR #2170)
  * Fix a leak with timed out HTTP connections (PR #2180)
  * Fix bug where we didn't time out HTTP requests to ASes  (PR #2192)
  * Fix joining rooms over federation where not all servers in the room saw the
    new server had joined (PR #2094)
  * Fix bug where current_state_events renamed to current_state_ids (PR #1849)
  * Fix routing loop when fetching remote media (PR #1992)
  * Fix current_state_events table to not lie (PR #1996)
  * Fix CAS login to handle PartialDownloadError (PR #1997)
  * Fix assertion to stop transaction queue getting wedged (PR #2010)
  * Fix presence to fallback to last_active_ts if it beats the last sync time.
    Thanks @Half-Shot! (PR #2014)
  * Fix bug when federation received a PDU while a room join is in progress (PR
    [#2016])
  * Fix resetting state on rejected events (PR #2025)
  * Fix installation issues in readme. Thanks @ricco386 (PR #2037)
  * Fix caching of remote servers' signature keys (PR #2042)
  * Fix some leaking log context (PR #2048, #2049, #2057, #2058)
  * Fix rejection of invites not reaching sync (PR #2056)
  * Fix bug in handling of incoming device list updates over federation.
  * Features:
  * Add Group Server (PR #2352, #2363, #2374, #2377, #2378, #2382, #2410, #2426,
    [#2430], #2454, #2471, #2472, #2544)
  * Add support for channel notifications (PR #2501)
  * Add basic implementation of backup media store (PR #2538)
  * Add config option to auto-join new users to rooms (PR #2545)
  * Add a frontend proxy worker (PR #2344)
  * Add support for event_id_only push format (PR #2450)
  * Add a PoC for filtering spammy events (PR #2456)
  * Add a config option to block all room invites (PR #2457)
  * Add a user directory API (PR #2252, and many more)
  * Add shutdown room API to remove room from local server (PR #2291)
  * Add API to quarantine media (PR #2292)
  * Add new config option to not send event contents to push servers (PR #2301)
    Thanks to @cjdelisle!
  * Add per user rate-limiting overrides (PR #2208)
  * Add config option to limit maximum number of events requested by ``/sync``
    and ``/messages`` (PR #2221) Thanks to @psaavedra!
  * Add username availability checker API (PR #2183)
  * Add read marker API (PR #2120)
  * Add delete_devices API (PR #1993)
  * Add phone number registration/login support (PR #1994, #2055)
  * Add some administration functionalities. Thanks to morteza-araby! (PR #1784)
  * Changes:
  * Make the spam checker a module (PR #2474)
  * Delete expired url cache data (PR #2478)
  * Ignore incoming events for rooms that we have left (PR #2490)
  * Allow spam checker to reject invites too (PR #2492)
  * Add room creation checks to spam checker (PR #2495)
  * Spam checking: add the invitee to user_may_invite (PR #2502)
  * Process events from federation for different rooms in parallel (PR #2520)
  * Allow error strings from spam checker (PR #2531)
  * Improve error handling for missing files in config (PR #2551)
  * Make 'affinity' package optional, as it is not supported on some platforms
  * Use bcrypt module instead of py-bcrypt (PR #2288) Thanks to @kyrias!
  * Improve performance of generating push notifications (PR #2343, #2357, #2365,
    [#2366], #2371)
  * Improve DB performance for device list handling in sync (PR #2362)
  * Include a sample prometheus config (PR #2416)
  * Document known to work postgres version (PR #2433) Thanks to @ptman!
  * Improve performance of storing user IPs (PR #2307, #2308)
  * Slightly improve performance of verifying access tokens (PR #2320)
  * Slightly improve performance of event persistence (PR #2321)
  * Increase default cache factor size from 0.1 to 0.5 (PR #2330)
  * Various performance fixes (PR #2177, #2233, #2230, #2238, #2248, #2256,
    [#2274])
  * Deduplicate sync filters (PR #2219) Thanks to @krombel!
  * Correct a typo in UPGRADE.rst (PR #2231) Thanks to @aaronraimist!
  * Add count of one time keys to sync stream (PR #2237)
  * Only store event_auth for state events (PR #2247)
  * Store URL cache preview downloads separately (PR #2299)
  * Various small performance fixes (PR #2201, #2202, #2224, #2226, #2227, #2228,
    [#2229])
  * Update username availability checker API (PR #2209, #2213)
  * When purging, don't de-delta state groups we're about to delete (PR #2214)
  * Documentation to check synapse version (PR #2215) Thanks to @hamber-dick!
  * Add an index to event_search to speed up purge history API (PR #2218)
  * Always mark remotes as up if we receive a signed request from them (PR #2190)
  * Enable guest access for the 3pl/3pid APIs (PR #1986)
  * Add setting to support TURN for guests (PR #2011)
  * Various performance improvements (PR #2075, #2076, #2080, #2083, #2108,
    [#2158], #2176, #2185)
  * Make synctl a bit more user friendly (PR #2078, #2127) Thanks @APwhitehat!
  * Replace HTTP replication with TCP replication (PR #2082, #2097, #2098,
    [#2099], #2103, #2014, #2016, #2115, #2116, #2117)
  * Support authenticated SMTP (PR #2102) Thanks @DanielDent!
  * Add a counter metric for successfully-sent transactions (PR #2121)
  * Propagate errors sensibly from proxied IS requests (PR #2147)
  * Add more granular event send metrics (PR #2178)
  * Use JSONSchema for validation of filters. Thanks @pik! (PR #1783)
  * Reread log config on SIGHUP (PR #1982)
  * Speed up public room list (PR #1989)
  * Add helpful texts to logger config options (PR #1990)
  * Minor ``/sync`` performance improvements. (PR #2002, #2013, #2022)
  * Add some debug to help diagnose weird federation issue (PR #2035)
  * Correctly limit retries for all federation requests (PR #2050, #2061)
  * Don't lock table when persisting new one time keys (PR #2053)
  * Reduce some CPU work on DB threads (PR #2054)
  * Cache hosts in room (PR #2060)
  * Batch sending of device list pokes (PR #2063)
  * Speed up persist event path in certain edge cases (PR #2070)
  * Reduce database table sizes (PR #1873, #1916, #1923, #1963)
  * Update contrib/ to not use syutil. Thanks to andrewshadura! (PR #1907)
  * Don't fetch current state when sending an event in common case (PR #1955)</changelog>
  <changelog author="okurz@suse.com" date="1511179200">- Update to version v0.25.1:
  * Bug fixes:
  * Fix login with LDAP and other password provider modules (PR #2678). Thanks to @jkolo!
  * Fix port script (PR #2673)
  * Fix port script (PR #2577)
  * Fix error when running synapse with no logfile (PR #2581)
  * Fix UI auth when deleting devices (PR #2591)
  * Fix typo when checking if user is invited to group (PR #2599)
  * Fix the port script to drop NUL values in all tables (PR #2611)
  * Fix appservices being backlogged and not receiving new events due to a bug in
    notify_interested_services (PR #2631) Thanks to @xyzz!
  * Fix updating rooms avatar/display name when modified by admin (PR #2636)
  * Thanks to @farialima!
  * Fix bug in state group storage (PR #2649)
  * Fix 500 on invalid utf-8 in request (PR #2663)
  * Features:
  * Add is_public to groups table to allow for private groups (PR #2582)
  * Add a route for determining who you are (PR #2668) Thanks to @turt2live!
  * Add more features to the password providers (PR #2608, #2610, #2620,
    [#2622], #2623, #2624, #2626, #2628, #2629)
  * Add a hook for custom rest endpoints (PR #2627)
  * Add API to update group room visibility (PR #2651)
  * Changes:
  * Ignore tags when generating URL preview descriptions (PR #2576) Thanks to
    @maximevaillancourt!
  * Register some /unstable endpoints in /r0 as well (PR #2579) Thanks to @krombel!
  * Support /keys/upload on /r0 as well as /unstable (PR #2585)
  * Front-end proxy: pass through auth header (PR #2586)
  * Allow ASes to deactivate their own users (PR #2589)
  * Remove refresh tokens (PR #2613)
  * Automatically set default displayname on register (PR #2617)
  * Log login requests (PR #2618)
  * Always return is_public in the /groups/:group_id/rooms API (PR #2630)
  * Avoid no-op media deletes (PR #2637) Thanks to @spantaleev!
  * Fix various embarrassing typos around user_directory and add some doc. (PR #2643)
  * Return whether a user is an admin within a group (PR #2647)
  * Namespace visibility options for groups (PR #2657)
  * Downcase UserIDs on registration (PR #2662)
  * Cache failures when fetching URL previews (PR #2669)
  * Add patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch</changelog>
  <changelog author="okurz@suse.com" date="1515326400">- Update to version v0.26.0:
  * Bug fixes:
  * Fix database port script (PR #2673)
  * Fix internal server error on login with ldap_auth_provider (PR #2678) Thanks
    to @jkolo!
  * Fix error on sqlite 3.7 (PR #2697)
  * Fix OPTIONS on preview_url (PR #2707)
  * Fix error handling on dns lookup (PR #2711)
  * Fix wrong avatars when inviting multiple users when creating room (PR #2717)
  * Fix 500 when joining matrix-dev (PR #2719)
  * Features:
  * Add ability for ASes to publicise groups for their users (PR #2686)
  * Add all local users to the user_directory and optionally search them (PR
  * #2723)
  * Add support for custom login types for validating users (PR #2729)
  * Changes:
  * Update example Prometheus config to new format (PR #2648) Thanks to
    @krombel!
  * Rename redact_content option to include_content in Push API (PR #2650)
  * Declare support for r0.3.0 (PR #2677)
  * Improve upserts (PR #2684, #2688, #2689, #2713)
  * Improve documentation of workers (PR #2700)
  * Improve tracebacks on exceptions (PR #2705)
  * Allow guest access to group APIs for reading (PR #2715)
  * Support for posting content in federation_client script (PR #2716)
  * Delete devices and pushers on logouts etc (PR #2722)</changelog>
  <changelog author="okurz@suse.com" date="1522324800">- Update to version v0.27.2:
  * Bug fixes:
  * Fix bug which broke TCP replication between workers (PR #3015)
  * Fix broken ldap_config config option (PR #2683) Thanks to @seckrv!
  * Fix error message when user is not allowed to unban (PR #2761) Thanks to
    @turt2live!
  * Fix publicised groups GET API (singular) over federation (PR #2772)
  * Fix user directory when using user_directory_search_all_users config
    option (PR #2803, #2831)
  * Fix error on /publicRooms when no rooms exist (PR #2827)
  * Fix bug in quarantine_media (PR #2837)
  * Fix url_previews when no Content-Type is returned from URL (PR #2845)
  * Fix rare race in sync API when joining room (PR #2944)
  * Fix slow event search, switch back from GIST to GIN indexes (PR #2769,
    [#2848])
  * Fix bug where an invalid event caused server to stop functioning
    correctly, due to parsing and serializing bugs in ujson library.
  * Features:
  * Add ability for ASes to override message send time (PR #2754)
  * Add support for custom storage providers for media repository (PR #2867,
    [#2777], #2783, #2789, #2791, #2804, #2812, #2814, #2857, #2868, #2767)
  * Add purge API features, see docs/admin_api/purge_history_api.rst for
    full details (PR #2858, #2867, #2882, #2946, #2962, #2943)
  * Add support for whitelisting 3PIDs that users can register. (PR #2813)
  * Add /room/{id}/event/{id} API (PR #2766)
  * Add an admin API to get all the media in a room (PR #2818) Thanks to
    @turt2live!
  * Add federation_domain_whitelist option (PR #2820, #2821)
  * Changes:
  * Continue to factor out processing from main process and into worker
    processes. See updated docs/workers.rst (PR #2892 - #2904, #2913, #2920
  - #2926, #2947, #2847, #2854, #2872, #2873, #2874, #2928, #2929, #2934,
    [#2856], #2976 - #2984, #2987 - #2989, #2991 - #2993, #2995, #2784)
  * Ensure state cache is used when persisting events (PR #2864, #2871,
    [#2802], #2835, #2836, #2841, #2842, #2849)
  * Change the default config to bind on both IPv4 and IPv6 on all platforms
    (PR #2435) Thanks to @silkeh!
  * No longer require a specific version of saml2 (PR #2695) Thanks to @okurz!
  * Remove verbosity/log_file from generated config (PR #2755)
  * Add and improve metrics and logging (PR #2770, #2778, #2785, #2786,
    [#2787], #2793, #2794, #2795, #2809, #2810, #2833, #2834, #2844, #2965,
    [#2927], #2975, #2790, #2796, #2838)
  * When using synctl with workers, don't start the main synapse
    automatically (PR #2774)
  * Minor performance improvements (PR #2773, #2792)
  * Use a connection pool for non-federation outbound connections (PR #2817)
  * Make it possible to run unit tests against postgres (PR #2829)
  * Update pynacl dependency to 1.2.1 or higher (PR #2888) Thanks to @bachp!
  * Remove ability for AS users to call /events and /sync (PR #2948)
  * Use bcrypt.checkpw (PR #2949) Thanks to @krombel!
- Change spec-file to use service downloaded and recompressed file directly
- Remove patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch
  now included in upstream changes</changelog>
  <changelog author="okurz@suse.com" date="1523880000">- Update to version v0.27.4:
  * Bug fixes:
  * URL quote path segments over federation (#3082)
  * Add room_id to the response of rooms/{roomId}/join (PR #2986) Thanks to @jplatte!
  * Fix replication after switch to simplejson (PR #3015)
  * Fix replication after switch to simplejson (PR #3015)
  * 404 correctly on missing paths via NoResource (PR #3022)
  * Fix error when claiming e2e keys from offline servers (PR #3034)
  * fix tests/storage/test_user_directory.py (PR #3042)
  * use PUT instead of POST for federating groups/m.join_policy (PR #3070) Thanks to @krombel!
  * postgres port script: fix state_groups_pkey error (PR #3072)
  * Features:
  * Add joinability for groups (PR #3045)
  * Implement group join API (PR #3046)
  * Add counter metrics for calculating state delta (PR #3033)
  * R30 stats (PR #3041)
  * Measure time it takes to calculate state group ID (PR #3043)
  * Add basic performance statistics to phone home (PR #3044)
  * Add response size metrics (PR #3071)
  * phone home cache size configurations (PR #3063)
  * Changes:
  * Update canonicaljson dependency (#3095)
  * Add a blurb explaining the main synapse worker (PR #2886) Thanks to @turt2live!
  * Replace old style error catching with 'as' keyword (PR #3000) Thanks to @NotAFile!
  * Use .iter* to avoid copies in StateHandler (PR #3006)
  * Linearize calls to _generate_user_id (PR #3029)
  * Remove last usage of ujson (PR #3030)
  * Use simplejson throughout (PR #3048)
  * Use static JSONEncoders (PR #3049)
  * Remove uses of events.content (PR #3060)
  * Improve database cache performance (PR #3068)</changelog>
  <changelog author="okurz@suse.com" date="1524225600">- Introduce package self-test based on _multibuild</changelog>
  <changelog author="okurz@suse.com" date="1524830400">- Disable web-client for package self-test to get rid of unfulfilled dependency</changelog>
  <changelog author="okurz@suse.com" date="1525435200">- Update to version v0.28.1:
  * SECURITY UPDATE
    Clamp the allowed values of event depth received over federation to be
    [0, 2^63 - 1]. This mitigates an attack where malicious events
    injected with depth = 2^63 - 1 render rooms unusable. Depth is used to
    determine the cosmetic ordering of events within a room, and so the ordering
    of events in such a room will default to using stream_ordering rather than depth
    (topological_ordering).
    This is a temporary solution to mitigate abuse in the wild, whilst a long term solution
    is being implemented to improve how the depth parameter is used.
    Full details at
    https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI/edit#
    Pin Twisted to &lt;18.4 until we stop using the private _OpenSSLECCurve API.
  * Bug Fixes:
  * Return 401 for invalid access_token on logout (PR #2938) Thanks to @dklug!
  * Return a 404 rather than a 500 on rejoining empty rooms (PR #3080)
  * fix federation_domain_whitelist (PR #3099)
  * Avoid creating events with huge numbers of prev_events (PR #3113)
  * Reject events which have lots of prev_events (PR #3118)
  * Fix quarantine media admin API and search reindex (PR #3130)
  * Fix media admin APIs (PR #3134)
  * Features:
  * Add metrics for event processing lag (PR #3090)
  * Add metrics for ResponseCache (PR #3092)
  * Changes:
  * Synapse on PyPy (PR #2760) Thanks to @Valodim!
  * move handling of auto_join_rooms to RegisterHandler (PR #2996) Thanks to @krombel!
  * Improve handling of SRV records for federation connections (PR #3016) Thanks to @silkeh!
  * Document the behaviour of ResponseCache (PR #3059)
  * Preparation for py3 (PR #3061, #3073, #3074, #3075, #3103, #3104, #3106, #3107, #3109, #3110) Thanks to @NotAFile!
  * update prometheus dashboard to use new metric names (PR #3069) Thanks to @krombel!
  * use python3-compatible prints (PR #3074) Thanks to @NotAFile!
  * Send federation events concurrently (PR #3078)
  * Limit concurrent event sends for a room (PR #3079)
  * Improve R30 stat definition (PR #3086)
  * Send events to ASes concurrently (PR #3088)
  * Refactor ResponseCache usage (PR #3093)
  * Clarify that SRV may not point to a CNAME (PR #3100) Thanks to @silkeh!
  * Use str(e) instead of e.message (PR #3103) Thanks to @NotAFile!
  * Use six.itervalues in some places (PR #3106) Thanks to @NotAFile!
  * Refactor store.have_events (PR #3117)</changelog>
  <changelog author="okurz@suse.com" date="1528891200">- Fix security bug in the get_missing_events federation AP
  (CVE-2018-12291, boo#1096833)
- Add boo1096833_event_visibility_rules_not_applied_correctly.patch</changelog>
</package>
<package pkgid="cf2ac201d2b7aaf409ff10f797ff8cd130a09b6309c7dab3765cda5e6fa098ef" name="python2-nbxmpp" arch="noarch">
  <version epoch="0" ver="0.6.6" rel="lp150.2.3.1"/>
  <changelog author="nekolayer@yandex.ru" date="1365249600">- Initial package.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1366459200">- Fixed up to submit.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1376568000">- Heads up: Python2 / Python3 parallel installation.
  %fdupes will not work if files are installed via %doc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.2
  + Add some namespace
  + do TLS handshake without blocking
  + store all SSL errors instead of only last one
- Set correct Group : Devel/Languages/Python
- Use download Url as source
- Remove unwanted comments in specfile
- Package the two directories in /doc to avoid providing epydoc build
  configuration file</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1413028800">- Update to 0.5.1 (changes since 0.2):
  * Fix printing network errors in a non-utf-8 console
  * Support both python2 and python3
  * Fix storing server certificate when there is no error
  * Ability to configure TLS protocol version
  * Add support for SCRAM-SHA-1-PLUS
  * Security improvements
  * Improve security level
  * Ability to configure cipher list
  * Store only depth 0 SSL certificate</changelog>
  <changelog author="p.drouand@gmail.com" date="1413547200">- Correct Group is Development/Languages/Python
- Remove depreciated %py_requires
- Do not pass -O1 --skip-build options
- Call python instead of python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1420891200">- Update to 0.5.2:
  * Fix BOSH HTTP requests.
  * Fix handling of binary SASL data for mechanism GSSAPI.
  * Update MAM namespace.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437393600">- Update to 0.5.3:
  * Fix issue with pyopenssl 0.15.1.
  * Fix decoding issues.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1441281600">- Shouldn't be noarch in SLE 11</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.5.4:
  * Fix SCRAM authentication.
  * Fix BOSH connection with UTF-8 messages.
  * Fix smacks implementation.
  * Use uuid in stanza ids.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495022400">- Update to version 0.5.5:
  * Add some namespaces.
  * Some cleanup.
- Update for the multipython build.</changelog>
  <changelog author="vilene@posteo.net" date="1509883200">- Update to version 0.6.0:
  * Add new getOriginID/SetOriginID method for Messages
  * Add new getJid() method for Protocol
  * getTagAttr() accepts now a namespace argument
  * Add new `protocol` argument for getTag()
  * Add new XEP Namespaces
  * Support XEP-0198 Version 1.5.2</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Update to version 0.6.1
  * Add new getStanzaIDAttrs method
  * Fix BOSH connexion
  * stop using PyOpenSSL for random generator</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 0.6.4 (changes since 0.6.1):
  * Correctly load client certs.
  * Warn on any error in the certificate chain.
  * Fixed a traceback loop.
  * Add ALPN and SNI support for when using DirectTLS.
  * Fix SOCKS5 usage.
  * Bugfixes.</changelog>
  <changelog author="tbro@opensuse.org" date="1526040000">- Update to version 0.6.5 (30 April 2018)
  * Fix BOSH usage (don't set ALPN)
  * Better handling of certificate files
  * needed for newest gajim version 1.0.2, as it broke with 0.6.4</changelog>
  <changelog author="mvetter@suse.com" date="1526990400">- Update to 0.6.6:
  * Record all SSL errors instead of only the first
  * Pass arguments to plugin/plugout methods
  * Allow the Roster to be initalized without requesting it from the server</changelog>
  <changelog author="tchvatal@suse.com" date="1526990401">- Use setuptools not devel to reduce dependency requirements</changelog>
</package>
<package pkgid="d46f67beb74c407c80cb9917004a26c06d2a67329b026743d77ef0744c6ad784" name="python2-nbxmpp-doc" arch="noarch">
  <version epoch="0" ver="0.6.6" rel="lp150.2.3.1"/>
  <changelog author="nekolayer@yandex.ru" date="1365249600">- Initial package.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1366459200">- Fixed up to submit.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1376568000">- Heads up: Python2 / Python3 parallel installation.
  %fdupes will not work if files are installed via %doc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.2
  + Add some namespace
  + do TLS handshake without blocking
  + store all SSL errors instead of only last one
- Set correct Group : Devel/Languages/Python
- Use download Url as source
- Remove unwanted comments in specfile
- Package the two directories in /doc to avoid providing epydoc build
  configuration file</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1413028800">- Update to 0.5.1 (changes since 0.2):
  * Fix printing network errors in a non-utf-8 console
  * Support both python2 and python3
  * Fix storing server certificate when there is no error
  * Ability to configure TLS protocol version
  * Add support for SCRAM-SHA-1-PLUS
  * Security improvements
  * Improve security level
  * Ability to configure cipher list
  * Store only depth 0 SSL certificate</changelog>
  <changelog author="p.drouand@gmail.com" date="1413547200">- Correct Group is Development/Languages/Python
- Remove depreciated %py_requires
- Do not pass -O1 --skip-build options
- Call python instead of python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1420891200">- Update to 0.5.2:
  * Fix BOSH HTTP requests.
  * Fix handling of binary SASL data for mechanism GSSAPI.
  * Update MAM namespace.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437393600">- Update to 0.5.3:
  * Fix issue with pyopenssl 0.15.1.
  * Fix decoding issues.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1441281600">- Shouldn't be noarch in SLE 11</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.5.4:
  * Fix SCRAM authentication.
  * Fix BOSH connection with UTF-8 messages.
  * Fix smacks implementation.
  * Use uuid in stanza ids.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495022400">- Update to version 0.5.5:
  * Add some namespaces.
  * Some cleanup.
- Update for the multipython build.</changelog>
  <changelog author="vilene@posteo.net" date="1509883200">- Update to version 0.6.0:
  * Add new getOriginID/SetOriginID method for Messages
  * Add new getJid() method for Protocol
  * getTagAttr() accepts now a namespace argument
  * Add new `protocol` argument for getTag()
  * Add new XEP Namespaces
  * Support XEP-0198 Version 1.5.2</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Update to version 0.6.1
  * Add new getStanzaIDAttrs method
  * Fix BOSH connexion
  * stop using PyOpenSSL for random generator</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 0.6.4 (changes since 0.6.1):
  * Correctly load client certs.
  * Warn on any error in the certificate chain.
  * Fixed a traceback loop.
  * Add ALPN and SNI support for when using DirectTLS.
  * Fix SOCKS5 usage.
  * Bugfixes.</changelog>
  <changelog author="tbro@opensuse.org" date="1526040000">- Update to version 0.6.5 (30 April 2018)
  * Fix BOSH usage (don't set ALPN)
  * Better handling of certificate files
  * needed for newest gajim version 1.0.2, as it broke with 0.6.4</changelog>
  <changelog author="mvetter@suse.com" date="1526990400">- Update to 0.6.6:
  * Record all SSL errors instead of only the first
  * Pass arguments to plugin/plugout methods
  * Allow the Roster to be initalized without requesting it from the server</changelog>
  <changelog author="tchvatal@suse.com" date="1526990401">- Use setuptools not devel to reduce dependency requirements</changelog>
</package>
<package pkgid="e652a436bf4acfd62223f989b1f47798597138b9f073e63cd435bb368f68cc20" name="python2-opencv" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456660800">- Added _constraints file to avoid random failures on small workers
  (at least for builds on PMBS)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Added opencv_contrib_face-3.1.0.tar.bz2
  * This tarball is created to take only the face module from the
    contrib package. The Face module is required by libkface, which
    in its turn is required by digikam.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Add python 3 support</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458561600">- Test for python versions greater than or equal to the current
  version.</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Apply upstream patch opencv-gcc6-disable-pch.patch to disable
  PCH for GCC6.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465300800">- In case we build using GCC6 (or newer), add -mlra to CFLAGS to
  workaround gcc bug
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71294.</changelog>
  <changelog author="olaf@aepfle.de" date="1469102400">- Enable ffmpeg support unconditional</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1495972800">- Update to OpenCV 3.2.0
  - Results from 11 GSoC 2016 projects have been submitted to the library:
    + sinusoidal patterns for structured light and phase unwrapping module
    [Ambroise Moreau (Delia Passalacqua)]
    + DIS optical flow (excellent dense optical flow algorithm that is both
    significantly better and significantly faster than Farneback?s algorithm ?
    our baseline), and learning-based color constancy algorithms implementation
    [Alexander Bokov (Maksim Shabunin)]
    + CNN based tracking algorithm (GOTURN) [Tyan Vladimir (Antonella Cascitelli)]
    + PCAFlow and Global Patch Collider algorithms implementation
    [Vladislav Samsonov (Ethan Rublee)]
    + Multi-language OpenCV Tutorials in Python, C++ and Java
    [João Cartucho (Vincent Rabaud)]
    + New camera model and parallel processing for stitching pipeline
    [Jiri Horner (Bo Li)]
    + Optimizations and improvements of dnn module
    [Vitaliy Lyudvichenko (Anatoly Baksheev)]
    + Base64 and JSON support for file storage. Use names like
    ?myfilestorage.xml?base64? when writing file storage to store big chunks of
    numerical data in base64-encoded form.  [Iric Wu (Vadim Pisarevsky)]
    + tiny_dnn improvements and integration
    [Edgar Riba (Manuele Tamburrano, Stefano Fabri)]
    + Quantization and semantic saliency detection with tiny_dnn
    [Yida Wang (Manuele Tamburrano, Stefano Fabri)]
    + Word-spotting CNN based algorithm
    [Anguelos Nicolaou (Lluis Gomez)]
  - Contributions besides GSoC:
    + Greatly improved and accelerated dnn module in opencv_contrib:
  - Many new layers, including deconvolution, LSTM etc.
  - Support for semantic segmentation and SSD networks with samples.
  - TensorFlow importer + sample that runs Inception net by Google.
    + More image formats and camera backends supported
    + Interactive camera calibration app
    + Multiple algorithms implemented in opencv_contrib
    + Supported latest OSes, including Ubuntu 16.04 LTS and OSX 10.12
    + Lot?s of optimizations for IA and ARM archs using parallelism, vector
    instructions and new OpenCL kernels.
    + OpenCV now can use vendor-provided OpenVX and LAPACK/BLAS (including Intel MKL,
    Apple?s Accelerate, OpenBLAS and Atlas) for acceleration
- Refreshed opencv-build-compare.patch
- Dropped upstream opencv-gcc5.patch
- Replace opencv-gcc6-disable-pch.patch with upstream patch
  opencv-gcc6-fix-pch-support-PR8345.patch
- Enable TBB support (C++ threading library)
- Add dependency on openBLAS</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Use %cmake macros
- Remove the conditions that are not really needed
- Add tests conditional disabled by default
  * Many tests fail and there are missing testdata
- Switch to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1496664001">- Add conditional for the qt5/qt4 integration
  * This is used only for gui tools, library is not affected
- Add provides/obsoletes for the qt5 packages to allow migration
- Drop patch opencv-qt5-sobump.diff
  * Used only by the obsoleted qt5 variant</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500120000">- Add 0001-Do-not-include-glx.h-when-using-GLES.patch
  Fix build for 32bit ARM, including both GLES and desktop GL headers
  causes incompatible pointer type errors</changelog>
  <changelog author="kah0922@gmail.com" date="1507550400">- Update to 3.3
- Dropped obsolete patches
  * opencv-gcc6-fix-pch-support-PR8345.patch
  * opencv-gles.patch
- Updated opencv-build-compare.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Rename python subpackage to python2
- Do not explicitly require python-base for python subpackages</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 3.3.1:
  * Lots of various bugfixes
- Update source url</changelog>
  <changelog author="ecsos@opensuse.org" date="1509796800">- fix build error/unresolvable for Leap 42.2 and 42.3</changelog>
  <changelog author="ecsos@opensuse.org" date="1510142400">- change requires of python-numpy-devel to build in Leap and
  to not break factory in future</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update licensing information</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511611200">- Readd opencv-gles.patch, it is *not* included upstream; otherwise
  build breaks on all GLES Qt5 platforms (armv6l, armv7l, aarch64)
- add fix_processor_detection_for_32bit_on_64bit.patch
- Correctly set optimizations and dynamic dispatch on ARM, use
  OpenCV 3.3 syntax on x86.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditionals for python2 and python3 to allow us enabling
  only desired python variants when needed
- Do not depend on sphinx as py2 and py3 seem to collide there</changelog>
  <changelog author="qzheng@suse.com" date="1526904000">- Add opencv-imgproc-fix-bounds-check.patch:
  make backport from commit 4ca89db to fix imgproc(hdr)
  bounds check in HdrDecoder::checkSignature ( bsc#1074312,
  CVE-2017-18009 ).</changelog>
</package>
<package pkgid="e809566245724f07b3316f683fea79559910ca029c11904b32b562bc761ea917" name="python2-openvswitch" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="15c6cbbcd7a515e0908f47f9e853db6014ee3f36f31e3d4ef0c48adcb254dbdf" name="python2-openvswitch-test" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="560df7b1ee6ada1adac2869337cfad300e20a0623428772ad50fa434d158f2f6" name="python2-python-gnupg" arch="noarch">
  <version epoch="0" ver="0.4.3" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1504699200">- Initial version</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Ensure description neutrality.</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- uppate to 0.4.3:
  * Add --no-verbose to the gpg command line, in case verbose is
    specified is gpg.conf.
  * This is mitigation against CVE-2018-12020 boo#1096745
- includes changes from 0.4.2:
  * Subkey information is now collected and returned in a
    subkey_info dictionary keyed by the subkey's ID
  * Add expect_passphrase password for use on GnuPG &gt;= 2.1 when
    passing passphrase to gpg via pinentry
  * Provid a trust_keys method to allow setting the trust level
    for keys
  * When the gpg executable is not found, note the path used in the
    exception message
  * Make error messages nor informational</changelog>
</package>
<package pkgid="4f6a4d5072311814413122c58640e00495aad9e23cea1ef5664d582841f78495" name="python2-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.1" rel="lp150.9.3.1"/>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
</package>
<package pkgid="c9f29e3ca1d1cdbd719646baf0f4ed3ade56b98bf463cddf11b840a59e71aba2" name="python2-salt" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="e88ee6dda5f13401eacf574bf52bae7992b49465eff65db3426150f585060048" name="python2-salt" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="3312be57d67560972932a7d93d19feac17f5d2acfb92ae0ff6cc7af8a21a27fb" name="python2-salt" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="fc2553cfff2e49ec65f2122ab50f876c439a3463322f5ced41b96c0081fa3076" name="python2-virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="593b9b377c963a3e8a48b7e6b1e7898a5e295f34ad509abe0218fcd62d1514b0" name="python2-websocket-client" arch="noarch">
  <version epoch="0" ver="0.44.0" rel="lp150.2.3.1"/>
  <changelog author="rschweikert@suse.com" date="1402056000">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1402142400">- Add Group to sub package, fixes build for SLE 11</changelog>
  <changelog author="rschweikert@suse.com" date="1402920000">- Clean up spec file</changelog>
  <changelog author="rschweikert@suse.com" date="1403524800">- Simplify conditionals in spec file
- Fix patch webSoc_useSystemCert.patch, eliminate tab use spaces</changelog>
  <changelog author="toddrme2178@gmail.com" date="1412251200">- Update to version 0.18.0
  - allow override of match_hostname usage on ssl (#105)
- Update to version 0.17.0
  - can't set timeout on a standing websocket connection (#102)
  - fixed local variable 'error' referenced before assignment (#102, #98)
- Update to version 0.16.0
  - lock some method for multithread. (#92)
  - disable cert verification. (#89)
- Remove upstreamed webSoc_useSystemCert.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1423396800">- Update to version 0.23.0
  - Remove spurious print statement. (#135)
  - Fix not thread-safe of Websocket.close() (#120)
  - Try to get proxy info from environment if not explicitly provided (#124)
  - support proxy basic authenticaiton. (#125)
  - Fix NoneType exception at WebsocketApp.send (#126)
  - not use proxy for localhost (#132)
  - Check for socket before attempting to close (#115)
  - Enable turning off SSL verification in wsdump.py(#116)
  - Enable to set subprotocol(#118)
  - Better support for Autobahn test suite (http://autobahn.ws/testsuite) (#117)  - suppress close event message(#107)
  - detect socket connection state(#109)
  - support for code and reason in on_close callback(#111)
  - continuation frame handling seems suspicious(#113)</changelog>
  <changelog author="rjschwei@suse.com" date="1423569600">- Add fixTestTimeoutIssue.patch
  + fixes test case in factory</changelog>
  <changelog author="rjschwei@suse.com" date="1423656000">- Update fixTestTimeoutIssue.patch to handle different behavior between
  python 2.7.x versions</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431604800">- update to version 0.30.0:
  * fixed if client is behind proxy (#169)
  * support SNI for python 2.7.9+ and 3.2+ (#172)
  * update Host HTTP header by user. (#171)
  * fix typo for isEnabledFor (#173)
  * can set verify_mode to CERT_NONE when check_hostname is
    enabled.(#175)
  * make websockets iterable (#178)
- additional changes from version 0.29.0
  * fixed ssl socket bug
- additional changes from version 0.28.0
  * Fix erroneous argument shadowing(#168)
- additional changes from version 0.27.0
  * remove unittest2 requirements for python 2.6 (#156)
  * fixed subprotocol case during header validation (#158)
  * get response status and headers (#160)
  * fix out-of-memory due to fragmentation when recieving a very
    large frame(#163)
  * fix error if the payload data is nothing.(#166)
  * refactoring.
- additional changes from version 0.26.0
  * all WebSocketException provide message string (#152)
  * fixed tests fail when not connected to the network (#155)
  * Add command line options and handle closed socket to wsdump.py
    (#153)
- additional changes from version 0.25.0
  * fixed for Python 2.6(#151)
- additional changes from version 0.24.0
  * Supporting http-basic auth in WebSocketApp (#143)
  * fix failer of test.testInternalRecvStrict(#141)
  * skip utf8 validation by skip_utf8_validation argument (#137)
  * WebsocketProxyException will be raised if we got error about
    proxy.(#138)
- drop fixTestTimeoutIssue.patch: fixed upstream
- point the source URL to pypi
- add new dependency python-backports.ssl_match_hostname
- fix archive name when calling %setup</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1437739200">- fix dependencies for RHEL/CentOS 7: they provide their own
  python-backports-ssl_match_hostname</changelog>
  <changelog author="dmueller@suse.com" date="1445428800">- update to 0.32.0 (bsc#954486):
  - fix http proxy bug (#189)
  - Avoid deprecated BaseException.message (#180)
  - Add travis builds (#182)
  - fixed wsdump to work with piped input (#183)
  - fixed output of wsdump.py with python3 (#185)
  - add raw mode to wsdump.py (#186)</changelog>
  <changelog author="andrea@opensuse.org" date="1460462400">- added update-alternatives to allow the python3 version to be installed</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.37.0:
  - fixed fialer that `websocket.create_connection` does not accept `origin` as a parameter (#246 )
  - added support for using custom connection class (#235)
  - use Named logger (#238)
  - implement ping/pong timeout (#241)
  - Corrects the syntax highlight code (#243)
  - fixed failure to join thread before it is started (#242)
  - Prints timings in console (#217)
  - use inspect.getfullargspec with Python 3.x (#219)
  - Check that exception message is actually a string before trying for substring check (#224)
  - Use pre-initialized stream socket (#226)
  - fixed TypeError: cafile, capath and cadata cannot be all omitted (#227)
  - Change import style (#203)
  - fix attribute error on the older python. (#215)
  - fixed timeout+ssl error handling bug  on python 2.7.10 (#190)
  - add proxy support to wsdump.py (#194)
  - use wsaccel if available (#193)
  - add support for ssl cert chains to support client certs (#195)
  - fix string formatting in exception (#196)
  - fix typo in README.rst (#197)
  - introduce on_data callback to pass data type. (#198)
  - WebSocketBadStatusException for Handshake error (#199)
  - set close timeout (#192)
  - Map dict to headers list (#204)
  - support client certification (#207)
  - security improvement during handshake (#211)
  - improve logging of error from callback (#212)</changelog>
  <changelog author="tbechtold@suse.com" date="1499256000">- update to 0.44.0:
  - renames key in sslopt dict (#326)
  - Unkown kwarg 'ca_cert' when calling ssl wrap_socket() (#326)
  - Race condition in WebSocket ping/pong (#327)
  - Implement simple cookie jar(#292)
  - fix: when using pppoe redial will block.(#301)
  - Fix insecure_pythons list in setup.py(#304)
  - Support WEBSOCKET_CLIENT_CA_BUNDLE being directory(#307)
  - WebSocketPayloadException under high traffic and limited network connection(#306)
  - Not working --nocert parameter in wsdump.py(#315)
  - Avoid the app to block on close on certain systems (#320)
  - Fix warning is not defined. (#323)
  - move to repository to https://github.com/websocket-client/websocket-client.git
  - _send_ping warning fails due to missing reference in _logging.__all__ (#294)
  - Fix opcode -&gt; op_code (#286)
  - Shuffled around example code (#256)
  - _send_ping graceful error handling (#262)
  - Allow closing WebSocketApp with status/reason/timeout (#265)
  - Support universal wheels (#267)
  - _url: Added subnet IP address matching in no_proxy host detection (#270)
  - fixed Incorrect encoding in continued messages python3 (#261)
  - Pass headers for websocket handshake (#271)
  - setup.py: Import `logging` before calling it. (#272)
  - Implemented close code 1014 (#273)
  - Support CA bundle specified by environment variable (#279)
  - Response header values should not be converted to lower case (#264)
  - Exclude port 443 from host http header (#248)
  - Cleanup code (#249)
  - Modify a code block directive in README (#250)
  - fixed ping/pong timeouet (#253)
- convert to singlespec
- merge -test package</changelog>
  <changelog author="toddrme2178@gmail.com" date="1500638400">- Fix singlespec macro usage
- Fix source URL.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Grammatical/Typographic corrections to the description.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502798400">- Update license to LGPL 3
- Fix rpmlint issues</changelog>
  <changelog author="tbechtold@suse.com" date="1503921600">- Fix build for Leap 42.3</changelog>
  <changelog author="dmueller@suse.com" date="1504612800">- properly provide/obsolete python3-websocket-client-test</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1534420800">- use systems ca bundle file by default (boo#1076519)
  add use_system_cabundle.patch</changelog>
</package>
<package pkgid="b889da1fc08593b120d319a1610a256364dc1bdadfdf8964a8a13ad0953cd83b" name="python2-youtube-dl" arch="noarch">
  <version epoch="0" ver="2018.09.08" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 2017.08.06
  * amcnetworks: Make rating optional
  * yandexdisk: Add extractor
  * ard: Add support for liveS
  * pbs: Add support for new URL schema
  * vidme: Extract DASH and HLS formats</changelog>
  <changelog author="jengelh@inai.de" date="1502971200">- Update to new upstream release 2017.08.18
  * Sanitize byte string format URLs
  * Make sure format id is not empty</changelog>
  <changelog author="jengelh@inai.de" date="1506340800">- Update to new upstream release 2017.09.24
  * YoutubeDL: write raw subtitle files
  * laola1tv: Add support for tv.ittf.com
  * liveleak: Support multi-video pages
  * googledrive: Add support for subtitles
  * googledrive: Add support for source format
  * bbccouk: Add support for w-prefixed ids
  * charlierose: Add support for episodes
  * manyvids: Add support for preview videos
  * animeondemand: Add support for flash videos
  * downloader/fragment: Restart inconsistent incomplete fragment downloads
  * orf: Add new extractor for f4m stories
  * twitch: Add support for go.twitch.tv URLs
  * heise: Add support for YouTube embeds
  * lynda: Add support for educourse.ga
  * options: Accept lrc as a subtitle conversion target format
  * twitter: Add support for user_id-less URLs</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- update to 2017.11.15:
  * many update to various downloaders and extractors</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Update to new upstream release 2018.01.27
  * JWPlatform: Support iframes
  * openload: Add support for openload.link
  * utils: add hvc1 codec code to parse_codecs
  * downloader/fragment: Commit part file after each fragment In
    order to obtain correct resume_len on next iteration
  * mailru: Add support for embed URLs
  * downloader/fragment: Encode filename of fragment being
    removed
  * extractor/common: Introduce uploader, uploader_id and
    uploader_url meta fields for playlists
  * openload: Add support for oload.stream
  * extractor/common: Improve DASH formats extraction for jwplayer</changelog>
  <changelog author="jengelh@inai.de" date="1517832000">- Update to new upstream release 2018.02.04
  * Randomize HTTP chunk size
  * Fix HTTP/302 infinite loops by not reusing requests
  * brightcove: Pass embed page URL as referrer
  * youtube: enforce using chunked HTTP downloading for DASH formats</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Update to new upstream release 2018.02.26
  * veoh: Add support for embed URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523707200">- Update to new upstream release 2018.04.09
  * Do not save/restore console title while simulate
  * Relax JSON-LD context check
  * Add support for tube8 embeds
  * Add support for share-videos.se embeds
  * Extend URL regular expression
  * Bypass mature content check
  * Extract more metadata
  * Fix extraction
  * Fix extraction
  * Fix title extraction
  * Extend URL regular expression
  * Add support for oload.xyz
  * Relax stream URL regular expression
  * Fix extraction
  * Add support for season URLs
  * Add support for series</changelog>
  <changelog author="jengelh@inai.de" date="1523880000">- Update to new upstream release 2018.04.16
  * Add support for picarto.tv
  * Add support for mobile URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1524657600">- Update to new upstream release 2018.04.25
  * Fix match_str for boolean meta fields
  * Add support for pandoc 2 and disable smart extension (#16251)
  * Fix typo in media extension compatibility checker (#16215)
  * Recognize IPv6 stream URLs (#16136, #16137, #16205, #16246,
  [#16250])
  * Extract is_live according to status (#16259)
  * Relax URL regular expression (#16258)
  * Remove extractor (#16256)
  * Fix extraction (#16254)
  * Add ability to authenticate with cookies
  * Implement lazy playlist extraction (#10184)
  * Add support for TV channel live streams (#15279, #15809)
  * Fix video extraction (#15931)
  * Fix extraction (#15227)
  * Add support for nickjr.nl (#16230)
  * Fix metadata extraction
  * Add support for generic embeds (#16134, #16154)
  * Extract new azure URLs (#16223)
  * Fix extraction (#16217)
  * Improve embeds detection (#16201)
  * Fix extraction (#16119)
  * Skip DRM asset types (#16104)</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 2018.05.01
  * Restart download if .ytdl file is corrupt
  * Add support for old.reddit.com URLs</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Update to new upstream release 2018.05.18
  * youtube: fix extraction for embed restricted live streams
  * youtube: Make uploader extraction non fatal
  * youtube: Improve format filesize extraction
  * youtube: fix hd720 format position</changelog>
  <changelog author="jengelh@inai.de" date="1527595200">- Update to new upstream release 2018.05.26
  * imgur: Fix extraction
  * hidive: add support for authentication
  * nbc: add support for stream.nbcsports.com</changelog>
  <changelog author="jengelh@inai.de" date="1528286400">- Update to new upstream release 2018.06.04
  * tumblr: add support for authentication
  * soundcloud: detect format extension
  * rtmp: gracefully handle live streams interrupted by user
  * openload: add support for oload.win and oload.download
  * facebook: add support for tahoe player videos
  * youtube: extract track and artist</changelog>
  <changelog author="jengelh@inai.de" date="1532606400">- Update to new upstream releases 2018.07.21
  * pbs: Add another cove id pattern
  * dailymotion: add support for password protected videos
  * vidzi: Fix extraction
  * Prefer ffmpeg over avconv by default
  * dctptv: Restore extraction based on REST API
  * nrktv: Add support for new episode URL schema
  * nrktv: Add support for new season and serie URL schema</changelog>
  <changelog author="jengelh@inai.de" date="1532952000">- Update to new upstream release 2018.07.29
  * crunchyroll/playlist: restrict URL regular expression
  * ted: fix extraction for videos without nativeDownloads
  * vk: Fix extraction for inline-only videos</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 2018.08.04
  * viqeo: add extractor</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 2018.08.22
  * raywenderlich: Adapt to site redesign
  * imdb: Fix extension extraction</changelog>
  <changelog author="jengelh@inai.de" date="1535457600">- Update to new upstream release 2018.08.28
  * nova:embed: Add extractor (closes #17282)
  * Add support for vidzi.nu, vidto.se
  * youtube:playlist: Add support for music album playlists
    (OLAK5uy_ prefix)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Update to new upstream release 2018.09.08
  * ard: Add support for Beta ARD Mediathek
  * crunchyroll: parse vilos media data</changelog>
</package>
<package pkgid="8ae8afe773351b68607746bcbefc1e70b1e0e0ab67cb14d4c973bcd0c1717395" name="python3-Django" arch="noarch">
  <version epoch="0" ver="2.0.8" rel="lp150.2.3.1"/>
  <changelog author="aplanas@suse.com" date="1462276800">- Update to 1.9.6
  Bugfixes
  * Added support for relative path redirects to the test client and
    to SimpleTestCase.assertRedirects() because Django 1.9 no longer
    converts redirects to absolute URIs (#26428).
  * Fixed TimeField microseconds round-tripping on MySQL and SQLite
    (#26498).
  * Prevented makemigrations from generating infinite migrations for a
    model field that references a functools.partial (#26475).
  * Fixed a regression where SessionBase.pop() returned None rather
    than raising a KeyError for nonexistent values (#26520).
  * Fixed a regression causing the cached template loader to crash
    when using template names starting with a dash (#26536).
  * Restored conversion of an empty string to null when saving values
    of GenericIPAddressField on SQLite and MySQL (#26557).
  * Fixed a makemessages regression where temporary .py extensions
    were leaked in source file paths (#26341).</changelog>
  <changelog author="aplanas@suse.com" date="1470744000">- Update to 1.9.9
  Bugfixes
  * Fixed invalid HTML in template postmortem on the debug page
    (#26938).
  * Fixed some GIS database function crashes on MySQL 5.7 (#26657).
- Update to 1.9.8
  Fix XSS in admin?s add/change related popup (bsc#988420)
  Unsafe usage of JavaScript?s Element.innerHTML could result in XSS
  in the admin?s add/change related popup. Element.textContent is now
  used to prevent execution of the data.
  The debug view also used innerHTML. Although a security issue wasn?t
  identified there, out of an abundance of caution it?s also updated
  to use textContent.
  Bugfixes
  * Fixed missing varchar/text_pattern_ops index on CharField and
    TextField respectively when using AddField on PostgreSQL (#26889).
  * Fixed makemessages crash on Python 2 with non-ASCII file names
    (#26897).
- Update to 1.9.7
  Bugfixes
  * Removed the need for the request context processor on the admin
    login page to fix a regression in 1.9 (#26558).
  * Fixed translation of password validators? help_text in forms
    (#26544).
  * Fixed a regression causing the cached template loader to crash
    when using lazy template names (#26603).
  * Fixed on_commit callbacks execution order when callbacks make
    transactions (#26627).
  * Fixed HStoreField to raise a ValidationError instead of crashing
    on non-dictionary JSON input (#26672).
  * Fixed dbshell crash on PostgreSQL with an empty database name
    (#26698).
  * Fixed a regression in queries on a OneToOneField that has to_field
    and primary_key=True (#26667).</changelog>
  <changelog author="sbahling@suse.com" date="1474718400">- Change Requires: python-Pillow to python-imaging for compatibility
  with SLE-12 which provides PIL instead of Pillow.</changelog>
  <changelog author="appleonkel@opensuse.org" date="1480680000">- Update to 1.9.12
  Bugfixes
  * Quoted the Oracle test user?s password in queries to fix the ?ORA-00922: missing
    or invalid option? error when the password starts with a number or
    special character (#27420)
  * DNS rebinding vulnerability when DEBUG=True
  * CSRF protection bypass on a site with Google Analytics</changelog>
  <changelog author="michal@cihar.com" date="1485864000">- Update to 1.10.5
  * See https://docs.djangoproject.com/en/1.10/releases/1.10/
  * Full text search for PostgreSQL
  * New-style middleware
  * Official support for Unicode usernames</changelog>
  <changelog author="appleonkel@opensuse.org" date="1488369600">- Update to 1.10.6
  Bugfixes
  * Fixed ClearableFileInput?s ?Clear? checkbox on model form fields where the
    model field has a default
  * Fixed RequestDataTooBig and TooManyFieldsSent exceptions crashing rather than
    generating a bad request response
  * Fixed a crash on Oracle and PostgreSQL when subtracting DurationField or
    IntegerField from DateField
  * Fixed query expression date subtraction accuracy on PostgreSQL for differences
    large an a month
  * Fixed a GDALException raised by GDALClose on GDAL &gt;= 2.0</changelog>
  <changelog author="appleonkel@opensuse.org" date="1491307200">- Update to 1.10.7
  Bugfixes
  * Made admin?s RelatedFieldWidgetWrapper use the wrapped widget?s
    value_omitted_from_data() method (#27905)
  * Fixed model form default fallback for SelectMultiple (#27993)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1493899200">- Implement single-spec version.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494072000">- Don't provide python2-django or python2-South, singlespec
  packages should use correct name.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1494244800">- django-admin.py should be the master, not django-admin.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1499688000">- Fix wrong-script-interpreter rpmlint error.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502280000">- Fix building on older Python versions.</changelog>
  <changelog author="tbechtold@suse.com" date="1502366400">- update to version 1.11.4:
  * Fixed #27939 -- Updated OpenLayersWidget.map_srid for OpenLayers 3.
  * Fixed #27956 -- Fixed display of errors in an {% extends %} child.
  * Updated various links in docs to avoid redirects
  * Fixed typo in docs/topics/auth/default.txt.
  * Double quoted HTML attributes in widget docs
  * Fixed #28303 -- Prevented localization of attribute values in the DTL attrs.html widget template.
  * Added stub release notes for 1.11.3.
  * Documented OSMWidget.default_lat/lon.
  * Fixed #28101 -- Fixed a regression with nested __in subquery lookups and to_field.
  * Bumped version for 1.11.4 release.
  * Bumped version for 1.11.3 release.
  * Updated translations from Transifex
  * Fixed #28039 -- Fixed crash in BaseGeometryWidget.subwidgets().
  * Fixed #28242 -- Moved ImageField file extension validation to the form field.
  * Made docs/topics/migrations.txt use single quotes consistently.
  * Fixed #28355 -- Fixed widget rendering of non-ASCII date/time formats on Python 2.
  * Updated name of topics/db/queries link on index.
  * Fixed #28025 -- Fixed typo in docs/ref/models/querysets.txt.
  * Fixed #28043 -- Prevented AddIndex and RemoveIndex from mutating model state.
  * Fixed #28207 -- Fixed contrib.auth.authenticate() if multiple auth backends don't accept a request.
  * Fixed #28361 -- Fixed possible time-related failure in was_published_recently() tutorial test.
  * Fixed #28265 -- Prevented renderer warning on Widget.render() with **kwargs.
  * Fixed typo in docs/topics/testing/advanced.txt.
  * Fixed #28125 -- Clarified 1.11 release note about Template.render() prohibiting non-dict context.
  * Refs #18974 -- Added stacklevel for permalink() deprecation.
  * Fixed #28350 -- Fixed UnboundLocalError crash in RenameField with nonexistent field.
  * Fixed #28051 -- Made migrations respect Index's name argument.
  * Fixed #28420 -- Doc'd 'is' comparison restriction for User.is_authenticated/anonymous.
  * Added release date for 1.11.4.
  * Refs #28174 -- Fixed autoreload test crash on Python 2/non-ASCII path.
  * Fixed #28389 -- Fixed pickling of LazyObject on Python 2 when wrapped object doesn't have __reduce__().
  * Fixed #28148 -- Doc'd ImageField name validation concerns with the test client.
  * Added stub release notes for 1.11.2.
  * Fixed #27890 -- Fixed FileNotFoundError cleanup exception in runtests.py on Python 3.6+.
  * Fixed #28138 -- Used output type handler instead of numbersAsStrings on Oracle cursor.
  * Fixed widgets module path in docs/ref/contrib/gis/forms-api.txt.
  * Fixed #27947 -- Doc'd that model Field.error_messages often don't propagate to forms.
  * Fixed #28067 -- Clarified __str__() return type when using python_2_unicode_compatible().
  * Fixed docstring typo in django/contrib/admin/actions.py.
  * Fixed #28102 -- Doc'd how to compute path to built-in widget template directories.
  * Fixed #28352 -- Corrected QuerySet.values_list() return type in docs examples.
  * Fixed #28181 -- Added detection for GDAL 2.1 and 2.0.
  * Refs #23853 -- Updated sql.query.Query.join() docstring.
  * Added a test for Model._meta._property_names.
  * Refs #27919 -- Changed Widget.get_context() attrs kwarg to an arg.
  * Fixed #28415 -- Clarified what characters ASCII/UnicodeUsernameValidator accept.
  * Fixed #28074 -- Doc'd template-based widget rendering changes for contrib.gis.
  * Fixed #28278 -- Fixed invalid HTML for a required AdminFileWidget.
  * Added content_type filtering in Permission querying example.
  * Corrected FileExtensionValidator doc regarding the value being validated.
  * Fixed #27960 -- Set errcheck=False for GDALAllRegister to prevent crash.
  * Fixed #28097 -- Fixed layout of ReadOnlyPasswordHashWidget.
  * Fixed #27969 -- Fixed models.Field.formfield() setting 'disabled' for fields with choices.
  * Post-release version bump.
  * Fixed #28298 -- Prevented a primary key alteration from adding a foreign key constraint if db_constraint=False.
  * Refs #28192 -- Fixed documentation of ChoiceField choices requirement
  * Fixed #27966 -- Bumped required psycopg2 version to 2.5.4.
  * Linked GIS QuerySet API docs to corresponding PostGIS docs.
  * Fixed #27974 -- Kept resolved templates constant during one rendering cycle.
  * Refs #28100 -- Fixed URL in el, es_MX, and pt auth translations
  * Fixed typo in docs/ref/request-response.txt.
  * Fixed #27963 -- Removed unneeded docstring example in contributing docs.
  * Added stub release notes for security releases.
  * Fixed #28349 -- Doc'd how to upgrade Django from LTS to LTS.
  * Fixed typo in docs/ref/forms/fields.txt.
  * Fixed CVE-2017-7234 -- Fixed open redirect vulnerability in views.static.serve().
  * Fixed #28170 -- Fixed file_move_safe() crash when moving files to a CIFS mount.
  * Fixed broken links to Oracle docs.
  * Fixed #27554 -- Fixed prefetch_related() crash when fetching relations in nested Prefetches.
  * Added links and cosmetic edits to docs/ref/request-response.txt.
  * Added stub release notes for 1.11.1.
  * Fixed #28079 -- Restored "No POST data" (rather than an empty table) in HTML debug page.
  * Removed incorrect "required" attribute in docs/ref/forms/fields.txt.
  * Fixed #28176 -- Restored the uncasted option value in ChoiceWidget template context.
  * Refs #24423 -- Readded inadvertently deleted i18n tests.
  * Fixed #27965 -- Fixed precision comparison in a geoforms test (refs #27939).
  * Corrected post-release version bump.
  * Made runtests.py run gis_tests only when using a GIS database backend.
  * Fixed #28230 -- Allowed DjangoJsonEncoder to serialize CallableBool.
  * Fixed broken link to QUnit docs.
  * Removed MySQL (unsupported) from Perimeter docs.
  * Fixed #28266 -- Fixed typo in docs/ref/models/instances.txt.
  * Fixed #28139 -- Added another level of headings in the topics index.
  * Fixed #28003 -- Doc'd what an auto-created OneToOneField parent_link looks like.
  * Fixed #28160 -- Prevented hiding GDAL exceptions when it's not installed.
  * Updated man page for Django 1.11.
  * Fixed #27988 -- Fixed typo in docs/ref/django-admin.txt.
  * Fixed #28199 -- Fixed Subquery generating unnecessary/invalid CAST.
  * Fixed #28122 -- Fixed crash when overriding views.static.directory_index()'s template.
  * Fixed AppRegistryNotReady error when running gis_tests in isolation on PostGIS.
  * Fixed #28435 -- Removed inaccurate warning about SECURE_HSTS_PRELOAD.
  * Fixed #28040 -- Updated SplitArrayWidget to use template-based widget rendering.
  * Fixed #28269 -- Fixed Model.__init__() crash on models with a field that has an instance only descriptor.
  * Tested EmailMessage(attachments=[MIMEText])
  * Clarified return value of NumGeometries GIS function.
  * Refs #27935 -- Fixed BrinIndex.max_name_length if a project's default database isn't PostgreSQL.
  * Fixed #28058 -- Restored empty BoundFields evaluating to True.
  * Replaced "not A== B" with "A != B" in docs/howto/writing-migrations.txt.
  * Added CVE-2017-7233,4 to the security release archive.
  * Fixed #28204 -- Fixed MultipleObjectMixin.paginate_queryset() crash on Python 2 if InvalidPage message contains non-ASCII.
  * Fixed #27935 -- Fixed crash with BrinIndex name &gt; 30 characters.
  * Fixed #28293 -- Fixed union(), intersection(), and difference() when combining with an EmptyQuerySet.
  * Fixed #28222 -- Allowed settable properties in QuerySet.update_or_create()/get_or_create() defaults.
  * Refs #27556, #27488 -- Updated support backends docs for isvalid lookup.
  * Fixed nondeterministic ordering test failure in model_forms.
  * Fixed #28345 -- Applied limit_choices_to during ModelForm.__init__().
  * Fixed #27981 -- Doc'd date/time filter l10n changes in refs #25758.
  * Made a few cosmetic updates to "Migrations that add unique fields".
  * Bumped version for 1.11 release.
  * Fixed #28004 -- Doc'd how to create migrations for an app without a migrations directory.
  * Fixed #28202 -- Fixed FieldListFilter.get_queryset() crash on invalid input.
  * Fixed #27949 -- Doc'd how OpenLayers 3 widgets work.
  * Pass type to sql_alter_column_* where it was missing.
  * Fixed #27866 -- Made ChoiceWidget.format_value() return a list
  * Fixed #28308 -- Doc'd removal of Select.render_option() (refs #15667).
  * Fixed #28178 -- Changed contrib.gis to raise ImproperlyConfigured if gdal isn't installed.
  * Fixed #28284 -- Prevented Paginator's unordered object list warning from evaluating a QuerySet.
  * Fixed #28209 -- Made date-based generic views return a 404 rather than crash when given an out of range date.
  * Fixed #28161 -- Fixed return type of ArrayField(CITextField()).
  * Corrected docs regarding MySQL support of Length GIS function.
  * Fixed #28175 -- Fixed __in lookups on a foreign key when using the foreign key's parent model as the lookup value.
  * Refs #18247 -- Fixed SQLite QuerySet filtering on decimal result of Least and Greatest.
  * Refs #28207 -- Fixed contrib.auth.authenticate() if 'backend' is in the credentials.
  * Fixed #27644 -- Doc'd FileSystemStorage.get_created_time().
  * Added test for intersection() when combining with a queryset raising EmptyResultSet.
  * Fixed #28197 -- Fixed introspection of index field ordering on PostgreSQL.
  * Removed extra characters in docs header underlines.
  * Fixed GEOSGeometry reference in GIS tutorial.
  * Refs #28066 -- Fixed Python 2 failures in sessions_tests.
  * Removed obsolete Widget.format_output() in tests.
  * Fixed #28059 -- Restored class attribute in &lt;ul&gt; of widgets that use multiple_input.html.
  * Fixed typo in docs/ref/contrib/postgres/fields.txt.
  * Refs #27025 -- Fixed "invalid escape sequence" warning in auth_tests on Python 3.6.
  * Fixed #28031 -- Removed notes about old uWSGI/sentry versions (refs #20537).
  * Removed unexpected initial attribute in data migration examples.
  * Renamed "Mac OS X" to "macOS" in docs.
  * Sorted imports per isort 4.2.9.
  * Refs #28138 -- Added release notes for d52577b62b3138674807ac74251fab7faed48331.
  * Back to the future.
  * Fixed #27993 -- Fixed model form default fallback for SelectMultiple.
  * Refs #27866 -- Adapted backport for Python 2 compatibility
  * Removed unused links in docs/internals/contributing/triaging-tickets.txt.
  * Clarified QuerySet.iterator()'s docs on server-side cursors.
  * Fixed #28096 -- Allowed prefetch calls with ModelIterable subclasses
  * Fixed #28414 -- Fixed ClearableFileInput rendering as a subwidget of MultiWidget.
  * Corrected REPL example in forms docs for Python 3.
  * Refs #28181 -- Corrected detection of GDAL 2.1 on Windows.
  * Fixed #28075 -- Prevented ChoiceWidget from localizing option values.
  * Fixed #28282 -- Fixed class-based indexes name for models that only inherit Model.
  * Fixed #28038 -- Restored casting to text of builtin lookups on PostgreSQL.
  * Fixed #28418 -- Fixed queryset crash when using a GenericRelation to a proxy model.
  * Fixed #28062 -- Added a setting to disable server-side cursors on PostgreSQL.
  * Fixed #28105 -- Fixed crash in BaseGeometryWidget.get_context() when overriding existing attrs.
  * Refs #28160 -- Skipped a GeoManager test if not using a GIS database backend.
  * Fixed #28157 -- Fixed choice ordering in form fields with grouped and non-grouped options.
  * Fixed #28095 -- Doc'd Widget.build_attrs() signature change in Django 1.11.
  * Fixed a forms test after updated translations.
  * Fixed 403 link in docs/ref/contrib/gis/install/spatialite.txt.
  * Simplified schema.tests with assertForeignKeyExists()/assertForeignKeyNotExists().
  * Fixed #28336 -- Fixed typo in docs/ref/settings.txt.
  * Fixed #28378 -- Fixed union() and difference() when combining with a queryset raising EmptyResultSet.
  * Refs #28052 -- Cleaned up some indexes in schema tests.
  * Fixed #28047 -- Fixed QuerySet.filter() crash when it uses the name of a OneToOneField pk.
  * Added release date for 1.11.1.
  * Fixed #28327 -- Removed contradictory description of mod_wsgi docs.
  * Clarified "newly-introduced features" in the supported versions policy.
  * Fixed docs build with Sphinx 1.6.
  * Fixed #28239 -- Removed docs for a removed arg of template.Context.
  * Bumped version for 1.11.2 release.
  * Refs #28066 -- Fixed nondeterministic ordering test failure in sessions_tests.
  * Updated postgis.net and gaia-gis.it links to https.
  * Fixed typos in docs/topic/db/search.txt.
  * Fixed #28174 -- Fixed crash in runserver's autoreload with Python 2 on Windows with non-str environment variables.
  * Fixed typos in docs/howto/static-files/index.txt.
  * Fixed #28294 -- Doc'd request/args/kwargs attributes of class-based views.
  * Fixed #27967 -- Fixed KeyError in admin's inline form with inherited non-editable pk.
  * Fixed db backend discovery in admin_scripts tests.
  * Fixed outdated TIME_FORMAT in docs/ref/templates/builtins.txt.
  * Fixed #26028 -- Added overriding templates howto.
  * Updated was_published_recently() tutorial test to check boundary condition.
  * Fix a typo in django/db/transaction.py
  * Fixed #28109 -- Corrected the stack level of unordered queryset pagination warnings.
  * Fixed #28142 -- Fixed is_safe_url() crash on invalid IPv6 URLs.
  * Refs #22397 -- Removed model in test cleanup
  * Fixed #28052 -- Prevented dropping Meta.indexes when changing db_index to False.
  * Fixed #18485 -- Doc'd behavior of PostgreSQL when manually setting AutoField.
  * Updated core translations from Transifex
  * Fixed #28166 -- Fixed Model._state.db on MTI parent model after saving child model.
  * Added missing import in docs/topics/db/queries.txt.
  * Refs #27919 -- Passed ChoiceWidget.create_option() kwargs as expected.
  * Fixed #28229 -- Fixed the value of LoginView's "next" template variable.
  * Fixed #27975 -- Fixed crash if ModelChoiceField's queryset=None.
  * Added release date for 1.11.2.
  * Fixed #27912, CVE-2017-7233 -- Fixed is_safe_url() with numeric URLs.
  * Fixed #28159 -- Fixed BaseInlineFormSet._construct_form() crash when using save_as_new.
  * Removed an obsolete temporal reference in docs/faq/general.txt.
  * Fixed #28042 -- Fixed crash when using a two-tuple in EmailMessage's attachments arg.
  * Fixed #27945 -- Clarified that RegexValidator searches with the regex.
  * Linked GIS functions docs to corresponding PostGIS docs.
  * Refs #17453 -- Fixed broken link to #django IRC logs.
  * Fixed gis_tests.geoapp test with incorrect geodetic coordinates.
  * Fixed #28066 -- Prevented SessionBase.cycle_key() from discarding data.
  * Fixed #27730 -- Doc'd that template vars created outside a block can't be used in it.
  * Fixed #28069 -- Moved setup_test_environment() warning in tutorial 5.
  * Fixed #28130 -- Fixed formset min_num validation with initial, unchanged forms.
  * Fixed #28091 -- Re-raised original exception when closing cursor cleanup fails
  * Clarified backend support of Area GIS function.
  * Fixed #28387 -- Fixed has_changed() for disabled form fields that subclass it.
  * Fixed #27915 -- Allowed Meta.indexes to be defined in abstract models.
  * Fixed #26755 -- Fixed test_middleware_classes_headers if Django source isn't writable.
  * Fixed #28188 -- Fixed crash when pickling model fields.
  * Fixed typo in docs/ref/models/querysets.txt.
  * Pointed Dive into Python links to python3 site
  * Refs #25240 -- Added ExtractWeek examples.
  * Added some shell output in tutorial 2.
  * Removed inappropriate highlighting in committing-code.txt.
  * Fixed #28399 -- Fixed QuerySet.count() for union(), difference(), and intersection() queries.
  * Fixed #28212 -- Allowed customizing the port that LiveServerTestCase uses.
  * Fixed flake8 warning on Python 2.
  * Clarified meaning of "Optional" in auth.models.User field docs.
  * Clarified HStoreField model/form difference in 1.11 release notes.
  * Removed self from method signatures in docs.
  * Added stub release notes for 1.11.4.
  * Updated tests after French translation update
  * Fixed #27603 -- Fixed AsKML when queryset is evaluated more than once.
  * Fixed #28262 -- Fixed incorrect DisallowedModelAdminLookup when a nested reverse relation is in list_filter.
  * Fixed #27434 -- Doc'd how to raise a model validation error for a field not in a model form.
  * Refs #21415 -- Fixed contrib.humanize translations for es_AR
  * Fixed #27655 -- Added some guidelines to the coding style docs.
  * Updated contrib translations from Transifex
  * Removed nonexistent methods from File's docs.
  * Doc'd the need to remove default ordering on Subquery aggregates.
  * Fixed broken link to mysqlclient docs.
  * Fixed #28210 -- Fixed Model._state.adding on MTI parent model after saving child model.
  * Removed usage of deprecated sphinx.util.compat.Directive.
  * Refs #28100 -- Added 1.11.1 release note for e6bfd3d751278d7cfd09af1120c4bbce509c05da.
  * Fixed #28190 -- Clarifed how include/extends treat template names.
  * Refs #26294 -- Fixed typo in docs/ref/django-admin.txt.
  * Refs #28091 -- Fixed typo and rephrased 1.11.1 release note.
  * Fixed typo in docs/ref/class-based-views/mixins-single-object.txt.
  * Bumped version for 1.11.1 release.
  * Added release date for 1.11.3.
  * Bumped version for 1.11 release candidate 1.
  * Simplified tutorial's test names and docstrings.
  * Fixed typo in django/db/backends/base/schema.py comment.
  * Fixed #28233 -- Used a simpler example in the aggregation "cheat sheet" docs.
- Require python-pytz and Recommend python-bcrypt</changelog>
  <changelog author="toddrme2178@gmail.com" date="1505908800">- update to version 1.11.5
  * CVE-2017-12794: Possible XSS in traceback section of technical 500 debug page
  * Fixed GEOS version parsing if the version has a commit hash at the end (new
    in GEOS 3.6.2) (:ticket:`28441`).
  * Added compatibility for ``cx_Oracle`` 6 (:ticket:`28498`).
  * Fixed select widget rendering when option values are tuples (:ticket:`28502`).
  * Django 1.11 inadvertently changed the sequence and trigger naming scheme on
    Oracle. This causes errors on INSERTs for some tables if
    ``'use_returning_into': False`` is in the ``OPTIONS`` part of ``DATABASES``.
    The pre-1.11 naming scheme is now restored. Unfortunately, it necessarily
    requires an update to Oracle tables created with Django 1.11.[1-4]. Use the
    upgrade script in :ticket:`28451` comment 8 to update sequence and trigger
    names to use the pre-1.11 naming scheme.
  * Added POST request support to ``LogoutView``, for equivalence with the
    function-based ``logout()`` view (:ticket:`28513`).
  * Omitted ``pages_per_range`` from ``BrinIndex.deconstruct()`` if it's ``None``
    (:ticket:`25809`).
  * Fixed a regression where ``SelectDateWidget`` localized the years in the
    select box (:ticket:`28530`).
  * Fixed a regression in 1.11.4 where ``runserver`` crashed with non-Unicode
    system encodings on Python 2 + Windows (:ticket:`28487`).
  * Fixed a regression in Django 1.10 where changes to a ``ManyToManyField``
    weren't logged in the admin change history (:ticket:`27998`) and prevented
    ``ManyToManyField`` initial data in model forms from being affected by
    subsequent model changes (:ticket:`28543`).
  * Fixed non-deterministic results or an ``AssertionError`` crash in some
    queries with multiple joins (:ticket:`26522`).
  * Fixed a regression in ``contrib.auth``'s ``login()`` and ``logout()`` views
    where they ignored positional arguments (:ticket:`28550`).</changelog>
  <changelog author="tbechtold@suse.com" date="1513080000">- update to 1.11.8:
  * Fixed #28488 -- Reallowed error handlers to access CSRF tokens.
  * Fixed #28856 -- Fixed a regression in caching of a GenericForeignKey
    pointing to a MTI model.
  * Fixed #28597 -- Fixed crash with the name of a model's autogenerated primary
    key in an Index's fields.
  * Added stub release notes for 1.11.7.
  * Fixed #28305 -- Fixed "Cannot change column 'x': used in a foreign key constraint"
    crash on MySQL with a sequence of AlterField or RenameField operations.
  * Fixed #28689 -- Fixed unquoted table names in Subquery SQL when using OuterRef.
  * Added assertion helpers for PostgreSQL's server-side cursor tests.
  * Fixed #28729 -- Replaced a numbered list with unordered list in TemplatesSetting docs.
  * Fixed #28786 -- Doc'd middleware ordering considerations due to
    CommonMiddleware setting Content-Length.
  * Added release date for 1.11.8.
  * Fixed #28702 -- Made query lookups for CIText fields use citext.
  * Added 2017-12794 to the security release archive.
  * Fixed typo in docs/topics/cache.txt.
  * Bumped version for 1.11.6 release.
  * Added release date for 1.11.6.
  * Fixed #28648 -- Corrected typo in docs/topics/db/queries.txt.
  * Bumped version for 1.11.7 release.
  * Added stub release notes for 1.11.8.
  * Fixed #28848 -- Fixed SQLite/MySQL crash when ordering by a filtered
    subquery that uses nulls_first/nulls_last.
  * Fixed typo in docs/topics/db/aggregation.txt.
  * Fixed #28802 -- Fixed typo in docs/topics/auth/default.txt.
  * Fixed typo in docs/topics/forms/media.txt.
  * Bumped version for 1.11.8 release.
  * Fixed typo in docs/ref/models/querysets.txt.
  * Fixed test failures due to ordering differences on PostgreSQL 10.
  * Fixed #28710 -- Fixed the Basque DATE_FORMAT string
  * Added stub release notes for 1.11.6.
  * Fixed #28747 -- Fixed typos in django/conf/global_settings.py comments.
  * Fixed #28817 -- Made QuerySet.iterator() use server-side cursors after
    values() and values_list().
  * Post-release version bump.
  * Fixed #28792 -- Fixed index name truncation of namespaced tables.
  * Fixed #28781 -- Added QuerySet.values()/values_list() support for union(),
    difference(), and intersection().
  * Fixed #28722 -- Made QuerySet.reverse() affect nulls_first/nulls_last.
  * Refs #28710 -- Simplified l10n format test
  * Initialized CsrfViewMiddleware once in csrf_tests.
  * Added release date for 1.11.7.
  * Linked to prefetch_related_objects func in DB optimization docs.
  * Fixed #28645 -- Reallowed AuthenticationForm to raise the inactive user
    error when using ModelBackend.
  * Fixed #28653 -- Added missing ForeignKey.on_delete argument in docs.
  * Fixed #28561 -- Removed inaccurate docs about QuerySet.order_by() and joins.
  * Fixed #28555 -- Made CharField convert whitespace-only values to the
    empty_value when strip is enabled.
  * Fixed #28601 -- Prevented cache.get_or_set() from caching None if default
    is a callable that returns None.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1513080001">- update to 2.0
  * drop python 2 support
  * Simplified URL routing syntax
  * Mobile-friendly contrib.admin
  * Window expressions
  * Removed support for bytestrings in some places
  * Dropped support for Oracle 11.2
- Please read Release Notes - https://docs.djangoproject.com/en/2.0/releases/2.0/</changelog>
  <changelog author="tbechtold@suse.com" date="1518004800">- update to 2.0.2 (bsc#1077714, CVE-2018-6188):
  * Fixed #28883 -- Doc'd that the uuid URL path converter matches lowercase only letters.
  * Fixed a GeoIP2 test failure with the latest GeoIP2 database.
  * Added stub release notes for 2.0.1.
  * Bumped version for 2.0.2 release.
  * Fixed location of spatialite_source label.
  * Fixed #28958 -- Fixed admin changelist crash when using a query expression in the page's ordering.
  * Fixed #28231 -- Doc'd that QuerySet.bulk_create() casts objs to a list.
  * Fixed #29032 -- Fixed an example of using expressions in QuerySet.values().
  * Disambiguated "settings" in SpatiaLite note.
  * Fixed typo in docs/topics/testing/advanced.txt.
  * Post-release version bump.
  * Refs #25604 -- Removed docs for makemigrations --exit.
  * Fixed #29002 -- Corrected cached template loader docs about when it's automatically enabled.
  * Fixed typo in TemplateCommand argument help text.
  * Added stub release notes for 1.11.9.
  * Fixed #28915 -- Prevented SQLite from truncating trailing zeros in the fractional part of DecimalField.
  * Refs #29086 -- Doc'd how to detect bytestring mistakes.
  * Fixed #28886 -- Updated prefix for example django.contrib.auth.urls URLs.
  * Fixed #29081 -- Clarified comments in QuerySet.select_related() example.
  * Refs #27985 -- Reallowed using __exact=None as an alias for __isnull=True if a custom lookup class with lookup_name != None is registered as the exact lookup.
  * Refs #28876 -- Fixed incorrect class-based model index name generation for models with quoted db_table.
  * Removed 'development' word in contributing docs
  * Fixed #29055 -- Doc'd that escapejs doesn't make template literals safe.
  * Fixed #29016 -- Fixed incorrect foreign key nullification on related instance deletion.
  * Fixed grammar in docs/releases/2.0.txt.
  * Fixed #29071 -- Fixed contrib.auth.authenticate() crash if a backend doesn't accept a request but a later one does.
  * Fixed #28944 -- Fixed crash when chaining values()/values_list() after QuerySet.select_for_update(of=()).
  * Fixed #29091 -- Fixed makemigrations crash if migrations directory doesn't have __init__.py.
  * Fixed #28898 -- Corrected admin check to allow a OneToOneField in ModelAdmin.autocomplete_fields.
  * Fixed #28896 -- Reallowed filtering a queryset with GeometryField=None.
  * Fixed #28891 -- Documented Origin's loader attribute.
  * Confirmed support for PostGIS 2.4.
  * Wrapped an import per isort.
  * Added release date for 2.0.1 and 1.11.9.
  * Fixed #28884 -- Fixed crash on SQLite when renaming a field in a model referenced by a ManyToManyField.
  * Fixed "template tag" spelling in docs.
  * Fixed #28947 -- Fixed crash when coercing a translatable URL pattern to str.
  * Fixed typo in docs/topics/i18n/translation.txt.
  * Refs #28932 -- Skipped the failing test for refs #28915 on Oracle.
  * Refs #25181 -- Updated timezone.now() docs about obtaining the time in the current time zone.
  * Updated documented mysqlclient requirement to 1.3.7.
  * Fixed #28885 -- Fixed hidden content at the bottom of the "The install worked successfully!" page for some languages.
  * Fixed #28403 -- Added missing formats in FORMAT_MODULE_PATH docs.
  * Fixed #29067 -- Fixed regression in QuerySet.values_list(..., flat=True) followed by annotate().
  * Removed note in tutorial about bypassing manage.py.
  * Fixed #28929 -- Corrected QUnit examples.
  * Refs #28958 -- Added a test for ModelAdmin with query expressions in ordering.
  * Updated various links in docs to use HTTPS.
  * Expanded docs for AbstractBaseUser.has_usable_password().
  * Fixed #29017 -- Updated BaseCommand.leave_locale_alone doc per refs #24073.
  * Doc'd specifying the ENGINE setting as part of configuring contrib.gis.
  * Added stub release notes for 1.11.10.
  * Fixed #28881 -- Doc'd that CommonPasswordValidator's password list must be lowercase.
  * Fixed #28784 -- Clarified how migrate --fake works.
  * Fixed typo in docs/ref/models/expressions.txt.
  * Fixed #29094 -- Fixed crash when entering an invalid uuid in ModelAdmin.raw_id_fields.
  * Refs #28876 -- Fixed incorrect foreign key constraint name for models with quoted db_table.
  * Bumped version for 2.0.1 release.
  * Fixed #25277 -- Restored test dependency to the original python-memcached.
  * Fixed #28761 -- Documented how an inline formset's prefix works.
  * Refs #28856 -- Fixed caching of a GenericForeignKey pointing to a model that uses more than one level of MTI.
  * Fixed #28966 -- Doc'd that the uuid URL path converter requires dashes
  * Fixed #29054 -- Fixed a regression where a queryset that annotates with geometry objects crashes.
  * Reverted "[1.11.x] Refs #28856 -- Fixed caching of a GenericForeignKey pointing to a model that uses more than one level of MTI."
  * Added "Python 3 Only" trove classifier.
  * Fixed #28941 -- Fixed crash in testserver command startup.
  * Fixed import in docs/ref/models/conditional-expressions.txt example.
  * Fixed CVE-2018-6188 -- Fixed information leakage in AuthenticationForm.
  * Fixed #28594 -- Removed Jython docs and specific code
  * Renamed the "Supported versions" label.
  * Fixed #28878 -- Added python_requires in setup.py and a warning for older pips that don't recognize it.
  * Fixed typo in docs/ref/contrib/admin/index.txt.
  * Refs #28856 -- Fixed caching of a GenericForeignKey pointing to a model that uses more than one level of MTI.
  * Added stub release notes for 2.0.2.
  * Fixed #28938 -- Corrected Python compatibility in the tutorial.
  * Fixed #28890 -- Removed newlines between MultiWidget's subwidgets.</changelog>
  <changelog author="tbechtold@suse.com" date="1521460800">- update to 2.0.3 (bsc#1083305, bsc#1083304, CVE-2018-7536, CVE-2018-7537):
  * Fixed #29108 -- Fixed crash in aggregation of distinct+ordered+sliced querysets.
  * Added CVE-2018-6188 to the security release archive.
  * Post-release version bump.
  * Updated translations from Transifex
  * Added stub release notes for security releases.
  * Fixed incorrect regex in re_path() example.
  * Fixed #29125 -- Made Q.deconstruct() deterministic with multiple keyword arguments.
  * Fixed #29126 -- Doc'd the behavior of QuerySet.update_or_create() with manually specified pks.
  * Used a CSS positioning in tutorial 6 that doesn't differ across browsers.
  * Fixed typo in bulk_create() documentation.
  * Fixed #29176 -- Fixed AbstractBaseUser.normalize_username() crash if username isn't a string.
  * Removed blank lines per isort 4.3.0.
  * Added stub release notes for 2.0.3.
  * Fixed CVE-2018-7536 -- Fixed catastrophic backtracking in urlize and urlizetrunc template filters.
  * Fixed #29172 -- Fixed crash with Window expression in a subquery.
  * Fixed #29166 -- Fixed crash in When() expression with a list argument.
  * Fixed #24270 -- Doc'd that django_bash_completion is only in the source distribution.
  * Improved clarity of docs/topics/install.txt.
  * Refs #29125 -- Made Q.deconstruct() omit 'query_utils' in the path and _connector='AND' since it's a default value.
  * Fixed CVE-2018-7537 -- Fixed catastrophic backtracking in django.utils.text.Truncator.
  * Bumped version for 2.0.3 release.
  * Corrected doc'd type of some parameters from string to str.
  * Fixed #29146 -- Readded ^ and $ inadvertently removed from re_path() examples.
  * Fixed #29107 -- Doc'd that ModelForm doesn't actually inherit from Form.
  * Switched test requirement to new psycopg2-binary package.
  * Added backticks around obj argument in admin docs.
  * Fixed typo in docs/topics/forms/media.txt.
  * Fixed #29109 -- Fixed the admin time picker widget for the Thai locale.
  * Fixed #29118 -- Fixed crash with QuerySet.order_by(Exists(...)).</changelog>
  <changelog author="tbechtold@suse.com" date="1523102400">- update to version 2.0.4:
  * Fixed #29265 -- Removed the suggestion to hardcode static URLs.
  * Fixed #29206 -- Fixed PasswordResetConfirmView crash when the URL contains a non-UUID where one is expected.
  * Fixed #29195 -- Fixed Exists.output_field resolution on single-valued queries.
  * Fixed links to Sphinx docs.
  * Fixed typo in docs/releases/2.0.4.txt.
  * Clarified docs about ISO 8601 week numbering.
  * Fixed #29116 -- Fixed OpenLayersWidget deserialization ignoring the widget map's SRID.
  * Added CVE-2018-7536,7 to the security release archive.
  * Fixed #29221 -- Corrected admin's autocomplete widget to add a space after custom classes.
  * Fixed #29273 -- Prevented initial selection of empty choice in multiple choice widgets.
  * Added a pagination example to ListView docs.
  * Fixed #28514 -- Clarifed docs about idempotence of RelatedManager.add().
  * isorted import statements in tutorial example.
  * Fixed #29192 -- Corrected docs regarding overriding fields from abstract base classes.
  * Refs #11278 -- Clarified RelatedManager differences between reverse one-to-many and many-to-many relations.
  * Added stub release notes for 1.11.12.
  * Fixed #29165 -- Clarified how to load initial data with migrations.
  * Fixed #29213 -- Fixed autocomplete widget's translations for zh-hans/zh-hant.
  * Reverted "Expanded docs for AbstractBaseUser.has_usable_password()."
  * Fixed typo in docs/releases/2.0.4/1.11.12.txt.
  * Bumped version for 2.0.4 release.
  * Fixed #29250 -- Added 'django_version' context to startapp/project docs.
  * Added release date for 2.0.4 and 1.11.12.
  * Post-release version bump.
  * Clarified a sentence in docs/topics/i18n/translation.txt.
  * Fixed #29229 -- Fixed column mismatch crash when combining two annotated values_list() querysets with union(), difference(), or intersection().
  * Added stub release notes for 2.0.4.
  * Fixed a couple mistakes in docs/ref/forms/widgets.txt.
  * Fixed #28655 -- Added more examples for customizing widgets in a form.</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533902400">- update to 2.0.8
  * CVE-2018-14574: Open redirect possibility in CommonMiddleware boo#1102680
  * Fixed a regression in Django 2.0.7 that broke the regex lookup on MariaD
  * Fixed a regression where django.template.Template crashed if
    the template_string argument is lazy
  * Fixed __regex and __iregex lookups with MySQL
  * Fixed admin check crash when using a query expression in ModelAdmin.ordering
  * Fixed admin changelist crash when using a query expression without asc()
    or desc() in the page?s ordering
  * Fixed a regression that broke custom template filters that use decorators
  * Fixed detection of custom URL converters in included pattern
  * Fixed a regression that added an unnecessary subquery to the GROUP BY clause
    on MySQL when using a RawSQL annotation
  * Fixed WKBWriter.write() and write_hex() for empty polygons on GEOS 3.6.1+
  * Fixed a regression in Django 1.10 that could result in large memory usage
    when making edits using ModelAdmin.list_editable
  * Corrected the import paths that inspectdb generates for django.contrib.postgres fields
  * Fixed crashes in django.contrib.admindocs when a view is a callable object,
    such as django.contrib.syndication.views.Feed
  * Fixed a regression in Django 1.11.12 where QuerySet.values() or values_list()
    after combining an annotated and unannotated queryset with union(),
    difference(), or intersection() crashed due to mismatching columns</changelog>
</package>
<package pkgid="4f5e285180cfa6d9fb47ac7bf4360e5a5f3c32579a4b57c0c046a7333e47c1f0" name="python3-aubio" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.3.1"/>
  <changelog author="alarrosa@suse.com" date="1486382400">- Initial release</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Use singlespec macros
- Update to 0.4.5:
  * aubio: New python command line tool to extract information
  * Improved default parameters for onset detection, using adaptive
    spectral whitening and compression
  * Add support for libswresample
  * New options --miditap-note and --miditap-velo have been added to
    aubioonset and aubiotrack to adjust the note and velocity of the
    midi note emitted by onsets and beats.
  * Add a bunch of fixes, including improved documentation, build
    system fixes, and platform compatibility.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
</package>
<package pkgid="48eb86141fedd9b2f1ce6104f8ff9354aecf52a5e32f29a521f461eaf646c5bd" name="python3-aubio" arch="x86_64">
  <version epoch="0" ver="0.4.6" rel="lp150.3.6.1"/>
  <changelog author="alarrosa@suse.com" date="1486382400">- Initial release</changelog>
  <changelog author="alarrosa@suse.com" date="1493035200">- Use singlespec macros
- Update to 0.4.5:
  * aubio: New python command line tool to extract information
  * Improved default parameters for onset detection, using adaptive
    spectral whitening and compression
  * Add support for libswresample
  * New options --miditap-note and --miditap-velo have been added to
    aubioonset and aubiotrack to adjust the note and velocity of the
    midi note emitted by onsets and beats.
  * Add a bunch of fixes, including improved documentation, build
    system fixes, and platform compatibility.</changelog>
  <changelog author="coolo@suse.com" date="1514808000">- update to 0.4.6
  This version includes:
  * yinfast, a new version of the YIN pitch detection algorithm,
    that uses spectral convolution to compute the same results as
    the original yin, but with a cost O(N log(N)), making it much
    faster than the plain implementation (O(N^2))
  * Intel IPP optimisations (thanks to Eduard Mueller)
  * improved support for emscripten (thanks to Martin Hermant),
    which compiles the aubio library as a javascript module and
    lets you run aubio's algorithm directly from within a web-page.
  0.4.6 also comes with several bug fixes and improvements.</changelog>
</package>
<package pkgid="176db43af248a48f184c68f0f22dc668281b870725303d3fef9bdeaa6cdaf1a9" name="python3-bind" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.3.1"/>
  <changelog author="jcnengel@gmail.com" date="1501588800">- Enable JSON statistics</changelog>
  <changelog author="meissner@suse.com" date="1505131200">- bind-openssl11.patch: add a patch for enabling
  openssl 1.1 support (builds for 1.0 and 1.1 openssl).
  (bsc#1042635)</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
</package>
<package pkgid="4e0862973afccc7dd08854ac421f4aa2bdee73bccfe06f0f80f92e8b6713bc5f" name="python3-bind" arch="noarch">
  <version epoch="0" ver="9.11.2" rel="lp150.8.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510574400">- Use python3 by default (fate#323526)</changelog>
  <changelog author="tchvatal@suse.com" date="1510660800">- Update to 9.11.2 release:
  * Many changes compared to 9.10 see the README file for in-depth listing
  * For detailed changes with issues see CHANGES file
  * Fixes for CVE-2017-3141 CVE-2017-3140 CVE-2017-3138 CVE-2017-3137
    CVE-3136 CVE-2016-9778
  * OpenSSL 1.1 support
- Remove support for some old distributions and cleanup the spec file
  to require only what is really needed
- Switch to systemd (bsc#1053808)
- Remove german from the postinst messages
- Remove patches merged upstream:
  * bind-CVE-2017-3135.patch
  * bind-CVE-2017-3142-and-3143.patch
- Refresh named.root with another update</changelog>
  <changelog author="vcizek@suse.com" date="1510747200">- Bump up version of most of the libraries
- Rename the subpackages to match the version updates
- Add macros for easier handling of the library package names
- Drop more unneeded patches
  * dns_dynamic_db.patch (upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1510920000">- Remove systemd conditionals as we are not building on sle11 anyway
- Force the systemd to be base for the initscript deployment</changelog>
  <changelog author="vcizek@suse.com" date="1511265600">- drop bind-openssl11.patch (merged upstream)</changelog>
  <changelog author="tchvatal@suse.com" date="1511265601">- Drop idnkit from the build, the bind uses libidn since 2007 to run
  all the resolutions in dig/etc. bsc#1030306
- Add patch to make sure we build against system idn:
  * bind-99-libidn.patch
- Refresh patch:
  * pie_compile.diff
- Remove patches that are unused due to above:
  * idnkit-powerpc-ltconfig.patch
  * runidn.diff</changelog>
  <changelog author="tchvatal@suse.com" date="1511265602">- Sync configure options with RH package and remove unused ones
  * Enable python3
  * Enable gssapi
  * Enable dnssec scripts
  * Remove no longer recognized --enable-rrl</changelog>
  <changelog author="tchvatal@suse.com" date="1511265603">- Add python3-bind subpackage to allow python bind interactions</changelog>
  <changelog author="vcizek@suse.com" date="1511352000">- Add back init scripts, systemd units aren't ready yet</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="meissner@suse.com" date="1511611200">- license changed to MPL-2.0 according to legal.</changelog>
  <changelog author="vcizek@suse.com" date="1512561600">- Use getent when adding user/group
- update changelog to mention removed options</changelog>
  <changelog author="navin.kukreja@suse.com" date="1516708800">- Apply bind-CVE-2017-3145.patch to fix CVE-2017-3145 (bsc#1076118)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1518004800">- Implement systemd init scripts for bind and lwresd (fate#323155)</changelog>
  <changelog author="bwiedemann@suse.com" date="1518782400">- Add /dev/urandom to chroot env</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1519646400">- build with --enable-filter-aaaa to make it possible to use
  config option "filter-aaaa-on-v4 yes". Useful to workaround
  broken websites like netflix which block traffic from certain
  IPv6 tunnel providers. (bsc#1069633)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526472000">- Remove rndc.key generation from bind.spec file because bind
  should create it on first boot (bsc#1092283)
- Add misisng rndc.key check and generation code is lwresd.init
  script</changelog>
  <changelog author="navin.kukreja@suse.com" date="1526644800">- Move chroot related files from bind to bind-chrootenv
  (bsc#1093338)</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286400">- Fix the hostname in ldapdump to be valid (bsc#965748)
- Patch file - bind-ldapdump-use-valid-host.patch</changelog>
  <changelog author="navin.kukreja@suse.com" date="1528286401">- Add SPF records in dnszone-schema file (bsc#901577)</changelog>
</package>
<package pkgid="88ddf7403dcba37ec33430d9cd1a23c6a6dae6c738dc553dab1efe117b7e18b9" name="python3-configargparse" arch="noarch">
  <version epoch="0" ver="0.10.0" rel="lp150.2.3.1"/>
  <changelog author="freitag@opensuse.org" date="1425384000">- Initial package release</changelog>
  <changelog author="freitag@owncloud.com" date="1425470400">- Update to upstream version 0.9.3 to make mitmproxy work.</changelog>
  <changelog author="freitag@owncloud.com" date="1425470401">- Some minor cleanups.</changelog>
  <changelog author="freitag@owncloud.com" date="1425902400">- Add LICENSE file to doc section of the package
- Use python-setuptools as dependency
- Use full link to source.</changelog>
  <changelog author="jweberhofer@weberhofer.at" date="1450353600">- Updated to version 0.10.0
  * config file syntax is now easier to override or extend using the new
    constructor arg: config_file_parser (via merged gh#bw2/ConfigArgParse#28 - thanks @lahwaacz )
  * support for python 2.6 (via merged gh#bw2/ConfigArgParse#18 - thanks @kuba )
  * replace dashes with underscores in env. var names when using the
    auto-env-var feature (via merged gh#bw2/ConfigArgParse#29 - thanks @helgi )
- Fixed download-link and homepage
- Fixed license</changelog>
  <changelog author="jmatejek@suse.com" date="1503576000">- singlespec auto-conversion</changelog>
  <changelog author="mcepl@suse.com" date="1526644800">- Cleanup SPEC file and add check section</changelog>
</package>
<package pkgid="5a10ebbe205f25ec27373262d080719d54ad6f0cd4231d2c40cadf55ec8c5dc4" name="python3-firewall" arch="noarch">
  <version epoch="0" ver="0.5.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1486987200">- Update to version 0.4.4.3
  * New service freeipa-trust (rh#1411650)
  * Complete icmp types for IPv4 and IPv6
  * New h323 helper container
  * Support helper container: h323
  * firewall.server.decorators: ALREADY_ errors should be logged as warnings
  * firewall.command: ALREADY_SET should also result in zero exit code
  * tests/firewall-offline-cmd_test.sh: Only use firewall-offline-cmd
  * Support more ipset types: hash:ip,port, hash:ip,port,ip, hash:ip,port,net, hash:ip,mark, hash:net,net, hash:net,port, hash:net,port,net, hash:net,iface
  * New checks for ipset entry validation
  * Use ipset dimension for match
  * firewall.core.base: New ZONE_SOURCE_IPSET_TYPES list
  * New firewall.core.icmp providing names and types for icmp and icmpv6 values
  * firewall.core.fw_ipset: New methods to get ipset dimension and applied state
  * firewall.errors: New error NOT_APPLIED
  * firewall-cmd man page: Add missing --get-ipset-types
  * firewall.core.fw_nm: No trace back on failed get_connection call (rh#1413345)
  * firewall.core.prog: Fix addition of the error output in runProg
  * Speed up ipset handling, (re)loading and import from file
  * Support --family option for --new-ipset
  * Handle FirewallError for query sequences in command line tools
  * Fail to alter entries of ipsets with timeout
  * Extended tests for ipset options
  * Return empty list for ipsets using timeouts
  * firewall.functions: Fix checks in checkIPnMask and checkIP6nMask (gh#t-woerner/firewalld#186)
  * firewalld.conf man page: New section about AutomaticHelpers
  * firewall-offline-cmd man page: Added -v and -q options, fixed section ids
  * firewall{-cmd, ctl}: Fix scope of final return in try_set_zone_of_interface
  * firewall.core.fw_zone: Limit masquerading forward rule to new connections
  * firewall-config: Update active zones on reloaded signal
  * firewall-applet: Update active zones and tooltip on reloaded signal
  * firewall.core.fw_zone: Fix missing chain for helper in rich rules using service (rh#1416578)
  * Support icmp-type usage in rich rules (rh#1409544)
  * firewall[-offline]-cmd: Fix --{set,get}-{short,description} for ipset and helper (rh#1416325)
  * firewall.core.ipset: Solve ipset creation issues with -exist and more flag tests
  * Speed up start and restart for ipsets with lots of entries (rh#1416817)
  * Speed up of ipset alteration by adding and removing entries using a file (rh#1416817)
  * Code cleanup and minor bug fixes
  * firewall.core.prog: Fix addition of the error output in runProg
  * New services mssql, kibana, elasticsearch, quassel, bitcoin-rpc, bitcoin-testnet-rpc, bitcoin-testnet, bitcoin and spideroak-lansync
  * Translation updates
- Add upstream patch to fix ipset overloading from /etc/firewalld/ipsets (gh#t-woerner/firewalld#206)
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1490702400">- Update to version 0.4.4.4
  * Drop references to fedorahosted.org from spec file and Makefile.am
  * firewall-config: Show invalid ipset type in the ipset dialog in the bad label
  * firewall.core.fw: Show icmptypes and ipsets with type errors in permanent env
  * firewall.server.firewalld: Provide information about the supported icmp types
  * firewall.core.fw_icmptype: Add ICMP type only if the type is supported
  * firewall.core.fw: New attributes ip{4,6}tables_supported_icmp_types
  * firewall.core.ipXtables: New method supported_icmp_types
  * firewall-config: Deactivate edit buttons if there are no items
  * firewall.core.io.zone: Fix permanent rich rules using icmp-type (rh#1434594)
  * firewall.core.fw_ipset: get_ipset may not ckeck if set is applied by default
  * firewall.core.fw_transaction: Use LastUpdatedOrderedDict for zone transactions
- Remove upstream patch:
  * 0001-firewall.core.fw_ipset-get_ipset-may-not-ckeck-if-se.patch</changelog>
  <changelog author="mchandras@suse.de" date="1496750400">- Update to version 0.4.4.5
  * firewall-offline-cmd: Fix --remove-service-from-zone option (rh#1438127)
  * Support sctp and dccp in ports, source-ports, forward-ports, helpers and rich rules
  * firewall-cmd: Fix --{set,get}-{short,description} for zone
  * firewall.core.ipXtables: Use new wait option for restore commands if available
  * Adding ovirt-vmconsole service file
  * Adding oVirt storage-console service.
  * Adding ctdb service file.
  * Adding service file for nrpe.
  * Rename extension for policy choices (server and desktop) to .policy.choice (rh#1449754)
  * D-Bus interfaces: Fix GetAll for interfaces without properties (rh#1452017)
  * firewall.core.fw_config: Fix wrong variable use in repr output
  * firewall.core.fw_icmptype: Add missing import for copy
  * firewall.core.fw_test: Fix wrong format string in repr
  * firewall.core.io.zone: Fix getattr use on super(Zone)
  * firewall.functions: New function get_nf_nat_helpers
  * firewall.core.fw: Get NAT helpers and store them internally.
  * firewall.core.fw_zone: Load NAT helpers with conntrack helpers
  * firewalld.dbus: Add missing properties nf_conntrach_helper_setting and nf_conntrack_helpers
  * firewall.server.firewalld: New property for NAT helpers supported by the kernel</changelog>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
</package>
<package pkgid="75aa6fd8234a9e146eb64174e85879934b8de84dcc09af124c1cefb832aa440e" name="python3-firewall" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1510142400">- Switch to python3
- Run spec cleaner
- Move autogen to build section
- Add systemd requirements</changelog>
  <changelog author="mchandras@suse.de" date="1510747200">- Update to version 0.4.4.6
  * firewall.core.fw_config: Fix check for icmp builtin name
  * config.services: docker-swarm: fix incorrect attribute
  * xmlschema/service.xsd: Fix protocol looking for name instead of value
  * Add docker swarm service (gh#firewalld/firewalld#230)
  * Adding FirewallD redis service (gh#firewalld/firewalld#248)
  * Adding firewalld zabbix server and agent services (gh#firewalld/firewalld#221)
  * firewall-offline-cmd: Don't require root for help output
  * doc: firewall-cmd: Document --query-* options return codes
  * firewall-cmd: Use colors only if output is a TTY
  * core: Log unsupported ICMP types as informational only
  * add bgp service to predefined services edit to config/Makefile.am
  * Add git service
  * Add kprop service
  * minidlna definitions (gh#firewalld/firewalld#236)
  * SpiderOak ONE listens on port 21327 and 21328
  * autogen.sh: Allow skipping configure via NOCONFIGURE env var
  * Add missing ports to RH-Satellite-6 service
  * Reload nf_conntrack sysctls after the module is loaded
  * Add NFSv3 service.
  * config/Makefile.am: Add murmur service (a95eed1)
  * add new service IRC
  * firewall.core.prog: Simplify runProg output: Combine stderr and stdout
  * firewall.core.fw: Fix possible dict size change in for loop
  * firewall.core.fw: Use new firewalld git repo in firewalld organization
  * config/firewall-config.appdata.xml.in: Use new firewalld git repo in firewalld organization
  * firewall.core.fw_zone: Rich-rule ICMP type: Error only for conflicting family
  * firewall.core.rich: Add checks for Rich_Source validation
  * Handle also IPv6 with the zone masquerade flag
  * Add IPv6 support for forward-ports in zones
  * firewall.command: Enable parse_forward_port to work with IPv6 adresses
  * firewall.core.fw_zone: Fix IPv6 address in rich rule forward ports
  * add Murmur (Mumble server) service
- spec file fixes to avoid rpmlint warnings about duplicate files.</changelog>
  <changelog author="mchandras@suse.de" date="1510833600">- Add combined upstream patch to support SUSE ifcfg network files.
  * 0001-suse-ifcfg-files.patch (gh#firewalld/firewalld#262, fate#323460)</changelog>
  <changelog author="mpluskal@suse.com" date="1511092800">- Make sure to use python3 everywhere (boo#1068778)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1511870400">- Add missing python3-gobject-Gdk dependency (boo#1069952)</changelog>
  <changelog author="dimstar@opensuse.org" date="1511956800">- Replace dbus-1-python requires with dbus-1-python3: since
  firewalld was migrated to python3, we also have to require the
  python3 dependencies (boo#1070310).</changelog>
  <changelog author="mchandras@suse.de" date="1513857600">- Introduce new python3-firewall and firewall-macros subpackages.
  The first one contains the firewalld python3 bindings and the second
  one contains the RPM macros for firewalld.</changelog>
  <changelog author="mchandras@suse.de" date="1517486400">- Remove high-availability service. SUSE HA uses the cluster service
  provided by the yast2-cluster package (bsc#1078223)</changelog>
  <changelog author="mchandras@suse.de" date="1519819200">- Add upstream patches to fix endless loop in firewall-config when
  firewalld is not running (bsc#1082470)
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1520337600">- Update to 0.5.1 (bsc#1084026)
  * ipXtables: fix iptables-restore wait option detection
  * python3: use "foo in dict" not dict.has_key(foo)
  * Fix potential python3 keys() incompatibility in watcher
  * Fixed python3 compatibility
  * ebtables: fix missing default value to set_rule()
  * fw_zone: fix invalid reference to __icmp_block_inversion
  * zones: Correct and defer check_name for combined zones
  * firewallctl: mark deprecated (gh#firewalld/firewalld##261)
  * Add nmea-0183 service
  * Add sycthing-gui service
  * Add syncthing service
  * Adding FirewallD jenkins service (gh#firewalld/firewalld#256)
  * services/high-availability: Add port 9929
  * Fix and improve firewalld-sysctls.conf
  * firewalld: also reload dbus config interface for global options
  * Add MongoDB service definition
  * src: firewall: Add support for SUSE ifcfg scripts
  * Add UPnP client service
  * firewalld: Allow specifying log file location
  * firewalld/firewall-offline-cmd: Allow setting system config directories
- Drop obsolete patch
  * 0001-suse-ifcfg-files.patch
- Drop tests installation</changelog>
  <changelog author="mchandras@suse.de" date="1521028800">- Update to 0.5.2
  * fix rule deduplication causing accidental removal of rules
  * log failure to parse direct rules xml as an error
  * firewall-config: Break infinite loop when firewalld is not
    running (bsc#1082470, bsc#1085205)
  * fix set-log-denied not taking effect
  * po: update translations
- Remove obsolete patches which are now upstream
  * 0001-src-firewall-config-Fix-default-value-for-dialog-but.patch
  * 0002-src-firewall-config-Break-infinite-loop-when-firewal.patch</changelog>
  <changelog author="mchandras@suse.de" date="1521201600">- Backport upstream patches to add additional services (bsc#1082033)
  * firewalld-add-additional-services.patch</changelog>
  <changelog author="sbrabec@suse.com" date="1523361600">- Translations update (bsc#1081623).</changelog>
  <changelog author="sbrabec@suse.com" date="1524052800">- Translations update to version 20180417 (bsc#1081623):
  * Minor fixes of ar, ko, nl.</changelog>
  <changelog author="mchandras@suse.de" date="1526299200">- Update to 0.5.3 (bsc#1093120)
  * tests/regression: add test for ipset with timeout
  * ipset: allow adding entries to ipsets with timeout
  * translations: update
  * helpers: load helper module explicitly if no port given
  * helpers: nf_conntrack_proto-* helpers needs name cropped
  * config/Makefile: correct name of proto-gre helper
  * tests/regression: test helper nf_conntrack_proto_gre (#263)
  * functions: get_nf_nat_helpers() should look in other directories too
  * functions: Allow nf_conntrack_proto_* helpers
  * services: Add GRE
  * helpers: Add proto-gre
  * tests/regression: add test to verify ICMP block in forward chain
  * ipXtables: fix ICMP block not being present in FORWARD chain</changelog>
  <changelog author="sbrabec@suse.com" date="1526904000">- Merge SUSE translations to version 0.5.3, fix typos (boo#1094051,
  add firewalld-0.5.3-po-20180417.tar.xz,
  remove firewalld-po-20180417.tar.xz).</changelog>
  <changelog author="mchandras@suse.de" date="1530878400">- Backport the following upstream fixes:
  * Add missig ipv6-icmp protocol to UI drop-down list (bsc#1099698)
  - 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * Drop global read permissions from the log file (bsc#1098986)
  - 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533556800">- Mark more strings as translatable when creating rich rules (bsc#1096542)
  * 0001-firewall-config-fix-some-untranslated-strings.patch</changelog>
  <changelog author="mchandras@suse.de" date="1534507200">- Update to 0.5.4 (bsc#1105170)
  * update translations
  * fw: if failure occurs during startup set state to FAILED
  * fw_direct: avoid log for untracked passthrough queries
  * firewall-config: fix some untranslated strings
  * Rich Rule Masquerade inverted source-destination in Forward Chain
  * don't forward interface to zone requests to NM for generated interfaces
  * firewall-cmd: add --check-config option
  * firewall-offline-cmd: add --check-config option
  * ipset: check type when parsing ipset definition
  * firewall-config: Add ipv6-icmp to the protocol dropdown box
  * core: logger: Remove world-readable bit from logfile
  * IPv6 rpfilter: explicitly allow neighbor solicitation
- Remove patches that have made it upstream:
  * 0001-firewall-config-fix-some-untranslated-strings.patch
  * 0001-firewall-config-Add-ipv6-icmp-to-the-protocol-dropdo.patch
  * 0001-core-logger-Remove-world-readable-bit-from-logfile-3.patch
  * firewalld-0.5.3-po-20180417.tar.xz</changelog>
</package>
<package pkgid="a3fe126b65e990b125cf2388b8b7cd44da39efb9b19555e5652f98f517992042" name="python3-ipa_hbac" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="0150479f703022ac4090bb609b753ce1d3590e4b5c82e743b5d8ed875e1d51ff" name="python3-kiwi" arch="x86_64">
  <version epoch="0" ver="9.15.2" rel="lp150.2.3.1"/>
  <changelog author="ms@suse.de" date="1524744000">- Extend test-image-azure integration test
  Use xfs as filesystem and set a tag to also test image tags</changelog>
  <changelog author="ms@suse.de" date="1525089600">- Bump version: 9.14.5 ? 9.14.6</changelog>
  <changelog author="ms@suse.de" date="1525435200">- Fix setup of kiwi_lvm profile variable
  kiwi_lvm was always set to true if a volume management system
  is in use. However it should only be set to true if the
  selected volume management system is lvm. The same applies
  to the kiwi_lvmgroup variable which also only makes sense
  if the lvm volume management system is used.
  This Fixes bsc#1090427</changelog>
  <changelog author="ms@suse.de" date="1525435201">- Fixed check for volume group in use
  The former implementation evaluates the output of the vgs
  command and set the volume group as in use if one of the
  listed volume groups on the host contains the group name
  set by the image description. This would also match if the
  group name set in the image description is e.g 'System' and
  the a volume group on the host with name 'SystemVG' exists.
  However a conflict only exists on exact match of the name.
  The proposed fix is to use the --select feature from vgs
  and let it show information on exact match of the vg_name
  field. The code in kiwi then just evaluates if the selection
  by vgs has a value or not. This Fixes #721</changelog>
  <changelog author="dcassany@suse.com" date="1525435202">- Some simple code cleaning</changelog>
  <changelog author="ms@suse.de" date="1525435203">- Bump version: 9.14.6 ? 9.14.7</changelog>
  <changelog author="dcassany@suse.com" date="1525435204">- Add uninstall pacakges type
  This commit adds a new `uninstall` type for packages. Packages listed
  with this type will be removed by the package manager cleaning also any
  unneeded dependency. The removal is executed after running `config.sh`.
  Also in this commit `delete` type for packages is now executed after
  `uninstall` packages, meaing it also happens after `config.sh`.
  Fixes #625</changelog>
  <changelog author="dcassany@suse.com" date="1525694400">- Refining the uninstall type implementation</changelog>
  <changelog author="dcassany@suse.com" date="1525694401">- Add comment in pinch_system calls</changelog>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
</package>
<package pkgid="7b584dba9102104aaae45f7df4019283ac705fba600cb64255e1811016fb7b76" name="python3-kiwi" arch="x86_64">
  <version epoch="0" ver="9.15.3" rel="lp150.2.6.1"/>
  <changelog author="ms@suse.de" date="1525780800">- Bump version: 9.14.7 ? 9.15.0</changelog>
  <changelog author="ms@suse.de" date="1525780801">- Use latest version of sphinx
  Formerly sphinx==1.6.7 was used because travis-sphinx failed
  with latest sphinx. Now travis-sphinx fails with 1.6.7 and
  I hope using latest sphinx will fix that</changelog>
  <changelog author="ms@suse.de" date="1525780802">- Update arm integration test
  Existing panda build was outdated and non functional.
  Move the test to a more popular target and write the
  image description to use technology matching the
  suse arm development effort. Target is now Rpi(64bit)</changelog>
  <changelog author="davidcassany@gmail.com" date="1525867200">- Add a chapter for uninstall package requests in docs (#726)
  Add a chapter for uninstall package requests in docs</changelog>
  <changelog author="ms@suse.de" date="1525867201">- Bump version: 9.15.0 ? 9.15.1</changelog>
  <changelog author="dcassany@suse.com" date="1526299200">- Add additionaltags containerconfig attribute
  This commit adds `additionaltags` attribute, so multiple tags to
  a container image can be defined in a comma separated value.
  Fixes #713</changelog>
  <changelog author="ms@suse.de" date="1526385600">- Allow docker root import from uncompressed file
  Check the given file name for its compression format and
  only uncompress if a supported format could be detected.
  This Fixes #730</changelog>
  <changelog author="ms@suse.de" date="1526385601">- Return file name after archive or compression call
  Extend the ArchiveTar and Compress classes such that
  their archiving and compression methods returns the
  result file name after the operation</changelog>
  <changelog author="ms@suse.de" date="1526385602">- Make container compression a configuration option
  Change the ContainerBuilder class to evaluate on the
  configuration options to decide if the container archive
  should be compressed or not. By default the archive will
  be compressed, thus there is no change to the former behavior
  but can be setup in ~/.config/kiwi/config.yml as follows:
  container:
- compress: none|xz
  This Fixes #725</changelog>
  <changelog author="dcassany@suse.com" date="1526385603">- Add correct GPL-3.0-or-later license
  Add the correct license reference in the spec License field
  Fixes #732</changelog>
  <changelog author="dcassany@suse.com" date="1526472000">- Fix zypper add lock operations
  This commit fixes the arguments passed to zypper in add lock
  operations.</changelog>
  <changelog author="ms@suse.de" date="1526472001">- Bump version: 9.15.1 ? 9.15.2</changelog>
  <changelog author="dcassany@suse.com" date="1527163200">- Do not delete uncompressed base docker images
  Fixes #739</changelog>
  <changelog author="ms@suse.de" date="1527508800">- Do not create static dev nodes in root init
  For compatibility reasons kiwi created a set of static device
  nodes when initializing a new image root system. With the
  presence of devtmpfs this should no longer be needed. In addition
  the static dev node setup now also causes problems on filesystems
  like btrfs which was the reason to delete this code now.
  This Fixes bsc#1087104</changelog>
  <changelog author="dcassany@suse.com" date="1527508801">- Add service dependencies in generators
  Correctly adding the initrd-root-fs.target service dependency to
  auto generated sysroot.mount for kiwi-live and kiwi-overlay dracut
  modules.
  Fixes #741</changelog>
  <changelog author="dcassany@suse.com" date="1527508802">- Verify file does not exist before creating symlink</changelog>
  <changelog author="ms@suse.de" date="1527508803">- Added support for config-cdroot archive
  The image description now allows an optional file named:
  config-cdroot.tar[.compression_postfix]. The file gets
  unpacked as user data for live and install ISO images.
  This allows users to add e.g license files or reference
  documentation to the ISO image. This Fixes #737</changelog>
  <changelog author="ms@suse.de" date="1527508804">- Added documentation for config-cdroot archive</changelog>
  <changelog author="ms@suse.de" date="1527508805">- Fix setup of LOADER_TYPE in sysconfig/bootloader
  LOADER_TYPE value for the grub2 bootloader depends on
  the use of EFI. This Fixes bsc#1094883</changelog>
  <changelog author="ms@suse.de" date="1527595200">- Bump version: 9.15.2 ? 9.15.3</changelog>
</package>
<package pkgid="09cccaff2fa4fdaad7615eed4c9488cd9d9bd998d13dc0e58338ce84ace3924d" name="python3-lldb" arch="x86_64">
  <version epoch="0" ver="5.0.1" rel="lp150.4.3.1"/>
  <changelog author="normand@linux.vnet.ibm.com" date="1469707200">- for ppc64le set memory to 4GB in _constraints file
  (failure in Factory:PowerPC)</changelog>
  <changelog author="tchvatal@suse.com" date="1472212800">- Start conversion to use cmake macros with now introduced
  compatibility for ninja
- Reduce number of threads if we don't have enough memory
- Add patch for the nonvoid returns:
  * llvm-nonvoid-return.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1472644800">- Update to llvm 3.8.1
  * See http://llvm.org/releases/3.8.1/docs/ReleaseNotes.html and
    http://llvm.org/releases/3.8.1/tools/docs/ReleaseNotes.html
- Use versioned libLLVM (to libLLVM3_8) and libclang (to libclang3_8)
- Change versioning of liblldb3_8 to liblldb-3_8 and use a variable
  to control the name instead of hard-coding it.
- Use bcond_with and bcond_without to enable/disable build options
  instead of hard-coding them.
- Put buildrequires as requires in -devel packages to avoid linker errors
  when building packages against the -devel packages.
- Add ffi support (disabled by default).
- Add oprofile support (disabled by default).
- Add valgrind support (disabled by default).
- Link cmake files to the normal cmake file directory to allow autodetection
  of cmake interfaces.
- Remove unused lldb components from main spec file.
- Split llvm python bindings into own subpackage.
- Split emacs plugin into own subpackage
- Move additional vim plugins into vim plugins package
- Split libc++, libLTO, LLVMgold, libomp, clang-chekers into own subpackages
- Make python-clang, llvm-vim-plugins, and llvm-emacs-plugins noarch since
  they aren't architecture-specific.
- Make packages besides llvm, llvm-clang, and the shared libraries conflict
  with other versions.  This will be important when multiple LLVM versions
  are supported.
- Various spec file cleanups
- Rebase patches:
  * arm_suse_support.diff
  * assume-opensuse.patch
  * clang-resourcedirs.patch
  * default-to-i586.patch
  * glibc-2.23-libcxx.patch
  * glibc-2.24-libcxx.patch
  * lldb-add-pthread-dl-libs.patch
  * lldb-cmake.patch
  * llvm-fix-find-gcc5-install.patch
  * llvm-nonvoid-return.patch
  * llvm-remove-clang-only-flags.patch
  * revert-cmake-soname.patch
  * set-revision.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1473249600">- Sort a bit with spec-cleaner
- Remove the latest switch for now, things should be either coinstallable
  or not, we don't need to bother around with compilation like this</changelog>
  <changelog author="toddrme2178@gmail.com" date="1473422400">- Split out llvm and lldb into a version-specific package.
- Turn this package into a wrapper around the version-specific
  packages.
- Remove patches:
  * default-to-i586.patch
  * assume-opensuse.patch
  * glibc-2.23-libcxx.patch
  * arm_suse_support.diff
  * llvm-remove-clang-only-flags.patch
  * clang-resourcedirs.patch
  * lldb-add-pthread-dl-libs.patch
  * llvm-nonvoid-return.patch
  * glibc-2.24-libcxx.patch
  * revert-cmake-soname.patch
  * set-revision.patch
  * lldb-cmake.patch
  * D15067.id41365.diff
  * llvm-fix-find-gcc5-install.patch</changelog>
  <changelog author="idonmez@suse.com" date="1475668800">- BuildIgnore emacs and vim to avoid cycles.</changelog>
  <changelog author="idonmez@suse.com" date="1475755200">- Remove unneeded emacs-nox dependency.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1475841600">- Improve README.packaging.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1480680000">- Update to version 3.9.0
  * See:
    + http://llvm.org/releases/3.9.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.0/tools/clang/tools/extra/docs/ReleaseNotes.html
  * Fix the following patches:
    + arm_suse_support.diff
    + assume-opensuse.patch
    + clang-resourcedirs.patch
    + default-to-i586.patch
    + glibc-2.23-libcxx.patch
    + glibc-2.24-libcxx.patch
    + lldb-add-pthread-dl-libs.patch
    + lldb-cmake.patch
    + llvm-fix-find-gcc5-install.patch
    + llvm-remove-clang-only-flags.patch
    + revert-cmake-soname.patch
    + set-revision.patch
  * Remove upstream-included patch:
    + llvm-nonvoid-return.patch
  * Remove patch for removed files:
    + glibc-2.23-libcxx.patch
- Backport upstream patches:
  * clang-fix-substitutions-abi_tag.patch
  * clang-incomplete-field-types.patch
  * llvm-install-CheckAtomic.patch
- Add clang%{_sonum}-include-fixer subpackage and associated
  libfindAllSymbols%{_sonum} and libfindAllSymbols%{_sonum}-devel
  subpackages.
- Add sanstats to llvm binary list.</changelog>
  <changelog author="idonmez@suse.com" date="1482321600">- Update to version 3.9.1
  * See:
    + http://llvm.org/releases/3.9.1/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/3.9.1/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1490788800">- Update to version 4.0.0
  * See:
    + http://llvm.org/releases/4.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/4.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="idonmez@suse.com" date="1498564800">- Update to version 4.0.1
  * Minor bugfixes</changelog>
  <changelog author="msrb@suse.com" date="1507550400">- Add clang-devel-static package.
  * Requires clang4-devel-static that was added to llvm4 package.</changelog>
  <changelog author="msrb@suse.com" date="1513166400">- Update to version 5.0.0
  * See:
    + http://llvm.org/releases/5.0.0/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/docs/ReleaseNotes.html
    + http://llvm.org/releases/5.0.0/tools/clang/tools/extra/docs/ReleaseNotes.html</changelog>
  <changelog author="msrb@suse.com" date="1513166401">- Rename python-lldb to python3-lldb to match the renamed package
  in llvm4 and llvm5 after switch to python3. Fix its dependency.</changelog>
  <changelog author="msrb@suse.com" date="1515067200">- Add lld package.
  * LLD is new since llvm5.</changelog>
  <changelog author="msrb@suse.com" date="1515153600">- Update to version 5.0.1
  * This release contains bug-fixes for the LLVM 5.0.0 release.
  * This release is API and ABI compatible with 5.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1515412800">- Add missing %files for lld.</changelog>
  <changelog author="msrb@suse.com" date="1516795200">- Remove clang-devel-static.</changelog>
  <changelog author="msrb@suse.com" date="1531915200">- Add ExcludeArch mirroring the ones in llvm5. (bnc#1101598)</changelog>
</package>
<package pkgid="76566695be3a4a3008f8fa6edda0382e5776144d23ec3268d92c58ede15464c5" name="python3-llfuse" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="lp150.2.1"/>
  <changelog author="pascal.bleser@opensuse.org" date="1293796800">- initial version (0.29.4)</changelog>
  <changelog author="pascal.bleser@opensuse.org" date="1305288000">- update to 0.31</changelog>
  <changelog author="chris@computersalat.de" date="1323604800">- update to 0.37.1
  * Fixed a segfault-causing race condition in Lock.acquire() and
    Lock.yield().
- 2011-12-05, llfuse 0.37
  * Explicitly call fuse_chan_destroy() in llfuse.close(), so
    that the mountpoint becomes inaccessible right away, even
    while the process is still running.
  * Added get_ino_t_bytes() and get_off_t_bytes() that return
    the number of bytes used for representing inode numbers
    and file offsets.
  * The yield_() method of the global lock now takes an additional
  * count* argument that can be used to yield the lock more than
    once.
  * Changed implementation of global lock. The global lock is
    no longer a mutex, but a boolean variable protected by a mutex,
    and changes are tracked with a condition object. This allows
    lock.yield() to work properly: if there are other threads waiting
    for the lock, they are guaranteed to run. If there are no other
    threads waiting for the lock, execution of the active thread
    continues immediately.
    The previous implementation using sched_yield() was mostly
    broken: threads trying to acquire the global lock were calling
    pthread_mutex_lock, so they got removed from the kernels
    runqueue. However, calls to sched_yield() would just put the
    active thread into the expired runqueue, and calls to
    pthread_mutex_unlock apparently do not synchronously move the
    threads waiting for the lock back to a runqueue. Therefore, most
    of the time the active thread would be the only thread in any
    runqueue and thus continue to run.
  * The Operations.forget() method now receives a list of
    (inode, nlookup) tuples rather than just one such tuple.
  * invalidate_entry() and invalidate_inode() no longer work
    synchronously. Instead, the message is put in a queue and send by
    a background thread.
  * The acquire() method of the global lock now has an optional
  * timeout* parameter.
  * The create() request handler now receives the open flags
    as an additional parameter.
- for more info please see Changes.txt</changelog>
  <changelog author="speilicke@suse.com" date="1382616000">- Require python-setuptools instead of distribute (upstreams merged)</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.40
  * Re-raising an exception from a request handler now works
    correctly under Python 3. Problems were caused by a Cython bug,
    but llfuse now works around the issue.
  * File atime, ctime and mtime can now also be represented as
    nanosecond integer values for increased resolution.
  * Python-llfuse no longer includes the setuptools/distribute
    bootstrap script. This module thus has to be installed manually
    if not already present on the system.
  * Duck-typing of the Operations instance is now supported.
  * Python-llfuse no longer requires a re-compilation of the
    Cython code (setup.py build_cython step) when compiling for MacOS
    or FreeBSD.
  * Extended attributes are now properly supported under FreeBSD.
- General spec file clean-up</changelog>
  <changelog author="t.gruner@katodev.de" date="1503576000">- change spec-file for multi-python build
- Update to version 1.2
  * The attr argument of the ~Operations.setattr handler now contains
    valid values only for the attributes that are to be set.
  * Previously, the documentation assorted that other attributes would
    be set to the original (unchanged) values. However, that was actually
    never the case.
- Release 1.1.1 (2016-07-27)
  * Fixed the description of the ~Operations.lookup handler (should
    return zero if there is no such entry, not a negative value).
  * Fixed the description of the EntryAttributes structure (descriptions
    of ~EntryAttributes.attr_timeout and ~EntryAttributes.entry_timeout
    were switched).
- Release 1.1 (2016-05-23)
  * Added support for nanosecond resolution time-stamps in GNU/kFreeBSD.
  * Fixed another set of build issues on FreeBSD.
- Release 1.0 (2016-03-08)
  * Note: The 1.0 version number does not imply any special stability or
    an API freeze. It's a consequence of switching to semantic versioning,
    where backwards incompatible changes will always result in increased
    major version.
  * Fixed an overflow when accessing the *st_xtime_ns attributes of the
    ~llfuse.EntryAttributes class from Python on 32-bit systems.
  * POTENTIAL COMPATIBILITY BREAK: The ~Operations.destroy handler is
    now called with the global lock acquired.
- Release 0.43 (2016-02-23)
  * Fixed build-failure under OS-X.
  * Fixed some build failures under FreeBSD (hopefully all of them,
    but no testers were available before the release).
  * The workers parameter to llfuse.main may now be None.
- Release 0.42.1 (2016-02-01)
  * Include HTML documentation.
- Release 0.42 (2016-01-30)
  * The documentation has been clarified and extended - please take
    a look even if you're already familiar with Python-LLFUSE.
  * Extended coverage of unit tests.
  * Fixed a compile error under OS-X.
  * Added notify_store function.
  * Added get_sup_groups function.
  * The ~Operations.read handler may now return arbitrary objects that
    as long as they implement the buffer protocol.
  * Implemented a forget_multi handler (used behind the scenes).
  * Many classes were rewritten in Cython for improved performance.
  * Python thread-specific data is now initialized only once rather
    than every time a handler is called.
  * SIGINT (Ctrl-C) now properly terminates llfuse.main also when
    running with multiple workers.
  * The return value of llfuse.main now indicates if the loop was
    terminated due to an unmount request or due to a signal.
  * BACKWARDS INCOMPATIBLE CHANGES:
  * Ducktyping the EntryAttributes class is no longer allowed, Operations
    methods must return instances of this class (rather than any object
    that provides the neccessary attributes).
  * The !st_Xtime attributes of the EntryAttributes have been dropped
    in favor of the !st_Xtime_ns attributes.
  * The setattr method now always receives a completely filled
    EntryAttributes instance. To determine which attributes should be
    changed, a new fields argument has been introduced.
  * The ~Operations.setattr method now also receives an fh parameter.
  * The llfuse.main function now has a workers parameter, and the
    single parameter was dropped.
  * Almost all request handlers now receive a RequestContext instance
    in an additional parameter.
- Release 0.41.1 (2015-08-22)
  * Added some files in :file:`test/` that were missing in the
    0.41 tarball. Tests now support the --installed option, produce
    prettier output, and check for error messages printed to stderr
    or stdout.
  * Python-LLFUSE can now also be built on NetBSD.
  * Added support for FUSE_SET_ATTR_ATIME_NOW and
    FUSE_SET_ATTR_MTIME_NOW setattr flags. Previosly, these would be
    silently ignored.
  * Fixed an AssertionError in :file:`examples/passthroughfs.py`
- Release 0.41 (2015-08-20)
  * Fixed a syntax error in contrib/tmpfs.py
  * Introduced an !llfuse.__version__ attribute.
  * Added more reasonable default values for llfuse.EntryAttributes.
  * Added new minimal example, :file:`examples/lltest.py`.
  * Added unit tests.
  * Added an example for a pass-through file system,
    `examples/passthroughfs.py`.</changelog>
  <changelog author="alarrosa@suse.com" date="1504699200">- Split documentation into a new python-llfuse-docs package.
- Added full changelog in the previous changelog entry</changelog>
  <changelog author="alarrosa@suse.com" date="1515153600">- Update to version 1.3.2
  * Minor bugfixes.
- Update to version 1.3.1
  * The main loop now terminates properly again when terminated by a signal.
- Update to version 1.3
  * The StatvfsData class now has an !~StatvfsData.f_namemax attribute.
  * EntryAttributes and StatvfsData instances can now be pickled and copied.
    Other llfuse classes now raise an exception when the do not support
    pickling/copying.</changelog>
  <changelog author="alarrosa@suse.com" date="1515499200">- Remove %check section since it's not checking anything</changelog>
  <changelog author="alarrosa@suse.com" date="1529323200">- Update to version 1.3.4
  * No-change rebuild with Cython 0.28.2.
- Update to version 1.3.3
  * Dropped pytest-catchlog dependency and add support for Pytest 3.3.0.
  * Minor bugfixes.
- Add fix-char-cast-to-unsigned-int.patch to fix a compiler error when
  casting from char to Py_UNICODE (unsigned int) due to a possible change
  of sign.
- Add fix-test-for-fusermount.patch to skip the tests that rely on
  fusermount since it doesn't work in OBS's chroot.
- Add %check section back. It's not possible to check all tests since for
  that, the user that runs the test should be in the trusted group, but
  at least some tests are run.</changelog>
  <changelog author="tchvatal@suse.com" date="1534161600">- Add patch to build with new attr:
  * llfuse-attr-2.4.48.patch
- Drop contextlib2 dependency
- Run tests unconditionally</changelog>
  <changelog author="Antonio Larrosa &lt;alarrosa@suse.com&gt;" date="1537358400">- Update to version 1.3.5
  * Add `handle_signals` option to `llfuse.main`
  * Several fixes to `examples/passthroughfs.py`
  * Now compatible with Python 3.7
- Remove patch already in upstream.
  * llfuse-attr-2.4.48.patch</changelog>
</package>
<package pkgid="43fdcb643ef267a314b275a45058ad171649a774b6816a960801c567771a9a19" name="python3-matrix-synapse" arch="noarch">
  <version epoch="0" ver="0.28.1" rel="lp150.2.4.1"/>
  <changelog author="okurz@suse.com" date="1497787200">- Initial version of matrix-synapse version 0.19.2</changelog>
  <changelog author="okurz@suse.com" date="1498737600">- Prevent conflicts between python2/3 version of packages</changelog>
  <changelog author="jengelh@inai.de" date="1499169600">- Do not suppress errors from useradd procedure.
- Trim description to the essence of the package. It is not
  supposed to be a manual or architectural document.
- Remove redundant %clean section. Replace %__-type macro
  indirections.</changelog>
  <changelog author="okurz@suse.com" date="1510660800">- Update to version v0.24.1+4.632baf79:
  * Disallow capital letters in userids
  * Allow = in mxids and groupids
  * Validate group ids when parsing
  * Fix a logcontext leak in the media repo
  * Correctly wire in update group profile over federation
  * replace 'except:' with 'except Exception:'
  * fix vars named `l`
  * Bump version and changelog
  * Add jitter to validity period of attestations
  * Revert "Add jitter to validity period of attestations"</changelog>
  <changelog author="okurz@suse.com" date="1510660801">- Update to version v0.24.1:
  * Bug fixes:
  * Fix updating group profiles over federation (PR #2567)
  * Fix handling SERVFAILs when doing AAAA lookups for federation (PR #2477)
  * Fix incompatibility with newer versions of ujson (PR #2483) Thanks to
    @jeremycline!
  * Fix notification keywords that start/end with non-word chars (PR #2500)
  * Fix stack overflow and logcontexts from linearizer (PR #2532)
  * Fix 500 error when fields missing from power_levels event (PR #2552)
  * Fix 500 error when we get an error handling a PDU (PR #2553)
  * Fix regression in performance of syncs (PR #2470)
  * Fix caching error in the push evaluator (PR #2332)
  * Fix bug where pusherpool didn't start and broke some rooms (PR #2342)
  * Fix port script for user directory tables (PR #2375)
  * Fix device lists notifications when user rejoins a room (PR #2443, #2449)
  * Fix sync to always send down current state events in timeline (PR #2451)
  * Fix bug where guest users were incorrectly kicked (PR #2453)
  * Fix bug talking to IPv6 only servers using SRV records (PR #2462)
  * Fix synapse_port_db failure. Thanks to Pneumaticat! (PR #1904)
  * Fix caching to not cache error responses (PR #1913)
  * Fix APIs to make kick &amp; ban reasons work (PR #1917)
  * Fix bugs in the /keys/changes api (PR #1921)
  * Fix bug where users couldn't forget rooms they were banned from (PR #1922)
  * Fix issue with long language values in pushers API (PR #1925)
  * Fix a race in transaction queue (PR #1930)
  * Fix dynamic thumbnailing to preserve aspect ratio. Thanks to jkolo! (PR
    [#1945])
  * Fix device list update to not constantly resync (PR #1964)
  * Fix potential for huge memory usage when getting device that have
    changed (PR #1969)
  * Fix bug where pusher pool didn't start and caused issues when
    interacting with some rooms (PR #2342)
  * Fix bug with storing registration sessions that caused frequent CPU churn
    (PR #2319)
  * Fix users not getting notifications when AS listened to that user_id (PR
    [#2216]) Thanks to @slipeer!
  * Fix users without push set up not getting notifications after joining rooms
    (PR #2236)
  * Fix preview url API to trim long descriptions (PR #2243)
  * Fix bug where we used cached but unpersisted state group as prev group,
    resulting in broken state of restart (PR #2263)
  * Fix removing of pushers when using workers (PR #2267)
  * Fix CORS headers to allow Authorization header (PR #2285) Thanks to @krombel!
  * Fix bug in anonymous usage statistic reporting (PR #2281)
  * Fix API to allow clients to upload one-time-keys with new sigs (PR #2206)
  * Fix bug where users got pushed for rooms they had muted (PR #2200)
  * Fix nuke-room script to work with current schema (PR #1927) Thanks
    @zuckschwerdt!
  * Fix db port script to not assume postgres tables are in the public schema
    (PR #2024) Thanks @jerrykan!
  * Fix getting latest device IP for user with no devices (PR #2118)
  * Fix rejection of invites to unreachable servers (PR #2145)
  * Fix code for reporting old verify keys in synapse (PR #2156)
  * Fix invite state to always include all events (PR #2163)
  * Fix bug where synapse would always fetch state for any missing event (PR #2170)
  * Fix a leak with timed out HTTP connections (PR #2180)
  * Fix bug where we didn't time out HTTP requests to ASes  (PR #2192)
  * Fix joining rooms over federation where not all servers in the room saw the
    new server had joined (PR #2094)
  * Fix bug where current_state_events renamed to current_state_ids (PR #1849)
  * Fix routing loop when fetching remote media (PR #1992)
  * Fix current_state_events table to not lie (PR #1996)
  * Fix CAS login to handle PartialDownloadError (PR #1997)
  * Fix assertion to stop transaction queue getting wedged (PR #2010)
  * Fix presence to fallback to last_active_ts if it beats the last sync time.
    Thanks @Half-Shot! (PR #2014)
  * Fix bug when federation received a PDU while a room join is in progress (PR
    [#2016])
  * Fix resetting state on rejected events (PR #2025)
  * Fix installation issues in readme. Thanks @ricco386 (PR #2037)
  * Fix caching of remote servers' signature keys (PR #2042)
  * Fix some leaking log context (PR #2048, #2049, #2057, #2058)
  * Fix rejection of invites not reaching sync (PR #2056)
  * Fix bug in handling of incoming device list updates over federation.
  * Features:
  * Add Group Server (PR #2352, #2363, #2374, #2377, #2378, #2382, #2410, #2426,
    [#2430], #2454, #2471, #2472, #2544)
  * Add support for channel notifications (PR #2501)
  * Add basic implementation of backup media store (PR #2538)
  * Add config option to auto-join new users to rooms (PR #2545)
  * Add a frontend proxy worker (PR #2344)
  * Add support for event_id_only push format (PR #2450)
  * Add a PoC for filtering spammy events (PR #2456)
  * Add a config option to block all room invites (PR #2457)
  * Add a user directory API (PR #2252, and many more)
  * Add shutdown room API to remove room from local server (PR #2291)
  * Add API to quarantine media (PR #2292)
  * Add new config option to not send event contents to push servers (PR #2301)
    Thanks to @cjdelisle!
  * Add per user rate-limiting overrides (PR #2208)
  * Add config option to limit maximum number of events requested by ``/sync``
    and ``/messages`` (PR #2221) Thanks to @psaavedra!
  * Add username availability checker API (PR #2183)
  * Add read marker API (PR #2120)
  * Add delete_devices API (PR #1993)
  * Add phone number registration/login support (PR #1994, #2055)
  * Add some administration functionalities. Thanks to morteza-araby! (PR #1784)
  * Changes:
  * Make the spam checker a module (PR #2474)
  * Delete expired url cache data (PR #2478)
  * Ignore incoming events for rooms that we have left (PR #2490)
  * Allow spam checker to reject invites too (PR #2492)
  * Add room creation checks to spam checker (PR #2495)
  * Spam checking: add the invitee to user_may_invite (PR #2502)
  * Process events from federation for different rooms in parallel (PR #2520)
  * Allow error strings from spam checker (PR #2531)
  * Improve error handling for missing files in config (PR #2551)
  * Make 'affinity' package optional, as it is not supported on some platforms
  * Use bcrypt module instead of py-bcrypt (PR #2288) Thanks to @kyrias!
  * Improve performance of generating push notifications (PR #2343, #2357, #2365,
    [#2366], #2371)
  * Improve DB performance for device list handling in sync (PR #2362)
  * Include a sample prometheus config (PR #2416)
  * Document known to work postgres version (PR #2433) Thanks to @ptman!
  * Improve performance of storing user IPs (PR #2307, #2308)
  * Slightly improve performance of verifying access tokens (PR #2320)
  * Slightly improve performance of event persistence (PR #2321)
  * Increase default cache factor size from 0.1 to 0.5 (PR #2330)
  * Various performance fixes (PR #2177, #2233, #2230, #2238, #2248, #2256,
    [#2274])
  * Deduplicate sync filters (PR #2219) Thanks to @krombel!
  * Correct a typo in UPGRADE.rst (PR #2231) Thanks to @aaronraimist!
  * Add count of one time keys to sync stream (PR #2237)
  * Only store event_auth for state events (PR #2247)
  * Store URL cache preview downloads separately (PR #2299)
  * Various small performance fixes (PR #2201, #2202, #2224, #2226, #2227, #2228,
    [#2229])
  * Update username availability checker API (PR #2209, #2213)
  * When purging, don't de-delta state groups we're about to delete (PR #2214)
  * Documentation to check synapse version (PR #2215) Thanks to @hamber-dick!
  * Add an index to event_search to speed up purge history API (PR #2218)
  * Always mark remotes as up if we receive a signed request from them (PR #2190)
  * Enable guest access for the 3pl/3pid APIs (PR #1986)
  * Add setting to support TURN for guests (PR #2011)
  * Various performance improvements (PR #2075, #2076, #2080, #2083, #2108,
    [#2158], #2176, #2185)
  * Make synctl a bit more user friendly (PR #2078, #2127) Thanks @APwhitehat!
  * Replace HTTP replication with TCP replication (PR #2082, #2097, #2098,
    [#2099], #2103, #2014, #2016, #2115, #2116, #2117)
  * Support authenticated SMTP (PR #2102) Thanks @DanielDent!
  * Add a counter metric for successfully-sent transactions (PR #2121)
  * Propagate errors sensibly from proxied IS requests (PR #2147)
  * Add more granular event send metrics (PR #2178)
  * Use JSONSchema for validation of filters. Thanks @pik! (PR #1783)
  * Reread log config on SIGHUP (PR #1982)
  * Speed up public room list (PR #1989)
  * Add helpful texts to logger config options (PR #1990)
  * Minor ``/sync`` performance improvements. (PR #2002, #2013, #2022)
  * Add some debug to help diagnose weird federation issue (PR #2035)
  * Correctly limit retries for all federation requests (PR #2050, #2061)
  * Don't lock table when persisting new one time keys (PR #2053)
  * Reduce some CPU work on DB threads (PR #2054)
  * Cache hosts in room (PR #2060)
  * Batch sending of device list pokes (PR #2063)
  * Speed up persist event path in certain edge cases (PR #2070)
  * Reduce database table sizes (PR #1873, #1916, #1923, #1963)
  * Update contrib/ to not use syutil. Thanks to andrewshadura! (PR #1907)
  * Don't fetch current state when sending an event in common case (PR #1955)</changelog>
  <changelog author="okurz@suse.com" date="1511179200">- Update to version v0.25.1:
  * Bug fixes:
  * Fix login with LDAP and other password provider modules (PR #2678). Thanks to @jkolo!
  * Fix port script (PR #2673)
  * Fix port script (PR #2577)
  * Fix error when running synapse with no logfile (PR #2581)
  * Fix UI auth when deleting devices (PR #2591)
  * Fix typo when checking if user is invited to group (PR #2599)
  * Fix the port script to drop NUL values in all tables (PR #2611)
  * Fix appservices being backlogged and not receiving new events due to a bug in
    notify_interested_services (PR #2631) Thanks to @xyzz!
  * Fix updating rooms avatar/display name when modified by admin (PR #2636)
  * Thanks to @farialima!
  * Fix bug in state group storage (PR #2649)
  * Fix 500 on invalid utf-8 in request (PR #2663)
  * Features:
  * Add is_public to groups table to allow for private groups (PR #2582)
  * Add a route for determining who you are (PR #2668) Thanks to @turt2live!
  * Add more features to the password providers (PR #2608, #2610, #2620,
    [#2622], #2623, #2624, #2626, #2628, #2629)
  * Add a hook for custom rest endpoints (PR #2627)
  * Add API to update group room visibility (PR #2651)
  * Changes:
  * Ignore tags when generating URL preview descriptions (PR #2576) Thanks to
    @maximevaillancourt!
  * Register some /unstable endpoints in /r0 as well (PR #2579) Thanks to @krombel!
  * Support /keys/upload on /r0 as well as /unstable (PR #2585)
  * Front-end proxy: pass through auth header (PR #2586)
  * Allow ASes to deactivate their own users (PR #2589)
  * Remove refresh tokens (PR #2613)
  * Automatically set default displayname on register (PR #2617)
  * Log login requests (PR #2618)
  * Always return is_public in the /groups/:group_id/rooms API (PR #2630)
  * Avoid no-op media deletes (PR #2637) Thanks to @spantaleev!
  * Fix various embarrassing typos around user_directory and add some doc. (PR #2643)
  * Return whether a user is an admin within a group (PR #2647)
  * Namespace visibility options for groups (PR #2657)
  * Downcase UserIDs on registration (PR #2662)
  * Cache failures when fetching URL previews (PR #2669)
  * Add patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch</changelog>
  <changelog author="okurz@suse.com" date="1515326400">- Update to version v0.26.0:
  * Bug fixes:
  * Fix database port script (PR #2673)
  * Fix internal server error on login with ldap_auth_provider (PR #2678) Thanks
    to @jkolo!
  * Fix error on sqlite 3.7 (PR #2697)
  * Fix OPTIONS on preview_url (PR #2707)
  * Fix error handling on dns lookup (PR #2711)
  * Fix wrong avatars when inviting multiple users when creating room (PR #2717)
  * Fix 500 when joining matrix-dev (PR #2719)
  * Features:
  * Add ability for ASes to publicise groups for their users (PR #2686)
  * Add all local users to the user_directory and optionally search them (PR
  * #2723)
  * Add support for custom login types for validating users (PR #2729)
  * Changes:
  * Update example Prometheus config to new format (PR #2648) Thanks to
    @krombel!
  * Rename redact_content option to include_content in Push API (PR #2650)
  * Declare support for r0.3.0 (PR #2677)
  * Improve upserts (PR #2684, #2688, #2689, #2713)
  * Improve documentation of workers (PR #2700)
  * Improve tracebacks on exceptions (PR #2705)
  * Allow guest access to group APIs for reading (PR #2715)
  * Support for posting content in federation_client script (PR #2716)
  * Delete devices and pushers on logouts etc (PR #2722)</changelog>
  <changelog author="okurz@suse.com" date="1522324800">- Update to version v0.27.2:
  * Bug fixes:
  * Fix bug which broke TCP replication between workers (PR #3015)
  * Fix broken ldap_config config option (PR #2683) Thanks to @seckrv!
  * Fix error message when user is not allowed to unban (PR #2761) Thanks to
    @turt2live!
  * Fix publicised groups GET API (singular) over federation (PR #2772)
  * Fix user directory when using user_directory_search_all_users config
    option (PR #2803, #2831)
  * Fix error on /publicRooms when no rooms exist (PR #2827)
  * Fix bug in quarantine_media (PR #2837)
  * Fix url_previews when no Content-Type is returned from URL (PR #2845)
  * Fix rare race in sync API when joining room (PR #2944)
  * Fix slow event search, switch back from GIST to GIN indexes (PR #2769,
    [#2848])
  * Fix bug where an invalid event caused server to stop functioning
    correctly, due to parsing and serializing bugs in ujson library.
  * Features:
  * Add ability for ASes to override message send time (PR #2754)
  * Add support for custom storage providers for media repository (PR #2867,
    [#2777], #2783, #2789, #2791, #2804, #2812, #2814, #2857, #2868, #2767)
  * Add purge API features, see docs/admin_api/purge_history_api.rst for
    full details (PR #2858, #2867, #2882, #2946, #2962, #2943)
  * Add support for whitelisting 3PIDs that users can register. (PR #2813)
  * Add /room/{id}/event/{id} API (PR #2766)
  * Add an admin API to get all the media in a room (PR #2818) Thanks to
    @turt2live!
  * Add federation_domain_whitelist option (PR #2820, #2821)
  * Changes:
  * Continue to factor out processing from main process and into worker
    processes. See updated docs/workers.rst (PR #2892 - #2904, #2913, #2920
  - #2926, #2947, #2847, #2854, #2872, #2873, #2874, #2928, #2929, #2934,
    [#2856], #2976 - #2984, #2987 - #2989, #2991 - #2993, #2995, #2784)
  * Ensure state cache is used when persisting events (PR #2864, #2871,
    [#2802], #2835, #2836, #2841, #2842, #2849)
  * Change the default config to bind on both IPv4 and IPv6 on all platforms
    (PR #2435) Thanks to @silkeh!
  * No longer require a specific version of saml2 (PR #2695) Thanks to @okurz!
  * Remove verbosity/log_file from generated config (PR #2755)
  * Add and improve metrics and logging (PR #2770, #2778, #2785, #2786,
    [#2787], #2793, #2794, #2795, #2809, #2810, #2833, #2834, #2844, #2965,
    [#2927], #2975, #2790, #2796, #2838)
  * When using synctl with workers, don't start the main synapse
    automatically (PR #2774)
  * Minor performance improvements (PR #2773, #2792)
  * Use a connection pool for non-federation outbound connections (PR #2817)
  * Make it possible to run unit tests against postgres (PR #2829)
  * Update pynacl dependency to 1.2.1 or higher (PR #2888) Thanks to @bachp!
  * Remove ability for AS users to call /events and /sync (PR #2948)
  * Use bcrypt.checkpw (PR #2949) Thanks to @krombel!
- Change spec-file to use service downloaded and recompressed file directly
- Remove patch synapse_python_dependencies_allow_higher_versions_of_pysaml2.patch
  now included in upstream changes</changelog>
  <changelog author="okurz@suse.com" date="1523880000">- Update to version v0.27.4:
  * Bug fixes:
  * URL quote path segments over federation (#3082)
  * Add room_id to the response of rooms/{roomId}/join (PR #2986) Thanks to @jplatte!
  * Fix replication after switch to simplejson (PR #3015)
  * Fix replication after switch to simplejson (PR #3015)
  * 404 correctly on missing paths via NoResource (PR #3022)
  * Fix error when claiming e2e keys from offline servers (PR #3034)
  * fix tests/storage/test_user_directory.py (PR #3042)
  * use PUT instead of POST for federating groups/m.join_policy (PR #3070) Thanks to @krombel!
  * postgres port script: fix state_groups_pkey error (PR #3072)
  * Features:
  * Add joinability for groups (PR #3045)
  * Implement group join API (PR #3046)
  * Add counter metrics for calculating state delta (PR #3033)
  * R30 stats (PR #3041)
  * Measure time it takes to calculate state group ID (PR #3043)
  * Add basic performance statistics to phone home (PR #3044)
  * Add response size metrics (PR #3071)
  * phone home cache size configurations (PR #3063)
  * Changes:
  * Update canonicaljson dependency (#3095)
  * Add a blurb explaining the main synapse worker (PR #2886) Thanks to @turt2live!
  * Replace old style error catching with 'as' keyword (PR #3000) Thanks to @NotAFile!
  * Use .iter* to avoid copies in StateHandler (PR #3006)
  * Linearize calls to _generate_user_id (PR #3029)
  * Remove last usage of ujson (PR #3030)
  * Use simplejson throughout (PR #3048)
  * Use static JSONEncoders (PR #3049)
  * Remove uses of events.content (PR #3060)
  * Improve database cache performance (PR #3068)</changelog>
  <changelog author="okurz@suse.com" date="1524225600">- Introduce package self-test based on _multibuild</changelog>
  <changelog author="okurz@suse.com" date="1524830400">- Disable web-client for package self-test to get rid of unfulfilled dependency</changelog>
  <changelog author="okurz@suse.com" date="1525435200">- Update to version v0.28.1:
  * SECURITY UPDATE
    Clamp the allowed values of event depth received over federation to be
    [0, 2^63 - 1]. This mitigates an attack where malicious events
    injected with depth = 2^63 - 1 render rooms unusable. Depth is used to
    determine the cosmetic ordering of events within a room, and so the ordering
    of events in such a room will default to using stream_ordering rather than depth
    (topological_ordering).
    This is a temporary solution to mitigate abuse in the wild, whilst a long term solution
    is being implemented to improve how the depth parameter is used.
    Full details at
    https://docs.google.com/document/d/1I3fi2S-XnpO45qrpCsowZv8P8dHcNZ4fsBsbOW7KABI/edit#
    Pin Twisted to &lt;18.4 until we stop using the private _OpenSSLECCurve API.
  * Bug Fixes:
  * Return 401 for invalid access_token on logout (PR #2938) Thanks to @dklug!
  * Return a 404 rather than a 500 on rejoining empty rooms (PR #3080)
  * fix federation_domain_whitelist (PR #3099)
  * Avoid creating events with huge numbers of prev_events (PR #3113)
  * Reject events which have lots of prev_events (PR #3118)
  * Fix quarantine media admin API and search reindex (PR #3130)
  * Fix media admin APIs (PR #3134)
  * Features:
  * Add metrics for event processing lag (PR #3090)
  * Add metrics for ResponseCache (PR #3092)
  * Changes:
  * Synapse on PyPy (PR #2760) Thanks to @Valodim!
  * move handling of auto_join_rooms to RegisterHandler (PR #2996) Thanks to @krombel!
  * Improve handling of SRV records for federation connections (PR #3016) Thanks to @silkeh!
  * Document the behaviour of ResponseCache (PR #3059)
  * Preparation for py3 (PR #3061, #3073, #3074, #3075, #3103, #3104, #3106, #3107, #3109, #3110) Thanks to @NotAFile!
  * update prometheus dashboard to use new metric names (PR #3069) Thanks to @krombel!
  * use python3-compatible prints (PR #3074) Thanks to @NotAFile!
  * Send federation events concurrently (PR #3078)
  * Limit concurrent event sends for a room (PR #3079)
  * Improve R30 stat definition (PR #3086)
  * Send events to ASes concurrently (PR #3088)
  * Refactor ResponseCache usage (PR #3093)
  * Clarify that SRV may not point to a CNAME (PR #3100) Thanks to @silkeh!
  * Use str(e) instead of e.message (PR #3103) Thanks to @NotAFile!
  * Use six.itervalues in some places (PR #3106) Thanks to @NotAFile!
  * Refactor store.have_events (PR #3117)</changelog>
  <changelog author="okurz@suse.com" date="1528891200">- Fix security bug in the get_missing_events federation AP
  (CVE-2018-12291, boo#1096833)
- Add boo1096833_event_visibility_rules_not_applied_correctly.patch</changelog>
</package>
<package pkgid="cfcd27de8158f7324951672ee186642a505a640280eefe50b0a64d99df7498b4" name="python3-mitmproxy" arch="noarch">
  <version epoch="0" ver="3.0.4" rel="lp150.2.3.1"/>
  <changelog author="fcastelli@suse.com" date="1350388800">- created initial package for version 0.8</changelog>
  <changelog author="fcastelli@suse.com" date="1354104000">- update to git rev 8c976ac7f0.</changelog>
  <changelog author="fcastelli@suse.com" date="1354104001">- Fix build on 12.2 x86_64.</changelog>
  <changelog author="fcastelli@suse.com" date="1354190400">- Ensure libmproxy is found
- Require python-netlib at runtime</changelog>
  <changelog author="fcastelli@suse.com" date="1355140800">- Cleanup .spec file</changelog>
  <changelog author="fcastelli@suse.com" date="1355400000">- Another cleanup of the .spec file</changelog>
  <changelog author="freitag@owncloud.com" date="1425470400">- Fixed license.</changelog>
  <changelog author="freitag@owncloud.com" date="1425902400">- Fixed download URL to use the one from python.org
- Fixed group
- Year in the header</changelog>
  <changelog author="freitag@owncloud.com" date="1437912000">- Update to upstream version 0.13
  * Upstream certificate validation.
  * Add HTTP transparent proxy mode.
  * Add ~src and ~dst REGEX filters
  * mitmproxy console: change g/G keyboard shortcuts to match less.
  * mitmproxy console: Flow marking and unmarking.
  * mitmproxy console: add marking of flows
  * Remove the certforward feature</changelog>
  <changelog author="freitag@owncloud.com" date="1453896000">- Fix a repo in requires list</changelog>
  <changelog author="aloisio@gmx.com" date="1482753600">- Switched to python3 package
- Update to version  1.0
  * All mitmproxy tools are now Python 3 only! We plan to
    support Python 3.5 and higher.
  * Web-Based User Interface: Mitmproxy now offically has a
    web-based user interface called mitmweb. We consider it
    stable for all features currently exposed in the UI,
    but it still misses a lot of mitmproxy?s options.
  * Windows Compatibility: With mitmweb, mitmproxy is now
    useable on Windows.
    We are also introducing an installer (kindly sponsored
    by BitRock) that simplifies setup.
  * Configuration: The config file format is now a single
    YAML file. In most cases, converting to the new format
    should be trivial - please see the docs for more
    information.
  * Console: Significant UI improvements - including sorting
    of flows by size, type and url, status bar improvements,
    much faster indentation for HTTP views, and more.
  * HTTP/2: Significant improvements, but is temporarily
    disabled by default due to wide-spread protocol
    implementation errors on some large website
  * WebSocket: The protocol implementation is now mature,
    and is enabled by
    default. Complete UI support is coming in the next
    release. Hooks for message interception and manipulation
    are available.
  * A myriad of other small improvements throughout the
    project.
  version 0.18:
  * Python 3 Compatibility for mitmproxy and pathod (Shadab
    Zafar, GSoC 2016)
  * Major improvements to mitmweb (Clemens Brunner &amp; Jason
    Hao, GSoC 2016)
  * Internal Core Refactor: Separation of most features into
    isolated Addons
  * Initial Support for WebSockets
  * Improved HTTP/2 Support
  * Reverse Proxy Mode now automatically adjusts host
    headers and TLS Server Name Indication
  * Improved HAR export
  * Improved export functionality for curl, python code, raw
    http etc.
  * Flow URLs are now truncated in the console for better
    visibility
  * New filters for TCP, HTTP and marked flows.
  * Mitmproxy now handles comma-separated Cookie headers
  * Merge mitmproxy and pathod documentation
  * Mitmdump now sanitizes its console output to not include
    control characters
  * Improved message body handling for HTTP messages:
    .raw_content provides the message body as seen on the
    wire
    .content provides the decompressed body (e.g. un-gzipped)
    .text provides the body decompressed and decoded body
  * New HTTP Message getters/setters for cookies and form
    contents.
  * Add ability to view only marked flows in mitmproxy
  * Improved Script Reloader (Always use polling, watch for
    whole directory)
  * Use tox for testing
  * Unicode support for tnetstrings
  * Add dumpfile converters for mitmproxy versions 0.11 and
    version 0.12
  * Numerous bugfixes
  version 0.17:
  * Simplify repository and release structure. mitmproxy now
    comes as a single package, including netlib and pathod.
  * Rename the Python package from libmproxy to mitmproxy.
  * New option to add server certs to client chain
    (CVE-2016-2402, John Kozyrakis)
  * Enable HTTP/2 by default (Thomas Kriechbaumer)
  * Improved HAR extractor (Shadab Zafar)
  * Add icon for OSX and Windows binaries
  * Add content view for query parameters (Will Coster)
  * Initial work on Python 3 compatibility
  * locust.io export (Zohar Lorberbaum)
  * Fix XSS vulnerability in HTTP errors (Will Coster)
  * Numerous bugfixes and minor improvements
  version 0.16:
  * Completely revised HTTP2 implementation based on
    hyper-h2 (Thomas Kriechbaumer)
  * Export flows as cURL command, Python code or raw HTTP
    (Shadab Zafar)
  * Fixed compatibility with the Android Emulator (Will
    Coster)
  * Script Reloader: Inline scripts are reloaded
    automatically if modified (Matthew Shao)
  * Inline script hooks for TCP mode (Michael J. Bazzinotti)
  * Add default ciphers to support iOS9 App Transport
    Security (Jorge Villacorta)
  * Basic Authentication for mitmweb (Guillem Anguera)
  * Exempt connections from interception based on TLS Server
    Name Indication (David Weinstein)
  * Provide Python Wheels for faster installation
  * Numerous bugfixes and minor improvements
  version 0.15:
  * Support for loading and converting older dumpfile
    formats (0.13 and up)
  * Content views for inline script (@chrisczub)
  * Better handling of empty header values (Benjamin
    Lee/@bltb)
  * Fix a gnarly memory leak in mitmdump
  * A number of bugfixes and small improvements
  version 0.14:
  * Statistics: 399 commits, 13 contributors, 79 closed
    issues, 37 closed
    PRs, 103 days
  * Docs: Greatly updated docs now hosted on ReadTheDocs!
    http://docs.mitmproxy.org
  * Docs: Fixed Typos, updated URLs etc. (Nick Badger, Ben
    Lerner, Choongwoo
    Han, onlywade, Jurriaan Bremer)
  * mitmdump: Colorized TTY output
  * mitmdump: Use mitmproxy's content views for
    human-readable output (Chris Czub)
  * mitmproxy and mitmdump: Support for displaying UTF8
    contents
  * mitmproxy: add command line switch to disable mouse
    interaction (Timothy Elliott)
  * mitmproxy: bug fixes (Choongwoo Han, sethp-jive,
    FreeArtMan)
  * mitmweb: bug fixes (Colin Bendell)
  * libmproxy: Add ability to fall back to TCP passthrough
    for non-HTTP connections.
  * libmproxy: Avoid double-connect in case of TLS Server
    Name Indication. This yields a massive speedup for
    TLS handshakes.
  * libmproxy: Prevent unneccessary upstream connections
    (macmantrl)
  * Inline Scripts: New API for HTTP Headers:
    http://docs.mitmproxy.org/en/latest/dev/models.html#netlib.http.Headers
  * Inline Scripts: Properly handle exceptions in `done` hook
  * Inline Scripts: Allow relative imports, provide
    `__file__`
  * Examples: Add probabilistic TLS passthrough as an inline
    script
  * netlib: Refactored HTTP protocol handling code
  * netlib: ALPN support
  * netlib: fixed a bug in the optional certificate
    verification.
  * netlib: Initial Python 3.5 support (this is the first
    prerequisite for 3.x support in mitmproxy)
- Added python3-mitmproxy-rpmlintrc</changelog>
  <changelog author="aloisio@gmx.com" date="1486036800">- Update to version 1.0.2
  * Fix compatibility with Python 3.5.0
  1.0.1:
  * Fix compatibility with Python 3.6</changelog>
  <changelog author="aloisio@gmx.com" date="1487678400">- Update to version 2.0.0
  * HTTP/2 is now enabled by default.
  * Image ContentView: Parse images with Kaitai Struct
    (kaitai.io) instead of Pillow.
    This simplifies installation, reduces binary size, and
    allows parsing in pure Python.
  * Web: Add missing flow filters.
  * Add transparent proxy support for OpenBSD.
  * Check the mitmproxy CA for expiration and warn the user to
    regenerate it if necessary.
  * Testing: Tremendous improvements, enforced 100% coverage
    for large parts of the  codebase, increased overall
    coverage.
  * Enforce individual coverage: one source file -&gt; one test
    file with 100% coverage.
  * A myriad of other small improvements throughout the
    project.
  * Numerous bugfixes.
- Added python3-mitmproxy-no_git.patch</changelog>
  <changelog author="aloisio@gmx.com" date="1489579200">- Update to version 2.0.1
  * http2: fix h2 header normalization test (#2080)</changelog>
  <changelog author="aloisio@gmx.com" date="1493380800">- Update to version 2.0.2
  * Fix mitmweb's Content-Security-Policy to work with Chrome
    58+ (#2284)</changelog>
  <changelog author="aloisio@gmx.com" date="1519300800">- Update to version 3.0.3
  * A minor release that actually includes the fix meant for 3.0.2.
  version 3.0.2
  * Fix an issue that caused mitmproxy to lose keyboard control
    after spawning an external editor.
  version 3.0.1
  * A quick point release to fix a bug that broke quoted arguments
    in the console command editor.
  version 3.0
  Major Changes:
  * Commands: A consistent, typed mechanism that allows addons to
    expose actions to users.
  * Options: A typed settings store for use by mitmproxy and
    addons.
  * Shift most of mitmproxy's own functionality into addons.
  * Major improvements to mitmproxy console, including an almost
    complete rewrite of the user interface, integration of
    commands, key bindings, and multi-pane layouts.
  * Major Improvements to mitmproxy?s web interface, mitmweb.
    (Matthew Shao, Google Summer of Code 2017)
  * Major Improvements to mitmproxy?s content views and protocol
    layers (Ujjwal Verma, Google Summer of Code 2017)
  * Faster JavaScript and CSS beautifiers. (Ujjwal Verma)
  Minor Changes:
  * Vastly improved JavaScript test coverage (Matthew Shao)
  * Options editor for mitmweb (Matthew Shao)
  * Static web-based flow viewer (Matthew Shao)
  * Request streaming for HTTP/1.x and HTTP/2 (Ujjwal Verma)
  * Implement more robust content views using Kaitai Struct
    (Ujjwal Verma)
  * Protobuf decoding now works without protoc being installed on
    the host system (Ujjwal Verma)
  * PNG, GIF, and JPEG can now be parsed without Pillow, which
    simplifies mitmproxy installation and moves parsing from unsafe
    C to pure Python (Ujjwal Verma)
  * Add parser for ICO files (Ujjwal Verma)
  * Migrate WebSockets implementation to wsproto. This reduces
    code size and adds WebSocket compression support.
    (Ujjwal Verma)
  * Add ?split view? to split mitmproxy?s UI into two separate
    panes.
  * Add key binding viewer and editor
  * Add a command to spawn a preconfigured Chrome browser instance
    from mitmproxy
  * Fully support mitmproxy under the Windows Subsystem for Linux
    (WSL), work around display errors
  * Add XSS scanner addon (@ddworken)
  * Add ability to toggle interception (@mattweidner)
  * Numerous documentation improvements (@pauloromeira, @rst0git,
    @rgerganov, @fulldecent, @zhigang1992, @F1ashhimself,
    @vinaydargar, @jonathanrfisher1, @BasThomas, @LuD1161,
    @ayamamori, @TomTasche)
  * Add filters for websocket flows (@s4chin)
  * Make it possible to create a response to CONNECT requests in
    http_connect (@mengbiping)
  * Redirect stdout in scripts to ctx.log.warn (@nikofil)
  * Fix a crash when clearing the event log (@krsoninikhil)
  * Store the generated certificate for each flow (@dlenski)
  * Add --keep-host-header to retain the host header in reverse
    proxy mode (@krsoninikhil)
  * Fix setting palette options (@JordanLoehr)
  * Fix a crash with brotli encoding (@whackashoe)
  * Provide certificate installation instructions on mitm.it
    (@ritiek)
  * Fix a bug where we did not properly fall back to IPv4 when
    IPv6 is unavailable (@titeuf87)
  * Fix transparent mode on IPv6-enabled macOS systems (@Ga-ryo)
  * Fix handling of HTTP messages with multiple Content-Length
    headers (@surajt97)
  * Fix IPv6 authority form parsing in CONNECT requests (@r1b)
  * Fix event log display in mitmweb (@syahn)
  * Remove private key from PKCS12 file in ~/.mitmproxy (@ograff).
  * Add LDAP as a proxy authentication backend (@charlesdhdt)
  * Use mypy to check the whole codebase (@iharsh234)
  * Fix a crash when duplicating flows (@iharsh234)
  * Fix testsuite when the path contains a ?.? (@felixonmars)
  * Store proxy authentication with flows (@lymanZerga11)
  * Match ~d and ~u filters against pretty_host (@dequis)
  * Update WBXML content view (@davidpshaw)
  * Handle HEAD requests for mitm.it to support Chrome in
    transparent mode on iOS (@tomlabaude)
  * Update dns spoofing example to use --keep-host-header
    (@krsoninikhil)
  * Call error handler on HTTPException (@tarnacious)
  * Make it possible to remove TLS from upstream HTTP connections
  * Update to pyOpenSSL 17.5, cryptography 2.1.4, and OpenSSL
    1.1.0g
  * Make it possible to retroactively increase log verbosity.
  * Make logging from addons thread-safe
  * Tolerate imports in user scripts that match hook names (`from
    mitmproxy import log`)
  * Update mitmweb to React 16, which brings performance
    improvements
  * Fix a bug where reverting duplicated flows crashes mitmproxy
  * Fix a bug where successive requests are sent to the wrong host
    after a request has been redirected.
  * Fix a bug that binds outgoing connections to the wrong
    interface
  * Fix a bug where custom certificates are ignored in reverse
    proxy mode
  * Fix import of flows that have been created with mitmproxy 0.17
  * Fix formatting of (IPv6) IP addresses in a number of places
  * Fix replay for HTTP/2 flows
  * Decouple mitmproxy version and flow file format version
  * Fix a bug where ?mitmdump -nr? does not exit automatically
  * Fix a crash when exporting flows to curl
  * Fix formatting of sticky cookies
  * Improve script reloading reliability by polling the filesystem
    instead of using watchdog
  * Fix a crash when refreshing Set-Cookie headers
  * Add connection indicator to mitmweb to alert users when the
    proxy server stops running
  * Add support for certificates with cyrillic domains
  * Simplify output of mitmproxy --version
  * Add Request.make to simplify request creation in scripts
  * Pathoc: Include a host header on CONNECT requests
  * Remove HTML outline contentview (#2572)
  * Remove Python and Locust export (#2465)
  * Remove emojis from tox.ini because flake8 cannot parse that. :(
- Dropped python-mitmproxy-no_git.patch (no longer necessary)</changelog>
  <changelog author="aloisio@gmx.com" date="1522929600">- Update to version 3.0.4
  * Fix an issue that caused mitmproxy to not retry HTTP requests
    on timeout.
  * Various other fixes (@kira0204, @fenilgandhi, @tran-tien-dat,
    @smonami, @luzpaz, @fristonio, @kajojify, @Oliver-Fish,
    @hcbarry, @jplochocki, @MikeShi42, @ghillu, @emilstahl)</changelog>
  <changelog author="aloisio@gmx.com" date="1533124800">- Added protect_against_DNS_rebinding.patch and
  improve_DNS_rebinding_protection_support_IPv6.patch to address
  CVE-2018-14505 (fixes boo#1102178)
- Added update_ldap3_dependency.patch for the package to work
  with python3-ldap3 2.5 (fixes boo#1101457)
- Minor spec improvements</changelog>
</package>
<package pkgid="08fdcc4075fc7902fb121c39c0f6f089d69b8e60d60922de0305d62cd19c2f58" name="python3-nbxmpp" arch="noarch">
  <version epoch="0" ver="0.6.6" rel="lp150.2.3.1"/>
  <changelog author="nekolayer@yandex.ru" date="1365249600">- Initial package.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1366459200">- Fixed up to submit.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1376568000">- Heads up: Python2 / Python3 parallel installation.
  %fdupes will not work if files are installed via %doc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.2
  + Add some namespace
  + do TLS handshake without blocking
  + store all SSL errors instead of only last one
- Set correct Group : Devel/Languages/Python
- Use download Url as source
- Remove unwanted comments in specfile
- Package the two directories in /doc to avoid providing epydoc build
  configuration file</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1413028800">- Update to 0.5.1 (changes since 0.2):
  * Fix printing network errors in a non-utf-8 console
  * Support both python2 and python3
  * Fix storing server certificate when there is no error
  * Ability to configure TLS protocol version
  * Add support for SCRAM-SHA-1-PLUS
  * Security improvements
  * Improve security level
  * Ability to configure cipher list
  * Store only depth 0 SSL certificate</changelog>
  <changelog author="p.drouand@gmail.com" date="1413547200">- Correct Group is Development/Languages/Python
- Remove depreciated %py_requires
- Do not pass -O1 --skip-build options
- Call python instead of python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1420891200">- Update to 0.5.2:
  * Fix BOSH HTTP requests.
  * Fix handling of binary SASL data for mechanism GSSAPI.
  * Update MAM namespace.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437393600">- Update to 0.5.3:
  * Fix issue with pyopenssl 0.15.1.
  * Fix decoding issues.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1441281600">- Shouldn't be noarch in SLE 11</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.5.4:
  * Fix SCRAM authentication.
  * Fix BOSH connection with UTF-8 messages.
  * Fix smacks implementation.
  * Use uuid in stanza ids.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495022400">- Update to version 0.5.5:
  * Add some namespaces.
  * Some cleanup.
- Update for the multipython build.</changelog>
  <changelog author="vilene@posteo.net" date="1509883200">- Update to version 0.6.0:
  * Add new getOriginID/SetOriginID method for Messages
  * Add new getJid() method for Protocol
  * getTagAttr() accepts now a namespace argument
  * Add new `protocol` argument for getTag()
  * Add new XEP Namespaces
  * Support XEP-0198 Version 1.5.2</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Update to version 0.6.1
  * Add new getStanzaIDAttrs method
  * Fix BOSH connexion
  * stop using PyOpenSSL for random generator</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 0.6.4 (changes since 0.6.1):
  * Correctly load client certs.
  * Warn on any error in the certificate chain.
  * Fixed a traceback loop.
  * Add ALPN and SNI support for when using DirectTLS.
  * Fix SOCKS5 usage.
  * Bugfixes.</changelog>
  <changelog author="tbro@opensuse.org" date="1526040000">- Update to version 0.6.5 (30 April 2018)
  * Fix BOSH usage (don't set ALPN)
  * Better handling of certificate files
  * needed for newest gajim version 1.0.2, as it broke with 0.6.4</changelog>
  <changelog author="mvetter@suse.com" date="1526990400">- Update to 0.6.6:
  * Record all SSL errors instead of only the first
  * Pass arguments to plugin/plugout methods
  * Allow the Roster to be initalized without requesting it from the server</changelog>
  <changelog author="tchvatal@suse.com" date="1526990401">- Use setuptools not devel to reduce dependency requirements</changelog>
</package>
<package pkgid="371ea5f28f7a688fde5a2aaca9f31677c4e1cf6371274444455d8a45895ae657" name="python3-nbxmpp-doc" arch="noarch">
  <version epoch="0" ver="0.6.6" rel="lp150.2.3.1"/>
  <changelog author="nekolayer@yandex.ru" date="1365249600">- Initial package.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1366459200">- Fixed up to submit.</changelog>
  <changelog author="dap.darkness@gmail.com" date="1376568000">- Heads up: Python2 / Python3 parallel installation.
  %fdupes will not work if files are installed via %doc.</changelog>
  <changelog author="p.drouand@gmail.com" date="1386504000">- Update to version 0.2
  + Add some namespace
  + do TLS handshake without blocking
  + store all SSL errors instead of only last one
- Set correct Group : Devel/Languages/Python
- Use download Url as source
- Remove unwanted comments in specfile
- Package the two directories in /doc to avoid providing epydoc build
  configuration file</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1413028800">- Update to 0.5.1 (changes since 0.2):
  * Fix printing network errors in a non-utf-8 console
  * Support both python2 and python3
  * Fix storing server certificate when there is no error
  * Ability to configure TLS protocol version
  * Add support for SCRAM-SHA-1-PLUS
  * Security improvements
  * Improve security level
  * Ability to configure cipher list
  * Store only depth 0 SSL certificate</changelog>
  <changelog author="p.drouand@gmail.com" date="1413547200">- Correct Group is Development/Languages/Python
- Remove depreciated %py_requires
- Do not pass -O1 --skip-build options
- Call python instead of python2</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1420891200">- Update to 0.5.2:
  * Fix BOSH HTTP requests.
  * Fix handling of binary SASL data for mechanism GSSAPI.
  * Update MAM namespace.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1437393600">- Update to 0.5.3:
  * Fix issue with pyopenssl 0.15.1.
  * Fix decoding issues.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1441281600">- Shouldn't be noarch in SLE 11</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1476360000">- Update to version 0.5.4:
  * Fix SCRAM authentication.
  * Fix BOSH connection with UTF-8 messages.
  * Fix smacks implementation.
  * Use uuid in stanza ids.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495022400">- Update to version 0.5.5:
  * Add some namespaces.
  * Some cleanup.
- Update for the multipython build.</changelog>
  <changelog author="vilene@posteo.net" date="1509883200">- Update to version 0.6.0:
  * Add new getOriginID/SetOriginID method for Messages
  * Add new getJid() method for Protocol
  * getTagAttr() accepts now a namespace argument
  * Add new `protocol` argument for getTag()
  * Add new XEP Namespaces
  * Support XEP-0198 Version 1.5.2</changelog>
  <changelog author="frede@b1-systems.de" date="1513166400">- Update to version 0.6.1
  * Add new getStanzaIDAttrs method
  * Fix BOSH connexion
  * stop using PyOpenSSL for random generator</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 0.6.4 (changes since 0.6.1):
  * Correctly load client certs.
  * Warn on any error in the certificate chain.
  * Fixed a traceback loop.
  * Add ALPN and SNI support for when using DirectTLS.
  * Fix SOCKS5 usage.
  * Bugfixes.</changelog>
  <changelog author="tbro@opensuse.org" date="1526040000">- Update to version 0.6.5 (30 April 2018)
  * Fix BOSH usage (don't set ALPN)
  * Better handling of certificate files
  * needed for newest gajim version 1.0.2, as it broke with 0.6.4</changelog>
  <changelog author="mvetter@suse.com" date="1526990400">- Update to 0.6.6:
  * Record all SSL errors instead of only the first
  * Pass arguments to plugin/plugout methods
  * Allow the Roster to be initalized without requesting it from the server</changelog>
  <changelog author="tchvatal@suse.com" date="1526990401">- Use setuptools not devel to reduce dependency requirements</changelog>
</package>
<package pkgid="1917b6390de307ddad42b9bfb8a7c3bf60a27505f9830f95e2b8a84eb44539c8" name="python3-opencv" arch="x86_64">
  <version epoch="0" ver="3.3.1" rel="lp150.4.3.1"/>
  <changelog author="joerg.lorenzen@ki.tng.de" date="1456660800">- Added _constraints file to avoid random failures on small workers
  (at least for builds on PMBS)</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1457006400">- Added opencv_contrib_face-3.1.0.tar.bz2
  * This tarball is created to take only the face module from the
    contrib package. The Face module is required by libkface, which
    in its turn is required by digikam.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Add python 3 support</changelog>
  <changelog author="toddrme2178@gmail.com" date="1458561600">- Test for python versions greater than or equal to the current
  version.</changelog>
  <changelog author="martin.liska@suse.com" date="1464177600">- Apply upstream patch opencv-gcc6-disable-pch.patch to disable
  PCH for GCC6.</changelog>
  <changelog author="dimstar@opensuse.org" date="1465300800">- In case we build using GCC6 (or newer), add -mlra to CFLAGS to
  workaround gcc bug
  https://gcc.gnu.org/bugzilla/show_bug.cgi?id=71294.</changelog>
  <changelog author="olaf@aepfle.de" date="1469102400">- Enable ffmpeg support unconditional</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1495972800">- Update to OpenCV 3.2.0
  - Results from 11 GSoC 2016 projects have been submitted to the library:
    + sinusoidal patterns for structured light and phase unwrapping module
    [Ambroise Moreau (Delia Passalacqua)]
    + DIS optical flow (excellent dense optical flow algorithm that is both
    significantly better and significantly faster than Farneback?s algorithm ?
    our baseline), and learning-based color constancy algorithms implementation
    [Alexander Bokov (Maksim Shabunin)]
    + CNN based tracking algorithm (GOTURN) [Tyan Vladimir (Antonella Cascitelli)]
    + PCAFlow and Global Patch Collider algorithms implementation
    [Vladislav Samsonov (Ethan Rublee)]
    + Multi-language OpenCV Tutorials in Python, C++ and Java
    [João Cartucho (Vincent Rabaud)]
    + New camera model and parallel processing for stitching pipeline
    [Jiri Horner (Bo Li)]
    + Optimizations and improvements of dnn module
    [Vitaliy Lyudvichenko (Anatoly Baksheev)]
    + Base64 and JSON support for file storage. Use names like
    ?myfilestorage.xml?base64? when writing file storage to store big chunks of
    numerical data in base64-encoded form.  [Iric Wu (Vadim Pisarevsky)]
    + tiny_dnn improvements and integration
    [Edgar Riba (Manuele Tamburrano, Stefano Fabri)]
    + Quantization and semantic saliency detection with tiny_dnn
    [Yida Wang (Manuele Tamburrano, Stefano Fabri)]
    + Word-spotting CNN based algorithm
    [Anguelos Nicolaou (Lluis Gomez)]
  - Contributions besides GSoC:
    + Greatly improved and accelerated dnn module in opencv_contrib:
  - Many new layers, including deconvolution, LSTM etc.
  - Support for semantic segmentation and SSD networks with samples.
  - TensorFlow importer + sample that runs Inception net by Google.
    + More image formats and camera backends supported
    + Interactive camera calibration app
    + Multiple algorithms implemented in opencv_contrib
    + Supported latest OSes, including Ubuntu 16.04 LTS and OSX 10.12
    + Lot?s of optimizations for IA and ARM archs using parallelism, vector
    instructions and new OpenCL kernels.
    + OpenCV now can use vendor-provided OpenVX and LAPACK/BLAS (including Intel MKL,
    Apple?s Accelerate, OpenBLAS and Atlas) for acceleration
- Refreshed opencv-build-compare.patch
- Dropped upstream opencv-gcc5.patch
- Replace opencv-gcc6-disable-pch.patch with upstream patch
  opencv-gcc6-fix-pch-support-PR8345.patch
- Enable TBB support (C++ threading library)
- Add dependency on openBLAS</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Use %cmake macros
- Remove the conditions that are not really needed
- Add tests conditional disabled by default
  * Many tests fail and there are missing testdata
- Switch to pkgconfig style dependencies</changelog>
  <changelog author="tchvatal@suse.com" date="1496664001">- Add conditional for the qt5/qt4 integration
  * This is used only for gui tools, library is not affected
- Add provides/obsoletes for the qt5 packages to allow migration
- Drop patch opencv-qt5-sobump.diff
  * Used only by the obsoleted qt5 variant</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1500120000">- Add 0001-Do-not-include-glx.h-when-using-GLES.patch
  Fix build for 32bit ARM, including both GLES and desktop GL headers
  causes incompatible pointer type errors</changelog>
  <changelog author="kah0922@gmail.com" date="1507550400">- Update to 3.3
- Dropped obsolete patches
  * opencv-gcc6-fix-pch-support-PR8345.patch
  * opencv-gles.patch
- Updated opencv-build-compare.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1509624000">- Rename python subpackage to python2
- Do not explicitly require python-base for python subpackages</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 3.3.1:
  * Lots of various bugfixes
- Update source url</changelog>
  <changelog author="ecsos@opensuse.org" date="1509796800">- fix build error/unresolvable for Leap 42.2 and 42.3</changelog>
  <changelog author="ecsos@opensuse.org" date="1510142400">- change requires of python-numpy-devel to build in Leap and
  to not break factory in future</changelog>
  <changelog author="mpluskal@suse.com" date="1510574400">- Update licensing information</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1511611200">- Readd opencv-gles.patch, it is *not* included upstream; otherwise
  build breaks on all GLES Qt5 platforms (armv6l, armv7l, aarch64)
- add fix_processor_detection_for_32bit_on_64bit.patch
- Correctly set optimizations and dynamic dispatch on ARM, use
  OpenCV 3.3 syntax on x86.</changelog>
  <changelog author="tchvatal@suse.com" date="1515412800">- Add conditionals for python2 and python3 to allow us enabling
  only desired python variants when needed
- Do not depend on sphinx as py2 and py3 seem to collide there</changelog>
  <changelog author="qzheng@suse.com" date="1526904000">- Add opencv-imgproc-fix-bounds-check.patch:
  make backport from commit 4ca89db to fix imgproc(hdr)
  bounds check in HdrDecoder::checkSignature ( bsc#1074312,
  CVE-2017-18009 ).</changelog>
</package>
<package pkgid="2dd3490812cd247b4727e8599af13d5ebf59e380be8fbad55097cd197639b6cc" name="python3-openvswitch" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="282f91603da4f56688bd961acd03460d51537d443df27ea759bc44b00f8eba4f" name="python3-openvswitch-test" arch="noarch">
  <version epoch="0" ver="2.8.4" rel="lp150.5.3.1"/>
  <changelog author="jengelh@inai.de" date="1499515200">- Remove irrelevant wording from summaries/description.
  Diversify summaries.
- Get rid of an empty if block by inverting the condition.
- Implement shared library packaging guideline.</changelog>
  <changelog author="mchandras@suse.de" date="1500465600">- Version bump to 2.7.2. Some of the changes are:
  * Revert "netdev: Fix netdev_open() to adhere to class type if given"
  * connmgr: Fix crash when in_band_create() fails.
  * db-ctl-base: Fix reference-following feature in get_row_by_id().
  * netdev: Fix crash when ifa_netmask is null.
  * ovn-controller: fix use-after-free in physical_run()
  * ovn-controller: avoid crash when vswitchd connection is lost
  * ovsdb-types: Fix memory leak on error path.
  * vswitchd: Fix IFACE_STAT name error in iface_refresh_stats
  * netdev: Fix crash when interface option is changed to invalid value.
  * ofp-util: fix memory leak in ofputil_pull_ofp11_buckets
  * configure: Fix check for rte_config.h to handle cross-compilation.
  * ofp-util: Check length of buckets in ofputil_pull_ofp15_group_mod() (cve-2017-9265) (bsc#1041447)
  * ofp-print: Don't abort on unknown reason in role status message (cve-2017-9263) (bsc#1041470)</changelog>
  <changelog author="mchandras@suse.de" date="1501156800">- Do not restart the ovs-vswitchd and ovsdb-server services
  on package updates (bsc#1002734)
- Do not restart the ovs-vswitchd, ovsdb-server and openvswitch
  services on package removals. This facilitates potential future
  package moves but also preserves connectivity when the package is
  removed (bsc#1050896)</changelog>
  <changelog author="olaf@aepfle.de" date="1502366400">- Update filename in /var/adm/update-messages to match documentation,
  and build-compare pattern</changelog>
  <changelog author="mchandras@suse.de" date="1504526400">- Version bump to 2.8.0 (fate#323334, bsc#1050700). Some of the changes are:
  * ovs-ofctl can now accept and display port names in place of numbers.  By
    default it always accepts names and in interactive use it displays them;
    use --names or --no-names to override.  See ovs-ofctl(8) for details.
  * "ovs-ofctl dump-flows" now accepts --no-stats to omit flow statistics.
  * New ovs-dpctl command "ct-stats-show" to show connection tracking stats.
  * DPDK log messages redirected to OVS logging subsystem.
    Log level can be changed in a usual OVS way using
    'ovs-appctl vlog' commands for 'dpdk' module. Lower bound
    still can be configured via extra arguments for DPDK EAL.
  * dpdkvhostuser ports are marked as deprecated.  They will be removed
    in an upcoming release.
  * Support for DPDK v17.05.1.
  * New support for multiple VLANs (802.1ad or "QinQ"), including a new
    "dot1q-tunnel" port VLAN mode.
  * Added NAT support for userspace datapath.
  * Added FTP and TFTP support with NAT for userspace datapath.
  * Experimental NSH (Network Service Header) support in userspace datapath.
  * Tracing with ofproto/trace now traces through recirculation.
  * New support for role-based access control (see ovsdb-server(1)).
  * New commands 'stp/show' and 'rstp/show' (see ovs-vswitchd(8)).
  * All features required by OpenFlow 1.4 are now implemented, so
    ovs-vswitchd now enables OpenFlow 1.4 by default (in addition to
    OpenFlow 1.0 to 1.3).
  * Increased support for OpenFlow 1.6 (draft).
  * Bundles now support hashing by just nw_src or nw_dst.
  * The "learn" action now supports a "limit" option (see ovs-ofctl(8)).
  * The port status bit OFPPS_LIVE now reflects link aliveness.
  * OpenFlow 1.5 packet-out is now supported.
  * Support for OpenFlow 1.5 field packet_type and packet-type-aware
    pipeline (PTAP).
  * Added generic encap and decap actions (EXT-382).
    First supported use case is encap/decap for Ethernet.
  * Added NSH (Network Service Header) support in userspace
    Used generic encap and decap actions to implement encapsulation and
    decapsulation of NSH header.
    IETF NSH draft - https://datatracker.ietf.org/doc/draft-ietf-sfc-nsh/
  * ovs-vswitchd and ovsdb-server run as non-root users by default.
  * Add --cleanup option to command 'ovs-appctl exit' (see ovs-vswitchd(8)).
  * Use new tunnel port option "packet_type" to configure L2 vs. L3.
  * In conjunction with PTAP tunnel ports can handle a mix of L2 and L3
    payload.
  * New vxlan tunnel extension "gpe" to support VXLAN-GPE tunnels.
  * New support for non-Ethernet (L3) payloads in GRE and VXLAN-GPE.
  * Add experimental support for hardware offloading
  * HW offloading is disabled by default.
  * HW offloading is done through the TC interface.
  * The next major version of OVS will introduce a change in the
    conntrack API.  Conntrack state is only available to the processing
    path that follows the "recirc_table" argument of the ct() action.
    Starting in OVS 2.9, this state will be cleared for the current
    processing path whenever ct() is called.
- Create new openvswitch-doc subpackage for the Open vSwitch documentation
- Fix filename for logrotate configuration (bsc#1057357)
- Fix constrains with Provides/Obsoletes tags (bsc#1057357)
- Misc cleanups from spec-cleaner</changelog>
  <changelog author="mchandras@suse.de" date="1506686400">- Version bump to 2.8.1. Some of the changes are:
  * connmgr: Fix violation of flow monitoring protocol description.
  * ovn/actions: Improve OVN load-balancing performance.
  * dpif-netdev: Fix a zero-rate bug for meter
  * conntrack: Tighten handling of alg reverse conns.
  * conntrack: Add function ct_print_conn_info().
  * conntrack: Create nat_conn_keys_insert().
  * netdev-dpdk: reset packet_type for reused dp_packets.
  * ofp-util: Fix memory leaks when parsing OF1.5 group properties (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix memory leaks on error cases in ofputil_decode_group_mod() (cve-2017-14970) (bsc#1061310)
  * ofp-util: Fix buffer overread in ofputil_decode_bundle_add().
  * ofproto: Include patch ports in mtu overriden check
  * netdev-tc-offloads: Fix vxlan tunnel offloading
  * bridge: Fix controller status update to passive connections
  * lib/odp: Fix handling of set masked action in parse_odp_action
  * tests: Fix sparse error on test-ovn.c
  * dpif-netdev: Fix per packet cycles statistics.
  * netdev-dpdk: update vhost user client port status.
  * ovsdb-server.1: Fix mention of wrong option.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mchandras@suse.de" date="1512561600">- Fix documentation installation. It's best to install everything to
  %buildroot and then remove the files we don't need instead of the
  other way around since some files need to be present in the source
  directory for the testsuite to run.</changelog>
  <changelog author="mchandras@suse.de" date="1514376000">- Python fixes and improvements
  * Build Python3 subpackages for Open vSwitch python bindings
  * Switch build architecture to 'noarch' for python bindings.
  * Fix license for python subpackages
  * Build and ship python bytecode files.
- Do not mark files in /usr/share/* as configuration files
- Replace version macro with actual version number of Obsoletes tags.
  The DPDK packages have been merged with the regular OvS ones in the
  2.7.0 release so make it more explicit which ones we are obsoleting.
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1515499200">- Add upstream patches to support DPDK 17.11 (fate#322609)
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch
  * 0002-netdev-dpdk-DPDK-v17.11-upgrade.patch
  * 0003-netdev-dpdk-vHost-IOMMU-support.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519214400">- Version bump to 2.8.2 (bsc#1081953). Some of the changes are
  * ofp-meter: Fix use-after-free for decoding meter mods.
  * xlate: fix xport lookup for recirc
  * ofproto-dpif-xlate: add uuid to xports
  * netdev-dpdk: Fix requested MTU size validation.
  * netdev-dpdk: fix ingress_policer leak on error path
  * ofproto: Fix double-unref of temporary rule when learning.
  * gre: strip gre-tso offload flags
  * tc flower: reorder tunnel encap/decap actions
  * ofproto: Fix wrong datapath flow with same in_port and output port.
  * dpif: geneve: supply dpif function to get ifindex
  * ovs-tcpundump: fix a conversion issue
  * tunnel: fix tunnel flags set/clear.
  * netdev-dpdk: replace uint8_t with dpdk_port_t
  * lex: Fix parsing of long tokens.
  * odp-util: Use flexible sized buffer to hold Geneve options.
  * odp-util: Avoid reading wrong table in generate_all_wildcard_mask().
  * bond: Fix bug that writes to freed memory
  * conntrack: Fix icmp error address sanity check.
  * ovsdb-idl: Fix assertion failure on error path parsing server reply.
  * ofproto: Keep inserting buckets into a group from changing group type.
  * odp-util: Fix another hang in NSH action parsing.
  * odp-util: Fix parsing corner case for encap_nsh() actions.
  * netdev: netdev_get_etheraddr is not functioning as advertised.
  * ofproto-dpif-xlate: Fix bug that may leak ofproto_flow_mod
  * bfd: Fix memory leak
  * dpif: Fix memory leak
  * execution: Fix bug that leaks ovsdb_row
  * flow: Avoid buffer overread in parse_nsh() for malformed packet.
  * ovs-ofctl: Fix bad free in colors_parse_from_env().
  * odp-util: Fix buffer overread in parsing string form of ODP flows.
  * OpenvSwitch logrotate: Use ctl file path as target in ovs-appctl to reset logs
  * ovn-ctl: Add -vfile:info option to OVN_NB/SB_LOG options
  * netdev-tc-offloads: update stats properly on flow deletion
  * tests: Try harder to figure out whether IPv6 is supported.
  * netdev, dpif: fix the crash/assert on port delete
  * ovs-ctl: Don't remember vport-* kernel modules
  * NSH: Adjust NSH wire format to the latest IETF draft
  * ovs-lib: dont't purge corrupted DB
  * meta-flow: Fix format in documentation.
  * dpif-netlink-rtnl: Fix ovs_geneve probing after restart.
  * ovsdb-server: Fix memory leak
  * test-ovsdb: Fix memory leak
  * ovsdb-idl: Fix memory leak
  * netdev-linux: Fix wrong ceil rate when max-rate less than 8bit.
  * ofproto/trace: Fix memory leak in oftrace_push_ct_state()
  * ofproto-dpif-upcall: Fix null pointer dereference on exit.
  * ofproto-dpif-xlate: use xlate error enum for unsupported packet type
  * timeval: Check for OS-provided clock_gettime on macOS
  * Add dl_type to flow metadata for correct interpretation of conntrack metadata
  * Check flow's dl_type before setting ct_orig_tuple in 'pkt_metadata_from_flow()'
  * tests/stp: Use long warps instead of multiple calls.
  * ovs-save: Handle different 'ip addr show' output.
  * datapath-windows: Remove the workaround in NAT for TCP checksum
  * netdev: Fix memory leak on error path.
  * replication: Avoid theoretical use-after-free error in reset_database().
  * ovs-ctl.in: Call 'hostname -f' after vswitchd starts.
  * dpif-netdev: Use portable error code for zero rate meter band
- Remove patches that have been applied upstream:
  * 0001-netdev-dpdk-replace-uint8_t-with-dpdk_port_t.patch</changelog>
  <changelog author="mchandras@suse.de" date="1519300800">- Fix incorrect python3 dependencies for python2 subpackages
- Add upstream patches so we can build tools using python3 (bsc#1082194)
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch</changelog>
  <changelog author="dmueller@suse.com" date="1521633600">- set rundir to %_rundir</changelog>
  <changelog author="mchandras@suse.de" date="1521720000">- Fix file permissions in /etc/openvswitch for upgrades (951d79e638ec)</changelog>
  <changelog author="mchandras@suse.de" date="1524484800">- Preserve 'enable' status of openvswitch.service file when upgrading
  from &lt;SLE-12-SP3. The service file has been moved from the old
  openvswitch-switch subpackage to the main openvswitch one so we
  need to handle this migration step in %posttrans (bsc#1089476)
- Move DISABLE_STOP_ON_REMOVAL=yes to %preun. This variable is only
  checked in %service_del_preun macro</changelog>
  <changelog author="mchandras@suse.de" date="1525262400">- Move openvswitch user/group creation to %pre scriptlet. The default
  ownership of the configuration files expects the user and group to
  be available as early as possible (bsc#1091408)</changelog>
  <changelog author="mchandras@suse.de" date="1525867200">- Add support for RedHat distributions. All SUSE macros are now
  conditional and the spec file has been adapted based on the upstream
  one (fate#324537)
- spec-cleaner fixes</changelog>
  <changelog author="mchandras@suse.de" date="1527595200">- Version bump to 2.8.4 (bsc#1094234). Some of the changes are
  * dpif-netdev: Free packets on TUNNEL_PUSH if may_steal.
  * netdev-dpdk: fix check for "net_nfp" driver
  * netdev-dpdk: Don't use PMD driver if not configured successfully
  * netdev-dpdk: Remove use of rte_mempool_ops_get_count.
  * conntrack-tcp: Handle tcp session reuse.
  * tunnel: make tun_key_to_attr aware of tunnel type.
  * Configurable Link State Change (LSC) detection mode
  * netdev-dpdk: don't enable scatter for jumbo RX support for nfp
  * faq: Document DPDK version maintenance.
  * Avoid crash in OvS while transmitting fragmented packets over tunnel.
  * compat: Fix upstream 4.4.119 kernel
  * ovs-vsctl: Fix segfault when attempting to del-port from parent bridge.
  * ofproto-dpif-xlate: Fix segmentation fault caused by tun_table
  * odp-util: Remove unnecessary TOS ECN bits rewrite for tunnels
  * datapath: Prevent panic
  * netdev-dpdk: Free mempool only when no in-use mbufs.
  * python: Fix a double encoding attempt on an Unicode string
  * ofproto-dpif: Init ukey-&gt;dump_seq to zero
  * nsh: Add unit test for double NSH encap and decap
  * xlate: Correct handling of double encap() actions
  * tc: Change filter error to debug once
  * lib/tc: Handle error parsing action in nl_parse_single_action
  * ovn: Fix tunnel id overflow.
  * ofp-actions: Correct execution of encap/decap actions in action set
  * ovsdb-idl.at: Fix test failed. (writing large data via IDL with unicode)
  * netdev-dpdk: Limit rate of DPDK logs.
  * netdev-dpdk: Remove 'error' from non error log.
  * odp-util: Print eth() for Ethernet flows if packet_type is absent.
  * python: Fix decoding error when the received data is larger than 4096.
  * datapath-windows: fix hash creation on ct mark
  * tunnel: Fix deletion of datapath tunnel ports in case of reconfiguration
  * tests: Make packet-type-aware.at hash independent
- Remove patches which are now upstream:
  * 0001-ovsdb-Use-items-instead-of-iteritems-for-Python3.patch
  * 0002-ovsdb-ovsdb-dot.in-Use-print-function-for-Python3.patch
  * 0003-ovsdb-ovsdb-dot.in-Change-exception-semantics-for-Py.patch
  * 0004-ovsdb-ovsdb-dot.in-Replace-sys.maxint-with-sys.maxsi.patch
- Use openvswitch user/group for the log directory (3f556d66edb9)</changelog>
  <changelog author="mchandras@suse.de" date="1533643200">- Add upstream patch to fix dbus timeout due to deadlock in systemd
  dependencies (bsc#1098630).
  * 0001-utilities-Launch-ovsdb-tool-without-using-PAM.patch</changelog>
  <changelog author="mchandras@suse.de" date="1533816000">- Add upstream patch to fix permissions when running the logrotate
  script (bsc#1104049)
  * 0001-rhel-Use-correct-user-in-the-logrotate-configuration.patch</changelog>
</package>
<package pkgid="8a1218acf3e9e33907a797c3753e0d1484bc6dc145e751e48fa27fdc73c67c48" name="python3-python-gnupg" arch="noarch">
  <version epoch="0" ver="0.4.3" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1504699200">- Initial version</changelog>
  <changelog author="jengelh@inai.de" date="1505131200">- Ensure description neutrality.</changelog>
  <changelog author="astieger@suse.com" date="1528891200">- uppate to 0.4.3:
  * Add --no-verbose to the gpg command line, in case verbose is
    specified is gpg.conf.
  * This is mitigation against CVE-2018-12020 boo#1096745
- includes changes from 0.4.2:
  * Subkey information is now collected and returned in a
    subkey_info dictionary keyed by the subkey's ID
  * Add expect_passphrase password for use on GnuPG &gt;= 2.1 when
    passing passphrase to gpg via pinentry
  * Provid a trust_keys method to allow setting the trust level
    for keys
  * When the gpg executable is not found, note the path used in the
    exception message
  * Make error messages nor informational</changelog>
</package>
<package pkgid="7258b0ba12bd14f2d51c1a8d50fa9d1ff81fdbf06beceab0e250c0fa4f110579" name="python3-rpm" arch="x86_64">
  <version epoch="0" ver="4.14.1" rel="lp150.9.3.1"/>
  <changelog author="dmueller@suse.de" date="1287403200">- adapt buildrequires</changelog>
  <changelog author="coolo@novell.com" date="1287748800">- adapt second spec file to changes done to rpm.spec</changelog>
  <changelog author="mls@suse.de" date="1298462400">- drop standard python directories from filelist [bnc#229189]</changelog>
  <changelog author="coolo@suse.com" date="1323604800">- add libtool as explicit buildrequire</changelog>
  <changelog author="saschpe@suse.de" date="1326801600">- Spec file cleanup:
  * Don't rm -rf %{buildroot}
  * Removed %clean section
  * Removed authors from description</changelog>
  <changelog author="klaussfreire@gmail.com" date="1334145600">- Fix usage of deprecated AsVoidPtr Python/C API,
  replaced by Capsule API</changelog>
  <changelog author="mls@suse.de" date="1335182400">- modified capsule api diff to match rpm upstream</changelog>
  <changelog author="dmueller@suse.com" date="1357128000">- Update to 4.10.2</changelog>
  <changelog author="mls@suse.de" date="1373630400">- update to rpm-4.11.1</changelog>
  <changelog author="mls@suse.de" date="1384948800">- adapt to python-3.3, which no longer looks at XXXmodule.so</changelog>
  <changelog author="ngompa13@gmail.com" date="1508068800">- Unify rpm-python and python3-rpm into singlespec
- Switch the build to use setuptools-based build, so that
  the Python module is properly built with all its metadata</changelog>
  <changelog author="ngompa13@gmail.com" date="1508155200">- Properly quote the conditional for Obsoletes+Provides</changelog>
  <changelog author="ngompa13@gmail.com" date="1509192000">- Add a comment to note that prep and build stages come from rpm.spec</changelog>
  <changelog author="jengelh@inai.de" date="1513684800">- Update RPM groups</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1</changelog>
  <changelog author="tchvatal@suse.com" date="1521547200">- Switch really to singlespec thus allowing us to build without
  python2-devel present in the distribution</changelog>
  <changelog author="mls@suse.de" date="1523016000">- remove rpmlint-Factory buildignore</changelog>
</package>
<package pkgid="cfe0915a1fa080b1effabd1b514c2dafcaaef9b2406f8f7babc7b7f975957271" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="e2a4252457e7be2063a37f7a34282e1c45c0dd0f9a5db0be2bd142dc9a0fc919" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="efea88f4f86b7e4d3e1d865e8eb9d8222e6ec045d3c5e050243d88ab600465c4" name="python3-salt" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="58355963075085ab65262f1e59beacae7a34b5dd5a12ace039c76830a74596a2" name="python3-solv" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="65931f096fbe07afac93640df0979bf78f251d0080b5a506b3d031b24c642870" name="python3-sss-murmur" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="2664d23699ce1d4d8e2a2686693299fd881fadb324adf8c8187e6dc24f21b501" name="python3-sss_nss_idmap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="e5aa53feab88a7c91a985c77f6612d26228cd7ec05a8f0e7ad2da461c2d031fc" name="python3-sssd-config" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="7e6ce65db04e41e52a45a5b99dd40b13670123c9f40db2b0ead8203522ef2446" name="python3-susepubliccloudinfo" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1436011200">- Initial build version 0.0.1</changelog>
  <changelog author="jmason@suse.com" date="1441281600">- v0.1.0
  + Added filters</changelog>
  <changelog author="jmason@suse.com" date="1442318400">- v0.1.1
  + Resolve a path generation issue
    https://github.com/SUSE/Enceladus/issues/51</changelog>
  <changelog author="jmason@suse.com" date="1442404800">- v0.1.2
  + Updated manpage
  + Include in SLE 12 (FATE#319399)</changelog>
  <changelog author="bear454@opensuse.org" date="1443096000">- v0.1.3
  + name filter is case-insensitive</changelog>
  <changelog author="bear454@opensuse.org" date="1443700800">- v0.1.4
  + Cross-compatible with Python 2.6 (SLE 11)
  + Submit to SLE 11 &amp; SLE 12 Public Cloud Modules FATE#319399 BSC#943490</changelog>
  <changelog author="bear454@opensuse.org" date="1444219200">- v0.2.0
  + add Amazon data generation
  + add missing dependency python-requests BSC#949281</changelog>
  <changelog author="bear454@opensuse.org" date="1444219201">- v0.2.0r1
  + fix up permissions on amazon data generation binary</changelog>
  <changelog author="rjschwei@suse.com" date="1448107200">- Update to version 0.2.1
  + Pretty print the output</changelog>
  <changelog author="jgleissner@suse.com" date="1456920000">- v0.3.0
  + pep8 fixes
  + Fix exception when the service pack command line option was used
  + show an error message instead of traceback on connection error
  + error messages should write to stderr by default
  + added regex and invert substring filters</changelog>
  <changelog author="jgleissner@suse.com" date="1457006400">- removed __pycache__ and .pyc files from tar ball</changelog>
  <changelog author="bear454@opensuse.org" date="1492430400">- Update to version 0.4.0 (bsc#1034497)
  + Add type filter for servers
  + Remove HP Helion support</changelog>
  <changelog author="sean.marlow@suse.com" date="1502366400">- Update to version 1.0.0
  + Port to python3</changelog>
  <changelog author="rjschwei@suse.com" date="1516363200">- Update to version 1.0.2
  + Fix data output
- From 1.0.1
  + Improve from source install</changelog>
  <changelog author="rjschwei@suse.com" date="1523448000">- Update to version 1.0.3 (bsc#1089196)
  + Make request implementation to access pint server usable as library</changelog>
  <changelog author="rjschwei@suse.com" date="1533297600">- Update to version 1.0.4 (bsc#1103684)
  + Avoid traceback on improper query options</changelog>
</package>
<package pkgid="a11d82049bb2c475fc32eada7663eff0e5a872e9f6a3d4b31c048d9f0e6a2329" name="python3-susepubliccloudinfo" arch="src">
  <version epoch="0" ver="1.0.4" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1436011200">- Initial build version 0.0.1</changelog>
  <changelog author="jmason@suse.com" date="1441281600">- v0.1.0
  + Added filters</changelog>
  <changelog author="jmason@suse.com" date="1442318400">- v0.1.1
  + Resolve a path generation issue
    https://github.com/SUSE/Enceladus/issues/51</changelog>
  <changelog author="jmason@suse.com" date="1442404800">- v0.1.2
  + Updated manpage
  + Include in SLE 12 (FATE#319399)</changelog>
  <changelog author="bear454@opensuse.org" date="1443096000">- v0.1.3
  + name filter is case-insensitive</changelog>
  <changelog author="bear454@opensuse.org" date="1443700800">- v0.1.4
  + Cross-compatible with Python 2.6 (SLE 11)
  + Submit to SLE 11 &amp; SLE 12 Public Cloud Modules FATE#319399 BSC#943490</changelog>
  <changelog author="bear454@opensuse.org" date="1444219200">- v0.2.0
  + add Amazon data generation
  + add missing dependency python-requests BSC#949281</changelog>
  <changelog author="bear454@opensuse.org" date="1444219201">- v0.2.0r1
  + fix up permissions on amazon data generation binary</changelog>
  <changelog author="rjschwei@suse.com" date="1448107200">- Update to version 0.2.1
  + Pretty print the output</changelog>
  <changelog author="jgleissner@suse.com" date="1456920000">- v0.3.0
  + pep8 fixes
  + Fix exception when the service pack command line option was used
  + show an error message instead of traceback on connection error
  + error messages should write to stderr by default
  + added regex and invert substring filters</changelog>
  <changelog author="jgleissner@suse.com" date="1457006400">- removed __pycache__ and .pyc files from tar ball</changelog>
  <changelog author="bear454@opensuse.org" date="1492430400">- Update to version 0.4.0 (bsc#1034497)
  + Add type filter for servers
  + Remove HP Helion support</changelog>
  <changelog author="sean.marlow@suse.com" date="1502366400">- Update to version 1.0.0
  + Port to python3</changelog>
  <changelog author="rjschwei@suse.com" date="1516363200">- Update to version 1.0.2
  + Fix data output
- From 1.0.1
  + Improve from source install</changelog>
  <changelog author="rjschwei@suse.com" date="1523448000">- Update to version 1.0.3 (bsc#1089196)
  + Make request implementation to access pint server usable as library</changelog>
  <changelog author="rjschwei@suse.com" date="1533297600">- Update to version 1.0.4 (bsc#1103684)
  + Avoid traceback on improper query options</changelog>
</package>
<package pkgid="cc420067b39ed63b39bfff7d0d5a02ceefa72f578b1b7ae3dfaaa3da2e0b3dd4" name="python3-susepubliccloudinfo-amazon" arch="noarch">
  <version epoch="0" ver="1.0.4" rel="lp150.2.3.1"/>
  <changelog author="rjschwei@suse.com" date="1436011200">- Initial build version 0.0.1</changelog>
  <changelog author="jmason@suse.com" date="1441281600">- v0.1.0
  + Added filters</changelog>
  <changelog author="jmason@suse.com" date="1442318400">- v0.1.1
  + Resolve a path generation issue
    https://github.com/SUSE/Enceladus/issues/51</changelog>
  <changelog author="jmason@suse.com" date="1442404800">- v0.1.2
  + Updated manpage
  + Include in SLE 12 (FATE#319399)</changelog>
  <changelog author="bear454@opensuse.org" date="1443096000">- v0.1.3
  + name filter is case-insensitive</changelog>
  <changelog author="bear454@opensuse.org" date="1443700800">- v0.1.4
  + Cross-compatible with Python 2.6 (SLE 11)
  + Submit to SLE 11 &amp; SLE 12 Public Cloud Modules FATE#319399 BSC#943490</changelog>
  <changelog author="bear454@opensuse.org" date="1444219200">- v0.2.0
  + add Amazon data generation
  + add missing dependency python-requests BSC#949281</changelog>
  <changelog author="bear454@opensuse.org" date="1444219201">- v0.2.0r1
  + fix up permissions on amazon data generation binary</changelog>
  <changelog author="rjschwei@suse.com" date="1448107200">- Update to version 0.2.1
  + Pretty print the output</changelog>
  <changelog author="jgleissner@suse.com" date="1456920000">- v0.3.0
  + pep8 fixes
  + Fix exception when the service pack command line option was used
  + show an error message instead of traceback on connection error
  + error messages should write to stderr by default
  + added regex and invert substring filters</changelog>
  <changelog author="jgleissner@suse.com" date="1457006400">- removed __pycache__ and .pyc files from tar ball</changelog>
  <changelog author="bear454@opensuse.org" date="1492430400">- Update to version 0.4.0 (bsc#1034497)
  + Add type filter for servers
  + Remove HP Helion support</changelog>
  <changelog author="sean.marlow@suse.com" date="1502366400">- Update to version 1.0.0
  + Port to python3</changelog>
  <changelog author="rjschwei@suse.com" date="1516363200">- Update to version 1.0.2
  + Fix data output
- From 1.0.1
  + Improve from source install</changelog>
  <changelog author="rjschwei@suse.com" date="1523448000">- Update to version 1.0.3 (bsc#1089196)
  + Make request implementation to access pint server usable as library</changelog>
  <changelog author="rjschwei@suse.com" date="1533297600">- Update to version 1.0.4 (bsc#1103684)
  + Avoid traceback on improper query options</changelog>
</package>
<package pkgid="de893d8b8e7662b77e03a1ebc412cd873043bd8e7dcc9c26d769900af7449258" name="python3-talloc" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="a48c8d2c9cae2e3c866fa363bc193b8c1f4051e541a5bd55291f392d5e41607b" name="python3-talloc-32bit" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="28b5de64ab31dee9854a6f11638fc5fd7e6caaa6319491b4636eb07391d50001" name="python3-talloc-devel" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="6690f53bc015aa1678807c505867b89cd9a85eabe1b959fc038cdbb2d4dce751" name="python3-tevent" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="4e59844f0b0727f0862222f9aac7d00d139eb9142b1735d7e642b3444d8dd944" name="python3-tevent-32bit" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="3c3ead078b9da5c21ac6ba7d7ee71c6244ef528575c7c3dbf5680b04e7714980" name="python3-virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="846dba80e0d580893ea8d91263b9f5a8f6963d0db62dc926d114393b8a6b18ad" name="python3-virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="b0fc2c73df95034856a95c2146da26b8bf4875021e6f976f903377da246081bd" name="python3-virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="8d584ef3bd0efa75ad791fd4105891f15067d207182de92e3f417ada5667f556" name="python3-virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="d5082b0aeb332fbe85435d0ca9e33f3341625a3b194847102c748aff9bf2e08a" name="python3-virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="e0e864d6001fee0125d0af827c2d0da151fb68a632cf5f3311033a2dc482a192" name="python3-websocket-client" arch="noarch">
  <version epoch="0" ver="0.44.0" rel="lp150.2.3.1"/>
  <changelog author="rschweikert@suse.com" date="1402056000">- Include in SLE 12 (FATE #316168)</changelog>
  <changelog author="rschweikert@suse.com" date="1402142400">- Add Group to sub package, fixes build for SLE 11</changelog>
  <changelog author="rschweikert@suse.com" date="1402920000">- Clean up spec file</changelog>
  <changelog author="rschweikert@suse.com" date="1403524800">- Simplify conditionals in spec file
- Fix patch webSoc_useSystemCert.patch, eliminate tab use spaces</changelog>
  <changelog author="toddrme2178@gmail.com" date="1412251200">- Update to version 0.18.0
  - allow override of match_hostname usage on ssl (#105)
- Update to version 0.17.0
  - can't set timeout on a standing websocket connection (#102)
  - fixed local variable 'error' referenced before assignment (#102, #98)
- Update to version 0.16.0
  - lock some method for multithread. (#92)
  - disable cert verification. (#89)
- Remove upstreamed webSoc_useSystemCert.patch</changelog>
  <changelog author="rjschwei@suse.com" date="1423396800">- Update to version 0.23.0
  - Remove spurious print statement. (#135)
  - Fix not thread-safe of Websocket.close() (#120)
  - Try to get proxy info from environment if not explicitly provided (#124)
  - support proxy basic authenticaiton. (#125)
  - Fix NoneType exception at WebsocketApp.send (#126)
  - not use proxy for localhost (#132)
  - Check for socket before attempting to close (#115)
  - Enable turning off SSL verification in wsdump.py(#116)
  - Enable to set subprotocol(#118)
  - Better support for Autobahn test suite (http://autobahn.ws/testsuite) (#117)  - suppress close event message(#107)
  - detect socket connection state(#109)
  - support for code and reason in on_close callback(#111)
  - continuation frame handling seems suspicious(#113)</changelog>
  <changelog author="rjschwei@suse.com" date="1423569600">- Add fixTestTimeoutIssue.patch
  + fixes test case in factory</changelog>
  <changelog author="rjschwei@suse.com" date="1423656000">- Update fixTestTimeoutIssue.patch to handle different behavior between
  python 2.7.x versions</changelog>
  <changelog author="benoit.monin@gmx.fr" date="1431604800">- update to version 0.30.0:
  * fixed if client is behind proxy (#169)
  * support SNI for python 2.7.9+ and 3.2+ (#172)
  * update Host HTTP header by user. (#171)
  * fix typo for isEnabledFor (#173)
  * can set verify_mode to CERT_NONE when check_hostname is
    enabled.(#175)
  * make websockets iterable (#178)
- additional changes from version 0.29.0
  * fixed ssl socket bug
- additional changes from version 0.28.0
  * Fix erroneous argument shadowing(#168)
- additional changes from version 0.27.0
  * remove unittest2 requirements for python 2.6 (#156)
  * fixed subprotocol case during header validation (#158)
  * get response status and headers (#160)
  * fix out-of-memory due to fragmentation when recieving a very
    large frame(#163)
  * fix error if the payload data is nothing.(#166)
  * refactoring.
- additional changes from version 0.26.0
  * all WebSocketException provide message string (#152)
  * fixed tests fail when not connected to the network (#155)
  * Add command line options and handle closed socket to wsdump.py
    (#153)
- additional changes from version 0.25.0
  * fixed for Python 2.6(#151)
- additional changes from version 0.24.0
  * Supporting http-basic auth in WebSocketApp (#143)
  * fix failer of test.testInternalRecvStrict(#141)
  * skip utf8 validation by skip_utf8_validation argument (#137)
  * WebsocketProxyException will be raised if we got error about
    proxy.(#138)
- drop fixTestTimeoutIssue.patch: fixed upstream
- point the source URL to pypi
- add new dependency python-backports.ssl_match_hostname
- fix archive name when calling %setup</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1437739200">- fix dependencies for RHEL/CentOS 7: they provide their own
  python-backports-ssl_match_hostname</changelog>
  <changelog author="dmueller@suse.com" date="1445428800">- update to 0.32.0 (bsc#954486):
  - fix http proxy bug (#189)
  - Avoid deprecated BaseException.message (#180)
  - Add travis builds (#182)
  - fixed wsdump to work with piped input (#183)
  - fixed output of wsdump.py with python3 (#185)
  - add raw mode to wsdump.py (#186)</changelog>
  <changelog author="andrea@opensuse.org" date="1460462400">- added update-alternatives to allow the python3 version to be installed</changelog>
  <changelog author="dmueller@suse.com" date="1479211200">- update to 0.37.0:
  - fixed fialer that `websocket.create_connection` does not accept `origin` as a parameter (#246 )
  - added support for using custom connection class (#235)
  - use Named logger (#238)
  - implement ping/pong timeout (#241)
  - Corrects the syntax highlight code (#243)
  - fixed failure to join thread before it is started (#242)
  - Prints timings in console (#217)
  - use inspect.getfullargspec with Python 3.x (#219)
  - Check that exception message is actually a string before trying for substring check (#224)
  - Use pre-initialized stream socket (#226)
  - fixed TypeError: cafile, capath and cadata cannot be all omitted (#227)
  - Change import style (#203)
  - fix attribute error on the older python. (#215)
  - fixed timeout+ssl error handling bug  on python 2.7.10 (#190)
  - add proxy support to wsdump.py (#194)
  - use wsaccel if available (#193)
  - add support for ssl cert chains to support client certs (#195)
  - fix string formatting in exception (#196)
  - fix typo in README.rst (#197)
  - introduce on_data callback to pass data type. (#198)
  - WebSocketBadStatusException for Handshake error (#199)
  - set close timeout (#192)
  - Map dict to headers list (#204)
  - support client certification (#207)
  - security improvement during handshake (#211)
  - improve logging of error from callback (#212)</changelog>
  <changelog author="tbechtold@suse.com" date="1499256000">- update to 0.44.0:
  - renames key in sslopt dict (#326)
  - Unkown kwarg 'ca_cert' when calling ssl wrap_socket() (#326)
  - Race condition in WebSocket ping/pong (#327)
  - Implement simple cookie jar(#292)
  - fix: when using pppoe redial will block.(#301)
  - Fix insecure_pythons list in setup.py(#304)
  - Support WEBSOCKET_CLIENT_CA_BUNDLE being directory(#307)
  - WebSocketPayloadException under high traffic and limited network connection(#306)
  - Not working --nocert parameter in wsdump.py(#315)
  - Avoid the app to block on close on certain systems (#320)
  - Fix warning is not defined. (#323)
  - move to repository to https://github.com/websocket-client/websocket-client.git
  - _send_ping warning fails due to missing reference in _logging.__all__ (#294)
  - Fix opcode -&gt; op_code (#286)
  - Shuffled around example code (#256)
  - _send_ping graceful error handling (#262)
  - Allow closing WebSocketApp with status/reason/timeout (#265)
  - Support universal wheels (#267)
  - _url: Added subnet IP address matching in no_proxy host detection (#270)
  - fixed Incorrect encoding in continued messages python3 (#261)
  - Pass headers for websocket handshake (#271)
  - setup.py: Import `logging` before calling it. (#272)
  - Implemented close code 1014 (#273)
  - Support CA bundle specified by environment variable (#279)
  - Response header values should not be converted to lower case (#264)
  - Exclude port 443 from host http header (#248)
  - Cleanup code (#249)
  - Modify a code block directive in README (#250)
  - fixed ping/pong timeouet (#253)
- convert to singlespec
- merge -test package</changelog>
  <changelog author="toddrme2178@gmail.com" date="1500638400">- Fix singlespec macro usage
- Fix source URL.</changelog>
  <changelog author="jengelh@inai.de" date="1500897600">- Grammatical/Typographic corrections to the description.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1502798400">- Update license to LGPL 3
- Fix rpmlint issues</changelog>
  <changelog author="tbechtold@suse.com" date="1503921600">- Fix build for Leap 42.3</changelog>
  <changelog author="dmueller@suse.com" date="1504612800">- properly provide/obsolete python3-websocket-client-test</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1534420800">- use systems ca bundle file by default (boo#1076519)
  add use_system_cabundle.patch</changelog>
</package>
<package pkgid="6f798a6c0a8f51a104f86706ef7b810037ac0e19528fb6a6b1bec72fbd76bbd9" name="python3-youtube-dl" arch="noarch">
  <version epoch="0" ver="2018.09.08" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 2017.08.06
  * amcnetworks: Make rating optional
  * yandexdisk: Add extractor
  * ard: Add support for liveS
  * pbs: Add support for new URL schema
  * vidme: Extract DASH and HLS formats</changelog>
  <changelog author="jengelh@inai.de" date="1502971200">- Update to new upstream release 2017.08.18
  * Sanitize byte string format URLs
  * Make sure format id is not empty</changelog>
  <changelog author="jengelh@inai.de" date="1506340800">- Update to new upstream release 2017.09.24
  * YoutubeDL: write raw subtitle files
  * laola1tv: Add support for tv.ittf.com
  * liveleak: Support multi-video pages
  * googledrive: Add support for subtitles
  * googledrive: Add support for source format
  * bbccouk: Add support for w-prefixed ids
  * charlierose: Add support for episodes
  * manyvids: Add support for preview videos
  * animeondemand: Add support for flash videos
  * downloader/fragment: Restart inconsistent incomplete fragment downloads
  * orf: Add new extractor for f4m stories
  * twitch: Add support for go.twitch.tv URLs
  * heise: Add support for YouTube embeds
  * lynda: Add support for educourse.ga
  * options: Accept lrc as a subtitle conversion target format
  * twitter: Add support for user_id-less URLs</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- update to 2017.11.15:
  * many update to various downloaders and extractors</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Update to new upstream release 2018.01.27
  * JWPlatform: Support iframes
  * openload: Add support for openload.link
  * utils: add hvc1 codec code to parse_codecs
  * downloader/fragment: Commit part file after each fragment In
    order to obtain correct resume_len on next iteration
  * mailru: Add support for embed URLs
  * downloader/fragment: Encode filename of fragment being
    removed
  * extractor/common: Introduce uploader, uploader_id and
    uploader_url meta fields for playlists
  * openload: Add support for oload.stream
  * extractor/common: Improve DASH formats extraction for jwplayer</changelog>
  <changelog author="jengelh@inai.de" date="1517832000">- Update to new upstream release 2018.02.04
  * Randomize HTTP chunk size
  * Fix HTTP/302 infinite loops by not reusing requests
  * brightcove: Pass embed page URL as referrer
  * youtube: enforce using chunked HTTP downloading for DASH formats</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Update to new upstream release 2018.02.26
  * veoh: Add support for embed URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523707200">- Update to new upstream release 2018.04.09
  * Do not save/restore console title while simulate
  * Relax JSON-LD context check
  * Add support for tube8 embeds
  * Add support for share-videos.se embeds
  * Extend URL regular expression
  * Bypass mature content check
  * Extract more metadata
  * Fix extraction
  * Fix extraction
  * Fix title extraction
  * Extend URL regular expression
  * Add support for oload.xyz
  * Relax stream URL regular expression
  * Fix extraction
  * Add support for season URLs
  * Add support for series</changelog>
  <changelog author="jengelh@inai.de" date="1523880000">- Update to new upstream release 2018.04.16
  * Add support for picarto.tv
  * Add support for mobile URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1524657600">- Update to new upstream release 2018.04.25
  * Fix match_str for boolean meta fields
  * Add support for pandoc 2 and disable smart extension (#16251)
  * Fix typo in media extension compatibility checker (#16215)
  * Recognize IPv6 stream URLs (#16136, #16137, #16205, #16246,
  [#16250])
  * Extract is_live according to status (#16259)
  * Relax URL regular expression (#16258)
  * Remove extractor (#16256)
  * Fix extraction (#16254)
  * Add ability to authenticate with cookies
  * Implement lazy playlist extraction (#10184)
  * Add support for TV channel live streams (#15279, #15809)
  * Fix video extraction (#15931)
  * Fix extraction (#15227)
  * Add support for nickjr.nl (#16230)
  * Fix metadata extraction
  * Add support for generic embeds (#16134, #16154)
  * Extract new azure URLs (#16223)
  * Fix extraction (#16217)
  * Improve embeds detection (#16201)
  * Fix extraction (#16119)
  * Skip DRM asset types (#16104)</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 2018.05.01
  * Restart download if .ytdl file is corrupt
  * Add support for old.reddit.com URLs</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Update to new upstream release 2018.05.18
  * youtube: fix extraction for embed restricted live streams
  * youtube: Make uploader extraction non fatal
  * youtube: Improve format filesize extraction
  * youtube: fix hd720 format position</changelog>
  <changelog author="jengelh@inai.de" date="1527595200">- Update to new upstream release 2018.05.26
  * imgur: Fix extraction
  * hidive: add support for authentication
  * nbc: add support for stream.nbcsports.com</changelog>
  <changelog author="jengelh@inai.de" date="1528286400">- Update to new upstream release 2018.06.04
  * tumblr: add support for authentication
  * soundcloud: detect format extension
  * rtmp: gracefully handle live streams interrupted by user
  * openload: add support for oload.win and oload.download
  * facebook: add support for tahoe player videos
  * youtube: extract track and artist</changelog>
  <changelog author="jengelh@inai.de" date="1532606400">- Update to new upstream releases 2018.07.21
  * pbs: Add another cove id pattern
  * dailymotion: add support for password protected videos
  * vidzi: Fix extraction
  * Prefer ffmpeg over avconv by default
  * dctptv: Restore extraction based on REST API
  * nrktv: Add support for new episode URL schema
  * nrktv: Add support for new season and serie URL schema</changelog>
  <changelog author="jengelh@inai.de" date="1532952000">- Update to new upstream release 2018.07.29
  * crunchyroll/playlist: restrict URL regular expression
  * ted: fix extraction for videos without nativeDownloads
  * vk: Fix extraction for inline-only videos</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 2018.08.04
  * viqeo: add extractor</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 2018.08.22
  * raywenderlich: Adapt to site redesign
  * imdb: Fix extension extraction</changelog>
  <changelog author="jengelh@inai.de" date="1535457600">- Update to new upstream release 2018.08.28
  * nova:embed: Add extractor (closes #17282)
  * Add support for vidzi.nu, vidto.se
  * youtube:playlist: Add support for music album playlists
    (OLAK5uy_ prefix)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Update to new upstream release 2018.09.08
  * ard: Add support for Beta ARD Mediathek
  * crunchyroll: parse vilos media data</changelog>
</package>
<package pkgid="98fd4600e93836c108a7d4b523bf37cd650dbe63a13b5b6f24fb36e803f40ad6" name="qemu" arch="src">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="d182abb273bca7f5e564a4418dd4ae02ec40a0281591d546e18aa2e423de6ed4" name="qemu" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="1a7634b16852e748822b253e5849923e854aa573d21dd0073cb5a0d95ea88453" name="qemu" arch="src">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="728e5c54d8c936ba8ed0629a9257aa0fd67dcf16a3d76ede2507bd70353e120c" name="qemu" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="7ff2b54015f6209752edb987ddff852c74dc5465f3080082ab6bc37cf6155d0a" name="qemu" arch="src">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="feef165faae3f66a39d5339db9994a2620160ac930172adee9f3a529265dd9da" name="qemu" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="e6f1912a20194722cba3ffeca239bd80dc41b6d251af43e82c294162a8df1028" name="qemu-arm" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="451068617b2f9cc604620d3ae0d4a641d4e1d1d90d3fc07ed6f8dc4ccf4fa0cf" name="qemu-arm" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="75519ce088ee753524f5685752669023bfec63240edd83d30e25ab7d54884936" name="qemu-arm" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="f065efbbf1a8c70b9fabffb58ba0e14556b6e7961e9c87bdae5fe2327a68b601" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="3abbb7f9a1248c92fcfc450bb2885918ce75194f3c6cfcc3f957f21d1e40d94e" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="a4398848ec07f3a715ba421ab9b983f1c6f9af952460c6a307004daf3a1170d5" name="qemu-block-curl" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="3963d2d93b554c91e0012e65261130b7b7904e9a83a532d329829a857f2ca47e" name="qemu-block-dmg" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="95532c14ff1fcea40595a505ccb95c5b372eb76cff0872cd3139aa4ba5cbd784" name="qemu-block-dmg" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="01f31b747947a6535728b3ed52fb4ddafb5a5668ad747ca014d23e852ea82198" name="qemu-block-dmg" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="098cfbc6088cfc6f01951a0430836e95f8128604a1b4eef116df1785a448dcd1" name="qemu-block-gluster" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="20abb242267aad26e160d26a504a586e5cf3620c599d7e1852d183a5bfa17908" name="qemu-block-gluster" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="e9d9764df8a69e88e8bd0c5443d111bfc174a21429c28751135aa87aab66bbcc" name="qemu-block-gluster" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="383ea45c5e1640b5146a8e7c285325926311e70fb888a0919e335f7c16588bba" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="25a8ad70b587c9ff84be60cf03c16566613f40fac6256e75416cdef11a79a231" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="9cb273301b238b76b4cd2e572933606841c5b0efa0a4c77056cc64c8b7ee6754" name="qemu-block-iscsi" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="bf54f564a4653d2766580e224423897131808646182513a4f12c67aa15c63164" name="qemu-block-rbd" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="b5abd830b7e8b40483156a3972ad2eacf2dfdc6db8bb269e22d9fea4a3c93c21" name="qemu-block-rbd" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="15cacafe62189e163b76dfb0cf7272283e557ec21fbd541c505057d521469eb9" name="qemu-block-rbd" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="7247c8ada1dca264d2fc141e265107dfbcfd276aac75bb90a1317cc69295b975" name="qemu-block-ssh" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="a8660137798e17ddd514abb4fc57246b58e3d1a8bed4b5e93c6156eada4c9c13" name="qemu-block-ssh" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="3380c1e10bb22c1b6b42c84f9ead6714a6b6e3c799bafb6111c61c9495867d6a" name="qemu-block-ssh" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="ee610dc1ab3dbfaa0f3636942503cb86d3b46eafa6faba6c46157fe1e0566c42" name="qemu-extra" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="f3cf16740e8194823771fb86e71e3bf510fed8cecf8eacf7a97f30d570a4eb13" name="qemu-extra" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="324c2f1d3b27da049e3e1015844f698707a58200ca035e43c7f2076de9f7924a" name="qemu-extra" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="3e11d62e2cb4d88d4bcf4c489637856a1a02a449a4e30e2786a3e088adc1271a" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="c7f42828618a985705ea3717a7f9a992530b41abf17234551de021e568e5ef48" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="527d4b40e3178bf2f0121d3ecc376697125e5f39a941891949669867597bfdd6" name="qemu-guest-agent" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="9f5506c8d727032feddbfaef94c0a3d916bc85dc7356921302b3942f3a90aacd" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="0ce7f0a9de3cc99f8c0fbcf5cd8cb43b0fa0a379aa53ea7482f1cf0d10d555db" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="804970b30b141e46b782d116bf329eb16368da1a84108048c1212eab178597fa" name="qemu-ipxe" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="778cdc093adad1494ecf8a1113c89c1af9965dd4f3ea25712a61a08a589cfd6c" name="qemu-ksm" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="3933ec4fcccba78540d78f1e215eb6fb143cc6f54388dee93c037bbbe3483290" name="qemu-ksm" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="916d3475296efe818f5c31e2e2fc8d7c842c374f3c2ee4428a3d6353bdb2713d" name="qemu-ksm" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="15e013e901f85c7777a457a493c0828b5bca471054f7625906442a39d12b2e08" name="qemu-kvm" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="5d028aa7239bc5161f23cad47ac34c106a63849aeb836d2040c3a7638ace92c1" name="qemu-kvm" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="2facdcedb62532d8d56e5cff251d10b26dae99739a3d070a6742945c4e35552d" name="qemu-kvm" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="2d84e07e4f1e5e7d7194743e5e2663f02edb1b3308dc16ed93271f01341a2331" name="qemu-lang" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="207c1f167c9fe702abeead45080dd7923115a842f332a3ad9314a840c4740295" name="qemu-lang" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="72df6edf0b928abf671291a0e2a89ac9b9650449e51321bef2bc4cbca676bffd" name="qemu-lang" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="d866b5da1ac5936b275e2442df7bd428a1539077294a0b6b8fb1bb55ff68f8f6" name="qemu-linux-user" arch="src">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="lyan@suse.com" date="1506600000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0037-chardev-baum-fix-baum-that-releases.patch</changelog>
  <changelog author="brogers@suse.com" date="1506600001">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0038-s390x-ais-for-2.10-stable-disable-a.patch
  0039-s390x-cpumodel-remove-ais-from-z14-.patch</changelog>
  <changelog author="brogers@suse.com" date="1506945600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0040-io-fix-temp-directory-used-by-test-.patch
  0041-io-fix-check-for-handshake-completi.patch
  0042-crypto-fix-test-cert-generation-to-.patch
  0043-vhost-user-disable-the-broken-subpr.patch</changelog>
  <changelog author="brogers@suse.com" date="1507032000">- Update to v2.10.1 a stable, bug-fix-only release
  * Patches dropped (upstream):
  0034-slirp-fix-clearing-ifq_so-from-pend.patch
  0035-s390-ccw-Fix-alignment-for-CCW1.patch
  0038-s390x-ais-for-2.10-stable-disable-a.patch
  0039-s390x-cpumodel-remove-ais-from-z14-.patch
  * Patches renamed:
  0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch
  - &gt; 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch
  0037-chardev-baum-fix-baum-that-releases.patch
  - &gt; 0035-chardev-baum-fix-baum-that-releases.patch
  0040-io-fix-temp-directory-used-by-test-.patch
  - &gt; 0036-io-fix-temp-directory-used-by-test-.patch
  0041-io-fix-check-for-handshake-completi.patch
  - &gt; 0037-io-fix-check-for-handshake-completi.patch
  0042-crypto-fix-test-cert-generation-to-.patch
  - &gt; 0038-crypto-fix-test-cert-generation-to-.patch
  0043-vhost-user-disable-the-broken-subpr.patch
  - &gt; 0039-vhost-user-disable-the-broken-subpr.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10</changelog>
  <changelog author="brogers@suse.com" date="1508414400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0040-io-monitor-encoutput-buffer-size-fr.patch
  0041-cirrus-fix-oob-access-in-mode4and5-.patch
  0042-9pfs-use-g_malloc0-to-allocate-spac.patch</changelog>
  <changelog author="brogers@suse.com" date="1511956800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0043-scripts-avoid-usr-bin-python-refere.patch</changelog>
  <changelog author="brogers@suse.com" date="1513166400">- Update to v2.11.0: See http://wiki.qemu.org/ChangeLog/2.11
  Some noteworthy changes:
  misc TCG and linux user improvements
  * Drop very old compatability provisions
  * Patches dropped (upstream):
  0013-console-add-question-mark-escape-op.patch
  0020-configure-Fix-detection-of-seccomp-.patch
  0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch
  0035-chardev-baum-fix-baum-that-releases.patch
  0036-io-fix-temp-directory-used-by-test-.patch
  0037-io-fix-check-for-handshake-completi.patch
  0038-crypto-fix-test-cert-generation-to-.patch
  0039-vhost-user-disable-the-broken-subpr.patch
  0040-io-monitor-encoutput-buffer-size-fr.patch
  0041-cirrus-fix-oob-access-in-mode4and5-.patch
  0042-9pfs-use-g_malloc0-to-allocate-spac.patch
  * Patches renamed:
  0014-Make-char-muxer-more-robust-wrt-sma.patch
  - &gt; 0013-Make-char-muxer-more-robust-wrt-sma.patch
  0015-linux-user-lseek-explicitly-cast-no.patch
  - &gt; 0014-linux-user-lseek-explicitly-cast-no.patch
  0016-AIO-Reduce-number-of-threads-for-32.patch
  - &gt; 0015-AIO-Reduce-number-of-threads-for-32.patch
  0017-xen_disk-Add-suse-specific-flush-di.patch
  - &gt; 0016-xen_disk-Add-suse-specific-flush-di.patch
  0018-qemu-bridge-helper-reduce-security-.patch
  - &gt; 0017-qemu-bridge-helper-reduce-security-.patch
  0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch
  - &gt; 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch
  0021-linux-user-properly-test-for-infini.patch
  - &gt; 0019-linux-user-properly-test-for-infini.patch
  0022-roms-Makefile-pass-a-packaging-time.patch
  - &gt; 0020-roms-Makefile-pass-a-packaging-time.patch
  0023-Raise-soft-address-space-limit-to-h.patch
  - &gt; 0021-Raise-soft-address-space-limit-to-h.patch
  0024-increase-x86_64-physical-bits-to-42.patch
  - &gt; 0022-increase-x86_64-physical-bits-to-42.patch
  0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch
  - &gt; 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch
  0026-i8254-Fix-migration-from-SLE11-SP2.patch
  - &gt; 0024-i8254-Fix-migration-from-SLE11-SP2.patch
  0027-acpi_piix4-Fix-migration-from-SLE11.patch
  - &gt; 0025-acpi_piix4-Fix-migration-from-SLE11.patch
  0028-Fix-tigervnc-long-press-issue.patch
  - &gt; 0026-Fix-tigervnc-long-press-issue.patch
  0029-string-input-visitor-Fix-uint64-par.patch
  - &gt; 0027-string-input-visitor-Fix-uint64-par.patch
  0030-test-string-input-visitor-Add-int-t.patch
  - &gt; 0028-test-string-input-visitor-Add-int-t.patch
  0031-test-string-input-visitor-Add-uint6.patch
  - &gt; 0029-test-string-input-visitor-Add-uint6.patch
  0032-tests-Add-QOM-property-unit-tests.patch
  - &gt; 0030-tests-Add-QOM-property-unit-tests.patch
  0033-tests-Add-scsi-disk-test.patch
  - &gt; 0031-tests-Add-scsi-disk-test.patch
  0043-scripts-avoid-usr-bin-python-refere.patch
  - &gt; 0032-scripts-avoid-usr-bin-python-refere.patch
  * Patches added:
  0033-Switch-order-of-libraries-for-mpath.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1515067200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch</changelog>
  <changelog author="brogers@suse.com" date="1516881600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0032-scripts-avoid-usr-bin-python-refere.patch
  * Patches renamed:
  0033-Switch-order-of-libraries-for-mpath.patch
  - &gt; 0032-Switch-order-of-libraries-for-mpath.patch
  0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  - &gt; 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  * Patches added:
  0034-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0045-pc-fail-memory-hot-plug-unplug-with.patch</changelog>
  <changelog author="brogers@suse.com" date="1518091200">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  * Patches dropped:
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0076-smbios-support-setting-OEM-strings-.patch</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0078-Remove-problematic-evdev-86-key-fro.patch</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Be more specific about python version used in building package.
  Other minor spec file tweaks.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0080-vga-fix-region-calculation.patch</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch</changelog>
</package>
<package pkgid="aff9fcf0f1f8613377e1ed025f5c12c11621b4682cf7d938979517010cf4f1b3" name="qemu-linux-user" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="lyan@suse.com" date="1506600000">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0037-chardev-baum-fix-baum-that-releases.patch</changelog>
  <changelog author="brogers@suse.com" date="1506600001">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0038-s390x-ais-for-2.10-stable-disable-a.patch
  0039-s390x-cpumodel-remove-ais-from-z14-.patch</changelog>
  <changelog author="brogers@suse.com" date="1506945600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0040-io-fix-temp-directory-used-by-test-.patch
  0041-io-fix-check-for-handshake-completi.patch
  0042-crypto-fix-test-cert-generation-to-.patch
  0043-vhost-user-disable-the-broken-subpr.patch</changelog>
  <changelog author="brogers@suse.com" date="1507032000">- Update to v2.10.1 a stable, bug-fix-only release
  * Patches dropped (upstream):
  0034-slirp-fix-clearing-ifq_so-from-pend.patch
  0035-s390-ccw-Fix-alignment-for-CCW1.patch
  0038-s390x-ais-for-2.10-stable-disable-a.patch
  0039-s390x-cpumodel-remove-ais-from-z14-.patch
  * Patches renamed:
  0036-target-i386-cpu-Add-new-EPYC-CPU-mo.patch
  - &gt; 0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch
  0037-chardev-baum-fix-baum-that-releases.patch
  - &gt; 0035-chardev-baum-fix-baum-that-releases.patch
  0040-io-fix-temp-directory-used-by-test-.patch
  - &gt; 0036-io-fix-temp-directory-used-by-test-.patch
  0041-io-fix-check-for-handshake-completi.patch
  - &gt; 0037-io-fix-check-for-handshake-completi.patch
  0042-crypto-fix-test-cert-generation-to-.patch
  - &gt; 0038-crypto-fix-test-cert-generation-to-.patch
  0043-vhost-user-disable-the-broken-subpr.patch
  - &gt; 0039-vhost-user-disable-the-broken-subpr.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10</changelog>
  <changelog author="brogers@suse.com" date="1508414400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0040-io-monitor-encoutput-buffer-size-fr.patch
  0041-cirrus-fix-oob-access-in-mode4and5-.patch
  0042-9pfs-use-g_malloc0-to-allocate-spac.patch</changelog>
  <changelog author="brogers@suse.com" date="1511956800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.10
  * Patches added:
  0043-scripts-avoid-usr-bin-python-refere.patch</changelog>
  <changelog author="brogers@suse.com" date="1513166400">- Update to v2.11.0: See http://wiki.qemu.org/ChangeLog/2.11
  Some noteworthy changes:
  misc TCG and linux user improvements
  * Drop very old compatability provisions
  * Patches dropped (upstream):
  0013-console-add-question-mark-escape-op.patch
  0020-configure-Fix-detection-of-seccomp-.patch
  0034-target-i386-cpu-Add-new-EPYC-CPU-mo.patch
  0035-chardev-baum-fix-baum-that-releases.patch
  0036-io-fix-temp-directory-used-by-test-.patch
  0037-io-fix-check-for-handshake-completi.patch
  0038-crypto-fix-test-cert-generation-to-.patch
  0039-vhost-user-disable-the-broken-subpr.patch
  0040-io-monitor-encoutput-buffer-size-fr.patch
  0041-cirrus-fix-oob-access-in-mode4and5-.patch
  0042-9pfs-use-g_malloc0-to-allocate-spac.patch
  * Patches renamed:
  0014-Make-char-muxer-more-robust-wrt-sma.patch
  - &gt; 0013-Make-char-muxer-more-robust-wrt-sma.patch
  0015-linux-user-lseek-explicitly-cast-no.patch
  - &gt; 0014-linux-user-lseek-explicitly-cast-no.patch
  0016-AIO-Reduce-number-of-threads-for-32.patch
  - &gt; 0015-AIO-Reduce-number-of-threads-for-32.patch
  0017-xen_disk-Add-suse-specific-flush-di.patch
  - &gt; 0016-xen_disk-Add-suse-specific-flush-di.patch
  0018-qemu-bridge-helper-reduce-security-.patch
  - &gt; 0017-qemu-bridge-helper-reduce-security-.patch
  0019-qemu-binfmt-conf-use-qemu-ARCH-binf.patch
  - &gt; 0018-qemu-binfmt-conf-use-qemu-ARCH-binf.patch
  0021-linux-user-properly-test-for-infini.patch
  - &gt; 0019-linux-user-properly-test-for-infini.patch
  0022-roms-Makefile-pass-a-packaging-time.patch
  - &gt; 0020-roms-Makefile-pass-a-packaging-time.patch
  0023-Raise-soft-address-space-limit-to-h.patch
  - &gt; 0021-Raise-soft-address-space-limit-to-h.patch
  0024-increase-x86_64-physical-bits-to-42.patch
  - &gt; 0022-increase-x86_64-physical-bits-to-42.patch
  0025-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch
  - &gt; 0023-vga-Raise-VRAM-to-16-MiB-for-pc-0.1.patch
  0026-i8254-Fix-migration-from-SLE11-SP2.patch
  - &gt; 0024-i8254-Fix-migration-from-SLE11-SP2.patch
  0027-acpi_piix4-Fix-migration-from-SLE11.patch
  - &gt; 0025-acpi_piix4-Fix-migration-from-SLE11.patch
  0028-Fix-tigervnc-long-press-issue.patch
  - &gt; 0026-Fix-tigervnc-long-press-issue.patch
  0029-string-input-visitor-Fix-uint64-par.patch
  - &gt; 0027-string-input-visitor-Fix-uint64-par.patch
  0030-test-string-input-visitor-Add-int-t.patch
  - &gt; 0028-test-string-input-visitor-Add-int-t.patch
  0031-test-string-input-visitor-Add-uint6.patch
  - &gt; 0029-test-string-input-visitor-Add-uint6.patch
  0032-tests-Add-QOM-property-unit-tests.patch
  - &gt; 0030-tests-Add-QOM-property-unit-tests.patch
  0033-tests-Add-scsi-disk-test.patch
  - &gt; 0031-tests-Add-scsi-disk-test.patch
  0043-scripts-avoid-usr-bin-python-refere.patch
  - &gt; 0032-scripts-avoid-usr-bin-python-refere.patch
  * Patches added:
  0033-Switch-order-of-libraries-for-mpath.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1515067200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch</changelog>
  <changelog author="brogers@suse.com" date="1516881600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0032-scripts-avoid-usr-bin-python-refere.patch
  * Patches renamed:
  0033-Switch-order-of-libraries-for-mpath.patch
  - &gt; 0032-Switch-order-of-libraries-for-mpath.patch
  0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  - &gt; 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  * Patches added:
  0034-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0045-pc-fail-memory-hot-plug-unplug-with.patch</changelog>
  <changelog author="brogers@suse.com" date="1518091200">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  * Patches dropped:
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0076-smbios-support-setting-OEM-strings-.patch</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0078-Remove-problematic-evdev-86-key-fro.patch</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Be more specific about python version used in building package.
  Other minor spec file tweaks.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0080-vga-fix-region-calculation.patch</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch</changelog>
</package>
<package pkgid="4a6c82c9d9dbea5b2a4ab78d8945264202277fd7aad500cc16bd4a4bf32176e7" name="qemu-linux-user" arch="src">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1515067200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch</changelog>
  <changelog author="brogers@suse.com" date="1516881600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0032-scripts-avoid-usr-bin-python-refere.patch
  * Patches renamed:
  0033-Switch-order-of-libraries-for-mpath.patch
  - &gt; 0032-Switch-order-of-libraries-for-mpath.patch
  0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  - &gt; 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  * Patches added:
  0034-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0045-pc-fail-memory-hot-plug-unplug-with.patch</changelog>
  <changelog author="brogers@suse.com" date="1518091200">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  * Patches dropped:
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0076-smbios-support-setting-OEM-strings-.patch</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0078-Remove-problematic-evdev-86-key-fro.patch</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Be more specific about python version used in building package.
  Other minor spec file tweaks.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0080-vga-fix-region-calculation.patch</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch</changelog>
  <changelog author="fli@suse.com" date="1529582400">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582401">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0088-slirp-correct-size-computation-whil.patch</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="f57802985db98e52bbad1e3c20f0a48e7ea8b964de7d0190ac88ba17c7c99ade" name="qemu-linux-user" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1515067200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch</changelog>
  <changelog author="brogers@suse.com" date="1516881600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0032-scripts-avoid-usr-bin-python-refere.patch
  * Patches renamed:
  0033-Switch-order-of-libraries-for-mpath.patch
  - &gt; 0032-Switch-order-of-libraries-for-mpath.patch
  0034-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  - &gt; 0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  * Patches added:
  0034-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0045-pc-fail-memory-hot-plug-unplug-with.patch</changelog>
  <changelog author="brogers@suse.com" date="1518091200">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  * Patches dropped:
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0076-smbios-support-setting-OEM-strings-.patch</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0078-Remove-problematic-evdev-86-key-fro.patch</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Be more specific about python version used in building package.
  Other minor spec file tweaks.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0080-vga-fix-region-calculation.patch</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch</changelog>
  <changelog author="fli@suse.com" date="1529582400">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582401">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0088-slirp-correct-size-computation-whil.patch</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="3a380fe26900ded64dee8d458870ab44c0fa40a25b201c0d30f42505cc10c2b0" name="qemu-linux-user" arch="src">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="brogers@suse.com" date="1517227200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0045-pc-fail-memory-hot-plug-unplug-with.patch</changelog>
  <changelog author="brogers@suse.com" date="1518091200">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  * Patches dropped:
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0076-smbios-support-setting-OEM-strings-.patch</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0078-Remove-problematic-evdev-86-key-fro.patch</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Be more specific about python version used in building package.
  Other minor spec file tweaks.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0080-vga-fix-region-calculation.patch</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch</changelog>
  <changelog author="fli@suse.com" date="1529582400">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582401">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0088-slirp-correct-size-computation-whil.patch</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0082-qga-check-bytes-count-read-by-guest.patch</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch</changelog>
</package>
<package pkgid="698d6dd31335268338cc52cfac3ebbf9244e954ee17cdf238b944e3cd27058ce" name="qemu-linux-user" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="brogers@suse.com" date="1517227200">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0045-pc-fail-memory-hot-plug-unplug-with.patch</changelog>
  <changelog author="brogers@suse.com" date="1518091200">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  * Patches dropped:
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches dropped:
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0076-smbios-support-setting-OEM-strings-.patch</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0078-Remove-problematic-evdev-86-key-fro.patch</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Be more specific about python version used in building package.
  Other minor spec file tweaks.
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0080-vga-fix-region-calculation.patch</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch</changelog>
  <changelog author="fli@suse.com" date="1529582400">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582401">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0088-slirp-correct-size-computation-whil.patch</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches added:
  0082-qga-check-bytes-count-read-by-guest.patch</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch</changelog>
</package>
<package pkgid="c4865a00b60d0afe61b8e7e29c5d3fea13eed15ef4c4634ee1be4d7a0e13cdaf" name="qemu-ovmf-ia32" arch="noarch">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.3.1"/>
  <changelog author="glin@suse.com" date="1469620800">- Update openssl to 1.0.2h (bsc#990612)
  + Add the patch: ovmf-bsc990612-update-openssl-1.0.2h.patch
  + Update the openssl tarball
- Add ovmf-bsc990773-remove-stale-boot-options.patch to remove the
  stale boot options (bsc#990773)</changelog>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
</package>
<package pkgid="f0232f683dadf492b193fa47360676fe400d9ef8aa145139cdfaf6f5c09c6853" name="qemu-ovmf-ia32" arch="noarch">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.6.1"/>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
  <changelog author="glin@suse.com" date="1531224000">- Add ovmf-bsc1099193-fix-sev-flash-variables.patch to fix the
  missing EFI variables when SEV is set (bsc#1099193)</changelog>
</package>
<package pkgid="6b1129ce9f6e7555b90c0e460316894b5f2528cd182c378d3601251bbe39c8ea" name="qemu-ovmf-x86_64" arch="noarch">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.3.1"/>
  <changelog author="glin@suse.com" date="1469620800">- Update openssl to 1.0.2h (bsc#990612)
  + Add the patch: ovmf-bsc990612-update-openssl-1.0.2h.patch
  + Update the openssl tarball
- Add ovmf-bsc990773-remove-stale-boot-options.patch to remove the
  stale boot options (bsc#990773)</changelog>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
</package>
<package pkgid="7431c391499a90e4645b36e2c52310ecfc614fc1318709cd5442bdfff7af2c85" name="qemu-ovmf-x86_64" arch="noarch">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.6.1"/>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
  <changelog author="glin@suse.com" date="1531224000">- Add ovmf-bsc1099193-fix-sev-flash-variables.patch to fix the
  missing EFI variables when SEV is set (bsc#1099193)</changelog>
</package>
<package pkgid="1e6b0219a6e9bd034d625cfd5ff04c6588a5e8e11faa6c86ba594d52cb2b4104" name="qemu-ovmf-x86_64-debug" arch="x86_64">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.3.1"/>
  <changelog author="glin@suse.com" date="1469620800">- Update openssl to 1.0.2h (bsc#990612)
  + Add the patch: ovmf-bsc990612-update-openssl-1.0.2h.patch
  + Update the openssl tarball
- Add ovmf-bsc990773-remove-stale-boot-options.patch to remove the
  stale boot options (bsc#990773)</changelog>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
</package>
<package pkgid="0a5d61e230df036e497d4a241a324b52d402b73af1eaf1deab3cf4f0229eac75" name="qemu-ovmf-x86_64-debug" arch="x86_64">
  <version epoch="0" ver="2017+git1510945757.b2662641d5" rel="lp150.4.6.1"/>
  <changelog author="glin@suse.com" date="1471608000">- Update to 2015+git1471575292.00bcb5c
  + NetworkPkg/IpSecDxe: Fix UEFI IKE Initial Exchange failure
  + MdeModulePkg: Fix potential failure if UseDefaultAddress
    configured
  + OvmfPkg: Add MpInitLib reference in DSC files
  + SecurityPkg: AuthVariableLib: Fix inconsistent CertDB case
  + OvmfPkg: use StatusCode Router and Handler from MdeModulePkg
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: deal with relaxed
    XIP alignment
  + BaseTools GCC: introduce GCC5 toolchain to support GCC v5.x in
    LTO mode
  + BaseTools GCC: use 'gcc' as the linker command for GCC44 and
    later
  + ArmVirtPkg/ArmVirtPrePiUniCoreRelocatable: ignore .hash and
    .note sections
  + OvmfPkg/Sec: Support SECTION2 DXEFV types
  + Preserve hii section in GCC binaries
  + Fix IPv6 HTTPClient vendor class data
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2h
  + NetworkPkg: Fix bug in TCP which not sending out ACK in
    certain circumstance
  + OvmfPkg: include UefiCpuPkg/CpuMpPei
  + OvmfPkg/PlatformPei: rebase and resize the permanent PEI memory
    for S3
  + SecurityPkg SecureBootConfigDxe: Add check for the external
    PE/COFF image
  + ArmVirtPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg/PlatformPei: add missing auto variable initialization
  + OvmfPkg: add PciHotPlugInitDxe
  + MdeModulePkg/PciBusDxe: recognize hotplug-capable PCIe ports
  + OvmfPkg/PlatformBootManagerLib: remove stale FvFile boot
    options
  + OvmfPkg: add a Name GUID to each Firmware Volume
  + CryptoPkg BaseCryptLib: Init the content of struct 'CertCtx'
    before use
  + CryptoPkg BaseCryptLib: Avoid passing NULL ptr to function
    BN_bn2bin()
  + MdeModulePkg/Bds: MemoryTypeInformation excludes boot option
    mem use
  + MdeModulePkg: Fix IPv4 stack potential disappeared issue
  + NetworkPkg: Stop the HTTP Boot service after the boot image
    download complete
  + ArmVirtPkg: Re-add the Driver Health Manager
  + OvmfPkg: Re-add the Driver Health Manager
  + ArmVirtPkg/ArmVirtXen: Add ACPI support for Virt Xen ARM
  + Massive conversion of assembly code to NASM
  + MdeModulePkg/UefiBootManagerLib: Fix data in
    MemoryTypeInformation
  + ArmVirtPkg: add FDF definition for empty varstore
  + ArmVirtPkg/ArmVirtQemu: switch secure boot build to NorFlashDxe
  + NetworkPkg: Handling timeout case in httpboot driver
  + NetworkPkg: HttpDxe response/cancel issue fix
  + NetworkPkg: Support TCP Cancel function
  + MdeModulePkg/RamDiskDxe: Add Memory Type selection support in
    Ramdisk HII
  + MdeModulePkg RamDiskDxe: Do not save 'Size' numeric value by
    varstore
  + MdeModulePkg: Fix IPv4 UseDefaultAddress failure case
  + MdeModulePkg/AtaBusDxe: Fix some ATA hard drives cannot be
    discovered
  + ArmVirtPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg: set SMM stack size to 16KB
  + OvmfPkg/PlatformBootManagerLib: Connect the Xen drivers before
    loading NvVars
  + MdeModulePkg: Fix SNP.Initialize() spec conformance issue
  + OvmfPkg: raise DXEFV size to 10 MB
  + MdeModulePkg: Stop the timer before clean IP service
  + OvmfPkg/PlatformBootManagerLib: rebase boot logo display to
    BootLogoLib
  + OvmfPkg/SerializeVariablesLib: Relax check for the read-only
    variable
  + OvmfPkg: prevent 64-bit MMIO BAR degradation if there is no CSM
  + OvmfPkg, ArmVirtPkg: rename QemuNewBootOrderLib to
    QemuBootOrderLib
  + MdeModulePkg/PciBus: do not improperly degrade resource
  + NetworkPkg/HttpDxe: Don't free Wrap in HttpTcpReceiveNotifyDpc
  + NetworkPkg/TcpDxe: Remove the status check of
    SockProcessRcvToken
  + UefiCpuPkg/SmmCpuFeaturesLib: Add SMRR PhysBase/PhysMask
    fields check
  + MdeModulePkg: Skip invalid bus number scanning in PciBusDxe
    driver
  + OvmfPkg/PlatformPei: provide 10 * 4KB of PCI IO Port space on
    Q35
  + OvmfPkg: introduce ICH9_PMBASE_VALUE
  + OvmfPkg: replace PcdAcpiPmBaseAddress with PIIX4_PMBA_VALUE
  + OvmfPkg/AcpiTimerLib: don't use possibly unset PMBA register
    (PEI phase)
  + MdeModulePkg: Refine the code for DxeHttpLib
  + OvmfPkg/XenBusDxe: duplicate twice-iterated VA_LIST in
    XenStoreVSPrint()
  + SecurityPkg: Use PcdGet32() to access PcdPeiCoreMaxFvSupported
  + UefiCpuPkg/PiSmmCpuDxeSmm/SmmProfile: Fix BTS support check bug
  + NetworkPkg:HttpDxe: Code changes to support HTTP PUT/POST
    operations
  + CryptoPkg/SmmCryptLib: Enable AES support for SMM
  + MdePkg: Add NFIT definition from ACPI 6.1
  + BaseTools/GenFw: enhance to use Magic Field to identify the
    image
  + MdeModulePkg-DxeCore: rename CoreGetMemoryMapPropertiesTable
  + MdeModulePkg Variable: return error for empty str VariableName
    to GetVariable
  + PcAtChipsetPkg AcpiTimerLib: Fix a logic error
  + MdeModulePkg UiApp: change code for easy customization
  + MdePkg: Add HII definitions from UEFI 2.6
  + NetworkPkg: Make HttpBootGetBootFile return
    EFI_BUFFER_TOO_SMALL
  + MdeModulePkg:DxeHttpLib: Add checks in HttpGenRequestMessage
    API
  + ArmPkg/ArmLib: don't invalidate entire I-cache on range
    operation
  + OvmfPkg/PlatformBootManagerLib: Postpone the shell registration
  + OvmfPkg/QemuNewBootOrderLib: adapt Q35 SATA PMPN to UEFI spec
    Mantis 1353
  + MdeModulePkg Ata: Use the new (incompatible) PortMultiplierPort
    semantics
  + NetworkPkg: Bug fix of iSCSI to support MPIO
- Drop upstreamed patches
  + ovmf-dxe-10mb.patch
  + ovmf-bsc976253-postpone-shell.patch
  + ovmf-bsc980635-fix-http-crash.patch
  + ovmf-bsc982193-dont-restore-readonly-var.patch
  + ovmf-bsc982193-connect-xen-drivers.patch
  + ovmf-bsc990612-update-openssl-1.0.2h.patch
  + ovmf-bsc990773-remove-stale-boot-options.patch
- Update dbxupdate.zip since there are new hashes added into dbx</changelog>
  <changelog author="dmueller@suse.com" date="1473854400">- update to 2017+git1472049752.ea2f21e:
  + switches git branch from an (outdated) master tree
  to the UDK2017 branch, which provides an insane amount of
  changes. for details please look at https://github.com/tianocore/edk2/commits/UDK2017
- unify build flags with aarch64 build for increased compatibility with
  openSUSE installation medias</changelog>
  <changelog author="glin@suse.com" date="1476360000">- update to 2017+git1476331065.08354c3:
  + OvmfPkg: add NOOPT build target for source level debugging
  + OvmfPkg: QemuVideoDxe uses MdeModulePkg/FrameBufferLib
  + BaseTools: support the NOOPT target with the GCC tool chains
  + BaseTools Makefile: Enable O2 option for GCC tool chain
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2j
    (bsc#1013603)
  + MdeModulePkg/Logo: Add LogoDxe module
  + MdeModulePkg/HiiDatabase: Add HiiImageEx implementation
  + MdeModulePkg/PciBusDxe: make OPROM BAR degradation configurable
  + NetworkPkg: Correct the DNS token return status by RCODE
  + BaseTools/EfiRom: supply missing machine type lookup strings
  + ArmVirtPkg: restrict mapping attributes of normal memory to
    EFI_MEMORY_WB
  + OvmfPkg/QemuBootOrderLib: drop too strict "/HD(" suffix from
    vblk prefix (bsc#1009707)
  + NetworkPkg/DnsDxe: Handle CNAME type responded from the name
    server
  + ArmVirtPkg/FdtPciHostBridgeLib: enable 64-bit PCI DMA
  + MdeModulePkg: Support classless IP for DHCPv4 TransmitReceive()
  + ArmVirtPkg: implement FdtPciHostBridgeLib
  + OvmfPkg: Use MdeModulePkg/ResetSystemRuntimeDxe
  + OvmfPkg/VirtioGpuDxe: implement EFI_GRAPHICS_OUTPUT_PROTOCOL
  + include VirtioGpuDxe in the platform DSC/FDF files
  + OvmfPkg/Virtio10Dxe: don't bind virtio-vga
  + OvmfPkg/QemuVideoDxe: don't incorrectly bind virtio-gpu-pci
  + BaseTools/GenFw: ignore dynamic RELA sections
  + Add implementations of API IsZeroBuffer()
  + ArmVirtPkg: Add Ramdisk support to ArmVirtPkg platforms
  + ArmVirtPkg: Move inclusion of AcpiTableDxe.inf to ArmVirt.dsc.inc
- Drop upstreamed ArmVirtPkg-Enable-PCI-bus-probing-again.patch</changelog>
  <changelog author="glin@suse.com" date="1480420800">- update to 2017+git1480394913.2b2efe3:
  + UefiCpuPkg/PiSmmCpuDxeSmm: handle dynamic
    PcdCpuMaxLogicalProcessorNumber
  + SecurityPkg Tcg2ConfigDxe: Align Attempt TPM Device help with
    options
  + SecurityPkg Tcg2ConfigDxe: Remove BlockSID actions and related
    strings
  + SecurityPkg OpalPasswordDxe: Use PP actions to enable BlockSID
  + SecurityPkg Tcg2PPLib: Support BlockSID related actions
  + MdeModulePkg/NetLib: Handle an invalid IPv6 address case
  + UefiCpuPkg/DxeMpLib: Fix bug when getting target C-State from
    eax
  + UefiCpuPkg/DxeMpLib: Make sure APs in safe loop code
  + UefiCpuPkg/DxeMpLib: Allocate new safe stack &lt; 4GB
  + UefiCpuPkg/DxeMpLib: Get safe AP loop handler from global
    variable
  + ArmPlatformPkg: Fix VE RTSM mem map descriptor count
  + ArmPlatformPkg: Reformat VE Memory Map code
  + ArmPkg: remove the LinuxLoader application
  + MdeModulePkg/SetupBrowser:Don't support password without
    interactive flag
  + MdeModulePkg/DisplayEngine: Popup dialogue when password is
    not supported
  + MdeModulePkg/AtaAtapiPassThru: Ensure GHC.AE bit is always set
    in Ahci
  + MdeModulePkg/Xhci: Add 10ms delay before sending SendAddr cmd
    to dev
  + UefiCpuPkg/PiSmmCpu: Correct exception message
  + UefiCpuPkg: fix feature test for Extended Topology CPUID leaf
  + SecurityPkg DxeTcg2PPLib: Lock Tcg2PhysicalPresenceFlags
    variable on S4
  + MdeModulePkg/DxeNetLib: Allow the IPv4/prefix case when
    AsciiStrToIp4
  + ShellPkg: update ping6 to use timer service instead of timer
    arch protocol
  + MdeModulePkg/DisplayEngine: Return the selectable menu
    correctly
  + SecurityPkg Tcg2Dxe: ASSERT to ensure 'VarData' is not NULL
  + SecurityPkg TcgStorageCoreLib: ASSERT to ensure 'ByteSeq' is
    not NULL
  + UefiCpuPkg/PiSmmCpuDxeSmm: dynamic PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + MdeModulePkg/PiSmmCore: Cache CommunicationBuffer info before
    using it
  + Check for the max DHCP packet length before use it
  + OvmfPkg: Add 4K PE alignment to enable SMM page level
    protection
  + UefiCpuPkg/PiSmmCpu: Check XdSupport before set NX
  + MdeModulePkg/BdsDxe: Avoid overwriting PlatformRecovery####
  + MdeModulePkg/BdsDxe: Fix bug to run non-first
    PlatformRecovery####
  + PcAtChipsetPkg/PcRtc: Handle NULL table entry in RSDT/XSDT
  + UefiCpuPkg/SecCore: Correct print format for stack information
  + MdeModulePkg/PiSmmCpuDxeSmm: Check RegisterCpuInterruptHandler
    status
  + MdeModulePkg/CpuExceptionHanderLibNull:
    RegisterCpuInterruptHandler()
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add volatile to mNumberToFinish
  + UefiCpuPkg/PiSmmCpuDxeSmm: TransferApToSafeState() use UINTN
    params
  + MdePkg/BaseSynchronizationLib: Fix function names in function
    headers
  + MdePkg/BaseSynchronizationLib: Add volatile Interlocked*() APIs
  + MdePkg/Include: Add volatile to SynchronizationLib parameters
  + UefiCpuPkg/MpInitLib: support 64-bit AP stack addresses
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: fix fatal typo
  + UefiCpuPkg/MpInitLib/X64/MpFuncs.nasm: remove superfluous
    instruction
  + UefiCpuPkg/DxeMpInitLib: remove duplicate HobLib class
    dependency
  + MdeModulePkg/Include: Add PiSmmMemoryAttributesTable.h
  + MdeModulePkg HiiDatabase: Remove extra memory initialization
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add paging protection
  + UefiCpuPkg/dec: Add PcdCpuSmmStaticPageTable
  + MdeModulePkg/PiSmmCore: Add MemoryAttributes support
  + ArmVirtPkg DxeHobLib: Update func header description of
    BuildFv(2)Hob()
  + IntelFrameworkPkg PeiHobLib: Check FV alignment when building
    FV HOB
  + MdePkg HobLib: Check FV alignment when building FV HOB
  + MdeModulePkg DxeCore: Show error message on unaligned FvImage
    issue
  + MdeModulePkg/Ip4Dxe: Correct the return status
  + MdeModulePkg/Ip4Dxe: Add wrong/invalid subnet check
  + OvmfPkg AcpiTables: Use PcdDebugIoPort to describe QEMU debug
    console
  + MdePkg/BaseLib: Add one wrapper on RdRand access for parameter
    check
  + UefiCpuPkg/MpInitLib: Update AP information when BSP switched
  + UefiCpuPkg/MpInitLib: Program AP stack in fixed address
  + UefiCpuPkg/MpInitLib: Add InitFlag and CpuInfo in
    MP_CPU_EXCHANGE_INFO
  + UefiCpuPkg/MpInitLib: Remove CPU information from CPU_AP_DATA
  + UefiCpuPkg/MpInitLib: Force sending INIT-SIPI-SIPI to reset APs
  + UefiCpuPkg/MpInitLib: Fixed offset error on Cr3Location
  + UefiCpuPkg/PiSmmCpuDxeSmm: Free SmramRanges to save SMM space
  + ShellPkg/dmpstore: Support "-sfo"
  + ArmPkg/Library/ArmDmaLib: Deallocate Map buffer in case of
    error
  + UefiCpuPkg/PiSmmCpuDxeSmm: Decrease mNumberToFinish in AP safe
    code
  + UefiCpuPkg/PiSmmCpuDxeSmm: Place AP to 32bit protected mode on
    S3 path
  + UefiCpuPkg/PiSmmCpuDxeSmm: Put AP into safe hlt-loop code on S3
    path
  + UefiCpuPkg/DxeMpLib: Place APs to suitable state on Legacy OS
    boot
  + UefiCpuPkg/DxeMpLib: Allocate below 4GB mem for
    AsmRelocateApLoopFunc
  + CryptoPkg/BaseCryptLib: Make comments consistent with the
    function
  + OvmfPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + ArmVirPkg/PlatformBds: Dispatch deferred images after EndOfDxe
  + MdeModulePkg/BdsDxe: Check deferred images before booting to OS
  + UefiCpuPkg/MpInitLib: Do not wakeup AP if only one processor
    supported
  + BaseTools/EfiRom: Fix potential memory leak
  + OvmfPkg/ResetVector: Depend on PCD values of the page tables
  + CryptoPkg: Add HMAC-SHA256 cipher support
  + CryptoPkg: Add xxxxHashAll APIs to facilitate the digest
    computation
  + NetworkPkg: Fix the wrong Timer event check
  + NetworkPkg: Update IP4 stack drivers for classless address
    unicast check
  + PcAtChipsetPkg/HpetTimerDxe: Fix race condition in
    SetTimerPeriod()
  + OvmfPkg: Make more use of ARRAY_SIZE()
  + rebase to ARRAY_SIZE()
  + ArmPlatformPkg: remove ARM BDS
  + OvmfPkg/XenConsoleSerialPortLib: don't include
    &lt;Uefi/UefiBaseType.h&gt;
  + NetworkPkg: Support bracketed IPv6 address during a redirection
    in iSCSI
  + NetworkPkg: Enhance the code in DNS driver
  + NetworkPkg: Add dns support for pxe boot based on IPv6
  + disable deprecated interfaces
  + OvmfPkg/QemuVideoDxe: drop useless variables
    QEMU_VIDEO_MODE_DATA.RefreshRate
    QEMU_VIDEO_CIRRUS_MODES.RefreshRate
    QEMU_VIDEO_PRIVATE_DATA.CurrentMode
    QEMU_VIDEO_PRIVATE_DATA.LineBuffer
  + ArmVirtPkg: undo bogus component name and driver diagnostics
    disablement
  + NetworkPkg: Record user configured TargetIP/Port in iBFT
- Use GCC5 in Tumbleweed</changelog>
  <changelog author="glin@suse.com" date="1485259200">- update to 2017+git1485224553.6671cd7444
  + NetworkPkg: Fix protocol handler service in HttpDxe
  + OvmfPkg: Allow HTTP connections if HTTP Boot enabled
  + NetworkPkg: Add PCD to enable the HTTP connections switch
  + MdePkg: Add definitions for SMBIOS spec 3.1.0
  + ArmPlatformPkg/NorFlashDxe: Change Flash memory attributes
    before writes
  + MdePkg DxeHobLib: Make GetHobList working before Constructor
    is called
  + NetworkPkg: Add dns support for target URL configuration in
    ISCSI
  + MdeModulePkg/FileExplorer: Enable functionality of creating
    new file/folder
  + OvmfPkg: pull in TLS modules with -D TLS_ENABLE (also enabling
    HTTPS)
  + OvmfPkg: correct the IScsiDxe module included for the IPv6 stack
  + OvmfPkg: always resolve OpenSslLib, IntrinsicLib and
    BaseCryptLib
  + OvmfPkg: Modify QemuFwCfgLib to use new IoLib class library
  + OvmgPkg/PlatformBootManagerLib: Add Debug Agent console
  + OvmfPkg/SmmControl2Dxe: correct PCI_CONFIG_READ_WRITE in S3
    boot script
  + OvmfPkg: Install BGRT ACPI table
  + MdeModulePkg/Bds: Fix a bug that may causes S4 fails to resume
  + MdePkg, MdeModulePkg: S3BootScriptSaveMemPoll(): accept 64-bit
    LoopTimes
  + NetworkPkg/HttpDxe: Fix the potential NULL dereference
  + NetworkPkg/HttpDxe: HTTPS support over IPv4 and IPv6
  + NetworkPkg/TlsAuthConfigDxe: Provide the UI to support TLS
    auth configuration
  + NetworkPkg/TlsDxe: TlsDxe driver implementation over OpenSSL
  + MdePkg: Add TLS related protocol definition
  + MdePkg/MemoryLib: Refine InternalMemSetMem16|32|64 functions
    logic
  + NetworkPkg: Replace ASSERT with error return code in PXE and
    HTTP boot driver
  + MdeModulePkg: Replace ASSERT with error return code in PXE
    driver
  + UefiCpuPkg/Cpuid.h: Update CPUID definitions with SDM (Sep.2016)
  + UefiCpuPkg/Include: Update MSR header files with SDM (Sep.2016)
  + UefiCpuPkg/PiSmmCpuDxeSmm: Always initialze PSD
  + MdeModulePkg/PiSmmCore: MemoryAttributeTable need keep non-PE
    record
  + MdeModulePkg/PiSmmCore: AllocatePool should use MemoryType
  + OvmfPkg/XenHypercallLib: Add EFIAPI
  + OvmfPkg/QemuFwCfgLib: support QEMU's DMA-like fw_cfg access
    method
  + ArmVirtPkg/QemuFwCfgLib: rebase lib instance to updated lib
    class header
  + OvmfPkg/QemuFwCfgLib: extend lib class header with more
    definitions
  + ArmVirtPkg, OvmfPkg: QemuFwCfgLib: move DMA-related defs to lib
    class
  + OvmfPkg/QemuFwCfgLib: move InternalQemuFwCfgIsAvailable() to
    lib instances
  + ArmVirtPkg/QemuFwCfgLib: remove superfluous InternalQemuFwCfgIsAvailable()
  + OvmfPkg: Remove use of IntelFrameworkModulePkg legacy libs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Remove MTRRs from PSD structure
  + UefiCpuPkg/PiSmmCpuDxeSmm: Clear some semaphores on S3 boot
    path
  + ArmPkg/ArmDmaLib: add support for fixed host-to-device DMA
    offset
  + ArmPkg/ArmDmaLib: clean up abuse of device address
  + ArmPkg/ArmDmaLib: fix incorrect device address of double buffer
  + ArmPkg/ArmDmaLib: use DMA buffer alignment from CPU arch
    protocol
  + ArmPkg/ArmMmuLib: support page tables in cacheable memory only
  + UefiCpuPkg/PiSmmCpu: relax superpage protection on page split
  + OvmfPkg/PlatformPei: take VCPU count from QEMU and configure
    MpInitLib
  + UefiCpuPkg/MpInitLib: wait no longer than necessary for initial
    AP startup
- Enable TLS support by default (for HTTPS)</changelog>
  <changelog author="glin@suse.com" date="1488974400">- Update to 2017+git1488934948.29e9bf10dc
  + ArmVirtPkg: enable non-executable DXE stack for all platforms
  + ArmVirtPkg: enable PE/COFF image and memory protection for ARM
    platforms
  + ArmPkg/CpuDxe ARM: honour RO/XP attributes in SetMemoryAttributes()
  + ArmPkg/CpuDxe ARM: avoid unnecessary cache/TLB maintenance
  + ArmPkg/CpuDxe ARM: avoid splitting page table sections
    unnecessarily
  + Refine casting expression result to bigger size
  + NetworkPkg/Dhcp6Dxe: Handle the Nil UUID case
  + ArmVirtPkg AARCH64: enable NX memory protection for all platforms
  + ArmVirtPkg/HighMemDxe: preserve non-exec permissions on newly
    added regions
  + SecurityPkg: Fix potential bug in Security Boot dxe
  + MdeModulePkg/EbcDxe: use EfiBootServicesCode memory for thunks
  + CryptoPkg/OpensslLib: Upgrade OpenSSL version to 1.0.2k
    (bsc#1030565)
  + ArmVirtPkg: clear PcdPerformanceLibraryPropertyMask PCD
  + Ignore duplicated DNS address check
  + MdeModulePkg/DxeCore: base code protection on permission
    attributes
  + OvmfPkg: exclude libssl functionality from OpensslLib if
    TLS_ENABLE=FALSE
  + CryptoPkg/OpensslLib: introduce OpensslLibCrypto instance
  + ArmVirtPkg/ArmVirt.dsc.inc: AARCH64: enable DXE image
    protection feature
  + OvmfPkg/XenBusDxe: Use EFIAPI for XenStoreVSPrint
  + Update the Ethernet interface name
  + NetworkPkg:Add scriptable configuration to iSCSI driver by
    leveraging x-UEFI
  + ArmPkg/ArmMmuLib: AARCH64: enable stack alignment checking
  + ArmPlatformPkg/ArmPlatformStackLib: use callee preserved
    registers
  + MdeModulePkg/DxeCore: Add UEFI image protection
  + UefiCpuPkg/CpuDxe: Add memory attribute setting
  + OvmfPkg/QemuFwCfg: introduce FW_CFG_IO_SELECTOR, FW_CFG_IO_DATA,
    and FW_CFG_IO_DMA_ADDRESS
  + UefiCpuPkg/ExceptionHandlerAsm.S: Fix code length issue with
    GCC 5.4
  + ArmPkg/ArmMmuLib: AARCH64: add support for modifying only
    permissions
  + ArmPkg/CpuDxe: ARM: ignore page table updates that only change
    permissions
  + ArmPkg/CpuDxe: translate invalid memory types in
    EfiAttributeToArmAttribute
  + ArmPkg/CpuDxe: Correct EFI_MEMORY_RO usage
  + OvmfPkg/AcpiPlatformDxe: implement the QEMU_LOADER_WRITE_POINTER
    command
  + MdeMoudlePkg/DisplayEngine: Fix incorrect index used in array
    "InputText"
  + MdeModulePkg: Add the EFI_PRINT2S_PROTOCOL
  + MdePkg/BasePrintLib: Add safe print functions [A|U]ValueToStringS
  + Refine the SPrint functions
  + SecurityPkg: enhance secure boot Config Dxe &amp; Time Based
    AuthVariable
  + Generate the correct operational state of the interface
  + NetworkPkg/HttpBootDxe: Update to check specified media type
  + NetworkPkg/HttpBootDxe: Request HTTP token notify as a DPC at
    TPL_CALLBACK
  + NetworkPkg/iSCSIDxe: Update the condition for IScsiStart Abort
  + MdePkg ACPI: Incorrect definition name for ACPI IORT Table
    signature
  + MdeModulePkg/PciBus: Accept Spec values as BarIndex and
    Alignment
  + NetworkPkg/NetworkPkg.uni: Define the prompt and help
    information for PcdAllowHttpConnections
  + MdeModulePkg/DxeHttpLib: Correct the return status for the
    HTTP Port/ContentLength
  + MdeModulePkg/UefiBootManagerLib: Initialize Handle before
    using it
  + OvmfPkg/SmmControl2Dxe: select broadcast SMI if available
  + OvmfPkg: dynamic defaults for PcdCpuSmmApSyncTimeout,
    PcdCpuSmmSyncMode
  + ArmVirtPkg/QemuFwCfgLib: implement QemuFwCfgSkipBytes() API
  + ArmVirtPkg/QemuFwCfgLib: use DMA for QemuFwCfgWriteBytes() if
    available
  + ArmVirtPkg/QemuFwCfgLib: extract generic DmaTransferBytes()
    function
  + OvmfPkg/QemuFwCfgLib: add QemuFwCfgSkipBytes()
  + OvmfPkg/QemuFwCfgLib: generalize InternalQemuFwCfgDmaBytes()
    to SKIP op
  + SecurityPkg: Tcg2Dxe: Update PCR[4] measure logic
  + MdePkg: Add definitions for SMBIOS spec 3.1.1
  + OvmfPkg/QemuVideoDxe: Frame buffer config size may change in
    new mode
- Update openssl to 1.0.2k</changelog>
  <changelog author="glin@suse.com" date="1490875200">- Update to 2017+git1490844769.d3017dd96b
  + MdeModulePkg/DxeHttpLib: Fix the incorrect return status if URI
    port is invalid
  + NetworkPkg/DnsDxe: Fix zero StationIp configuration failure of
    DNSv6
  + CryptoPkg: Clean-up CRT Library Wrapper
  + CryptoPkg: Fix handling of &amp;strcmp function pointers
  + CryptoPkg/OpensslLib: Update INF files to support OpenSSL-1.1.0x
    build
  + ArmVirtPkg/PlatformHasAcpiDtDxe: don't expose DT if QEMU
    provides ACPI
  + ArmVirtPkg: enable AcpiTableDxe and EFI_ACPI_TABLE_PROTOCOL
    dynamically
  + ArmVirtPkg: add XenPlatformHasAcpiDtDxe
  + ArmVirtPkg: add PlatformHasAcpiDtDxe
  + UefiCpuPkg/AcpiCpuData.h: Support &gt;4GB MMIO address
  + NetworkPkg/IScsiDxe: Fix the incorrect error handling in
    DriverEntryPoint
  + Fix potential ASSERT if NetIp4IsUnicast is called
  + ArmPkg/PlatformBootManagerLib: move to BootLogoLib for boot
    splash support
  + UefiCpuPkg: Add CPU Features PEI/DXE drivers
  + ArmVirtPkg/HighMemDxe: use CPU arch protocol to apply memprotect
    policy
  + MdeModulePkg/BootGraphicsResourceTableDxe: don't allocate below
    4 GB
  + MdeModulePkg/DxeCore: deal with allocations spanning several
    memmap entries
  + MdeModulePkg/AcpiTableDxe: Not make FADT.{DSDT,X_DSDT} mutual
    exclusion
  + NetworkPkg: Fix service binding issue in TCP dxe
  + MdeModulePkg: Fix service binding issue in TCP4 and Ip4 dxe
  + MdeModulePkg: Fix bug in DxeHttplib when converting port number
  + MdeModulePkg/Ip4Dxe: Add Ip/Netmask pair check for Ip4Config2
  + ArmPkg/UncachedMemoryAllocationLib: set XP bit via CPU arch
    protocol
  + MdeModulePkg DxeCore: Remove unreferenced symbol for memory
    profile
  + MdeModulePkg PiSmmCore: Remove unreferenced symbol for SMRAM
    profile
  + NetworkPkg: Fix potential bug if the iSCSI use dns protocol
  + MdePkg/UefiDevicePathLib: Fix the wrong MAC address length
  + OvmfPkg/AcpiPlatformDxe: save fw_cfg boot script with QemuFwCfgS3Lib
  + ArmVirtPkg, OvmfPkg: retire QemuFwCfgS3Enabled() from QemuFwCfgLib
  + OvmfPkg: resolve QemuFwCfgS3Lib
  + ArmVirtPkg: resolve QemuFwCfgS3Lib
  + OvmfPkg/QemuFwCfgS3Lib: add initial PEI and DXE fw_cfg library
    instances
  + OvmfPkg: introduce QemuFwCfgS3Lib class
  + MdeModulePkg/SmmCore: Add Context in SmiHandlerProfileUnregister
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    NVME
  + ArmVirtPkg/ArmVirtPL031FdtClientLib: unconditionally disable DT
    node
  + ArmVirtPkg/FdtClientDxe: supplement missing EFIAPI calling conv
    specifiers
  + MdeModulePkg/AcpiTableDxe: improve FADT.{DSDT,X_DSDT} mutual
    exclusion
  + ArmPkg/CpuDxe: handle implied attributes in EfiAttributeToArmAttribute
  + ArmVirtPkg: apply PE/COFF memory protection to DxeCore as well
  + ArmPkg/UncachedMemoryAllocationLib: map uncached allocations
    non-executable
  + ArmPkg/UncachedMemoryAllocationLib: use CWG value to align pool
    allocations
  + ArmPkg/UncachedMemoryAllocationLib: restore mapping attributes
    after free
- Update openssl to 1.1.0e</changelog>
  <changelog author="glin@suse.com" date="1491393600">- Add ovmf-bsc1031336-fix-hii-gcc7-build.patch to fix gcc7 build
  (bsc#1031336)</changelog>
  <changelog author="glin@suse.com" date="1492084800">- Update to 2017+git1492060560.b6d11d7c46 (fate#322331, bsc#1032659)
  + MdePkg: BaseIoLibIntrinsic (IoLib class) library
  + MdeModulePkg/IdeBusPei: Fix undefined behavior in signed left
    shift
  + MdeModulePkg/ScsiDiskDxe: Fix undefined behavior in signed left
    shift
  + OvmfPkg/QemuVideoDxe: VMWare SVGA device support
  + MdeModulePkg/UefiBootManagerLib: Enhance short-form expanding
    logic
  + CryptoPkg/BaseCryptLib: Adding NULL checking in time() wrapper
  + CryptoPkg: Fix possible unresolved external symbol issue.
  + CryptoPkg/OpensslLib: Suppress extra build warnings in openssl
    source
  + CryptoPkg: Move openssl and CRT headers to private include
    section
  + BaseTools: Update tools_def.template to add -fno-builtin in GCC
    tool chain
  + SecurityPkg: SecureBootConfigDxe: Support AUTH_2 enrollment to
    DBX
  + MdeModulePkg/UefiHiiLib:Fix incorrect comparison expression
  + ArmVirtPkg/ArmVirtQemuKernel: increase slack space for DTB
  + ArmVirtPkg/FdtClientDxe: honor memory DT node 'status' property
  + NetworkPkg: Fix some bugs related to iSCSI keyword configuration
  + MdeModulePkg/DxeHttpLib: Avoid the pointless comparison of
    UINTN with zero
  + BaseTools: Enhance expression to support some more operation
  + MdePkg/Shell.h: Update Shell version from 2.1 to 2.2
  + UefiCpuPkg/PiSmmCpuDxeSmm: Update saved SMM ranges check in
    SmmProfile
  + ArmVirtPkg/PlatformHasAcpiDtDxe: allow guest level ACPI disable
    override
  + BaseTools/GCC AARCH64: force disable PIC code generation
  + UefiCpuPkg/MtrrLib: Use a better algorithm to calculate MTRR
  + MdeModulePkg/SmmCore: Fix memory leak on Profile unregistered
  + OvmfPkg: Allow multiple add-pointer linker commands to same
    ACPI table
- Drop upstream patch: ovmf-bsc1031336-fix-hii-gcc7-build.patch</changelog>
  <changelog author="meissner@suse.com" date="1494072000">- ovmf-pie.patch: add -fPIE to the Common build Makefile to
  allow a global PIE build.</changelog>
  <changelog author="glin@suse.com" date="1496664000">- Update to 2017+git1496630893.7ec69844b8
  + ShellPkg/alias: Fix bug to support upper-case alias
  + BaseTools/GCC ARM/AARCH64: Force disable PIE
  + BaseTools/Scripts: discard .gnu.hash section in GCC builds
  + OvmfPkg: make the 4MB flash size the default
  + MdeModulePkg/BDS: Fix a buffer overflow bug
  + CryptoPkg/BaseCryptLib: Add NULL pointer checks in DH and P7Verify
  + UefiCpuPkg/BaseUefiCpuLib: Use NASM read-only data section name
  + OvmfPkg/PlatformPei: align EmuVariableNvStore at any page boundary
  + OvmfPkg/EmuVariableFvbRuntimeDxe: change block size to 4KB
  + OvmfPkg/EmuVariableFvbRuntimeDxe: correct NumOfLba vararg type
    in EraseBlocks()
  + ArmPlatformPkg/NorFlashDxe: correct NumOfLba vararg type in
    EraseBlocks()
  + OvmfPkg/EmuVariableFvbRuntimeDxe: always format an auth
    varstore header
  + MdeModulePkg/PciBus: Add IOMMU support
  + MdeModulePkg/PciHostBridge: Add IOMMU support
  + MdeModulePkg/Include: Add IOMMU protocol definition
  + ShellPkg/HandleParsingLib: Show LoadedImageProtocol file path
    as text
  + NetworkPkg: Fix issue in dns driver when building DHCP packet
  + Addressing TCP Window Retraction when window scale factor is used
  + Add wnd scale check before shrinking window
  + UefiCpuPkg/MtrrLib: Don't report OutOfResource when MTRR is enough
  + MdePkg DxeServicesLib: Handle potential NULL FvHandle
  + OvmfPkg/PlatformPei: handle non-power-of-two spare size for
    emu variables
  + SecurityPkg/Pkcs7VerifyDxe: Add format check in DB list contents
  + OvmfPkg: raise max variable size (auth &amp; non-auth) to 33KB for
    FD_SIZE_4MB
  + OvmfPkg: introduce 4MB flash image (mainly) for Windows HCK
  + OvmfPkg/OvmfPkg.fdf.inc: extract VARS_LIVE_SIZE and
    VARS_SPARE_SIZE macros
  + OvmfPkg: introduce the FD_SIZE_IN_KB macro / build flag
  + ArmVirtPkg: install EdkiiPlatformHasDeviceTree proto in the
    32-bit builds
  + NetworkPkg: Fix PXEv6 boot failure when DhcpBinl offer received
  + NetworkPkg: Fix bug in iSCSI mode ipv6 when enabling target DHCP
  + Fix issue the iSCSI client can not send reset packet
  + CryptoPkg/SmmCryptLib: Enable HMAC-SHA256 support for SMM
  + ShellPkg/Shell: eliminate double-free in RunSplitCommand()
  + ShellPkg/Shell: clean up bogus member types in SPLIT_LIST
  + MdeModulePKg/BDS: Build meaningful description for Wi-Fi boot
    option
  + MdeModulePkg/DeviceManagerUiLib: Fix the network device MAC
    display issue
  + MdeModulePkg/Mtftp4Dxe: Add invalid ServerIp check during MTFTP
    configuration
  + NetworkPkg/TlsAuthConfigDxe: Close and free the file related
    resource
  + NetworkPkg: Correct the proxy DHCP offer handing
  + NetworkPkg/HttpDxe: Fix HTTP download OS image over 4G size
    failure
  + MdeModulePkg/UefiBootManagerLib: Avoid buggy USB short-form
    expanding
  + NetworkPkg: Fix bug related DAD issue in IP6 driver
  + NetworkPkg: Add check logic for iSCSI driver
  + MdeModulePkg PiSmmCore: Enhance SMM FreePool to catch buffer
    overflow
  + UefiCpuPkg/PiSmmCpuDxeSmm: Lock should be acquired
  + MdeModulePkg/BootManagerMenu: Add assertion to indicate no DIV
    by 0
  + CryptoPkg: Correct some minor issues in function comments
  + MdePkg/UefiLib: Avoid mis-calculate of graphic console size
  + MdeModulePkg/PiSmmCore: Fix potentially uninitialized local
    variable
  + MdeModulePkg DxeCore: Fix issue to print GUID value %g without
    pointer
  + ArmVirtPkg/ArmVirtXen: remove ARM BdsLib library class resolution
- Add ovmf-disable-ia32-firmware-piepic.patch to disable pic/pie
  explicitly since gcc7 in Factory enables pic/pie by default but
  GenFw cannot handle the GOT sections and failed the build.</changelog>
  <changelog author="glin@suse.com" date="1502971200">- Update to 2017+git1502826981.a136bc3ccf
  + OvmfPkg/Protocol/VirtioDevice: fix comment style
  + OvmfPkg/VirtioMmioDeviceLib: add missing IN and OUT decoration
  + OvmfPkg/VirtioPciDeviceDxe: add missing IN and OUT decoration
  + OvmfPkg/Virtio10Dxe: supply missing BUS_MASTER attribute
  + OvmfPkg/VirtioPciDeviceDxe: supply missing BUS_MASTER attribute
  + UefiCpuPkg MpInitLib: Save/restore original WakeupBuffer for
    DxeMpLib
  + ShellPkg UefiDpLib: Init CustomCumulativeData.MinDur
  + MdeModulePkg DxeCore: Enhance "ConvertPages: Incompatible
    memory types"
  + MdeModulePkg DxeCore: Fix double free pages on LoadImage
    failure path
  + NetworkPkg/HttpBootDxe: Update device path node to include DNS
    information
  + MdeModulePkg/UefiBootManagerLib: Support DNS device path
    description
  + MdePkg/UefiDevicePathLib: Add DevPathFromTextDns and
    DevPathToTextDns libraries
  + MdePkg/DevicePath.h: Add DNS Device Path definition
  + NetworkPkg/HttpDxe: Handle the HttpVersionUnsupported in the
    HttpConfigData
  + BaseTools: Support TabSpace between section tag in DEC file
  + BaseTools: Don't need to add extra quotes when UI string from
    file
  + BaseTools/UPT: Support Multiple Installation
  + BaseTools/Scripts: Add sample makefile for use with
    RunMakefile.py
  + BaseTools/Scripts: Add python script to run a makefile
  + BaseTools/build: Expand PREBUILD/POSTBUILD DSC actions
  + NetworkPkg/Ip6Dxe: Support SetData interface to clear specific
    configuration
  + MdeModulePkg/Ip4Dxe: Support SetData interface to clear
    specific configuration
  + ShellPkg/drivers: Fix GCC build failure
  + BaseTools/edksetup.sh: fix invalid test for current working
    directory
  + ShellPkg/driver: Show "-" in non-SFO mode
  + ShellPkg/drivers: Show Image Name in non-SFO mode
  + MdeModulePkg: Variable: Fix typo in variable measure
  + MdeModulePkg/NvmExpressDxe: Notify NVME HW when system reset
    happens
  + MdePkg/Nvme: Add NVME shutdown notification related macros
  + NetworkPkg/HttpBootDxe: Refine the coding style.
  + OvmfPkg/AcpiPlatformDxe: short-circuit the transfer of an empty
    S3_CONTEXT
  + MdeModulePkg SerialDxe: Process timeout consistently in
    SerialRead
  + UefiCpuPkg MtrrLib: Remove deprecated micro.
  + UefiCpuPkg CpuDxe: Remove reference deprecated macro.
  + UefiCpuPkg CpuDxe: Enhance get mtrr mask logic.
  + BaseTools/Conf: apply nasmb, asm16 build rule order
  + NetworkPkg/HttpDxe: Support HTTP Patch method
  + OvmfPkg/PlatformPei: support &gt;=1TB high RAM, and discontiguous
    high RAM
  + OvmfPkg/QemuFwCfgLib: Use BusMasterCommonBuffer to map
    FW_CFG_DMA_ACCESS
  + OvmfPkg/IoMmuDxe: Unmap(): recycle MAP_INFO after
    BusMasterCommonBuffer[64]
  + OvmfPkg/IoMmuDxe: abort harder on memory encryption mask
    failures
  + OvmfPkg/IoMmuDxe: implement in-place decryption/encryption for
    Map/Unmap
  + OvmfPkg/IoMmuDxe: rework setup of "MapInfo-&gt;PlainTextAddress"
    in Map()
  + OvmfPkg/IoMmuDxe: zero out pages before releasing them
  + OvmfPkg/IoMmuDxe: clean up used library classes
  + OvmfPkg/IoMmuDxe: propagate errors from AmdSevInstallIoMmuProtocol()
  + OvmfPkg/IoMmuDxe: don't initialize local variables
  + OvmfPkg/IoMmuDxe: convert UINTN arguments to UINT64 for the
    %Lx fmt spec
  + OvmfPkg/IoMmuDxe: rename HostAddress to CryptedAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rename DeviceAddress to PlainTextAddress in
    MAP_INFO
  + OvmfPkg/IoMmuDxe: rewrap source code to 79 characters
  + OvmfPkg/IoMmuDxe: Fix header guard macro
  + MdeModulePkg/DisplayEngine: Fix incorrect display issue
  + BaseTools/VfrCompile: Remove the MAX_PATH limitation
  + BaseTools/VfrCompile: Fix segmentation fault issues
  + NetworkPkg: iSCSI should allow to set 6 or 12 length of ISID
    keyword.
  + UefiCpuPkg: Enable Processor Trace feature.
  + UefiCpuPkg: Add Processor Trace feature definition.
  + UefiCpuPkg: Add Pcds used by processor trace feature.
  + UefiCpuPkg/Msr: Add a missing IvyBridge processor signature
  + MdeModulePkg PeiCore: Install SEC HOB data
  + MdePkg: Add definition for SecHobData PPI
  + UefiCpuPkg PiSmmCpuDxeSmm: Check LMCE capability when wait for
    AP.
  + UefiCpuPkg CpuCommonFeaturesLib: Enable LMCE feature.
  + UefiCpuPkg: Add definition for LMCE feature.
  + NetworkPkg: Display HTTP redirection info to the screen if need.
  + ShellPkg/dblk: Honor the BlockIo alignment requirement.
  + MdeModulePkg/Ufs: Set 'Data Segment Length' field for Write
    Descriptor
  + MdeModulePkg/UfsPassThruDxe: Add impl of UFS Device Config
    Protocol
  + UefiCpuPkg SecCore: Fix operands of different size in bitwise
    operation
  + MdePkg/Ftp4: Fix wrong function pointer declaration
  + NetworkPkg/HttpDxe: Destroy the TLS instance when cleaning up
    the HTTP child
  + CryptoPkg/TlsLib: Remove the redundant free of BIO objects
  + NetworkPkg/Ip6Dxe: Fix the IPv6 PXE boot option goes missing
    issue
  + Fix spelling typo in EFI_HTTP_STATUS_CODE
  + NetworkPkg/HttpDxe: Refine the coding style.
  + MdePkg/Http.h: Refine the coding style.
  + ArmPkg: Move IS_DEVICE_PATH_NODE for sharing
  + MdeModulePkg FirmwarePerfPei: Remove SEC performance data
    getting code
  + UefiCpuPkg SecCore: Add SecPerformancePpiCallBack
  + UefiCpuPkg SecCore: Adjust PeiTemporaryRamBase&amp;Size to be
    8byte aligned
  + MdeModulePkg PeiCore: Handle notification PPI from SEC
  + MdePkg PiPeiCis.h: Add description for notification PPI from
    SEC
  + MdeModulePkg PiSmmCoreMemoryAllocLib: Fix a FreePool()
    assertion issue
  + BaseTools/GenCrc32: Fix a bug to hand empty file for decode
  + BaseTools/EfiLdrImage: Fix a segmentation fault from
    vfprintf()
  + BaseTools/EfiRom: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenFfs: Fix a segmentation fault from
    vsprintf()/vfprintf()
  + BaseTools/GenSec: Fix a segmentation fault in main()
  + BaseTools/Split: Fix the segmentation fault in GetSplitValue()
  + BaseTools: Fix the bug to correctly check Pcd type that in FDF
    file
  + MdeModulePkg/PciBus: Avoid hang when BUS pad resource is not
    in top
  + ShellPkg: Avoid buffer out-of-bound access
  + ShellPkg/setvar: Check the duplicate flag
  + ShellPkg/ShellLib: Remove unused macros
  + MdePkg: Follow UEFI 2.7 spec to deprecate SMM Communication
    ACPI Table
  + UefiCpuPkg PiSmmCommunicationSmm: Deprecate SMM Communication
    ACPI Table
  + MdeModulePkg/BMMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/BMUiLib: Check reset requirement before exiting
    UiApp
  + MdeModulePkg/SetupBrowser: Record the reset status in all
    SendForm
  + ShellPkg/map: Recognize CDROM change
  + MdeModulePkg Xhci: Also RecoverHaltedEndpoint for BABBLE_ERROR
  + MdeModulePkg SmmLockBoxDxeLib: Get SmmCommRegion for COMM
    buffer
  + MdePkg/ResetNotification: Rename to UnregisterResetNotify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for KMS
    protocol.
  + ShellPkg/ls: Display the file time in local time.
  + BaseTools: Fix the bug that warn() function with only 1
    argument
  + BaseTools: add some comment for .PrebuildEnv file's usage
  + UefiCpuPkg: Update RegisterCpuFeaturesLib to consume
    PcdGetSize with UINTN
  + UefiCpuPkg: Update RegisterCpuFeaturesLib module UNI to match
    it
  + MdeModulePkg: Update NonDiscoverableDeviceRegistrationLib file
    header format
  + MdePkg UsbFunctionIo.h: Update comments for GetDeviceInfo
    return status
  + UefiCpuPkg: Remove deprecated CPU feature.
  + MdeModulePkg SmmAccess: Update comments to follow PI spec.
  + MdePkg SmmAccess2: Update comments to follow PI spec.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling.
  + MdeModulePkg/DxeCore: Avoid accessing non-owned memory
  + MdePkg DxeHstiLib: Fix memory leak issue
  + MdePkg Hsti.h: Update version info to 1.1a
  + ArmPlatformPkg: Support different PL011 reg offset
  + CryptoPkg/OpensslLib AARCH64: clear XIP CC flags
  + BaseTools/tools_def AARCH64: avoid SIMD registers in XIP code
  + BaseTools/tools_def AARCH64: mark register x18 as reserved
  + BaseTools/Build: Support python scripts in PREBUILD/POSTBUILD
  + UefiCpuPkg CpuCommonFeaturesLib: Fix smx/vmx enable logic
    error.
  + UefiCpuPkg RegisterCpuFeaturesLib: Add error handling code.
  + OvmfPkg/QemuFwCfgLib: Suppress GCC49 IA32 build failure
  + MdePkg: Declare _ReturnAddress() in Base.h for MSFT tool chain
  + OvmfPkg: update PciHostBridgeDxe to use PlatformHasIoMmuLib
  + OvmfPkg/QemuFwCfgLib: Add SEV support
  + OvmfPkg: Add IoMmuDxe driver
  + OvmfPkg: Add PlatformHasIoMmuLib
  + OvmfPkg: Add AmdSevDxe driver
  + OvmfPkg/PlatformPei: Set memory encryption PCD when SEV is
    enabled
  + OvmfPkg/BaseMemcryptSevLib: Add SEV helper library
  + OvmfPkg: Update dsc to use IoLib from BaseIoLibIntrinsicSev.inf
  + OvmfPkg/ResetVector: Set C-bit when building initial page table
  + MdeModulePkg/XhciDxe: Make comments align with function
  + MdeModulePkg/PartitionDxe: Add impl of Partition Information
    Protocol
  + MdePkg: Add EFI Partition Information Protocol definitions
  + BaseTools: Report Fd File Path in build log
  + BaseTools: Fix FDF file parse !include file issue
  + BaseTools: Add PCDs conditional operator function
  + BaseTools/Eot: register MM Module types with FFS class.
  + BaseTools/Workspace: check MM module type compatibility with
    PI version.
  + BaseTools/build: register MM module types with build tools.
  + BaseTools/GenFds: register MM Modules and MM FV file types.
  + BaseTools/CommonDataClass: register MM Modules.
  + BaseTools/Common: add support in FDF Parser to parse MM
    Modules.
  + BaseTools/Common: add MM Module data types.
  + BaseTools/AutoGen: auto generate MM template APIs and
    dependencies.
  + BaseTools/GenFw: recognize MM file types as EFI Boot Service
    Drivers.
  + BaseTools/GenFfs: add FFS file types for MM modules.
  + UefiCpuPkg MpInitLib: Update return status to follow spec.
  + UefiCpuPkg CpuMpPei: Update return status to follow spec.
  + UefiCpuPkg CpuDxe: Update return status to follow spec.
  + MdePkg MpServices: Update return status to follow spec.
  + BaseTools/GenFw: disregard payload in PE debug directory entry
    size
  + MdeModulePkg/NvmExpressDxe: Handle timeout for blocking
    PassThru req
  + OvmfPkg: mention the extended TSEG near the PcdQ35TsegMbytes
    declaration
  + OvmfPkg/PlatformPei: honor extended TSEG in PcdQ35TsegMbytes
    if available
  + OvmfPkg/SmmAccess: support extended TSEG size
  + OvmfPkg/IndustryStandard/Q35MchIch9.h: add extended TSEG size
    macros
  + OvmfPkg: make PcdQ35TsegMbytes dynamic
  + OvmfPkg/SmmAccess: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg/PlatformPei: prepare for PcdQ35TsegMbytes becoming dynamic
  + OvmfPkg: widen PcdQ35TsegMbytes to UINT16
  + OvmfPkg: update -D E1000_ENABLE from Intel PROEFI v.07 to
    BootUtil v.22
  + OvmfPkg: disable build-time relocation for DXEFV modules
  + ArmVirtPkg: remove status code support
  + ArmPlatformPkg: convert VExpress ResetSystemLib to
    ResetSystemLib
  + MdeModulePkg/XhciDxe: Check timeout URB again after stopping
    endpoint
  + MdeModulePkg/XhciDxe: Separate common logic to XhcTransfer
  + MdeModulePkg/XhciDxe: Dump the CMD/EVENT/INT/BULK ring
    information
  + MdeModulePkg/XhciDxe: Refine IsTransferRingTrb and
    IsAsyncIntTrb
  + BaseTools: suppress usage instructions with rebuild options
  + ArmVirtPkg: switch to generic ResetSystemRuntimeDxe
  + ArmPkg: implement ResetSystemLib using PSCI 0.2 calls
  + MdeModulePkg CapsuleApp: Fix print info in BuildGatherList()
  + MdeModulePkg ResetSystem: Update the comments of ResetSystem()
  + MdeModulePkg/ResetSystem: Implement ResetNotification protocol
  + MdeModulePkg/ResetSystem: Remove unnecessary global variable
  + MdePkg: Add ResetNotification protocol definition
  + MdeModulePkg PeiCore: Correct the comments of PeiResetSystem2
  + MdePkg: Correct the comments of EFI_PEI_RESET2_SYSTEM
  + ShellPkg: Update dh command to reflect correct driver field
    information
  + MdeModulePkg/AtaAtapiPassThru: relax PHY detect timeout
  + MdePkg/IndustryStandard: update ACPI/IORT definitions to
    revision C
  + ShellPkg DmpStore: Make NameSize to be consistent with name
    buffer
  + MdeModulePkg/BdsDxe: Report Status Code when booting from
    BootOrder list
  + MdePkg/PiStatusCode: Add new Status Code for BDS when
    attempting BootOrder
  + Revert "MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol"
  + UefiCpuPkg: Modify GetProcessorLocationByApicId() to support
    AMD.
  + UefiCpuPkg: Add CPUID definitions for AMD.
  + UefiCpuPkg: Define AMD Memory Encryption specific CPUID and MSR
  + MdeModulePkg DxeCore: Only free ScratchBuffer when it is not
    NULL
  + MdeModulePkg/DxeCore: Fixed Interface returned by
    CoreOpenProtocol
  + BaseTools/PatchCheck.py: Add warning info for new binary files
  + BaseTools/PatchCheck.py: Fix misreport for binary changes in
    patch
  + BaseTools: support building the same INF more than once with
  - m option
  + BaseTools: report error HiiString in HII format PCD must not
    be empty
  + BaseTools: Fix the bug that use '|' or '||' in DSC file's Pcd
    value
  + BaseTools: Enhance the report to not show the empty section
  + BaseTools: Enhance DEC Defines section format check
  + BaseTools: Copy "TianoCore" userextensions into As Built Inf
  + BaseTools: Copy "MODULE_UNI_FILE" file into OUTPUT directory
  + MdePkg/Cper.h: Update Firmware Error Record per UEFI 2.7
  + MdeModulePkg: Enhance the debug message for
    InstallProtocolInterface
  + MdePkg: update Base.h in MdePkg to check the _MSC_VER
  + BaseTools: add /Gw to CC_FLAGS for VS2013 and higher tool
    chain tags
  + NetworkPkg: Fix GCC build issue.
  + BaseTools/tools_def: AARCH64: disable LTO type mismatch
    warnings
  + BaseTools/tools_def GCC: ARM/AARCH64: drop -save-temps from
    command line
  + MdeModulePkg Variable: Add missing change in dd59d95e1994
  + MdeModulePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + MdePkg: Minor update to the Data parameter for PEI
    GetVariable()
  + NetworkPkg/HttpBootDxe: Add HTTP Boot Callback protocol
    support.
  + MdePkg: Add header file for HTTP Boot Callback protocol
    in UEFI 2.7.
  + MdeModulePkg: Return invalid param in LocateProtocol for
    Protocol==NULL
  + MdePkg: Add EFI UFS Device Config Protocol definitions
  + MdeModulePkg: Fix use-after-free error in
    InstallConfigurationTable()
  + MdeModulePkg: Clean ACPI 2.0 characters in UEFI spec
  + MdePkg: Clean ACPI 2.0 characters in UEFI spec
  + UefiCpuPkg/SmmCpuFeatureLib: Add more CPU ID for
    SmmFeatureControl.
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + MdeModulePkg/BMMUiLib: Fix incorrect variable name
  + SecurityPkg TcgDxe: Simplify debug msg when "TPM not working
    properly"
  + ShellPkg: Fix typo errors in ifconfig help output
  + Shell/alias: Print detailed error when deleting alias
  + OvmfPkg/AcpiPlatformDxe: fix spurious uninitialized var warning
  + NetworkPkg/HttpBootDxe: Handle new #define in HttpBootDxe
  + MdeModulePkg/DxeHttpLib: Handle new #define in
    HttpMappingToStatusCode
  + MdePkg/Http.h: Add #define for 308 redirect
  + ShellPkg/ifconfig: Update help message
  + MdeModulePkg/PciHostBridgeDxe: Make bitwise operands of the
    same size
  + OvmfPkg/AcpiPlatformDxe: alloc blobs from 64-bit space unless
    restricted
  + BaseTools: Fix the bug use same FMP_PAYLOAD in different
    capsule file
  + BaseTools: Fix incremental build failure that override file be
    removed
  + ShellBinPkg: Ia32/X64 Shell binary update.
  + ShellPkg/parse: Handle Unicode stream from pipe correctly
  + ShellPkg/alias: Return status for alias deletion
  + MdePkg SmmIoLib: Use NULL pointer check instead of useless
    Status check
  + MdePkg SmmMemLib: Remove ASSERT in SmmIsBufferOutsideSmmValid
  + MdeModulePkg/UefiPxeBcDxe: Refine the PXE boot displayed
    information
  + MdeModulePkg/UefiPxeBcDxe: Fix the PXE BootMenu selection issue
- Build x86_64 4MB images since upstream switched to 4MB by for a
  larger space for variables. Also update README to reflect the
  change.
- Remove License-fat-driver.txt since FatPkg uses the same license
  as the root license.
- Add the OVMF license file
- Disable the PIE/PIC warning for the debug files since all object
  files will be converted to PE/COFF, so it's pointless to enable
  PIE/PIC.
- Remove Default_DB_EX and Default_DBX correctly</changelog>
  <changelog author="glin@suse.com" date="1503921600">- Update ovmf-embed-default-keys.patch to handle the empty
  certificate files correctly</changelog>
  <changelog author="glin@suse.com" date="1505390400">- Update to 2017+git1505340320.5afa5b8159
  + MdeModulePkg/UdfDxe: suppress incorrect compiler warning in
    ReadFile()
  + MdeModulePkg/UdfDxe: reject reserved values in ICB.Flags[2:0]
  + MdeModulePkg: Add UdfDxe to the dsc file
  + MdeModulePkg: Update PiDxeS3BootScriptLib Internal function name
  + MdeModulePkg/UdfDxe: Remove negative comparison of unsigned
    number
  + ArmVirtPkg/ArmVirtQemu: port HTTP_BOOT_ENABLE from OvmfPkg
  + ArmVirtPkg: don't build the network stack uselessly for Xen
  + MdeModulePkg/PartitionDxe: remove always false comparison
  + MdeModulePkg/PartitionDxe: don't divide 64-bit values with C
    operators
  + MdeModulePkg/UdfDxe: replace zero-init of local variables with
    ZeroMem()
  + MdeModulePkg/UdfDxe: don't return unset Status if INLINE_DATA
    req succeeds
  + MdeModulePkg/UdfDxe: ASSERT() valid ReadFileInfo Flags for
    INLINE_DATA req
  + MdeModulePkg/UdfDxe: Initialize the array after declaration
  + ShellPkg/Ifconfig6: Update error message and add a new line
  + NetworkPkg/IScsiDxe: Fix the incorrect max length of IP_ADDRESS
  + OvmfPkg/SataControllerDxe: log informative message at
    DEBUG_INFO level
  + OvmfPkg/PlatformBootManagerLib: log informative message at
    DEBUG_INFO lvl
  + OvmfPkg/PlatformPei: log informative message at DEBUG_INFO level
  + UefiCpuPkg/CpuDxe: log informative message at DEBUG_INFO level
  + MdeModulePkg/UsbBusDxe: log warning message at DEBUG_WARN level
  + OvmfPkg/PlatformDebugLibIoPort: write messages with IoWriteFifo8()
  + MdePkg/BaseIoLibIntrinsic: fix SEV (=unrolled) variants of IoWriteFifoXX()
  + MdeModulePkg Xhci: Correct description of Timeout param in XhciReg.h
  + BaseTools/GCC: set -Wno-unused-const-variable on RELEASE builds
  + ArmVirtPkg: Enable UDF file system support
  + OvmfPkg: Enable UDF file system support
  + MdeModulePkg/PartitionDxe: Add UDF file system support
  + OvmfPkg/IoMmuDxe: unmap all IOMMU mappings at ExitBootServices()
  + OvmfPkg/IoMmuDxe: generalize IoMmuUnmap() to IoMmuUnmapWorker()
  + OvmfPkg/IoMmuDxe: track all mappings
  + OvmfPkg/VirtioScsiDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioRngDxe: don't unmap VRING at ExitBootServices()
  + OvmfPkg/VirtioGpuDxe: don't unmap VRING &amp; BackingStore at ExitBootServices
  + OvmfPkg/VirtioBlkDxe: don't unmap VRING at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: disable the device at ExitBootServices()
  + MdeModulePkg/AtaAtapiPassThru: unmap DMA buffers after disabling
    BM DMA
  + MdeModulePkg/AtaAtapiPassThru: cache EnabledPciAttributes
  + OvmfPkg/SecMain: Fix stack switching to permanent memory
  + ArmPkg: add ArmCrashDumpDxe driver
  + MdeModulePkg, NetworkPkg: Fix GCC build error
  + NetworkPkg/Ip6Dxe: fix a bug in IP6 driver for IpSec protocol
    notify
  + MdeModulePkg/Ip4Dxe: fix a bug in IP4 driver for IpSec protocol
    notify
  + MdePkg: Add UEFI 2.7 defined GUID and structure for AIP network
    media type
  + MdeModulePkg/UefiBootManagerLib: Generate boot description for
    SD/eMMC
  + Pkcs7VerifyDxe: Don't allow Pkcs7Verify to install protocols twice
  + SecurityPkg/Pkcs7Verify: Complete the Pkcs7VerifyDxe protocol
  + MdePkg PeiMemoryAllocationLib: Update InternalAllocateAlignedPages
  + MdePkg PeiMemoryAllocationLib: Update Free(Aligned)Pages
  + MdeModule PeiCore: Support pre memory page allocation
  + OvmfPkg/VirtioGpuDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioGpuDxe: map backing store to bus master device address
  + OvmfPkg/VirtioGpuDxe: helpers for backing store (de)allocation+(un)mapping
  + OvmfPkg/VirtioGpuDxe: take EFI_PHYSICAL_ADDRESS in ResourceAttachBacking()
  + OvmfPkg/VirtioGpuDxe: map virtio GPU command objects to device
    addresses
  + OvmfPkg/VirtioGpuDxe: map VRING for bus master common buffer
    operation
  + OvmfPkg/IoMmuDxe: IoMmuFreeBuffer(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuAllocateBuffer(): nicer and more
    informative DEBUGs
  + OvmfPkg/IoMmuDxe: IoMmuUnmap(): clean up DEBUG message
  + OvmfPkg/IoMmuDxe: IoMmuMap(): log nicer and more informative
    DEBUG msgs
  + OvmfPkg/BaseMemEncryptSevLib: clean up upper-case / lower-case
    in DEBUGs
  + OvmfPkg/BaseMemEncryptSevLib: promote DEBUG_WARN levels to
    DEBUG_ERROR
  + OvmfPkg/BaseMemEncryptSevLib: clean up debug logging of
    PhysicalAddress
  + OvmfPkg/BaseMemEncryptSevLib: clean up DEBUG prefixes
  + OvmfPkg/BaseMemEncryptSevLib: break DEBUG calls to multiple lines
  + OvmfPkg/BaseMemEncryptSevLib: unify encrypt/decrypt DEBUG messages
  + ArmPkg: remove ArmDmaLib
  + OvmfPkg/VirtioScsiDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioScsiDxe: map virtio-scsi request and response buffers
  + OvmfPkg/VirtioScsiDxe: add helper to create a fake host adapter error
  + OvmfPkg/VirtioScsiDxe: map VRING using VirtioRingMap()
  + ArmPkg: remove UncachedMemoryAllocationLib
  + BaseTools/Gcc ARM AARCH64: add support for building device tree
    binaries
  + BaseTools: Enable --whole-archive in GCC tool chain as the
    default option
  + UefiCpuPkg/Mplib.c: Perform complete initialization when enable AP
  + OvmfPkg/VirtioBlkDxe: Check the return status of unmap data buffer
  + ArmVirtPkg: remove DmaLib library class resolution
  + ShellPkg: Update CWD and current mapping when commands return
  + ShellPkg: Fix bug that fails to change CWD after "map -r"
  + SecurityPkg: Add ARM/AARCH64 arch to enable RngTest module build
  + OvmfPkg/QemuFwCfgDxeLib: SEV: zero FW_CFG_DMA_ACCESS before
    decrypting it
  + ArmPkg/ArmDmaLib: implement DmaAllocateAlignedBuffer()
  + MdeModulePkg/UefiHiiLib: Fix incorrect check for string length
  + OvmfPkg/VirtioBlkDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + Ovmfpkg/VirtioBlkDxe: map virtio-blk request and response buffers
  + OvmfPkg/VirtioBlkDxe: map VRING using VirtioRingMap()
  + MdePkg/S3PciSegmentLib: Add S3PciSegmentLib class and instance
  + MdePkg/PciSegmentLib: Add instances that consumes PciSegmentInfoLib
  + MdePkg/PciSegmentInfoLib: Add PciSegmentInfoLib class and instance
  + UefiCpuPkg/CpuCommonFeaturesLib: Add CPUID MCA support check
  + UefiCpuPkg: Update default for PcdCpuProcTraceMemSize/PcdCpuProcTraceOutputScheme
  + UefiCpuPkg/CpuCommonFeaturesLib: Use MSR data structure when
    change MSR value
  + UefiCpuPkg/ArchitecturalMsr.h: Add RTIT TOPA table entry
    definition
  + UefiCpuPkg/MpLib: fix potential overflow issue
  + UefiCpuPkg/PiSmmCpuDxeSmm: Fix memory protection crash
  + BaseTools/EfiRom: Add multiple device id support
  + OvmfPkg/VirtioRngDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/Virtio10: define VIRTIO_F_IOMMU_PLATFORM feature bit
  + MdeModulePkg XhciDxe: Fix Map and Unmap inconsistency
  + SecurityPkg/Tcg2Dxe: Properly shutdown TPM before reset
  + OvmfPkg/VirtioRngDxe: map host address to device address
  + OvmfPkg/VirtioLib: change the parameter of VirtioAppendDesc()
    to UINT64
  + OvmfPkg/VirtioLib: alloc VRING buffer with AllocateSharedPages()
  + OvmfPkg/VirtioLib: add function to map VRING
  + OvmfPkg/Virtio10Dxe: add the RingBaseShift offset
  + OvmfPkg/Virtio: take RingBaseShift in SetQueueAddress()
  + OvmfPkg/VirtioLib: take VirtIo instance in VirtioRingInit/VirtioRingUninit
  + OvmfPkg/VirtioLib: add VirtioMapAllBytesInSharedBuffer() helper
    function
  + OvmfPkg/VirtioMmioDeviceLib: implement IOMMU-like member functions
  + OvmfPkg/VirtioPciDeviceDxe: implement IOMMU-like member functions
  + OvmfPkg/Virtio10Dxe: implement IOMMU-like member functions
  + OvmfPkg: introduce IOMMU-like member functions to VIRTIO_DEVICE_PROTOCOL
  + BaseTools: Add the missing -pie link option in GCC tool chain
  + ArmPkg/ArmDmaLib: remove dependency on UncachedMemoryAllocationLib
  + OvmfPkg/QemuVideoDxe: remove AARCH64/ARM support
  + ArmVirtPkg: remove QemuVideoDxe from ArmVirtQemu and ArmVirtQemuKernel
  + BaseTools: Roll back GenFw Change to keep unknown field in RSDS
    debug entry
  + MdeModulePkg/DisplayEngine: Add implementation of HiiPopup protocol
  + MdeModulePkg/Library: Remove the self-reference in
    UdpIoLib/TcpIoLib/IpIoLib
  + ShellPkg/mkdir: support creating nested directories
  + MdeModulePkg/ScsiBusDxe: don't produce ScsiIo for nonexistent LUNs
  + UefiCpuPkg/PiSmmCpuDxeSmm: Add CPUID MCA support check
  + ArmPkg/ArmDmaLib: use double buffering only for bus master write
  + ArmVirtPkg/FdtPL011SerialPortLib: call PL011UartLib in all
    SerialPortLib APIs
  + UefiCpuPkg RegisterCpuFeaturesLib: Fix buffer pointer error usage
  + NetworkPkg/Ip6Dxe: Fix the bug when checking the DataSize
  + MdePkg/BaseLib: Update internal LinkedList verifications
  + MdePkg/BaseLib: Add IsNodeInList() function
  + MdeModulePkg: Delete useless case code
  + MdeModulePkg: Delete never touched code
  + UefiCpuPkg/BaseUefiCpuLib.inf: Remove unnecessary library class
  + UefiCpuPkg RegisterCpuFeaturesLib: Enhance debug messages.</changelog>
  <changelog author="glin@suse.com" date="1508155200">- Update ovmf-gdb-symbols.patch to avoid some symbols from being
  removed (bsc#1063463)
- Add needssslcertforbuild back. It's useful for the devel projects.</changelog>
  <changelog author="glin@suse.com" date="1511179200">- Update to 2017+git1510945757.b2662641d5
  + ArmPlatformPkg/ArmPlatformLibNull: remove bogus PCD dependencies
  + MdeModulePkg/UsbMassStorageDxe: Enhance Request Sense Handling
  + OvmfPkg: save on I/O port accesses when the debug port is not
    in use
  + OvmfPkg: create a separate PlatformDebugLibIoPort instance for
    SEC
  + OvmfPkg: make PlatformDebugLibIoPort a proper BASE library
  + OvmfPkg: restore temporary SEC/PEI RAM size to 64KB
  + OvmfPkg/Sec/X64: seed the temporary RAM with PcdInitValueInTempStack
  + ArmVirtPkg: switch to new PL011UartLib implementation
  + OvmfPkg/XenHypercallLib: enable virt extensions for ARM
  + MdeModulePkg/PiSmmCore: Implement heap guard feature for SMM mode
  + MdeModulePkg/DxeCore: Implement heap guard feature for UEFI
  + ArmVirtPkg/ArmVirtQemu: use non-accelerated CopyMem for
    VariableRuntimeDxe
  + NetworkPkg: Fix incorrect SizeofHeaders returned from
    HttpTcpReceiveHeader()
  + NetworkPkg: Print error message to screen if error occurs
    during HTTP boot
  + MdeModulePkg/PartitionDxe: Fix UDF fs access on certain CD/DVD
    medias
  + MdeModulePkg/UsbMassStorageDxe: Fix USB Mass Storage detection
  + MdeModulePkg SerialDxe: Handle Timeout change more robustly
  + CryptoPkg/BaseCryptLib: Fix mismatched memory allocation/free
  + CryptoPkg/BaseCryptLib: Fix buffer overflow issue in realloc
    wrapper
  + ArmPlatformPkg/PlatformPeim: allow PlatformPeiLib to set the
    boot mode
  + Deprecate EFI_VARIABLE_AUTHENTICATED_WRITE_ACCESS
  + SecurityPkg: Remove Counter Based AuthVariable support
  + BaseTools/tools_def AARCH64 ARM: disable PIE linking
  + NetworkPkg/TlsAuthConfigDxe: Remove the extra FreePool
  + NetworkPkg/HttpBootDxe: Add IPv6 support condition check
  + NetworkPkg/IScsiDxe: Fix the incorrect/needless DHCP process
  + MdeModulePkg/PciBus: Fix bug that PCI BUS claims too much resource
  + UefiCpuPkg/MtrrLib: Use SetMem instead of SetMem64 to fix hang
  + NetworkPkg: Remove ping6 and ifconfig shell application
  + OvmfPkg: fix dynamic default for oprom verification policy PCD
    without SB
  + OvmfPkg/PlatformPei: DENY_EXECUTE_ON_SECURITY_VIOLATION when
    SEV is active
  + SecurityPkg\Tcg2Pei: FV measure performance enhancement
  + SecurityPkg:AuthVariableLib:Implement ECR1707 for Private Auth
    Variable
  + ArmPlatformPkg: Store initial timer value
  + ArmVirtPkg ArmVirtDxeHobLib: Implement BuildFv3Hob
  +  MdeModulePkg/Variable/RuntimeDxe: delete and lock OS-created
    MOR variable
  + ArmPkg/PlatformBootManagerLib: fix bug in ESRT invocation
  + OvmfPkg/PciHotPlugInitDxe: translate QEMU's resource
    reservation hints
  + OvmfPkg/PciHotPlugInitDxe: generalize RESOURCE_PADDING
    composition
  + OvmfPkg/IndustryStandard: define PCI Capabilities for QEMU's
    PCI Bridges
  + MdeModulePkg/BdsDxe: Don't delete "BootNext" until booting it
  + Clarify the usage of HttpConfigData in HTTP protocol
  + SecurityPkg/SecureBootConfigImpl.c: Secure Boot DBX UI
    Enhancement
  + MdeModulePkg/UDF: Fix creation of UDF logical partition
  + CryptoPkg: Add new API to retrieve commonName of X.509 certificate
  + OvmfPkg/VirtioNetDxe: log debug message in VirtioNetExitBoot()
  + OvmfPkg/QemuBootOrderLib: recognize "usb-storage" devices in
    XHCI ports
  + MdeModulePkg/Core: Fix out-of-sync issue in GCD
  + UefiCpuPkg/CpuDxe: Fix out-of-sync issue in page attributes
  + OvmfPkg/QemuVideoDxe/VbeShim: handle PAM1 register on Q35
    correctly
  + OvmfPkg/QemuVideoDxe/VbeShim: rename Status to
    Segment0AllocationStatus
  + OvmfPkg/CsmSupportLib: move PAM register addresses to
    IndustryStandard
  + NetworkPkg/IScsiDxe: Remove redundant call to StrLen
  + BaseTools/tools_def AARCH64: enable frame pointers for RELEASE
    builds
  + ArmPkg/PlatformBootManagerLib: process pending capsules
  + MdeModulePkg/Udf: Avoid declaring and initializing local GUID
    variable
  + MdeModulePkg/UdfDxe: Avoid short (single character) variable name
  + MdeModulePkg/UdfDxe: Use compare operator for non-boolean
    comparisons
  + MdeModulePkg/UdfDxe: Fix operands of different size in bitwise
    OP
  + MdeModulePkg/UdfDxe: Add checks to ensure no possible NULL ptr
    deref
  + MdeModulePkg/SerialDxe: Fix not able to change serial attributes
  + NetworkPkg: Remove the redundant '/' in the end of returned
    ISCSIMacAddr keyword
  + MdeModulePkg/UdfDxe: Fix NULL pointer dereference
  + OvmfPkg/VirtioNetDxe: negotiate VIRTIO_F_IOMMU_PLATFORM
  + OvmfPkg/VirtioNetDxe: map caller-supplied Tx packet to
    device-address
  + OvmfPkg/VirtioNetDxe: add Tx packet map/unmap helper functions
  + OvmfPkg/VirtioNetDxe: update TechNotes
  + OvmfPkg/VirtioNetDxe: dynamically alloc transmit header
  + OvmfPkg/VirtioNetDxe: alloc RxBuf using AllocateSharedPages()
  + OvmfPkg/VirtioNetDxe: map VRINGs using VirtioRingMap()
  + OvmfPkg/VirtioNetDxe: add helper VirtioNetUninitRing()
- Update openssl to 1.1.0g</changelog>
  <changelog author="glin@suse.com" date="1516795200">- Only use SLES-UEFI-CA-Certificate-2048.crt for the suse flavor to
  provide the better compatibility (bsc#1077330)</changelog>
  <changelog author="glin@suse.com" date="1526299200">- Add ovmf-bsc1092943-fix-attributes-table.patch to avoid sending
  the memory map with invalid attributes (bsc#1092943)</changelog>
  <changelog author="glin@suse.com" date="1527076800">- Update openssl to 1.1.0h (bsc#1094289, CVE-2018-0739)</changelog>
  <changelog author="glin@suse.com" date="1531224000">- Add ovmf-bsc1099193-fix-sev-flash-variables.patch to fix the
  missing EFI variables when SEV is set (bsc#1099193)</changelog>
</package>
<package pkgid="6f45cd476404ce02b1b58cee28952440fdf8e4f46197ad152ec5606defb8ecd7" name="qemu-ppc" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="cd429ddb3c9e9f5dce22b1321d848c8865eb379c774aa554324d9b1e8b8b18b0" name="qemu-ppc" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="684808dfe675bb43a50a8d6858266f9b959e544af2d141a46b21ab3cc458b473" name="qemu-ppc" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="2e3ceadfce90c53f563bc490965624452bb93b5aea45b63d3ed090996cd7b15a" name="qemu-s390" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="dc77090f5f054600e85f9934c781a6ab3fe3d3ed926c2236c44859b7acb0c561" name="qemu-s390" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="f20efdbd94035dce02df55bcd4c19555a06ad75e8855572da06edbfd3276022f" name="qemu-s390" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="678b8a58be71f0c00757601869c6503fa36955c697a506b68734f4854c33fda1" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="b28c86118ff2bedcbb96e769689bf48f2e8b17e55315fe5d6012d30939f7721c" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="c667b5352a30393bfe6b95e57b24835ef85a4d54427a573385b81beed855bb02" name="qemu-seabios" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="f3371723638572015eaf5d07d3ea7016a52348a13cfc5f0b1948539066f63434" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="1bc2be2f5ae749454d293b4199382ea4890431a0c4f0ae4f9b5103e0a129bf7c" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="7a6f4c5db205af0cb56882fab4593d25491bf0a800e1727b71c6886ff493d772" name="qemu-sgabios" arch="noarch">
  <version epoch="0" ver="8" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="f16253e30fd6db3938f7009da015712948e8314e4feb245e2be56a0045f6ad2f" name="qemu-testsuite" arch="src">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="95509a97c2492359a7eac60e7cb54960f806c93008c2115649a3f5f863acfac9" name="qemu-testsuite" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="a0b54431922ae0d96316a35dd7da7a25fb6af0a4b59ba0d35dbca6328b8125b1" name="qemu-testsuite" arch="src">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="c1fd9012569794fe67a6ad9b6381578bd1e3d4ade34fce3d5511dbb953407be4" name="qemu-testsuite" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="cf0accb0fa7a62ba3aa3bbb26053c111c3701577c4b632f28c7799dfefd3db1f" name="qemu-testsuite" arch="src">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="7a494c0de53a7e31a01582427b899336056279a8b1d435d065f004d50b2ea445" name="qemu-testsuite" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="bd08e04b0f94cf7e7fba53e0c8f65ee795f3f61578688935c0c03a74ac8a303d" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="be249d9d2b5014bf783fc28ea89fdda3691ee5d2ba1dd6a2c2190b751177a770" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="ee449c8f74e35f739d137eb41c7e57923ba69f8a6eba95bd2bfbb1bd0cbb0811" name="qemu-tools" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="6d802ac3bd8e365119d25a53e0b01f1c6d5950dbf59cb8fe7429f7cbe0b84a18" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="2adc129d9abd20c4f170e95e1d047e04d6b5575509fad9c23b44f92119257705" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="7cbc6d66ee69e62acc22b94e8e0bcee79672d4acf4351c63be0ca9c2a257975f" name="qemu-vgabios" arch="noarch">
  <version epoch="0" ver="1.11.0" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="4e016b9773932106c207ecd26d53a2853e5c6709f73c867ffd2d830ce58edb21" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="2.11.1" rel="lp150.7.3.1"/>
  <changelog author="brogers@suse.com" date="1516968000">- Modify BuildRequires python references
- seabios also needed tweaks for python2 vs python3
  * Patches added:
  seabios-use-python2-explicitly-as-needed.patch
  seabios-switch-to-python3-as-needed.patch</changelog>
  <changelog author="brogers@suse.com" date="1517227200">- Fix machine inconsistency with -no-acpi and nvdimm (bsc#1077823)
  0045-pc-fail-memory-hot-plug-unplug-with.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="jfehlig@suse.com" date="1518091200">- guest agent: change service file to a template so it can be
  used by Xen as well. Adjust udev rule accordingly.
  FATE#324963</changelog>
  <changelog author="brogers@suse.com" date="1518091201">- Update python3 related patches now that they are upstream</changelog>
  <changelog author="brogers@suse.com" date="1518091202">- Add AMD SEV (Secure Encrypted Virtualization) support by taking
  the v7 series of the patches posted to qemu ml. (fate#322124)
  0046-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  0050-target-i386-add-memory-encryption-f.patch
  0051-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0055-sev-add-command-to-initialize-the-m.patch
  0056-sev-register-the-guest-memory-range.patch
  0057-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  0059-hmp-add-info-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  0062-target-i386-encrypt-bios-rom.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  0068-include-add-psp-sev.h-header-file.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519300800">- Update to v2.11.1, a stable, (mostly) bug-fix-only release
  In addition to bug fixes, of necessity fixes are needed to
  address the Spectre v2 vulnerability by passing along to the
  guest new hardware features introduced by host microcode updates.
  A January 2018 release of qemu initially addressed this issue
  by exposing the feature for all x86 vcpu types, which was the
  quick and dirty approach, but not the proper solution. We remove
  that initial patch and now rely on the upstream solution. This
  update instead defines spec_ctrl and ibpb cpu feature flags as
  well as new cpu models which are clones of existing models with
  either -IBRS or -IBPB added to the end of the model name. These
  new vcpu models explicitly include the new feature(s), whereas
  the feature flags can be added to the cpu parameter as with other
  features.  In short, for continued Spectre v2 protection, ensure
  that either the appropriate cpu feature flag is added to the QEMU
  command-line, or one of the new cpu models is used. Although
  migration from older versions is supported, the new cpu features
  won't be properly exposed to the guest until it is restarted with
  the cpu features explicitly added. A reboot is insufficient.
  A warning patch is added which attempts to detect a migration
  from a qemu version which had the quick and dirty fix (it only
  detects certain cases, but hopefully is helpful.)
  s390x guest vulnerability to Spectre v2 is also addressed in this
  update by including support for bpb and ppa/stfle.81 features.
  (CVE-2017-5715 bsc#1068032)
  For additional information on Spectre v2 as it relates to QEMU,
  see: https://www.qemu.org/2018/02/14/qemu-2-11-1-and-spectre-update/
- Unfortunately, it was found that our current KVM isn't correctly
  indicating support for the spec-ctrl feature, so I've added a patch
  to still detect that support within QEMU. This is of course a
  temporary kludge until KVM gets fixed. (bsc#1082276)
- The SEV support patches are updated to the v9 series.
- Fix incompatibility with recent glibc (boo#1081154)
- Add Supplements tags for the guest agent package in an attempt to
  auto-install for QEMU and Xen SUSE Linux guests (fate#323570)
  * Patches dropped (subsumed by stable update, or reworked in v9):
  0033-i386-kvm-MSR_IA32_SPEC_CTRL-and-MSR.patch
  0050-target-i386-add-memory-encryption-f.patch
  0054-accel-add-Secure-Encrypted-Virtuliz.patch
  0072-sev-Fix-build-for-non-x86-hosts.patch
  * Patches added:
  0033-memfd-fix-configure-test.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  0075-migration-warn-about-inconsistent-s.patch
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
  * Patches renamed (plus some minor code changes):
  0051-machine-add-memory-encryption-prope.patch
  - &gt; 0050-machine-add-memory-encryption-prope.patch
  0052-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0051-kvm-update-kvm.h-to-include-memory-.patch
  0053-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0055-sev-add-command-to-initialize-the-m.patch
  - &gt; 0055-sev-i386-add-command-to-initialize-.patch
  0056-sev-register-the-guest-memory-range.patch
  - &gt; 0057-sev-i386-register-the-guest-memory-.patch
  0057-kvm-introduce-memory-encryption-API.patch
  - &gt; 0058-kvm-introduce-memory-encryption-API.patch
  0058-qmp-add-query-sev-command.patch
  - &gt; 0054-qmp-add-query-sev-command.patch
  0060-sev-add-command-to-create-launch-me.patch
  - &gt; 0060-sev-i386-add-command-to-create-laun.patch
  0061-sev-add-command-to-encrypt-guest-me.patch
  - &gt; 0061-sev-i386-add-command-to-encrypt-gue.patch
  0063-sev-add-support-to-LAUNCH_MEASURE-c.patch
  - &gt; 0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-Finalize-the-SEV-guest-launch-f.patch
  - &gt; 0064-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-sev-add-debug-encrypt-and-decrypt-c.patch
  - &gt; 0066-sev-i386-add-debug-encrypt-and-decr.patch
  0069-sev-add-support-to-query-PLATFORM_S.patch
  - &gt; 0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-add-support-to-KVM_SEV_GUEST_ST.patch
  - &gt; 0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1519819200">- Eliminate bogus use of CPUID_7_0_EDX_PRED_CMD which we've
  carried since the initial Spectre v2 patch was added. EDX bit
  27 of CPUID Leaf 07H, Sub-leaf 0 provides status on STIBP, and
  not the PRED_CMD MSR. Exposing the STIBP CPUID feature bit to the
  guest is wrong in general, since the VM doesn't directly control
  the scheduling of physical hyperthreads. This is left strictly to
  the L0 hypervisor.</changelog>
  <changelog author="brogers@suse.com" date="1519992000">- Change example qemu-ifup script to not depend on bridge-utils.
  Also update the paths used for ip binary.</changelog>
  <changelog author="brogers@suse.com" date="1520078400">- SLE15 KVM (as targeted for RC1) now has the feature exposed.
  Drop the patch. (bsc#1082276)
  0076-i386-Compensate-for-KVM-SPEC_CTRL-f.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="3ca47a53b12470c97868782c533ed047de2d693edf0eff89a9c684caec481b8a" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.6.1"/>
  <changelog author="brogers@suse.com" date="1520596800">- Add support for setting OEM strings table (fate#323624)
  0076-smbios-support-setting-OEM-strings-.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lma@suse.com" date="1521028800">- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11
  * Patches added:
  0077-smbios-Add-1-terminator-if-any-stri.patch
  bsc#994082 and bsc#1084316</changelog>
  <changelog author="brogers@suse.com" date="1521028801">- Fix issue with key codes in qemu v2.11
  0078-Remove-problematic-evdev-86-key-fro.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="lyan@suse.com" date="1522929600">- Add new look up path "sys/class/tpm" for tpm cancel path based
  on Linux 4.0 change (commit 313d21eeab9282e)(bsc#1070615)
  0079-tpm-lookup-cancel-path-under-tpm-de.patch</changelog>
  <changelog author="brogers@suse.com" date="1522929601">- Fix OOB access in VGA emulation (CVE-2018-7858 bsc#1084604)
  0080-vga-fix-region-calculation.patch
- Patch queue updated from git://github.com/openSUSE/qemu.git opensuse-2.11</changelog>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
</package>
<package pkgid="58695f104c7f56738435c5a8a6312dbf23bb1c40279beddf063d75963ad89baa" name="qemu-x86" arch="x86_64">
  <version epoch="0" ver="2.11.2" rel="lp150.7.9.1"/>
  <changelog author="kwalter@suse.com" date="1523361600">- fix qemu-ga service file name (bsc#1089067)</changelog>
  <changelog author="lma@suse.com" date="1524484800">- Add WantedBy for enable qemu-ga@.service auto start (bsc#1090369)</changelog>
  <changelog author="brogers@suse.com" date="1524744000">- Guard strncpy call with GCC pragma to disable warning about possible
  incorrect usage, when in fact it is correct. This is for gcc 8
  compatibility (bsc#1090355)
  ipxe-efi-guard-strncpy-with-gcc-warning-ignore-pragma.patch</changelog>
  <changelog author="brogers@suse.com" date="1524830400">- Fix autoinstall of qemu-guest-agent by getting the modalias string
  right (bsc#1091143)</changelog>
  <changelog author="brogers@suse.com" date="1526472000">- Fix qemu-guest-agent uninstall (bsc#1093169)</changelog>
  <changelog author="brogers@suse.com" date="1526472001">- Spectre v4 vulnerability mitigation support for KVM guests.
  High level description of vulnerability: Systems with microprocessors
  utilizing speculative execution and speculative execution of memory
  reads before the addresses of all prior memory writes are known may
  allow unauthorized disclosure of information to an attacker with
  local user access via a side-channel analysis.
  This patch permits the new x86 cpu feature flag named "ssbd" to be
  presented to the guest, given that the host has this feature, and
  KVM exposes it to the guest as well.
  For this feature to be enabled, via adding it to the qemu commandline
  (eg: -cpu &lt;model&gt;,+spec-ctrl,+ssbd), so the guest OS can take advantage
  of the feature, spec-ctrl and ssbd support is also required in the host.
  (CVE-2018-3639 bsc#1092885)
  * Patches added:
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529496000">- Only enable glusterfs for openSUSE</changelog>
  <changelog author="lma@suse.com" date="1529582400">- Fix qemu-guest-agent service issue (bsc#1094898)</changelog>
  <changelog author="fli@suse.com" date="1529582401">- Fix QEMU crashes when starting a guest with more than 7.999TB on the s390x
  platform (bsc#1094913)
  0082-s390-ccw-virtio-allow-for-systems-l.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582402">- Tweak patch file generation to be more git version agnostic.
  Also change update_git.sh to not reformat spec file by default.</changelog>
  <changelog author="brogers@suse.com" date="1529582403">- Update SEV patches to v10 series, which should then be interface
  compatible with upstream. Includes post v10 series update to
  SevState enum which matches upstream. (fate#322124)
  * Patches renamed:
  0068-include-add-psp-sev.h-header-file.patch
  - &gt; 0055-include-add-psp-sev.h-header-file.patch
  0075-migration-warn-about-inconsistent-s.patch
  - &gt; 0074-migration-warn-about-inconsistent-s.patch
  * Patches dropped:
  0055-sev-i386-add-command-to-initialize-.patch
  0056-qmp-populate-SevInfo-fields-with-SE.patch
  0069-sev-i386-add-support-to-query-PLATF.patch
  0070-sev-i386-add-support-to-KVM_SEV_GUE.patch
  0071-qmp-add-query-sev-launch-measure-co.patch
  0072-tests-qmp-test-blacklist-query-sev-.patch
  0073-sev-i386-add-migration-blocker.patch
  0074-cpu-i386-populate-CPUID-0x8000_001F.patch
  * Patches added:
  0056-sev-i386-add-command-to-initialize-.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582404">- Include some follow on SEV and SEV execution related patches
  (bsc#1091695)
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0083-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1529582405">- Add support for block resize support for xen disks through the
  monitor. (fate#325467) (bsc#1094725)
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1529668800">- Fix heap buffer overflow while reassembling fragmented datagrams
  in Slirp networking (CVE-2018-11806 bsc#1096223)
  0088-slirp-correct-size-computation-whil.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1530100800">- Update to v2.11.2, a stable, bug-fix-only release
  * This update contains new mitigation functionality for
  CVE-2018-3639 (Speculative Store Bypass) in x86, and security
  fixes for vga emulation (CVE-2018-7550). There's also broad range
  of bug/security fixes for migration, Intel IOMMU emulation, block
  layer/image handling, memory management, and various other
  areas/architectures.
  * Patches dropped (subsumed by stable update):
  0033-memfd-fix-configure-test.patch
  0039-qapi-ensure-stable-sort-ordering-wh.patch
  0075-tap-set-vhostfd-passed-from-qemu-cl.patch
  0079-tpm-lookup-cancel-path-under-tpm-de.patch
  0080-vga-fix-region-calculation.patch
  0081-i386-Add-bit-2-of-SPEC_CTRL-MSR-sup.patch
  0082-s390-ccw-virtio-allow-for-systems-l.patch
  * Patches renamed:
  0034-qapi-use-items-values-intead-of-ite.patch
  - &gt; 0033-qapi-use-items-values-intead-of-ite.patch
  0035-qapi-Use-OrderedDict-from-standard-.patch
  - &gt; 0034-qapi-Use-OrderedDict-from-standard-.patch
  0036-qapi-adapt-to-moved-location-of-Str.patch
  - &gt; 0035-qapi-adapt-to-moved-location-of-Str.patch
  0037-qapi-Adapt-to-moved-location-of-mak.patch
  - &gt; 0036-qapi-Adapt-to-moved-location-of-mak.patch
  0038-qapi-remove-q-arg-to-diff-when-comp.patch
  - &gt; 0037-qapi-remove-q-arg-to-diff-when-comp.patch
  0040-qapi-force-a-UTF-8-locale-for-runni.patch
  - &gt; 0038-qapi-force-a-UTF-8-locale-for-runni.patch
  0041-scripts-ensure-signrom-treats-data-.patch
  - &gt; 0039-scripts-ensure-signrom-treats-data-.patch
  0042-configure-allow-use-of-python-3.patch
  - &gt; 0040-configure-allow-use-of-python-3.patch
  0043-input-add-missing-JIS-keys-to-virti.patch
  - &gt; 0041-input-add-missing-JIS-keys-to-virti.patch
  0044-Make-installed-scripts-explicitly-p.patch
  - &gt; 0042-Make-installed-scripts-explicitly-p.patch
  0045-pc-fail-memory-hot-plug-unplug-with.patch
  - &gt; 0043-pc-fail-memory-hot-plug-unplug-with.patch
  0046-memattrs-add-debug-attribute.patch
  - &gt; 0044-memattrs-add-debug-attribute.patch
  0047-exec-add-ram_debug_ops-support.patch
  - &gt; 0045-exec-add-ram_debug_ops-support.patch
  0048-exec-add-debug-version-of-physical-.patch
  - &gt; 0046-exec-add-debug-version-of-physical-.patch
  0049-monitor-i386-use-debug-APIs-when-ac.patch
  - &gt; 0047-monitor-i386-use-debug-APIs-when-ac.patch
  0050-machine-add-memory-encryption-prope.patch
  - &gt; 0048-machine-add-memory-encryption-prope.patch
  0051-kvm-update-kvm.h-to-include-memory-.patch
  - &gt; 0049-kvm-update-kvm.h-to-include-memory-.patch
  0052-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0053-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0051-target-i386-add-Secure-Encrypted-Vi.patch
  0054-qmp-add-query-sev-command.patch
  - &gt; 0052-qmp-add-query-sev-command.patch
  0055-include-add-psp-sev.h-header-file.patch
  - &gt; 0053-include-add-psp-sev.h-header-file.patch
  0056-sev-i386-add-command-to-initialize-.patch
  - &gt; 0054-sev-i386-add-command-to-initialize-.patch
  0057-sev-i386-register-the-guest-memory-.patch
  - &gt; 0055-sev-i386-register-the-guest-memory-.patch
  0058-kvm-introduce-memory-encryption-API.patch
  - &gt; 0056-kvm-introduce-memory-encryption-API.patch
  0059-hmp-add-info-sev-command.patch
  - &gt; 0057-hmp-add-info-sev-command.patch
  0060-sev-i386-add-command-to-create-laun.patch
  - &gt; 0058-sev-i386-add-command-to-create-laun.patch
  0061-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0059-sev-i386-add-command-to-encrypt-gue.patch
  0062-target-i386-encrypt-bios-rom.patch
  - &gt; 0060-target-i386-encrypt-bios-rom.patch
  0063-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0064-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0062-sev-i386-finalize-the-SEV-guest-lau.patch
  0065-hw-i386-set-ram_debug_ops-when-memo.patch
  - &gt; 0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0066-sev-i386-add-debug-encrypt-and-decr.patch
  - &gt; 0064-sev-i386-add-debug-encrypt-and-decr.patch
  0067-target-i386-clear-C-bit-when-walkin.patch
  - &gt; 0065-target-i386-clear-C-bit-when-walkin.patch
  0068-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0066-qmp-add-query-sev-launch-measure-co.patch
  0069-sev-i386-add-migration-blocker.patch
  - &gt; 0067-sev-i386-add-migration-blocker.patch
  0070-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  0071-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0069-qmp-add-query-sev-capabilities-comm.patch
  0072-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0070-sev-i386-add-sev_get_capabilities.patch
  0073-tests-qmp-test-blacklist-sev-specif.patch
  - &gt; 0071-tests-qmp-test-blacklist-sev-specif.patch
  0074-migration-warn-about-inconsistent-s.patch
  - &gt; 0072-migration-warn-about-inconsistent-s.patch
  0076-smbios-support-setting-OEM-strings-.patch
  - &gt; 0073-smbios-support-setting-OEM-strings-.patch
  0077-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0074-smbios-Add-1-terminator-if-any-stri.patch
  0078-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0075-Remove-problematic-evdev-86-key-fro.patch
  0083-hmp-free-sev-info.patch
  - &gt; 0076-hmp-free-sev-info.patch
  0084-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  0085-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0078-target-i386-sev-fix-memory-leaks.patch
  0086-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0079-xen-add-xen-disk-naming-for-use-in-.patch
  0087-xen-add-block-resize-support-for-xe.patch
  - &gt; 0080-xen-add-block-resize-support-for-xe.patch
  0088-slirp-correct-size-computation-whil.patch
  - &gt; 0081-slirp-correct-size-computation-whil.patch
- Tweak build service constraints information to avoid failures
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="fli@suse.com" date="1533038400">- Fix integer overflow while allocating a large memory chunk in
  qemu-ga: qmp_guest_file_read (CVE-2018-12617 bsc#1098735)
  0082-qga-check-bytes-count-read-by-guest.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="brogers@suse.com" date="1533211200">- Update QEMU SEV code to match upstream closely. This includes
  a fix for the value used for reduced_phys_bits, which differs
  (at least on the EPYC machine I test on) from what the previous
  code used. Please update the reduced_phys_bits value used on
  the commandline or in libvirt XML to the value 1 (explicitly
  set now in QEMU code). (bsc#1103628)
  * Patches dropped:
  0044-memattrs-add-debug-attribute.patch
  0045-exec-add-ram_debug_ops-support.patch
  0046-exec-add-debug-version-of-physical-.patch
  0047-monitor-i386-use-debug-APIs-when-ac.patch
  0049-kvm-update-kvm.h-to-include-memory-.patch
  0063-hw-i386-set-ram_debug_ops-when-memo.patch
  0064-sev-i386-add-debug-encrypt-and-decr.patch
  0065-target-i386-clear-C-bit-when-walkin.patch
  0071-tests-qmp-test-blacklist-sev-specif.patch
  * Patches renamed: (some code-motion as well)
  0048-machine-add-memory-encryption-prope.patch
  - &gt; 0045-machine-add-memory-encryption-optio.patch
  0050-docs-add-AMD-Secure-Encrypted-Virtu.patch
  - &gt; 0046-docs-add-AMD-Secure-Encrypted-Virtu.patch
  0051-target-i386-add-Secure-Encrypted-Vi.patch
  - &gt; 0049-target-i386-add-Secure-Encrypted-Vi.patch
  0052-qmp-add-query-sev-command.patch
  - &gt; 0050-sev-i386-qmp-add-query-sev-command.patch
  0053-include-add-psp-sev.h-header-file.patch
  - &gt; 0051-include-add-psp-sev.h-header-file.patch
  0054-sev-i386-add-command-to-initialize-.patch
  - &gt; 0052-sev-i386-add-command-to-initialize-.patch
  0055-sev-i386-register-the-guest-memory-.patch
  - &gt; 0053-sev-i386-register-the-guest-memory-.patch
  0056-kvm-introduce-memory-encryption-API.patch
  - &gt; 0048-kvm-introduce-memory-encryption-API.patch
  0057-hmp-add-info-sev-command.patch
  - &gt; 0061-sev-i386-hmp-add-info-sev-command.patch
  0058-sev-i386-add-command-to-create-laun.patch
  - &gt; 0054-sev-i386-add-command-to-create-laun.patch
  0059-sev-i386-add-command-to-encrypt-gue.patch
  - &gt; 0055-sev-i386-add-command-to-encrypt-gue.patch
  0060-target-i386-encrypt-bios-rom.patch
  - &gt; 0056-target-i386-encrypt-bios-rom.patch
  0061-sev-i386-add-support-to-LAUNCH_MEAS.patch
  - &gt; 0057-sev-i386-add-support-to-LAUNCH_MEAS.patch
  0062-sev-i386-finalize-the-SEV-guest-lau.patch
  - &gt; 0058-sev-i386-finalize-the-SEV-guest-lau.patch
  0066-qmp-add-query-sev-launch-measure-co.patch
  - &gt; 0062-sev-i386-qmp-add-query-sev-launch-m.patch
  0067-sev-i386-add-migration-blocker.patch
  - &gt; 0059-sev-i386-add-migration-blocker.patch
  0068-cpu-i386-populate-CPUID-0x8000_001F.patch
  - &gt; 0060-cpu-i386-populate-CPUID-0x8000_001F.patch
  0069-qmp-add-query-sev-capabilities-comm.patch
  - &gt; 0063-sev-i386-qmp-add-query-sev-capabili.patch
  0070-sev-i386-add-sev_get_capabilities.patch
  - &gt; 0064-sev-i386-add-sev_get_capabilities.patch
  0072-migration-warn-about-inconsistent-s.patch
  - &gt; 0068-migration-warn-about-inconsistent-s.patch
  0073-smbios-support-setting-OEM-strings-.patch
  - &gt; 0069-smbios-support-setting-OEM-strings-.patch
  0074-smbios-Add-1-terminator-if-any-stri.patch
  - &gt; 0070-smbios-Add-1-terminator-if-any-stri.patch
  0075-Remove-problematic-evdev-86-key-fro.patch
  - &gt; 0071-Remove-problematic-evdev-86-key-fro.patch
  0076-hmp-free-sev-info.patch
  - &gt; 0065-hmp-free-sev-info.patch
  0077-sev-i386-fix-memory-leak-in-sev_gue.patch
  - &gt; 0066-sev-i386-fix-memory-leak-in-sev_gue.patch
  0078-target-i386-sev-fix-memory-leaks.patch
  - &gt; 0067-target-i386-sev-fix-memory-leaks.patch
  0079-xen-add-xen-disk-naming-for-use-in-.patch
  - &gt; 0072-xen-add-xen-disk-naming-for-use-in-.patch
  0080-xen-add-block-resize-support-for-xe.patch
  - &gt; 0073-xen-add-block-resize-support-for-xe.patch
  0081-slirp-correct-size-computation-whil.patch
  - &gt; 0074-slirp-correct-size-computation-whil.patch
  0082-qga-check-bytes-count-read-by-guest.patch
  - &gt; 0075-qga-check-bytes-count-read-by-guest.patch
  * Patches added:
  0044-update-Linux-headers-to-4.16-rc5.patch
  0047-kvm-add-memory-encryption-context.patch
- Patch queue updated from https://gitlab.suse.de/virtualization/qemu.git SLE15</changelog>
  <changelog author="ldewey@suse.com" date="1533729600">- Update QEMU to allow kvm group access to /dev/sev (bsc#1102604).
  71-sev.rules</changelog>
  <changelog author="brogers@provo.novell.com" date="1534334400">- Based on latest upstream qemu, mark additional deprecations in
  support doc.</changelog>
  <changelog author="brogers@suse.com" date="1534939200">- Fix (again) the qemu guest agent udev rule file, which got unfixed
  in a series of unfortunate events (bsc#1094898 and now bsc#1105279)</changelog>
</package>
<package pkgid="d34279abc26c0ddfcc97d63401a06de613a082e9e8c5a29376d34fed1d329ff8" name="quassel" arch="src">
  <version epoch="0" ver="0.12.5" rel="lp150.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1429617600">- Deprecate realver as it is not used now again</changelog>
  <changelog author="tchvatal@suse.com" date="1430913600">- Version bump to 0.12.2 bnc#928728:
  * Fix PostgreSQL not re-initializing after reconnect (raising CVE-2013-4422
    from the dead)
  * Remove warning on startup due to a change in Kdelibs4ConfigMigrator
  * Emergency fix for behavior change in Qt5's psql driver regarding timezones</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1430913601">- Move the notifyrc file to the base package, so that both the mono
  and client subpackages can use it. Without this file there are
  no notifications.</changelog>
  <changelog author="tchvatal@suse.com" date="1435924800">- Add patch to fix/disable SSL check in cmakelists.txt:
  * quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1436011200">- Add quassel-set-required-libs-and-flags.patch: Set the correct
  libraries and compiler flags in order to use qglobal.h in
  check_cxx_source_compiles function
- Drop quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1444392000">- Added Fix-build-with-Qt-5.5.patch (boo#949489)</changelog>
  <changelog author="vbabka@suse.com" date="1447588800">- Add Fix-rejoining-parted-channels.patch: Fixes upstream issue
  http://bugs.quassel-irc.org/issues/1369 where parted channels
  are rejoined after reconnecting.</changelog>
  <changelog author="tchvatal@suse.com" date="1450094400">- Apply patch for bnc#958928 CVE-2015-8547:
  * CVE-2015-8547.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1454846400">- Allow building kde and non-kde based quassel version
- Move quasselclient desktop to base so both variants don't have to
  rename the file
- Introduce quasselclient-qt5 subpackage
- Use update-alternatives to switch between kde/qt5 versions</changelog>
  <changelog author="javier@opensuse.org" date="1455278400">- Update to 0.12.3
  * Fix activity filters when selecting buffers in custom ChatViews
  * Fix default shortcuts when integrated with KDE Frameworks
  * Introduce support for Appveyor CI (automated Windows builds)
  * Support SnoreNotify 0.7
  * Various cleanups and performance improvements
  * Various build system fixes
  * Channel keys are again remembered between syncs
  * Support for Qt 5.5
  * Network (re)connection fixes
  * Fix possible message loss when running multiple core users on a psql database
  * Command line option for specifying SSL certificates and keys
  * Many smaller fixes
- Rebased quassel-set-required-libs-and-flags.patch
- Removed patches that have been merged upstream
  * CVE-2015-8547.patch
  * Fix-build-with-Qt-5.5.patch
  * Fix-rejoining-parted-channels.patch
- Updated spec:
  * main.cpp no longer contains __DATE__/__TIME__
  * CMakeLists now requires snorenotify-qt5-devel &gt;= 0.7</changelog>
  <changelog author="tchvatal@suse.com" date="1462190400">- Version update to 0.12.4:
  * Various small fixes
  * Fix for core crash from client handshake data bnc#978002 CVE-2016-4414</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Reduce pc files to only those that are really needed</changelog>
  <changelog author="tchvatal@suse.com" date="1472126400">- Reenable translations that disappeared at some point of time</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Version update to 0.12.4:
  * Various small fixes
  * Implement custom deserializer to add our own sanity checks (bsc#1090495
    CVE-2018-1000178)
  * Reject clients that attempt to login before the core is configured
    (bsc#1090495 CVE-2018-1000179)
- Rebase patch quassel-set-required-libs-and-flags.patch
- Switch from qt5webkit to webengine</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Trim bias and filler wording from descriptions.
- Stop ignoring errors from useradd/groupadd.</changelog>
  <changelog author="mchandras@suse.de" date="1526040000">- Add new QUASSELCORE_PORT sysconfig variable to allow users to change
  the default Quassel Core TCP port.</changelog>
  <changelog author="wbauer@tmo.at" date="1529668800">- Add Fix-build-with-Qt5.11.patch to fix build with Qt 5.11</changelog>
  <changelog author="rkitover@gmail.com" date="1530100800">- Change quasselcore.service to start after `default.target` instead of
  `network.target` as the PostgreSQL backend may not be available during
  startup otherwise. bsc#1102568</changelog>
  <changelog author="rkitover@gmail.com" date="1531310400">- Fix the rpmlint warning env-script-interpreter by rewriting the
  [#]!/usr/bin/env shebang in the scripts in /usr/share/quassel/scripts .</changelog>
</package>
<package pkgid="571df7115c2c6a822ece0a40c67d8a1b303a7b89206ab1bb74a4f1c757f687b9" name="quassel-base" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="lp150.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1429617600">- Deprecate realver as it is not used now again</changelog>
  <changelog author="tchvatal@suse.com" date="1430913600">- Version bump to 0.12.2 bnc#928728:
  * Fix PostgreSQL not re-initializing after reconnect (raising CVE-2013-4422
    from the dead)
  * Remove warning on startup due to a change in Kdelibs4ConfigMigrator
  * Emergency fix for behavior change in Qt5's psql driver regarding timezones</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1430913601">- Move the notifyrc file to the base package, so that both the mono
  and client subpackages can use it. Without this file there are
  no notifications.</changelog>
  <changelog author="tchvatal@suse.com" date="1435924800">- Add patch to fix/disable SSL check in cmakelists.txt:
  * quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1436011200">- Add quassel-set-required-libs-and-flags.patch: Set the correct
  libraries and compiler flags in order to use qglobal.h in
  check_cxx_source_compiles function
- Drop quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1444392000">- Added Fix-build-with-Qt-5.5.patch (boo#949489)</changelog>
  <changelog author="vbabka@suse.com" date="1447588800">- Add Fix-rejoining-parted-channels.patch: Fixes upstream issue
  http://bugs.quassel-irc.org/issues/1369 where parted channels
  are rejoined after reconnecting.</changelog>
  <changelog author="tchvatal@suse.com" date="1450094400">- Apply patch for bnc#958928 CVE-2015-8547:
  * CVE-2015-8547.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1454846400">- Allow building kde and non-kde based quassel version
- Move quasselclient desktop to base so both variants don't have to
  rename the file
- Introduce quasselclient-qt5 subpackage
- Use update-alternatives to switch between kde/qt5 versions</changelog>
  <changelog author="javier@opensuse.org" date="1455278400">- Update to 0.12.3
  * Fix activity filters when selecting buffers in custom ChatViews
  * Fix default shortcuts when integrated with KDE Frameworks
  * Introduce support for Appveyor CI (automated Windows builds)
  * Support SnoreNotify 0.7
  * Various cleanups and performance improvements
  * Various build system fixes
  * Channel keys are again remembered between syncs
  * Support for Qt 5.5
  * Network (re)connection fixes
  * Fix possible message loss when running multiple core users on a psql database
  * Command line option for specifying SSL certificates and keys
  * Many smaller fixes
- Rebased quassel-set-required-libs-and-flags.patch
- Removed patches that have been merged upstream
  * CVE-2015-8547.patch
  * Fix-build-with-Qt-5.5.patch
  * Fix-rejoining-parted-channels.patch
- Updated spec:
  * main.cpp no longer contains __DATE__/__TIME__
  * CMakeLists now requires snorenotify-qt5-devel &gt;= 0.7</changelog>
  <changelog author="tchvatal@suse.com" date="1462190400">- Version update to 0.12.4:
  * Various small fixes
  * Fix for core crash from client handshake data bnc#978002 CVE-2016-4414</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Reduce pc files to only those that are really needed</changelog>
  <changelog author="tchvatal@suse.com" date="1472126400">- Reenable translations that disappeared at some point of time</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Version update to 0.12.4:
  * Various small fixes
  * Implement custom deserializer to add our own sanity checks (bsc#1090495
    CVE-2018-1000178)
  * Reject clients that attempt to login before the core is configured
    (bsc#1090495 CVE-2018-1000179)
- Rebase patch quassel-set-required-libs-and-flags.patch
- Switch from qt5webkit to webengine</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Trim bias and filler wording from descriptions.
- Stop ignoring errors from useradd/groupadd.</changelog>
  <changelog author="mchandras@suse.de" date="1526040000">- Add new QUASSELCORE_PORT sysconfig variable to allow users to change
  the default Quassel Core TCP port.</changelog>
  <changelog author="wbauer@tmo.at" date="1529668800">- Add Fix-build-with-Qt5.11.patch to fix build with Qt 5.11</changelog>
  <changelog author="rkitover@gmail.com" date="1530100800">- Change quasselcore.service to start after `default.target` instead of
  `network.target` as the PostgreSQL backend may not be available during
  startup otherwise. bsc#1102568</changelog>
  <changelog author="rkitover@gmail.com" date="1531310400">- Fix the rpmlint warning env-script-interpreter by rewriting the
  [#]!/usr/bin/env shebang in the scripts in /usr/share/quassel/scripts .</changelog>
</package>
<package pkgid="66abfcee247ae5f9d91b9fca7e79155386be389ddd6d49259b1e70e4cdfab64d" name="quassel-client" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="lp150.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1429617600">- Deprecate realver as it is not used now again</changelog>
  <changelog author="tchvatal@suse.com" date="1430913600">- Version bump to 0.12.2 bnc#928728:
  * Fix PostgreSQL not re-initializing after reconnect (raising CVE-2013-4422
    from the dead)
  * Remove warning on startup due to a change in Kdelibs4ConfigMigrator
  * Emergency fix for behavior change in Qt5's psql driver regarding timezones</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1430913601">- Move the notifyrc file to the base package, so that both the mono
  and client subpackages can use it. Without this file there are
  no notifications.</changelog>
  <changelog author="tchvatal@suse.com" date="1435924800">- Add patch to fix/disable SSL check in cmakelists.txt:
  * quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1436011200">- Add quassel-set-required-libs-and-flags.patch: Set the correct
  libraries and compiler flags in order to use qglobal.h in
  check_cxx_source_compiles function
- Drop quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1444392000">- Added Fix-build-with-Qt-5.5.patch (boo#949489)</changelog>
  <changelog author="vbabka@suse.com" date="1447588800">- Add Fix-rejoining-parted-channels.patch: Fixes upstream issue
  http://bugs.quassel-irc.org/issues/1369 where parted channels
  are rejoined after reconnecting.</changelog>
  <changelog author="tchvatal@suse.com" date="1450094400">- Apply patch for bnc#958928 CVE-2015-8547:
  * CVE-2015-8547.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1454846400">- Allow building kde and non-kde based quassel version
- Move quasselclient desktop to base so both variants don't have to
  rename the file
- Introduce quasselclient-qt5 subpackage
- Use update-alternatives to switch between kde/qt5 versions</changelog>
  <changelog author="javier@opensuse.org" date="1455278400">- Update to 0.12.3
  * Fix activity filters when selecting buffers in custom ChatViews
  * Fix default shortcuts when integrated with KDE Frameworks
  * Introduce support for Appveyor CI (automated Windows builds)
  * Support SnoreNotify 0.7
  * Various cleanups and performance improvements
  * Various build system fixes
  * Channel keys are again remembered between syncs
  * Support for Qt 5.5
  * Network (re)connection fixes
  * Fix possible message loss when running multiple core users on a psql database
  * Command line option for specifying SSL certificates and keys
  * Many smaller fixes
- Rebased quassel-set-required-libs-and-flags.patch
- Removed patches that have been merged upstream
  * CVE-2015-8547.patch
  * Fix-build-with-Qt-5.5.patch
  * Fix-rejoining-parted-channels.patch
- Updated spec:
  * main.cpp no longer contains __DATE__/__TIME__
  * CMakeLists now requires snorenotify-qt5-devel &gt;= 0.7</changelog>
  <changelog author="tchvatal@suse.com" date="1462190400">- Version update to 0.12.4:
  * Various small fixes
  * Fix for core crash from client handshake data bnc#978002 CVE-2016-4414</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Reduce pc files to only those that are really needed</changelog>
  <changelog author="tchvatal@suse.com" date="1472126400">- Reenable translations that disappeared at some point of time</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Version update to 0.12.4:
  * Various small fixes
  * Implement custom deserializer to add our own sanity checks (bsc#1090495
    CVE-2018-1000178)
  * Reject clients that attempt to login before the core is configured
    (bsc#1090495 CVE-2018-1000179)
- Rebase patch quassel-set-required-libs-and-flags.patch
- Switch from qt5webkit to webengine</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Trim bias and filler wording from descriptions.
- Stop ignoring errors from useradd/groupadd.</changelog>
  <changelog author="mchandras@suse.de" date="1526040000">- Add new QUASSELCORE_PORT sysconfig variable to allow users to change
  the default Quassel Core TCP port.</changelog>
  <changelog author="wbauer@tmo.at" date="1529668800">- Add Fix-build-with-Qt5.11.patch to fix build with Qt 5.11</changelog>
  <changelog author="rkitover@gmail.com" date="1530100800">- Change quasselcore.service to start after `default.target` instead of
  `network.target` as the PostgreSQL backend may not be available during
  startup otherwise. bsc#1102568</changelog>
  <changelog author="rkitover@gmail.com" date="1531310400">- Fix the rpmlint warning env-script-interpreter by rewriting the
  [#]!/usr/bin/env shebang in the scripts in /usr/share/quassel/scripts .</changelog>
</package>
<package pkgid="2cd9e04e7db7fed77e3debeb02f86d6568cae8055c5c7d4bb87ebb4650d90d82" name="quassel-client-qt5" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="lp150.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1429617600">- Deprecate realver as it is not used now again</changelog>
  <changelog author="tchvatal@suse.com" date="1430913600">- Version bump to 0.12.2 bnc#928728:
  * Fix PostgreSQL not re-initializing after reconnect (raising CVE-2013-4422
    from the dead)
  * Remove warning on startup due to a change in Kdelibs4ConfigMigrator
  * Emergency fix for behavior change in Qt5's psql driver regarding timezones</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1430913601">- Move the notifyrc file to the base package, so that both the mono
  and client subpackages can use it. Without this file there are
  no notifications.</changelog>
  <changelog author="tchvatal@suse.com" date="1435924800">- Add patch to fix/disable SSL check in cmakelists.txt:
  * quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1436011200">- Add quassel-set-required-libs-and-flags.patch: Set the correct
  libraries and compiler flags in order to use qglobal.h in
  check_cxx_source_compiles function
- Drop quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1444392000">- Added Fix-build-with-Qt-5.5.patch (boo#949489)</changelog>
  <changelog author="vbabka@suse.com" date="1447588800">- Add Fix-rejoining-parted-channels.patch: Fixes upstream issue
  http://bugs.quassel-irc.org/issues/1369 where parted channels
  are rejoined after reconnecting.</changelog>
  <changelog author="tchvatal@suse.com" date="1450094400">- Apply patch for bnc#958928 CVE-2015-8547:
  * CVE-2015-8547.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1454846400">- Allow building kde and non-kde based quassel version
- Move quasselclient desktop to base so both variants don't have to
  rename the file
- Introduce quasselclient-qt5 subpackage
- Use update-alternatives to switch between kde/qt5 versions</changelog>
  <changelog author="javier@opensuse.org" date="1455278400">- Update to 0.12.3
  * Fix activity filters when selecting buffers in custom ChatViews
  * Fix default shortcuts when integrated with KDE Frameworks
  * Introduce support for Appveyor CI (automated Windows builds)
  * Support SnoreNotify 0.7
  * Various cleanups and performance improvements
  * Various build system fixes
  * Channel keys are again remembered between syncs
  * Support for Qt 5.5
  * Network (re)connection fixes
  * Fix possible message loss when running multiple core users on a psql database
  * Command line option for specifying SSL certificates and keys
  * Many smaller fixes
- Rebased quassel-set-required-libs-and-flags.patch
- Removed patches that have been merged upstream
  * CVE-2015-8547.patch
  * Fix-build-with-Qt-5.5.patch
  * Fix-rejoining-parted-channels.patch
- Updated spec:
  * main.cpp no longer contains __DATE__/__TIME__
  * CMakeLists now requires snorenotify-qt5-devel &gt;= 0.7</changelog>
  <changelog author="tchvatal@suse.com" date="1462190400">- Version update to 0.12.4:
  * Various small fixes
  * Fix for core crash from client handshake data bnc#978002 CVE-2016-4414</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Reduce pc files to only those that are really needed</changelog>
  <changelog author="tchvatal@suse.com" date="1472126400">- Reenable translations that disappeared at some point of time</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Version update to 0.12.4:
  * Various small fixes
  * Implement custom deserializer to add our own sanity checks (bsc#1090495
    CVE-2018-1000178)
  * Reject clients that attempt to login before the core is configured
    (bsc#1090495 CVE-2018-1000179)
- Rebase patch quassel-set-required-libs-and-flags.patch
- Switch from qt5webkit to webengine</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Trim bias and filler wording from descriptions.
- Stop ignoring errors from useradd/groupadd.</changelog>
  <changelog author="mchandras@suse.de" date="1526040000">- Add new QUASSELCORE_PORT sysconfig variable to allow users to change
  the default Quassel Core TCP port.</changelog>
  <changelog author="wbauer@tmo.at" date="1529668800">- Add Fix-build-with-Qt5.11.patch to fix build with Qt 5.11</changelog>
  <changelog author="rkitover@gmail.com" date="1530100800">- Change quasselcore.service to start after `default.target` instead of
  `network.target` as the PostgreSQL backend may not be available during
  startup otherwise. bsc#1102568</changelog>
  <changelog author="rkitover@gmail.com" date="1531310400">- Fix the rpmlint warning env-script-interpreter by rewriting the
  [#]!/usr/bin/env shebang in the scripts in /usr/share/quassel/scripts .</changelog>
</package>
<package pkgid="11c7eab1c412fef52b1865343977e240f55feea717e02d8f91810b778eeea3a3" name="quassel-core" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="lp150.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1429617600">- Deprecate realver as it is not used now again</changelog>
  <changelog author="tchvatal@suse.com" date="1430913600">- Version bump to 0.12.2 bnc#928728:
  * Fix PostgreSQL not re-initializing after reconnect (raising CVE-2013-4422
    from the dead)
  * Remove warning on startup due to a change in Kdelibs4ConfigMigrator
  * Emergency fix for behavior change in Qt5's psql driver regarding timezones</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1430913601">- Move the notifyrc file to the base package, so that both the mono
  and client subpackages can use it. Without this file there are
  no notifications.</changelog>
  <changelog author="tchvatal@suse.com" date="1435924800">- Add patch to fix/disable SSL check in cmakelists.txt:
  * quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1436011200">- Add quassel-set-required-libs-and-flags.patch: Set the correct
  libraries and compiler flags in order to use qglobal.h in
  check_cxx_source_compiles function
- Drop quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1444392000">- Added Fix-build-with-Qt-5.5.patch (boo#949489)</changelog>
  <changelog author="vbabka@suse.com" date="1447588800">- Add Fix-rejoining-parted-channels.patch: Fixes upstream issue
  http://bugs.quassel-irc.org/issues/1369 where parted channels
  are rejoined after reconnecting.</changelog>
  <changelog author="tchvatal@suse.com" date="1450094400">- Apply patch for bnc#958928 CVE-2015-8547:
  * CVE-2015-8547.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1454846400">- Allow building kde and non-kde based quassel version
- Move quasselclient desktop to base so both variants don't have to
  rename the file
- Introduce quasselclient-qt5 subpackage
- Use update-alternatives to switch between kde/qt5 versions</changelog>
  <changelog author="javier@opensuse.org" date="1455278400">- Update to 0.12.3
  * Fix activity filters when selecting buffers in custom ChatViews
  * Fix default shortcuts when integrated with KDE Frameworks
  * Introduce support for Appveyor CI (automated Windows builds)
  * Support SnoreNotify 0.7
  * Various cleanups and performance improvements
  * Various build system fixes
  * Channel keys are again remembered between syncs
  * Support for Qt 5.5
  * Network (re)connection fixes
  * Fix possible message loss when running multiple core users on a psql database
  * Command line option for specifying SSL certificates and keys
  * Many smaller fixes
- Rebased quassel-set-required-libs-and-flags.patch
- Removed patches that have been merged upstream
  * CVE-2015-8547.patch
  * Fix-build-with-Qt-5.5.patch
  * Fix-rejoining-parted-channels.patch
- Updated spec:
  * main.cpp no longer contains __DATE__/__TIME__
  * CMakeLists now requires snorenotify-qt5-devel &gt;= 0.7</changelog>
  <changelog author="tchvatal@suse.com" date="1462190400">- Version update to 0.12.4:
  * Various small fixes
  * Fix for core crash from client handshake data bnc#978002 CVE-2016-4414</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Reduce pc files to only those that are really needed</changelog>
  <changelog author="tchvatal@suse.com" date="1472126400">- Reenable translations that disappeared at some point of time</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Version update to 0.12.4:
  * Various small fixes
  * Implement custom deserializer to add our own sanity checks (bsc#1090495
    CVE-2018-1000178)
  * Reject clients that attempt to login before the core is configured
    (bsc#1090495 CVE-2018-1000179)
- Rebase patch quassel-set-required-libs-and-flags.patch
- Switch from qt5webkit to webengine</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Trim bias and filler wording from descriptions.
- Stop ignoring errors from useradd/groupadd.</changelog>
  <changelog author="mchandras@suse.de" date="1526040000">- Add new QUASSELCORE_PORT sysconfig variable to allow users to change
  the default Quassel Core TCP port.</changelog>
  <changelog author="wbauer@tmo.at" date="1529668800">- Add Fix-build-with-Qt5.11.patch to fix build with Qt 5.11</changelog>
  <changelog author="rkitover@gmail.com" date="1530100800">- Change quasselcore.service to start after `default.target` instead of
  `network.target` as the PostgreSQL backend may not be available during
  startup otherwise. bsc#1102568</changelog>
  <changelog author="rkitover@gmail.com" date="1531310400">- Fix the rpmlint warning env-script-interpreter by rewriting the
  [#]!/usr/bin/env shebang in the scripts in /usr/share/quassel/scripts .</changelog>
</package>
<package pkgid="70675754b865147829e3589aa2a073d05620c669f2b9bd00a7b495d826b186a1" name="quassel-mono" arch="x86_64">
  <version epoch="0" ver="0.12.5" rel="lp150.4.3.1"/>
  <changelog author="tchvatal@suse.com" date="1429617600">- Deprecate realver as it is not used now again</changelog>
  <changelog author="tchvatal@suse.com" date="1430913600">- Version bump to 0.12.2 bnc#928728:
  * Fix PostgreSQL not re-initializing after reconnect (raising CVE-2013-4422
    from the dead)
  * Remove warning on startup due to a change in Kdelibs4ConfigMigrator
  * Emergency fix for behavior change in Qt5's psql driver regarding timezones</changelog>
  <changelog author="tittiatcoke@gmail.com" date="1430913601">- Move the notifyrc file to the base package, so that both the mono
  and client subpackages can use it. Without this file there are
  no notifications.</changelog>
  <changelog author="tchvatal@suse.com" date="1435924800">- Add patch to fix/disable SSL check in cmakelists.txt:
  * quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1436011200">- Add quassel-set-required-libs-and-flags.patch: Set the correct
  libraries and compiler flags in order to use qglobal.h in
  check_cxx_source_compiles function
- Drop quassel-disable-ssl-check.patch</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1444392000">- Added Fix-build-with-Qt-5.5.patch (boo#949489)</changelog>
  <changelog author="vbabka@suse.com" date="1447588800">- Add Fix-rejoining-parted-channels.patch: Fixes upstream issue
  http://bugs.quassel-irc.org/issues/1369 where parted channels
  are rejoined after reconnecting.</changelog>
  <changelog author="tchvatal@suse.com" date="1450094400">- Apply patch for bnc#958928 CVE-2015-8547:
  * CVE-2015-8547.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1454846400">- Allow building kde and non-kde based quassel version
- Move quasselclient desktop to base so both variants don't have to
  rename the file
- Introduce quasselclient-qt5 subpackage
- Use update-alternatives to switch between kde/qt5 versions</changelog>
  <changelog author="javier@opensuse.org" date="1455278400">- Update to 0.12.3
  * Fix activity filters when selecting buffers in custom ChatViews
  * Fix default shortcuts when integrated with KDE Frameworks
  * Introduce support for Appveyor CI (automated Windows builds)
  * Support SnoreNotify 0.7
  * Various cleanups and performance improvements
  * Various build system fixes
  * Channel keys are again remembered between syncs
  * Support for Qt 5.5
  * Network (re)connection fixes
  * Fix possible message loss when running multiple core users on a psql database
  * Command line option for specifying SSL certificates and keys
  * Many smaller fixes
- Rebased quassel-set-required-libs-and-flags.patch
- Removed patches that have been merged upstream
  * CVE-2015-8547.patch
  * Fix-build-with-Qt-5.5.patch
  * Fix-rejoining-parted-channels.patch
- Updated spec:
  * main.cpp no longer contains __DATE__/__TIME__
  * CMakeLists now requires snorenotify-qt5-devel &gt;= 0.7</changelog>
  <changelog author="tchvatal@suse.com" date="1462190400">- Version update to 0.12.4:
  * Various small fixes
  * Fix for core crash from client handshake data bnc#978002 CVE-2016-4414</changelog>
  <changelog author="tchvatal@suse.com" date="1464350400">- Reduce pc files to only those that are really needed</changelog>
  <changelog author="tchvatal@suse.com" date="1472126400">- Reenable translations that disappeared at some point of time</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Version update to 0.12.4:
  * Various small fixes
  * Implement custom deserializer to add our own sanity checks (bsc#1090495
    CVE-2018-1000178)
  * Reject clients that attempt to login before the core is configured
    (bsc#1090495 CVE-2018-1000179)
- Rebase patch quassel-set-required-libs-and-flags.patch
- Switch from qt5webkit to webengine</changelog>
  <changelog author="jengelh@inai.de" date="1525089600">- Trim bias and filler wording from descriptions.
- Stop ignoring errors from useradd/groupadd.</changelog>
  <changelog author="mchandras@suse.de" date="1526040000">- Add new QUASSELCORE_PORT sysconfig variable to allow users to change
  the default Quassel Core TCP port.</changelog>
  <changelog author="wbauer@tmo.at" date="1529668800">- Add Fix-build-with-Qt5.11.patch to fix build with Qt 5.11</changelog>
  <changelog author="rkitover@gmail.com" date="1530100800">- Change quasselcore.service to start after `default.target` instead of
  `network.target` as the PostgreSQL backend may not be available during
  startup otherwise. bsc#1102568</changelog>
  <changelog author="rkitover@gmail.com" date="1531310400">- Fix the rpmlint warning env-script-interpreter by rewriting the
  [#]!/usr/bin/env shebang in the scripts in /usr/share/quassel/scripts .</changelog>
</package>
<package pkgid="2f0a4e198a40229688438cfe549d07b7c1289b640f33832cd0be7eb9d48c7f50" name="quota" arch="src">
  <version epoch="0" ver="4.04" rel="lp150.2.3.1"/>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: Mother Autoconf knows best, so don't interfere</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1322827200">- license update: GPL-2.0 and BSD-3-Clause
  Package is dual licensed. Also, use SPDX format</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- unroll binary file list
- remove install_nld.patch, not needed since 4.00-pre1
- remove automake dependency
- prepare UsrMerge (UsrMerge project), this obsoletes man.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338811200">- update to 4.00 final
- Changes in quota-tools from 4.00-pre1 to 4.00:
  * get_qf_name() does not check quota file presence (Petr Pisar)
  * report quotacheck failures by return code (Petr Pisar)
  * make global symbols static as possible (Petr Pisar)
  * implement repquota for filesystems without quota files (Jan Kara)
  * initialize v2r1 ddquot padding in dump (Jan Kara)
  * fix ddquot buffer leak (Petr Pisar)
  * fix check in setgraces() in setquota.c (Petr Pisar)
  * forbid grace time setting over RPC (Jan Kara)
  * fix synopsis and properly report errors during remote grace period setting (Jan Kara)
  * do not use real domains in warnquota example (Petr Pisar)
  * make RPC handle properly host names with colons (Jan Kara)
  * explain meaning of the second column in repquota output (Jan Kara)
  * initialize vfsold block and inode value boundaries for new quota file (Petr Pisar)
  * setquota manpage typo fix (John Bradshaw)
  * implement quotacheck for GFS2 (Abhijith Das)
  * add quotasync tool (Abhijith Das)
  * correct --no-mixed-pathnames documentation (Petr Pisar)
  * allow admin to not strip quota binaries while installing them (Jan Kara)
  * document --always-resolve at edquota and setquota (Petr Pisar)
  * comment example quotatab to silent warnquota (Petr Pisar)
  * improve comments in warnquota.conf (Ondrej Vasik)
  * fix help text for quotaoff (Ondrej Vasik)
  * make quota, setquota, and edquota recognize -h option (Ondrej Vasik)
  * check whether set limits fit into range supported by quota format (Jan Kara)
  * add next3 support (Amir G)
  * remove checking of filesystem type from hasquota() (Jan Kara)
  * create quota-nfs.sh script for nicer quota(1) output formatting on some NFS clients (Jan Kara)
  * add options for quota(1) modifying formatting of filesystem identificaion (Jan Kara)
  * minor updates of manpages (Jan Kara)
  * quotactl manpage was moved to man-pages package (Jan Kara)
  * fix quotaon to work properly with XFS filesystems (Eric Sandeen, Jan Kara)
  * fix quotaon to print all informational messages only in verbose mode (Jan Kara)
  * fix warnquota manpage to not speak about RPC (Jan Kara)
  * fix repquota to get latest quota info header (Jan Kara)
  * do not count system inodes into quota for ext[234] (Jan Kara)
  * improve detection of XFS kernel quota interface (Jan Kara)
  * support of GFS2 filesystem (Christoph Hellwig)
  * avoid memory corruption of NULL address (Petr Pisar)
  * fixup typos in manpages (Michael Meskes)
  * added german translation (Michael Bunk)
  * added --enable-static-link configure option (Jan Kara)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1351684800">- boot.quota is obsoleted by systemd-quotacheck
  http://www.freedesktop.org/software/systemd/man/systemd-quotacheck.service.html
- rpc.quota daemon will be migrated to systemd later after investigation
  on a saner approach.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1368532800">- portmap --&gt; rpcbind</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371124800">- last changes are compatible again with openSUSE &lt; 12.3
- update to 4.01
- Changes in quota-tools from 4.00 to 4.01:
  * fix compilation failure with --enable-bsd_behaviour=no
  * fix quota(1) for NFS mountpoints
  * fix reporting of huge quota limits over rpc
  * fix repquota to report all users on XFS
  * fixed edquota(8) for more users (Jan Kara)
  * remove fixed limit on number of autofs mount points
  * add quota type names to message catalogue
  * typo fixes, message changes for easier i18n
  * created Czech translation
  * store PID of quota_nld into lock file
  * warnquota: Fix manpage formatting
  * warnquota: Allow specifying of filesystems to check
  * add support for quotas on ext4 in system files
  * quotaon: Remove duplicated check for hasquota()
  * quotacheck: Fix warning about journaled quota for 3.0 and newer
    kernels
  * edquota: Fix localication of time units (Jan Kara)
  * rip out ALTFORMAT config option (Jan Kara)
  * add support for dynamic RPC block to support larger quotas
  * check set limits fit into the range supported by RPC transport
  * do not report missing utmp record to syslog</changelog>
  <changelog author="tchvatal@suse.com" date="1400500800">- Cleanup with spec-cleaner
- Remove the compat for the usrmerge
- Use systemd service files instead of the initscript +
  added extra workaround for argument parsing.
- Remove extra SUSE traball with scripts as we reduced it down to
  one script and unitfile.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- Update to current git 4.01_git201405011753
  * mostly bugfixes and documentation update
  * Most important reason for this update is to get rid of libnl1
  from the Base installation as this is one of the few packages
  that used to require it, now migrated to libnl3.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashism in quotad_env.sh script</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Version bump to 4.02 release
  * Mostly few trivial fixes.
- Properly run all systemd calls on services</changelog>
  <changelog author="tchvatal@suse.com" date="1451908800">- Version update to 4.03 release
  * Various small updates and fixes
  * Translations update
  * autotools based buildsystem
- Refresh patch:
  * quota-4.01-warnquota.patch
- Delete obsolete patch:
  * quota-4.00-makefile.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Add patch to set variables upstream rather than in spec:
  * 0001-Set-fPIC-and-pie-as-default-params-when-building.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1504526400">- Enable ldapmail feature wrt bsc#1055450</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1520683200">- Version update to 4.04:
  * support for new kernel interface that allows for repquota(8) to work
    reliably also for XFS or ext4 with quota feature and generally other
    filesystem where quota files are not available to quota-tools
  * IPv6 support for rpc.quotad and all other tools.
  * Tons of various fixes
- Drop merged patch 0001-Set-fPIC-and-pie-as-default-params-when-building.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1520856000">- Add rpcgen to buildrequires</changelog>
  <changelog author="tchvatal@suse.com" date="1534334400">- Add patch to fix high cpu load bsc#1104898:
  * quota-4.04-Listen-on-a-TCP-socket.patch</changelog>
</package>
<package pkgid="8eeb612d8a1a78f3cf9cf5e5f7c6a259bddad79a0912853d49cd0164b90868e1" name="quota" arch="x86_64">
  <version epoch="0" ver="4.04" rel="lp150.2.3.1"/>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: Mother Autoconf knows best, so don't interfere</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1322827200">- license update: GPL-2.0 and BSD-3-Clause
  Package is dual licensed. Also, use SPDX format</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- unroll binary file list
- remove install_nld.patch, not needed since 4.00-pre1
- remove automake dependency
- prepare UsrMerge (UsrMerge project), this obsoletes man.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338811200">- update to 4.00 final
- Changes in quota-tools from 4.00-pre1 to 4.00:
  * get_qf_name() does not check quota file presence (Petr Pisar)
  * report quotacheck failures by return code (Petr Pisar)
  * make global symbols static as possible (Petr Pisar)
  * implement repquota for filesystems without quota files (Jan Kara)
  * initialize v2r1 ddquot padding in dump (Jan Kara)
  * fix ddquot buffer leak (Petr Pisar)
  * fix check in setgraces() in setquota.c (Petr Pisar)
  * forbid grace time setting over RPC (Jan Kara)
  * fix synopsis and properly report errors during remote grace period setting (Jan Kara)
  * do not use real domains in warnquota example (Petr Pisar)
  * make RPC handle properly host names with colons (Jan Kara)
  * explain meaning of the second column in repquota output (Jan Kara)
  * initialize vfsold block and inode value boundaries for new quota file (Petr Pisar)
  * setquota manpage typo fix (John Bradshaw)
  * implement quotacheck for GFS2 (Abhijith Das)
  * add quotasync tool (Abhijith Das)
  * correct --no-mixed-pathnames documentation (Petr Pisar)
  * allow admin to not strip quota binaries while installing them (Jan Kara)
  * document --always-resolve at edquota and setquota (Petr Pisar)
  * comment example quotatab to silent warnquota (Petr Pisar)
  * improve comments in warnquota.conf (Ondrej Vasik)
  * fix help text for quotaoff (Ondrej Vasik)
  * make quota, setquota, and edquota recognize -h option (Ondrej Vasik)
  * check whether set limits fit into range supported by quota format (Jan Kara)
  * add next3 support (Amir G)
  * remove checking of filesystem type from hasquota() (Jan Kara)
  * create quota-nfs.sh script for nicer quota(1) output formatting on some NFS clients (Jan Kara)
  * add options for quota(1) modifying formatting of filesystem identificaion (Jan Kara)
  * minor updates of manpages (Jan Kara)
  * quotactl manpage was moved to man-pages package (Jan Kara)
  * fix quotaon to work properly with XFS filesystems (Eric Sandeen, Jan Kara)
  * fix quotaon to print all informational messages only in verbose mode (Jan Kara)
  * fix warnquota manpage to not speak about RPC (Jan Kara)
  * fix repquota to get latest quota info header (Jan Kara)
  * do not count system inodes into quota for ext[234] (Jan Kara)
  * improve detection of XFS kernel quota interface (Jan Kara)
  * support of GFS2 filesystem (Christoph Hellwig)
  * avoid memory corruption of NULL address (Petr Pisar)
  * fixup typos in manpages (Michael Meskes)
  * added german translation (Michael Bunk)
  * added --enable-static-link configure option (Jan Kara)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1351684800">- boot.quota is obsoleted by systemd-quotacheck
  http://www.freedesktop.org/software/systemd/man/systemd-quotacheck.service.html
- rpc.quota daemon will be migrated to systemd later after investigation
  on a saner approach.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1368532800">- portmap --&gt; rpcbind</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371124800">- last changes are compatible again with openSUSE &lt; 12.3
- update to 4.01
- Changes in quota-tools from 4.00 to 4.01:
  * fix compilation failure with --enable-bsd_behaviour=no
  * fix quota(1) for NFS mountpoints
  * fix reporting of huge quota limits over rpc
  * fix repquota to report all users on XFS
  * fixed edquota(8) for more users (Jan Kara)
  * remove fixed limit on number of autofs mount points
  * add quota type names to message catalogue
  * typo fixes, message changes for easier i18n
  * created Czech translation
  * store PID of quota_nld into lock file
  * warnquota: Fix manpage formatting
  * warnquota: Allow specifying of filesystems to check
  * add support for quotas on ext4 in system files
  * quotaon: Remove duplicated check for hasquota()
  * quotacheck: Fix warning about journaled quota for 3.0 and newer
    kernels
  * edquota: Fix localication of time units (Jan Kara)
  * rip out ALTFORMAT config option (Jan Kara)
  * add support for dynamic RPC block to support larger quotas
  * check set limits fit into the range supported by RPC transport
  * do not report missing utmp record to syslog</changelog>
  <changelog author="tchvatal@suse.com" date="1400500800">- Cleanup with spec-cleaner
- Remove the compat for the usrmerge
- Use systemd service files instead of the initscript +
  added extra workaround for argument parsing.
- Remove extra SUSE traball with scripts as we reduced it down to
  one script and unitfile.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- Update to current git 4.01_git201405011753
  * mostly bugfixes and documentation update
  * Most important reason for this update is to get rid of libnl1
  from the Base installation as this is one of the few packages
  that used to require it, now migrated to libnl3.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashism in quotad_env.sh script</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Version bump to 4.02 release
  * Mostly few trivial fixes.
- Properly run all systemd calls on services</changelog>
  <changelog author="tchvatal@suse.com" date="1451908800">- Version update to 4.03 release
  * Various small updates and fixes
  * Translations update
  * autotools based buildsystem
- Refresh patch:
  * quota-4.01-warnquota.patch
- Delete obsolete patch:
  * quota-4.00-makefile.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Add patch to set variables upstream rather than in spec:
  * 0001-Set-fPIC-and-pie-as-default-params-when-building.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1504526400">- Enable ldapmail feature wrt bsc#1055450</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1520683200">- Version update to 4.04:
  * support for new kernel interface that allows for repquota(8) to work
    reliably also for XFS or ext4 with quota feature and generally other
    filesystem where quota files are not available to quota-tools
  * IPv6 support for rpc.quotad and all other tools.
  * Tons of various fixes
- Drop merged patch 0001-Set-fPIC-and-pie-as-default-params-when-building.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1520856000">- Add rpcgen to buildrequires</changelog>
  <changelog author="tchvatal@suse.com" date="1534334400">- Add patch to fix high cpu load bsc#1104898:
  * quota-4.04-Listen-on-a-TCP-socket.patch</changelog>
</package>
<package pkgid="d2f935e8dced6fdf379b5ee3902937186b24fd85091545cefb5f4a0d4a3c9aa6" name="quota-nfs" arch="x86_64">
  <version epoch="0" ver="4.04" rel="lp150.2.3.1"/>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: Mother Autoconf knows best, so don't interfere</changelog>
  <changelog author="coolo@suse.com" date="1322740800">- add automake as buildrequire to avoid implicit dependency</changelog>
  <changelog author="cfarrell@suse.com" date="1322827200">- license update: GPL-2.0 and BSD-3-Clause
  Package is dual licensed. Also, use SPDX format</changelog>
  <changelog author="coolo@suse.com" date="1324468800">- remove call to suse_update_config (very old work around)</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338465600">- unroll binary file list
- remove install_nld.patch, not needed since 4.00-pre1
- remove automake dependency
- prepare UsrMerge (UsrMerge project), this obsoletes man.patch</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1338811200">- update to 4.00 final
- Changes in quota-tools from 4.00-pre1 to 4.00:
  * get_qf_name() does not check quota file presence (Petr Pisar)
  * report quotacheck failures by return code (Petr Pisar)
  * make global symbols static as possible (Petr Pisar)
  * implement repquota for filesystems without quota files (Jan Kara)
  * initialize v2r1 ddquot padding in dump (Jan Kara)
  * fix ddquot buffer leak (Petr Pisar)
  * fix check in setgraces() in setquota.c (Petr Pisar)
  * forbid grace time setting over RPC (Jan Kara)
  * fix synopsis and properly report errors during remote grace period setting (Jan Kara)
  * do not use real domains in warnquota example (Petr Pisar)
  * make RPC handle properly host names with colons (Jan Kara)
  * explain meaning of the second column in repquota output (Jan Kara)
  * initialize vfsold block and inode value boundaries for new quota file (Petr Pisar)
  * setquota manpage typo fix (John Bradshaw)
  * implement quotacheck for GFS2 (Abhijith Das)
  * add quotasync tool (Abhijith Das)
  * correct --no-mixed-pathnames documentation (Petr Pisar)
  * allow admin to not strip quota binaries while installing them (Jan Kara)
  * document --always-resolve at edquota and setquota (Petr Pisar)
  * comment example quotatab to silent warnquota (Petr Pisar)
  * improve comments in warnquota.conf (Ondrej Vasik)
  * fix help text for quotaoff (Ondrej Vasik)
  * make quota, setquota, and edquota recognize -h option (Ondrej Vasik)
  * check whether set limits fit into range supported by quota format (Jan Kara)
  * add next3 support (Amir G)
  * remove checking of filesystem type from hasquota() (Jan Kara)
  * create quota-nfs.sh script for nicer quota(1) output formatting on some NFS clients (Jan Kara)
  * add options for quota(1) modifying formatting of filesystem identificaion (Jan Kara)
  * minor updates of manpages (Jan Kara)
  * quotactl manpage was moved to man-pages package (Jan Kara)
  * fix quotaon to work properly with XFS filesystems (Eric Sandeen, Jan Kara)
  * fix quotaon to print all informational messages only in verbose mode (Jan Kara)
  * fix warnquota manpage to not speak about RPC (Jan Kara)
  * fix repquota to get latest quota info header (Jan Kara)
  * do not count system inodes into quota for ext[234] (Jan Kara)
  * improve detection of XFS kernel quota interface (Jan Kara)
  * support of GFS2 filesystem (Christoph Hellwig)
  * avoid memory corruption of NULL address (Petr Pisar)
  * fixup typos in manpages (Michael Meskes)
  * added german translation (Michael Bunk)
  * added --enable-static-link configure option (Jan Kara)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1351684800">- boot.quota is obsoleted by systemd-quotacheck
  http://www.freedesktop.org/software/systemd/man/systemd-quotacheck.service.html
- rpc.quota daemon will be migrated to systemd later after investigation
  on a saner approach.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1368532800">- portmap --&gt; rpcbind</changelog>
  <changelog author="sweet_f_a@gmx.de" date="1371124800">- last changes are compatible again with openSUSE &lt; 12.3
- update to 4.01
- Changes in quota-tools from 4.00 to 4.01:
  * fix compilation failure with --enable-bsd_behaviour=no
  * fix quota(1) for NFS mountpoints
  * fix reporting of huge quota limits over rpc
  * fix repquota to report all users on XFS
  * fixed edquota(8) for more users (Jan Kara)
  * remove fixed limit on number of autofs mount points
  * add quota type names to message catalogue
  * typo fixes, message changes for easier i18n
  * created Czech translation
  * store PID of quota_nld into lock file
  * warnquota: Fix manpage formatting
  * warnquota: Allow specifying of filesystems to check
  * add support for quotas on ext4 in system files
  * quotaon: Remove duplicated check for hasquota()
  * quotacheck: Fix warning about journaled quota for 3.0 and newer
    kernels
  * edquota: Fix localication of time units (Jan Kara)
  * rip out ALTFORMAT config option (Jan Kara)
  * add support for dynamic RPC block to support larger quotas
  * check set limits fit into the range supported by RPC transport
  * do not report missing utmp record to syslog</changelog>
  <changelog author="tchvatal@suse.com" date="1400500800">- Cleanup with spec-cleaner
- Remove the compat for the usrmerge
- Use systemd service files instead of the initscript +
  added extra workaround for argument parsing.
- Remove extra SUSE traball with scripts as we reduced it down to
  one script and unitfile.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1401278400">- Update to current git 4.01_git201405011753
  * mostly bugfixes and documentation update
  * Most important reason for this update is to get rid of libnl1
  from the Base installation as this is one of the few packages
  that used to require it, now migrated to libnl3.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1416398400">- fix bashism in quotad_env.sh script</changelog>
  <changelog author="tchvatal@suse.com" date="1417176000">- Version bump to 4.02 release
  * Mostly few trivial fixes.
- Properly run all systemd calls on services</changelog>
  <changelog author="tchvatal@suse.com" date="1451908800">- Version update to 4.03 release
  * Various small updates and fixes
  * Translations update
  * autotools based buildsystem
- Refresh patch:
  * quota-4.01-warnquota.patch
- Delete obsolete patch:
  * quota-4.00-makefile.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1451995200">- Add patch to set variables upstream rather than in spec:
  * 0001-Set-fPIC-and-pie-as-default-params-when-building.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1504526400">- Enable ldapmail feature wrt bsc#1055450</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="tchvatal@suse.com" date="1520683200">- Version update to 4.04:
  * support for new kernel interface that allows for repquota(8) to work
    reliably also for XFS or ext4 with quota feature and generally other
    filesystem where quota files are not available to quota-tools
  * IPv6 support for rpc.quotad and all other tools.
  * Tons of various fixes
- Drop merged patch 0001-Set-fPIC-and-pie-as-default-params-when-building.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1520856000">- Add rpcgen to buildrequires</changelog>
  <changelog author="tchvatal@suse.com" date="1534334400">- Add patch to fix high cpu load bsc#1104898:
  * quota-4.04-Listen-on-a-TCP-socket.patch</changelog>
</package>
<package pkgid="e7e6a8ffca0096bfdb7afec90f64710bb642e421e4cf9fc6cfa27a40c24bdf9a" name="qutebrowser" arch="noarch">
  <version epoch="0" ver="1.4.1" rel="lp150.2.3.1"/>
  <changelog author="otto.tuominen@openmailbox.org" date="1488024000">- Update to version 0.9.1 (changes since 0.8.1):
  * Prevent websites from downloading files to a location outside of the download
    folder with QtWebEngine.
  * New dependency: qutebrowser now depends on the Qt QML module, which is
    packaged separately in some distributions (as Qt Declarative/QML/Quick).
  * New :rl-backward-kill-word command which does what :rl-unix-word-rubout
    did before v0.8.0.
  * New :rl-unix-filename-rubout command which is similar to readline's
    unix-filename-rubout.
  * New fonts -&gt; completion.category setting to customize the font used for
    completion category headers.
  * New :debug-log-capacity command to adjust how many lines are logged into RAM
    (to report bugs which are difficult to reproduce).
  * New hide-unmatched-rapid-hints option to not hide hint unmatched hint labels
    in rapid mode.
  * New {clipboard} and {primary} replacements for the commandline which
    replace the :paste command.
  * New :insert-text command to insert a given text into a field on the page,
    which replaces :paste-primary together with the {primary} replacement.
  * New :window-only command to close all other windows.
  * New prev-category and next-category arguments to :completion-item-focus
    to focus the previous/next category in the completion (bound to &lt;Ctrl-Tab&gt;
  * and &lt;Ctrl-Shift-Tab&gt; by default).
  * New :click-element command to fake a click on a element.
  * New :debug-log-filter command to change console log filtering on-the-fly.
  * New :debug-log-level command to change the console loglevel on-the-fly.
  * New general -&gt; yank-ignored-url-parameters option to configure which URL
    parameters (like utm_source etc.) to strip off when yanking an URL.
  * Support for the HTML5 page visibility API
  * New readability userscript which shows a readable version of a page (using
    the readability-lxml python package)
  * New cast userscript to show a video on a Google Chromecast
  * New :run-with-count command which replaces the (undocumented) :count:command syntax.
  * New :record-macro (q) and :run-macro (@) commands for keyboard macros.
  * New ui -&gt; hide-scrollbar setting to hide the scrollbar independently of the
    user-stylesheet setting.
  * New general -&gt; default-open-dispatcher setting to configure what to open
    downloads with (instead of e.g. xdg-open on Linux).
  * Support for PAC (proxy autoconfig) with QtWebKit
  * Hints are now drawn natively in Qt instead of using web elements. This has a
    few implications for users:
    The hints -&gt; opacity setting does not exist anymore, but you can use
    rgba(r, g, b, alpha) colors instead for colors -&gt; hints.bg.
    The hints -&gt; font setting is not affected by
    fonts -&gt; web-family-fixed anymore. Thus, a transformer got added to
    change Monospace to ${_monospace}.
    Gradients in hint colors can now be configured by using qlineargradient
    and friends instead of -webkit-gradient. The most common cases get
    migrated automatically, but if you drastically changed the defaults,
    you'll need to manually adjust your config.
    Styling hints by styling qutehint elements in user-stylesheet was
    never officially supported and does not work anymore.
    Hints are now not affected by the page's stylesheet or zoom anymore.
  * :bookmark-add now has a --toggle flag which deletes the bookmark if it
    already exists.
  * :bookmark-load now has a --delete flag which deletes the bookmark after
    loading it.
  * :open now also accepts quickmark names instead of URLs
  * :tab-move now optionally takes an index for absolute moving.
  * Commands taking either an argument or a count (like :zoom or :tab-focus)
    now prefer the count instead of showing an error message.
  * :open now has an --implicit argument to treat the opened tab as implicit
    (i.e. to open it at the position it would be opened if it was a clicked link)
  * :download-open and :prompt-open-download now have an optional cmdline
    argument to pass a commandline to open the download with.
  * :yank now has a position argument to select what to yank instead of using
    flags.
  * Replacements like {url} can now also be used in the middle of an argument.
  * Consequently, commands taking another command (:later, :repeat and
    :bind) now don't immediately evaluate variables.
  * Tab titles in the :buffer completion now update correctly when a page's
    title is changed via javascript.
  * :hint now has a --mode &lt;mode&gt; flag to override the hint mode configured
    using the hints -&gt; mode setting.
  * With new-instance-open-target set to a tab option, the tab is now opened in
    the most recently focused (instead of the last opened) window. This can be
    configured with the new new-instance-open-target.window setting.
  * It can also be set to last-visible to show the pages in the most recently
    visible window, or first-opened to use the first (oldest) available window.
  * Word hints now are more clever about getting the element text from some elements.
  * Completions for :help and :bind now also show hidden commands
  * The :buffer completion now also filters using the first column (id).
  * :undo has been improved to reopen tabs at the position they were closed.
  * :navigate now takes a count for up/increment/decrement.
  * The hints -&gt; auto-follow setting now can be set to
    always/full-match/unique-match/never to more precisely control when
    hints should be followed automatically.
  * Counts can now be used with special keybindings (e.g. with modifiers).
    This was already implemented for v0.7.0 originally, but got reverted because
    it caused some issues and then never re-applied.
  * Sending a command to an existing instance (via "qutebrowser :reload") now
    doesn't mark it as urgent anymore.
  * tabs -&gt; title-format now treats an empty string as valid.
  * Bindings for :, / and ? are now configured explicitly and not hardcoded
    anymore.
  * The completion -&gt; show setting can now be set to always, auto or
    never.
  * :open-editor can now be used in any mode.
  * Lots of improvements to and bugfixes for the QtWebEngine backend, such as
    working hints. However, using qutebrowser directly from git is still advised
    when using --backend webengine.
    content -&gt; javascript-can-open-windows got renamed to
    javascript-can-open-windows-automatically.
  * :prompt-accept now optionally accepts a value which overrides the one
    entered in the input box. yes and no can be used as values for yes/no
    questions.
  * The new --qt-arg and --qt-flag arguments can be used to pass
    arguments/flags to Qt's commandline.
  * Error/warning/info messages are now shown stacked above the statusbar.
  * This also added various new settings:
    colors -&gt; messages.fg.error (renamed from statusbar.fg.error)
    colors -&gt; messages.bg.error (renamed from statusbar.bg.error)
    colors -&gt; messages.border.error
    colors -&gt; messages.fg.warning (renamed from statusbar.fg.warning)
    colors -&gt; messages.bg.warning (renamed from statusbar.bg.warning)
    colors -&gt; messages.border.warning
    colors -&gt; messages.fg.info
    colors -&gt; messages.bg.info
    colors -&gt; messages.border.info
    fonts -&gt; messages.error
    fonts -&gt; messages.warning
    fonts -&gt; messages.info
  * The qute:settings page now also shows option descriptions.
  * qute:version and qutebrowser --version now show various important paths
  * :spawn/userscripts now show a nicer error when a script wasn't found
  * Various functionality now works when javascript is disabled with QtWebKit
  * Various commands/settings taking left/right/previous arguments now take
    prev/next/last-used to remove ambiguity.
  * The ui -&gt; user-stylesheet setting now only takes filenames, not CSS snippets
  * ui -&gt; window-title-format now has a new {backend} replacement
  * :hint has a new --add-history argument to add the URL to the history for
    yank/spawn targets.
  * :set now cycles through values if more than one argument is given.
  * :open now opens default-page without an URL even without -t/-b/-w given.
  * The :paste command got deprecated as :open with {clipboard} and
    {primary} can be used instead.
  * The :paste-primary command got deprecated as :insert-text {primary} can
    be used instead.
  * The :prompt-yes and :prompt-no commands got deprecated as
    :prompt-accept yes and :prompt-accept no can be used instead.
  * The :yank-selected command got merged into :yank as :yank selection
    and thus removed.
  * The :completion-item-prev and :completion-item-next commands got merged
    into a new :completion-focus {prev,next} command and thus removed.
  * The ui -&gt; hide-mouse-cursor setting since it was completely broken and
    nobody seemed to care.
  * The hints -&gt; opacity setting - see the "Changed" section for details.
  * The completion -&gt; auto-open setting got merged into completion -&gt; show and
    thus removed.
  * All --qt-* arguments got replaced by --qt-arg and --qt-flag and thus
    removed.
  * The -c/--confdir, --datadir and --cachedir arguments got removed, as
  - -basedir should be sufficient.
  * :undo now doesn't undo tabs "closed" by :tab-detach anymore.
  * Fixed an issue with hint chars not being cleared correctly when leaving hint
    mode.
  * :tab-detach now fails correctly when there's only one tab open.
  * Various small issues with the command completion
  * Fixed hang when using multiple spaces in a row with the URL completion
  * qutebrowser now still starts with an incorrectly configured
    $XDG_RUNTIME_DIR.
  * Fixed crash when a userscript writes invalid unicode data to the FIFO
  * Fixed crash when a included HTML was not found
  * v0.8.3 accidentally broke compatibility with Python 3.4, which is restored with this release.
  * Fixed crash when doing :&lt;space&gt;&lt;enter&gt;, another corner-case introduced in v0.8.0
  * Fixed :open-editor (&lt;Ctrl-e&gt;) on Windows
  * Fixed crash when setting general -&gt; auto-save-interval to a too big value.
  * Fixed crash when using hints on Void Linux.
  * Fixed compatibility with Python 3.5.2+ on Debian unstable
  * Compatibility with pdfjs v1.6.210
  * :bind can now be used to bind to an alias (binding by editing keys.conf
    already worked before)
  * The command completion now updates correctly when changing aliases
  * The tabbar now displays correctly with the Adwaita Qt theme
  * The default sk keybinding now sets the commandline to :bind correctly
  * Fixed crash when closing a window without focusing it
  * Fixed general -&gt; private-browsing not being set correctly until a restart
    (which caused e.g. local storage to be enabled).
  * Fixed crash when using hints with JS disabled in some rare circumstances.
    When hinting input fields (:t), also consider input elements without a type.
  * Fixed crash when opening an invalid URL with a percent-encoded and a real @ in it
  * Fixed default ;o and ;O bindings
  * Fixed local storage not working (and possible other bugs) when using a
    relative path with --basedir.
  * Fixed crash when deleting a quickmark with Ctrl-D
  * Fixed HTML5 video playback on Windows
  * Fixed crash when using :prompt-open-download with a file with chars not
    encodable with the OS' filesystem encoding (e.g. with LC_ALL=C)
  * Fixed :prompt-open-download with a too long filename (&lt; 255 bytes)
  * Fixed crash when cancelling a download after doing :prompt-open-download
  * Fixed crash when writing a download to disk fails with
    :prompt-open-download.
  * Fixed HTML5 video playback on Windows</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1488110400">- Update to version 0.10.0:
  * Userscripts now have a new `$QUTE_COMMANDLINE_TEXT` environment
    variable, containing the current commandline contents.
  * A new `ripbang` userscript to create a searchengine from a
    duckduckgo bang.
  * QtWebKit Reloaded (https://github.com/annulen/webkit) is now
    fully supported.
  * Various new functionality with the QtWebEngine backend:
    + printing support with Qt &gt;= 5.8;
    + proxy support with Qt &gt;= 5.8;
    + the `general -&gt; print-element-backgrounds` option with
    Qt &gt;= 5.8;
    + the `content -&gt; cookies-store` option;
    + the `storage -&gt; cache-size` option;
    + the `colors -&gt; webpage.bg` option;
    + the HTML5 fullscreen API (e.g. youtube videos);
    + `:download --mhtml`.
  * A new `qute:history` URL and `:history` command to show the
    browsing history.
  * Open tabs are now auto-saved on each successful load and
    restored in case of a crash.
  * `:jseval` now has a `--file` flag so you can pass a javascript
    file.
  * `:session-save` now has a `--only-active-window` flag to only
    save the active window.
  * PyQt 5.7/Qt 5.7.1 is now required for the QtWebEngine backend.
  * Scrolling with the scrollwheel while holding shift now scrolls
    sideways.
  * New way of clicking hints which solves various small issues.
  * When yanking a mailto: link via hints, the mailto: prefix is
    now stripped.
  * Zoom level messages are now not stacked on top of each other
    anymore.
  * qutebrowser now automatically uses QtWebEngine if QtWebKit is
    not available.
  * :history-clear now asks for a confirmation, unless it's run
    with --force.
  * `input -&gt; mouse-zoom-divider` can now be 0 to disable zooming
    by mouse wheel.
  * `network -&gt; proxy` can also be set to `pac+file://...` now to
    use a local proxy autoconfig file (on QtWebKit).
  * Fix various bugs with Qt 5.8 and QtWebEngine:
    + a segfault when closing a window;
    + a segfault when closing a tab with a search active;
    + fix various mouse actions (like automatically entering insert
    mode) not working;
    + fixed hints sometimes not working;
    + segfault when opening a URL after a QtWebEngine renderer
    process crash.
  * Other QtWebEngine fixes:
    + insert mode now gets entered correctly with a non-100% zoom;
    + crash reports are now re-enabled when using QtWebEngine;
    + fix crashes when closing tabs while hinting;
    + using :undo or :tab-clone with a view-source:// or chrome://
    tab is now prevented, as it segfaults.
  * `:enter-mode` now refuses to enter modes which can't be entered
    manually (which caused crashes).
  * `:record-macro` (`q`) now doesn't try to record macros for
    special keys without a text.
  * Fix PAC (proxy autoconfig) not working with QtWebKit.
  * `:download --mhtml` now uses the new file dialogue.
  * Word hints are now upper-cased correctly when
    hints -&gt; uppercase is true.
  * Font validation is now more permissive in the config, allowing
    e.g. "Terminus (TTF)" as font name.
  * Fix starting on newer PyQt/sip versions with LibreSSL.
  * When downloading files with QtWebKit, a User-Agent header is
    set when possible.
  * Fix showing keybindings in the :help completion.
  * `:navigate prev/next` now detects `rel` attributes on `&lt;a&gt;`
    elements, and handles multiple `rel` attributes correctly.
  * Fix a crash when hinting with target `userscript` and spawning
    a non-existing script.
  * Lines in Jupyter notebook now trigger insert mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493726400">- Update to version 0.10.1:
  * --qt-arg and --qt-flag can now also be used to pass arguments
    to Chromium when using QtWebEngine.
  * URLs are now redacted properly (username/password, and
    path/query for HTTPS) when using Proxy Autoconfig with QtWebKit.
  * Fix a crash when updating adblock lists with invalid UTF8-chars
    in them.
  * Fix the web inspector with QtWebEngine.
  * Version checks when starting qutebrowser now also take the Qt
    version PyQt was compiled against into account.
  * Hinting a input now doesn't select existing text anymore with
    QtWebKit.
  * The cursor now moves to the end when input elements are
    selected with QtWebEngine.
  * Download suffixes like (1) are now correctly stripped with
    QtWebEngine.
  * Fix a crash when trying to print a tab which was closed in the
    meantime.
- Add the missing python3-sip dependency (boo#1036934).</changelog>
  <changelog author="9@cirno.systems" date="1502625600">- Update to version 0.11.0:
  * New dependencies:
    + New dependency on PyQt5.QtOpenGL if QtWebEngine is used.
    QtWebEngine depends on QtOpenGL already, but on distributions packaging
    split PyQt5 wrappers, the wrappers for QtOpenGL are now required.
    + New dependency on PyOpenGL if QtWebEngine is used.
  * Added:
    + Private browsing is now implemented for QtWebEngine, and changed its
    behavior: The general -&gt; private-browsing setting now only applies to
    newly opened windows, and you can use the -p flag to :open to open a
    private window.
    + New "pinned tabs" feature, with a new :tab-pin command
    (bound to &lt;Ctrl-p&gt; by default).
    + (QtWebEngine) Implemented :follow-selected.
    + New :clear-messages command to clear shown messages.
    + New ui -&gt; keyhint-delay setting to configure the delay until
    the keyhint overlay pops up.
    + New -s option for :open to force a HTTPS scheme.
    + :debug-log-filter now accepts none as an argument to clear any log
    filters.
    + New --debug-flag argument which replaces --debug-exit and --pdb-postmortem
    + New tabs -&gt; favicon-scale option to scale up/down favicons.
    + colors -&gt; statusbar.bg/fg.private and .command.private to customize
    statusbar colors for private windows.
    + New {private} field displaying [Private Mode] for
    ui -&gt; window-title-format and tabs -&gt; title-format.
    + (QtWebEngine) Proxy support with Qt 5.7.1
    (already was supported for 5.8 and newer)
  * Changed:
    + To prevent elaborate phishing attacks, the Punycode version (xn--*) is now
    shown in addition to the decoded version for international domain names
    (IDN).
    + Starting with legacy QtWebKit now shows a warning message.
    With the next release, support for it will be removed.
    + Improved qute://history page (with lazy loading)
    + Crash reports are not public anymore.
    + Comments in the config file are now placed before the individual options
    instead of being before sections.
    + Messages are now hidden when clicked.
    + stdin is now closed immediately for processes spawned from qutebrowser.
    + When ui -&gt; message-timeout is set to 0, messages are now never cleared.
    + Middle/right-clicking the blank parts of the tab bar (when vertical) now
    closes the current tab.
    + The adblocker now also blocks non-GET requests (e.g. POST).
    + javascript: links can now be hinted.
    + :view-source, :tab-clone and :navigate --tab now don't open the tab as
    "explicit" anymore, i.e. (with the default settings) open it next to the
    active tab.
    + qute:* pages now use qute://* instead (e.g. qute://version instead of
    qute:version), but the old versions are automatically redirected.
    + Texts in prompts are now selectable.
    + The default level for :messages is now info, not error
    + Trying to focus the currently focused tab with :tab-focus now focuses the
    last viewed tab.
    + (QtWebEngine) With Qt 5.9, content -&gt; cookies-store can now be set without
    a restart.
    + (QtWebEngine) With Qt 5.9, better error messages are now shown for failed
    downloads.
    + (QtWebEngine) The underlying Chromium version is now shown in the version
    info.
    + (QtWebKit) Renderer process crashes now show an error page on Qt 5.9
    or newer.
    + (QtWebKit) storage -&gt; offline-web-application-storagegot renamed to
    ...-cache
    + (QtWebKit) PAC now supports SOCKS5 as type.
  * Fixed:
    + Fixed crash with :download on PyQt 5.9.
    + Cloning a page without history doesn't crash anymore.
    + When a download results in a HTTP error, it now shows the error correctly
    instead of crashing.
    + Pressing ctrl-c while a config error is shown works as intended now.
    + When the key config isn't writable, we now show an error instead of
    crashing.
    + Fixed crash when unbinding an unbound key in the key config.
    + Fixed crash when using :debug-log-filter when --filter wasn't given
    on startup.
    + Fixed crash with some invalid setting values.
    + Continuing a search after clearing it now works correctly.
    + The tabbar and completion should now be more consistently and correctly
    styled with various system styles.
    + Applying styiles in qt5ct now shouldn't crash anymore.
    + The validation for colors in stylesheets is now less strict,
    allowing for all valid Qt values.
    + data: URLs now aren't added to the history anymore.
    + Accidentally starting with Python 2 now shows a proper error message again
    + For some people, running some userscripts crashed - this should now be
    fixed.
    + Various other rare crashes should now be fixed.
    + The settings documentation was truncated with v0.10.1 which should now be
    fixed.
    + Scrolling to an anchor in a background tab now works correctly,
    and javascript gets the correct window size for background tabs.
    + (QtWebEngine) Added a workaround for a black screen with some setups
    + (QtWebEngine) Starting with Nouveau graphics now shows an error message
    instead of crashing in Qt.
    + (QtWebEngine) Retrying downloads now shows an error instead of crashing.
    + (QtWebEngine) Cloning a view-source tab now doesn't crash anymore.
    + (QtWebEngine) window.navigator.userAgent is now set correctly when
    customizing the user agent.
    + (QtWebEngine) HTML fullscreen is now tracked for each tab separately,
    which means it's not possible anymore to accidentally get stuck in
    fullscreen state by closing a tab with a fullscreen video.
    + (QtWebEngine) :scroll-page with --bottom-navigate now works correctly.
    + (QtWebKit) The HTTP cache is disabled on Qt 5.7.1 and 5.8 now as it leads
    to frequent crashes due to a Qt bug.
    + (QtWebKit) Fixed Crash when a PAC file returns an invalid value.</changelog>
  <changelog author="aloisio@gmx.com" date="1507809600">- Update to version 1.0.0
  * Dependency changes:
    +  Support for legacy QtWebKit (before 5.212 which is
    distributed independently from Qt) is dropped.
    +  Support for Python 3.4 is dropped.
    +  Support for Qt before 5.7.1 and PyQt before 5.7 is dropped.
    +  New dependency on the QtSql module and Qt sqlite support.
    +  New dependency on the attrs project (packaged as
    python-attr in some distributions).
    +  The depedency on PyOpenGL (when using QtWebEngine) got
    removed. Note that PyQt5.QtOpenGL is still a dependency.
    +  PyQt5.QtOpenGL is now always required, even with QtWebKit.
  * The QtWebEngine backend is now used by default. Note this
    means that QtWebEngine now should be a required dependency, and
    QtWebKit (if new enough) should be changed to an optional
    dependency.
  * Completely rewritten configuration system which ignores the
    old config file. See link:qute://help/configuring.html[] for
    details.
  * Various documentation files got moved to the doc/ subfolder;
    qutebrowser.desktop got moved to misc/.
  * :set now doesn't support toggling/cycling values anymore, that
    functionality got moved to :config-cycle.
  * New completion engine based on sqlite, which allows to
    complete the entire browsing history. The default for
    completion.web_history_max_items got changed to -1 (unlimited).
    If the completion is too slow on your machine, try setting it to
    a few 1000 items.
  Added:
  * QtWebEngine: Spell checking support, see the
    spellcheck.languages setting.
  * New qt.args setting to pass additional arguments to
    Qt/Chromium.
  * New backend setting to select the backend to use. Together
    with the previous setting, this should make most wrapper
    scripts unnecessary.
  * qutebrowser can now be set as the default browser on macOS.
  * New config commands:
    + :config-cycle to cycle an option between multiple values.
    + :config-unset to remove a configured option.
    + :config-clear to remove all configured options.
    + :config-source to (re-)read a config.py file.
    + :config-edit to open the config.py file in an editor.
    + :config-write-py to write a config.py template file.
  * New :version command which opens qute://version.
  * New back/forward indicator in the statusbar.
  * New bindings.key_mappings setting to map keys to other keys.
  * QtWebEngine: Support for proxy authentication.
  Changed:
  * Using :download now uses the page's title as filename.
  * Using :back or :forward with a count now skips intermediate
    pages.
  * When there are multiple messages shown, the timeout is
    increased.
  * :search now only clears the search if one was displayed
    before, so pressing &lt;Escape&gt; doesn't un-focus inputs anymore.
  * Pinned tabs now adjust to their text's width, so the
    tabs.width.pinned setting got removed.
  * :set-cmd-text now has a --run-on-count argument to run the
    underlying command directly if a count was given.
  * :scroll-perc got renamed to :scroll-to-perc.
  Removed:
  * Migrating QtWebEngine data written by versions before
    2016-11-15 (before v0.9.0) is now not supported anymore.
  * Upgrading qutebrowser with a version older than v0.4.0 still
    running now won't work properly anymore.
  * The --harfbuzz and --relaxed-config commandline arguments got
    dropped.
  Fixes:
  * Exiting fullscreen via :fullscreen or buttons on a page now
    restores the correct previous window state
    (maximized/fullscreen).
  * When input.insert_mode.auto_load is set, background tabs now
    don't enter insert mode anymore.
  * The keybinding help widget now works correctly when using
    keybindings with a count.
  * The window.hide_wayland_decoration setting now works correctly
    again.</changelog>
  <changelog author="aavindraa@gmail.com" date="1508241600">- Update to version 1.0.2:
  * Fixed
    + Fix workaround for black screens or crashes with Nvidia cards
    + Handle a filesystem going read-only gracefully
    + Fix crash when setting fonts.monospace
    + Fix list options not being modifyable via .append() in
    config.py
    + Mark the content.notifications setting as QtWebKit only
    correctly
    + Fix wrong rendering of keys like &lt;back&gt; in the completion
  * Changed
    + Nicer error messages and other minor improvements
  * Includes fixes from 1.0.1:
    + Fixed starting after customizing fonts.tabs or
    fonts.debug_console.
    + Fixed starting with old PyQt versions compiled against newer
    Qt versions.
    + Fixed check for PyQt version to correctly enforce 5.7
    (not 5.2).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1508587200">- Add the missing python3-attrs dependency (boo#1064515).</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 1.0.3:
  * Changed
    + Performance improvements for tab rendering.
    + The :open-editor command is not hidden anymore and also usable
    in normal mode.
    + Security enhancements for macos and windows builds
  * Fixed
    + Handle accessing a locked sqlite database gracefully
    + Abort pinned tab dialogs properly when a tab is closed e.g.
    by closing a window.
    + Unbinding a default keybinding twice no longer binds it again
    + Completions are now sorted correctly again when filtered</changelog>
  <changelog author="9@cirno.systems" date="1511870400">- Update to version 1.0.4:
  * The qute://gpl page now works correctly again.
  * Trying to bind an empty command now doesn't crash anymore.
  * Fixed crash when :config-write-py fails to write to the given
    path.
  * Fixed crash for some users when selecting a file with Qt 5.9.3
  * Improved handling for various SQL errors
  * Fix crash when setting content.cache.size to a big value
    (&gt; 2 GB)</changelog>
  <changelog author="9@cirno.systems" date="1516017600">- Update to version 1.1.0:
  Added:
  * Initial support for Greasemonkey scripts. There are still
    some rough edges, but many scripts should already work.
  * New fields for window.title_format and tabs.title.format:
    + {current_url}
    + {protocol}
  * New settings:
    + colors.statusbar.passthrough.fg/.bg
    + completion.delay and completion.min_chars to update the
    completion less often.
    + completion.use_best_match to automatically use the
    best-matching command in the completion.
    + keyhint.radius to configure the edge rounding for the key
    hint widget.
    + qt.highdpi to turn on Qt's High-DPI scaling.
    + tabs.pinned.shrink (true by default) to make it possible
    for pinned tabs and normal tabs to have the same size.
    + content.windowed_fullscreen to show e.g. a fullscreened
    video in the window without fullscreening that window.
    + tabs.persist_mode_on_change to keep the current mode when
    switching tabs.
    + session.lazy_restore which allows to not load pages
    immediately when restoring a session.
  * New commands:
    + :tab-give and :tab-take, to give tabs to another window,
    or take them from another window.
    + :completion-item-yank (bound to &lt;Ctrl-C&gt;) to yank the
    current completion item text.
    + :edit-command to edit the commandline in an editor.
    + search.incremental for incremental text search.
  * New flags for existing commands:
    + -o flag for :spawn to show stdout/stderr in a new tab.
    + --rapid flag for :command-accept (bound to Ctrl-Enter by
    default), which allows executing a command in the
    completion without closing it.
    + --private and --related flags for :edit-url, which have the
    same effect they have with :open.
    + --history for :completion-item-focus which causes it to go
    through the command history when no text was entered.
    The default bindings for cursor keys in the completion
    changed to use that, so that they can be used again to
    navigate through completion items when a text was entered.
    + --file for :debug-pyeval which makes it take a filename
    instead of a line of code.
  * New config.source(...) method for config.py to source another
    file.
  * New {line} and {column} replacements for editor.command to
    position the cursor correctly.
  * New qute-pass userscript as alternative to password_fill
    which allows selecting accounts via rofi or any other
    dmenu-compatile application.
  * New hist_importer.py script to import history from
    Firefox/Chromium.
  Changed:
  * Some settings got renamed:
  * tabs.width.bar -&gt; tabs.width
  * tabs.width.indicator -&gt; tabs.indicator.width
  * tabs.indicator_padding -&gt; tabs.indicator.padding
  * session_default_name -&gt; session.default_name
  * ignore_case -&gt; search.ignore_case
  * Much improved user stylesheet handling for QtWebEngine which
    reduces flickering and updates immediately after setting a
    stylesheet.
  * High-DPI favicons are now used when available.
  * The asciidoc2html.py script now uses Pygments (which is
    already a dependency of qutebrowser) instead of
    source-highlight for syntax highlighting.
  * The :buffer command now doesn't require quoting anymore,
    similar to :open.
  * The importer.py script was largely rewritten and now also
    supports importing from Firefox' places.sqlite file and
    Chrome/Chromium profiles.
  * Various internal refactorings to use Python 3.5 and
    ECMAscript 6 features.
  * If the window.hide_wayland_decoration setting is False, but
    QT_WAYLAND_DISABLE_WINDOWDECORATION is set in the
    environment, the decorations are still hidden.
  * The install_dict.py script for QtWebEngine was renamed to
    dictcli.py and can now also upgrade dictionaries correctly.
  * :undo now can re-open multiple tabs after :tab-only was used.
  * :config-write-py with a relative path now puts the file into
    the config directory.
  * The qute://version page now also shows the uptime of
    qutebrowser.
  * qutebrowser now prompts to create a non-existing directory
    when starting a download.
  * :jseval --file now searches relative paths in a js/ subdir in
    qutebrowser's data dir, e.g. ~/.local/share/qutebrowser/js.
  * The current/default bindings are now shown in the ``:bind`
    completion.
  * Empty categories are now hidden in the :open completion.
  * Search terms for URLs and titles can now be mixed when
    filtering the completion.
  * The default font size for the UI got bumped up from 8pt to
    10pt.
  * Improved matching in the completion: The words entered are
    now matched in any order, and mixed matches on URL/tite are
    possible.
  * The system's default encoding (rather than UTF-8) is now used
    to decode subprocess output.
  * qutebrowser now ensures it's focused again after an external
    editor is closed.
  * The colors.completion.fg setting can now be a list, allowing
    to specify different colors for the three completion columns.
  Fixed:
  * More consistent sizing for favicons with vertical tabs.
  * Using :home on pinned tabs is now prevented.
  * Fix crash with unknown file types loaded via qute://help.
  * Scrolling performance improvements.
  * Sites like qute://help now redirect to qute://help/ to make
    sure links work properly.
  * Fixes for the size calculation of pinned tabs in the tab bar.
  * Worked around a crash with PyQt 5.9.1 compiled against
    Qt &lt; 5.9.1 when using :yank or qute:// URLs.
  * Fixed crash when opening qute://help/img.
  * Fixed gU (:navigate up) on qute://help and webservers not
    handling .. in a URL.
  * Using e.g. -s backend webkit to set the backend now works
    correctly.
  * Fixed crash when closing the tab an external editor was
    opened in.
  * When using :search-next before a search is finished, no
    warning about no results being found is shown anymore.
  * Fix :click-element with an ID containing non-alphanumeric
    characters.
  * Fix crash when a subprocess outputs data which is not
    decodable as UTF-8.
  * Fix crash when closing a tab immediately after hinting.
  * Worked around issues in Qt 5.10 with loading progress never
    being finished.
  * Fixed a crash when writing a flag before a command
    (e.g. :-w open).
  * Fixed a crash when clicking certain form elements with
    QtWebEngine.
  Deprecated:
  * :tab-detach has been deprecated, as :tab-give without
    argument can be used instead.
  Removed:
  * The long-deprecated :prompt-yes, :prompt-no, :paste-primary
    and :paste commands have been removed.
  * The invocation :download &lt;url&gt; &lt;dest&gt; which was deprecated
    in v0.5.0
    was removed, use :download --dest &lt;dest&gt; &lt;url&gt; instead.
  * The messages.unfocused option which wasn't used anymore was
    removed.
  * The x[xtb] default bindings got removed again as many users
    accidentally triggered them.</changelog>
  <changelog author="9@cirno.systems" date="1516449600">- Update to version 1.1.1:
  * Fixed crashes with Qt 5.10 when closing a tab before it
    finished loading.</changelog>
  <changelog author="9+suse@cirno.systems" date="1519905600">- Update to version 1.1.2:
  Fixed:
  * QtWebEngine: Crash with Qt 5.10.1 when using :undo on some
    tabs.
  * Compatibility with Python 3.7
- Use %license macro</changelog>
  <changelog author="9+suse@cirno.systems" date="1520683200">- Update keyring
- Update to version 1.2.0:
  Added:
  * Initial implementation of per-domain settings:
    + :set and :config-cycle now have a -u/--pattern argument
    taking a URL match pattern for supported settings.
    + config.set in config.py now takes a third argument which is
    the pattern.
    + New with config.pattern('...') as p: context manager for
    config.py to use the shorthand syntax with a pattern.
    + New tsh keybinding to toggle scripts for the current host.
    With a capital S, the toggle is saved. With a capital H,
    subdomains are included. With u instead of h, the exact
    current URL is used.
    + New tph keybinding to toggle plugins, with the same
    additional binding described above.
  * New QtWebEngine features:
    + Caret/visual mode
    + Authentication via ~/.netrc
    + Retrying downloads with Qt 5.10 or newer
    + Hinting and other features inside same-origin frames
  * New flags for existing commands:
    + :session-load has a new --delete flag which deletes the
    session after loading it.
    + New --no-last flag for :tab-focus to not focus the last tab
    when focusing the currently focused one.
    + New --edit flag for :view-source to open the source in an
    external editor.
    + New --select flag for :follow-hint which acts like the
    given string was entered but doesn't necessary follow the
    hint.
  * New special pages:
    + qute://bindings (opened via :bind) which shows all
    keybindings.
    + qute://tabs (opened via :buffer) which lists all tabs.
  * New settings:
    + statusbar.widgets to configure which widgets should be
    shown in which order in the statusbar.
    + tabs.mode_on_change which replaces
    tabs.persist_mode_on_change. It can now be set to restore
    which remembers input modes (input/passthrough) per tab.
    + input.insert_mode.auto_enter which makes it possible to
    disable entering insert mode automatically when an editable
    element was clicked. Together with
    input.forward_unbound_keys, this should allow for
    emacs-like "modeless" keybindings.
  * New :prompt-yank command (bound to Alt-y by default) to yank
    URLs referenced in prompts.
  * The hostblock_blame script which was removed in v1.0 was
    updated for the new config and re-added.
  * New cycle-inputs.js script in scripts/ which can be used with
    :jseval -f to cycle through inputs.
  Changed:
  * Complete refactoring of key input handling, with various
    effects:
    + emacs-like keychains such as &lt;Ctrl-X&gt;&lt;Ctrl-C&gt; can now be
    bound.
    + Key chains can now be bound in any mode (this allows
    binding unused keys in hint mode).
    + Yes/no prompts don't use keybindings from the prompt
    section anymore, they have their own yesno section instead.
    + Trying to bind invalid keys now shows an error.
    + The bindings.default setting can now only be set in a
    config.py, and existing values in autoconfig.yml are
    ignored.
  * Improvements for GreaseMonkey support:
    + @include and @exclude now support regex matches.
    With QtWebEngine and Qt 5.8 and newer, Qt handles the
    matching, but similar functionality will be added in
    Qt 5.11.
    + Support for @requires
    + Support for the GreaseMonkey 4.0 API
  * The sqlite history now uses write-ahead logging which should
    be a performance and stability improvement.
  * When an editor is spawned with :open-editor and :config-edit,
    the changes are now applied as soon as the file is saved in
    the editor.
  * The hist_importer.py script now only imports URL schemes
    qutebrowser can handle.
  * Deleting a prefix (:, / or ?) via backspace now leaves
    command mode.
  * Angular 1 elements and &lt;summary&gt;/&lt;details&gt; now get hints
    assigned.
  * :tab-only with pinned tabs now still closes unpinned tabs.
  * The url.incdec_segments option now also can take port as
    possible segment.
  * QtWebEngine: :view-source now uses Chromium's view-source:
    scheme.
  * Tabs now show their full title as tooltip.
  * When there are multiple unknown keys in a autoconfig.yml,
    they now all get reported in one error.
  * More performance improvements when opening/closing many tabs.
  * The :version page now has a button to pastebin the
    information.
  * Replacements like {url} can now be escaped as {{url}}.
  Fixed:
  * QtWebEngine bugfixes:
    + Improved fullscreen handling with Qt 5.10.
    + Hinting and scrolling now works properly on special
    view-source: pages.
    + Scroll positions are now restored correctly from sessions.
    + :follow-selected should now work in more cases with
    Qt &gt; 5.10.
    + Incremental search now flickers less and doesn't move to
    the second result when pressing Enter.
    + Keys like Ctrl-V or Shift-Insert are now correctly
    handled/filtered with Qt 5.10.
    + Fixed hangs/segfaults on exit with Qt 5.10.1.
    + Fixed favicons sometimes getting cleared with Qt 5.10.
    + Qt download objects are now cleaned up properly when a
    download is removed.
    + JavaScript messages are now not double-HTML escaped anymore
    on Qt &lt; 5.11
  * QtWebKit bugfixes:
    + Fixed GreaseMonkey-related crashes.
    + :view-source now displays a valid URL.
  * URLs containing ampersands and other special chars are now
    shown correctly when filtering them in the completion.
  * :bookmark-add "" foo can now be used to save the current URL
    with a custom title.
  * :spawn -o now waits until the process has finished before
    trying to show the output. Previously, it incorrectly showed
    the previous output immediately.
  * Suspended pages now should always load the correct page when
    being un-suspended.
  * Exception types are now shown properly with :config-source
    and :config-edit.
  * When using :bookmark-add --toggle, bookmarks are now saved
    properly.
  * Crash with an empty completion.timestamp_format.
  * Crash when completion.min_chars is set in some cases.
  * HTML/JS resource files are now read into RAM on start to
    avoid crashes when changing qutebrowser versions while it's
    open.
  * Setting bindings.key_mappings to an empty value is now
    allowed.
  * Bindings to an empty commands are now ignored rather than
    crashing.
  Removed:
  * QUTE_SELECTED_HTML is now not set for userscripts anymore
    except when called via hints.
  * The qutebrowser_viewsource userscript has been removed as
    :view-source --edit can now be used.
  * The tabs.persist_mode_on_change setting has been removed and
    replaced by tabs.mode_on_change.</changelog>
  <changelog author="9+suse@cirno.systems" date="1521028800">- Update to version 1.2.1:
  Fixed:
  * qutebrowser now starts properly when the PyQt5
    QOpenGLFunctions package wasn't found.
  * The keybinding cheatsheet on the quickstart page is now
    loaded from a local qute:// URL again.
  * Unbinding keys which were bound in older qutebrowser versions
    now doesn't crash anymore.
  * Fixed a crash when reloading a page which wasn't fully
    loaded with v1.2.0
  * Keys on the numeric keypad now fall back to the same bindings
    without Num+ if no Num+ binding was found.
  * Fixed hinting on some pages with Qt &lt; 5.10.
  * Titles are now displayed correctly again for tabs which are
    cloned or loaded from sessions.</changelog>
  <changelog author="9+suse@cirno.systems" date="1525435200">- Use upstream Makefile to install
  * Package scripts and manpage
- Package AppStream metadata
- Update to version 1.3.0:
  Added:
  * New :scroll-to-anchor command to scroll to an anchor in the
    document.
  * New url.open_base_url option to open the base URL of a
    searchengine when no search term is given.
  * New tabs.min_width setting to configure the minimal width
    for tabs.
  * New userscripts:
    + getbib to download bibtex information for DOIs on a page.
    + qute-keepass to get passwords from KeePassX.
  Changed:
  * QtWebEngine: Support for JavaScript Shared Web Workers have
    been disabled on Qt versions older than 5.11 because of
    security issues in in Chromium. You can get the same effect
    in earlier versions via
    ":set qt.args ['disable-shared-workers']". An equivalent
    workaround is also contained in Qt 5.9.5 and 5.10.1.
  * The file dialog for downloads now has basic tab completion
    based on the entered text.
  * :version now shows OS information for POSIX OS other than
    Linux/macOS.
  * When there's an error inserting the text from an external
    editor, a backup file is now saved.
  * The window.hide_wayland_decoration setting got renamed to
    window.hide_decoration and now also works outside of wayland.
  * The tabs.favicons.show setting now can take three values:
    'always' (was True), 'never' (was False) and 'pinned'
    (to only show favicons for pinned tabs).
  * Hover tooltips on tabs now always show the webpage's title.
  * The default value for content.host_blocking.lists was
    changed to only include https://github.com/StevenBlack/hosts
    which combines various sources.
  * Error messages when trying to wrap when tabs.wrap is False
    are now logged to debug instead of messages.
  Fixed:
  * Using hints before a page is fully loaded is now possible
    again.
  * Selecting hints with the number keypad now works again.
  * Tab titles for tabs loaded from sessions should now really be
    correct instead of showing the URL.
  * Loading URLs with customized settings from a session now
    avoids an additional reload.
  * The window icon and title now get set correctly again.
  * The tabs.switching_delay setting now has a correct maximum
    value limit set.
  * The taskadd script now works properly when there's multi-line
    output.
  * QtWebEngine: Worked around issues with
    GreaseMonkey/stylesheets not being loaded correctly in some
    situations.
  * The statusbar now more closely reflects the caret mode state.
  * The icon on Windows should now be displayed in a higher
    resolution.
  * The QtWebEngine development tools (inspector) now also work
    when JavaScript is disabled globally.
  * Building .exe files now works when upx is installed on the
    system.
  * The keyhint widget now shows the correct text for chained
    modifiers.
  * Loading GreaseMonkey scripts now also works with Jinja2 2.8
    (e.g. on Debian Stable).
  * Adding styles with GreaseMonkey on fast sites now works
    properly.
  * Window ID 0 is now excluded properly from ":tab-take"
    completion.
  * A rare crash when cancelling a download has been fixed.
  * The Makefile (intended for packagers) now supports PREFIX
    properly.
  * The workaround for a black window with Nvidia graphics is now
    enabled on non-Linux systems (like FreeBSD) as well.
  * Initial support for Qt 5.11.
  * Checking for a new version after sending a crash report now
    works properly again.
  * "@match" in Greasemonkey scripts now more closely matches the
    proper pattern syntax.
  * Searching via / or ? now doesn't handle any characters in a
    special way.
  * Fixed crash when trying to retry some failed downloads on
    QtWebEngine.
  * An invalid spellcheck dictionary filename now doesn't crash
    anymore. When no spellcheck dictionaries are configured,
    it's now disabled internally. This works around an issue with
    entering special characters on Facebook messenger.</changelog>
  <changelog author="9+suse@cirno.systems" date="1527595200">- Update to version 1.3.1:
  * Work around a bug in Qt 5.11 where only the top/bottom half of
    the window is used. This workaround is incomplete, but fixes
    the majority of the cases where this happens.
  * Work around keyboard focus issues with Qt 5.11.
  * Work around an issue in Qt 5.11 where e.g. activating
    JavaScript per-domain needed a manual reload in some cases.
  * Don't crash when a ² key is pressed (e.g. on AZERTY keyboards).
  * Don't crash when a tab is opened and quickly closed again.</changelog>
  <changelog author="9+suse@cirno.systems" date="1528891200">- Update to version 1.3.2:
  * QtWebEngine: Improved workaround for a bug in Qt 5.11 where
    only the top/bottom half of the window is used.
  * QtWebEngine: Work around a bug in Qt 5.11 where an endless
    loading-loop is triggered when clicking a link with an unknown
    scheme.
  * QtWebEngine: When switching between pages with changed
    settings, less unnecessary reloads are done now.
  * QtWebEngine: It's now possible to open external links such as
    magnet:// or mailto: via hints.</changelog>
  <changelog author="9+suse@cirno.systems" date="1529668800">- Update to version 1.3.3:
  Security:
  * An XSS vulnerability on the qute://history page allowed
    websites to inject HTML into the page via a crafted title
    tag. This could allow them to steal your browsing history.
    If you're currently unable to upgrade, avoid using :history.
    This issue has been assigned CVE-2018-1000559.
  Fixed:
  * Crash in a workaround for a Qt 5.11 bug in rare
    circumstances.
  * Workaround for a Qt bug which preserves searches between page
    loads.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530619200">- Update %description
- Update to version 1.4.0:
  Added:
  * Support for the bundled sip module in PyQt 5.11 and other
    changes in Qt/PyQt 5.11.x.
  * New --debug-flag log-requests to log requests to the debug
    log for debugging.
  * New --first flag for :hint (bound to gi for inputs) which
    automatically selects the first hint.
  * New input.escape_quits_reporter setting which can be used to
    avoid accidentally quitting the crash reporter when pressing
    escape.
  * New qute-lastpass userscript which uses the LastPass CLI to
    fill passwords.
  * The Makefile now installs a
    /usr/share/metainfo/qutebrowser.appdata.xml file.
  * QtWebEngine: Support for printing from webpages via
    window.print.
  * QtWebEngine: Support for muting tabs:
    + New {audio} field for window.title_format and
    tabs.title.format which displays [M]/[A] for
    muted/recently audible tabs.
    + New :tab-mute command (bound to &lt;Alt-m&gt;) to mute/unmute a
    tab.
  * QtWebEngine: Support for content.cookies.accept with
    third-party cookies blocked by default (requires Qt 5.11).
  * QtWebEngine: New settings:
    + Support for requesting persistent storage via
    navigator.webkitPersistentStorage.requestQuota with a new
    content.persistent_storage setting (requires Qt 5.11).
    This setting also supports URL patterns.
    + Support for registering custom protocol handlers via
    navigator.registerProtocolHandler with a new
    content.register_protocol_handler setting (requires
    Qt 5.11). This setting also supports URL patterns.
    + Support for WebRTC screen sharing with a new
    content.desktop_capture setting (requires Qt 5.10).
    This setting also supports URL patterns.
    + New content.autoplay setting to enable/disable automatic
    video playback (requires Qt 5.10).
    + New content.webrtc_public_interfaces_only setting to only
    expose public interfaces over WebRTC (requires Qt 5.9.2
    or 5.11).
    + New content.canvas_reading setting to disable reading from
    canvas elements.
  Changed:
  * The following settings now support URL patterns:
    + content.headers.do_not_track
    + content.headers.custom
    + content.headers.accept_language
    + content.headers.user_agent
    + content.ssl_strict
    + content.geolocation
    + content.notifications
    + content.media_capture
  * New short flags for commandline arguments: -B and -T for
  - -basedir and --temp-basedir; -d and -D for --debug and
  - -debug-flag.
  * Deleting history items via :history-clear or
    :completion-item-del now also removes that URL from
    QtWebEngine's visited links.
  * There's now completion for commands taking a variable count
    of arguments (like :config-cycle).
  * QtWebEngine: On Qt 5.11.1, no reloads are needed anymore
    when switching between pages with changed settings
    (e.g. content.javascript.enabled).
  * The qt.force_software_rendering setting changed from a
    boolean to taking different values (software-opengl,
    qt-quick and chromium) for different kinds of software
    rendering workarounds.
  * On Qt 5.11, using wayland with QtWebEngine is now possible
    when using software rendering.
  * GreaseMonkey scripts now get their own global scope (based on
    the page's one), which allows scripts like OneeChan to work.
  * Rapid hinting is now supported with the yank and yank-primary
    targets, copying newline-separated links.
  * QtWebEngine: On Qt 5.11, the developer tools (inspector) can
    now be used securely and without requiring the
  - -enable-webengine-inspector option.
  * The &lt;Enter&gt; key (:follow-selected) now follows the currently
    focused element if there's no selection.
  * The --logfilter argument now can be prepended with an
    exclamation mark (e.g. --logfilter '!init,destroy') to
    invert the filter.
  * :view-source now has a --pygments flag which uses the "old"
    way of rendering sources even with QtWebEngine.
  * Improved error messages when a setting needs a newer Qt
    version.
  * QtWebEngine: Various improvements to make the cursor more
    visible in caret browsing.
  * When a prompt is opened in insert/passthrough mode, the mode
    is restored after closing the prompt.
  * On Qt 5.10 or newer, dictionaries are now read from the
    qutebrowser data directory (e.g. ~/.local/share/qutebrowser)
    instead of /usr/share/qt.
    Existing dictionaries are copied over.
  * If an error while parsing ~/.netrc occurs, the cause of the
    error is now logged.
  * On Qt 5.9 or newer, certificate errors now show Chromium's
    detailed error page.
  * Greasemonkey scripts now support a "@qute-js-world" tag to
    run them in a different JavaScript context.
  Fixed:
  * Various subtle keyboard focus issues.
  * The security fix in v1.3.3 caused URLs with ampersands
    (www.example.com?one=1&amp;two=2) to send the wrong arguments
    when clicked on the qute://history page (boo#1100968,
    CVE-2018-1000559).
  * Crash when opening a PDF page with PDF.js enabled
    (on QtWebKit), but no PDF.js installed.
  * Crash when closing a tab shortly after opening it.
  Removed:
  * :tab-detach which has been deprecated in v1.1.0 has been
    removed.
  * The content.developer_extras setting got removed.
    On QtWebKit, developer extras are now automatically enabled
    when opening the inspector.</changelog>
  <changelog author="9+suse@cirno.systems" date="1531310400">- Update to version 1.4.1:
  Security:
  * CVE-2018-10895: Fix CSRF issue on the qute://settings page,
    leading to possible arbitrary code execution (boo#1100968).
    See the related GitHub issue for details:
    https://github.com/qutebrowser/qutebrowser/issues/4060
  Fixed:
  * Rare crash when an error occurs in downloads.
  * Newlines are now stripped from the :version pastebin URL.
  * Worked around a Qt issue which redirects to a
    chrome-error:// page when trying to use U2F.
  * The link_pyqt.py script now works correctly with PyQt 5.11.</changelog>
</package>
<package pkgid="a109e94b98679a288a1a564fafc62e0533fee0d5a0f89959fbffb03b42d549ce" name="qutebrowser" arch="src">
  <version epoch="0" ver="1.4.1" rel="lp150.2.3.1"/>
  <changelog author="otto.tuominen@openmailbox.org" date="1488024000">- Update to version 0.9.1 (changes since 0.8.1):
  * Prevent websites from downloading files to a location outside of the download
    folder with QtWebEngine.
  * New dependency: qutebrowser now depends on the Qt QML module, which is
    packaged separately in some distributions (as Qt Declarative/QML/Quick).
  * New :rl-backward-kill-word command which does what :rl-unix-word-rubout
    did before v0.8.0.
  * New :rl-unix-filename-rubout command which is similar to readline's
    unix-filename-rubout.
  * New fonts -&gt; completion.category setting to customize the font used for
    completion category headers.
  * New :debug-log-capacity command to adjust how many lines are logged into RAM
    (to report bugs which are difficult to reproduce).
  * New hide-unmatched-rapid-hints option to not hide hint unmatched hint labels
    in rapid mode.
  * New {clipboard} and {primary} replacements for the commandline which
    replace the :paste command.
  * New :insert-text command to insert a given text into a field on the page,
    which replaces :paste-primary together with the {primary} replacement.
  * New :window-only command to close all other windows.
  * New prev-category and next-category arguments to :completion-item-focus
    to focus the previous/next category in the completion (bound to &lt;Ctrl-Tab&gt;
  * and &lt;Ctrl-Shift-Tab&gt; by default).
  * New :click-element command to fake a click on a element.
  * New :debug-log-filter command to change console log filtering on-the-fly.
  * New :debug-log-level command to change the console loglevel on-the-fly.
  * New general -&gt; yank-ignored-url-parameters option to configure which URL
    parameters (like utm_source etc.) to strip off when yanking an URL.
  * Support for the HTML5 page visibility API
  * New readability userscript which shows a readable version of a page (using
    the readability-lxml python package)
  * New cast userscript to show a video on a Google Chromecast
  * New :run-with-count command which replaces the (undocumented) :count:command syntax.
  * New :record-macro (q) and :run-macro (@) commands for keyboard macros.
  * New ui -&gt; hide-scrollbar setting to hide the scrollbar independently of the
    user-stylesheet setting.
  * New general -&gt; default-open-dispatcher setting to configure what to open
    downloads with (instead of e.g. xdg-open on Linux).
  * Support for PAC (proxy autoconfig) with QtWebKit
  * Hints are now drawn natively in Qt instead of using web elements. This has a
    few implications for users:
    The hints -&gt; opacity setting does not exist anymore, but you can use
    rgba(r, g, b, alpha) colors instead for colors -&gt; hints.bg.
    The hints -&gt; font setting is not affected by
    fonts -&gt; web-family-fixed anymore. Thus, a transformer got added to
    change Monospace to ${_monospace}.
    Gradients in hint colors can now be configured by using qlineargradient
    and friends instead of -webkit-gradient. The most common cases get
    migrated automatically, but if you drastically changed the defaults,
    you'll need to manually adjust your config.
    Styling hints by styling qutehint elements in user-stylesheet was
    never officially supported and does not work anymore.
    Hints are now not affected by the page's stylesheet or zoom anymore.
  * :bookmark-add now has a --toggle flag which deletes the bookmark if it
    already exists.
  * :bookmark-load now has a --delete flag which deletes the bookmark after
    loading it.
  * :open now also accepts quickmark names instead of URLs
  * :tab-move now optionally takes an index for absolute moving.
  * Commands taking either an argument or a count (like :zoom or :tab-focus)
    now prefer the count instead of showing an error message.
  * :open now has an --implicit argument to treat the opened tab as implicit
    (i.e. to open it at the position it would be opened if it was a clicked link)
  * :download-open and :prompt-open-download now have an optional cmdline
    argument to pass a commandline to open the download with.
  * :yank now has a position argument to select what to yank instead of using
    flags.
  * Replacements like {url} can now also be used in the middle of an argument.
  * Consequently, commands taking another command (:later, :repeat and
    :bind) now don't immediately evaluate variables.
  * Tab titles in the :buffer completion now update correctly when a page's
    title is changed via javascript.
  * :hint now has a --mode &lt;mode&gt; flag to override the hint mode configured
    using the hints -&gt; mode setting.
  * With new-instance-open-target set to a tab option, the tab is now opened in
    the most recently focused (instead of the last opened) window. This can be
    configured with the new new-instance-open-target.window setting.
  * It can also be set to last-visible to show the pages in the most recently
    visible window, or first-opened to use the first (oldest) available window.
  * Word hints now are more clever about getting the element text from some elements.
  * Completions for :help and :bind now also show hidden commands
  * The :buffer completion now also filters using the first column (id).
  * :undo has been improved to reopen tabs at the position they were closed.
  * :navigate now takes a count for up/increment/decrement.
  * The hints -&gt; auto-follow setting now can be set to
    always/full-match/unique-match/never to more precisely control when
    hints should be followed automatically.
  * Counts can now be used with special keybindings (e.g. with modifiers).
    This was already implemented for v0.7.0 originally, but got reverted because
    it caused some issues and then never re-applied.
  * Sending a command to an existing instance (via "qutebrowser :reload") now
    doesn't mark it as urgent anymore.
  * tabs -&gt; title-format now treats an empty string as valid.
  * Bindings for :, / and ? are now configured explicitly and not hardcoded
    anymore.
  * The completion -&gt; show setting can now be set to always, auto or
    never.
  * :open-editor can now be used in any mode.
  * Lots of improvements to and bugfixes for the QtWebEngine backend, such as
    working hints. However, using qutebrowser directly from git is still advised
    when using --backend webengine.
    content -&gt; javascript-can-open-windows got renamed to
    javascript-can-open-windows-automatically.
  * :prompt-accept now optionally accepts a value which overrides the one
    entered in the input box. yes and no can be used as values for yes/no
    questions.
  * The new --qt-arg and --qt-flag arguments can be used to pass
    arguments/flags to Qt's commandline.
  * Error/warning/info messages are now shown stacked above the statusbar.
  * This also added various new settings:
    colors -&gt; messages.fg.error (renamed from statusbar.fg.error)
    colors -&gt; messages.bg.error (renamed from statusbar.bg.error)
    colors -&gt; messages.border.error
    colors -&gt; messages.fg.warning (renamed from statusbar.fg.warning)
    colors -&gt; messages.bg.warning (renamed from statusbar.bg.warning)
    colors -&gt; messages.border.warning
    colors -&gt; messages.fg.info
    colors -&gt; messages.bg.info
    colors -&gt; messages.border.info
    fonts -&gt; messages.error
    fonts -&gt; messages.warning
    fonts -&gt; messages.info
  * The qute:settings page now also shows option descriptions.
  * qute:version and qutebrowser --version now show various important paths
  * :spawn/userscripts now show a nicer error when a script wasn't found
  * Various functionality now works when javascript is disabled with QtWebKit
  * Various commands/settings taking left/right/previous arguments now take
    prev/next/last-used to remove ambiguity.
  * The ui -&gt; user-stylesheet setting now only takes filenames, not CSS snippets
  * ui -&gt; window-title-format now has a new {backend} replacement
  * :hint has a new --add-history argument to add the URL to the history for
    yank/spawn targets.
  * :set now cycles through values if more than one argument is given.
  * :open now opens default-page without an URL even without -t/-b/-w given.
  * The :paste command got deprecated as :open with {clipboard} and
    {primary} can be used instead.
  * The :paste-primary command got deprecated as :insert-text {primary} can
    be used instead.
  * The :prompt-yes and :prompt-no commands got deprecated as
    :prompt-accept yes and :prompt-accept no can be used instead.
  * The :yank-selected command got merged into :yank as :yank selection
    and thus removed.
  * The :completion-item-prev and :completion-item-next commands got merged
    into a new :completion-focus {prev,next} command and thus removed.
  * The ui -&gt; hide-mouse-cursor setting since it was completely broken and
    nobody seemed to care.
  * The hints -&gt; opacity setting - see the "Changed" section for details.
  * The completion -&gt; auto-open setting got merged into completion -&gt; show and
    thus removed.
  * All --qt-* arguments got replaced by --qt-arg and --qt-flag and thus
    removed.
  * The -c/--confdir, --datadir and --cachedir arguments got removed, as
  - -basedir should be sufficient.
  * :undo now doesn't undo tabs "closed" by :tab-detach anymore.
  * Fixed an issue with hint chars not being cleared correctly when leaving hint
    mode.
  * :tab-detach now fails correctly when there's only one tab open.
  * Various small issues with the command completion
  * Fixed hang when using multiple spaces in a row with the URL completion
  * qutebrowser now still starts with an incorrectly configured
    $XDG_RUNTIME_DIR.
  * Fixed crash when a userscript writes invalid unicode data to the FIFO
  * Fixed crash when a included HTML was not found
  * v0.8.3 accidentally broke compatibility with Python 3.4, which is restored with this release.
  * Fixed crash when doing :&lt;space&gt;&lt;enter&gt;, another corner-case introduced in v0.8.0
  * Fixed :open-editor (&lt;Ctrl-e&gt;) on Windows
  * Fixed crash when setting general -&gt; auto-save-interval to a too big value.
  * Fixed crash when using hints on Void Linux.
  * Fixed compatibility with Python 3.5.2+ on Debian unstable
  * Compatibility with pdfjs v1.6.210
  * :bind can now be used to bind to an alias (binding by editing keys.conf
    already worked before)
  * The command completion now updates correctly when changing aliases
  * The tabbar now displays correctly with the Adwaita Qt theme
  * The default sk keybinding now sets the commandline to :bind correctly
  * Fixed crash when closing a window without focusing it
  * Fixed general -&gt; private-browsing not being set correctly until a restart
    (which caused e.g. local storage to be enabled).
  * Fixed crash when using hints with JS disabled in some rare circumstances.
    When hinting input fields (:t), also consider input elements without a type.
  * Fixed crash when opening an invalid URL with a percent-encoded and a real @ in it
  * Fixed default ;o and ;O bindings
  * Fixed local storage not working (and possible other bugs) when using a
    relative path with --basedir.
  * Fixed crash when deleting a quickmark with Ctrl-D
  * Fixed HTML5 video playback on Windows
  * Fixed crash when using :prompt-open-download with a file with chars not
    encodable with the OS' filesystem encoding (e.g. with LC_ALL=C)
  * Fixed :prompt-open-download with a too long filename (&lt; 255 bytes)
  * Fixed crash when cancelling a download after doing :prompt-open-download
  * Fixed crash when writing a download to disk fails with
    :prompt-open-download.
  * Fixed HTML5 video playback on Windows</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1488110400">- Update to version 0.10.0:
  * Userscripts now have a new `$QUTE_COMMANDLINE_TEXT` environment
    variable, containing the current commandline contents.
  * A new `ripbang` userscript to create a searchengine from a
    duckduckgo bang.
  * QtWebKit Reloaded (https://github.com/annulen/webkit) is now
    fully supported.
  * Various new functionality with the QtWebEngine backend:
    + printing support with Qt &gt;= 5.8;
    + proxy support with Qt &gt;= 5.8;
    + the `general -&gt; print-element-backgrounds` option with
    Qt &gt;= 5.8;
    + the `content -&gt; cookies-store` option;
    + the `storage -&gt; cache-size` option;
    + the `colors -&gt; webpage.bg` option;
    + the HTML5 fullscreen API (e.g. youtube videos);
    + `:download --mhtml`.
  * A new `qute:history` URL and `:history` command to show the
    browsing history.
  * Open tabs are now auto-saved on each successful load and
    restored in case of a crash.
  * `:jseval` now has a `--file` flag so you can pass a javascript
    file.
  * `:session-save` now has a `--only-active-window` flag to only
    save the active window.
  * PyQt 5.7/Qt 5.7.1 is now required for the QtWebEngine backend.
  * Scrolling with the scrollwheel while holding shift now scrolls
    sideways.
  * New way of clicking hints which solves various small issues.
  * When yanking a mailto: link via hints, the mailto: prefix is
    now stripped.
  * Zoom level messages are now not stacked on top of each other
    anymore.
  * qutebrowser now automatically uses QtWebEngine if QtWebKit is
    not available.
  * :history-clear now asks for a confirmation, unless it's run
    with --force.
  * `input -&gt; mouse-zoom-divider` can now be 0 to disable zooming
    by mouse wheel.
  * `network -&gt; proxy` can also be set to `pac+file://...` now to
    use a local proxy autoconfig file (on QtWebKit).
  * Fix various bugs with Qt 5.8 and QtWebEngine:
    + a segfault when closing a window;
    + a segfault when closing a tab with a search active;
    + fix various mouse actions (like automatically entering insert
    mode) not working;
    + fixed hints sometimes not working;
    + segfault when opening a URL after a QtWebEngine renderer
    process crash.
  * Other QtWebEngine fixes:
    + insert mode now gets entered correctly with a non-100% zoom;
    + crash reports are now re-enabled when using QtWebEngine;
    + fix crashes when closing tabs while hinting;
    + using :undo or :tab-clone with a view-source:// or chrome://
    tab is now prevented, as it segfaults.
  * `:enter-mode` now refuses to enter modes which can't be entered
    manually (which caused crashes).
  * `:record-macro` (`q`) now doesn't try to record macros for
    special keys without a text.
  * Fix PAC (proxy autoconfig) not working with QtWebKit.
  * `:download --mhtml` now uses the new file dialogue.
  * Word hints are now upper-cased correctly when
    hints -&gt; uppercase is true.
  * Font validation is now more permissive in the config, allowing
    e.g. "Terminus (TTF)" as font name.
  * Fix starting on newer PyQt/sip versions with LibreSSL.
  * When downloading files with QtWebKit, a User-Agent header is
    set when possible.
  * Fix showing keybindings in the :help completion.
  * `:navigate prev/next` now detects `rel` attributes on `&lt;a&gt;`
    elements, and handles multiple `rel` attributes correctly.
  * Fix a crash when hinting with target `userscript` and spawning
    a non-existing script.
  * Lines in Jupyter notebook now trigger insert mode.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493726400">- Update to version 0.10.1:
  * --qt-arg and --qt-flag can now also be used to pass arguments
    to Chromium when using QtWebEngine.
  * URLs are now redacted properly (username/password, and
    path/query for HTTPS) when using Proxy Autoconfig with QtWebKit.
  * Fix a crash when updating adblock lists with invalid UTF8-chars
    in them.
  * Fix the web inspector with QtWebEngine.
  * Version checks when starting qutebrowser now also take the Qt
    version PyQt was compiled against into account.
  * Hinting a input now doesn't select existing text anymore with
    QtWebKit.
  * The cursor now moves to the end when input elements are
    selected with QtWebEngine.
  * Download suffixes like (1) are now correctly stripped with
    QtWebEngine.
  * Fix a crash when trying to print a tab which was closed in the
    meantime.
- Add the missing python3-sip dependency (boo#1036934).</changelog>
  <changelog author="9@cirno.systems" date="1502625600">- Update to version 0.11.0:
  * New dependencies:
    + New dependency on PyQt5.QtOpenGL if QtWebEngine is used.
    QtWebEngine depends on QtOpenGL already, but on distributions packaging
    split PyQt5 wrappers, the wrappers for QtOpenGL are now required.
    + New dependency on PyOpenGL if QtWebEngine is used.
  * Added:
    + Private browsing is now implemented for QtWebEngine, and changed its
    behavior: The general -&gt; private-browsing setting now only applies to
    newly opened windows, and you can use the -p flag to :open to open a
    private window.
    + New "pinned tabs" feature, with a new :tab-pin command
    (bound to &lt;Ctrl-p&gt; by default).
    + (QtWebEngine) Implemented :follow-selected.
    + New :clear-messages command to clear shown messages.
    + New ui -&gt; keyhint-delay setting to configure the delay until
    the keyhint overlay pops up.
    + New -s option for :open to force a HTTPS scheme.
    + :debug-log-filter now accepts none as an argument to clear any log
    filters.
    + New --debug-flag argument which replaces --debug-exit and --pdb-postmortem
    + New tabs -&gt; favicon-scale option to scale up/down favicons.
    + colors -&gt; statusbar.bg/fg.private and .command.private to customize
    statusbar colors for private windows.
    + New {private} field displaying [Private Mode] for
    ui -&gt; window-title-format and tabs -&gt; title-format.
    + (QtWebEngine) Proxy support with Qt 5.7.1
    (already was supported for 5.8 and newer)
  * Changed:
    + To prevent elaborate phishing attacks, the Punycode version (xn--*) is now
    shown in addition to the decoded version for international domain names
    (IDN).
    + Starting with legacy QtWebKit now shows a warning message.
    With the next release, support for it will be removed.
    + Improved qute://history page (with lazy loading)
    + Crash reports are not public anymore.
    + Comments in the config file are now placed before the individual options
    instead of being before sections.
    + Messages are now hidden when clicked.
    + stdin is now closed immediately for processes spawned from qutebrowser.
    + When ui -&gt; message-timeout is set to 0, messages are now never cleared.
    + Middle/right-clicking the blank parts of the tab bar (when vertical) now
    closes the current tab.
    + The adblocker now also blocks non-GET requests (e.g. POST).
    + javascript: links can now be hinted.
    + :view-source, :tab-clone and :navigate --tab now don't open the tab as
    "explicit" anymore, i.e. (with the default settings) open it next to the
    active tab.
    + qute:* pages now use qute://* instead (e.g. qute://version instead of
    qute:version), but the old versions are automatically redirected.
    + Texts in prompts are now selectable.
    + The default level for :messages is now info, not error
    + Trying to focus the currently focused tab with :tab-focus now focuses the
    last viewed tab.
    + (QtWebEngine) With Qt 5.9, content -&gt; cookies-store can now be set without
    a restart.
    + (QtWebEngine) With Qt 5.9, better error messages are now shown for failed
    downloads.
    + (QtWebEngine) The underlying Chromium version is now shown in the version
    info.
    + (QtWebKit) Renderer process crashes now show an error page on Qt 5.9
    or newer.
    + (QtWebKit) storage -&gt; offline-web-application-storagegot renamed to
    ...-cache
    + (QtWebKit) PAC now supports SOCKS5 as type.
  * Fixed:
    + Fixed crash with :download on PyQt 5.9.
    + Cloning a page without history doesn't crash anymore.
    + When a download results in a HTTP error, it now shows the error correctly
    instead of crashing.
    + Pressing ctrl-c while a config error is shown works as intended now.
    + When the key config isn't writable, we now show an error instead of
    crashing.
    + Fixed crash when unbinding an unbound key in the key config.
    + Fixed crash when using :debug-log-filter when --filter wasn't given
    on startup.
    + Fixed crash with some invalid setting values.
    + Continuing a search after clearing it now works correctly.
    + The tabbar and completion should now be more consistently and correctly
    styled with various system styles.
    + Applying styiles in qt5ct now shouldn't crash anymore.
    + The validation for colors in stylesheets is now less strict,
    allowing for all valid Qt values.
    + data: URLs now aren't added to the history anymore.
    + Accidentally starting with Python 2 now shows a proper error message again
    + For some people, running some userscripts crashed - this should now be
    fixed.
    + Various other rare crashes should now be fixed.
    + The settings documentation was truncated with v0.10.1 which should now be
    fixed.
    + Scrolling to an anchor in a background tab now works correctly,
    and javascript gets the correct window size for background tabs.
    + (QtWebEngine) Added a workaround for a black screen with some setups
    + (QtWebEngine) Starting with Nouveau graphics now shows an error message
    instead of crashing in Qt.
    + (QtWebEngine) Retrying downloads now shows an error instead of crashing.
    + (QtWebEngine) Cloning a view-source tab now doesn't crash anymore.
    + (QtWebEngine) window.navigator.userAgent is now set correctly when
    customizing the user agent.
    + (QtWebEngine) HTML fullscreen is now tracked for each tab separately,
    which means it's not possible anymore to accidentally get stuck in
    fullscreen state by closing a tab with a fullscreen video.
    + (QtWebEngine) :scroll-page with --bottom-navigate now works correctly.
    + (QtWebKit) The HTTP cache is disabled on Qt 5.7.1 and 5.8 now as it leads
    to frequent crashes due to a Qt bug.
    + (QtWebKit) Fixed Crash when a PAC file returns an invalid value.</changelog>
  <changelog author="aloisio@gmx.com" date="1507809600">- Update to version 1.0.0
  * Dependency changes:
    +  Support for legacy QtWebKit (before 5.212 which is
    distributed independently from Qt) is dropped.
    +  Support for Python 3.4 is dropped.
    +  Support for Qt before 5.7.1 and PyQt before 5.7 is dropped.
    +  New dependency on the QtSql module and Qt sqlite support.
    +  New dependency on the attrs project (packaged as
    python-attr in some distributions).
    +  The depedency on PyOpenGL (when using QtWebEngine) got
    removed. Note that PyQt5.QtOpenGL is still a dependency.
    +  PyQt5.QtOpenGL is now always required, even with QtWebKit.
  * The QtWebEngine backend is now used by default. Note this
    means that QtWebEngine now should be a required dependency, and
    QtWebKit (if new enough) should be changed to an optional
    dependency.
  * Completely rewritten configuration system which ignores the
    old config file. See link:qute://help/configuring.html[] for
    details.
  * Various documentation files got moved to the doc/ subfolder;
    qutebrowser.desktop got moved to misc/.
  * :set now doesn't support toggling/cycling values anymore, that
    functionality got moved to :config-cycle.
  * New completion engine based on sqlite, which allows to
    complete the entire browsing history. The default for
    completion.web_history_max_items got changed to -1 (unlimited).
    If the completion is too slow on your machine, try setting it to
    a few 1000 items.
  Added:
  * QtWebEngine: Spell checking support, see the
    spellcheck.languages setting.
  * New qt.args setting to pass additional arguments to
    Qt/Chromium.
  * New backend setting to select the backend to use. Together
    with the previous setting, this should make most wrapper
    scripts unnecessary.
  * qutebrowser can now be set as the default browser on macOS.
  * New config commands:
    + :config-cycle to cycle an option between multiple values.
    + :config-unset to remove a configured option.
    + :config-clear to remove all configured options.
    + :config-source to (re-)read a config.py file.
    + :config-edit to open the config.py file in an editor.
    + :config-write-py to write a config.py template file.
  * New :version command which opens qute://version.
  * New back/forward indicator in the statusbar.
  * New bindings.key_mappings setting to map keys to other keys.
  * QtWebEngine: Support for proxy authentication.
  Changed:
  * Using :download now uses the page's title as filename.
  * Using :back or :forward with a count now skips intermediate
    pages.
  * When there are multiple messages shown, the timeout is
    increased.
  * :search now only clears the search if one was displayed
    before, so pressing &lt;Escape&gt; doesn't un-focus inputs anymore.
  * Pinned tabs now adjust to their text's width, so the
    tabs.width.pinned setting got removed.
  * :set-cmd-text now has a --run-on-count argument to run the
    underlying command directly if a count was given.
  * :scroll-perc got renamed to :scroll-to-perc.
  Removed:
  * Migrating QtWebEngine data written by versions before
    2016-11-15 (before v0.9.0) is now not supported anymore.
  * Upgrading qutebrowser with a version older than v0.4.0 still
    running now won't work properly anymore.
  * The --harfbuzz and --relaxed-config commandline arguments got
    dropped.
  Fixes:
  * Exiting fullscreen via :fullscreen or buttons on a page now
    restores the correct previous window state
    (maximized/fullscreen).
  * When input.insert_mode.auto_load is set, background tabs now
    don't enter insert mode anymore.
  * The keybinding help widget now works correctly when using
    keybindings with a count.
  * The window.hide_wayland_decoration setting now works correctly
    again.</changelog>
  <changelog author="aavindraa@gmail.com" date="1508241600">- Update to version 1.0.2:
  * Fixed
    + Fix workaround for black screens or crashes with Nvidia cards
    + Handle a filesystem going read-only gracefully
    + Fix crash when setting fonts.monospace
    + Fix list options not being modifyable via .append() in
    config.py
    + Mark the content.notifications setting as QtWebKit only
    correctly
    + Fix wrong rendering of keys like &lt;back&gt; in the completion
  * Changed
    + Nicer error messages and other minor improvements
  * Includes fixes from 1.0.1:
    + Fixed starting after customizing fonts.tabs or
    fonts.debug_console.
    + Fixed starting with old PyQt versions compiled against newer
    Qt versions.
    + Fixed check for PyQt version to correctly enforce 5.7
    (not 5.2).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1508587200">- Add the missing python3-attrs dependency (boo#1064515).</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- Update to version 1.0.3:
  * Changed
    + Performance improvements for tab rendering.
    + The :open-editor command is not hidden anymore and also usable
    in normal mode.
    + Security enhancements for macos and windows builds
  * Fixed
    + Handle accessing a locked sqlite database gracefully
    + Abort pinned tab dialogs properly when a tab is closed e.g.
    by closing a window.
    + Unbinding a default keybinding twice no longer binds it again
    + Completions are now sorted correctly again when filtered</changelog>
  <changelog author="9@cirno.systems" date="1511870400">- Update to version 1.0.4:
  * The qute://gpl page now works correctly again.
  * Trying to bind an empty command now doesn't crash anymore.
  * Fixed crash when :config-write-py fails to write to the given
    path.
  * Fixed crash for some users when selecting a file with Qt 5.9.3
  * Improved handling for various SQL errors
  * Fix crash when setting content.cache.size to a big value
    (&gt; 2 GB)</changelog>
  <changelog author="9@cirno.systems" date="1516017600">- Update to version 1.1.0:
  Added:
  * Initial support for Greasemonkey scripts. There are still
    some rough edges, but many scripts should already work.
  * New fields for window.title_format and tabs.title.format:
    + {current_url}
    + {protocol}
  * New settings:
    + colors.statusbar.passthrough.fg/.bg
    + completion.delay and completion.min_chars to update the
    completion less often.
    + completion.use_best_match to automatically use the
    best-matching command in the completion.
    + keyhint.radius to configure the edge rounding for the key
    hint widget.
    + qt.highdpi to turn on Qt's High-DPI scaling.
    + tabs.pinned.shrink (true by default) to make it possible
    for pinned tabs and normal tabs to have the same size.
    + content.windowed_fullscreen to show e.g. a fullscreened
    video in the window without fullscreening that window.
    + tabs.persist_mode_on_change to keep the current mode when
    switching tabs.
    + session.lazy_restore which allows to not load pages
    immediately when restoring a session.
  * New commands:
    + :tab-give and :tab-take, to give tabs to another window,
    or take them from another window.
    + :completion-item-yank (bound to &lt;Ctrl-C&gt;) to yank the
    current completion item text.
    + :edit-command to edit the commandline in an editor.
    + search.incremental for incremental text search.
  * New flags for existing commands:
    + -o flag for :spawn to show stdout/stderr in a new tab.
    + --rapid flag for :command-accept (bound to Ctrl-Enter by
    default), which allows executing a command in the
    completion without closing it.
    + --private and --related flags for :edit-url, which have the
    same effect they have with :open.
    + --history for :completion-item-focus which causes it to go
    through the command history when no text was entered.
    The default bindings for cursor keys in the completion
    changed to use that, so that they can be used again to
    navigate through completion items when a text was entered.
    + --file for :debug-pyeval which makes it take a filename
    instead of a line of code.
  * New config.source(...) method for config.py to source another
    file.
  * New {line} and {column} replacements for editor.command to
    position the cursor correctly.
  * New qute-pass userscript as alternative to password_fill
    which allows selecting accounts via rofi or any other
    dmenu-compatile application.
  * New hist_importer.py script to import history from
    Firefox/Chromium.
  Changed:
  * Some settings got renamed:
  * tabs.width.bar -&gt; tabs.width
  * tabs.width.indicator -&gt; tabs.indicator.width
  * tabs.indicator_padding -&gt; tabs.indicator.padding
  * session_default_name -&gt; session.default_name
  * ignore_case -&gt; search.ignore_case
  * Much improved user stylesheet handling for QtWebEngine which
    reduces flickering and updates immediately after setting a
    stylesheet.
  * High-DPI favicons are now used when available.
  * The asciidoc2html.py script now uses Pygments (which is
    already a dependency of qutebrowser) instead of
    source-highlight for syntax highlighting.
  * The :buffer command now doesn't require quoting anymore,
    similar to :open.
  * The importer.py script was largely rewritten and now also
    supports importing from Firefox' places.sqlite file and
    Chrome/Chromium profiles.
  * Various internal refactorings to use Python 3.5 and
    ECMAscript 6 features.
  * If the window.hide_wayland_decoration setting is False, but
    QT_WAYLAND_DISABLE_WINDOWDECORATION is set in the
    environment, the decorations are still hidden.
  * The install_dict.py script for QtWebEngine was renamed to
    dictcli.py and can now also upgrade dictionaries correctly.
  * :undo now can re-open multiple tabs after :tab-only was used.
  * :config-write-py with a relative path now puts the file into
    the config directory.
  * The qute://version page now also shows the uptime of
    qutebrowser.
  * qutebrowser now prompts to create a non-existing directory
    when starting a download.
  * :jseval --file now searches relative paths in a js/ subdir in
    qutebrowser's data dir, e.g. ~/.local/share/qutebrowser/js.
  * The current/default bindings are now shown in the ``:bind`
    completion.
  * Empty categories are now hidden in the :open completion.
  * Search terms for URLs and titles can now be mixed when
    filtering the completion.
  * The default font size for the UI got bumped up from 8pt to
    10pt.
  * Improved matching in the completion: The words entered are
    now matched in any order, and mixed matches on URL/tite are
    possible.
  * The system's default encoding (rather than UTF-8) is now used
    to decode subprocess output.
  * qutebrowser now ensures it's focused again after an external
    editor is closed.
  * The colors.completion.fg setting can now be a list, allowing
    to specify different colors for the three completion columns.
  Fixed:
  * More consistent sizing for favicons with vertical tabs.
  * Using :home on pinned tabs is now prevented.
  * Fix crash with unknown file types loaded via qute://help.
  * Scrolling performance improvements.
  * Sites like qute://help now redirect to qute://help/ to make
    sure links work properly.
  * Fixes for the size calculation of pinned tabs in the tab bar.
  * Worked around a crash with PyQt 5.9.1 compiled against
    Qt &lt; 5.9.1 when using :yank or qute:// URLs.
  * Fixed crash when opening qute://help/img.
  * Fixed gU (:navigate up) on qute://help and webservers not
    handling .. in a URL.
  * Using e.g. -s backend webkit to set the backend now works
    correctly.
  * Fixed crash when closing the tab an external editor was
    opened in.
  * When using :search-next before a search is finished, no
    warning about no results being found is shown anymore.
  * Fix :click-element with an ID containing non-alphanumeric
    characters.
  * Fix crash when a subprocess outputs data which is not
    decodable as UTF-8.
  * Fix crash when closing a tab immediately after hinting.
  * Worked around issues in Qt 5.10 with loading progress never
    being finished.
  * Fixed a crash when writing a flag before a command
    (e.g. :-w open).
  * Fixed a crash when clicking certain form elements with
    QtWebEngine.
  Deprecated:
  * :tab-detach has been deprecated, as :tab-give without
    argument can be used instead.
  Removed:
  * The long-deprecated :prompt-yes, :prompt-no, :paste-primary
    and :paste commands have been removed.
  * The invocation :download &lt;url&gt; &lt;dest&gt; which was deprecated
    in v0.5.0
    was removed, use :download --dest &lt;dest&gt; &lt;url&gt; instead.
  * The messages.unfocused option which wasn't used anymore was
    removed.
  * The x[xtb] default bindings got removed again as many users
    accidentally triggered them.</changelog>
  <changelog author="9@cirno.systems" date="1516449600">- Update to version 1.1.1:
  * Fixed crashes with Qt 5.10 when closing a tab before it
    finished loading.</changelog>
  <changelog author="9+suse@cirno.systems" date="1519905600">- Update to version 1.1.2:
  Fixed:
  * QtWebEngine: Crash with Qt 5.10.1 when using :undo on some
    tabs.
  * Compatibility with Python 3.7
- Use %license macro</changelog>
  <changelog author="9+suse@cirno.systems" date="1520683200">- Update keyring
- Update to version 1.2.0:
  Added:
  * Initial implementation of per-domain settings:
    + :set and :config-cycle now have a -u/--pattern argument
    taking a URL match pattern for supported settings.
    + config.set in config.py now takes a third argument which is
    the pattern.
    + New with config.pattern('...') as p: context manager for
    config.py to use the shorthand syntax with a pattern.
    + New tsh keybinding to toggle scripts for the current host.
    With a capital S, the toggle is saved. With a capital H,
    subdomains are included. With u instead of h, the exact
    current URL is used.
    + New tph keybinding to toggle plugins, with the same
    additional binding described above.
  * New QtWebEngine features:
    + Caret/visual mode
    + Authentication via ~/.netrc
    + Retrying downloads with Qt 5.10 or newer
    + Hinting and other features inside same-origin frames
  * New flags for existing commands:
    + :session-load has a new --delete flag which deletes the
    session after loading it.
    + New --no-last flag for :tab-focus to not focus the last tab
    when focusing the currently focused one.
    + New --edit flag for :view-source to open the source in an
    external editor.
    + New --select flag for :follow-hint which acts like the
    given string was entered but doesn't necessary follow the
    hint.
  * New special pages:
    + qute://bindings (opened via :bind) which shows all
    keybindings.
    + qute://tabs (opened via :buffer) which lists all tabs.
  * New settings:
    + statusbar.widgets to configure which widgets should be
    shown in which order in the statusbar.
    + tabs.mode_on_change which replaces
    tabs.persist_mode_on_change. It can now be set to restore
    which remembers input modes (input/passthrough) per tab.
    + input.insert_mode.auto_enter which makes it possible to
    disable entering insert mode automatically when an editable
    element was clicked. Together with
    input.forward_unbound_keys, this should allow for
    emacs-like "modeless" keybindings.
  * New :prompt-yank command (bound to Alt-y by default) to yank
    URLs referenced in prompts.
  * The hostblock_blame script which was removed in v1.0 was
    updated for the new config and re-added.
  * New cycle-inputs.js script in scripts/ which can be used with
    :jseval -f to cycle through inputs.
  Changed:
  * Complete refactoring of key input handling, with various
    effects:
    + emacs-like keychains such as &lt;Ctrl-X&gt;&lt;Ctrl-C&gt; can now be
    bound.
    + Key chains can now be bound in any mode (this allows
    binding unused keys in hint mode).
    + Yes/no prompts don't use keybindings from the prompt
    section anymore, they have their own yesno section instead.
    + Trying to bind invalid keys now shows an error.
    + The bindings.default setting can now only be set in a
    config.py, and existing values in autoconfig.yml are
    ignored.
  * Improvements for GreaseMonkey support:
    + @include and @exclude now support regex matches.
    With QtWebEngine and Qt 5.8 and newer, Qt handles the
    matching, but similar functionality will be added in
    Qt 5.11.
    + Support for @requires
    + Support for the GreaseMonkey 4.0 API
  * The sqlite history now uses write-ahead logging which should
    be a performance and stability improvement.
  * When an editor is spawned with :open-editor and :config-edit,
    the changes are now applied as soon as the file is saved in
    the editor.
  * The hist_importer.py script now only imports URL schemes
    qutebrowser can handle.
  * Deleting a prefix (:, / or ?) via backspace now leaves
    command mode.
  * Angular 1 elements and &lt;summary&gt;/&lt;details&gt; now get hints
    assigned.
  * :tab-only with pinned tabs now still closes unpinned tabs.
  * The url.incdec_segments option now also can take port as
    possible segment.
  * QtWebEngine: :view-source now uses Chromium's view-source:
    scheme.
  * Tabs now show their full title as tooltip.
  * When there are multiple unknown keys in a autoconfig.yml,
    they now all get reported in one error.
  * More performance improvements when opening/closing many tabs.
  * The :version page now has a button to pastebin the
    information.
  * Replacements like {url} can now be escaped as {{url}}.
  Fixed:
  * QtWebEngine bugfixes:
    + Improved fullscreen handling with Qt 5.10.
    + Hinting and scrolling now works properly on special
    view-source: pages.
    + Scroll positions are now restored correctly from sessions.
    + :follow-selected should now work in more cases with
    Qt &gt; 5.10.
    + Incremental search now flickers less and doesn't move to
    the second result when pressing Enter.
    + Keys like Ctrl-V or Shift-Insert are now correctly
    handled/filtered with Qt 5.10.
    + Fixed hangs/segfaults on exit with Qt 5.10.1.
    + Fixed favicons sometimes getting cleared with Qt 5.10.
    + Qt download objects are now cleaned up properly when a
    download is removed.
    + JavaScript messages are now not double-HTML escaped anymore
    on Qt &lt; 5.11
  * QtWebKit bugfixes:
    + Fixed GreaseMonkey-related crashes.
    + :view-source now displays a valid URL.
  * URLs containing ampersands and other special chars are now
    shown correctly when filtering them in the completion.
  * :bookmark-add "" foo can now be used to save the current URL
    with a custom title.
  * :spawn -o now waits until the process has finished before
    trying to show the output. Previously, it incorrectly showed
    the previous output immediately.
  * Suspended pages now should always load the correct page when
    being un-suspended.
  * Exception types are now shown properly with :config-source
    and :config-edit.
  * When using :bookmark-add --toggle, bookmarks are now saved
    properly.
  * Crash with an empty completion.timestamp_format.
  * Crash when completion.min_chars is set in some cases.
  * HTML/JS resource files are now read into RAM on start to
    avoid crashes when changing qutebrowser versions while it's
    open.
  * Setting bindings.key_mappings to an empty value is now
    allowed.
  * Bindings to an empty commands are now ignored rather than
    crashing.
  Removed:
  * QUTE_SELECTED_HTML is now not set for userscripts anymore
    except when called via hints.
  * The qutebrowser_viewsource userscript has been removed as
    :view-source --edit can now be used.
  * The tabs.persist_mode_on_change setting has been removed and
    replaced by tabs.mode_on_change.</changelog>
  <changelog author="9+suse@cirno.systems" date="1521028800">- Update to version 1.2.1:
  Fixed:
  * qutebrowser now starts properly when the PyQt5
    QOpenGLFunctions package wasn't found.
  * The keybinding cheatsheet on the quickstart page is now
    loaded from a local qute:// URL again.
  * Unbinding keys which were bound in older qutebrowser versions
    now doesn't crash anymore.
  * Fixed a crash when reloading a page which wasn't fully
    loaded with v1.2.0
  * Keys on the numeric keypad now fall back to the same bindings
    without Num+ if no Num+ binding was found.
  * Fixed hinting on some pages with Qt &lt; 5.10.
  * Titles are now displayed correctly again for tabs which are
    cloned or loaded from sessions.</changelog>
  <changelog author="9+suse@cirno.systems" date="1525435200">- Use upstream Makefile to install
  * Package scripts and manpage
- Package AppStream metadata
- Update to version 1.3.0:
  Added:
  * New :scroll-to-anchor command to scroll to an anchor in the
    document.
  * New url.open_base_url option to open the base URL of a
    searchengine when no search term is given.
  * New tabs.min_width setting to configure the minimal width
    for tabs.
  * New userscripts:
    + getbib to download bibtex information for DOIs on a page.
    + qute-keepass to get passwords from KeePassX.
  Changed:
  * QtWebEngine: Support for JavaScript Shared Web Workers have
    been disabled on Qt versions older than 5.11 because of
    security issues in in Chromium. You can get the same effect
    in earlier versions via
    ":set qt.args ['disable-shared-workers']". An equivalent
    workaround is also contained in Qt 5.9.5 and 5.10.1.
  * The file dialog for downloads now has basic tab completion
    based on the entered text.
  * :version now shows OS information for POSIX OS other than
    Linux/macOS.
  * When there's an error inserting the text from an external
    editor, a backup file is now saved.
  * The window.hide_wayland_decoration setting got renamed to
    window.hide_decoration and now also works outside of wayland.
  * The tabs.favicons.show setting now can take three values:
    'always' (was True), 'never' (was False) and 'pinned'
    (to only show favicons for pinned tabs).
  * Hover tooltips on tabs now always show the webpage's title.
  * The default value for content.host_blocking.lists was
    changed to only include https://github.com/StevenBlack/hosts
    which combines various sources.
  * Error messages when trying to wrap when tabs.wrap is False
    are now logged to debug instead of messages.
  Fixed:
  * Using hints before a page is fully loaded is now possible
    again.
  * Selecting hints with the number keypad now works again.
  * Tab titles for tabs loaded from sessions should now really be
    correct instead of showing the URL.
  * Loading URLs with customized settings from a session now
    avoids an additional reload.
  * The window icon and title now get set correctly again.
  * The tabs.switching_delay setting now has a correct maximum
    value limit set.
  * The taskadd script now works properly when there's multi-line
    output.
  * QtWebEngine: Worked around issues with
    GreaseMonkey/stylesheets not being loaded correctly in some
    situations.
  * The statusbar now more closely reflects the caret mode state.
  * The icon on Windows should now be displayed in a higher
    resolution.
  * The QtWebEngine development tools (inspector) now also work
    when JavaScript is disabled globally.
  * Building .exe files now works when upx is installed on the
    system.
  * The keyhint widget now shows the correct text for chained
    modifiers.
  * Loading GreaseMonkey scripts now also works with Jinja2 2.8
    (e.g. on Debian Stable).
  * Adding styles with GreaseMonkey on fast sites now works
    properly.
  * Window ID 0 is now excluded properly from ":tab-take"
    completion.
  * A rare crash when cancelling a download has been fixed.
  * The Makefile (intended for packagers) now supports PREFIX
    properly.
  * The workaround for a black window with Nvidia graphics is now
    enabled on non-Linux systems (like FreeBSD) as well.
  * Initial support for Qt 5.11.
  * Checking for a new version after sending a crash report now
    works properly again.
  * "@match" in Greasemonkey scripts now more closely matches the
    proper pattern syntax.
  * Searching via / or ? now doesn't handle any characters in a
    special way.
  * Fixed crash when trying to retry some failed downloads on
    QtWebEngine.
  * An invalid spellcheck dictionary filename now doesn't crash
    anymore. When no spellcheck dictionaries are configured,
    it's now disabled internally. This works around an issue with
    entering special characters on Facebook messenger.</changelog>
  <changelog author="9+suse@cirno.systems" date="1527595200">- Update to version 1.3.1:
  * Work around a bug in Qt 5.11 where only the top/bottom half of
    the window is used. This workaround is incomplete, but fixes
    the majority of the cases where this happens.
  * Work around keyboard focus issues with Qt 5.11.
  * Work around an issue in Qt 5.11 where e.g. activating
    JavaScript per-domain needed a manual reload in some cases.
  * Don't crash when a ² key is pressed (e.g. on AZERTY keyboards).
  * Don't crash when a tab is opened and quickly closed again.</changelog>
  <changelog author="9+suse@cirno.systems" date="1528891200">- Update to version 1.3.2:
  * QtWebEngine: Improved workaround for a bug in Qt 5.11 where
    only the top/bottom half of the window is used.
  * QtWebEngine: Work around a bug in Qt 5.11 where an endless
    loading-loop is triggered when clicking a link with an unknown
    scheme.
  * QtWebEngine: When switching between pages with changed
    settings, less unnecessary reloads are done now.
  * QtWebEngine: It's now possible to open external links such as
    magnet:// or mailto: via hints.</changelog>
  <changelog author="9+suse@cirno.systems" date="1529668800">- Update to version 1.3.3:
  Security:
  * An XSS vulnerability on the qute://history page allowed
    websites to inject HTML into the page via a crafted title
    tag. This could allow them to steal your browsing history.
    If you're currently unable to upgrade, avoid using :history.
    This issue has been assigned CVE-2018-1000559.
  Fixed:
  * Crash in a workaround for a Qt 5.11 bug in rare
    circumstances.
  * Workaround for a Qt bug which preserves searches between page
    loads.</changelog>
  <changelog author="9+suse@cirno.systems" date="1530619200">- Update %description
- Update to version 1.4.0:
  Added:
  * Support for the bundled sip module in PyQt 5.11 and other
    changes in Qt/PyQt 5.11.x.
  * New --debug-flag log-requests to log requests to the debug
    log for debugging.
  * New --first flag for :hint (bound to gi for inputs) which
    automatically selects the first hint.
  * New input.escape_quits_reporter setting which can be used to
    avoid accidentally quitting the crash reporter when pressing
    escape.
  * New qute-lastpass userscript which uses the LastPass CLI to
    fill passwords.
  * The Makefile now installs a
    /usr/share/metainfo/qutebrowser.appdata.xml file.
  * QtWebEngine: Support for printing from webpages via
    window.print.
  * QtWebEngine: Support for muting tabs:
    + New {audio} field for window.title_format and
    tabs.title.format which displays [M]/[A] for
    muted/recently audible tabs.
    + New :tab-mute command (bound to &lt;Alt-m&gt;) to mute/unmute a
    tab.
  * QtWebEngine: Support for content.cookies.accept with
    third-party cookies blocked by default (requires Qt 5.11).
  * QtWebEngine: New settings:
    + Support for requesting persistent storage via
    navigator.webkitPersistentStorage.requestQuota with a new
    content.persistent_storage setting (requires Qt 5.11).
    This setting also supports URL patterns.
    + Support for registering custom protocol handlers via
    navigator.registerProtocolHandler with a new
    content.register_protocol_handler setting (requires
    Qt 5.11). This setting also supports URL patterns.
    + Support for WebRTC screen sharing with a new
    content.desktop_capture setting (requires Qt 5.10).
    This setting also supports URL patterns.
    + New content.autoplay setting to enable/disable automatic
    video playback (requires Qt 5.10).
    + New content.webrtc_public_interfaces_only setting to only
    expose public interfaces over WebRTC (requires Qt 5.9.2
    or 5.11).
    + New content.canvas_reading setting to disable reading from
    canvas elements.
  Changed:
  * The following settings now support URL patterns:
    + content.headers.do_not_track
    + content.headers.custom
    + content.headers.accept_language
    + content.headers.user_agent
    + content.ssl_strict
    + content.geolocation
    + content.notifications
    + content.media_capture
  * New short flags for commandline arguments: -B and -T for
  - -basedir and --temp-basedir; -d and -D for --debug and
  - -debug-flag.
  * Deleting history items via :history-clear or
    :completion-item-del now also removes that URL from
    QtWebEngine's visited links.
  * There's now completion for commands taking a variable count
    of arguments (like :config-cycle).
  * QtWebEngine: On Qt 5.11.1, no reloads are needed anymore
    when switching between pages with changed settings
    (e.g. content.javascript.enabled).
  * The qt.force_software_rendering setting changed from a
    boolean to taking different values (software-opengl,
    qt-quick and chromium) for different kinds of software
    rendering workarounds.
  * On Qt 5.11, using wayland with QtWebEngine is now possible
    when using software rendering.
  * GreaseMonkey scripts now get their own global scope (based on
    the page's one), which allows scripts like OneeChan to work.
  * Rapid hinting is now supported with the yank and yank-primary
    targets, copying newline-separated links.
  * QtWebEngine: On Qt 5.11, the developer tools (inspector) can
    now be used securely and without requiring the
  - -enable-webengine-inspector option.
  * The &lt;Enter&gt; key (:follow-selected) now follows the currently
    focused element if there's no selection.
  * The --logfilter argument now can be prepended with an
    exclamation mark (e.g. --logfilter '!init,destroy') to
    invert the filter.
  * :view-source now has a --pygments flag which uses the "old"
    way of rendering sources even with QtWebEngine.
  * Improved error messages when a setting needs a newer Qt
    version.
  * QtWebEngine: Various improvements to make the cursor more
    visible in caret browsing.
  * When a prompt is opened in insert/passthrough mode, the mode
    is restored after closing the prompt.
  * On Qt 5.10 or newer, dictionaries are now read from the
    qutebrowser data directory (e.g. ~/.local/share/qutebrowser)
    instead of /usr/share/qt.
    Existing dictionaries are copied over.
  * If an error while parsing ~/.netrc occurs, the cause of the
    error is now logged.
  * On Qt 5.9 or newer, certificate errors now show Chromium's
    detailed error page.
  * Greasemonkey scripts now support a "@qute-js-world" tag to
    run them in a different JavaScript context.
  Fixed:
  * Various subtle keyboard focus issues.
  * The security fix in v1.3.3 caused URLs with ampersands
    (www.example.com?one=1&amp;two=2) to send the wrong arguments
    when clicked on the qute://history page (boo#1100968,
    CVE-2018-1000559).
  * Crash when opening a PDF page with PDF.js enabled
    (on QtWebKit), but no PDF.js installed.
  * Crash when closing a tab shortly after opening it.
  Removed:
  * :tab-detach which has been deprecated in v1.1.0 has been
    removed.
  * The content.developer_extras setting got removed.
    On QtWebKit, developer extras are now automatically enabled
    when opening the inspector.</changelog>
  <changelog author="9+suse@cirno.systems" date="1531310400">- Update to version 1.4.1:
  Security:
  * CVE-2018-10895: Fix CSRF issue on the qute://settings page,
    leading to possible arbitrary code execution (boo#1100968).
    See the related GitHub issue for details:
    https://github.com/qutebrowser/qutebrowser/issues/4060
  Fixed:
  * Rare crash when an error occurs in downloads.
  * Newlines are now stripped from the :version pastebin URL.
  * Worked around a Qt issue which redirects to a
    chrome-error:// page when trying to use U2F.
  * The link_pyqt.py script now works correctly with PyQt 5.11.</changelog>
</package>
<package pkgid="2f3dd4647be9b718b1b164c591fec898ed8550b63fb19fc71dcf72271cbe5038" name="re2" arch="src">
  <version epoch="0" ver="20180901" rel="lp150.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1477137600">- Fixup group and avoid rm indirection</changelog>
  <changelog author="mpluskal@suse.com" date="1480766400">- Update to version 2016-11-01:
  * No upstream changelog available
- Drop no longer needed re2-gcc61.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1484395200">- Update to version 2017-01-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1489665600">- Update to version 2017-03-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 2017-04-01
  * No upstream changelog available</changelog>
  <changelog author="vsistek@suse.com" date="1495195200">- Update to version 2017-05-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1497182400">- Update to version 2017-06-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1501329600">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 2017-11-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 2017-12-01
  * No upstream changelog available</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libre2-0-32bit, dependency to
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1514980801">- Update to version 2018-01-01
  * No upstream changelog available</changelog>
  <changelog author="astieger@suse.com" date="1517572800">- update to 2018-02-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- update to 2018-03-01:
  * no longer linking against librd and libm
  * other developer visible changes</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 2018-04-01
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2018-07-01:
  * Fix a "DFA out of memory" error
  * Update Unicode data to 11.0.0
  * Fix `-Wclass-memaccess' warnings and fallthrough macros
  * Use the standard first-byte analysis for the DFA too</changelog>
  <changelog author="mpluskal@suse.com" date="1532088001">- Simplify spec file a bit</changelog>
  <changelog author="astieger@suse.com" date="1535025600">- update to 2018-08-01:
  * Fix the "DFA out of memory" error for the reverse Prog</changelog>
  <changelog author="astieger@suse.com" date="1536148800">- update to 2018-09-01:
  * developer visible changes only</changelog>
</package>
<package pkgid="f2adbb6969392c0a203bb4b239814881246d06a3c9ec29e94266fa69b82e7017" name="re2-devel" arch="x86_64">
  <version epoch="0" ver="20180901" rel="lp150.7.3.1"/>
  <changelog author="jengelh@inai.de" date="1477137600">- Fixup group and avoid rm indirection</changelog>
  <changelog author="mpluskal@suse.com" date="1480766400">- Update to version 2016-11-01:
  * No upstream changelog available
- Drop no longer needed re2-gcc61.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1484395200">- Update to version 2017-01-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1489665600">- Update to version 2017-03-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1492084800">- Update to version 2017-04-01
  * No upstream changelog available</changelog>
  <changelog author="vsistek@suse.com" date="1495195200">- Update to version 2017-05-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1497182400">- Update to version 2017-06-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1501329600">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1504526400">- Update to version 2017-07-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1509710400">- Update to version 2017-11-01
  * No upstream changelog available</changelog>
  <changelog author="mpluskal@suse.com" date="1513598400">- Update to version 2017-12-01
  * No upstream changelog available</changelog>
  <changelog author="dimstar@opensuse.org" date="1514980800">- Add baselibs.conf: create libre2-0-32bit, dependency to
  libqt5-qtwebengine-32bit.</changelog>
  <changelog author="mpluskal@suse.com" date="1514980801">- Update to version 2018-01-01
  * No upstream changelog available</changelog>
  <changelog author="astieger@suse.com" date="1517572800">- update to 2018-02-01:
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1521633600">- update to 2018-03-01:
  * no longer linking against librd and libm
  * other developer visible changes</changelog>
  <changelog author="mpluskal@suse.com" date="1523016000">- Update to version 2018-04-01
  * developer visible changes only</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2018-07-01:
  * Fix a "DFA out of memory" error
  * Update Unicode data to 11.0.0
  * Fix `-Wclass-memaccess' warnings and fallthrough macros
  * Use the standard first-byte analysis for the DFA too</changelog>
  <changelog author="mpluskal@suse.com" date="1532088001">- Simplify spec file a bit</changelog>
  <changelog author="astieger@suse.com" date="1535025600">- update to 2018-08-01:
  * Fix the "DFA out of memory" error for the reverse Prog</changelog>
  <changelog author="astieger@suse.com" date="1536148800">- update to 2018-09-01:
  * developer visible changes only</changelog>
</package>
<package pkgid="5cd5f1cd7ea10147d775027fa3bc56ecf98eedc98b7792468cceefc1f94c19c2" name="redis" arch="src">
  <version epoch="0" ver="4.0.10" rel="lp150.3.3.1"/>
  <changelog author="eshmarnev@suse.com" date="1455710400">- Update to 3.0.7:
  * [FIX] Many fixes to MIGRATE multiple keys implementation.
  * [FIX] A Redis Cluster node crash was fixed because of wrong handling of
    node-&gt;slaveof pointers.
  * [FIX] Fix redis-trib rebalance when nodes need to be left empty because
    the specified weight is zero.
  * [FIX] MIGRATE: Never send -ASK redirections for MIGRATE when there are
  * [FIX] Lua debugger crash when printing too deeply nested objects.
  * [FIX] Redis-cli implementation of Lua debugging now allows to use the
    SCRIPT DEBUG command directly, switching to debugging mode as needed.
  * [FIX] Redis-trib is now able to fix more errors. A new CLUSTER subcommand
    called BUMPEPOCH was introduced in order to support new modes
    for the "fix" subcommand.
  * [NEW] Redis proctected mode: this feature improves Redis security and makes
    harder to run Redis in a configuration that is unsecure because no
    firewalling was used in order to protect Redis from external accesses.
  * [NEW] Cluster/Sentinel tests now use OSX leak to perform leak detection
    at the end of every unit.
  * [NEW] Detect and show server crashes during Cluster/Sentinel tests.
  * [NEW] More reliable Cluster/Sentinel test becuase of timing errors and
  - LOADING errors.
  * [FIX] lua_struct.c/getnum security issue fixed.
  * [FIX] Redis Cluster replica migration fixed.
  * [FIX] Fix a race condition in processCommand() because of interactions
    with freeMemoryIfNeeded().
  * [NEW] Backported from the upcoming Redis 3.2:
    MIGRATE now supports an extended multiple-keys pipelined mode, which
    is an order of magnitude faster. Redis Cluster now uses this mode
    in order to perform reshardings and rebalancings.
  * [NEW] Backported from the upcoming Redis 3.2:
    Redis Cluster has now support for rebalancing via the redis-trib
    rebalance command. Demo here:
  * [NEW] Redis Cluster redis-trib.rb new "info" subcommand.
  * [NEW] Redis Cluster tests improved.
  * [NEW] Log offending memory access address on SIGSEGV/SIGBUS</changelog>
  <changelog author="mamorales@suse.com" date="1461153600">- Fix installation example in README.SUSE</changelog>
  <changelog author="rmaliska@suse.com" date="1467201600">- Update to 3.2.1
  * [FIX] Cleaned up spec file.
  * [FIX] Critical bug in Sentinel was hopefully fixed.
  * [FIX] BITFIELD bugs fixed.
  * [FIX] GEO commands fixes on syntax errors and edge cases.
  * [NEW] RESOTRE now accepts dumps generated by older Redis versions.
  * [NEW] Jemalloc now is configured to save you memory, for a problem a
    change in the jemalloc configuration did not really survived when the
    3.2.0 release was finalized.
  * [NEW] TTL and TYPE command no longer alter the last access time of a key, for
    LRU evictions purposes. A new TOUCH command was introduced *just* to
    update the access time of a key.
  * [FIX] A bug was fixed in redis-cli, that connected to the instance running on the
    port 6379 if there was one, regardless of what was specified.
  * [NEW] TCP keep alive is now enabled by default. This should fix most ghost
    connections problems without resulting in any practical change in otherwise
    sane deployments.
  * [FIX] A Sentinel crash that could happen during failovers was fixed.
  * [NEW] avg_ttl reporting in INFO improved.
  * [NEW] Sentinel: improve handling of known Sentinel instances.
  * [NEW] Redis Cluster address update (via gossip section) processing improved
    to avoid initiating inwanted handshakes.
  * [FIX] Critical bug fixed: There was a problem in the way a cluster instance
    loaded the AOF that could cause data written via scripts to be lost during
    reshardings.
  * [NEW] There is a new very powerful BITFIELD command. Check the documentation
    here: http://redis.io/commands/BITFIELD
  * [NEW] CONFIG GET is allowed during the loading of the dataset.
  * [NEW] The DEBUG command have new features and can show an help with DEBUG HELP.
  * [NEW] redis-cli show hits about the commands arguments to the right.
  * [NEW] GEORADIUS got a STORE / STOREDIST option to store the result into a target
    key (as as orted set) instead of reporting it to the user.
  * [NEW] Redis Cluster replicas migration now works in a slightly different way. In
    the past a slave could migrate only to a master that used to have slaves
    in the past (and if there was still trace of this information). Now instead
    if a new slave gets at least a slot, and at least one other master in the
    cluster has a slave, then the new master is considered a valid target for
    replica migration. So if it will be orphaned and there is a spare slave
    it will get one.
  * [NEW] CLUSTER SLOTS output now includes the node ID (in a backward compatible
    manner).</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- redis 3.2.2
- Highlight bug fixes:
  * Fix Redis server and Sentinel crashes
  * Fix GEORADIUS errors in reported entries
- New features:
  * slaves support the slave-announce-ip and slave-announce-port
    options.
  * RDB check utlity is now part of Redis and uses the same RDB code
  * redis-check-dump utility is now able to show certain information
    about the RDB file including creating version and date.</changelog>
  <changelog author="astieger@suse.com" date="1469880001">- Fix CVE-2013-7458: unsafe permissions of command line history
  boo#991250, adding CVE-2013-7458.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469880002">- Test for user/group existence before creating them.
  Request shadow to be present for the scriptlet.</changelog>
  <changelog author="astieger@suse.com" date="1470398400">- redis 3.2.3:
  * fix replication delay issue
  * drop CVE-2013-7458.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1477310400">- update to redis 3.2.4, including fixes for security issues:
  * CVE-2016-8339: CONFIG SET client-output-buffer-limit Code
    Execution Vulnerability [boo#1002351]
- bug fixes:
  * TCP binding bug fixed when only certain addresses were available
    for a given port
  * improved crash report
  * Fix for Redis Cluster redis-trib displaying of info after
    creating a new cluster.</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- update to redis 3.2.6
  * fixes for GEORADIUS, BITFIELD and Redis Cluster minor fixes.
- update 3.2.5
  * This release only fixes a compilation issue due to the
    missing -ldl at linking time.</changelog>
  <changelog author="mpluskal@suse.com" date="1485950400">- Update to version 3.2.7
  * This release fixes important security and correctness issues
    (boo#1064980 CVE-2016-10517)</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 3.2.9
  * A few rarely harmful bugs were fixed.
- Changes accumulated from 3.2.8
  Two important bug fixes, the first of one is critical:
  * Apparently Jemalloc 4.4.0 may contain a deadlock under
    particular conditions. See
    https://github.com/antirez/redis/issues/3799.
    We reverted back to the previously used Jemalloc versions and
    plan to upgrade Jemalloc again after having more info about the
    cause of the bug.
  * MIGRATE could crash the server after a socket error. See for
    reference: https://github.com/antirez/redis/issues/3796.</changelog>
  <changelog author="chris@computersalat.de" date="1498046400">- cleanup service file
- add redis.sysctl file
- update README.SUSE
  * add info for socket usage per service
  * add info for limits per service (LimitNOFILE=10240)</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Drop SLE 11 support.
- Refresh spec-file.
- Update to 4.0.2
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.2/00-RELEASENOTES
  * Different replication fixes to PSYNC2, the new 4.0 replication engine.
  * Modules thread safe contexts were introduced. They are an experimental
    API right now, but the API is considered to be stable and usable when needed.
  * SLOWLOG now logs the offending client name and address. Note that this is a
    backward compatibility breakage in case old code assumes that the slowlog
    entry is composed of exactly three entries.
  * The modules native data types RDB format changed.
  * The AOF check utility is now able to deal with RDB preambles.
  * GEORADIUS_RO and GEORADIUSBYMEMBER_RO variants, not supporting the STORE option,
    were added in order to allow read-only scaling of such queries.
  * HSET is now variadic, and HMSET is considered deprecated
    (but will be supported for years to come). Please use HSET in new code.
  * GEORADIUS huge radius (&gt;= ~6000 km) corner cases fixed,
    certain elements near the edges were not returned.
  * DEBUG DIGEST modules API added.
  * HyperLogLog commands no longer crash on certain input (non HLL) strings.
  * Fixed SLAVEOF inside MULTI/EXEC blocks.
  * Many other minor bug fixes and improvements.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Update changelog with CVE reference</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1515067200">- Update to 4.0.6
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.6/00-RELEASENOTES
  * PSYNC2: More errors in the fixes for PSYNC2 (CRITICAL).
  * Quicklist: change the len of quicklist to unsigned long.
  * Quicklist: fix the return value of quicklistCount.
  * Refactoring: improve luaCreateFunction() API.
  * Remove useless variable check from luaCreateFunction().
  * Fix issue #4505, Lua RDB AUX field loading of existing scripts.
  * Regression test for #4505 (Lua AUX field loading).
  * DEBUG change-repl-id implemented.
  * Buffer overflows occurring reading redis.conf CVE-2017-15047 (bsc#1061967)</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1517140800">- Update to 4.0.7
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.7/00-RELEASENOTES
  * Many 32 bit overflows were addressed in order to allow to use Redis with
    a very significant amount of data, memory size permitting.
  * MEMORY USAGE fixed for the list type.
  * Allow read-only scripts in Redis Cluster.
  * Fix AOF pipes setup in edge case.
  * AUTH option for MIGRATE.
  * HyperLogLogs are no longer converted from sparse to dense in order
    to be merged.
  * Fix AOF rewrite dead loop under edge cases.
  * Fix processing of large bulk strings (&gt;= 2GB).
  * Added RM_UnlinkKey in modules API.
  * Fix Redis Cluster crashes when certain commands with a variable number
    of arguments are called in an improper way.
  * Fix memory leak in lazyfree engine.
  * Fix many potentially successful partial synchronizations that end
    doing a full SYNC, because of a bug destroying the replication
    backlog on the slave. So after a failover the slave was often not able
    to PSYNC with masters, and a full SYNC was triggered. The bug only
    happened after 1 hour of uptime so escaped the unit tests.
  * Improve anti-affinity in master/slave allocation for Redis Cluster
    when the cluster is created.
  * Improve output buffer handling for slaves, by not limiting the amount
    of writes a slave could receive.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1518091200">- Update to 4.0.8
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.8/00-RELEASENOTES
  * Fix crash Redis Cluster instances during deletions.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1523534400">- Update to 4.0.9
  * https://raw.githubusercontent.com/antirez/redis/4.0.9/00-RELEASENOTES
  * Critical upgrade for users using AOF with the fsync policy set to "always".
  * Latency monitor could report wrong latencies under certain conditions.
  * AOF rewriting could fail when a backgronud rewrite is triggered and
    at the same time the AOF is switched on/off.
  * Redis Cluster crash-recovery safety improved.
  * Redis Cluster has now the ability to configure certain slaves so that
    they'll never attempt a failover.
  * Keyspace notifications API in modules.
  * RM_Call() is now faster by reusing the same client.
  * Tracking of the percentage of keys already logically expired but yet
    not evicted.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523966400">- Update redis-enable-bactrace-on-x86-and-ia64-only.patch to handle
  arm and rename it to redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch
- Add redis-disable_integration_logging.patch to disable logging test
  when backtrace is not enabled</changelog>
  <changelog author="mrueckert@suse.de" date="1529064000">- update to 4.0.10 (boo#1097430) CVE-2018-11218 CVE-2018-11219
  https://raw.githubusercontent.com/antirez/redis/4.0.10/00-RELEASENOTES
  - Important security issues related to the Lua scripting engine.
    Please check https://github.com/antirez/redis/issues/5017 for
    more information.
  - A bug with SCAN, SSCAN, HSCAN and ZSCAN, that may not return
    all the elements.  We also add a regression test that can
    trigger the issue often when present, and may in theory be able
    to find unrelated regressions.
  - A PSYNC2 bug is fixed: Redis should not expire keys when saving
    RDB files because otherwise it is no longer possible to use
    such RDB file as a base for partial resynchronization. It no
    longer represents the right state.
  - Compatibility of AOF with RDB preamble when the RDB checksum is
    disabled.
  - Sentinel bug that in some cases prevented Sentinel to detect
    that the master was down immediately. A delay was added to the
    detection.
- refreshed patches to apply cleanly again
  redis-conf.patch
  redis-initscript.patch</changelog>
</package>
<package pkgid="00bf582d32d80138e0d13f903b41c9815a5ca328aa4b0b84bd5351ed66e61f99" name="redis" arch="x86_64">
  <version epoch="0" ver="4.0.10" rel="lp150.3.3.1"/>
  <changelog author="eshmarnev@suse.com" date="1455710400">- Update to 3.0.7:
  * [FIX] Many fixes to MIGRATE multiple keys implementation.
  * [FIX] A Redis Cluster node crash was fixed because of wrong handling of
    node-&gt;slaveof pointers.
  * [FIX] Fix redis-trib rebalance when nodes need to be left empty because
    the specified weight is zero.
  * [FIX] MIGRATE: Never send -ASK redirections for MIGRATE when there are
  * [FIX] Lua debugger crash when printing too deeply nested objects.
  * [FIX] Redis-cli implementation of Lua debugging now allows to use the
    SCRIPT DEBUG command directly, switching to debugging mode as needed.
  * [FIX] Redis-trib is now able to fix more errors. A new CLUSTER subcommand
    called BUMPEPOCH was introduced in order to support new modes
    for the "fix" subcommand.
  * [NEW] Redis proctected mode: this feature improves Redis security and makes
    harder to run Redis in a configuration that is unsecure because no
    firewalling was used in order to protect Redis from external accesses.
  * [NEW] Cluster/Sentinel tests now use OSX leak to perform leak detection
    at the end of every unit.
  * [NEW] Detect and show server crashes during Cluster/Sentinel tests.
  * [NEW] More reliable Cluster/Sentinel test becuase of timing errors and
  - LOADING errors.
  * [FIX] lua_struct.c/getnum security issue fixed.
  * [FIX] Redis Cluster replica migration fixed.
  * [FIX] Fix a race condition in processCommand() because of interactions
    with freeMemoryIfNeeded().
  * [NEW] Backported from the upcoming Redis 3.2:
    MIGRATE now supports an extended multiple-keys pipelined mode, which
    is an order of magnitude faster. Redis Cluster now uses this mode
    in order to perform reshardings and rebalancings.
  * [NEW] Backported from the upcoming Redis 3.2:
    Redis Cluster has now support for rebalancing via the redis-trib
    rebalance command. Demo here:
  * [NEW] Redis Cluster redis-trib.rb new "info" subcommand.
  * [NEW] Redis Cluster tests improved.
  * [NEW] Log offending memory access address on SIGSEGV/SIGBUS</changelog>
  <changelog author="mamorales@suse.com" date="1461153600">- Fix installation example in README.SUSE</changelog>
  <changelog author="rmaliska@suse.com" date="1467201600">- Update to 3.2.1
  * [FIX] Cleaned up spec file.
  * [FIX] Critical bug in Sentinel was hopefully fixed.
  * [FIX] BITFIELD bugs fixed.
  * [FIX] GEO commands fixes on syntax errors and edge cases.
  * [NEW] RESOTRE now accepts dumps generated by older Redis versions.
  * [NEW] Jemalloc now is configured to save you memory, for a problem a
    change in the jemalloc configuration did not really survived when the
    3.2.0 release was finalized.
  * [NEW] TTL and TYPE command no longer alter the last access time of a key, for
    LRU evictions purposes. A new TOUCH command was introduced *just* to
    update the access time of a key.
  * [FIX] A bug was fixed in redis-cli, that connected to the instance running on the
    port 6379 if there was one, regardless of what was specified.
  * [NEW] TCP keep alive is now enabled by default. This should fix most ghost
    connections problems without resulting in any practical change in otherwise
    sane deployments.
  * [FIX] A Sentinel crash that could happen during failovers was fixed.
  * [NEW] avg_ttl reporting in INFO improved.
  * [NEW] Sentinel: improve handling of known Sentinel instances.
  * [NEW] Redis Cluster address update (via gossip section) processing improved
    to avoid initiating inwanted handshakes.
  * [FIX] Critical bug fixed: There was a problem in the way a cluster instance
    loaded the AOF that could cause data written via scripts to be lost during
    reshardings.
  * [NEW] There is a new very powerful BITFIELD command. Check the documentation
    here: http://redis.io/commands/BITFIELD
  * [NEW] CONFIG GET is allowed during the loading of the dataset.
  * [NEW] The DEBUG command have new features and can show an help with DEBUG HELP.
  * [NEW] redis-cli show hits about the commands arguments to the right.
  * [NEW] GEORADIUS got a STORE / STOREDIST option to store the result into a target
    key (as as orted set) instead of reporting it to the user.
  * [NEW] Redis Cluster replicas migration now works in a slightly different way. In
    the past a slave could migrate only to a master that used to have slaves
    in the past (and if there was still trace of this information). Now instead
    if a new slave gets at least a slot, and at least one other master in the
    cluster has a slave, then the new master is considered a valid target for
    replica migration. So if it will be orphaned and there is a spare slave
    it will get one.
  * [NEW] CLUSTER SLOTS output now includes the node ID (in a backward compatible
    manner).</changelog>
  <changelog author="astieger@suse.com" date="1469880000">- redis 3.2.2
- Highlight bug fixes:
  * Fix Redis server and Sentinel crashes
  * Fix GEORADIUS errors in reported entries
- New features:
  * slaves support the slave-announce-ip and slave-announce-port
    options.
  * RDB check utlity is now part of Redis and uses the same RDB code
  * redis-check-dump utility is now able to show certain information
    about the RDB file including creating version and date.</changelog>
  <changelog author="astieger@suse.com" date="1469880001">- Fix CVE-2013-7458: unsafe permissions of command line history
  boo#991250, adding CVE-2013-7458.patch</changelog>
  <changelog author="jengelh@inai.de" date="1469880002">- Test for user/group existence before creating them.
  Request shadow to be present for the scriptlet.</changelog>
  <changelog author="astieger@suse.com" date="1470398400">- redis 3.2.3:
  * fix replication delay issue
  * drop CVE-2013-7458.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1477310400">- update to redis 3.2.4, including fixes for security issues:
  * CVE-2016-8339: CONFIG SET client-output-buffer-limit Code
    Execution Vulnerability [boo#1002351]
- bug fixes:
  * TCP binding bug fixed when only certain addresses were available
    for a given port
  * improved crash report
  * Fix for Redis Cluster redis-trib displaying of info after
    creating a new cluster.</changelog>
  <changelog author="rmaliska@suse.com" date="1484913600">- update to redis 3.2.6
  * fixes for GEORADIUS, BITFIELD and Redis Cluster minor fixes.
- update 3.2.5
  * This release only fixes a compilation issue due to the
    missing -ldl at linking time.</changelog>
  <changelog author="mpluskal@suse.com" date="1485950400">- Update to version 3.2.7
  * This release fixes important security and correctness issues
    (boo#1064980 CVE-2016-10517)</changelog>
  <changelog author="vsistek@suse.com" date="1495108800">- Update to version 3.2.9
  * A few rarely harmful bugs were fixed.
- Changes accumulated from 3.2.8
  Two important bug fixes, the first of one is critical:
  * Apparently Jemalloc 4.4.0 may contain a deadlock under
    particular conditions. See
    https://github.com/antirez/redis/issues/3799.
    We reverted back to the previously used Jemalloc versions and
    plan to upgrade Jemalloc again after having more info about the
    cause of the bug.
  * MIGRATE could crash the server after a socket error. See for
    reference: https://github.com/antirez/redis/issues/3796.</changelog>
  <changelog author="chris@computersalat.de" date="1498046400">- cleanup service file
- add redis.sysctl file
- update README.SUSE
  * add info for socket usage per service
  * add info for limits per service (LimitNOFILE=10240)</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1507464000">- Drop SLE 11 support.
- Refresh spec-file.
- Update to 4.0.2
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.2/00-RELEASENOTES
  * Different replication fixes to PSYNC2, the new 4.0 replication engine.
  * Modules thread safe contexts were introduced. They are an experimental
    API right now, but the API is considered to be stable and usable when needed.
  * SLOWLOG now logs the offending client name and address. Note that this is a
    backward compatibility breakage in case old code assumes that the slowlog
    entry is composed of exactly three entries.
  * The modules native data types RDB format changed.
  * The AOF check utility is now able to deal with RDB preambles.
  * GEORADIUS_RO and GEORADIUSBYMEMBER_RO variants, not supporting the STORE option,
    were added in order to allow read-only scaling of such queries.
  * HSET is now variadic, and HMSET is considered deprecated
    (but will be supported for years to come). Please use HSET in new code.
  * GEORADIUS huge radius (&gt;= ~6000 km) corner cases fixed,
    certain elements near the edges were not returned.
  * DEBUG DIGEST modules API added.
  * HyperLogLog commands no longer crash on certain input (non HLL) strings.
  * Fixed SLAVEOF inside MULTI/EXEC blocks.
  * Many other minor bug fixes and improvements.</changelog>
  <changelog author="mpluskal@suse.com" date="1509537600">- Update changelog with CVE reference</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1515067200">- Update to 4.0.6
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.6/00-RELEASENOTES
  * PSYNC2: More errors in the fixes for PSYNC2 (CRITICAL).
  * Quicklist: change the len of quicklist to unsigned long.
  * Quicklist: fix the return value of quicklistCount.
  * Refactoring: improve luaCreateFunction() API.
  * Remove useless variable check from luaCreateFunction().
  * Fix issue #4505, Lua RDB AUX field loading of existing scripts.
  * Regression test for #4505 (Lua AUX field loading).
  * DEBUG change-repl-id implemented.
  * Buffer overflows occurring reading redis.conf CVE-2017-15047 (bsc#1061967)</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1517140800">- Update to 4.0.7
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.7/00-RELEASENOTES
  * Many 32 bit overflows were addressed in order to allow to use Redis with
    a very significant amount of data, memory size permitting.
  * MEMORY USAGE fixed for the list type.
  * Allow read-only scripts in Redis Cluster.
  * Fix AOF pipes setup in edge case.
  * AUTH option for MIGRATE.
  * HyperLogLogs are no longer converted from sparse to dense in order
    to be merged.
  * Fix AOF rewrite dead loop under edge cases.
  * Fix processing of large bulk strings (&gt;= 2GB).
  * Added RM_UnlinkKey in modules API.
  * Fix Redis Cluster crashes when certain commands with a variable number
    of arguments are called in an improper way.
  * Fix memory leak in lazyfree engine.
  * Fix many potentially successful partial synchronizations that end
    doing a full SYNC, because of a bug destroying the replication
    backlog on the slave. So after a failover the slave was often not able
    to PSYNC with masters, and a full SYNC was triggered. The bug only
    happened after 1 hour of uptime so escaped the unit tests.
  * Improve anti-affinity in master/slave allocation for Redis Cluster
    when the cluster is created.
  * Improve output buffer handling for slaves, by not limiting the amount
    of writes a slave could receive.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1518091200">- Update to 4.0.8
  * Release notes: https://raw.githubusercontent.com/antirez/redis/4.0.8/00-RELEASENOTES
  * Fix crash Redis Cluster instances during deletions.</changelog>
  <changelog author="ilya@ilya.pp.ua" date="1523534400">- Update to 4.0.9
  * https://raw.githubusercontent.com/antirez/redis/4.0.9/00-RELEASENOTES
  * Critical upgrade for users using AOF with the fsync policy set to "always".
  * Latency monitor could report wrong latencies under certain conditions.
  * AOF rewriting could fail when a backgronud rewrite is triggered and
    at the same time the AOF is switched on/off.
  * Redis Cluster crash-recovery safety improved.
  * Redis Cluster has now the ability to configure certain slaves so that
    they'll never attempt a failover.
  * Keyspace notifications API in modules.
  * RM_Call() is now faster by reusing the same client.
  * Tracking of the percentage of keys already logically expired but yet
    not evicted.</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1523966400">- Update redis-enable-bactrace-on-x86-and-ia64-only.patch to handle
  arm and rename it to redis-enable-bactrace-on-x86-ia64-and_arm32_only.patch
- Add redis-disable_integration_logging.patch to disable logging test
  when backtrace is not enabled</changelog>
  <changelog author="mrueckert@suse.de" date="1529064000">- update to 4.0.10 (boo#1097430) CVE-2018-11218 CVE-2018-11219
  https://raw.githubusercontent.com/antirez/redis/4.0.10/00-RELEASENOTES
  - Important security issues related to the Lua scripting engine.
    Please check https://github.com/antirez/redis/issues/5017 for
    more information.
  - A bug with SCAN, SSCAN, HSCAN and ZSCAN, that may not return
    all the elements.  We also add a regression test that can
    trigger the issue often when present, and may in theory be able
    to find unrelated regressions.
  - A PSYNC2 bug is fixed: Redis should not expire keys when saving
    RDB files because otherwise it is no longer possible to use
    such RDB file as a base for partial resynchronization. It no
    longer represents the right state.
  - Compatibility of AOF with RDB preamble when the RDB checksum is
    disabled.
  - Sentinel bug that in some cases prevented Sentinel to detect
    that the master was down immediately. A delay was added to the
    detection.
- refreshed patches to apply cleanly again
  redis-conf.patch
  redis-initscript.patch</changelog>
</package>
<package pkgid="25d406ca77e3d1db45dfbd814b7ea16ae382190905c412b9616361272b021d5d" name="resource-agents" arch="src">
  <version epoch="0" ver="4.1.1+git0.5a1edf2b" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
  <changelog author="zlliu@suse.com" date="1500033600">- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500206400">- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.1+git.1503904762.b4582bdb:
  * Low: mysql: Fixed bug where crm_admin is never called, leaving master scores to -1 in certain conditions.
  * Low: exportfs: check fsid parameter for not containing a comma
  * Low: mysql: don't run ocf_is_ms check in a subshell
  * Low: redis: add check for redis-check-rdb
  * Low: redis: wait for pid file to appear after start
  * High: pgsql: Allow dynamic membership
  * Medium: CTDB: fix issue with --logfile being replace with --logging
  * Medium: oraasm: new resource agent for Oracle ASM Disk Groups
  * Medium: rabbitmq-cluster: Backup and restore policies
  * Low: Raid1: Clean up spelling and whitespace
  * Medium: LVM: use vgscan --cache to update metadata during start/relocate
  * Medium: LVM: warn when cache mode is not writethrough
  * Medium: iSCSILogicalUnit: add emulate parameters
  * Medium: mysql: Properly Detect read_only State
  * Medium: anything: Allow multiple instances of binfiles to be run (pidfile will be unique)
  * Medium: anything: Start should return OCF_RUNNING if monitor succeeds
  * Medium: anything: Attempt to fix missing PID directory before starting
  * Medium: kamailio fixes and enhancements for v5.0
  * Low: portblock: dont log dd "0+0 records in/out"
  * Medium: Raid1: Handle case when mddev is a symlink
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Medium: VirtualDomain: new attributes migrateuri, remoteuri, migration_user
  * Low: sapdb: Add hdbnameserver to monitor services
  * High: CTDB: Don't fail on empty directory (bsc#1052577)
  * High: minio: Resource agent for the minio storage server
  * High: ZFS: Add ZFS Resource Agent
  * High: awseip/awsvip: fixes and improvements
  * Medium: VirtualDomain: new configuration option shutdown_mode
  * Medium: Route: Resource key for the address family (ip4, ip6 or detect)
  * Low: aws-vpc-route53: Fix missing ocf_log in log message
- Remove patches merged upstream:
  * Remove 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * Remove 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * Remove 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * Remove 0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504180800">- Update to version 4.0.1+git.1504170332.70fbcd8a:
  * Medium: ocf-shellfuncs: improve locking (ocf_take_lock)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * High: lvmlockd: add resource agent for lvmlockd daemon (fate#323822)
  * High: rkt: Add agent for managing rkt containers
  * Medium: varnish: Compatibility for version 4.0</changelog>
  <changelog author="kgronlund@suse.com" date="1504180801">- Update to version 4.0.1+git.1504207605.22ac330c: (bsc#1053207)
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)</changelog>
  <changelog author="kgronlund@suse.com" date="1504526400">- Update to version 4.0.1+git.1504527822.722ffb5b:
  * High: ovsmonitor: Add OpenvSwitch monitor agent (fate#323276)</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.1+git.1508859013.2b3cb4a6:
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: pgsql: Support PG10: Following the change of the PostgreSQL function name.
  * High: pgsql: Support PG10: Following the change of the default action of "pg_ctl start" and "pg_ctl promote".</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Update to version 4.0.1+git.1509705432.020b5b34:
  * LVM-activate: add new RA for LVM activation (fate#323822)
  * nfsserver: allow stop to timeout
  * adding docker-native healthcheck query to docker</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version v4.1.0rc1~git8.2900c751:
  * Drop libnet dependency (bsc#1069596)
  * db2: fix HADR promote when master failed
  * Add resource agent for IPSEC tunnels
  * Mid: apache: Move the stop judgment last.
  * Mid: apache: Eliminate wasteful TERM transmission, correct the waiting time correctly.
  * galera: recover from empty gvwstate.dat
  * Revert "LVM: use vgscan --cache to update metadata during start/relocate"
  * Medium: IPaddr2: do not send Gratuitous ARPs in the Cluster IP configuration
  * Medium: IPaddr2: add send_arp_opts parameter
  * Medium: IPaddr2: allow to choose arping instead of send_arp binary
  * Low: send_arp.linux: print proper usage
  * Low: IPaddr2: document arp_interval as deprecated
  * Low: IPaddr2: remove metadata of an unused parameter arp_mac
  * Low: IPaddr2: always remove orphan pidfile
  * Low: IPaddr2: use ocf_log for an output from send_arp</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.1.0+git54.b264e401:
  * mpathpersist: New agent (fate#324044)
  * jira: New resource agent
  * azure-lb: New resource agent
  * lxc-info/machine-info: New agents for monitoring containers/machines
  * Low: redis: Check read bit on redis config
  * Low: IPsrcaddr: Only check for ifconfig on BSD/solaris
  * Medium: CTDB: Cope with deprecated "idmap backend" smb.conf option
  * Medium: oracle: Fix alter user syntax for set_mon_user_profile
  * Medium: db2: improve monitor and simplify STANDBY/.../DISCONNECTED
  * Medium: CTDB: fix initial probe
  * Medium: ethmonitor: add intel omnipath support
  * Medium: LVM-activate: avoid unnecessary validation in stop action
  * Medium: IPsrcaddr: match exact route to avoid failing</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.1.0+git59.a0452207:
  * lvmlockd: auto change lvm config to use lvmlockd (fate#323822)
  * LVM-activate: put all validations into lvm_validate (fate#323822)
  * mariadb: GTID/semi-sync based MariaDB Master/Slave resource-agent</changelog>
  <changelog author="kgronlund@suse.com" date="1516190400">- Use python3 (bsc#1076413)</changelog>
  <changelog author="kgronlund@suse.com" date="1516190401">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="dakechi@suse.com" date="1533729600">- Implements the reload operation on the SAPInstance RA (bsc#1096744)
- Include the enq_server and enq_replicator on the default service list
  to be monitored for the new S/4 HANA Enq. Services 2. (bsc#1092384)
- Improved SAPInstance START profile detection, avoiding the need of
  setting the START_PROFILE parameter. (bsc#1096744)
- Included the following patches:
  * 0007-SAPInstance-implemeted-reload-method.patch
  * 0008-SAPInstance-Improved-indents.patch
  * 0009-Medium-SAPInstance-Add-monitored-services-for-ENSA2-.patch
  * 0010-SAPInstance-Improved-SAP-instance-profile-detection.patch</changelog>
</package>
<package pkgid="089bae1cf020e447c567af26c48a137e56ee4db0b837a1b7cfe4fdfb07764c1d" name="resource-agents" arch="x86_64">
  <version epoch="0" ver="4.1.1+git0.5a1edf2b" rel="lp150.2.3.1"/>
  <changelog author="kgronlund@suse.com" date="1485950400">- Update to version 4.0.0+git.1485962683.3b5faae:
  * Also backup users permissions. Skip guest user permission for vhost /
  * Low: slapd: Change of the stop processing.
  * LVM: add error messages for partial_activation
  * Low: apache: Reduce log spam for success
  * Low: findif.sh: Correctly redirect output to /dev/null
  * Low: eDir88: Fix incorrect shell usage
  * Low: redis: Fix error in log output
  * Low: tomcat: Fix incorrect shell usage
  * Low: rabbitmq-cluster: Fix incorrect shell usage
  * Low: Filesystem: Fix incorrect shell usage
  * Low: nginx: Fix incorrect shell usage
  * Low: ServeRAID: Fix incorrect shell usage
  * Low: postfix: data_dir loop could only ever run once
  * Low: SysInfo: Convert test series to legal syntax
  * tomcat: fix systemd tomcat start script check
  * galera: make last commit parsing compatible with mariadb 10.1.18+
  * galera: prevent promote right after demote
  * ifcheck must not suppress stdout of "ip" command so that it can be printed out in case of an error (e.g., usage in findif_check_params).
  * Medium: IPaddr2: add option to enable sending refresh arp packets in monitor
  * Low: IPaddr2: Log refresh arp packets at debug level instead of info
  * pgsql: fix problem with creating replication slot names, when node count greather then 2
  * Low: Update outdated mailing list/wiki references
  * Enable dump/restore users from RabbitMQ ver. 3.6.x
  * Don't run scriptlets if Mnesia isn't available
  * Don't call erlang:halt/0 inside of the working node
  * Remove file only if successfully imported users
  * Dump users only if non-empty
  * Improve dump/restore ofusers' permissions
  * Restore users' permissions only if Mnesia is running
  * RabbitMQ: Reset Mnesia before joining existing cluster
  * portblock: Use -w (wait) to avoid "insufficient privileges" error
  * portblock: version check for -w
  * Double-quote value of synchronous_standby_names in rep_mode.conf
  * specfile: make requirements general and update comments
  * Filesystem: check if there are any mounts mounted under the mountpoint
  * IPaddr2: return success on stop with invalid IP
  * Fix typo in IPaddr2
  * Fix grammar and spelling in some resource agents
  * galera: allow names in wsrep_cluster_address to differ from pacemaker nodes' names
  * IPaddr2 detect duplicate IP
  * redis: use "CLIENT KILL type normal" to notify clients of master being demoted
  * specfile: Add metadata.rng to the file to be collected
  * Adds support for fstype=zfs on Filesystem resource agent
  * LVM: fix partial activation
  * galera: revert "long SST monitoring" PR #684 and #762
  * Medium: exportfs: Only strip brackets from edges of clientspec (bsc#1022223)
- Rebase patches:
  * Add 0001-LVM-Default-partial_activation-to-true-in-SLE-HAE.patch
  * Add 0002-nfsserver-fix-path-to-sm-notify.patch
  * Add 0003-ldirectord-don-t-create-subsys-lock.patch
  * Add 0004-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Add 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove lvm-vg-partial-active.diff
  * Remove resource-agents-nfsserver-sle11.patch
  * Remove no-var-lock-subsys.patch
  * Remove 0006-Revert-Low-build-Move-binaries-in-usr-lib-heartbeat-.patch
  * Remove 0001-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1495022400">- Update to version 4.0.1+git.1495055229.643177f1:
  * High: SAPInstance: Add IS_ERS parameter (bsc#1036486)
  * High: DB2: fix HADR support for DB2 V98+ (bsc#1035470)
  * Medium: iSCSILogicalUnit/iSCSITarget: protect targetcli invocations with locks
  * Medium: iSCSILogicalUnit: lio-t IPv6-support
  * Medium: LVM: add check_writethrough parameter
  * Medium: galera: fix permission of temporary log file for mariadb 10.1.21+
  * Medium: galera: fix the first bootstrap when cluster has no data
  * Medium: docker: fix to deal with the image name correctly.
  * Medium: named: Add support for rndc options in named resource agent.
  * Medium: NodeUtilization: Add NodeUtilization agent
  * Medium: rabbitmq-cluster: Allow the rabbitmq cluster to work on pacemaker remote nodes
  * Medium: galera: fix master target during promotion with cluster_host_map
  * Medium: IPaddr2: add option for specifying IPv6's preferred_lft
  * Medium: docker: Allow callers to specify a set of directories that should be created if the don't exist
  * Low: pgsql: fix regex in set async mode
  * Low: added kamctl parameter as it was missing, causing issues if kamctl is not in PATH
  * Low: clvm: remove reload action from metadata
  * Low: iSCSILogicalUnit: replace openssl call with md5sum
  * Low: nginx: fix return code for configfile err
  * Add 0006-Revert-ocf_log-use-same-log-format-as-pacemaker.patch</changelog>
  <changelog author="zlliu@suse.com" date="1500033600">- Medium: Raid1: Handle case when mddev is a symlink(bsc#1047991)
  0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1500206400">- High: aws-vpc-route53: Add agent for AWS Route 53 (fate#322781)
  * Add 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
- Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Add 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1502107200">- High: CTDB: Don't fail on empty directory (bsc#1052577)
  * Add 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1503921600">- Update to version 4.0.1+git.1503904762.b4582bdb:
  * Low: mysql: Fixed bug where crm_admin is never called, leaving master scores to -1 in certain conditions.
  * Low: exportfs: check fsid parameter for not containing a comma
  * Low: mysql: don't run ocf_is_ms check in a subshell
  * Low: redis: add check for redis-check-rdb
  * Low: redis: wait for pid file to appear after start
  * High: pgsql: Allow dynamic membership
  * Medium: CTDB: fix issue with --logfile being replace with --logging
  * Medium: oraasm: new resource agent for Oracle ASM Disk Groups
  * Medium: rabbitmq-cluster: Backup and restore policies
  * Low: Raid1: Clean up spelling and whitespace
  * Medium: LVM: use vgscan --cache to update metadata during start/relocate
  * Medium: LVM: warn when cache mode is not writethrough
  * Medium: iSCSILogicalUnit: add emulate parameters
  * Medium: mysql: Properly Detect read_only State
  * Medium: anything: Allow multiple instances of binfiles to be run (pidfile will be unique)
  * Medium: anything: Start should return OCF_RUNNING if monitor succeeds
  * Medium: anything: Attempt to fix missing PID directory before starting
  * Medium: kamailio fixes and enhancements for v5.0
  * Low: portblock: dont log dd "0+0 records in/out"
  * Medium: Raid1: Handle case when mddev is a symlink
  * Low: sg_persist: Read empty value when when no attribute exists (bsc#1048288)
  * Medium: VirtualDomain: new attributes migrateuri, remoteuri, migration_user
  * Low: sapdb: Add hdbnameserver to monitor services
  * High: CTDB: Don't fail on empty directory (bsc#1052577)
  * High: minio: Resource agent for the minio storage server
  * High: ZFS: Add ZFS Resource Agent
  * High: awseip/awsvip: fixes and improvements
  * Medium: VirtualDomain: new configuration option shutdown_mode
  * Medium: Route: Resource key for the address family (ip4, ip6 or detect)
  * Low: aws-vpc-route53: Fix missing ocf_log in log message
- Remove patches merged upstream:
  * Remove 0005-Medium-CTDB-Use-logging-syntax-for-ctdbd-bsc-981863.patch
  * Remove 0008-Low-sg_persist-Read-empty-value-when-when-no-attribu.patch
  * Remove 0010-High-CTDB-Don-t-fail-on-empty-directory-bsc-1052577.patch
  * Remove 0009-High-aws-vpc-route53-Add-agent-for-AWS-Route-53-fate.patch
  * Remove 0007-Medium-Raid1-Handle-case-when-mddev-is-a-symlink.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1504180800">- Update to version 4.0.1+git.1504170332.70fbcd8a:
  * Medium: ocf-shellfuncs: improve locking (ocf_take_lock)
  * Low: ocf-shellfuncs: Avoid printing empty INFO messages (bsc#1053621)
  * Low: SAPInstance: Mention monitor support in documentation (bsc#1051913)
  * High: lvmlockd: add resource agent for lvmlockd daemon (fate#323822)
  * High: rkt: Add agent for managing rkt containers
  * Medium: varnish: Compatibility for version 4.0</changelog>
  <changelog author="kgronlund@suse.com" date="1504180801">- Update to version 4.0.1+git.1504207605.22ac330c: (bsc#1053207)
  * galera: Honor "safe_to_bootstrap" flag in grastate.dat (bsc#1055017)
  * galera: Fix instance name in master_exists() (bsc#1056635)</changelog>
  <changelog author="kgronlund@suse.com" date="1504526400">- Update to version 4.0.1+git.1504527822.722ffb5b:
  * High: ovsmonitor: Add OpenvSwitch monitor agent (fate#323276)</changelog>
  <changelog author="kgronlund@suse.com" date="1509537600">- Update to version 4.0.1+git.1508859013.2b3cb4a6:
  * Medium: aws-vpc-route53: Fix tempfile race (bsc#1059312)
  * High: pgsql: Support PG10: Following the change of the PostgreSQL function name.
  * High: pgsql: Support PG10: Following the change of the default action of "pg_ctl start" and "pg_ctl promote".</changelog>
  <changelog author="kgronlund@suse.com" date="1509710400">- Update to version 4.0.1+git.1509705432.020b5b34:
  * LVM-activate: add new RA for LVM activation (fate#323822)
  * nfsserver: allow stop to timeout
  * adding docker-native healthcheck query to docker</changelog>
  <changelog author="kgronlund@suse.com" date="1511438400">- Update to version v4.1.0rc1~git8.2900c751:
  * Drop libnet dependency (bsc#1069596)
  * db2: fix HADR promote when master failed
  * Add resource agent for IPSEC tunnels
  * Mid: apache: Move the stop judgment last.
  * Mid: apache: Eliminate wasteful TERM transmission, correct the waiting time correctly.
  * galera: recover from empty gvwstate.dat
  * Revert "LVM: use vgscan --cache to update metadata during start/relocate"
  * Medium: IPaddr2: do not send Gratuitous ARPs in the Cluster IP configuration
  * Medium: IPaddr2: add send_arp_opts parameter
  * Medium: IPaddr2: allow to choose arping instead of send_arp binary
  * Low: send_arp.linux: print proper usage
  * Low: IPaddr2: document arp_interval as deprecated
  * Low: IPaddr2: remove metadata of an unused parameter arp_mac
  * Low: IPaddr2: always remove orphan pidfile
  * Low: IPaddr2: use ocf_log for an output from send_arp</changelog>
  <changelog author="kgronlund@suse.com" date="1515499200">- Update to version 4.1.0+git54.b264e401:
  * mpathpersist: New agent (fate#324044)
  * jira: New resource agent
  * azure-lb: New resource agent
  * lxc-info/machine-info: New agents for monitoring containers/machines
  * Low: redis: Check read bit on redis config
  * Low: IPsrcaddr: Only check for ifconfig on BSD/solaris
  * Medium: CTDB: Cope with deprecated "idmap backend" smb.conf option
  * Medium: oracle: Fix alter user syntax for set_mon_user_profile
  * Medium: db2: improve monitor and simplify STANDBY/.../DISCONNECTED
  * Medium: CTDB: fix initial probe
  * Medium: ethmonitor: add intel omnipath support
  * Medium: LVM-activate: avoid unnecessary validation in stop action
  * Medium: IPsrcaddr: match exact route to avoid failing</changelog>
  <changelog author="kgronlund@suse.com" date="1515758400">- Update to version 4.1.0+git59.a0452207:
  * lvmlockd: auto change lvm config to use lvmlockd (fate#323822)
  * LVM-activate: put all validations into lvm_validate (fate#323822)
  * mariadb: GTID/semi-sync based MariaDB Master/Slave resource-agent</changelog>
  <changelog author="kgronlund@suse.com" date="1516190400">- Use python3 (bsc#1076413)</changelog>
  <changelog author="kgronlund@suse.com" date="1516190401">- Drop python requirement (bsc#1076413)
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="kgronlund@suse.com" date="1518004800">- Update to version 4.1.0+git83.6c77ce7e:
  * Medium: Raid1: Ignore transient devices after stopping a device (bsc#1077416)
  * redis: add support for tunneling replication traffic
  * Low: ovsmonitor: Generate man page for ovsmonitor (fate#323276)
  * Low: Raid1: remove unnecessary wait flags (bsc#1077416)
  * Pacemaker 2.0 compatibility (fate#324508):
  * Low: Xen: Use "crm_attribute --name/-n" instead of deprecated "--attr-name"
  * Low: Xen,redis: Use "crm_attribute --query/-G" instead of deprecated "--get-value"
  * Low: db2,galera,NodeUtilization: Use "crm_attribute --quiet/-q" instead of deprecated "-Q"
  * Low: sfex_daemon: Use "crm_resource --node/-N" instead of deprecated "--host-uname/-H"
  * Low: Xen,NodeUtilization: Use "crm_attribute --node/-N" instead of deprecated "--node-uname/-U"
  * Low: vmware: Do not reference the dropped cluster property "default_action_timeout"
- Remove patch merged upstream:
  * 0001-Drop-python-from-build-system-since-nothing-uses-it.patch</changelog>
  <changelog author="jengelh@inai.de" date="1518004801">- Edits to description, and compact build commands.</changelog>
  <changelog author="kgronlund@suse.com" date="1520337600">- Update to version 4.1.1+git0.5a1edf2b:
  * High: mpathpersist: Fixed problem that character string could not be correctly parsed (bsc#1083896)
  * High: VirtualDomain: Properly migrate VMs on node shutdown (bsc#1074014)
  * Medium: awseip/awsvip: improvements (incl multi NIC support)
  * Medium: awseip/awsvip: increase default "api_delay" to 3s to avoid failures
  * Low: pgsql: try to create stats_temp_directory
  * Low: Filesystem: Add support for cvfs
  * Low: pgsql: improve validations for replication mode</changelog>
  <changelog author="dakechi@suse.com" date="1533729600">- Implements the reload operation on the SAPInstance RA (bsc#1096744)
- Include the enq_server and enq_replicator on the default service list
  to be monitored for the new S/4 HANA Enq. Services 2. (bsc#1092384)
- Improved SAPInstance START profile detection, avoiding the need of
  setting the START_PROFILE parameter. (bsc#1096744)
- Included the following patches:
  * 0007-SAPInstance-implemeted-reload-method.patch
  * 0008-SAPInstance-Improved-indents.patch
  * 0009-Medium-SAPInstance-Add-monitored-services-for-ENSA2-.patch
  * 0010-SAPInstance-Improved-SAP-instance-profile-detection.patch</changelog>
</package>
<package pkgid="d41079adf82d5c5ada80404343bb61e979a244ab12824ad5e943fd58653a8071" name="rmt-server" arch="src">
  <version epoch="0" ver="1.0.0" rel="lp150.2.3.2"/>
  <changelog author="tmuntaner@suse.com" date="1518436800">- version 0.0.3
- Added nginx integration
- Added systemd timers for rmt-server-sync and rmt-server-mirror
- Added custom repository integration</changelog>
  <changelog author="tmuntaner@suse.com" date="1518609600">- Fixed systemd timers for SLES 12 and Leap</changelog>
  <changelog author="tschmidt@suse.com" date="1518782400">- RMT on SLE12 also uses ruby 2.5
  - Removed use-ruby-2.4-in-rails.patch and use-ruby-2.4-in-rmt-cli.patch as
    they are no longer needed.</changelog>
  <changelog author="tmuntaner@suse.com" date="1518782401">- Use correct service for systemd timers</changelog>
  <changelog author="tschmidt@suse.com" date="1519300800">- Do not build for s390 (bsc#1082150)</changelog>
  <changelog author="hschmidt@suse.com" date="1521806400">- Version 0.0.4
- Fix nginx config to point to correct root location
  See: https://github.com/SUSE/rmt/issues/113
- Add message to help output about collecting feedback from users
- Only allow one activation to exist for a given system-service
  combination.
- Update loofah and rails-html-sanitizer gems due to CVEs.
- Add proper foreign key constraints where applicable.</changelog>
  <changelog author="hschmidt@suse.com" date="1523016000">- Add the offline migration endpoint for upgrading major SLES versions.
  https://github.com/SUSE/rmt/pull/121
- Use the recommended systemd service type ("simple" instead of
  "forking").
  https://github.com/SUSE/rmt/pull/129
- Don't create a local licenses directory if the repo has no licenses.
  Closes bsc#1087707.
  https://github.com/SUSE/rmt/pull/126
- Don't allow duplicate activations to exist in the DB.
  https://github.com/SUSE/rmt/pull/119</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1523275200">- version 0.0.5
- Allow access to the API only via HTTPS, add directories to store SSL
  keys &amp; certificates, add clientSetup4RMT.sh script
  https://github.com/SUSE/rmt/pull/122</changelog>
  <changelog author="tmuntaner@suse.com" date="1523275201">- Only enable free modules in migrations for SLE 15
  https://github.com/SUSE/rmt/pull/132</changelog>
  <changelog author="skotov@suse.com" date="1524139200">- version 0.0.6
- storing hardware info
  https://github.com/SUSE/rmt/pull/138</changelog>
  <changelog author="tmuntaner@suse.com" date="1524657600">- version 0.0.7
- Fixed offline repository sync with usb (bsc#1089038)
  See: https://github.com/SUSE/rmt/pull/147
- Removed unique index for uuid in HwInfo table
  See: https://github.com/SUSE/rmt/pull/142
- "rmt-cli products enable ..." enables recommended extensions in SLE 15
  See: https://github.com/SUSE/rmt/pull/141
- Added RMT header in requests for Connect API
  See: https://github.com/SUSE/rmt/pull/139</changelog>
  <changelog author="tmuntaner@suse.com" date="1524744000">- Added supportconfig plugin
  See: https://github.com/SUSE/rmt/pull/146
- Rename organizations_products.json to organizations_products_unscoped.json (fixes bsc#1088687)
  See: https://github.com/SUSE/rmt/pull/151
- Improved log formatting in journald
  See: https://github.com/SUSE/rmt/pull/145</changelog>
  <changelog author="tmuntaner@suse.com" date="1525348800">- Removed ability to change user/group through configuration (GH-144)
  See: https://github.com/SUSE/rmt/pull/154</changelog>
  <changelog author="skotov@suse.com" date="1525348801">- Added lockfile feature for mirror, sync &amp; import commands</changelog>
  <changelog author="skotov@suse.com" date="1525694400">- Lockfile handling with File#flock
  See: https://github.com/SUSE/rmt/pull/157</changelog>
  <changelog author="tmuntaner@suse.com" date="1525694401">- RMT server binds to 127.0.0.1, not 0.0.0.0
  See: https://github.com/SUSE/rmt/pull/158</changelog>
  <changelog author="tmuntaner@suse.com" date="1525780800">- Rename of service files
  rmt.service -&gt; rmt-server.service
  rmt-migration.service -&gt; rmt-server-migration.service
  See: https://github.com/SUSE/rmt/pull/159</changelog>
  <changelog author="wstephenson@suse.com" date="1525867200">- Show custom repositories and product bindings in supportconfig
  plugin output
- Add CSV output option
  See: https://github.com/SUSE/rmt/pull/158</changelog>
  <changelog author="hschmidt@suse.com" date="1526040000">- Don't check if a product has repos and that they are mirrored
  when deactivating.
  See: https://github.com/SUSE/rmt/pull/168</changelog>
  <changelog author="skotov@suse.com" date="1526644800">- Bump version to 1.0.0 (bsc#1093879)
- Make rmt-server recommend yast2-rmt
- Add the post-install message about running yast2-rmt
- Add new script rmt-data-import for migration from SMT to RMT
- Split off usage instruction into MANUAL.md
- Squash migrations into one
- Small improvements on CLI responses
- Rename clientSetup4RMT.sh =&gt; rmt-client-setup
- Add use-ruby-2.5-in-rmt-data-import.patch</changelog>
</package>
<package pkgid="190ce718494d9591c9215a4a8d520178bbe7d4d92fcf98687e1c3b7d590e25c1" name="rmt-server" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp150.2.3.2"/>
  <changelog author="tmuntaner@suse.com" date="1518436800">- version 0.0.3
- Added nginx integration
- Added systemd timers for rmt-server-sync and rmt-server-mirror
- Added custom repository integration</changelog>
  <changelog author="tmuntaner@suse.com" date="1518609600">- Fixed systemd timers for SLES 12 and Leap</changelog>
  <changelog author="tschmidt@suse.com" date="1518782400">- RMT on SLE12 also uses ruby 2.5
  - Removed use-ruby-2.4-in-rails.patch and use-ruby-2.4-in-rmt-cli.patch as
    they are no longer needed.</changelog>
  <changelog author="tmuntaner@suse.com" date="1518782401">- Use correct service for systemd timers</changelog>
  <changelog author="tschmidt@suse.com" date="1519300800">- Do not build for s390 (bsc#1082150)</changelog>
  <changelog author="hschmidt@suse.com" date="1521806400">- Version 0.0.4
- Fix nginx config to point to correct root location
  See: https://github.com/SUSE/rmt/issues/113
- Add message to help output about collecting feedback from users
- Only allow one activation to exist for a given system-service
  combination.
- Update loofah and rails-html-sanitizer gems due to CVEs.
- Add proper foreign key constraints where applicable.</changelog>
  <changelog author="hschmidt@suse.com" date="1523016000">- Add the offline migration endpoint for upgrading major SLES versions.
  https://github.com/SUSE/rmt/pull/121
- Use the recommended systemd service type ("simple" instead of
  "forking").
  https://github.com/SUSE/rmt/pull/129
- Don't create a local licenses directory if the repo has no licenses.
  Closes bsc#1087707.
  https://github.com/SUSE/rmt/pull/126
- Don't allow duplicate activations to exist in the DB.
  https://github.com/SUSE/rmt/pull/119</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1523275200">- version 0.0.5
- Allow access to the API only via HTTPS, add directories to store SSL
  keys &amp; certificates, add clientSetup4RMT.sh script
  https://github.com/SUSE/rmt/pull/122</changelog>
  <changelog author="tmuntaner@suse.com" date="1523275201">- Only enable free modules in migrations for SLE 15
  https://github.com/SUSE/rmt/pull/132</changelog>
  <changelog author="skotov@suse.com" date="1524139200">- version 0.0.6
- storing hardware info
  https://github.com/SUSE/rmt/pull/138</changelog>
  <changelog author="tmuntaner@suse.com" date="1524657600">- version 0.0.7
- Fixed offline repository sync with usb (bsc#1089038)
  See: https://github.com/SUSE/rmt/pull/147
- Removed unique index for uuid in HwInfo table
  See: https://github.com/SUSE/rmt/pull/142
- "rmt-cli products enable ..." enables recommended extensions in SLE 15
  See: https://github.com/SUSE/rmt/pull/141
- Added RMT header in requests for Connect API
  See: https://github.com/SUSE/rmt/pull/139</changelog>
  <changelog author="tmuntaner@suse.com" date="1524744000">- Added supportconfig plugin
  See: https://github.com/SUSE/rmt/pull/146
- Rename organizations_products.json to organizations_products_unscoped.json (fixes bsc#1088687)
  See: https://github.com/SUSE/rmt/pull/151
- Improved log formatting in journald
  See: https://github.com/SUSE/rmt/pull/145</changelog>
  <changelog author="tmuntaner@suse.com" date="1525348800">- Removed ability to change user/group through configuration (GH-144)
  See: https://github.com/SUSE/rmt/pull/154</changelog>
  <changelog author="skotov@suse.com" date="1525348801">- Added lockfile feature for mirror, sync &amp; import commands</changelog>
  <changelog author="skotov@suse.com" date="1525694400">- Lockfile handling with File#flock
  See: https://github.com/SUSE/rmt/pull/157</changelog>
  <changelog author="tmuntaner@suse.com" date="1525694401">- RMT server binds to 127.0.0.1, not 0.0.0.0
  See: https://github.com/SUSE/rmt/pull/158</changelog>
  <changelog author="tmuntaner@suse.com" date="1525780800">- Rename of service files
  rmt.service -&gt; rmt-server.service
  rmt-migration.service -&gt; rmt-server-migration.service
  See: https://github.com/SUSE/rmt/pull/159</changelog>
  <changelog author="wstephenson@suse.com" date="1525867200">- Show custom repositories and product bindings in supportconfig
  plugin output
- Add CSV output option
  See: https://github.com/SUSE/rmt/pull/158</changelog>
  <changelog author="hschmidt@suse.com" date="1526040000">- Don't check if a product has repos and that they are mirrored
  when deactivating.
  See: https://github.com/SUSE/rmt/pull/168</changelog>
  <changelog author="skotov@suse.com" date="1526644800">- Bump version to 1.0.0 (bsc#1093879)
- Make rmt-server recommend yast2-rmt
- Add the post-install message about running yast2-rmt
- Add new script rmt-data-import for migration from SMT to RMT
- Split off usage instruction into MANUAL.md
- Squash migrations into one
- Small improvements on CLI responses
- Rename clientSetup4RMT.sh =&gt; rmt-client-setup
- Add use-ruby-2.5-in-rmt-data-import.patch</changelog>
</package>
<package pkgid="837cefceabcf33fa5198257b17106f16c29a143b607c4eb736a6f88190911218" name="rmt-server" arch="src">
  <version epoch="0" ver="1.0.3" rel="lp150.2.6.1"/>
  <changelog author="tmuntaner@suse.com" date="1518782400">- Use correct service for systemd timers</changelog>
  <changelog author="tschmidt@suse.com" date="1519300800">- Do not build for s390 (bsc#1082150)</changelog>
  <changelog author="hschmidt@suse.com" date="1521806400">- Version 0.0.4
- Fix nginx config to point to correct root location
  See: https://github.com/SUSE/rmt/issues/113
- Add message to help output about collecting feedback from users
- Only allow one activation to exist for a given system-service
  combination.
- Update loofah and rails-html-sanitizer gems due to CVEs.
- Add proper foreign key constraints where applicable.</changelog>
  <changelog author="hschmidt@suse.com" date="1523016000">- Add the offline migration endpoint for upgrading major SLES versions.
  https://github.com/SUSE/rmt/pull/121
- Use the recommended systemd service type ("simple" instead of
  "forking").
  https://github.com/SUSE/rmt/pull/129
- Don't create a local licenses directory if the repo has no licenses.
  Closes bsc#1087707.
  https://github.com/SUSE/rmt/pull/126
- Don't allow duplicate activations to exist in the DB.
  https://github.com/SUSE/rmt/pull/119</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1523275200">- version 0.0.5
- Allow access to the API only via HTTPS, add directories to store SSL
  keys &amp; certificates, add clientSetup4RMT.sh script
  https://github.com/SUSE/rmt/pull/122</changelog>
  <changelog author="tmuntaner@suse.com" date="1523275201">- Only enable free modules in migrations for SLE 15
  https://github.com/SUSE/rmt/pull/132</changelog>
  <changelog author="skotov@suse.com" date="1524139200">- version 0.0.6
- storing hardware info
  https://github.com/SUSE/rmt/pull/138</changelog>
  <changelog author="tmuntaner@suse.com" date="1524657600">- version 0.0.7
- Fixed offline repository sync with usb (bsc#1089038)
  See: https://github.com/SUSE/rmt/pull/147
- Removed unique index for uuid in HwInfo table
  See: https://github.com/SUSE/rmt/pull/142
- "rmt-cli products enable ..." enables recommended extensions in SLE 15
  See: https://github.com/SUSE/rmt/pull/141
- Added RMT header in requests for Connect API
  See: https://github.com/SUSE/rmt/pull/139</changelog>
  <changelog author="tmuntaner@suse.com" date="1524744000">- Added supportconfig plugin
  See: https://github.com/SUSE/rmt/pull/146
- Rename organizations_products.json to organizations_products_unscoped.json (fixes bsc#1088687)
  See: https://github.com/SUSE/rmt/pull/151
- Improved log formatting in journald
  See: https://github.com/SUSE/rmt/pull/145</changelog>
  <changelog author="tmuntaner@suse.com" date="1525348800">- Removed ability to change user/group through configuration (GH-144)
  See: https://github.com/SUSE/rmt/pull/154</changelog>
  <changelog author="skotov@suse.com" date="1525348801">- Added lockfile feature for mirror, sync &amp; import commands</changelog>
  <changelog author="skotov@suse.com" date="1525694400">- Lockfile handling with File#flock
  See: https://github.com/SUSE/rmt/pull/157</changelog>
  <changelog author="tmuntaner@suse.com" date="1525694401">- RMT server binds to 127.0.0.1, not 0.0.0.0
  See: https://github.com/SUSE/rmt/pull/158</changelog>
  <changelog author="tmuntaner@suse.com" date="1525780800">- Rename of service files
  rmt.service -&gt; rmt-server.service
  rmt-migration.service -&gt; rmt-server-migration.service
  See: https://github.com/SUSE/rmt/pull/159</changelog>
  <changelog author="wstephenson@suse.com" date="1525867200">- Show custom repositories and product bindings in supportconfig
  plugin output
- Add CSV output option
  See: https://github.com/SUSE/rmt/pull/158</changelog>
  <changelog author="hschmidt@suse.com" date="1526040000">- Don't check if a product has repos and that they are mirrored
  when deactivating.
  See: https://github.com/SUSE/rmt/pull/168</changelog>
  <changelog author="skotov@suse.com" date="1526644800">- Bump version to 1.0.0 (bsc#1093879)
- Make rmt-server recommend yast2-rmt
- Add the post-install message about running yast2-rmt
- Add new script rmt-data-import for migration from SMT to RMT
- Split off usage instruction into MANUAL.md
- Squash migrations into one
- Small improvements on CLI responses
- Rename clientSetup4RMT.sh =&gt; rmt-client-setup
- Add use-ruby-2.5-in-rmt-data-import.patch</changelog>
  <changelog author="wstephenson@suse.com" date="1527854400">- Version 1.0.1
- Use curl instead of wget in rmt-client-setup (bsc#1094348)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1529409600">- Version 1.0.2
- Improved handling of errors during mirroring (bsc#1096967)
- Set correct permissions for product.license directory (bsc#1097367)
- Log version on service startup</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1530100800">- Version 1.0.3
- Fix duplicate migration paths (bsc#1097824)</changelog>
</package>
<package pkgid="82283a3827ad740e7753a614dfd4e05af5a27fb7edde85c936b861b140560f22" name="rmt-server" arch="x86_64">
  <version epoch="0" ver="1.0.3" rel="lp150.2.6.1"/>
  <changelog author="tmuntaner@suse.com" date="1518782400">- Use correct service for systemd timers</changelog>
  <changelog author="tschmidt@suse.com" date="1519300800">- Do not build for s390 (bsc#1082150)</changelog>
  <changelog author="hschmidt@suse.com" date="1521806400">- Version 0.0.4
- Fix nginx config to point to correct root location
  See: https://github.com/SUSE/rmt/issues/113
- Add message to help output about collecting feedback from users
- Only allow one activation to exist for a given system-service
  combination.
- Update loofah and rails-html-sanitizer gems due to CVEs.
- Add proper foreign key constraints where applicable.</changelog>
  <changelog author="hschmidt@suse.com" date="1523016000">- Add the offline migration endpoint for upgrading major SLES versions.
  https://github.com/SUSE/rmt/pull/121
- Use the recommended systemd service type ("simple" instead of
  "forking").
  https://github.com/SUSE/rmt/pull/129
- Don't create a local licenses directory if the repo has no licenses.
  Closes bsc#1087707.
  https://github.com/SUSE/rmt/pull/126
- Don't allow duplicate activations to exist in the DB.
  https://github.com/SUSE/rmt/pull/119</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1523275200">- version 0.0.5
- Allow access to the API only via HTTPS, add directories to store SSL
  keys &amp; certificates, add clientSetup4RMT.sh script
  https://github.com/SUSE/rmt/pull/122</changelog>
  <changelog author="tmuntaner@suse.com" date="1523275201">- Only enable free modules in migrations for SLE 15
  https://github.com/SUSE/rmt/pull/132</changelog>
  <changelog author="skotov@suse.com" date="1524139200">- version 0.0.6
- storing hardware info
  https://github.com/SUSE/rmt/pull/138</changelog>
  <changelog author="tmuntaner@suse.com" date="1524657600">- version 0.0.7
- Fixed offline repository sync with usb (bsc#1089038)
  See: https://github.com/SUSE/rmt/pull/147
- Removed unique index for uuid in HwInfo table
  See: https://github.com/SUSE/rmt/pull/142
- "rmt-cli products enable ..." enables recommended extensions in SLE 15
  See: https://github.com/SUSE/rmt/pull/141
- Added RMT header in requests for Connect API
  See: https://github.com/SUSE/rmt/pull/139</changelog>
  <changelog author="tmuntaner@suse.com" date="1524744000">- Added supportconfig plugin
  See: https://github.com/SUSE/rmt/pull/146
- Rename organizations_products.json to organizations_products_unscoped.json (fixes bsc#1088687)
  See: https://github.com/SUSE/rmt/pull/151
- Improved log formatting in journald
  See: https://github.com/SUSE/rmt/pull/145</changelog>
  <changelog author="tmuntaner@suse.com" date="1525348800">- Removed ability to change user/group through configuration (GH-144)
  See: https://github.com/SUSE/rmt/pull/154</changelog>
  <changelog author="skotov@suse.com" date="1525348801">- Added lockfile feature for mirror, sync &amp; import commands</changelog>
  <changelog author="skotov@suse.com" date="1525694400">- Lockfile handling with File#flock
  See: https://github.com/SUSE/rmt/pull/157</changelog>
  <changelog author="tmuntaner@suse.com" date="1525694401">- RMT server binds to 127.0.0.1, not 0.0.0.0
  See: https://github.com/SUSE/rmt/pull/158</changelog>
  <changelog author="tmuntaner@suse.com" date="1525780800">- Rename of service files
  rmt.service -&gt; rmt-server.service
  rmt-migration.service -&gt; rmt-server-migration.service
  See: https://github.com/SUSE/rmt/pull/159</changelog>
  <changelog author="wstephenson@suse.com" date="1525867200">- Show custom repositories and product bindings in supportconfig
  plugin output
- Add CSV output option
  See: https://github.com/SUSE/rmt/pull/158</changelog>
  <changelog author="hschmidt@suse.com" date="1526040000">- Don't check if a product has repos and that they are mirrored
  when deactivating.
  See: https://github.com/SUSE/rmt/pull/168</changelog>
  <changelog author="skotov@suse.com" date="1526644800">- Bump version to 1.0.0 (bsc#1093879)
- Make rmt-server recommend yast2-rmt
- Add the post-install message about running yast2-rmt
- Add new script rmt-data-import for migration from SMT to RMT
- Split off usage instruction into MANUAL.md
- Squash migrations into one
- Small improvements on CLI responses
- Rename clientSetup4RMT.sh =&gt; rmt-client-setup
- Add use-ruby-2.5-in-rmt-data-import.patch</changelog>
  <changelog author="wstephenson@suse.com" date="1527854400">- Version 1.0.1
- Use curl instead of wget in rmt-client-setup (bsc#1094348)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1529409600">- Version 1.0.2
- Improved handling of errors during mirroring (bsc#1096967)
- Set correct permissions for product.license directory (bsc#1097367)
- Log version on service startup</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1530100800">- Version 1.0.3
- Fix duplicate migration paths (bsc#1097824)</changelog>
</package>
<package pkgid="fce663955d67ab447dcd27e444243c8beeffd8f296d70f77e430c2da1527fa53" name="rpm-32bit" arch="x86_64">
  <version epoch="0" ver="4.14.1" rel="lp150.9.3.1"/>
  <changelog author="rguenther@suse.com" date="1516622400">- fix debugedit relocation offset computation (boo#1076819)
  new patch: debugedit-bnc1076819.diff</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1
  * Fix arbitrary code execution when evaluating common
    python-related macros
  * new artifact file marker
  * less strict signature header verification [bnc#1078284]
- dropped patches:
  * bigarchive.diff
  * editdwarf.diff
  * hardlink.diff
  * rofs.diff
  * transfiletriggerpostun.diff</changelog>
  <changelog author="mls@suse.de" date="1517832000">- remove shebang from python-macro-helper</changelog>
  <changelog author="dimstar@opensuse.org" date="1518004800">- Update %remove_and_set: This macro needs no fallback to
  /var/adm/fillup-templates, as it does not work on files provided
  by the packages, but rather constructs temporary files inside
  fillup_dir.</changelog>
  <changelog author="msuchanek@suse.com" date="1518004801">- Use ksym-provides tool (bsc#1077692).</changelog>
  <changelog author="mls@suse.de" date="1518609600">- change disk usage handling to take hardlinks into account
  [bnc#720150]
  new patch: hardlinks.diff</changelog>
  <changelog author="schwab@suse.de" date="1518696000">- auto-config-update-aarch64-ppc64le.diff: Update for riscv64 and enable
  it there</changelog>
  <changelog author="mls@suse.de" date="1519300800">- split riscv64 part from auto-config-update-aarch64-ppc64le.diff
  to make the change rust-proof.
  new patch: auto-config-update-riscv64.diff</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1519905600">- remove no longer needed and now harmful extcond patch
  [bnc#1083539]
  dropped patch: extcond.diff</changelog>
  <changelog author="schwab@suse.de" date="1520251200">- handle RISC-V relocation in debugedit
  new patch: debugedit-riscv.patch</changelog>
  <changelog author="mls@suse.de" date="1522152000">- do not use the source date epoch as buildtime by default
  [bnc#1087065]
  new patch: source_date_epoch_buildtime.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1523016000">- %install_info: if we are going to fail, at least fail on install
  not on attempted upgrades or uninstall [bsc#1084997]</changelog>
  <changelog author="mliska@suse.cz" date="1524052800">- Enable -fprofile-update=atomic for PGO (boo#1040589).</changelog>
  <changelog author="mls@suse.de" date="1524139200">- move -fprofile-update=atomic before -fprofile-generate</changelog>
  <changelog author="mls@suse.de" date="1525694400">- Disable debuginfo dwz compression for baselibs packages
  [bnc#1092189]</changelog>
  <changelog author="msuchanek@suse.com" date="1527681600">- openSUSE releases also preserve kabi (boo#1095148).</changelog>
  <changelog author="mls@suse.de" date="1528718400">- Define sle_version in leap [bnc#1094735]</changelog>
  <changelog author="mls@suse.de" date="1529064000">- really fix symlink attacks on rpm install [bnc#943457]
  [CVE-2017-7500]
  new patch: safesymlinks.diff
- backport removal of user/group duplicate detection in verify
  new patch: verifynodup.diff</changelog>
  <changelog author="msuchanek@suse.com" date="1529064001">- Add kernel export provides on openSUSE (boo#1095148).</changelog>
</package>
<package pkgid="9c2f765dfe2d67ef9e065a9ec9101c95cc9fc7b39e73475d11ed87cb810e2ba7" name="rpm" arch="src">
  <version epoch="0" ver="4.14.1" rel="lp150.9.3.1"/>
  <changelog author="rguenther@suse.com" date="1516622400">- fix debugedit relocation offset computation (boo#1076819)
  new patch: debugedit-bnc1076819.diff</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1
  * Fix arbitrary code execution when evaluating common
    python-related macros
  * new artifact file marker
  * less strict signature header verification [bnc#1078284]
- dropped patches:
  * bigarchive.diff
  * editdwarf.diff
  * hardlink.diff
  * rofs.diff
  * transfiletriggerpostun.diff</changelog>
  <changelog author="mls@suse.de" date="1517832000">- remove shebang from python-macro-helper</changelog>
  <changelog author="dimstar@opensuse.org" date="1518004800">- Update %remove_and_set: This macro needs no fallback to
  /var/adm/fillup-templates, as it does not work on files provided
  by the packages, but rather constructs temporary files inside
  fillup_dir.</changelog>
  <changelog author="msuchanek@suse.com" date="1518004801">- Use ksym-provides tool (bsc#1077692).</changelog>
  <changelog author="mls@suse.de" date="1518609600">- change disk usage handling to take hardlinks into account
  [bnc#720150]
  new patch: hardlinks.diff</changelog>
  <changelog author="schwab@suse.de" date="1518696000">- auto-config-update-aarch64-ppc64le.diff: Update for riscv64 and enable
  it there</changelog>
  <changelog author="mls@suse.de" date="1519300800">- split riscv64 part from auto-config-update-aarch64-ppc64le.diff
  to make the change rust-proof.
  new patch: auto-config-update-riscv64.diff</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1519905600">- remove no longer needed and now harmful extcond patch
  [bnc#1083539]
  dropped patch: extcond.diff</changelog>
  <changelog author="schwab@suse.de" date="1520251200">- handle RISC-V relocation in debugedit
  new patch: debugedit-riscv.patch</changelog>
  <changelog author="mls@suse.de" date="1522152000">- do not use the source date epoch as buildtime by default
  [bnc#1087065]
  new patch: source_date_epoch_buildtime.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1523016000">- %install_info: if we are going to fail, at least fail on install
  not on attempted upgrades or uninstall [bsc#1084997]</changelog>
  <changelog author="mliska@suse.cz" date="1524052800">- Enable -fprofile-update=atomic for PGO (boo#1040589).</changelog>
  <changelog author="mls@suse.de" date="1524139200">- move -fprofile-update=atomic before -fprofile-generate</changelog>
  <changelog author="mls@suse.de" date="1525694400">- Disable debuginfo dwz compression for baselibs packages
  [bnc#1092189]</changelog>
  <changelog author="msuchanek@suse.com" date="1527681600">- openSUSE releases also preserve kabi (boo#1095148).</changelog>
  <changelog author="mls@suse.de" date="1528718400">- Define sle_version in leap [bnc#1094735]</changelog>
  <changelog author="mls@suse.de" date="1529064000">- really fix symlink attacks on rpm install [bnc#943457]
  [CVE-2017-7500]
  new patch: safesymlinks.diff
- backport removal of user/group duplicate detection in verify
  new patch: verifynodup.diff</changelog>
  <changelog author="msuchanek@suse.com" date="1529064001">- Add kernel export provides on openSUSE (boo#1095148).</changelog>
</package>
<package pkgid="3cc2a5c7cf8f928f9a6f7e2286e6e1c31637e672b40e8c0c9847386af7a17e5d" name="rpm" arch="x86_64">
  <version epoch="0" ver="4.14.1" rel="lp150.9.3.1"/>
  <changelog author="rguenther@suse.com" date="1516622400">- fix debugedit relocation offset computation (boo#1076819)
  new patch: debugedit-bnc1076819.diff</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1
  * Fix arbitrary code execution when evaluating common
    python-related macros
  * new artifact file marker
  * less strict signature header verification [bnc#1078284]
- dropped patches:
  * bigarchive.diff
  * editdwarf.diff
  * hardlink.diff
  * rofs.diff
  * transfiletriggerpostun.diff</changelog>
  <changelog author="mls@suse.de" date="1517832000">- remove shebang from python-macro-helper</changelog>
  <changelog author="dimstar@opensuse.org" date="1518004800">- Update %remove_and_set: This macro needs no fallback to
  /var/adm/fillup-templates, as it does not work on files provided
  by the packages, but rather constructs temporary files inside
  fillup_dir.</changelog>
  <changelog author="msuchanek@suse.com" date="1518004801">- Use ksym-provides tool (bsc#1077692).</changelog>
  <changelog author="mls@suse.de" date="1518609600">- change disk usage handling to take hardlinks into account
  [bnc#720150]
  new patch: hardlinks.diff</changelog>
  <changelog author="schwab@suse.de" date="1518696000">- auto-config-update-aarch64-ppc64le.diff: Update for riscv64 and enable
  it there</changelog>
  <changelog author="mls@suse.de" date="1519300800">- split riscv64 part from auto-config-update-aarch64-ppc64le.diff
  to make the change rust-proof.
  new patch: auto-config-update-riscv64.diff</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1519905600">- remove no longer needed and now harmful extcond patch
  [bnc#1083539]
  dropped patch: extcond.diff</changelog>
  <changelog author="schwab@suse.de" date="1520251200">- handle RISC-V relocation in debugedit
  new patch: debugedit-riscv.patch</changelog>
  <changelog author="mls@suse.de" date="1522152000">- do not use the source date epoch as buildtime by default
  [bnc#1087065]
  new patch: source_date_epoch_buildtime.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1523016000">- %install_info: if we are going to fail, at least fail on install
  not on attempted upgrades or uninstall [bsc#1084997]</changelog>
  <changelog author="mliska@suse.cz" date="1524052800">- Enable -fprofile-update=atomic for PGO (boo#1040589).</changelog>
  <changelog author="mls@suse.de" date="1524139200">- move -fprofile-update=atomic before -fprofile-generate</changelog>
  <changelog author="mls@suse.de" date="1525694400">- Disable debuginfo dwz compression for baselibs packages
  [bnc#1092189]</changelog>
  <changelog author="msuchanek@suse.com" date="1527681600">- openSUSE releases also preserve kabi (boo#1095148).</changelog>
  <changelog author="mls@suse.de" date="1528718400">- Define sle_version in leap [bnc#1094735]</changelog>
  <changelog author="mls@suse.de" date="1529064000">- really fix symlink attacks on rpm install [bnc#943457]
  [CVE-2017-7500]
  new patch: safesymlinks.diff
- backport removal of user/group duplicate detection in verify
  new patch: verifynodup.diff</changelog>
  <changelog author="msuchanek@suse.com" date="1529064001">- Add kernel export provides on openSUSE (boo#1095148).</changelog>
</package>
<package pkgid="b50e771e64ac8e5f7f122c33f05b305b13fa6f92d058cf0f306bb2aba0850180" name="rpm-build" arch="x86_64">
  <version epoch="0" ver="4.14.1" rel="lp150.9.3.1"/>
  <changelog author="rguenther@suse.com" date="1516622400">- fix debugedit relocation offset computation (boo#1076819)
  new patch: debugedit-bnc1076819.diff</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1
  * Fix arbitrary code execution when evaluating common
    python-related macros
  * new artifact file marker
  * less strict signature header verification [bnc#1078284]
- dropped patches:
  * bigarchive.diff
  * editdwarf.diff
  * hardlink.diff
  * rofs.diff
  * transfiletriggerpostun.diff</changelog>
  <changelog author="mls@suse.de" date="1517832000">- remove shebang from python-macro-helper</changelog>
  <changelog author="dimstar@opensuse.org" date="1518004800">- Update %remove_and_set: This macro needs no fallback to
  /var/adm/fillup-templates, as it does not work on files provided
  by the packages, but rather constructs temporary files inside
  fillup_dir.</changelog>
  <changelog author="msuchanek@suse.com" date="1518004801">- Use ksym-provides tool (bsc#1077692).</changelog>
  <changelog author="mls@suse.de" date="1518609600">- change disk usage handling to take hardlinks into account
  [bnc#720150]
  new patch: hardlinks.diff</changelog>
  <changelog author="schwab@suse.de" date="1518696000">- auto-config-update-aarch64-ppc64le.diff: Update for riscv64 and enable
  it there</changelog>
  <changelog author="mls@suse.de" date="1519300800">- split riscv64 part from auto-config-update-aarch64-ppc64le.diff
  to make the change rust-proof.
  new patch: auto-config-update-riscv64.diff</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1519905600">- remove no longer needed and now harmful extcond patch
  [bnc#1083539]
  dropped patch: extcond.diff</changelog>
  <changelog author="schwab@suse.de" date="1520251200">- handle RISC-V relocation in debugedit
  new patch: debugedit-riscv.patch</changelog>
  <changelog author="mls@suse.de" date="1522152000">- do not use the source date epoch as buildtime by default
  [bnc#1087065]
  new patch: source_date_epoch_buildtime.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1523016000">- %install_info: if we are going to fail, at least fail on install
  not on attempted upgrades or uninstall [bsc#1084997]</changelog>
  <changelog author="mliska@suse.cz" date="1524052800">- Enable -fprofile-update=atomic for PGO (boo#1040589).</changelog>
  <changelog author="mls@suse.de" date="1524139200">- move -fprofile-update=atomic before -fprofile-generate</changelog>
  <changelog author="mls@suse.de" date="1525694400">- Disable debuginfo dwz compression for baselibs packages
  [bnc#1092189]</changelog>
  <changelog author="msuchanek@suse.com" date="1527681600">- openSUSE releases also preserve kabi (boo#1095148).</changelog>
  <changelog author="mls@suse.de" date="1528718400">- Define sle_version in leap [bnc#1094735]</changelog>
  <changelog author="mls@suse.de" date="1529064000">- really fix symlink attacks on rpm install [bnc#943457]
  [CVE-2017-7500]
  new patch: safesymlinks.diff
- backport removal of user/group duplicate detection in verify
  new patch: verifynodup.diff</changelog>
  <changelog author="msuchanek@suse.com" date="1529064001">- Add kernel export provides on openSUSE (boo#1095148).</changelog>
</package>
<package pkgid="228a1ecd014fdfa7dfe83f582f8a1b564b911c996b2c8d1f7405fc85d8ca9cf2" name="rpm-devel" arch="x86_64">
  <version epoch="0" ver="4.14.1" rel="lp150.9.3.1"/>
  <changelog author="rguenther@suse.com" date="1516622400">- fix debugedit relocation offset computation (boo#1076819)
  new patch: debugedit-bnc1076819.diff</changelog>
  <changelog author="mls@suse.de" date="1517400000">- update to rpm-4.14.1
  * Fix arbitrary code execution when evaluating common
    python-related macros
  * new artifact file marker
  * less strict signature header verification [bnc#1078284]
- dropped patches:
  * bigarchive.diff
  * editdwarf.diff
  * hardlink.diff
  * rofs.diff
  * transfiletriggerpostun.diff</changelog>
  <changelog author="mls@suse.de" date="1517832000">- remove shebang from python-macro-helper</changelog>
  <changelog author="dimstar@opensuse.org" date="1518004800">- Update %remove_and_set: This macro needs no fallback to
  /var/adm/fillup-templates, as it does not work on files provided
  by the packages, but rather constructs temporary files inside
  fillup_dir.</changelog>
  <changelog author="msuchanek@suse.com" date="1518004801">- Use ksym-provides tool (bsc#1077692).</changelog>
  <changelog author="mls@suse.de" date="1518609600">- change disk usage handling to take hardlinks into account
  [bnc#720150]
  new patch: hardlinks.diff</changelog>
  <changelog author="schwab@suse.de" date="1518696000">- auto-config-update-aarch64-ppc64le.diff: Update for riscv64 and enable
  it there</changelog>
  <changelog author="mls@suse.de" date="1519300800">- split riscv64 part from auto-config-update-aarch64-ppc64le.diff
  to make the change rust-proof.
  new patch: auto-config-update-riscv64.diff</changelog>
  <changelog author="fvogt@suse.com" date="1519300801">- Use %license (boo#1082318)</changelog>
  <changelog author="mls@suse.de" date="1519905600">- remove no longer needed and now harmful extcond patch
  [bnc#1083539]
  dropped patch: extcond.diff</changelog>
  <changelog author="schwab@suse.de" date="1520251200">- handle RISC-V relocation in debugedit
  new patch: debugedit-riscv.patch</changelog>
  <changelog author="mls@suse.de" date="1522152000">- do not use the source date epoch as buildtime by default
  [bnc#1087065]
  new patch: source_date_epoch_buildtime.diff</changelog>
  <changelog author="adam.majer@suse.de" date="1523016000">- %install_info: if we are going to fail, at least fail on install
  not on attempted upgrades or uninstall [bsc#1084997]</changelog>
  <changelog author="mliska@suse.cz" date="1524052800">- Enable -fprofile-update=atomic for PGO (boo#1040589).</changelog>
  <changelog author="mls@suse.de" date="1524139200">- move -fprofile-update=atomic before -fprofile-generate</changelog>
  <changelog author="mls@suse.de" date="1525694400">- Disable debuginfo dwz compression for baselibs packages
  [bnc#1092189]</changelog>
  <changelog author="msuchanek@suse.com" date="1527681600">- openSUSE releases also preserve kabi (boo#1095148).</changelog>
  <changelog author="mls@suse.de" date="1528718400">- Define sle_version in leap [bnc#1094735]</changelog>
  <changelog author="mls@suse.de" date="1529064000">- really fix symlink attacks on rpm install [bnc#943457]
  [CVE-2017-7500]
  new patch: safesymlinks.diff
- backport removal of user/group duplicate detection in verify
  new patch: verifynodup.diff</changelog>
  <changelog author="msuchanek@suse.com" date="1529064001">- Add kernel export provides on openSUSE (boo#1095148).</changelog>
</package>
<package pkgid="8e667f4845c772c3cac20a732198af4eef4feaddbe3ea696fb55fc39f375266d" name="rsyslog" arch="src">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="4608925ee3ce420b1b170741bbe0d36d88a03c76973d6b2607466f2d8ccf2cec" name="rsyslog" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="574135b2c0e624e95af42df428df8b4c93da052bdca7844dd1692b21655c36f5" name="rsyslog-diag-tools" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="3e193de505c76437bfa258d6d6800e76a0632b3463559d64876649411b584fc7" name="rsyslog-doc" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="805db5291f7056ac3f3bdf2ae5953ee61c33ff7790a45d8b3abe55750d9dd4c9" name="rsyslog-module-dbi" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="d9cc1525368b651c7a43860e3c81e834c8b05bfcf8ba790ef1905b61268afc1d" name="rsyslog-module-elasticsearch" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="8ce70bb1179d741d52e4ca711e6e2f264ac8c35ba828d2d3303ff651976a8f6c" name="rsyslog-module-gcrypt" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="325ba497dd7d0eb04058cfbbf123f2af43b6e99cf0d2a1b9e6271fe1d30fb895" name="rsyslog-module-gssapi" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="3c9b7f10b08af36a7ac65c74b46a9700cfa90a5b2ac6eefeea32627dec9bb3f7" name="rsyslog-module-gtls" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="24736a0b5ec16fb041bd2ceaa7872cdfb694e47f8e2a540d7fb8f3dc05723eff" name="rsyslog-module-mmnormalize" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="40fbb2251fb5ba36dc4ccf6a024e6aa935144b35636904949a502025b02ab485" name="rsyslog-module-mysql" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="0275e00f9832fd898afaa86508c148fdaf08fc1e30f8e122b2ff974b4a87c7cf" name="rsyslog-module-omamqp1" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="619398782212aab5985d8a3955fcaac40eae9d3af99e9c7ec20071ca9da76913" name="rsyslog-module-omhttpfs" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="36fc65f8deefed79bbf30efd63b3de2989e4b53d51dcd40800706f557ea6ef7e" name="rsyslog-module-omtcl" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="0a452348a2729b7485f4d7627e26a717888adf14a18894365f229036eb6dc650" name="rsyslog-module-pgsql" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="66c63dee27e20ddde8e68ea6138db66f4c26b11c203bad33997ca48f3edcbf45" name="rsyslog-module-relp" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="bb049aa3cec6cea1f4f404b56a1536a07db179bdf94e7bc6bbcf8ff362d846da" name="rsyslog-module-snmp" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="c484471d1a8eec5b1693a13baef0694f6ddc7a76084cb58de6e8db4fd2c466dd" name="rsyslog-module-udpspoof" arch="x86_64">
  <version epoch="0" ver="8.33.1" rel="lp150.2.3.2"/>
  <changelog author="dimstar@opensuse.org" date="1481544000">- Replace pkgconfig(libsystemd-journal) BuildRequires with
  pkgconfig(libsystemd): the sub-libraries have been merged into
  libsystemd since 209 and have ultimately been removed since 230.</changelog>
  <changelog author="astieger@suse.com" date="1484481600">- rsyslog 8.24.0(fate#320546):
  * mmrm1stspace: new module; removes first space in MSG if present
  * KSI signature provider: file permissions can now be specified
  * omzmq: new features
  * when the hostname is empty, we now use "localhost-empty-hostname"
  * omelasticsearch: remove "asyncrepl" config parameter
  * omfwd: Add support for bind-to-device (see below on same for imudp)
  * imudp: Add support for bind-to-device
  * imudp: limit rcvbufsize parameter to max 1GiB
  * rainerscript: implement new "call_indirect" statement
  * bugfix imjournal: make state file handling more robust
  * bugfix core: lookup table reload was not properly integrated
  * bugfix core: potential dealock on shutdown
  * bugfix ommongodb: did not work in v8 due to invalid indirection
  * bugfix ommongodb: fix tryResume handling
  * bugfix omfwd: retry processing was not done correctly, could stall
  * bugfix imuxsock: segfault non shutdown when $OmitLocalLogging is on
- contributed modules not enabled due to build issues:
  * mmdblookup: new maxminddb lookup message modify plugin</changelog>
  <changelog author="ndas@suse.com" date="1486728000">- sync bug and fate numbers from IBS changes.</changelog>
  <changelog author="astieger@suse.com" date="1487851200">- rsyslog 8.25.0:
  * imfile: add support for wildcards in directory names
  * add new global option "parser.PermitSlashInProgramname"
  * mmdblookup: fix build issues, code cleanup
  * improved debug output for queue corruption cases
  * an error message is now displayed when a directory owner cannot be set
  * rainerscript: add new function ipv42num
  * rainerscript: add new function num2ipv4
  * bugfix: ratelimiter does not work correctly is time is set back
  * core: fix potential message loss in old-style transactional interface
  * bugfix queue subsystem: queue corrupted if certain msg props are used
  * bugfix imjournal: fixed situation when time goes backwards
  * bugfix: bFlushOnTxEnd == 0 not honored when writing w/o async writer
  * bugfix core: str2num mishandling empty strings
  * bugfix rainerscript: set/unset statement do not check variable name validity
  * bugfix mmrm1stspace: last character of rawmsg property was doubled
  * bugfix imtcp: fix very small (cosmetic) memory leak
  * However, the leak breaks memleak checks in the testbench.</changelog>
  <changelog author="astieger@suse.com" date="1488801600">- use 8.25.0 documentation tarball</changelog>
  <changelog author="astieger@suse.com" date="1491480000">- rsyslog 8.26.0:
  * liblognorm 2.0.3 is required for mmnormalize
  * enable internal error messages at all times
  * core: added logging name of source of rate-limited messages
  * omfwd: omfwd: add support for network namespaces
  * imrelp: honor input name if provided when submitting to impstats
  * imptcp: add ability to set owner/group/access perms for uds
  * mmnormalize: add ability to load a rulebase from action() parameter
  * pmrfc3164 improvements
    + permit to ignore leading space in MSG
    + permit to use at-sign in host names
    + permit to require tag to end in colon
  * add new global parameter "umask"
  * core: make use of -T command line option more secure
  * omfile: add error if both file and dynafile are set
  * bugfix: build problem on MacOS (not a supported platform)
  * regression fix: in 8.25, str2num() returned error on empty string
  * bugfix omsnmp: improper handling of new-style configuration parameters
  * bugfix: rsyslog identifies itself as "liblogging-stdlog" in internal messages
  * bugfix imfile: wrong files were monitored when using multiple imfile inputs
  * bugfix: setting net.aclResolveHostname/net.acladdhostnameonfail segfaults
  * bugfix: immark emitted error messages with text "imuxsock"
  * bugfix tcpflood: build failed if RELP was disabled
  * fix gcc6 compiler warnings
  * the output module array passing interface has been removed</changelog>
  <changelog author="dziolkowski@suse.com" date="1495108800">Version 8.27.0 [v8-stable] 2017-05-16
- imkafka: add module
- imptcp enhancements:
  * optionally emit an error message if incoming messages are truncated
  * optionally emit connection tracking message (on connection create and
    close)
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * improve octect-counted mode detection: if the octet count is larger
    then the set frame size (or overly large in general), it is now
    assumed that octet-stuffing mode is used. This probably solves a
    number of issues seen in real deployments.
- imtcp enhancements:
  * add parameter "discardTruncatedMsg" to permit truncation of
    oversize messages
  * add "maxFrameSize" parameter to specify the maximum size permitted
    in octet-counted mode
- imfile bugfix: "file not found error" repeatedly being reported
  for configured non-existing file. In polling mode, this message
  appeared once in each polling cycle, causing a potentially very large
  amout of error messages. Note that they were usually emitted too
  infrequently to trigger the error message rate limiter, albeit often
  enough to be a major annoance.
- imfile: in inotify mode, add error message if configured file cannot
  be found
- imfile: add parameter "fileNotFoundError" to optinally disable
  "file not found" error messages
- core: replaced gethostbyname() with getaddrinfo() call
  Gethostbyname() is generally considered obsolete, is not reentrant and
  cannot really work with IPv6. Changed the only place in rsyslog where
  this call remained.
  Thanks to github user jvymazal for the patch
- omkafka: add "origin" field to stats output
  See also https://github.com/rsyslog/rsyslog/issues/1508
  Thanks to Yury Bushmelev for providing the patch.
- imuxsock: rate-limiting also uses process name
  both for the actual limit procesing as well as warning messages emitted
  see also https://github.com/rsyslog/rsyslog/pull/1520
  Thanks to github user jvymazal for the patch
- Added new module: KSI log signing ver. 1.2 (lmsig_ksi_ls12)
- rsylsog base functionality now builds on osx (Mac)
  Thanks to github user hdatma for his help in getting this done.
- build now works on solaris again
- imfile: fix cross-platform build issue
  see also https://github.com/rsyslog/rsyslog/issues/1494
  Thanks to Felix Janda for bug report and solution suggestion.
- bugfix core: segfault when no parser could parse message</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Drop module-guardtime package
  * Upstream libgt died and it does not work with new openssl</changelog>
  <changelog author="michael@stroeder.com" date="1501416000">Version 8.28.0 [v8-stable] 2017-06-27
  * omfwd: add parameter "tcp_frameDelimiter"
  * omkafka: large refactor of kafka subsystem
  * imfile: improved handling of atomically renamed file (w/ wildcards)
  * imfile: add capability to truncate oversize messages or split into multiple
  * mmdblookup fixes and extensions
  * bugfix: fixed multiple memory leaks
  * imptcp: add new parameter "flowControl"
  * imrelp: add "maxDataSize" config parameter
  * multiple modules: gtls: improve error if certificate file can't be opened
  * omsnare: allow different tab escapes
  * omelasticsearch: converted to use libfastjson instead of json-c
  * imjournal: _PID fallback
  * added fallback for _PID proprety when SYSLOG_PID is not available
  * introduced new option "usepid" which sets which property should
    rsyslog use, it has 3 states system|syslog|both, default is both
  * deprecated "usepidfromsystem" option, still can be used
    and override the "usepid"
  * it is possible to revert previous default with usepid="syslog"
  * multiple modules: add better error messages when regcomp is failing
  * omhiredis: fix build warnings
  * imfile bugfix: files mv-ed in into directory were not handled
  * omprog bugfix: execve() incorrectly called
  * imfile bugfix: multiline timeout did not work if state file exists
  * lmsig_ksi-ls12 bugfix: build problems on some platforms
  * core bugfix: invalid object type assertion
  * regression fix: local hostname was not always detected properly...
  * bugfix: format security issues in zmq3 modules (bsc#1051798)
  * bugfix build system: add libksi only to those binaries that need it
  * bugfix KSI ls12 components: invalid tree height calculation</changelog>
  <changelog author="astieger@suse.com" date="1502193600">- rsyslog 8.29.0:
  * imptcp: add experimental parameter "multiline"
  * imptcp: framing-related error messages now also indicate remote peer
  * imtcp: framing-related error messages now also indicate remote peer
  * imptcp: add session statistics conunter
  * imtcp: add ability to specify GnuTLS priority string
  * impstats: add new ressoure counter "openfiles"
  * pmnormalize: new parser module
  * core/queue: provide informational messages on thread startup and shutdown
  * omfwd/udp: improve error reporting, depricate maxerrormessages parameter
  * core: add parameters debug.file and debug.whitelist
  * core/net.c: improve UDP socket creation error messages
  * omfwd/udp: add "udp.sendbuf" parameter
  * core: make rsyslog internal message rate-limiter configurable
  * omelasticsearch bugfixes and changed ES5 API support
    + avoid 404 during health check
    + avoid ES5 warnings while sending json
    + bugfix for memomry leak while writing error file
  * imfile bugfix: wildcard detection issue on path wildcards
  * omfwd bugfix: always give reason for suspension
  * omfwd bugfix: configured compression level was not properly used
  * imptcp bugfix: potential socket leak on session shutdown
  * omfwd/omudpspoof bugfix: switch udp client sockets to nonblocking mode
  * imklog: fix permitnonkernelfacility not working
  * impstats bugfix: impstats does not handle HUP
  * core bugfix: segfault after configuration errors
  * core/queue bugfixes
  * lmsig_ksi: removed pre-KSI_LS12 components</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- rsyslog 8.30.0
  * changed behaviour: all variables are now case-insensitive by default
  * core: handle (JSON) variables in case-insensitive way
  * imjournal: made switching to persistent journal in runtime possible
  * mmanon: complete refactor and enhancements
  * imfile: add "fileoffset" metadata
  * RainerScript: add ltrim and rtrim functions
  * core: report module name when suspending action
  * core: add ability to limit number of error messages going to stderr
  * tcpsrv subsystem: improvate clarity of some error messages
  * imptcp: include module name in error msg
  * imtcp: include module name in error msg
  * tls improvement: better error message if certificate file cannot be read
  * omfwd: slightly improved error messages during config parsing
  * ommysql improvements
  * ommysql bugfix: do not duplicate entries on failed transaction
  * imtcp bugfix: parameter priorityString was ignored
  * template/bugfix: invalid template option conflict detection
  * core/actions: fix handling of data-induced errors
  * core/action bugfix: no "action suspended" message during retry processing
  * core/ratelimit bugfix: race can lead to segfault
  * core bugfix: rsyslog aborts if errmsg is generated in early startup
  * core bugfix: informational messages was logged with error severity
  * core bugfix: --enable-debugless build was broken
  * queue bugfix: file write error message was incorrect
  * omrelp bugfix:  segfault when rebindinterval parameter is used
  * omkafka bugfix: invalid load of failedmsg file on startup if disabled
  * kafka bugfix: problem on invalid kafka configuration values
  * imudp bugfix: UDP oversize message not properly handled
  * core bugfix: memory corruption during configuration parsing
  * core bugfix: race on worker thread termination during shutdown
  * omelasticsearch: avoid ES5 warnings while sending json in bulkmode
  * omelasticsearch bugfix: incompatibility with newer ElasticSearch version
  * imptcp bugfix: invalid mutex addressing on some platforms
  * imptcp bugfix: do not accept missing port in legacy listener definition
- build requirements:
  * libfastjson 0.99.7 is now mandatory
  * libsystemd-journal &gt;= 234 is now recommended
- packaging:
  * add upstream build fix 0001-imgssapi-fix-compiler-warnings.patch</changelog>
  <changelog author="astieger@suse.com" date="1510920000">- Ensure user "news" exists - bsc#1068678</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512648000">- Disable news by default, we don't need to clobber all systems
  with this for the very few remaining news servers</changelog>
  <changelog author="rgerhards@adiscon.com" date="1516363200">- remove build dependency on libee</changelog>
  <changelog author="astieger@suse.com" date="1516968000">- rsyslog 8.32.0
  * libfastjson 0.99.8 required
  * libczmq &gt;= 3.0.2 is now required for omczmq
  * libcurl is now needed for rsyslog core
  * rsyslogd: add capability to specify that no pid file shall be written
  * core improvements and bug fixes
  * RainerScript improvements and bug fixes
  * build fixes, including gcc7 fixes
    drop 0001-imgssapi-fix-compiler-warnings.patch
  * various bug fixes in multiple modules</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1519041600">- fix includes for apparmor profile (bsc#1080238)</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- rsyslog 8.33.1:
  * devcontainer: use some more sensible defaults
  * auto-detect if running inside a container (as pid 1)
  * config: add include() script object
  * template: add option to generate json "container"
  * core/template: add format jsonf to constant template entries
  * config: add ability to disable config parameter ("config.enable")
  * script: permit to use environment variables during configuration
  * new global config parameter "shutdown.enable.ctlc"
  * config optimizer: detect totally empty "if" statements and optimize them out
  * template: constant entry can now also be formatted as json field
  * omstdout: support for new-style configuration parameters added
  * core: set TZ on startup if not already set
  * imjournal bugfix: file handle leak during journal rotation
  * lmsig_ksils12 bugfix: dirOwner and dirGroup config was not respected
  * script bugfix: replace() function worked incorrectly in some cases
  * core bugfix: misadressing in external command parser
  * core bugfix: small memory leak in external command parser
  * core bugfix: string not properly terminated when RFC5424 MSGID is used
  * bugfix: strndup() compatibility layer func copies too much
- the upstream systemd unit file was changed to no longer write the
  rsyslog pid, as it is no longer required for tracking under
  systemd (-iNONE). Adjust rsyslog-unit.patch to match.</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1529582400">- fix CVE-2015-3243 rsyslog: some log files are created world-readable
  (bsc#935393)</changelog>
</package>
<package pkgid="d0155f97a2a0b41e00f5a63ee32edea032c3aca9118d71d3debb1ea55ddb1340" name="ruby-solv" arch="x86_64">
  <version epoch="0" ver="0.6.35" rel="lp150.2.3.1"/>
  <changelog author="mls@suse.de" date="1469188800">- also scan /usr/share/metainfo for appdata files [bnc#989830]
- support tri-state product-endoflife [fate#320699]
- take lockstep into account when calculating unneeded packages
- ignore appplication extensions for now in appdata parser
  [bnc#984332]
- add enabled features to solvversion.h
- take disfavors into account when auto-minimizing for recommended
  packages
- change cleandeps code so that it keeps all providers
- make sure that all repos have different names in a testcase
- bump version to 0.6.23</changelog>
  <changelog author="mls@suse.de" date="1478779200">- make testcase_str2solvid work with ignored packages
- improve checks against corrupt rpm
- add SOLVER_FLAG_FOCUS_BEST solver flag
- rework susetags multi-line handling [bnc#1007273]
- build both for python2 and python3
- bump version to 0.6.24</changelog>
  <changelog author="mls@suse.de" date="1486468800">- add SOLVABLE_NAME hack for pool_whatmatchesdep and
  solvable_matchesdep
- add SOLVER_FLAG_STRONG_RECOMMENDS option
- add SOLVER_FLAG_INSTALL_ALSO_UPDATES option
- do not special case release-less provides in sort_by_common_dep
- solver_problemruleinfo2str: return reason why a package is not
  installable
- guard against dirpool_add_dir being called with an illegal
  component id
- reject solv files with bad directories
- bump version to 0.6.25</changelog>
  <changelog author="mls@suse.de" date="1487160000">- export solvable_matchesdep function, as we now use it in
  the bindings [bnc#1025440]
- bump version to 0.6.26</changelog>
  <changelog author="mls@suse.de" date="1493121600">- change queue resize code to use adaptive chunk sizes
- fix potential segfault in testcase_depstr [bnc#1036002]
- fix performance issues with name = md5sum dependencies
  [bnc#1035946]
- improve "forcebest with uninstall" handling
- make dirid handling more robust
- build with libxml2 instead of libexpat
- bump version to 0.6.27</changelog>
  <changelog author="ngompa13@gmail.com" date="1494244800">- Enable bzip2 and xz/lzma compression support
- Enable complex/rich dependencies on distributions with RPM 4.13+
- Simplified CentOS/RHEL conditionals
- Added Mageia conditionals
- Fixed a few spec portability issues</changelog>
  <changelog author="ngompa13@gmail.com" date="1494504000">- Disable bzip2 and xz/lzma compression support for SLE &lt;= 12</changelog>
  <changelog author="ngompa13@gmail.com" date="1495972800">- Enable complex/rich dependencies for CentOS/RHEL 7, matching how
  libsolv is configured there.</changelog>
  <changelog author="mls@suse.de" date="1498824000">- make peace with newer perl versions
- fix memory leak in bindings
- add pool_best_solvables() function
- fix 64bit integer parsing from RPM headers
- bump version to 0.6.28</changelog>
  <changelog author="mls@suse.de" date="1504785600">- expose solver_get_recommendations in bindings
- fix bug in solver_prune_to_highest_prio_per_name resulting in
  bad solver_get_recommendations output
- support 'without' and 'unless' dependencies
- fix yumobs rule generation bug
- Use same heuristic as upstream to determine src rpms
- bump version to 0.6.29</changelog>
  <changelog author="mls@suse.de" date="1508760000">- many fixes and improvements for cleandeps
- support debian packages with xz compressed control.tar
- always create dup rules for "distupgrade" jobs
- use recommends also for ordering packages
- Fix splitprovides handling with addalreadyrecommended turned off
  [bnc#1059065]
- bump version to 0.6.30</changelog>
  <changelog author="jengelh@inai.de" date="1508846400">- Update package descriptions and groups.
  Replace old $RPM_* variables by macros.</changelog>
  <changelog author="mls@suse.de" date="1517400000">- new ENABLE_RPMDB_LIBRPM/ENABLE_RPMPKG_LIBRPM config options
- new pool_set_whatprovides function to change the whatprovides
  data
- much improved selection code
- bump version to 0.6.31</changelog>
  <changelog author="mls@suse.de" date="1518523200">- fixed bug that could make fileconflict detection very slow
  in some cases [bnc#953130]
- bump version to 0.6.32</changelog>
  <changelog author="mls@suse.de" date="1519819200">- fix bad assignment in solution refinement that led
  to a memory leak [bnc#1075978]
- use license tag instead of doc in the spec file [bnc#1082318]
- bump version to 0.6.33</changelog>
  <changelog author="mls@suse.de" date="1519905600">- also use suggests for ordering packages [bnc#1077635]</changelog>
  <changelog author="mls@suse.de" date="1521806400">- make sure product files come from /etc/products.d in fallback
  search [bnc#1086602]
- bump version to 0.6.34</changelog>
  <changelog author="tchvatal@suse.com" date="1531915200">- Sort a bit with spec-cleaner
- Use python/ruby/etc condition names to match what other packages
  do in order to make sure we are enabling/disabling stuff within
  prjcfg
- Silence the source unpacking
- Make sure to execute tests</changelog>
  <changelog author="ngompa13@gmail.com" date="1531915201">- Fix compatibility with Mageia and RH/Fedora</changelog>
  <changelog author="mls@suse.de" date="1533816000">- refactor arch handling
- add support for zstd and zchunk compression
- convert repo2solv.sh script into a binary tool
- bump version to 0.6.35</changelog>
</package>
<package pkgid="0b633e17b4701aa58675f230b055f6a6c95c60bad13c237467449c686a733c3f" name="ruby2.5-rubygem-sprockets" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1429790400">- updated to version 3.0.2
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1430222400">- updated to version 3.0.3
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1431345600">- updated to version 3.1.0
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1433332800">- updated to version 3.2.0
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1439467200">- updated to version 3.3.0
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1440417600">- updated to version 3.3.3
  see installed CHANGELOG.md
  * *3.3.3** (August 21, 2015)
  * Remove more absolute paths from cache contents.
  * *3.3.2** (August 19, 2015)
  * Fix cache contents to use relative paths instead of absolute paths.
  * *3.3.1** (August 15, 2015)
  * Fix legacy Tilt integration when locals is required argument.</changelog>
  <changelog author="coolo@suse.com" date="1441195200">- updated to version 3.3.4
  see installed CHANGELOG.md
  * *3.3.4** (September 1, 2015)
  * Relative cache contents now work with windows.</changelog>
  <changelog author="coolo@suse.com" date="1443268800">- updated to version 3.3.5
  see installed CHANGELOG.md
  * *3.3.5** (September 25, 2015)
  * Fix bug related to absolute path being reintroduced into history cache #141.</changelog>
  <changelog author="coolo@suse.com" date="1444132800">- updated to version 3.4.0
  see installed CHANGELOG.md
  * *3.4.0** (October 5, 2015)
  * Expose method to override the sass cache in the SassProcessor.</changelog>
  <changelog author="coolo@suse.com" date="1448539200">- updated to version 3.4.1
  see installed CHANGELOG.md
  * *3.4.1** (November 25, 2015)
  * PathUtils::Entries will no longer error on an empty directory.</changelog>
  <changelog author="coolo@suse.com" date="1449230400">- updated to version 3.5.0
  see installed CHANGELOG.md
  * *Master**
  * *3.5.0** (December 3, 2015)
  * Reintroduce Gzip file generation for non-binary assets.</changelog>
  <changelog author="coolo@suse.com" date="1449576000">- updated to version 3.5.1
  see installed CHANGELOG.md
  * *3.5.1** (December 5, 2015)
  * Fix gzip asset generation for assets already on disk.</changelog>
  <changelog author="coolo@suse.com" date="1449921600">- updated to version 3.5.2
  see installed CHANGELOG.md
  * *3.5.2** (December 8, 2015)
  * Fix JRuby bug with concurrent-ruby.
  * Fix disabling gzip generation in cached environments.</changelog>
  <changelog author="coolo@suse.com" date="1460030400">- updated to version 3.6.0
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1466251200">- updated to version 3.6.1
  see installed CHANGELOG.md
  * *3.6.1** (June 17, 2016)
  * Some performance improvements.</changelog>
  <changelog author="coolo@suse.com" date="1467201600">- updated to version 3.6.2
  see installed CHANGELOG.md
  * *3.6.2** (June 21, 2016)
  * More performance improvements.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to version 3.6.3
  see installed CHANGELOG.md
  * *3.6.3** (July 1, 2016)
  * Faster asset lookup in large directories #336
  * Faster PathUtils.match_path_extname https://github.com/rails/sprockets/commit/697269cf81e5261fdd7072e32bd489403027fd7e
  * Fixed uglifier comment stripping #326
  * Error messages now show load path info #313</changelog>
  <changelog author="coolo@suse.com" date="1469275200">- updated to version 3.7.0
  see installed CHANGELOG.md
  * * 3.7.0** (July 21, 2016)
  * Deprecated interfaces now emit deprecation warnings #345</changelog>
  <changelog author="coolo@suse.com" date="1482235200">- updated to version 3.7.1
  see installed CHANGELOG.md</changelog>
  <changelog author="factory-auto@kulow.org" date="1529409600">- updated to version 3.7.2
  see installed CHANGELOG.md
  * *3.7.2** (June 19, 2018)
  * Security release for [CVE-2018-3760](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3760).
  (bsc#1098369)</changelog>
</package>
<package pkgid="ce145a40984768b9f022296326c956caedd87c7e9dc3e85b92348de30679fa4f" name="ruby2.5-rubygem-sprockets-doc" arch="x86_64">
  <version epoch="0" ver="3.7.2" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1429790400">- updated to version 3.0.2
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1430222400">- updated to version 3.0.3
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1431345600">- updated to version 3.1.0
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1433332800">- updated to version 3.2.0
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1439467200">- updated to version 3.3.0
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1440417600">- updated to version 3.3.3
  see installed CHANGELOG.md
  * *3.3.3** (August 21, 2015)
  * Remove more absolute paths from cache contents.
  * *3.3.2** (August 19, 2015)
  * Fix cache contents to use relative paths instead of absolute paths.
  * *3.3.1** (August 15, 2015)
  * Fix legacy Tilt integration when locals is required argument.</changelog>
  <changelog author="coolo@suse.com" date="1441195200">- updated to version 3.3.4
  see installed CHANGELOG.md
  * *3.3.4** (September 1, 2015)
  * Relative cache contents now work with windows.</changelog>
  <changelog author="coolo@suse.com" date="1443268800">- updated to version 3.3.5
  see installed CHANGELOG.md
  * *3.3.5** (September 25, 2015)
  * Fix bug related to absolute path being reintroduced into history cache #141.</changelog>
  <changelog author="coolo@suse.com" date="1444132800">- updated to version 3.4.0
  see installed CHANGELOG.md
  * *3.4.0** (October 5, 2015)
  * Expose method to override the sass cache in the SassProcessor.</changelog>
  <changelog author="coolo@suse.com" date="1448539200">- updated to version 3.4.1
  see installed CHANGELOG.md
  * *3.4.1** (November 25, 2015)
  * PathUtils::Entries will no longer error on an empty directory.</changelog>
  <changelog author="coolo@suse.com" date="1449230400">- updated to version 3.5.0
  see installed CHANGELOG.md
  * *Master**
  * *3.5.0** (December 3, 2015)
  * Reintroduce Gzip file generation for non-binary assets.</changelog>
  <changelog author="coolo@suse.com" date="1449576000">- updated to version 3.5.1
  see installed CHANGELOG.md
  * *3.5.1** (December 5, 2015)
  * Fix gzip asset generation for assets already on disk.</changelog>
  <changelog author="coolo@suse.com" date="1449921600">- updated to version 3.5.2
  see installed CHANGELOG.md
  * *3.5.2** (December 8, 2015)
  * Fix JRuby bug with concurrent-ruby.
  * Fix disabling gzip generation in cached environments.</changelog>
  <changelog author="coolo@suse.com" date="1460030400">- updated to version 3.6.0
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1466251200">- updated to version 3.6.1
  see installed CHANGELOG.md
  * *3.6.1** (June 17, 2016)
  * Some performance improvements.</changelog>
  <changelog author="coolo@suse.com" date="1467201600">- updated to version 3.6.2
  see installed CHANGELOG.md
  * *3.6.2** (June 21, 2016)
  * More performance improvements.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to version 3.6.3
  see installed CHANGELOG.md
  * *3.6.3** (July 1, 2016)
  * Faster asset lookup in large directories #336
  * Faster PathUtils.match_path_extname https://github.com/rails/sprockets/commit/697269cf81e5261fdd7072e32bd489403027fd7e
  * Fixed uglifier comment stripping #326
  * Error messages now show load path info #313</changelog>
  <changelog author="coolo@suse.com" date="1469275200">- updated to version 3.7.0
  see installed CHANGELOG.md
  * * 3.7.0** (July 21, 2016)
  * Deprecated interfaces now emit deprecation warnings #345</changelog>
  <changelog author="coolo@suse.com" date="1482235200">- updated to version 3.7.1
  see installed CHANGELOG.md</changelog>
  <changelog author="factory-auto@kulow.org" date="1529409600">- updated to version 3.7.2
  see installed CHANGELOG.md
  * *3.7.2** (June 19, 2018)
  * Security release for [CVE-2018-3760](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3760).
  (bsc#1098369)</changelog>
</package>
<package pkgid="722f86c4d8f46d1be4eb266bafa55711fe49373d4b666868d6ded1851e5b12d4" name="rubygem-sprockets" arch="src">
  <version epoch="0" ver="3.7.2" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.com" date="1429790400">- updated to version 3.0.2
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1430222400">- updated to version 3.0.3
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1431345600">- updated to version 3.1.0
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1433332800">- updated to version 3.2.0
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1439467200">- updated to version 3.3.0
  no changelog found</changelog>
  <changelog author="coolo@suse.com" date="1440417600">- updated to version 3.3.3
  see installed CHANGELOG.md
  * *3.3.3** (August 21, 2015)
  * Remove more absolute paths from cache contents.
  * *3.3.2** (August 19, 2015)
  * Fix cache contents to use relative paths instead of absolute paths.
  * *3.3.1** (August 15, 2015)
  * Fix legacy Tilt integration when locals is required argument.</changelog>
  <changelog author="coolo@suse.com" date="1441195200">- updated to version 3.3.4
  see installed CHANGELOG.md
  * *3.3.4** (September 1, 2015)
  * Relative cache contents now work with windows.</changelog>
  <changelog author="coolo@suse.com" date="1443268800">- updated to version 3.3.5
  see installed CHANGELOG.md
  * *3.3.5** (September 25, 2015)
  * Fix bug related to absolute path being reintroduced into history cache #141.</changelog>
  <changelog author="coolo@suse.com" date="1444132800">- updated to version 3.4.0
  see installed CHANGELOG.md
  * *3.4.0** (October 5, 2015)
  * Expose method to override the sass cache in the SassProcessor.</changelog>
  <changelog author="coolo@suse.com" date="1448539200">- updated to version 3.4.1
  see installed CHANGELOG.md
  * *3.4.1** (November 25, 2015)
  * PathUtils::Entries will no longer error on an empty directory.</changelog>
  <changelog author="coolo@suse.com" date="1449230400">- updated to version 3.5.0
  see installed CHANGELOG.md
  * *Master**
  * *3.5.0** (December 3, 2015)
  * Reintroduce Gzip file generation for non-binary assets.</changelog>
  <changelog author="coolo@suse.com" date="1449576000">- updated to version 3.5.1
  see installed CHANGELOG.md
  * *3.5.1** (December 5, 2015)
  * Fix gzip asset generation for assets already on disk.</changelog>
  <changelog author="coolo@suse.com" date="1449921600">- updated to version 3.5.2
  see installed CHANGELOG.md
  * *3.5.2** (December 8, 2015)
  * Fix JRuby bug with concurrent-ruby.
  * Fix disabling gzip generation in cached environments.</changelog>
  <changelog author="coolo@suse.com" date="1460030400">- updated to version 3.6.0
  see installed CHANGELOG.md</changelog>
  <changelog author="coolo@suse.com" date="1466251200">- updated to version 3.6.1
  see installed CHANGELOG.md
  * *3.6.1** (June 17, 2016)
  * Some performance improvements.</changelog>
  <changelog author="coolo@suse.com" date="1467201600">- updated to version 3.6.2
  see installed CHANGELOG.md
  * *3.6.2** (June 21, 2016)
  * More performance improvements.</changelog>
  <changelog author="coolo@suse.com" date="1467633600">- updated to version 3.6.3
  see installed CHANGELOG.md
  * *3.6.3** (July 1, 2016)
  * Faster asset lookup in large directories #336
  * Faster PathUtils.match_path_extname https://github.com/rails/sprockets/commit/697269cf81e5261fdd7072e32bd489403027fd7e
  * Fixed uglifier comment stripping #326
  * Error messages now show load path info #313</changelog>
  <changelog author="coolo@suse.com" date="1469275200">- updated to version 3.7.0
  see installed CHANGELOG.md
  * * 3.7.0** (July 21, 2016)
  * Deprecated interfaces now emit deprecation warnings #345</changelog>
  <changelog author="coolo@suse.com" date="1482235200">- updated to version 3.7.1
  see installed CHANGELOG.md</changelog>
  <changelog author="factory-auto@kulow.org" date="1529409600">- updated to version 3.7.2
  see installed CHANGELOG.md
  * *3.7.2** (June 19, 2018)
  * Security release for [CVE-2018-3760](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2018-3760).
  (bsc#1098369)</changelog>
</package>
<package pkgid="bfd6909feec9ffac0399a93d6248142402672503f9d76471c32c7463e0467ddb" name="salt" arch="src">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="40207ab5d7147aef3c9560deb3da588cad91817ab18950ee8163f67840aa4778" name="salt" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="6a667aebb48cbfdc4d107b5e04905fdf740daff0b0c9121178819ea77253a9de" name="salt" arch="src">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="fdd7af9e4cf52ce359847f24dbe9aa5caba0ac431450b8a29b8bf7f361cb9298" name="salt" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="d87cf7cc6c2e662eadc21c4626b041362d883b614a05b1fb7fb9d922ed3359c6" name="salt" arch="src">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="2f28113892d1c9881973e38e7dfd6c85926afb24387ea1318c6327953ef41fbd" name="salt" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="21c0aeb046aad3d96d07e6a887d9351e175ad7c62025ef95484cc60f8dbb2a50" name="salt-api" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="c26caea64916681e0e9c6d670f8cce4be1ad2c0739909eb290db7a35ff6f06bf" name="salt-api" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="801555b1629fe2757b5e8711a796f0cf4ecf319898ca7b51edb6deffe2b47e13" name="salt-api" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="86b4c548b3870fcbc9246f98c8f81359a241dcfa25aaf8d225fc0fc009b9452a" name="salt-bash-completion" arch="noarch">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="2fbd14c238d5bb762695478b8949cc65f6a20fe6c58430cca79381e19cb2b67c" name="salt-bash-completion" arch="noarch">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="e500c3c4551c31627833bc02c8fabecdc82f14bada4c3c5181f8f0e215404721" name="salt-bash-completion" arch="noarch">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="8b4f73486ddbf035688d8bd95a8fdbe3015ef145775240998f6379267da2b54e" name="salt-cloud" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="4d55fe6e39e78f7f5696b34df7d29cd63de84f789e01786bdecc82310f710632" name="salt-cloud" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="1500d8a43d93b6c0d6c92d02553993d1dced89aa20b719a2d1531ee755636cdc" name="salt-cloud" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="2b4ce557f9e75a3baade32c18a776593ce8b157ff3917b4858606dad5f2ff5bf" name="salt-doc" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="0f814967f1642e89d2baf5ab09d6910f06ce48d0864447a040cc560549ed6414" name="salt-doc" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="38317eeee5c756b3d1dd7e7bdc5c95e25963211de82f10fa7b164826479e9c8b" name="salt-doc" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="955808e9506ee5766610562f8d376d2dcc1d02b374214746653723874c6a007a" name="salt-fish-completion" arch="noarch">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="159c5134b2e6138b7dfb568df690998fc441de1d4c71a1d9cb61b285b6e6d05e" name="salt-fish-completion" arch="noarch">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="12ba76ec10d1cb3be9968dbcfef40081c6f8f42f9d238b4365ad51d095165821" name="salt-fish-completion" arch="noarch">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="b625ecb74c5af58df42e81d6599351490bdef40a3062306695aa00a3ab08cc9a" name="salt-master" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="612e87e22ce660540ab76b9f83418bbcf4a76c20dc273211e0ee8af71086f6d3" name="salt-master" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="c530f0b8eb39bb50b27b857dd4bfa165a55d710d58ef3c3907d4434985ddc9b9" name="salt-master" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="29ad5e5b7a40c67e1013ae67e8b5f942e90270c58365057386d614e80a16a8cc" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="0b8dcdd34f0a39ae17dcd8f13df48c96509d212b80950e77f4f6ea0187c584a1" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="e2119a8e0be27bb41a2e0033230c7cf024f333e4ffb208cf3d9ac49493452b2c" name="salt-minion" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="a13b09471f3a01a6a07003afade1e799efcf5228afcb954a6028ef1c72105515" name="salt-proxy" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="58a93a34292b1389a9e01240bf203375c64325a9478403dbd57fa310a1d30898" name="salt-proxy" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="b34d3ed56d9db1371ed065f6cd030ade417518cf4cf5236ad2c00308f44b5690" name="salt-proxy" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="f7601f44fa722c2b791253e9c5d68ff0fe521e22a12c87384c142348fd304523" name="salt-ssh" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="4d190f4f261e46bb1db57c96ea5b808f7588815bb27dc0f2d1b5150aeb86cd34" name="salt-ssh" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="298d71564533024c015441fbd03eaeabd0f844251e485795a893dee203bf1085" name="salt-ssh" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="bc405084b822886fee2186619d3fef5b0b3cab36b1236cd25c80f9f24d376879" name="salt-syndic" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="e7b12d573a29ab315ca3b0203e40ee790f24b118960a833f7f993762d2edaf06" name="salt-syndic" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="281b815624480d317aee1fb224319a4292b43ce6499c041a611cdbbc140acc37" name="salt-syndic" arch="x86_64">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="e0a154b85f9d8ac0f06d440c821d14e06905ce65cc98538c71c7d1db4b26752e" name="salt-zsh-completion" arch="noarch">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.3.1"/>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1520942400">- Update cp.push patch
- Modified:
  * fix-cp.push-empty-file.patch
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521028800">- Update patches
- Modified:
  * run-salt-master-as-dedicated-salt-user.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-cp.push-empty-file.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch
- Removed:
  * salt-ssh-fix-json-load-of-return-data-when-it-contai.patch</changelog>
  <changelog author="michele.bologna@suse.com" date="1521547200">- Fix logging with FQDNs
- Added:
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1521720000">- make it possible to use docker login, pull and push from module.run and detect errors
- Added:
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1521720001">- Explore 'module.run' state module output in depth to catch "result" properly
- Added:
  * explore-module.run-response-to-catch-the-result-in-d.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806400">- Update openscap push patch to include the test fixes
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1521806401">- Fix zypper.info_installed 'ascii' issue
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * move-log_file-option-to-changeable-defaults.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522152000">- Add SaltSSH multi-version support across Python interpeters.
- Added:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Michael Calmer &lt;mc@suse.de&gt;" date="1522238400">- salt-ssh: require same major version while minor is allowed to be
- Added:
  * require-same-major-version-while-minor-is-allowed-to.patch
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522238401">- Add iprout/net-tools dependency</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522843200">- Update salt-ssh multiversion patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch
- Removed:
  * require-same-major-version-while-minor-is-allowed-to.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1522929600">- Add python-2.6 support to salt-ssh
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Mihai Dinca &lt;mdinca@suse.de&gt;" date="1523016000">- Update to 2018.3.0
- Modified:
  * explore-module.run-response-to-catch-the-result-in-d.patch
  * add-saltssh-multi-version-support-across-python-inte.patch
  * run-salt-api-as-user-salt-bsc-1064520.patch
  * fix-openscap-push.patch
  * fix-decrease-loglevel-when-unable-to-resolve-addr.patch
  * fix-cp.push-empty-file.patch
  * make-it-possible-to-use-login-pull-and-push-from-mod.patch
  * avoid-excessive-syslogging-by-watchdog-cronjob-58.patch
  * feat-add-grain-for-all-fqdns.patch
  * fix-bsc-1065792.patch
  * run-salt-master-as-dedicated-salt-user.patch
  * move-log_file-option-to-changeable-defaults.patch
  * activate-all-beacons-sources-config-pillar-grains.patch
  * remove-obsolete-unicode-handling-in-pkg.info_install.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052800">- Strip trailing commas on Linux user's GECOS fields (bsc#1089362)
- Fallback to PyMySQL (bsc#1087891)
- Improved test for fqdns
- Update SaltSSH patch
- Fix for [Errno 0] Resolver Error 0 (no error) (bsc#1087581)
  * Lintfix: PEP8 ident
  * Use proper levels of the error handling, use proper log formatting.
  * Fix unit test for reversed fqdns return data
- Added:
  * strip-trailing-commas-on-linux-user-gecos-fields.patch
  * fall-back-to-pymysql.patch
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch
- Modified:
  * add-saltssh-multi-version-support-across-python-inte.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524052801">- Fix patchinstall on yum module. Bad comparison (bsc#1087278)
- Added:
  * provide-kwargs-to-pkg_resource.parse_targets-require.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1524657600">- Fix minion scheduler to return a 'retcode' attribute (bsc#1089112)
- Fix for logging during network interface querying (bsc#1087581)
- Fix rhel packages requires both net-tools and iproute (bsc#1087055)
- Added:
  * initialize-__context__-retcode-for-functions-handled.patch
- Modified:
  * fix-for-errno-0-resolver-error-0-no-error-bsc-108758.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1525435200">- Fixed Python 3 issue with CIDR addresses.
- Added:
  * fixed-usage-of-ipaddress.patch</changelog>
  <changelog author="Pablo Su&#xE1;rez Hern&#xE1;ndez &lt;psuarezhernandez@suse.com&gt;" date="1525953600">- Do not override jid on returners, only sending back to master (bsc#1092373)
- Fixes for salt-ssh:
  - Option --extra-filerefs doesn't add all files to the state
    archive
  - Pillar completely overwritten (not merged) when doing
    module.run + state.apply with pillar in kwargs
- Remove minion/thin/version if exists to force thin regeneration (bsc#1092161)
- Added:
  * extra-filerefs-include-files-even-if-no-refs-in-stat.patch
  * do-not-override-jid-on-returners-only-sending-back-t.patch
  * option-to-merge-current-pillar-with-opts-pillar-duri.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526472000">- No more AWS EC2 rate limitations in salt-cloud (bsc#1088888)
- MySQL returner now also allows to use Unix sockets (bsc#1091371)
- Added:
  * fix-for-ec2-rate-limit-failures.patch
  * enable-passing-a-unix_socket-for-mysql-returners-bsc.patch</changelog>
  <changelog author="Jochen Breuer &lt;jbreuer@suse.de&gt;" date="1526558400">- Documentation refresh to 2018.3.0</changelog>
</package>
<package pkgid="e267561bd3a3251bc753ce4a13baddf23d33438c611fcf87ed81b9871223dc59" name="salt-zsh-completion" arch="noarch">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.6.1"/>
  <changelog author="jbreuer@suse.de" date="1526472000">- Documentation refresh to 2018.3.0</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526904000">- Collect all versions of installed packages on SUSE and RHEL
  systems (bsc#1089526)
- Added:
  * add-all_versions-parameter-to-include-all-installed-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1526990400">- Prevent zypper from parsing repo configuration from
  not .repo files (bsc#1094055)
- Added:
  * prevent-zypper-from-parsing-repo-configuration-from-.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527076800">- Add 'other' attribute to GECOS fields to avoid inconsistencies with chfn
- Added:
  * add-other-attribute-to-gecos-fields-to-avoid-inconsi.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1527768000">- Align SUSE salt-master.service 'LimitNOFILES' limit with upstream Salt
- Added:
  * align-suse-salt-master.service-limitnofiles-limit-wi.patch</changelog>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
</package>
<package pkgid="48747044e2b51f2c58fb38ac05c2dd3d1b873a2eeae2a1753d216aa38b9c7dce" name="salt-zsh-completion" arch="noarch">
  <version epoch="0" ver="2018.3.0" rel="lp150.3.9.1"/>
  <changelog author="pablo.suarezhernandez@suse.com" date="1528977600">- Fix for sorting of multi-version packages (bsc#1097174 and bsc#1097413)
- Added:
  * fix-for-sorting-of-multi-version-packages-bsc-109717.patch</changelog>
  <changelog author="mdinca@suse.de" date="1528977601">- Prevent deprecation warning with salt-ssh (bsc#1095507)
- Added:
  * fix-deprecation-warning-bsc-1095507.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1528977602">- Add environment variable to know if yum is invoked from Salt (bsc#1057635)
- Added:
  * add-environment-variable-to-know-if-yum-is-invoked-f.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529496000">- Multiversion patch plus upstream fix and patch reordering
- Added:
  * switching-looseversion-import-to-salt.utils.versions.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529582400">- Add custom SUSE capabilities as Grains (bsc#1089526)
- Fix file.managed binary file utf8 error (bsc#1098394)
- Added:
  * add-custom-suse-capabilities-as-grains.patch
  * fix-diffing-binary-files-in-file.get_diff-bsc-109839.patch</changelog>
  <changelog author="mdinca@suse.de" date="1529668800">- Provide python version mismatch solutions (bsc#1072599)
- Added:
  * show-recommendations-for-salt-ssh-cross-version-pyth.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928000">- Fix file.get_diff regression on 2018.3 (bsc#1098394)
- Added:
  * fix-unboundlocalerror-in-file.get_diff.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1529928001">- Handle packages with multiple version properly with zypper (bsc#1096514)
- Added:
  * fix-zypper.list_pkgs-to-be-aligned-with-pkg-state.patch
- Modified:
  * add-custom-suse-capabilities-as-grains.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347200">- Fix corrupt public key with m2crypto python3 (bsc#1099323)
- Prevent payload crash on decoding binary data (bsc#1100697)
- Accounting for when files in an archive contain non-ascii characters (bsc#1099460)
- Added:
  * clean-up-bad-public-key-headers.patch
  * prevent-payload-crash-on-decoding-binary-data-99.patch
  * accounting-for-when-files-in-an-archive-contain-non-.patch</changelog>
  <changelog author="mc@suse.de" date="1532347201">- Fix UnicodeDecodeError using is_binary check (bsc#1100225)
- Added:
  * use-salt.utils.stringutils.is_binary-to-check-if-con.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532347202">- Fix pkg.upgrade reports when dealing with multiversion packages (bsc#1102265)
- Added:
  * remove-old-hack-when-reporting-multiversion-packages.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532433600">- Fix file.blockreplace to avoid throwing IndexError (bsc#1101812)
- Added:
  * fix-46492-file.blockreplace-throws-indexerror.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532520000">- Add missing dateutils import (bsc#1099945)
- Backport the new libvirt_events engine from upstream
- Added:
  * add-missing-dateutils-import-bsc-1099945-96.patch
  * add-engine-relaying-libvirt-events.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1532692800">- Check dmidecoder executable on each "smbios" call to avoid
  race condition (bsc#1101880)
- Add API log rotation on SUSE package (bsc#1102218)
- Added:
  * avoid-incomprehensive-message-if-crashes.patch
  * add-api-log-rotation-on-suse-package.patch</changelog>
  <changelog author="mdinca@suse.de" date="1533038400">- Fix mine.get not returning data - workaround for #48020 (bsc#1100142)
- Added:
  * fix-mine.get-not-returning-data-workaround-for-48020.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643200">- Decode file contents for python2 (bsc#1102013, bsc#1103530)
- Added:
  * decode-file-contents-for-python2-bsc-1102013.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1533643201">- Fix license macro to build on SLE12SP2</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534766400">- Add support for Python 3.7 and Tornado 5.0
- Added:
  * python-3.7-support.patch</changelog>
  <changelog author="psuarezhernandez@suse.com" date="1534852800">- Only do reverse DNS lookup on IPs for salt-ssh (bsc#1104154)
- Added:
  * only-do-reverse-dns-lookup-on-ips-for-salt-ssh.patch</changelog>
  <changelog author="mdinca@suse.de" date="1535544000">- Prepend current directory when path is just filename (bsc#1095942)
- Added:
  * prepend-current-directory-when-path-is-just-filename.patch</changelog>
</package>
<package pkgid="b3c9821b1fe7780a9bc41b5038992f6e14b19a7a9bb975cf4c251473bdea76ba" name="samba" arch="src">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="edddc4eec900d73c79fc63c718e8ad44e22912ae1e98dba8bf6de693ef723e0f" name="samba" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="39838a62de32cd5e8249f894fe64e8736ffc863f3f7ec8ed6367ac26033c8540" name="samba" arch="src">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="023f435e58ceb932f3b2ccc9e2795b4201a05cb19e7583801af8cccdb33aa00c" name="samba" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="ff4f44d32dd5eabe26b9978482b33e5a7995bb86a4d8561043c394f8ee899ff7" name="samba-ceph" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="8f9f6430950b44f3b9129c4cccfa33381ccbce32ee9bb1fac69ffef64807f3a1" name="samba-ceph" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="cd4abf29a1ad0c01e6f0bc090cdd0ee1a6e2460fd3bf4e53fbd35e047f8dd601" name="samba-client-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c00e0cffef82a432e7d12ea6542ac484bb8c27f21bc8286f3737e46fd3dd20b1" name="samba-client-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="3e24c199450be7b6d748d7595638b1a528ae29bb550524f3b693dd26d44b9510" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="732d21f8a5626d3ab832419b42228eda028714865b3259a676fb21fd3d0e04c3" name="samba-client" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="a2f8d4d8093b37ea2a63b11f0d03545bab90156de2168acc11c9aa9a1ed3f0de" name="samba-core-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="a25b763b8d52ef6851febb8269786b3a248a1aab06287e8d2f57a248913ab7eb" name="samba-core-devel" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="9b330dc77105213929e4998dc1041d4f86189484640ddc125679d1ca437b6f74" name="samba-doc" arch="noarch">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="9753714093489c529c04e883a7ede21a1cd327f5a48528651c66e3242523dc98" name="samba-doc" arch="noarch">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="2877d8ae2486b3ff6bbf420c2491f94f6124d813d7be1cc593fa4d1cc4ffb2c9" name="samba-dsdb-modules" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="36b07f31a66b9d18ad18424a3889e13ca4a8ea975213be0da2ce0d0bbf1a7c13" name="samba-dsdb-modules" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="29410e3503a0a6122b79d7309a0cfcb7f67e558cdc2c15f2dac383c1fe0fbd77" name="samba-kdc-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="f9ba6e46c1b43550e5f759d8033ba07b51bb312e82326efd25621dda1b9da257" name="samba-kdc-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="9fd3c77518f86e311f44f8682fce30c475b2e831c114bd3a074f23cb001290e9" name="samba-kdc" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="5b98869e57380181f2bb88a313f21de6dd07732712904e74f3d315fa6e0543db" name="samba-kdc" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="3be4c6ac61f7e5e62e89bd04adf14ba945558c96e558f8d6275cac4a7920c8b0" name="samba-libs-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="b47b777f3f18103c984a41a594313a6b36a63667d73b0f486e99f9628ac2343e" name="samba-libs-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="f1450e97e3fc48c2be91a6ec9441da986454cbd86bac7bf08eb6cabebbdb64f7" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="1d86d8a112ff5c41229740acb8970654ffda491d038c0cc8dcf5b323df2df0bc" name="samba-libs" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="8d48e4b2a135072867a02b862bec48ff5df705439b6ebe35d92bd38b3e48fc0f" name="samba-pidl" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="c3f6867ebd56abe778377017a909e637516a082c10183759721bfb243e590170" name="samba-pidl" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="e2958251de0b00debe6699976be5e15b2ee9f5fd6c1ac2dd63b108924e06b853" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="8f66d9f069abd27a842683e722603316f05d451380972407e72f7f9a0c2cc280" name="samba-python" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="fd9d2298275c5167258d5e2cf8022f4899ab5c2331d7452684a56a1e5a97d5a3" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="67abda370ca4c4789661592c8f221d1693a41f30ea707682d999b0812f4260b0" name="samba-test" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="50d04d6401bb6a85e676d44ffe6ff6f560b0940f0f1173fd02192ee46b3cf0ba" name="samba-winbind-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="77bf3b06f236e2453d9610ab8965c093ed0a44de74e73984ececfe9ad5ec5e9c" name="samba-winbind-32bit" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="f348010d2451900c9f82b4d5d3459920e9014a5e5749d6252612bcd0fbfc7760" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.62.c1052da2b4e" rel="lp150.3.3.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12151: Keep required encryption across SMB3 dfs
  redirects; (bso#12996); (bsc#1058565).</changelog>
  <changelog author="nopower@suse.com" date="1505390401">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390402">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
</package>
<package pkgid="5fff3d69eee3a59e867890cd4e02fa2ce3535aab623ea1a428544b6835a7aba5" name="samba-winbind" arch="x86_64">
  <version epoch="0" ver="4.7.8+git.86.94b6d10f7dd" rel="lp150.3.6.1"/>
  <changelog author="nopower@suse.com" date="1505390400">- CVE-2017-12150: Some code path don't enforce smb signing,
  when they should; (bso#12997); (bsc#1058622).</changelog>
  <changelog author="aaptel@suse.com" date="1505390401">- CVE-2017-12163: Prevent client short SMB1 write from
  writing server memory to file; (bso#13020); (bsc#1058624).</changelog>
  <changelog author="scabrero@suse.com" date="1506600000">- Update to 4.7.0;
  + Whole DB read locks: Improved LDAP and replication consistency;
    (bso#12858).
  + Samba AD with MIT Kerberos
  + Dynamic RPC port range: Default range changed from "1024-1300" to
    "49152-65535".
  + Authentication and Authorization audit support: New auth_audit debug
    class.
  + Multi-process LDAP Server: The LDAP server in the AD DC now honours
    the process model used for the rest of the 'samba' process.
  + Improved Read-Only Domain Controller (RODC) Support; (bso#12977).
  + Additional password hashes stored in supplementalCredentials.
  + Improvements to DNS during Active Directory domain join.
  + Significant AD performance and replication improvements.
  + Query record for open file or directory.
  + Removal of lpcfg_register_defaults_hook().
  + Change of loadable module interface.
  + SHA256 LDAPS Certificates: The self-signed certificate generated for use
    on LDAPS will now be generated with a SHA256 self-signature, not a SHA1
    self-signature.
  + CTDB no longer allows mixed minor versions in a cluster.
  + CTDB now ignores hints from Samba about TDB flags when attaching to
    databases.
  + New configuration variable CTDB_NFS_CHECKS_DIR.
  + The CTDB_SERVICE_AUTOSTARTSTOP configuration has been removed.
  + The CTDB_SCRIPT_DEBUGLEVEL configuration variable has been removed.
  + The example NFS Ganesha call-out has been improved.
  + A new "replicated" database type is available.</changelog>
  <changelog author="dimstar@opensuse.org" date="1508760000">- Add samba-kdc to baselibs.conf.
- Do not wrap samba-kdc's package definition into if/endif: the
  package won't be generated simply based on the fact that there is
  no files section for the package. Allows the source validator to
  ensure samba-kdc is a built package.</changelog>
  <changelog author="scabrero@suse.com" date="1510056000">- Run all daemons in the foreground and let systemd handle it; (bsc#1065551).
- Update to 4.7.1;
  + Fix exporting subdirs with shadow_copy2; (bso#13091);
  + Currently if getwd() fails after a chdir(), we panic; (bso#13027);
  + Ensure default SMB_VFS_GETWD() call can't return a partially completed
    struct smb_filename; (bso#13068);
  + sys_getwd() can leak memory or possibly return the wrong errno on older
    systems; (bso#13069);
  + smbclient doesn't correctly canonicalize all local names before use;
    (bso#13093);
  + Fix broken linked attribute handling; (bso#13095);
  + Missing LDAP query escapes in DNS rpc server; (bso#12994);
  + Link to -lbsd when building replace.c by hand; (bso#13087);
  + Cannot delete non-ACL files on Solaris/ZFS/NFSv4 ACL filesystem;
    (bso#6133);
  + Map SYNCHRONIZE acl permission statically in zfs_acl vfs module;
    (bso#7909);
  + Samba fails to honor SEC_STD_WRITE_OWNER bit with the acl_xattr module;
    (bso#7933);
  + Missing assignment in sl_pack_float; (bso#12991);
  + Wrong Samba access checks when changing DOS attributes; (bso#12995);
  + samba_runcmd_send() leaves zombie processes on timeout; (bso#13062);
  + groupmap cleanup should not delete BUILTIN mappings; (bso#13065);
  + Enabling vfs_fruit results in loss of Finder tags and other xattrs;
    (bso#13076);
  + man pages: Properly ident lists; (bso#9613);
  + smb.conf.5: Sort parameters alphabetically; (bso#13081);
  + Fix GUID string format on GetPrinter info; (bso#12993);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + CTDB starts consuming memory if there are dead nodes in the cluster;
    (bso#13056);
  + ctdb-common: Ignore event scripts with multiple '.'s; (bso#13070);
  + libgpo doesn't sort the GPOs in the correct order; (bso#13046);
  + Remote serverid check doesn't check for the unique id; (bso#13042);
  + vfs_catia: Fix a potential memleak; (bso#13090);
  + Fix file change notification for renames; (bso#12903);
  + Samba DNS server does not honour wildcards; (bso#12952);
  + Can't change password in samba from a Windows client if Samba runs on
    IPv6 only interface; (bso#13079);
  + vfs_fruit: Replace closedir() by SMB_VFS_CLOSEDIR; (bso#13086);
  + Apple client can't cope with SMB2 async replies when creating symlinks;
    (bso#13047);
  + s4:rpc_server:backupkey: Move variable into scope; (bso#12959);
  + Fix ntstatus_gen.h generation on 32bit; (bso#13099);
  + Fix a double free in vfs_gluster_getwd(); (bso#13100);
  + Fix resouce leaks and pointer issues; (bso#13101);
  + vfs_solarisacl: Fix build for samba 4.7 and up; (bso#13049);</changelog>
  <changelog author="dmulder@suse.com" date="1510747200">- samba-tool requires samba-python; (bnc#1067771).</changelog>
  <changelog author="rbrown@suse.com" date="1511784000">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to 4.7.3; (bsc#1069666);
  + Non-smbd processes using kernel oplocks can hang smbd;
    (bso#13121);
  + python: use communicate to fix Popen deadlock; (bso#13127);
  + smbd on disk file corruption bug under heavy threaded load;
    (bso#13130);
  + tevent: version 0.9.34; (bso#13130);
  + s3: smbd: Fix delete-on-close after smb2_find; (bso#13118);
  + CVE-2017-14746: s3: smbd: Fix SMB1 use-after-free crash bug;
    (bsc#1060427);(bso#13041);
  + CVE-2017-15275: s3: smbd: Chain code can return uninitialized
    memory when talloc buffer is grown; (bsc#1063008); (bso#13077);
- Build with AD DC support only in openSUSE.</changelog>
  <changelog author="david.mulder@suse.com" date="1511956800">- smbc_opendir should not return EEXIST with invalid login credentials;
  (bnc#1065868).</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Re-enable usage of libnsl (did got lost with glibc change)
- Use TI-RPC (sunrpc is deprecated and will be removed soon from
  glibc)</changelog>
  <changelog author="scabrero@suse.com" date="1518177600">- Update to 4.7.4; (bsc#1080545);
  + s3: smbclient: Implement 'volume' command over SMB2; (bso#13140);
  + s3: libsmb: Fix valgrind read-after-free error in
    cli_smb2_close_fnum_recv(); (bso#13171);
  + s3: libsmb: Fix reversing of oldname/newname paths when creating a
    reparse point symlink on Windows from smbclient; (bso#13172);
  + Build man page for vfs_zfsacl.8 with Samba; (bso#12934);
  + repl_meta_data: Allow delete of an object with dangling backlinks;
    (bso#13095);
  + s4:samba: Fix default to be running samba as a deamon; (bso#13129);
  + Performance regression in DNS server with introduction of DNS wildcard,
    ldb: Release 1.2.3; (bso#13191);
  + vfs_zfsacl: Fix compilation error; (bso#6133);
  + "smb encrypt" setting changes are not fully applied until full smbd
    restart; (bso#13051);
  + winbindd: Fix idmap_rid dependency on trusted domain list; (bso#13052);
  + vfs_fruit: Proper VFS-stackable conversion of FinderInfo; (bso#13155);
  + winbindd: Dependency on trusted-domain list in winbindd in critical auth
    codepath; (bso#13173);
  + repl_meta_data: Fix removing of backlink on deleted objects; (bso#13120);
  + ctdb: sock_daemon leaks memory; (bso#13153);
  + TCP tickles not getting synchronised on CTDB restart; (bso#13154);
  + winbindd: winbind parent and child share a ctdb connection; (bso#13150);
  + pthreadpool: Fix deadlock; (bso#13170);
  + pthreadpool: Fix starvation after fork; (bso#13179);
  + messaging: Always register the unique id; (bso#13180);
  + s4/smbd: set the process group; (bso#13129);
  + Fix broken linked attribute handling; (bso#13095);
  + The KDC on an RWDC doesn't send error replies in some situations;
    (bso#13132);
  + libnet_join: Fix 'net rpc oldjoin'; (bso#13149);
  + g_lock conflict detection broken when processing stale entries;
    (bso#13195);
  + s3:smb2_server: allow logoff, close, unlock, cancel and echo on expired
    sessions; (bso#13197);
  + s3:libads: net ads keytab list fails with "Key table name malformed";
    (bso#13166); (bsc#1067700);
  + Fix crash in pthreadpool thread after failure from pthread_create;
    (bso#13170);
  + s4:samba: Allow samba daemon to run in foreground; (bso#13129);
    (bsc#1065551);
  + third_party: Link the aesni-intel library with "-z noexecstack";
    (bso#13174);
  + vfs_glusterfs: include glusterfs/api/glfs.h without relying on "-I"
    options; (bso#13125);</changelog>
  <changelog author="scabrero@suse.com" date="1518436800">- Update to 4.7.5; (bsc#1080545);
  + smbd tries to release not leased oplock during oplock II downgrade;
    (bso#13193);
  + Fix copying file with empty FinderInfo from Windows client to Samba share
    with fruit; (bso#13181);
  + build: Deal with recent glibc sunrpc header removal; (bso#10976);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + vfs_ceph: Add fs_capabilities hook to avoid local statvfs; (bso#13208);
    (bsc#1075206);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + ctdb-recovery-helper: Deregister message handler in error paths;
    (bso#13188);
  + samba: Only use async signal-safe functions in signal handler; (bso#13240);
  + Kerberos: PKINIT: Can't decode algorithm parameters in clientPublicValue;
    (bso#12986);
  + repl_meta_data: Fix linked attribute corruption on databases
    with unsorted links on expunge. dbcheck: Add functionality to fix the
    corrupt database; (bso#13228);
  + Fix smbd panic when chdir returns error during exit; (bso#13189);
  + Make Samba work with tirpc and libnsl2; (bso#13238);
  + Fix POSIX ACL support on HPUX and possibly other big-endian OSs;
    (bso#13176);</changelog>
  <changelog author="dmulder@suse.com" date="1519387200">- samba fails to build with glibc2.27; (bsc#1081042);</changelog>
  <changelog author="aaptel@suse.com" date="1519646400">- Disable python until full python3 port is done; (bsc#1082139);
  + Remove contents of package samba-python
  + Remove contents of package libsamba-policy0
  + Remove contents of package libsamba-policy-devel
  + Remove library libsamba-python-samba4.so from samba-libs package
  + Remove library libsamba-net-samba4.so from samba-libs package
  + Remove smbtorture binary and manpage from samba-test</changelog>
  <changelog author="jmcdonough@suse.com" date="1520942400">- Update to 4.7.6;
  + CVE-2018-1050: DOS vulnerability when SPOOLSS is run externally;
    (bso#11343); (bsc#1081741);
  + CVE-2018-1057: Authenticated users can change other users' password;
    (bso#13272); (bsc#1081024).</changelog>
  <changelog author="david.mulder@suse.com" date="1520942401">- Disable samba-pidl package, due to the removal of dependency
  perl-Parse-Yapp; (bsc#1085150);</changelog>
  <changelog author="scabrero@suse.de" date="1527508800">- Add missing package descriptions; (bsc#1093864);</changelog>
  <changelog author="palcantara@suse.com" date="1527854400">- Bump vendor-files
- Use new foreground execution flags for systemd samba daemons;
  (bsc#1088574); (bsc#1071090); (bsc#1065551); (bsc#1094881);</changelog>
  <changelog author="scabrero@suse.de" date="1530273600">- Update to 4.7.8; (bsc#1099702);
  + s3: smbd: Generic fix for incorrect reporting of stream dos attributes
    on a directory; (bso#13380);
  + ceph: VFS: Add asynchronous fsync to ceph module, fake using synchronous
    call; (bso#13412);
  + s3: libsmbclient: Fix hard-coded connection error return of ETIMEDOUT;
    (bso#13419);
  + s3: smbd: Fix SMB2-FLUSH against directories; (bso#13428);
  + s3: smbd: printing: Re-implement delete-on-close semantics for print
    files missing since 3.5.x; (bso#13457);
  + python: Fix talloc frame use in make_simple_acl(); (bso#13474);
  + winbindd on the AD DC is slow for passdb queries; (bso#13430);
  + No Backtrace given by Samba's AD DC by default; (bso#13454);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + s3:smbd: Fix interaction between chown and SD flags; (bso#13432);
  + s4-heimdal: Fix the format-truncation errors; (bso#13437);
  + vfs_ceph: Add fake async pwrite/pread send/recv hooks; (bso#13425);
  + printing: Return the same error code as Windows does on upload failures;
    (bso#13395);
  + winbind: Improve child selection; (bso#13290);
  + winbind: Maintain a binding handle per domain and always go via
    wb_domain_request_send(); (bso#13292);
  + winbindd doesn't recover loss of netlogon secure channel in case the peer
    DC is rebooted; (bso#13332);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + rpc_server: Init local_server_* in make_internal_rpc_pipe_socketpair;
    (bso#13370);
  + smbclient: Fix broken notify; (bso#13382);
  + libads: Fix the build --without-ads; (bso#13273);
  + winbindd: Don't split the rid for SID_NAME_DOMAIN sids in wb_lookupsids;
    (bso#13279);
  + winbindd: initialize type = SID_NAME_UNKNOWN in
    wb_lookupsids_single_done(); (bso#13280);
  + s4:rpc_server: Fix call_id truncation in dcesrv_find_fragmented_call();
    (bso#13289);
  + A disconnecting winbind client can cause a problem in the winbind parent
    child communication; (bso#13290);
  + winbind: Use one queue for all domain children;
    (bso#13292);
  + Minimize the lifetime of winbindd_cli_state-&gt;{pw,gr}ent_state;
    (bso#13293);
  + winbind should avoid using fstrcpy(domain-&gt;dcname,...) on a char *;
    (bso#13294);
  + The winbind parent should find the dc of a foreign domain via the primary
    domain; (bso#13295);
  + nsswitch: Fix memory leak in winbind_open_pipe_sock() when the privileged
    pipe is not accessable; (bso#13400);
  + Fix broken server side GENSEC_FEATURE_LDAP_STYLE handling (NTLMSSP
    NTLM2 packet check failed due to invalid signature!); (bso#13427);
  + s3: VFS: Fix memory leak in vfs_ceph; (bso#13424);
  + rpc_server: Fix NetSessEnum with stale sessions; (bso#13407);
  + dfree cache returning incorrect data for sub directory mounts;
    (bso#13446);
  + Looking up the user using the UPN results in user name with the REALM
    instead of the DOMAIN; (bso#13369);
  + s3:passdb: Do not return OK if we don't have pinfo set up;
    (bso#13376);
  + s3:utils: Do not segfault on error in DoDNSUpdate(); (bso#13440);
  + s4:auth_sam: Allow logons with an empty domain name; (bso#13206);
  + s3: ldap: Ensure the ADS_STRUCT pointer doesn't get freed on error,
    we don't own it here; (bso#13244);
  + s3: smbd: Fix possible directory fd leak if the underlying OS doesn't
    support fdopendir(); (bso#13270);
  + Round-tripping ACL get/set through vfs_fruit will increase the number
    of ACE entries without limit; (bso#13319);
  + s3: smbd: SMB2: Add DBGC_SMB2_CREDITS class to specifically debug credit
    issues; (bso#13347);
  + s3: smbd: Files or directories can't be opened DELETE_ON_CLOSE without
    delete access; (bso#13358);
  + s3: smbd: Fix memory leak in vfswrap_getwd(); (bso#13372);
  + s3: smbd: Unix extensions attempts to change wrong field in fchown call;
    (bso#13375);
  + s3:smbd: Don't use the directory cache for SMB2/3; (bso#13363);
  + build: Fix libceph-common detection; (bso#13277);
  + build: Fix ceph_statx check when configured with libcephfs_dir;
    (bso#13250);
  + vfs_glusterfs: Fix the wrong pointer being sent in glfs_fsync_async;
    (bso#13297);
  + ctdb-scripts: Drop 'net serverid wipe' from 50.samba event script;
    (bso#13359);
  + s3: lib: messages: Don't use the result of sec_init() before calling
    sec_init(); (bso#13368);
  + smbd can panic if the client-supplied channel sequence number wraps;
    (bso#13215);
  + dsdb: Fix CID 1034966 Uninitialized scalar variable; (bso#13367);
  + s3:libsmb: Allow -U"\\administrator" to work; (bso#13206);
  + Windows 10 cannot logon on Samba NT4 domain; (bso#13328);
  + smbc_opendir should not return EEXIST with invalid login credentials;
    (bso#13050);
  + s3:smbd: map nterror on smb2_flush errorpath; (bso#13338);
  + libsmb: Use smb2 tcon if conn_protocol &gt;= SMB2_02; (bso#13310);
  + subnet: Avoid a segfault when renaming subnet objects; (bso#13031);
  + 'wbinfo --name-to-sid' returns misleading result on invalid query;
    (bso#13312);
  + s3:smbd: Do not crash if we fail to init the session table; (bso#13315);
  + Allow AESNI to be used on all processor supporting AESNI; (bso#13302);</changelog>
  <changelog author="aaptel@suse.com" date="1533643200">- Disable NTLMv1 auth if smb.conf doesn't allow it; (bsc#1095048);
  (bso#13360); (CVE-2018-1139);
- ldbsearch '(distinguishedName=abc)' and DNS query with escapes
  crashes; (bsc#1095056); (bso#13374); (CVE-2018-1140);
- Confidential attribute disclosure via substring search;
  (bsc#1095057); (bso#13434); (CVE-2018-10919);
- smbc_urlencode helper function is a subject to buffer overflow;
  (bsc#1103411); (bso#13453); (CVE-2018-10858);
- Fix NULL ptr dereference in DsCrackNames on a user without a SPN;
  (bsc#1103414); (bso#13552); (CVE-2018-10918);</changelog>
</package>
<package pkgid="3089bc601e7fce756ab6bac992aadde7ca1f28bd6f0c85d0a79eb97fb8ece711" name="sbd" arch="src">
  <version epoch="0" ver="1.3.1+20180507.e102d9e" rel="lp150.2.3.1"/>
  <changelog author="ygao@suse.com" date="1472644800">- man: Update man page to use pcmk_delay_max over start-delay (bsc#993032)
  * bug-993032_sbd-man-pcmk_delay_max.patch</changelog>
  <changelog author="ygao@suse.com" date="1487937600">- Correctly find the pacemaker remote process
- Pacemaker remote must be allowed to start in parallel to sbd
- Only log 'healthy' when a servant was previously outdated
- Ensure the correct callbacks are always configured
- Streamline the initial cluster connection
- Non-disk servants start off as outdated until we hear from them
- Correctly check if the new servant is a disk
- Ensure crm_system_name is set to avoid SEGFAULT when connecting to the cluster
- Repair diskless startup (fate#321017)
- Enable the cluster check module
- systemd: Provide sbd_remote.service file for pacemaker remote nodes (bsc#962287)
  * Drop sbd_remote.service which has been merged upstream
- Simplified check for disk vs. non-disk servants
- Implement a new mode that gives priority to the cluster servants
- Support pacemaker remote as a cluster connect type that we can monitor
- Attempt to reconnect to the cluster after a failure
- Only continue tickling the watchdog without quorum if we have non-disk elements
- Notify the parent explicitly when the cluster connection goes away
- Track the number of servants and disks differently
- Cluster servant focuses exclusively on having a live cluster connection
- Automatically scale timeout_watchdog_warn with timeout_watchdog
- Differentiate between when a node is offline and unknown
- Gracefully handle an empty CIB
- Repair startup when no disks are present (fate#321017)
- Allow the watchdog timeout to be specified via the environment
- Self terminate when quorum is lost and the admin configured no-quorum-policy=suicide (bsc#950415)
  * Drop obsolete bug-950415_sbd-pacemaker-segfault.patch
- Prevent watchdogdev variable from being erased on fork()
- Fix the parsing of devices from the environment
- Let systemd own where the pidfile lives
- Use the pacemaker corefile directory
- Repair the SBD_STARTMODE handling and allow startup without a disk partition (fate#321017)
- Batch up the processing of cib updates but cap the maximum delay
- Simplify the systemd unit file by reading options from the environment
- Drop dependancy on clplumbing
  * Drop obsolete sbd-configure-libcoroipcc.patch
- Pacemaker: Fix compilation when building against corosync 2.x
  * Drop obsolete sbd-pacemaker.patch
- Upstream version cs: c511b0692784a7085df4b1ae35748fb318fa79ee</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- Clarify documentation around watchdog option (-W)
- Fix node-name handling in structs - bail out if too long
- man: Update man page to use pcmk_delay_max over start-delay (bsc#993032)
  * Drop bug-993032_sbd-man-pcmk_delay_max.patch which has been merged upstream
- use LDADD instead of LDFLAGS to fix build failure with ld --as-needed
  * Drop obsolete add-explicit-libs.patch
- Set SBD_STARTMODE to "always" by default
- Upstream version cs: 4ee36fa33b57a1ad95678363911cfb02a92e1edb</changelog>
  <changelog author="ygao@suse.com" date="1496232000">- Update to v1.3.0
- spec: Do not automatically try to restart sbd.service on update (bsc#1033934)
- Upstream version cs: 4968e9c8602fbb990bed63cc96ca18f62e2181db (v1.3.0)</changelog>
  <changelog author="ygao@suse.com" date="1496404800">- sbd-inquisitor: cleanup_servant_by_pid() should be static
  * sbd-cleanup_servant_by_pid-static.patch
- sbd.sh: Correctly handle SBD_DELAY_START for multiple SBD devices (bsc#1033934)
- sbd.sh: consistent use of SBD_BIN (bsc#1033934)
- Upstream version cs: a0bc43b17fcb997fe4c09731db2126ab350cfb50</changelog>
  <changelog author="ygao@suse.com" date="1499169600">- sbd-inquisitor: Do not use watchdog if the conflicting options "-W" and "-w /dev/null" are both supplied (bsc#1047376)
  * bug-1047376_sbd-not-use-watchdog-conflicting-options.patch
- sbd-inquisitor: Enable pacemaker integration by default as advertised in sysconfig.sbd (bsc#1046421, bsc#1033600)
  * bug-1046421_sbd-enable-pacemaker-integration-by-default.patch
- sbd-inquisitor: Respect the obsolete option SBD_WATCHDOG for backward compatibility (bsc#1047372)
  * bug-1047372_sbd-SBD_WATCHDOG-compatibility.patch</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Fix node name parameter in manpage
- Don't reboot if off is requested
- sbd-inquisitor: cleanup_servant_by_pid() should be static
  * Drop sbd-cleanup_servant_by_pid-static.patch which has been merged upstream
- sbd.sh: Use a more obvious variable on parsing devices (bsc#1033934)
- sbd-inquisitor: Do not create duplicate servants (bsc#1033934, bsc#1065748)
- sbd-inquisitor: Correctly look up servant by device name (bsc#1033934, bsc#1065748)
- Upstream version cs: 11262fbc80364f2993a9876a2be82f4170c41e4e</changelog>
  <changelog author="ygao@suse.com" date="1509710400">- cluster-servant: check for corosync 2Node mode
- disk-servant: signal reset request via exit-code
- improve reboot after sysrq_trigger
- Upstream version cs: 8a0800cc906d7bb8f8ac0d5664bdf691b2ca7690</changelog>
  <changelog author="ygao@suse.com" date="1509710401">- man: Call "-P" option "Pacemaker integration" in the description (bsc#1033600)
- sbd-inquisitor: Do not use watchdog if the conflicting options "-W" and "-w /dev/null" are both supplied (bsc#1047376)
  * Drop bug-1047376_sbd-not-use-watchdog-conflicting-options.patch which has been merged upstream
- sbd-inquisitor: Enable pacemaker integration by default as advertised in sysconfig.sbd (bsc#1046421, bsc#1033600)
  * Drop bug-1046421_sbd-enable-pacemaker-integration-by-default.patch which has been merged upstream
- sbd-inquisitor: Respect the obsolete option SBD_WATCHDOG for backward compatibility (bsc#1047372)
  * Drop bug-1047372_sbd-SBD_WATCHDOG-compatibility.patch which has been merged upstream
- Upstream version cs: 681ce1acbda12754eb97fb91f9a7306ff368452f</changelog>
  <changelog author="ygao@suse.com" date="1509710402">- Bump to 1.3.1
- Add commands to test/query watchdogs
- Upstream version cs: a74b4d25a3eb93fe1abbe6e3ebfd2b16cf48873f (v1.3.1)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ygao@suse.com" date="1511956800">- Fix: build error with glibc 2.25
- Fix: gcc format string error
- Upstream version cs: a7a7d792b9922f19bbace276c8a154e157a4f99c</changelog>
  <changelog author="ygao@suse.com" date="1512129600">- Update to version 1.3.1+20171130.ecbdf9c:
- Build: cluster-servant: Compile with pacemaker-2.0</changelog>
  <changelog author="ygao@suse.com" date="1514030400">- Update to version 1.3.1+20171220.1e93740:
- Fix: systemd: make pacemaker &amp; dlm wait for sbd-start to complete
- Doc: sbd.sysconfig: mention timeout caveat with SBD_DELAY_START (bsc#1074038)</changelog>
  <changelog author="ygao@suse.com" date="1517832000">- Update to version 1.3.1+20180202.cc3e4cb:
- Doc: sbd.8.pod: add sections for query-watchdog &amp; test-watchdog
- sbd-md: dump_headers returns 0 even open_device failed (bsc#1079316)</changelog>
  <changelog author="jengelh@inai.de" date="1517832001">- Combine %service_* calls to reduce amount of generated code.
- Use %make_install, and make sure directories are owned.</changelog>
  <changelog author="ygao@suse.com" date="1520942400">- Update to version 1.3.1+20180313.fe5fe1d:
- Build: sbd-pacemaker: Query CIB directly with the API instead of get_cib_copy() (bsc#1084689)</changelog>
  <changelog author="ygao@suse.com" date="1521288000">- Update to version 1.3.1+20180316.8873890:
- Fix: add Documentation value to systemd services</changelog>
  <changelog author="ygao@suse.com" date="1525262400">- Update to version 1.3.1+20180502.970d913:
- Log: upgrade important messages and downgrade unimportant ones (bsc#1091839)
- Log: change sbd's default logging level to LOG_NOTICE (bsc#1091839)</changelog>
  <changelog author="ygao@suse.com" date="1525780800">- Update to version 1.3.1+20180507.e102d9e:
- sbd-md: return error if faied to list any devices (bsc#1086650)
- sbd-cluster: let scan do the job of proc-parsing
- sbd-cluster: search for pacemaker-remoted</changelog>
</package>
<package pkgid="ad5c4b9804a0805fd4b3b2ba0180f3c7effadb6f2c59b1eb80346f883176315c" name="sbd" arch="x86_64">
  <version epoch="0" ver="1.3.1+20180507.e102d9e" rel="lp150.2.3.1"/>
  <changelog author="ygao@suse.com" date="1472644800">- man: Update man page to use pcmk_delay_max over start-delay (bsc#993032)
  * bug-993032_sbd-man-pcmk_delay_max.patch</changelog>
  <changelog author="ygao@suse.com" date="1487937600">- Correctly find the pacemaker remote process
- Pacemaker remote must be allowed to start in parallel to sbd
- Only log 'healthy' when a servant was previously outdated
- Ensure the correct callbacks are always configured
- Streamline the initial cluster connection
- Non-disk servants start off as outdated until we hear from them
- Correctly check if the new servant is a disk
- Ensure crm_system_name is set to avoid SEGFAULT when connecting to the cluster
- Repair diskless startup (fate#321017)
- Enable the cluster check module
- systemd: Provide sbd_remote.service file for pacemaker remote nodes (bsc#962287)
  * Drop sbd_remote.service which has been merged upstream
- Simplified check for disk vs. non-disk servants
- Implement a new mode that gives priority to the cluster servants
- Support pacemaker remote as a cluster connect type that we can monitor
- Attempt to reconnect to the cluster after a failure
- Only continue tickling the watchdog without quorum if we have non-disk elements
- Notify the parent explicitly when the cluster connection goes away
- Track the number of servants and disks differently
- Cluster servant focuses exclusively on having a live cluster connection
- Automatically scale timeout_watchdog_warn with timeout_watchdog
- Differentiate between when a node is offline and unknown
- Gracefully handle an empty CIB
- Repair startup when no disks are present (fate#321017)
- Allow the watchdog timeout to be specified via the environment
- Self terminate when quorum is lost and the admin configured no-quorum-policy=suicide (bsc#950415)
  * Drop obsolete bug-950415_sbd-pacemaker-segfault.patch
- Prevent watchdogdev variable from being erased on fork()
- Fix the parsing of devices from the environment
- Let systemd own where the pidfile lives
- Use the pacemaker corefile directory
- Repair the SBD_STARTMODE handling and allow startup without a disk partition (fate#321017)
- Batch up the processing of cib updates but cap the maximum delay
- Simplify the systemd unit file by reading options from the environment
- Drop dependancy on clplumbing
  * Drop obsolete sbd-configure-libcoroipcc.patch
- Pacemaker: Fix compilation when building against corosync 2.x
  * Drop obsolete sbd-pacemaker.patch
- Upstream version cs: c511b0692784a7085df4b1ae35748fb318fa79ee</changelog>
  <changelog author="ygao@suse.com" date="1488801600">- Clarify documentation around watchdog option (-W)
- Fix node-name handling in structs - bail out if too long
- man: Update man page to use pcmk_delay_max over start-delay (bsc#993032)
  * Drop bug-993032_sbd-man-pcmk_delay_max.patch which has been merged upstream
- use LDADD instead of LDFLAGS to fix build failure with ld --as-needed
  * Drop obsolete add-explicit-libs.patch
- Set SBD_STARTMODE to "always" by default
- Upstream version cs: 4ee36fa33b57a1ad95678363911cfb02a92e1edb</changelog>
  <changelog author="ygao@suse.com" date="1496232000">- Update to v1.3.0
- spec: Do not automatically try to restart sbd.service on update (bsc#1033934)
- Upstream version cs: 4968e9c8602fbb990bed63cc96ca18f62e2181db (v1.3.0)</changelog>
  <changelog author="ygao@suse.com" date="1496404800">- sbd-inquisitor: cleanup_servant_by_pid() should be static
  * sbd-cleanup_servant_by_pid-static.patch
- sbd.sh: Correctly handle SBD_DELAY_START for multiple SBD devices (bsc#1033934)
- sbd.sh: consistent use of SBD_BIN (bsc#1033934)
- Upstream version cs: a0bc43b17fcb997fe4c09731db2126ab350cfb50</changelog>
  <changelog author="ygao@suse.com" date="1499169600">- sbd-inquisitor: Do not use watchdog if the conflicting options "-W" and "-w /dev/null" are both supplied (bsc#1047376)
  * bug-1047376_sbd-not-use-watchdog-conflicting-options.patch
- sbd-inquisitor: Enable pacemaker integration by default as advertised in sysconfig.sbd (bsc#1046421, bsc#1033600)
  * bug-1046421_sbd-enable-pacemaker-integration-by-default.patch
- sbd-inquisitor: Respect the obsolete option SBD_WATCHDOG for backward compatibility (bsc#1047372)
  * bug-1047372_sbd-SBD_WATCHDOG-compatibility.patch</changelog>
  <changelog author="ygao@suse.com" date="1500638400">- Fix node name parameter in manpage
- Don't reboot if off is requested
- sbd-inquisitor: cleanup_servant_by_pid() should be static
  * Drop sbd-cleanup_servant_by_pid-static.patch which has been merged upstream
- sbd.sh: Use a more obvious variable on parsing devices (bsc#1033934)
- sbd-inquisitor: Do not create duplicate servants (bsc#1033934, bsc#1065748)
- sbd-inquisitor: Correctly look up servant by device name (bsc#1033934, bsc#1065748)
- Upstream version cs: 11262fbc80364f2993a9876a2be82f4170c41e4e</changelog>
  <changelog author="ygao@suse.com" date="1509710400">- cluster-servant: check for corosync 2Node mode
- disk-servant: signal reset request via exit-code
- improve reboot after sysrq_trigger
- Upstream version cs: 8a0800cc906d7bb8f8ac0d5664bdf691b2ca7690</changelog>
  <changelog author="ygao@suse.com" date="1509710401">- man: Call "-P" option "Pacemaker integration" in the description (bsc#1033600)
- sbd-inquisitor: Do not use watchdog if the conflicting options "-W" and "-w /dev/null" are both supplied (bsc#1047376)
  * Drop bug-1047376_sbd-not-use-watchdog-conflicting-options.patch which has been merged upstream
- sbd-inquisitor: Enable pacemaker integration by default as advertised in sysconfig.sbd (bsc#1046421, bsc#1033600)
  * Drop bug-1046421_sbd-enable-pacemaker-integration-by-default.patch which has been merged upstream
- sbd-inquisitor: Respect the obsolete option SBD_WATCHDOG for backward compatibility (bsc#1047372)
  * Drop bug-1047372_sbd-SBD_WATCHDOG-compatibility.patch which has been merged upstream
- Upstream version cs: 681ce1acbda12754eb97fb91f9a7306ff368452f</changelog>
  <changelog author="ygao@suse.com" date="1509710402">- Bump to 1.3.1
- Add commands to test/query watchdogs
- Upstream version cs: a74b4d25a3eb93fe1abbe6e3ebfd2b16cf48873f (v1.3.1)</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="ygao@suse.com" date="1511956800">- Fix: build error with glibc 2.25
- Fix: gcc format string error
- Upstream version cs: a7a7d792b9922f19bbace276c8a154e157a4f99c</changelog>
  <changelog author="ygao@suse.com" date="1512129600">- Update to version 1.3.1+20171130.ecbdf9c:
- Build: cluster-servant: Compile with pacemaker-2.0</changelog>
  <changelog author="ygao@suse.com" date="1514030400">- Update to version 1.3.1+20171220.1e93740:
- Fix: systemd: make pacemaker &amp; dlm wait for sbd-start to complete
- Doc: sbd.sysconfig: mention timeout caveat with SBD_DELAY_START (bsc#1074038)</changelog>
  <changelog author="ygao@suse.com" date="1517832000">- Update to version 1.3.1+20180202.cc3e4cb:
- Doc: sbd.8.pod: add sections for query-watchdog &amp; test-watchdog
- sbd-md: dump_headers returns 0 even open_device failed (bsc#1079316)</changelog>
  <changelog author="jengelh@inai.de" date="1517832001">- Combine %service_* calls to reduce amount of generated code.
- Use %make_install, and make sure directories are owned.</changelog>
  <changelog author="ygao@suse.com" date="1520942400">- Update to version 1.3.1+20180313.fe5fe1d:
- Build: sbd-pacemaker: Query CIB directly with the API instead of get_cib_copy() (bsc#1084689)</changelog>
  <changelog author="ygao@suse.com" date="1521288000">- Update to version 1.3.1+20180316.8873890:
- Fix: add Documentation value to systemd services</changelog>
  <changelog author="ygao@suse.com" date="1525262400">- Update to version 1.3.1+20180502.970d913:
- Log: upgrade important messages and downgrade unimportant ones (bsc#1091839)
- Log: change sbd's default logging level to LOG_NOTICE (bsc#1091839)</changelog>
  <changelog author="ygao@suse.com" date="1525780800">- Update to version 1.3.1+20180507.e102d9e:
- sbd-md: return error if faied to list any devices (bsc#1086650)
- sbd-cluster: let scan do the job of proc-parsing
- sbd-cluster: search for pacemaker-remoted</changelog>
</package>
<package pkgid="49f6fbdf82dfd53971fe30b44e5ea1a7c0b4f7f75a6548e0d2b98c70f892d6ec" name="screenfetch" arch="noarch">
  <version epoch="0" ver="3.8.0" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1415534400">- Repackage from  home:andisugandi</changelog>
  <changelog author="mpluskal@suse.com" date="1415793600">- Rename project</changelog>
  <changelog author="mpluskal@suse.com" date="1417176000">- Update to 3.6.5:
  - Added missing Evolve OS package detection.
  - Added Evolve OS detection. No ASCII yet.
  - Added imgur to configured upload hosts
  - Fine tuned more of the upload function.
  +v3.6.2
  - Added upload support via -u flag
  - Added pre-configured hosts for -u uploading: teknik, pomf, hmp, and mediacrush
  - Added a configurable section for an scp upload to a specified destination
  - Removed -m flag
  +v3.6.0
  - Added PowerPC support for OS X
  - Added support for Korora and Void Linux
  - Readme: added installation instruction for Debian
  +v3.5.0
  - update list of supported systems
  - Fix Parabola pkg detection.
  - Adding support for the echinus (dwm fork) WM.
  - Add 2bwm support.
  - Various Parabola GNU/Linux-libre aesthetic fixes.
  - Adding NetBSD to supported distros in --help.
  - Fix OpenBSD total RAM output.
  - Un-camelCase the *box WMs, matching the documentation for the *box WMs.
  - Added support for Windows 8.1 (Cygwin)
  - Removed resolution from screenfetch when resolution cannot be found (Win8.1 cygwin)
  - Fix detection of PowerPC G3 to be more exact instead of triggering on UltraSparcs
  - Fixing shrx's URL.
  - add manpage
  - update header license text to GPLv3
  - Red Hat Linux -&gt; Red Hat Enterprise Linux
  - Fix Parabola in --help.
  - improved GPU detection formatting, fixed dual GPU detection formatting
  - Fixes for OS X
  - Fix Arch Linux detection for updated lsb_release
  - Fix for Debian
  - Added support for Raspbian, Antergos and KaOS
  - Fixes for Cinnamon
  - Fix for Android being detected if getprop exists. Disabling Android support until I figure out a better detection method.
  - Redirect STDERR to function to make errors prettier.
  - Commenting gsettings usage for GTK3 theme detection. Causes glib core dump in some places. Removed until I figure out why.
- Add missing dependencies (xdpyinfo and xprop)</changelog>
  <changelog author="mpluskal@suse.com" date="1438084800">- Update to 3.7.0
  * Fixing package detection in apt/dpkg distros
  * Fix xmonad detection
  * Add detection for Sabayon, Haiku, Logos and Chapeau
  * Add ChromeOS logo (without distro detection)
  * Add an option to supply custom ASCII art
  * Combine GTK 2/3 themes if they are the same
  * Reimplement '-d' (allows for setting what information is
    displayed on the command line)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Update dependencies
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1472299200">- Update to version 3.7.0+git.20160826 (boo#995916):
  * silence gsettings if schema wasn't found
  * handle s390 processor IDs and print the marketing name (close #359)
  * New Manjaro logo (closes #373)
  * manpage: MSYS -&gt; MSYS2
  * rename MSYS to MSYS2
  * Add new GNU/Linux distro ROSA
  * corrected screenfetch.1 from distro ROSA
  * Update CHANGELOG
  * identify DE on Windows &gt;= 8 as "Mordern UI/Metro"
  * implement explaination for Crux Linux
  * correct detection of SLES
- Add _service and use git snapshot as stable release is outdated</changelog>
  <changelog author="mpluskal@suse.com" date="1476014400">- Update to version 3.7.0+git.20161002:
  * ChromeOS/ChromiumOS instruction added
  * Update README.mkdn
  * Disable line wrapping by default
  * document `-w' command in README.mkdn
  * document `-w' command in manpage
  * Update CHANGELOG
  * show CPU temperature
  * Update Solus logo
  * No longer gets iTerm's font while in Terminal.app</changelog>
  <changelog author="mpluskal@suse.com" date="1485691200">- Update to version 3.7.0+git.20170127:
  * Add SwagArch to detectpkgs()
  * Add SwagArch to infoDisplay()
  * New distro: Parrot Security (close #425)
  * add GrombyangOS distro
  * Fixed RAM display, corrected OpenBSD section for sub-100MiB output.
  * Added OpenBSD kernel version detection.
  * Patch number added to OpenBSD kernel version.
  * Install instructions: Fedora now uses DNF
  * screenfetch-dev: fixed theme &amp; font name for BunsenLabs desktop.
  * screenfetch-dev: added GTK3 theme detection for BunsenLabs.</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to stable release 3.8.0
  * Additional Intel GPU checks
  * Gentoo release check (whether it's stable/testing/experimental)
  * Chromebrew detection for Chrome OS pkgs
  * OpenBSD fixes
  * Manjaro logo updated
  * Added Fux logo</changelog>
  <changelog author="afaerber@suse.de" date="1511524800">- Require bc to avoid error on startup</changelog>
  <changelog author="mpluskal@suse.com" date="1533211200">- Recommend lsb-release as it is needed for correct detection of
  distribution (boo#1103527)</changelog>
  <changelog author="mpluskal@suse.com" date="1534161600">- Fix shebang</changelog>
</package>
<package pkgid="7432b0faa2ef57013497139489fc77cb259efb79f6f0be736778a1273b9096fa" name="screenfetch" arch="src">
  <version epoch="0" ver="3.8.0" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1415534400">- Repackage from  home:andisugandi</changelog>
  <changelog author="mpluskal@suse.com" date="1415793600">- Rename project</changelog>
  <changelog author="mpluskal@suse.com" date="1417176000">- Update to 3.6.5:
  - Added missing Evolve OS package detection.
  - Added Evolve OS detection. No ASCII yet.
  - Added imgur to configured upload hosts
  - Fine tuned more of the upload function.
  +v3.6.2
  - Added upload support via -u flag
  - Added pre-configured hosts for -u uploading: teknik, pomf, hmp, and mediacrush
  - Added a configurable section for an scp upload to a specified destination
  - Removed -m flag
  +v3.6.0
  - Added PowerPC support for OS X
  - Added support for Korora and Void Linux
  - Readme: added installation instruction for Debian
  +v3.5.0
  - update list of supported systems
  - Fix Parabola pkg detection.
  - Adding support for the echinus (dwm fork) WM.
  - Add 2bwm support.
  - Various Parabola GNU/Linux-libre aesthetic fixes.
  - Adding NetBSD to supported distros in --help.
  - Fix OpenBSD total RAM output.
  - Un-camelCase the *box WMs, matching the documentation for the *box WMs.
  - Added support for Windows 8.1 (Cygwin)
  - Removed resolution from screenfetch when resolution cannot be found (Win8.1 cygwin)
  - Fix detection of PowerPC G3 to be more exact instead of triggering on UltraSparcs
  - Fixing shrx's URL.
  - add manpage
  - update header license text to GPLv3
  - Red Hat Linux -&gt; Red Hat Enterprise Linux
  - Fix Parabola in --help.
  - improved GPU detection formatting, fixed dual GPU detection formatting
  - Fixes for OS X
  - Fix Arch Linux detection for updated lsb_release
  - Fix for Debian
  - Added support for Raspbian, Antergos and KaOS
  - Fixes for Cinnamon
  - Fix for Android being detected if getprop exists. Disabling Android support until I figure out a better detection method.
  - Redirect STDERR to function to make errors prettier.
  - Commenting gsettings usage for GTK3 theme detection. Causes glib core dump in some places. Removed until I figure out why.
- Add missing dependencies (xdpyinfo and xprop)</changelog>
  <changelog author="mpluskal@suse.com" date="1438084800">- Update to 3.7.0
  * Fixing package detection in apt/dpkg distros
  * Fix xmonad detection
  * Add detection for Sabayon, Haiku, Logos and Chapeau
  * Add ChromeOS logo (without distro detection)
  * Add an option to supply custom ASCII art
  * Combine GTK 2/3 themes if they are the same
  * Reimplement '-d' (allows for setting what information is
    displayed on the command line)</changelog>
  <changelog author="toddrme2178@gmail.com" date="1467720000">- Fix Group tag.</changelog>
  <changelog author="mpluskal@suse.com" date="1468670400">- Update dependencies
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1472299200">- Update to version 3.7.0+git.20160826 (boo#995916):
  * silence gsettings if schema wasn't found
  * handle s390 processor IDs and print the marketing name (close #359)
  * New Manjaro logo (closes #373)
  * manpage: MSYS -&gt; MSYS2
  * rename MSYS to MSYS2
  * Add new GNU/Linux distro ROSA
  * corrected screenfetch.1 from distro ROSA
  * Update CHANGELOG
  * identify DE on Windows &gt;= 8 as "Mordern UI/Metro"
  * implement explaination for Crux Linux
  * correct detection of SLES
- Add _service and use git snapshot as stable release is outdated</changelog>
  <changelog author="mpluskal@suse.com" date="1476014400">- Update to version 3.7.0+git.20161002:
  * ChromeOS/ChromiumOS instruction added
  * Update README.mkdn
  * Disable line wrapping by default
  * document `-w' command in README.mkdn
  * document `-w' command in manpage
  * Update CHANGELOG
  * show CPU temperature
  * Update Solus logo
  * No longer gets iTerm's font while in Terminal.app</changelog>
  <changelog author="mpluskal@suse.com" date="1485691200">- Update to version 3.7.0+git.20170127:
  * Add SwagArch to detectpkgs()
  * Add SwagArch to infoDisplay()
  * New distro: Parrot Security (close #425)
  * add GrombyangOS distro
  * Fixed RAM display, corrected OpenBSD section for sub-100MiB output.
  * Added OpenBSD kernel version detection.
  * Patch number added to OpenBSD kernel version.
  * Install instructions: Fedora now uses DNF
  * screenfetch-dev: fixed theme &amp; font name for BunsenLabs desktop.
  * screenfetch-dev: added GTK3 theme detection for BunsenLabs.</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update to stable release 3.8.0
  * Additional Intel GPU checks
  * Gentoo release check (whether it's stable/testing/experimental)
  * Chromebrew detection for Chrome OS pkgs
  * OpenBSD fixes
  * Manjaro logo updated
  * Added Fux logo</changelog>
  <changelog author="afaerber@suse.de" date="1511524800">- Require bc to avoid error on startup</changelog>
  <changelog author="mpluskal@suse.com" date="1533211200">- Recommend lsb-release as it is needed for correct detection of
  distribution (boo#1103527)</changelog>
  <changelog author="mpluskal@suse.com" date="1534161600">- Fix shebang</changelog>
</package>
<package pkgid="e3959313a1021943125d96b36ee7c52ee19a5f887562fc6f640af83fdb3f1f8c" name="sddm" arch="src">
  <version epoch="0" ver="0.17.0" rel="lp150.9.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1499688000">- Replace patch with version merged upstream, to avoid potentially
  killing the X server:
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504267200">- Update to 0.15.0:
  * Fix loading of some avatars
  * CONFIG: add option EnableHiDPI to allow opt out of auto scaling
  * Theme cursor
  * Support optional kwallet PAM opening
  * Autologin, used last used session if not explicitly set in config
  * Ignore session desktop files with hidden=true
  * Support elogind
  * Many new and improved translations
- Remove patches, now upstream:
  * 0001-Also-set-QT_IM_MODULE-in-non-testing-mode.patch
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch
  * 0001-Fix-display-of-user-avatars.-684.patch
  * 0001-Make-the-default-cursor-themed.patch
  * 0001-Parse-desktop-file-sections.patch
  * 0002-Add-a-config-option-to-enable-high-DPI-scaling-701.patch
  * 0002-Ignore-session-desktop-files-with-the-Hidden-propert.patch
  * 0003-elarun-Update-date-and-time.patch
  * 0004-Support-Non-Latin-characters-in-theme-settings-708.patch
  * 0005-Cleanup-dangling-pointer-in-SocketServer-725.patch
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1507809600">- Have update-alternatives handle Xinit's integration of the
  displaymanager, replacing /etc/sysconfig/displaymanager
  (boo#1053863).</changelog>
  <changelog author="tschmidt@suse.com" date="1509192000">- Add "Requires: xdm" because sddm.conf references the files
  '/etc/X11/xdm/Xsession' and '/etc/X11/xdm/Xsetup'</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511870400">- Amend patch toremove elogind from sddm-greeter.pam:
  * proper_pam.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Add patch to add back Xauthority truncation in a way that does
  not break ssh -X (boo#1043221, boo#1069498):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513252800">- Update to 0.17.0:
  + Added possibility to change border width of ComboBox widget.
  + Added missing utmp/wtmp/btmp handling.
  + Make greeter see icons set by AccountsServices.
  - Fix sddm.conf man page syntax error and update.
  - Fix ComboBox widget.
  - Fix connection of PropertiesChanged event for LogindSeat.
  - Avoid race conditions with Xsetup.
  * Update de translation.
  * Update lt translation.
  * Update zh_TW translation.
  * Adjust order of components in the default PATH.
  * Set default input method to qtvirtualkeyboard.
- Update to 0.16.0:
  + Support non-latin characters in theme settings.
  + Support fish shell in Xsession and wayland-session.
  + Unlock GNOME keyring at login.
  + Configuration directory.
  - Make the default cursor themed.
  - Update date and time in elarun theme.
  - Fix theme metadata default values.
  - Fix session selection in elarun.
  - Do not truncate XAUTHORITY on login.
  - Make enabled property of Button functional.
  - Fix typos in documentation.
  * Re-use existing sessions.
  * Add ConsoleKit 2 support.
  * Stop assuming shadow(5) is always available.
  * Explicitely set XDG_SEAT when starting a user session.
  * Suppress errors when pam_elogind is not available.
  * Suppress errors when pam_systemd is not available.
  * Added possibility to change color of dropdown menu.
  * Add Hindi translation.
  * Completed Swedish translation.
  * Update French translation.
- Move to system configuration dirs, replace sddm.conf with
  00-general.conf and 10-theme.conf
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff
- Rename patches:
  * sysconfig-support.patch:
    0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * create_pid_file.patch:
    0001-Write-the-daemon-s-PID-to-a-file-on-startup.patch
- Remove patches, now upstream:
  * 0001-Do-not-truncate-XAUTHORITY-file-on-login.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1519387200">- Only use python-doctools when building for SLE12 since SLE15 has
  rst2man in python3-doctools.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520078400">- Add patch to not quit on SIGHUP (boo#1080305):
  * 0001-Don-t-quit-on-SIGHUP.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520596800">- Reorder patches for easier maintainability, needs refresh of:
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch
  * 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * sddm-relaxed-auth.diff
- Replace 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  with 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
- Add patches to fix setting EnableHiDPI in the configuration:
  * 0001-greeter-Use-Qt-command-line-parser.patch
  * 0001-Fix-platform-detection-for-EnableHiDPI.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521720000">- Add patch to fix build with Qt &lt; 5.10:
  * 0001-Fix-build-with-Qt-5.10-Use-QString-instead-of-QLatin.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Don't add a suffix for wayland sessions anymore, for symmetry with
  gdm and lightdm:
  * 0001-Remove-suffix-for-Wayland-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523534400">- Start the X server with -keeptty (boo#1089287)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523880000">- Revert previous change, had the opposite effect for some reason</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to show a username input field with too many users:
  * 0006-Don-t-fill-UserModel-if-theme-does-not-require-it.patch
- Backport related changes from develop branch:
  * 0001-Support-for-theme-supplied-default-avatars.patch
  * 0002-Remove-trailing-spaces.patch
  * 0003-UserModel-optimize-filtering-out-duplicate-users-995.patch
  * 0004-UserModel-fix-filtering-out-duplicate-users-998.patch
  * 0005-UserModel-optimize-setting-of-default-user-icon-999.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Amend patch to also canonicalize desktop session paths (boo#1092251):
  * 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch
- Add patch to fix build with Qt 5.11:
  * 0001-Fix-build-with-Qt-5.11-1024.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526299200">- Add patch to not include sessions with NoDisplay=true in the list (boo#1086614):
  * 0001-Don-t-add-session-files-with-NoDisplay-true-to-Sessi.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530619200">- Remove patch as libxcb bug is fixed meanwhile (bsc#1099908):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="w01dnick@gmail.com" date="1530964800">- Fix 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
  * Corrected section name for Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1531742400">- Add patch to fix fallback to embedded theme:
  * 0001-Skip-theme-for-greeter-call-if-none-is-set.patch
- Add patch to fix authentication when reusing an existing session
  (boo#1101450, CVE-2018-14345):
  * 0001-Fix-authentication-when-reusing-an-existing-session.patch</changelog>
</package>
<package pkgid="94c623cf3d79cca12952445564f82a10919bc00a2dd4dfd81adbc2cf275b22fd" name="sddm" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="lp150.9.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1499688000">- Replace patch with version merged upstream, to avoid potentially
  killing the X server:
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504267200">- Update to 0.15.0:
  * Fix loading of some avatars
  * CONFIG: add option EnableHiDPI to allow opt out of auto scaling
  * Theme cursor
  * Support optional kwallet PAM opening
  * Autologin, used last used session if not explicitly set in config
  * Ignore session desktop files with hidden=true
  * Support elogind
  * Many new and improved translations
- Remove patches, now upstream:
  * 0001-Also-set-QT_IM_MODULE-in-non-testing-mode.patch
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch
  * 0001-Fix-display-of-user-avatars.-684.patch
  * 0001-Make-the-default-cursor-themed.patch
  * 0001-Parse-desktop-file-sections.patch
  * 0002-Add-a-config-option-to-enable-high-DPI-scaling-701.patch
  * 0002-Ignore-session-desktop-files-with-the-Hidden-propert.patch
  * 0003-elarun-Update-date-and-time.patch
  * 0004-Support-Non-Latin-characters-in-theme-settings-708.patch
  * 0005-Cleanup-dangling-pointer-in-SocketServer-725.patch
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1507809600">- Have update-alternatives handle Xinit's integration of the
  displaymanager, replacing /etc/sysconfig/displaymanager
  (boo#1053863).</changelog>
  <changelog author="tschmidt@suse.com" date="1509192000">- Add "Requires: xdm" because sddm.conf references the files
  '/etc/X11/xdm/Xsession' and '/etc/X11/xdm/Xsetup'</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511870400">- Amend patch toremove elogind from sddm-greeter.pam:
  * proper_pam.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Add patch to add back Xauthority truncation in a way that does
  not break ssh -X (boo#1043221, boo#1069498):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513252800">- Update to 0.17.0:
  + Added possibility to change border width of ComboBox widget.
  + Added missing utmp/wtmp/btmp handling.
  + Make greeter see icons set by AccountsServices.
  - Fix sddm.conf man page syntax error and update.
  - Fix ComboBox widget.
  - Fix connection of PropertiesChanged event for LogindSeat.
  - Avoid race conditions with Xsetup.
  * Update de translation.
  * Update lt translation.
  * Update zh_TW translation.
  * Adjust order of components in the default PATH.
  * Set default input method to qtvirtualkeyboard.
- Update to 0.16.0:
  + Support non-latin characters in theme settings.
  + Support fish shell in Xsession and wayland-session.
  + Unlock GNOME keyring at login.
  + Configuration directory.
  - Make the default cursor themed.
  - Update date and time in elarun theme.
  - Fix theme metadata default values.
  - Fix session selection in elarun.
  - Do not truncate XAUTHORITY on login.
  - Make enabled property of Button functional.
  - Fix typos in documentation.
  * Re-use existing sessions.
  * Add ConsoleKit 2 support.
  * Stop assuming shadow(5) is always available.
  * Explicitely set XDG_SEAT when starting a user session.
  * Suppress errors when pam_elogind is not available.
  * Suppress errors when pam_systemd is not available.
  * Added possibility to change color of dropdown menu.
  * Add Hindi translation.
  * Completed Swedish translation.
  * Update French translation.
- Move to system configuration dirs, replace sddm.conf with
  00-general.conf and 10-theme.conf
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff
- Rename patches:
  * sysconfig-support.patch:
    0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * create_pid_file.patch:
    0001-Write-the-daemon-s-PID-to-a-file-on-startup.patch
- Remove patches, now upstream:
  * 0001-Do-not-truncate-XAUTHORITY-file-on-login.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1519387200">- Only use python-doctools when building for SLE12 since SLE15 has
  rst2man in python3-doctools.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520078400">- Add patch to not quit on SIGHUP (boo#1080305):
  * 0001-Don-t-quit-on-SIGHUP.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520596800">- Reorder patches for easier maintainability, needs refresh of:
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch
  * 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * sddm-relaxed-auth.diff
- Replace 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  with 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
- Add patches to fix setting EnableHiDPI in the configuration:
  * 0001-greeter-Use-Qt-command-line-parser.patch
  * 0001-Fix-platform-detection-for-EnableHiDPI.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521720000">- Add patch to fix build with Qt &lt; 5.10:
  * 0001-Fix-build-with-Qt-5.10-Use-QString-instead-of-QLatin.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Don't add a suffix for wayland sessions anymore, for symmetry with
  gdm and lightdm:
  * 0001-Remove-suffix-for-Wayland-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523534400">- Start the X server with -keeptty (boo#1089287)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523880000">- Revert previous change, had the opposite effect for some reason</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to show a username input field with too many users:
  * 0006-Don-t-fill-UserModel-if-theme-does-not-require-it.patch
- Backport related changes from develop branch:
  * 0001-Support-for-theme-supplied-default-avatars.patch
  * 0002-Remove-trailing-spaces.patch
  * 0003-UserModel-optimize-filtering-out-duplicate-users-995.patch
  * 0004-UserModel-fix-filtering-out-duplicate-users-998.patch
  * 0005-UserModel-optimize-setting-of-default-user-icon-999.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Amend patch to also canonicalize desktop session paths (boo#1092251):
  * 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch
- Add patch to fix build with Qt 5.11:
  * 0001-Fix-build-with-Qt-5.11-1024.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526299200">- Add patch to not include sessions with NoDisplay=true in the list (boo#1086614):
  * 0001-Don-t-add-session-files-with-NoDisplay-true-to-Sessi.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530619200">- Remove patch as libxcb bug is fixed meanwhile (bsc#1099908):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="w01dnick@gmail.com" date="1530964800">- Fix 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
  * Corrected section name for Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1531742400">- Add patch to fix fallback to embedded theme:
  * 0001-Skip-theme-for-greeter-call-if-none-is-set.patch
- Add patch to fix authentication when reusing an existing session
  (boo#1101450, CVE-2018-14345):
  * 0001-Fix-authentication-when-reusing-an-existing-session.patch</changelog>
</package>
<package pkgid="0521a8b259d176101aaf5cbdaa1d59d1d7a8bce9f317e04acad2c000a7eabd92" name="sddm" arch="src">
  <version epoch="0" ver="0.17.0" rel="lp150.9.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1504267200">- Update to 0.15.0:
  * Fix loading of some avatars
  * CONFIG: add option EnableHiDPI to allow opt out of auto scaling
  * Theme cursor
  * Support optional kwallet PAM opening
  * Autologin, used last used session if not explicitly set in config
  * Ignore session desktop files with hidden=true
  * Support elogind
  * Many new and improved translations
- Remove patches, now upstream:
  * 0001-Also-set-QT_IM_MODULE-in-non-testing-mode.patch
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch
  * 0001-Fix-display-of-user-avatars.-684.patch
  * 0001-Make-the-default-cursor-themed.patch
  * 0001-Parse-desktop-file-sections.patch
  * 0002-Add-a-config-option-to-enable-high-DPI-scaling-701.patch
  * 0002-Ignore-session-desktop-files-with-the-Hidden-propert.patch
  * 0003-elarun-Update-date-and-time.patch
  * 0004-Support-Non-Latin-characters-in-theme-settings-708.patch
  * 0005-Cleanup-dangling-pointer-in-SocketServer-725.patch
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1507809600">- Have update-alternatives handle Xinit's integration of the
  displaymanager, replacing /etc/sysconfig/displaymanager
  (boo#1053863).</changelog>
  <changelog author="tschmidt@suse.com" date="1509192000">- Add "Requires: xdm" because sddm.conf references the files
  '/etc/X11/xdm/Xsession' and '/etc/X11/xdm/Xsetup'</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511870400">- Amend patch toremove elogind from sddm-greeter.pam:
  * proper_pam.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Add patch to add back Xauthority truncation in a way that does
  not break ssh -X (boo#1043221, boo#1069498):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513252800">- Update to 0.17.0:
  + Added possibility to change border width of ComboBox widget.
  + Added missing utmp/wtmp/btmp handling.
  + Make greeter see icons set by AccountsServices.
  - Fix sddm.conf man page syntax error and update.
  - Fix ComboBox widget.
  - Fix connection of PropertiesChanged event for LogindSeat.
  - Avoid race conditions with Xsetup.
  * Update de translation.
  * Update lt translation.
  * Update zh_TW translation.
  * Adjust order of components in the default PATH.
  * Set default input method to qtvirtualkeyboard.
- Update to 0.16.0:
  + Support non-latin characters in theme settings.
  + Support fish shell in Xsession and wayland-session.
  + Unlock GNOME keyring at login.
  + Configuration directory.
  - Make the default cursor themed.
  - Update date and time in elarun theme.
  - Fix theme metadata default values.
  - Fix session selection in elarun.
  - Do not truncate XAUTHORITY on login.
  - Make enabled property of Button functional.
  - Fix typos in documentation.
  * Re-use existing sessions.
  * Add ConsoleKit 2 support.
  * Stop assuming shadow(5) is always available.
  * Explicitely set XDG_SEAT when starting a user session.
  * Suppress errors when pam_elogind is not available.
  * Suppress errors when pam_systemd is not available.
  * Added possibility to change color of dropdown menu.
  * Add Hindi translation.
  * Completed Swedish translation.
  * Update French translation.
- Move to system configuration dirs, replace sddm.conf with
  00-general.conf and 10-theme.conf
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff
- Rename patches:
  * sysconfig-support.patch:
    0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * create_pid_file.patch:
    0001-Write-the-daemon-s-PID-to-a-file-on-startup.patch
- Remove patches, now upstream:
  * 0001-Do-not-truncate-XAUTHORITY-file-on-login.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1519387200">- Only use python-doctools when building for SLE12 since SLE15 has
  rst2man in python3-doctools.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520078400">- Add patch to not quit on SIGHUP (boo#1080305):
  * 0001-Don-t-quit-on-SIGHUP.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520596800">- Reorder patches for easier maintainability, needs refresh of:
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch
  * 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * sddm-relaxed-auth.diff
- Replace 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  with 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
- Add patches to fix setting EnableHiDPI in the configuration:
  * 0001-greeter-Use-Qt-command-line-parser.patch
  * 0001-Fix-platform-detection-for-EnableHiDPI.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521720000">- Add patch to fix build with Qt &lt; 5.10:
  * 0001-Fix-build-with-Qt-5.10-Use-QString-instead-of-QLatin.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Don't add a suffix for wayland sessions anymore, for symmetry with
  gdm and lightdm:
  * 0001-Remove-suffix-for-Wayland-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523534400">- Start the X server with -keeptty (boo#1089287)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523880000">- Revert previous change, had the opposite effect for some reason</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to show a username input field with too many users:
  * 0006-Don-t-fill-UserModel-if-theme-does-not-require-it.patch
- Backport related changes from develop branch:
  * 0001-Support-for-theme-supplied-default-avatars.patch
  * 0002-Remove-trailing-spaces.patch
  * 0003-UserModel-optimize-filtering-out-duplicate-users-995.patch
  * 0004-UserModel-fix-filtering-out-duplicate-users-998.patch
  * 0005-UserModel-optimize-setting-of-default-user-icon-999.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Amend patch to also canonicalize desktop session paths (boo#1092251):
  * 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch
- Add patch to fix build with Qt 5.11:
  * 0001-Fix-build-with-Qt-5.11-1024.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526299200">- Add patch to not include sessions with NoDisplay=true in the list (boo#1086614):
  * 0001-Don-t-add-session-files-with-NoDisplay-true-to-Sessi.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530619200">- Remove patch as libxcb bug is fixed meanwhile (bsc#1099908):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="w01dnick@gmail.com" date="1530964800">- Fix 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
  * Corrected section name for Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1531742400">- Add patch to fix fallback to embedded theme:
  * 0001-Skip-theme-for-greeter-call-if-none-is-set.patch
- Add patch to fix authentication when reusing an existing session
  (boo#1101450, CVE-2018-14345):
  * 0001-Fix-authentication-when-reusing-an-existing-session.patch</changelog>
  <changelog author="luizluca@gmail.com" date="1534334400">- Backport fix for pam_group from develop branch (boo#1105342):
  * 0007-Honor-PAMs-ambient-supplemental-groups.patch (gh#sddm/sddm/834)</changelog>
</package>
<package pkgid="87f6a7df1b63e1c9f3206554ee778a0064a5e4aeb56267094af59dd7e268c731" name="sddm" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="lp150.9.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1504267200">- Update to 0.15.0:
  * Fix loading of some avatars
  * CONFIG: add option EnableHiDPI to allow opt out of auto scaling
  * Theme cursor
  * Support optional kwallet PAM opening
  * Autologin, used last used session if not explicitly set in config
  * Ignore session desktop files with hidden=true
  * Support elogind
  * Many new and improved translations
- Remove patches, now upstream:
  * 0001-Also-set-QT_IM_MODULE-in-non-testing-mode.patch
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch
  * 0001-Fix-display-of-user-avatars.-684.patch
  * 0001-Make-the-default-cursor-themed.patch
  * 0001-Parse-desktop-file-sections.patch
  * 0002-Add-a-config-option-to-enable-high-DPI-scaling-701.patch
  * 0002-Ignore-session-desktop-files-with-the-Hidden-propert.patch
  * 0003-elarun-Update-date-and-time.patch
  * 0004-Support-Non-Latin-characters-in-theme-settings-708.patch
  * 0005-Cleanup-dangling-pointer-in-SocketServer-725.patch
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1507809600">- Have update-alternatives handle Xinit's integration of the
  displaymanager, replacing /etc/sysconfig/displaymanager
  (boo#1053863).</changelog>
  <changelog author="tschmidt@suse.com" date="1509192000">- Add "Requires: xdm" because sddm.conf references the files
  '/etc/X11/xdm/Xsession' and '/etc/X11/xdm/Xsetup'</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511870400">- Amend patch toremove elogind from sddm-greeter.pam:
  * proper_pam.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Add patch to add back Xauthority truncation in a way that does
  not break ssh -X (boo#1043221, boo#1069498):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513252800">- Update to 0.17.0:
  + Added possibility to change border width of ComboBox widget.
  + Added missing utmp/wtmp/btmp handling.
  + Make greeter see icons set by AccountsServices.
  - Fix sddm.conf man page syntax error and update.
  - Fix ComboBox widget.
  - Fix connection of PropertiesChanged event for LogindSeat.
  - Avoid race conditions with Xsetup.
  * Update de translation.
  * Update lt translation.
  * Update zh_TW translation.
  * Adjust order of components in the default PATH.
  * Set default input method to qtvirtualkeyboard.
- Update to 0.16.0:
  + Support non-latin characters in theme settings.
  + Support fish shell in Xsession and wayland-session.
  + Unlock GNOME keyring at login.
  + Configuration directory.
  - Make the default cursor themed.
  - Update date and time in elarun theme.
  - Fix theme metadata default values.
  - Fix session selection in elarun.
  - Do not truncate XAUTHORITY on login.
  - Make enabled property of Button functional.
  - Fix typos in documentation.
  * Re-use existing sessions.
  * Add ConsoleKit 2 support.
  * Stop assuming shadow(5) is always available.
  * Explicitely set XDG_SEAT when starting a user session.
  * Suppress errors when pam_elogind is not available.
  * Suppress errors when pam_systemd is not available.
  * Added possibility to change color of dropdown menu.
  * Add Hindi translation.
  * Completed Swedish translation.
  * Update French translation.
- Move to system configuration dirs, replace sddm.conf with
  00-general.conf and 10-theme.conf
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff
- Rename patches:
  * sysconfig-support.patch:
    0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * create_pid_file.patch:
    0001-Write-the-daemon-s-PID-to-a-file-on-startup.patch
- Remove patches, now upstream:
  * 0001-Do-not-truncate-XAUTHORITY-file-on-login.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1519387200">- Only use python-doctools when building for SLE12 since SLE15 has
  rst2man in python3-doctools.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520078400">- Add patch to not quit on SIGHUP (boo#1080305):
  * 0001-Don-t-quit-on-SIGHUP.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520596800">- Reorder patches for easier maintainability, needs refresh of:
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch
  * 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * sddm-relaxed-auth.diff
- Replace 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  with 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
- Add patches to fix setting EnableHiDPI in the configuration:
  * 0001-greeter-Use-Qt-command-line-parser.patch
  * 0001-Fix-platform-detection-for-EnableHiDPI.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521720000">- Add patch to fix build with Qt &lt; 5.10:
  * 0001-Fix-build-with-Qt-5.10-Use-QString-instead-of-QLatin.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Don't add a suffix for wayland sessions anymore, for symmetry with
  gdm and lightdm:
  * 0001-Remove-suffix-for-Wayland-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523534400">- Start the X server with -keeptty (boo#1089287)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523880000">- Revert previous change, had the opposite effect for some reason</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to show a username input field with too many users:
  * 0006-Don-t-fill-UserModel-if-theme-does-not-require-it.patch
- Backport related changes from develop branch:
  * 0001-Support-for-theme-supplied-default-avatars.patch
  * 0002-Remove-trailing-spaces.patch
  * 0003-UserModel-optimize-filtering-out-duplicate-users-995.patch
  * 0004-UserModel-fix-filtering-out-duplicate-users-998.patch
  * 0005-UserModel-optimize-setting-of-default-user-icon-999.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Amend patch to also canonicalize desktop session paths (boo#1092251):
  * 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch
- Add patch to fix build with Qt 5.11:
  * 0001-Fix-build-with-Qt-5.11-1024.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526299200">- Add patch to not include sessions with NoDisplay=true in the list (boo#1086614):
  * 0001-Don-t-add-session-files-with-NoDisplay-true-to-Sessi.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530619200">- Remove patch as libxcb bug is fixed meanwhile (bsc#1099908):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="w01dnick@gmail.com" date="1530964800">- Fix 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
  * Corrected section name for Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1531742400">- Add patch to fix fallback to embedded theme:
  * 0001-Skip-theme-for-greeter-call-if-none-is-set.patch
- Add patch to fix authentication when reusing an existing session
  (boo#1101450, CVE-2018-14345):
  * 0001-Fix-authentication-when-reusing-an-existing-session.patch</changelog>
  <changelog author="luizluca@gmail.com" date="1534334400">- Backport fix for pam_group from develop branch (boo#1105342):
  * 0007-Honor-PAMs-ambient-supplemental-groups.patch (gh#sddm/sddm/834)</changelog>
</package>
<package pkgid="5fae2df7149da42b82ed5bc65c1d04b4e12e593dc5b180859738cdfcc2d26e77" name="sddm-branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="lp150.9.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1499688000">- Replace patch with version merged upstream, to avoid potentially
  killing the X server:
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504267200">- Update to 0.15.0:
  * Fix loading of some avatars
  * CONFIG: add option EnableHiDPI to allow opt out of auto scaling
  * Theme cursor
  * Support optional kwallet PAM opening
  * Autologin, used last used session if not explicitly set in config
  * Ignore session desktop files with hidden=true
  * Support elogind
  * Many new and improved translations
- Remove patches, now upstream:
  * 0001-Also-set-QT_IM_MODULE-in-non-testing-mode.patch
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch
  * 0001-Fix-display-of-user-avatars.-684.patch
  * 0001-Make-the-default-cursor-themed.patch
  * 0001-Parse-desktop-file-sections.patch
  * 0002-Add-a-config-option-to-enable-high-DPI-scaling-701.patch
  * 0002-Ignore-session-desktop-files-with-the-Hidden-propert.patch
  * 0003-elarun-Update-date-and-time.patch
  * 0004-Support-Non-Latin-characters-in-theme-settings-708.patch
  * 0005-Cleanup-dangling-pointer-in-SocketServer-725.patch
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1507809600">- Have update-alternatives handle Xinit's integration of the
  displaymanager, replacing /etc/sysconfig/displaymanager
  (boo#1053863).</changelog>
  <changelog author="tschmidt@suse.com" date="1509192000">- Add "Requires: xdm" because sddm.conf references the files
  '/etc/X11/xdm/Xsession' and '/etc/X11/xdm/Xsetup'</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511870400">- Amend patch toremove elogind from sddm-greeter.pam:
  * proper_pam.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Add patch to add back Xauthority truncation in a way that does
  not break ssh -X (boo#1043221, boo#1069498):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513252800">- Update to 0.17.0:
  + Added possibility to change border width of ComboBox widget.
  + Added missing utmp/wtmp/btmp handling.
  + Make greeter see icons set by AccountsServices.
  - Fix sddm.conf man page syntax error and update.
  - Fix ComboBox widget.
  - Fix connection of PropertiesChanged event for LogindSeat.
  - Avoid race conditions with Xsetup.
  * Update de translation.
  * Update lt translation.
  * Update zh_TW translation.
  * Adjust order of components in the default PATH.
  * Set default input method to qtvirtualkeyboard.
- Update to 0.16.0:
  + Support non-latin characters in theme settings.
  + Support fish shell in Xsession and wayland-session.
  + Unlock GNOME keyring at login.
  + Configuration directory.
  - Make the default cursor themed.
  - Update date and time in elarun theme.
  - Fix theme metadata default values.
  - Fix session selection in elarun.
  - Do not truncate XAUTHORITY on login.
  - Make enabled property of Button functional.
  - Fix typos in documentation.
  * Re-use existing sessions.
  * Add ConsoleKit 2 support.
  * Stop assuming shadow(5) is always available.
  * Explicitely set XDG_SEAT when starting a user session.
  * Suppress errors when pam_elogind is not available.
  * Suppress errors when pam_systemd is not available.
  * Added possibility to change color of dropdown menu.
  * Add Hindi translation.
  * Completed Swedish translation.
  * Update French translation.
- Move to system configuration dirs, replace sddm.conf with
  00-general.conf and 10-theme.conf
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff
- Rename patches:
  * sysconfig-support.patch:
    0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * create_pid_file.patch:
    0001-Write-the-daemon-s-PID-to-a-file-on-startup.patch
- Remove patches, now upstream:
  * 0001-Do-not-truncate-XAUTHORITY-file-on-login.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1519387200">- Only use python-doctools when building for SLE12 since SLE15 has
  rst2man in python3-doctools.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520078400">- Add patch to not quit on SIGHUP (boo#1080305):
  * 0001-Don-t-quit-on-SIGHUP.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520596800">- Reorder patches for easier maintainability, needs refresh of:
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch
  * 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * sddm-relaxed-auth.diff
- Replace 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  with 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
- Add patches to fix setting EnableHiDPI in the configuration:
  * 0001-greeter-Use-Qt-command-line-parser.patch
  * 0001-Fix-platform-detection-for-EnableHiDPI.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521720000">- Add patch to fix build with Qt &lt; 5.10:
  * 0001-Fix-build-with-Qt-5.10-Use-QString-instead-of-QLatin.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Don't add a suffix for wayland sessions anymore, for symmetry with
  gdm and lightdm:
  * 0001-Remove-suffix-for-Wayland-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523534400">- Start the X server with -keeptty (boo#1089287)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523880000">- Revert previous change, had the opposite effect for some reason</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to show a username input field with too many users:
  * 0006-Don-t-fill-UserModel-if-theme-does-not-require-it.patch
- Backport related changes from develop branch:
  * 0001-Support-for-theme-supplied-default-avatars.patch
  * 0002-Remove-trailing-spaces.patch
  * 0003-UserModel-optimize-filtering-out-duplicate-users-995.patch
  * 0004-UserModel-fix-filtering-out-duplicate-users-998.patch
  * 0005-UserModel-optimize-setting-of-default-user-icon-999.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Amend patch to also canonicalize desktop session paths (boo#1092251):
  * 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch
- Add patch to fix build with Qt 5.11:
  * 0001-Fix-build-with-Qt-5.11-1024.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526299200">- Add patch to not include sessions with NoDisplay=true in the list (boo#1086614):
  * 0001-Don-t-add-session-files-with-NoDisplay-true-to-Sessi.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530619200">- Remove patch as libxcb bug is fixed meanwhile (bsc#1099908):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="w01dnick@gmail.com" date="1530964800">- Fix 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
  * Corrected section name for Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1531742400">- Add patch to fix fallback to embedded theme:
  * 0001-Skip-theme-for-greeter-call-if-none-is-set.patch
- Add patch to fix authentication when reusing an existing session
  (boo#1101450, CVE-2018-14345):
  * 0001-Fix-authentication-when-reusing-an-existing-session.patch</changelog>
</package>
<package pkgid="8bf83af34616b1624ccbf599554e9f5db9598dcc7c47f66fdbad9e385b87d2d6" name="sddm-branding-openSUSE" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="lp150.9.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1504267200">- Update to 0.15.0:
  * Fix loading of some avatars
  * CONFIG: add option EnableHiDPI to allow opt out of auto scaling
  * Theme cursor
  * Support optional kwallet PAM opening
  * Autologin, used last used session if not explicitly set in config
  * Ignore session desktop files with hidden=true
  * Support elogind
  * Many new and improved translations
- Remove patches, now upstream:
  * 0001-Also-set-QT_IM_MODULE-in-non-testing-mode.patch
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch
  * 0001-Fix-display-of-user-avatars.-684.patch
  * 0001-Make-the-default-cursor-themed.patch
  * 0001-Parse-desktop-file-sections.patch
  * 0002-Add-a-config-option-to-enable-high-DPI-scaling-701.patch
  * 0002-Ignore-session-desktop-files-with-the-Hidden-propert.patch
  * 0003-elarun-Update-date-and-time.patch
  * 0004-Support-Non-Latin-characters-in-theme-settings-708.patch
  * 0005-Cleanup-dangling-pointer-in-SocketServer-725.patch
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1507809600">- Have update-alternatives handle Xinit's integration of the
  displaymanager, replacing /etc/sysconfig/displaymanager
  (boo#1053863).</changelog>
  <changelog author="tschmidt@suse.com" date="1509192000">- Add "Requires: xdm" because sddm.conf references the files
  '/etc/X11/xdm/Xsession' and '/etc/X11/xdm/Xsetup'</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511870400">- Amend patch toremove elogind from sddm-greeter.pam:
  * proper_pam.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Add patch to add back Xauthority truncation in a way that does
  not break ssh -X (boo#1043221, boo#1069498):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513252800">- Update to 0.17.0:
  + Added possibility to change border width of ComboBox widget.
  + Added missing utmp/wtmp/btmp handling.
  + Make greeter see icons set by AccountsServices.
  - Fix sddm.conf man page syntax error and update.
  - Fix ComboBox widget.
  - Fix connection of PropertiesChanged event for LogindSeat.
  - Avoid race conditions with Xsetup.
  * Update de translation.
  * Update lt translation.
  * Update zh_TW translation.
  * Adjust order of components in the default PATH.
  * Set default input method to qtvirtualkeyboard.
- Update to 0.16.0:
  + Support non-latin characters in theme settings.
  + Support fish shell in Xsession and wayland-session.
  + Unlock GNOME keyring at login.
  + Configuration directory.
  - Make the default cursor themed.
  - Update date and time in elarun theme.
  - Fix theme metadata default values.
  - Fix session selection in elarun.
  - Do not truncate XAUTHORITY on login.
  - Make enabled property of Button functional.
  - Fix typos in documentation.
  * Re-use existing sessions.
  * Add ConsoleKit 2 support.
  * Stop assuming shadow(5) is always available.
  * Explicitely set XDG_SEAT when starting a user session.
  * Suppress errors when pam_elogind is not available.
  * Suppress errors when pam_systemd is not available.
  * Added possibility to change color of dropdown menu.
  * Add Hindi translation.
  * Completed Swedish translation.
  * Update French translation.
- Move to system configuration dirs, replace sddm.conf with
  00-general.conf and 10-theme.conf
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff
- Rename patches:
  * sysconfig-support.patch:
    0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * create_pid_file.patch:
    0001-Write-the-daemon-s-PID-to-a-file-on-startup.patch
- Remove patches, now upstream:
  * 0001-Do-not-truncate-XAUTHORITY-file-on-login.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1519387200">- Only use python-doctools when building for SLE12 since SLE15 has
  rst2man in python3-doctools.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520078400">- Add patch to not quit on SIGHUP (boo#1080305):
  * 0001-Don-t-quit-on-SIGHUP.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520596800">- Reorder patches for easier maintainability, needs refresh of:
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch
  * 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * sddm-relaxed-auth.diff
- Replace 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  with 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
- Add patches to fix setting EnableHiDPI in the configuration:
  * 0001-greeter-Use-Qt-command-line-parser.patch
  * 0001-Fix-platform-detection-for-EnableHiDPI.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521720000">- Add patch to fix build with Qt &lt; 5.10:
  * 0001-Fix-build-with-Qt-5.10-Use-QString-instead-of-QLatin.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Don't add a suffix for wayland sessions anymore, for symmetry with
  gdm and lightdm:
  * 0001-Remove-suffix-for-Wayland-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523534400">- Start the X server with -keeptty (boo#1089287)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523880000">- Revert previous change, had the opposite effect for some reason</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to show a username input field with too many users:
  * 0006-Don-t-fill-UserModel-if-theme-does-not-require-it.patch
- Backport related changes from develop branch:
  * 0001-Support-for-theme-supplied-default-avatars.patch
  * 0002-Remove-trailing-spaces.patch
  * 0003-UserModel-optimize-filtering-out-duplicate-users-995.patch
  * 0004-UserModel-fix-filtering-out-duplicate-users-998.patch
  * 0005-UserModel-optimize-setting-of-default-user-icon-999.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Amend patch to also canonicalize desktop session paths (boo#1092251):
  * 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch
- Add patch to fix build with Qt 5.11:
  * 0001-Fix-build-with-Qt-5.11-1024.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526299200">- Add patch to not include sessions with NoDisplay=true in the list (boo#1086614):
  * 0001-Don-t-add-session-files-with-NoDisplay-true-to-Sessi.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530619200">- Remove patch as libxcb bug is fixed meanwhile (bsc#1099908):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="w01dnick@gmail.com" date="1530964800">- Fix 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
  * Corrected section name for Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1531742400">- Add patch to fix fallback to embedded theme:
  * 0001-Skip-theme-for-greeter-call-if-none-is-set.patch
- Add patch to fix authentication when reusing an existing session
  (boo#1101450, CVE-2018-14345):
  * 0001-Fix-authentication-when-reusing-an-existing-session.patch</changelog>
  <changelog author="luizluca@gmail.com" date="1534334400">- Backport fix for pam_group from develop branch (boo#1105342):
  * 0007-Honor-PAMs-ambient-supplemental-groups.patch (gh#sddm/sddm/834)</changelog>
</package>
<package pkgid="617232eb2836eed9526af840110d74fd398e7e64a87e80a37c1a81eb9f12267f" name="sddm-branding-upstream" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="lp150.9.3.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1499688000">- Replace patch with version merged upstream, to avoid potentially
  killing the X server:
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1504267200">- Update to 0.15.0:
  * Fix loading of some avatars
  * CONFIG: add option EnableHiDPI to allow opt out of auto scaling
  * Theme cursor
  * Support optional kwallet PAM opening
  * Autologin, used last used session if not explicitly set in config
  * Ignore session desktop files with hidden=true
  * Support elogind
  * Many new and improved translations
- Remove patches, now upstream:
  * 0001-Also-set-QT_IM_MODULE-in-non-testing-mode.patch
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch
  * 0001-Fix-display-of-user-avatars.-684.patch
  * 0001-Make-the-default-cursor-themed.patch
  * 0001-Parse-desktop-file-sections.patch
  * 0002-Add-a-config-option-to-enable-high-DPI-scaling-701.patch
  * 0002-Ignore-session-desktop-files-with-the-Hidden-propert.patch
  * 0003-elarun-Update-date-and-time.patch
  * 0004-Support-Non-Latin-characters-in-theme-settings-708.patch
  * 0005-Cleanup-dangling-pointer-in-SocketServer-725.patch
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1507809600">- Have update-alternatives handle Xinit's integration of the
  displaymanager, replacing /etc/sysconfig/displaymanager
  (boo#1053863).</changelog>
  <changelog author="tschmidt@suse.com" date="1509192000">- Add "Requires: xdm" because sddm.conf references the files
  '/etc/X11/xdm/Xsession' and '/etc/X11/xdm/Xsetup'</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511870400">- Amend patch toremove elogind from sddm-greeter.pam:
  * proper_pam.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Add patch to add back Xauthority truncation in a way that does
  not break ssh -X (boo#1043221, boo#1069498):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513252800">- Update to 0.17.0:
  + Added possibility to change border width of ComboBox widget.
  + Added missing utmp/wtmp/btmp handling.
  + Make greeter see icons set by AccountsServices.
  - Fix sddm.conf man page syntax error and update.
  - Fix ComboBox widget.
  - Fix connection of PropertiesChanged event for LogindSeat.
  - Avoid race conditions with Xsetup.
  * Update de translation.
  * Update lt translation.
  * Update zh_TW translation.
  * Adjust order of components in the default PATH.
  * Set default input method to qtvirtualkeyboard.
- Update to 0.16.0:
  + Support non-latin characters in theme settings.
  + Support fish shell in Xsession and wayland-session.
  + Unlock GNOME keyring at login.
  + Configuration directory.
  - Make the default cursor themed.
  - Update date and time in elarun theme.
  - Fix theme metadata default values.
  - Fix session selection in elarun.
  - Do not truncate XAUTHORITY on login.
  - Make enabled property of Button functional.
  - Fix typos in documentation.
  * Re-use existing sessions.
  * Add ConsoleKit 2 support.
  * Stop assuming shadow(5) is always available.
  * Explicitely set XDG_SEAT when starting a user session.
  * Suppress errors when pam_elogind is not available.
  * Suppress errors when pam_systemd is not available.
  * Added possibility to change color of dropdown menu.
  * Add Hindi translation.
  * Completed Swedish translation.
  * Update French translation.
- Move to system configuration dirs, replace sddm.conf with
  00-general.conf and 10-theme.conf
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff
- Rename patches:
  * sysconfig-support.patch:
    0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * create_pid_file.patch:
    0001-Write-the-daemon-s-PID-to-a-file-on-startup.patch
- Remove patches, now upstream:
  * 0001-Do-not-truncate-XAUTHORITY-file-on-login.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1519387200">- Only use python-doctools when building for SLE12 since SLE15 has
  rst2man in python3-doctools.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520078400">- Add patch to not quit on SIGHUP (boo#1080305):
  * 0001-Don-t-quit-on-SIGHUP.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520596800">- Reorder patches for easier maintainability, needs refresh of:
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch
  * 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * sddm-relaxed-auth.diff
- Replace 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  with 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
- Add patches to fix setting EnableHiDPI in the configuration:
  * 0001-greeter-Use-Qt-command-line-parser.patch
  * 0001-Fix-platform-detection-for-EnableHiDPI.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521720000">- Add patch to fix build with Qt &lt; 5.10:
  * 0001-Fix-build-with-Qt-5.10-Use-QString-instead-of-QLatin.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Don't add a suffix for wayland sessions anymore, for symmetry with
  gdm and lightdm:
  * 0001-Remove-suffix-for-Wayland-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523534400">- Start the X server with -keeptty (boo#1089287)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523880000">- Revert previous change, had the opposite effect for some reason</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to show a username input field with too many users:
  * 0006-Don-t-fill-UserModel-if-theme-does-not-require-it.patch
- Backport related changes from develop branch:
  * 0001-Support-for-theme-supplied-default-avatars.patch
  * 0002-Remove-trailing-spaces.patch
  * 0003-UserModel-optimize-filtering-out-duplicate-users-995.patch
  * 0004-UserModel-fix-filtering-out-duplicate-users-998.patch
  * 0005-UserModel-optimize-setting-of-default-user-icon-999.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Amend patch to also canonicalize desktop session paths (boo#1092251):
  * 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch
- Add patch to fix build with Qt 5.11:
  * 0001-Fix-build-with-Qt-5.11-1024.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526299200">- Add patch to not include sessions with NoDisplay=true in the list (boo#1086614):
  * 0001-Don-t-add-session-files-with-NoDisplay-true-to-Sessi.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530619200">- Remove patch as libxcb bug is fixed meanwhile (bsc#1099908):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="w01dnick@gmail.com" date="1530964800">- Fix 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
  * Corrected section name for Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1531742400">- Add patch to fix fallback to embedded theme:
  * 0001-Skip-theme-for-greeter-call-if-none-is-set.patch
- Add patch to fix authentication when reusing an existing session
  (boo#1101450, CVE-2018-14345):
  * 0001-Fix-authentication-when-reusing-an-existing-session.patch</changelog>
</package>
<package pkgid="7cc501df238ed8e21bcd01dc494a756bf31e4c9702743ca8f54e2dcedc06e7dc" name="sddm-branding-upstream" arch="x86_64">
  <version epoch="0" ver="0.17.0" rel="lp150.9.6.1"/>
  <changelog author="fabian@ritter-vogt.de" date="1504267200">- Update to 0.15.0:
  * Fix loading of some avatars
  * CONFIG: add option EnableHiDPI to allow opt out of auto scaling
  * Theme cursor
  * Support optional kwallet PAM opening
  * Autologin, used last used session if not explicitly set in config
  * Ignore session desktop files with hidden=true
  * Support elogind
  * Many new and improved translations
- Remove patches, now upstream:
  * 0001-Also-set-QT_IM_MODULE-in-non-testing-mode.patch
  * 0001-Also-theme-the-default-cursor-for-the-root-window.patch
  * 0001-Fix-display-of-user-avatars.-684.patch
  * 0001-Make-the-default-cursor-themed.patch
  * 0001-Parse-desktop-file-sections.patch
  * 0002-Add-a-config-option-to-enable-high-DPI-scaling-701.patch
  * 0002-Ignore-session-desktop-files-with-the-Hidden-propert.patch
  * 0003-elarun-Update-date-and-time.patch
  * 0004-Support-Non-Latin-characters-in-theme-settings-708.patch
  * 0005-Cleanup-dangling-pointer-in-SocketServer-725.patch
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff</changelog>
  <changelog author="dimstar@opensuse.org" date="1507809600">- Have update-alternatives handle Xinit's integration of the
  displaymanager, replacing /etc/sysconfig/displaymanager
  (boo#1053863).</changelog>
  <changelog author="tschmidt@suse.com" date="1509192000">- Add "Requires: xdm" because sddm.conf references the files
  '/etc/X11/xdm/Xsession' and '/etc/X11/xdm/Xsetup'</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1511870400">- Amend patch toremove elogind from sddm-greeter.pam:
  * proper_pam.diff</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1512043200">- Add patch to add back Xauthority truncation in a way that does
  not break ssh -X (boo#1043221, boo#1069498):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1513252800">- Update to 0.17.0:
  + Added possibility to change border width of ComboBox widget.
  + Added missing utmp/wtmp/btmp handling.
  + Make greeter see icons set by AccountsServices.
  - Fix sddm.conf man page syntax error and update.
  - Fix ComboBox widget.
  - Fix connection of PropertiesChanged event for LogindSeat.
  - Avoid race conditions with Xsetup.
  * Update de translation.
  * Update lt translation.
  * Update zh_TW translation.
  * Adjust order of components in the default PATH.
  * Set default input method to qtvirtualkeyboard.
- Update to 0.16.0:
  + Support non-latin characters in theme settings.
  + Support fish shell in Xsession and wayland-session.
  + Unlock GNOME keyring at login.
  + Configuration directory.
  - Make the default cursor themed.
  - Update date and time in elarun theme.
  - Fix theme metadata default values.
  - Fix session selection in elarun.
  - Do not truncate XAUTHORITY on login.
  - Make enabled property of Button functional.
  - Fix typos in documentation.
  * Re-use existing sessions.
  * Add ConsoleKit 2 support.
  * Stop assuming shadow(5) is always available.
  * Explicitely set XDG_SEAT when starting a user session.
  * Suppress errors when pam_elogind is not available.
  * Suppress errors when pam_systemd is not available.
  * Added possibility to change color of dropdown menu.
  * Add Hindi translation.
  * Completed Swedish translation.
  * Update French translation.
- Move to system configuration dirs, replace sddm.conf with
  00-general.conf and 10-theme.conf
- Refresh patches:
  * 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  * proper_pam.diff
- Rename patches:
  * sysconfig-support.patch:
    0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * create_pid_file.patch:
    0001-Write-the-daemon-s-PID-to-a-file-on-startup.patch
- Remove patches, now upstream:
  * 0001-Do-not-truncate-XAUTHORITY-file-on-login.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1519387200">- Only use python-doctools when building for SLE12 since SLE15 has
  rst2man in python3-doctools.</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520078400">- Add patch to not quit on SIGHUP (boo#1080305):
  * 0001-Don-t-quit-on-SIGHUP.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1520596800">- Reorder patches for easier maintainability, needs refresh of:
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch
  * 0001-Read-the-DISPLAYMANAGER_AUTOLOGIN-value-from-sysconf.patch
  * sddm-relaxed-auth.diff
- Replace 0001-Revert-Rename-XDisplay-and-WaylandDisplay-config-sec.patch
  with 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
- Add patches to fix setting EnableHiDPI in the configuration:
  * 0001-greeter-Use-Qt-command-line-parser.patch
  * 0001-Fix-platform-detection-for-EnableHiDPI.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521720000">- Add patch to fix build with Qt &lt; 5.10:
  * 0001-Fix-build-with-Qt-5.10-Use-QString-instead-of-QLatin.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1521892800">- Don't add a suffix for wayland sessions anymore, for symmetry with
  gdm and lightdm:
  * 0001-Remove-suffix-for-Wayland-session.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523534400">- Start the X server with -keeptty (boo#1089287)</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1523880000">- Revert previous change, had the opposite effect for some reason</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1524484800">- Add patch to show a username input field with too many users:
  * 0006-Don-t-fill-UserModel-if-theme-does-not-require-it.patch
- Backport related changes from develop branch:
  * 0001-Support-for-theme-supplied-default-avatars.patch
  * 0002-Remove-trailing-spaces.patch
  * 0003-UserModel-optimize-filtering-out-duplicate-users-995.patch
  * 0004-UserModel-fix-filtering-out-duplicate-users-998.patch
  * 0005-UserModel-optimize-setting-of-default-user-icon-999.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1525867200">- Amend patch to also canonicalize desktop session paths (boo#1092251):
  * 0003-Leave-duplicate-symlinks-out-of-the-SessionModel.patch
- Add patch to fix build with Qt 5.11:
  * 0001-Fix-build-with-Qt-5.11-1024.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1526299200">- Add patch to not include sessions with NoDisplay=true in the list (boo#1086614):
  * 0001-Don-t-add-session-files-with-NoDisplay-true-to-Sessi.patch</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1530619200">- Remove patch as libxcb bug is fixed meanwhile (bsc#1099908):
  * 0001-Move-Xauthority-to-a-different-location-and-truncate.patch</changelog>
  <changelog author="w01dnick@gmail.com" date="1530964800">- Fix 0001-Support-both-X11-XDisplay-Wayland-and-WaylandDisplay.patch
  * Corrected section name for Wayland</changelog>
  <changelog author="fabian@ritter-vogt.de" date="1531742400">- Add patch to fix fallback to embedded theme:
  * 0001-Skip-theme-for-greeter-call-if-none-is-set.patch
- Add patch to fix authentication when reusing an existing session
  (boo#1101450, CVE-2018-14345):
  * 0001-Fix-authentication-when-reusing-an-existing-session.patch</changelog>
  <changelog author="luizluca@gmail.com" date="1534334400">- Backport fix for pam_group from develop branch (boo#1105342):
  * 0007-Honor-PAMs-ambient-supplemental-groups.patch (gh#sddm/sddm/834)</changelog>
</package>
<package pkgid="44ee32887619de00c9c6da2e62b6e141187940f8ff2c02033f8e80082021d40f" name="seamonkey" arch="src">
  <version epoch="0" ver="2.49.4" rel="lp150.2.3.2"/>
  <changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1453204800">- update to Seamonkey 2.40 (bnc#959277)
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches
- buildrequire xcomposite now explicitely</changelog>
  <changelog author="wr@rosenauer.org" date="1457179200">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch
- increased _constraints as required</changelog>
  <changelog author="badshah400@gmail.com" date="1468756800">- Add mozilla-gcc6.patch to fix building with gcc &gt;= 6.0.</changelog>
  <changelog author="badshah400@gmail.com" date="1469534400">- Add appstream metainfo files as a tar.bz2 source
  (seamonkey-appdata.tar.bz2) and install these appdata.xml files
  to the appdata dir (/usr/share/appdata); with these appdata
  files installed, seamonkey shows up in appstores like GNOME
  software and KDE Discover.</changelog>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1470657600">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#991027)</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1471780800">- Build also with fno-lifetime-dse and fno-schedule-insns2 for GCC6
  (still boo#991027)
- Check compiler version instead of openSUSE version for this</changelog>
  <changelog author="wr@rosenauer.org" date="1476705600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
  <changelog author="wr@rosenauer.org" date="1482494400">- update to Seamonkey 2.46
  * based on Gecko 49.0.2
  * Chatzilla and DOM Inspector were removed/disabled and therefore
    those subpackages are not available at this moment
- requires NSPR 4.12 and NSS 3.25
- removed obsolete patches
  * mozilla-libproxy.patch
  * mozilla-gcc6.patch
  * mozilla-openaes-decl.patch
- rebased patches
- added patches imported from Firefox 49:
  * mozilla-check_return.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-skia-overflow.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- improve recognition of LANGUAGE env variable (boo#1017174)
- update minimum keybits in H2 so it allows a smaller value
  (e.g. for curve25519 as supported with NSS 3.28) (bmo#1290037)
  (boo#1021636) (mozilla-http2-ecdh-keybits.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- fix configure with for sed &gt;= 4.3 (boo#1020631) (mozilla-sed43.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1501848000">- update to Seamonkey 2.48
  * based on Gecko 51.0.3
  * requires NSPR 4.13.1 and NSS 3.28.5 (aligned with 52ESR)
- removed obsolete (upstreamed) patches
  * mozilla-http2-ecdh-keybits.patch
  * mozilla-sed43.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-shared-nss-db.patch (feature dropped from SM due to
    maintenance costs vs. usefulness)
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-skia-overflow.patch
- rebased patches</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Following the above, add explicit pkgconfig(gconf-2.0),
  pkgconfig(gobject-2.0)pkgconfig(gdk-x11-2.0), pkgconfig(gtk+-2.0)
  and pkgconfig(gtk+-unix-print-2.0) BuildRequires: previously
  pulled in by libgnomeui-devel, and is what configure really
  checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.
- use parallel compression in create-tar if available
- use XZ instead of BZ2 for source archives
- import upstream patch mozilla-bmo1338655.patch to fix failing
  build</changelog>
  <changelog author="wr@rosenauer.org" date="1520078400">- update to Seamonkey 2.49.2
  * Gecko 52.6esr (including security relevant fixes) (bsc#1077291)
  * fix issue in Composer
  * With some themes, the menulist- and history-dropmarker didn't show
  * Scrollbars didn't show the buttons
  * WebRTC has been disabled by default. It needs an add-on to enable it per site
  * The active title bar was not visually emphasized
- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1528200000">- update spec file summary and description to more accurately
  reflect what SeaMonkey is, giving less prominence to the long-
  discontinued Mozilla Application Suite that many users may no
  longer be familiar with
- update project URL in spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528372800">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="wr@rosenauer.org" date="1531483200">- update to Seamonkey 2.49.4
  * Gecko 52.9.1esr (bsc#1098998)
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- localizations finally included again (boo#1062195)</changelog>
</package>
<package pkgid="4ed5c66dd674158027cc091d02370c70a2d26fecb3b95465270655fabb5480fe" name="seamonkey" arch="x86_64">
  <version epoch="0" ver="2.49.4" rel="lp150.2.3.2"/>
  <changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1453204800">- update to Seamonkey 2.40 (bnc#959277)
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches
- buildrequire xcomposite now explicitely</changelog>
  <changelog author="wr@rosenauer.org" date="1457179200">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch
- increased _constraints as required</changelog>
  <changelog author="badshah400@gmail.com" date="1468756800">- Add mozilla-gcc6.patch to fix building with gcc &gt;= 6.0.</changelog>
  <changelog author="badshah400@gmail.com" date="1469534400">- Add appstream metainfo files as a tar.bz2 source
  (seamonkey-appdata.tar.bz2) and install these appdata.xml files
  to the appdata dir (/usr/share/appdata); with these appdata
  files installed, seamonkey shows up in appstores like GNOME
  software and KDE Discover.</changelog>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1470657600">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#991027)</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1471780800">- Build also with fno-lifetime-dse and fno-schedule-insns2 for GCC6
  (still boo#991027)
- Check compiler version instead of openSUSE version for this</changelog>
  <changelog author="wr@rosenauer.org" date="1476705600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
  <changelog author="wr@rosenauer.org" date="1482494400">- update to Seamonkey 2.46
  * based on Gecko 49.0.2
  * Chatzilla and DOM Inspector were removed/disabled and therefore
    those subpackages are not available at this moment
- requires NSPR 4.12 and NSS 3.25
- removed obsolete patches
  * mozilla-libproxy.patch
  * mozilla-gcc6.patch
  * mozilla-openaes-decl.patch
- rebased patches
- added patches imported from Firefox 49:
  * mozilla-check_return.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-skia-overflow.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- improve recognition of LANGUAGE env variable (boo#1017174)
- update minimum keybits in H2 so it allows a smaller value
  (e.g. for curve25519 as supported with NSS 3.28) (bmo#1290037)
  (boo#1021636) (mozilla-http2-ecdh-keybits.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- fix configure with for sed &gt;= 4.3 (boo#1020631) (mozilla-sed43.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1501848000">- update to Seamonkey 2.48
  * based on Gecko 51.0.3
  * requires NSPR 4.13.1 and NSS 3.28.5 (aligned with 52ESR)
- removed obsolete (upstreamed) patches
  * mozilla-http2-ecdh-keybits.patch
  * mozilla-sed43.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-shared-nss-db.patch (feature dropped from SM due to
    maintenance costs vs. usefulness)
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-skia-overflow.patch
- rebased patches</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Following the above, add explicit pkgconfig(gconf-2.0),
  pkgconfig(gobject-2.0)pkgconfig(gdk-x11-2.0), pkgconfig(gtk+-2.0)
  and pkgconfig(gtk+-unix-print-2.0) BuildRequires: previously
  pulled in by libgnomeui-devel, and is what configure really
  checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.
- use parallel compression in create-tar if available
- use XZ instead of BZ2 for source archives
- import upstream patch mozilla-bmo1338655.patch to fix failing
  build</changelog>
  <changelog author="wr@rosenauer.org" date="1520078400">- update to Seamonkey 2.49.2
  * Gecko 52.6esr (including security relevant fixes) (bsc#1077291)
  * fix issue in Composer
  * With some themes, the menulist- and history-dropmarker didn't show
  * Scrollbars didn't show the buttons
  * WebRTC has been disabled by default. It needs an add-on to enable it per site
  * The active title bar was not visually emphasized
- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1528200000">- update spec file summary and description to more accurately
  reflect what SeaMonkey is, giving less prominence to the long-
  discontinued Mozilla Application Suite that many users may no
  longer be familiar with
- update project URL in spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528372800">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="wr@rosenauer.org" date="1531483200">- update to Seamonkey 2.49.4
  * Gecko 52.9.1esr (bsc#1098998)
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- localizations finally included again (boo#1062195)</changelog>
</package>
<package pkgid="158605443c2ad289d4cce7b80e7a51b0ed15aef5ace3e9af998bd5918c7f5b8e" name="seamonkey-translations-common" arch="x86_64">
  <version epoch="0" ver="2.49.4" rel="lp150.2.3.2"/>
  <changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1453204800">- update to Seamonkey 2.40 (bnc#959277)
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches
- buildrequire xcomposite now explicitely</changelog>
  <changelog author="wr@rosenauer.org" date="1457179200">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch
- increased _constraints as required</changelog>
  <changelog author="badshah400@gmail.com" date="1468756800">- Add mozilla-gcc6.patch to fix building with gcc &gt;= 6.0.</changelog>
  <changelog author="badshah400@gmail.com" date="1469534400">- Add appstream metainfo files as a tar.bz2 source
  (seamonkey-appdata.tar.bz2) and install these appdata.xml files
  to the appdata dir (/usr/share/appdata); with these appdata
  files installed, seamonkey shows up in appstores like GNOME
  software and KDE Discover.</changelog>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1470657600">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#991027)</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1471780800">- Build also with fno-lifetime-dse and fno-schedule-insns2 for GCC6
  (still boo#991027)
- Check compiler version instead of openSUSE version for this</changelog>
  <changelog author="wr@rosenauer.org" date="1476705600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
  <changelog author="wr@rosenauer.org" date="1482494400">- update to Seamonkey 2.46
  * based on Gecko 49.0.2
  * Chatzilla and DOM Inspector were removed/disabled and therefore
    those subpackages are not available at this moment
- requires NSPR 4.12 and NSS 3.25
- removed obsolete patches
  * mozilla-libproxy.patch
  * mozilla-gcc6.patch
  * mozilla-openaes-decl.patch
- rebased patches
- added patches imported from Firefox 49:
  * mozilla-check_return.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-skia-overflow.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- improve recognition of LANGUAGE env variable (boo#1017174)
- update minimum keybits in H2 so it allows a smaller value
  (e.g. for curve25519 as supported with NSS 3.28) (bmo#1290037)
  (boo#1021636) (mozilla-http2-ecdh-keybits.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- fix configure with for sed &gt;= 4.3 (boo#1020631) (mozilla-sed43.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1501848000">- update to Seamonkey 2.48
  * based on Gecko 51.0.3
  * requires NSPR 4.13.1 and NSS 3.28.5 (aligned with 52ESR)
- removed obsolete (upstreamed) patches
  * mozilla-http2-ecdh-keybits.patch
  * mozilla-sed43.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-shared-nss-db.patch (feature dropped from SM due to
    maintenance costs vs. usefulness)
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-skia-overflow.patch
- rebased patches</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Following the above, add explicit pkgconfig(gconf-2.0),
  pkgconfig(gobject-2.0)pkgconfig(gdk-x11-2.0), pkgconfig(gtk+-2.0)
  and pkgconfig(gtk+-unix-print-2.0) BuildRequires: previously
  pulled in by libgnomeui-devel, and is what configure really
  checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.
- use parallel compression in create-tar if available
- use XZ instead of BZ2 for source archives
- import upstream patch mozilla-bmo1338655.patch to fix failing
  build</changelog>
  <changelog author="wr@rosenauer.org" date="1520078400">- update to Seamonkey 2.49.2
  * Gecko 52.6esr (including security relevant fixes) (bsc#1077291)
  * fix issue in Composer
  * With some themes, the menulist- and history-dropmarker didn't show
  * Scrollbars didn't show the buttons
  * WebRTC has been disabled by default. It needs an add-on to enable it per site
  * The active title bar was not visually emphasized
- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1528200000">- update spec file summary and description to more accurately
  reflect what SeaMonkey is, giving less prominence to the long-
  discontinued Mozilla Application Suite that many users may no
  longer be familiar with
- update project URL in spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528372800">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="wr@rosenauer.org" date="1531483200">- update to Seamonkey 2.49.4
  * Gecko 52.9.1esr (bsc#1098998)
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- localizations finally included again (boo#1062195)</changelog>
</package>
<package pkgid="0f451f0e93b8e81144a26543eec95333069ab47fe06e6e7c368162c4d05e41c3" name="seamonkey-translations-other" arch="x86_64">
  <version epoch="0" ver="2.49.4" rel="lp150.2.3.2"/>
  <changelog author="wr@rosenauer.org" date="1446724800">- update to Seamonkey 2.39 (bnc#952810)
  * MFSA 2015-116/CVE-2015-4513/CVE-2015-4514
    Miscellaneous memory safety hazards
  * MFSA 2015-117/CVE-2015-4515 (bmo#1046421)
    Information disclosure through NTLM authentication
  * MFSA 2015-118/CVE-2015-4518 (bmo#1182778, bmo#1136692)
    CSP bypass due to permissive Reader mode whitelist
  * MFSA 2015-119/CVE-2015-7185 (bmo#1149000) (Android only)
    Firefox for Android addressbar can be removed after fullscreen mode
  * MFSA 2015-120/CVE-2015-7186 (bmo#1193027) (Android only)
    Reading sensitive profile files through local HTML file on Android
  * MFSA 2015-121/CVE-2015-7187 (bmo#1195735)
    disabling scripts in Add-on SDK panels has no effect
  * MFSA 2015-122/CVE-2015-7188 (bmo#1199430)
    Trailing whitespace in IP address hostnames can bypass same-origin policy
  * MFSA 2015-123/CVE-2015-7189 (bmo#1205900)
    Buffer overflow during image interactions in canvas
  * MFSA 2015-124/CVE-2015-7190 (bmo#1208520) (Android only)
    Android intents can be used on Firefox for Android to open privileged files
  * MFSA 2015-125/CVE-2015-7191 (bmo#1208956) (Android only)
    XSS attack through intents on Firefox for Android
  * MFSA 2015-126/CVE-2015-7192 (bmo#1210023) (OS X only)
    Crash when accessing HTML tables with accessibility tools on OS X
  * MFSA 2015-127/CVE-2015-7193 (bmo#1210302)
    CORS preflight is bypassed when non-standard Content-Type headers
    are received
  * MFSA 2015-128/CVE-2015-7194 (bmo#1211262)
    Memory corruption in libjar through zip files
  * MFSA 2015-129/CVE-2015-7195 (bmo#1211871)
    Certain escaped characters in host of Location-header are being
    treated as non-escaped
  * MFSA 2015-130/CVE-2015-7196 (bmo#1140616)
    JavaScript garbage collection crash with Java applet
  * MFSA 2015-131/CVE-2015-7198/CVE-2015-7199/CVE-2015-7200
    (bmo#1188010, bmo#1204061, bmo#1204155)
    Vulnerabilities found through code inspection
  * MFSA 2015-132/CVE-2015-7197 (bmo#1204269)
    Mixed content WebSocket policy bypass through workers
  * MFSA 2015-133/CVE-2015-7181/CVE-2015-7182/CVE-2015-7183
    (bmo#1202868, bmo#1205157)
    NSS and NSPR memory corruption issues
    (fixed in mozilla-nspr and mozilla-nss packages)
- requires NSPR &gt;= 4.10.10 and NSS &gt;= 3.19.4
- removed obsolete patches
  * mozilla-icu-strncat.patch
- fixed build with enable-libproxy (bmo#1220399)
  * mozilla-libproxy.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1453204800">- update to Seamonkey 2.40 (bnc#959277)
  * requires NSS 3.20.2 to fix
    MFSA 2015-150/CVE-2015-7575 (bmo#1158489)
    MD5 signatures accepted within TLS 1.2 ServerKeyExchange in
    server signature
  * MFSA 2015-134/CVE-2015-7201/CVE-2015-7202
    Miscellaneous memory safety hazards
  * MFSA 2015-135/CVE-2015-7204 (bmo#1216130)
    Crash with JavaScript variable assignment with unboxed objects
  * MFSA 2015-136/CVE-2015-7207 (bmo#1185256)
    Same-origin policy violation using perfomance.getEntries and
    history navigation
  * MFSA 2015-137/CVE-2015-7208 (bmo#1191423)
    Firefox allows for control characters to be set in cookies
  * MFSA 2015-138/CVE-2015-7210 (bmo#1218326)
    Use-after-free in WebRTC when datachannel is used after being
    destroyed
  * MFSA 2015-139/CVE-2015-7212 (bmo#1222809)
    Integer overflow allocating extremely large textures
  * MFSA 2015-140/CVE-2015-7215 (bmo#1160890)
    Cross-origin information leak through web workers error events
  * MFSA 2015-141/CVE-2015-7211 (bmo#1221444)
    Hash in data URI is incorrectly parsed
  * MFSA 2015-142/CVE-2015-7218/CVE-2015-7219 (bmo#1194818, bmo#1194820)
    DOS due to malformed frames in HTTP/2
  * MFSA 2015-143/CVE-2015-7216/CVE-2015-7217 (bmo#1197059, bmo#1203078)
    Linux file chooser crashes on malformed images due to flaws in
    Jasper library
  * MFSA 2015-144/CVE-2015-7203/CVE-2015-7220/CVE-2015-7221
    (bmo#1201183, bmo#1178033, bmo#1199400)
    Buffer overflows found through code inspection
  * MFSA 2015-145/CVE-2015-7205 (bmo#1220493)
    Underflow through code inspection
  * MFSA 2015-146/CVE-2015-7213 (bmo#1206211)
    Integer overflow in MP4 playback in 64-bit versions
  * MFSA 2015-147/CVE-2015-7222 (bmo#1216748)
    Integer underflow and buffer overflow processing MP4 metadata in
    libstagefright
  * MFSA 2015-148/CVE-2015-7223 (bmo#1226423)
    Privilege escalation vulnerabilities in WebExtension APIs
  * MFSA 2015-149/CVE-2015-7214 (bmo#1228950)
    Cross-site reading attack through data and view-source URIs
- rebased patches
- buildrequire xcomposite now explicitely</changelog>
  <changelog author="wr@rosenauer.org" date="1457179200">- fix build problems on i586, caused by too large unified compile
  units - adding mozilla-reduce-files-per-UnifiedBindings.patch
- increased _constraints as required</changelog>
  <changelog author="badshah400@gmail.com" date="1468756800">- Add mozilla-gcc6.patch to fix building with gcc &gt;= 6.0.</changelog>
  <changelog author="badshah400@gmail.com" date="1469534400">- Add appstream metainfo files as a tar.bz2 source
  (seamonkey-appdata.tar.bz2) and install these appdata.xml files
  to the appdata dir (/usr/share/appdata); with these appdata
  files installed, seamonkey shows up in appstores like GNOME
  software and KDE Discover.</changelog>
  <changelog author="pcerny@suse.com" date="1470398400">- Fix for possible buffer overrun (bsc#990856)
  CVE-2016-6354 (bmo#1292534)
  [mozilla-flex_buffer_overrun.patch]</changelog>
  <changelog author="wr@rosenauer.org" date="1470657600">- build with -fno-delete-null-pointer-checks for Tumbleweed/gcc6
  as long as underlying issues have been addressed upstream
  (boo#991027)</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1471780800">- Build also with fno-lifetime-dse and fno-schedule-insns2 for GCC6
  (still boo#991027)
- Check compiler version instead of openSUSE version for this</changelog>
  <changelog author="wr@rosenauer.org" date="1476705600">- mozilla-binutils-visibility.patch to fix build issues with
  gcc/binutils combination used in Leap 42.2 (boo#984637)</changelog>
  <changelog author="wr@rosenauer.org" date="1482494400">- update to Seamonkey 2.46
  * based on Gecko 49.0.2
  * Chatzilla and DOM Inspector were removed/disabled and therefore
    those subpackages are not available at this moment
- requires NSPR 4.12 and NSS 3.25
- removed obsolete patches
  * mozilla-libproxy.patch
  * mozilla-gcc6.patch
  * mozilla-openaes-decl.patch
- rebased patches
- added patches imported from Firefox 49:
  * mozilla-check_return.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-skia-overflow.patch</changelog>
  <changelog author="wr@rosenauer.org" date="1485259200">- improve recognition of LANGUAGE env variable (boo#1017174)
- update minimum keybits in H2 so it allows a smaller value
  (e.g. for curve25519 as supported with NSS 3.28) (bmo#1290037)
  (boo#1021636) (mozilla-http2-ecdh-keybits.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1486900800">- fix configure with for sed &gt;= 4.3 (boo#1020631) (mozilla-sed43.patch)</changelog>
  <changelog author="wr@rosenauer.org" date="1501848000">- update to Seamonkey 2.48
  * based on Gecko 51.0.3
  * requires NSPR 4.13.1 and NSS 3.28.5 (aligned with 52ESR)
- removed obsolete (upstreamed) patches
  * mozilla-http2-ecdh-keybits.patch
  * mozilla-sed43.patch
  * mozilla-flex_buffer_overrun.patch
  * mozilla-shared-nss-db.patch (feature dropped from SM due to
    maintenance costs vs. usefulness)
  * mozilla-binutils-visibility.patch
  * mozilla-check_return.patch
  * mozilla-skia-overflow.patch
- rebased patches</changelog>
  <changelog author="zaitor@opensuse.org" date="1510315200">- Drop obsolete libgnomeui-devel BuildRequires: No longer needed.
- Following the above, add explicit pkgconfig(gconf-2.0),
  pkgconfig(gobject-2.0)pkgconfig(gdk-x11-2.0), pkgconfig(gtk+-2.0)
  and pkgconfig(gtk+-unix-print-2.0) BuildRequires: previously
  pulled in by libgnomeui-devel, and is what configure really
  checks for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="wr@rosenauer.org" date="1515499200">- Explicitly buildrequires python2-xml: The build system relies on
  it. We wrongly relied on other packages pulling it in for us.
- use parallel compression in create-tar if available
- use XZ instead of BZ2 for source archives
- import upstream patch mozilla-bmo1338655.patch to fix failing
  build</changelog>
  <changelog author="wr@rosenauer.org" date="1520078400">- update to Seamonkey 2.49.2
  * Gecko 52.6esr (including security relevant fixes) (bsc#1077291)
  * fix issue in Composer
  * With some themes, the menulist- and history-dropmarker didn't show
  * Scrollbars didn't show the buttons
  * WebRTC has been disabled by default. It needs an add-on to enable it per site
  * The active title bar was not visually emphasized
- correct requires and provides handling (boo#1076907)</changelog>
  <changelog author="psychonaut@nothingisreal.com" date="1528200000">- update spec file summary and description to more accurately
  reflect what SeaMonkey is, giving less prominence to the long-
  discontinued Mozilla Application Suite that many users may no
  longer be familiar with
- update project URL in spec file</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1528372800">- Add conditional for pkgconfig(gconf-2.0) BuildRequires, and pass
  conditional --disable-gconf to configure: no longer pull in
  obsolete gconf2 for Tumbleweed.</changelog>
  <changelog author="wr@rosenauer.org" date="1531483200">- update to Seamonkey 2.49.4
  * Gecko 52.9.1esr (bsc#1098998)
  MFSA 2018-16 (bsc#1098998)
  * CVE-2018-12359 (bmo#1459162)
    Buffer overflow using computed size of canvas element
  * CVE-2018-12360 (bmo#1459693)
    Use-after-free when using focus()
  * CVE-2018-12362 (bmo#1452375)
    Integer overflow in SSSE3 scaler
  * CVE-2018-5156 (bmo#1453127)
    Media recorder segmentation fault when track type is changed during capture
  * CVE-2018-12363 (bmo#1464784)
    Use-after-free when appending DOM nodes
  * CVE-2018-12364 (bmo#1436241)
    CSRF attacks through 307 redirects and NPAPI plugins
  * CVE-2018-12365 (bmo#1459206)
    Compromised IPC child process can list local filenames
  * CVE-2018-12366 (bmo#1464039)
    Invalid data handling during QCMS transformations
  * CVE-2018-5188 (bmo#1456189,bmo#1456975,bmo#1465898,bmo#1392739,
    bmo#1451297,bmo#1464063,bmo#1437842,bmo#1442722,bmo#1452576,
    bmo#1450688,bmo#1458264,bmo#1458270,bmo#1465108,bmo#1464829,
    bmo#1464079,bmo#1463494,bmo#1458048)
    Memory safety bugs fixed in Firefox 60, Firefox ESR 60.1, and Firefox ESR 52.9
- localizations finally included again (boo#1062195)</changelog>
</package>
<package pkgid="e84a86287eff565efb8a457b887babede5309d76e08aa356926784841354902b" name="sendfax" arch="x86_64">
  <version epoch="0" ver="1.1.37" rel="lp150.2.3.1"/>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283083200">- Do not include build date in binaries</changelog>
  <changelog author="gjhe@novell.com" date="1305288000">- fix bug [bnc#646280],adjust faxspool to process pdf file using
  gs directly, do not use acroreader.</changelog>
  <changelog author="uli@suse.com" date="1317384000">- cross-build fix: use %__cc macro</changelog>
  <changelog author="coolo@suse.com" date="1324900800">- don't package files twice</changelog>
  <changelog author="prusnak@opensuse.org" date="1327406400">- build with PIE [bnc#743151]</changelog>
  <changelog author="mweckbecker@suse.com" date="1331294400">- fixpie.patch: Use LDFLAGS instead of CFLAGS to make building with
  PIE work properly</changelog>
  <changelog author="coolo@suse.com" date="1347364800">- add makeinfo as explicit buildrequire</changelog>
  <changelog author="dmueller@suse.com" date="1357819200">- replace run_permissions call with set_permissions (bnc#764113)</changelog>
  <changelog author="schwab@suse.de" date="1362484800">- lp64.patch: Add support for future LP64 platforms</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1417089600">- fix bashisms in faxback.sh script
- add patches:
  * mgetty-1.1.36-fix-bashisms.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1422100800">- Add mgetty@.service and vgetty@.service (boo#914661)</changelog>
  <changelog author="mpluskal@suse.com" date="1422446400">- Require systemd-rpm-macros instead of systemd for building</changelog>
  <changelog author="mpluskal@suse.com" date="1456574400">- Use correct permissions for unit files (boo#968571)</changelog>
  <changelog author="kukuk@suse.de" date="1477483200">- Add PreReq for group uucp to sendfax package</changelog>
  <changelog author="tchvatal@suse.com" date="1496664000">- Cleanup a bit with spec-cleaner
- Remove few rpmlint warnings and reduce the deps to contain only
  what is needed
- Add patch to build with gcc7 0001-Fix-build-failure-with-gcc-7.patch
  bsc#1041290</changelog>
  <changelog author="sbrabec@suse.com" date="1496836800">- Update to version 1.1.37:
  * faxspool: implement "-t hh:mm-hh:mm" time-range syntax, add
  @DATE +&lt;format&gt;@ to faxheader processing
  * faxq: properly display queued jobs with time-range field
  * faxrunqd: correctly handle jobs running out of the end of their
  sent-time window.
  INCOMPATIBLE CHANGE: Changes handling of "-t hh:mm" to
  "from hh:mm to midnight"
  * microcom: improve read-from-device exception handling
  * sendfax: send NSF frame on reception,
  new option reset-after-fail
  * faxrunqd: enhance and clarify per-modem statistics
- New build fixes (mgetty-noroot.patch, mgetty-mkdir-p.patch).
- Update patches
  (mgetty-1.1.36-callback.patch -&gt; mgetty-1.1.37-callback.patch,
  mgetty-1.1.36-makefile.patch -&gt; mgetty-1.1.37-makefile.patch).</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531200">- Added patches:
  * mgetty-fix-buffer-overflow.patch - upstream patch, sets maximum
  length of a string to prevent buffer overflow and thus possible
  command injection
  * mgetty-delete-obsolete.patch - upstream-based patch, deletes
  obsolete file contrib/scrts.c, which could cause buffer overflow
- Fixed bugs:
  * bsc#1108756 (CVE-2018-16745): Stack-based buffer overflow in
    fax_notify_mail() in faxrec.c
  * bsc#1108757 (CVE-2018-16744): Command injection in faxrec.c
  * bsc#1108762 (CVE-2018-16742): Stack-based buffer overflow in
    contrib/scrts.c triggered via command line parameter
  * bsc#1108761 (CVE-2018-16743): Stack-based buffer overflow with
    long username in contrib/next-login/login.c</changelog>
  <changelog author="Marketa Calabkova &lt;mcalabkova@suse.com&gt;" date="1537531201">- Added patch mgetty-fax-block-code-injection.patch to fix
  bsc#1108752 (CVE-2018-16741): command injection in fax/faxq-helper.c</changelog>
</package>
<package pkgid="784f53fb59e1022a5812567b9d4ddd0ad2d93050931d6d3737e30943f1831c15" name="shadow" arch="src">
  <version epoch="0" ver="4.5" rel="lp150.6.3.1"/>
  <changelog author="fvogt@suse.com" date="1452859200">- Moved call from %verifyscript into %post:
  * Caused call to %service_add_post shadow.service shadow.timer
    during rpm -qV shadow</changelog>
  <changelog author="christian.brauner@mailbox.org" date="1463659200">- Update to shadow-4.2.1:
  - add support for subuids/subgids via newuidmap/newgidmap
- Rename chkname-regex.diff to chkname-regex.patch
- Rename encryption_method_nis.diff to encryption_method_nis.patch
- Rename getdef-new-defs.diff to getdef-new-defs.patch
- Rename shadow-login_defs.diff to shadow-login_defs.patch
- Rename userdel-scripts.diff to userdel-script.patch
- Rename useradd-script.diff to useradd-script.patch
- Rename useradd-default.diff to useradd-default.patch
- Rename useradd-mkdirs.diff to useradd-mkdirs.patch
- Add fixes from Red Hat/Fedora:
  - shadow-4.1.5.1-audit-owner.patch.patch:
  - log owner changes for home directory
  - shadow-4.1.5.1-userdel-helpfix.patch.patch:
  - give a hint about what happens when you force the removal of a user
  - shadow-4.2.1-defs-chroot.patch.patch:
  - initialize uid_t uid_min and uid_t uid_max not before we need them
  - shadow-4.2.1-merge-group.patch.patch:
  - simplify by using a single call to snprintf()
- Add upstream fix
  - Fix-user-busy-errors-at-userdel.patch:
  - call sub_uid_close()</changelog>
  <changelog author="mvetter@suse.com" date="1464609600">- shadow 4.2.1 requested by fate#320422
- bsc#979069: Dont include shadow-4.1.5.1-bug935203-manpage.patch
- Dont set SUID bit yet. Once bsc#979282 is through, which will adapt the permissions package, we can enable the SUID bits.
  Remove the files used to circumvent the check.
- Remove:
  * shadow-rpmlintrc
  * shadow-subids
  * shadow-subids.easy
  * shadow-subids.secure
  * shadow-subids.paranoid</changelog>
  <changelog author="mvetter@suse.com" date="1464696000">- Add package dependency for aaa_base, fixing bnc#899409
  (was done by tbehrens@suse.com but not submitted to Factory)</changelog>
  <changelog author="mvetter@suse.com" date="1473854400">- boo#994486: Include shadow.5 manpage
  Previously this was provided by man-pages package in
  the man-pages-addons tarball which got removed later on.</changelog>
  <changelog author="mvetter@suse.com" date="1476792000">- bsc#1002975: Use permissions according to permissions package
  and dont try to manipulate them in %files section.</changelog>
  <changelog author="meissner@suse.com" date="1478088000">- add keyring, three public keys from https://pkg-shadow.alioth.debian.org/download.php</changelog>
  <changelog author="josef.moellers@suse.com" date="1487592000">- useradd: call external program "/sbin/pam_tally2" to reset
  failed login counter in "/var/log/tallylog"
  (bsc#980486, useradd-clear-tallylog.patch)</changelog>
  <changelog author="adam.majer@suse.de" date="1495454400">- New upstream version 4.5
- Refreshed patches:
  * shadow-login_defs.patch
  * chkname-regex.patch
  * getdef-new-defs.patch
  * useradd-mkdirs.patch
- Upstreamed patches:
  * shadow-4.1.5.1-manfix.patch
  * shadow-4.1.5.1-errmsg.patch
  * shadow-4.1.5.1-backup-mode.patch
  * shadow-4.1.5.1-audit-owner.patch
  * shadow-4.2.1-defs-chroot.patch
  * shadow-4.2.1-merge-group.patch
  * Fix-user-busy-errors-at-userdel.patch
  * useradd-clear-tallylog.patch
- shadow-4.1.5.1-pam_group.patch
  dynamically added users via pam_group are not listed in groups
  databases but are still valid
- shadow.keyring: update keyring with current maintainer's keyid
  only - Serge Hallyn 'F1D08DB778185BF784002DFFE9FEEA06A85E3F9D'
- disable_new_audit_function.patch:
  Disable newer libaudit functionality for older distributions</changelog>
  <changelog author="kukuk@suse.de" date="1496923200">- Adjust requires (we need user/group root instead of aaa_base now)</changelog>
  <changelog author="mvetter@suse.com" date="1504872000">- run spec-cleaner
- bsc#1023895:
  man page contained invalid options because they depend
  on compile flags and we shipped pre built ones.
  New BuildRequires: docbook-xsl-stylesheets docbook_4 xml2po
  xsltproc</changelog>
  <changelog author="mvetter@suse.com" date="1505390400">- Revert the changes for bsc#1023895 back
  Pulls in too many deps into ring0.
  Next version of shadow plans to have no conditional man pages.</changelog>
  <changelog author="mvetter@suse.com" date="1505390401">- boo#1048645:
  Set suid bit for newuidmap and newgimap</changelog>
  <changelog author="mvetter@suse.com" date="1507550400">- bsc#1061838:
  Add Requires for group(mail)</changelog>
  <changelog author="schwab@suse.de" date="1507809600">- Prequire group(shadow), group(root), user(root)</changelog>
  <changelog author="adam.majer@suse.de" date="1507896000">- Revert accidentalied prerequisites.
  Use PreReq for permissions</changelog>
  <changelog author="mvetter@suse.com" date="1510142400">- bsc#1061838:
  Revert: Requires: group(mail)
  Introduced circular dependency</changelog>
  <changelog author="kbabioch@suse.com" date="1518782400">- Added CVE-2018-7169.patch: Fixed an privilege escalation in newgidmap,
  which allowed an unprivileged user to be placed in a user namespace where
  setgroups(2) is allowed. (CVE-2018-7169 bsc#1081294)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mvetter@suse.com" date="1536062400">- bsc#1106914 useradd:
  create intermediate directories with 0755 instead of 0777
- Adapted useradd-mkdirs.patch</changelog>
</package>
<package pkgid="aa0696993a940e39e415bc48b54389890e7ee2fed20e57277046e1102d2b6aa1" name="shadow" arch="x86_64">
  <version epoch="0" ver="4.5" rel="lp150.6.3.1"/>
  <changelog author="fvogt@suse.com" date="1452859200">- Moved call from %verifyscript into %post:
  * Caused call to %service_add_post shadow.service shadow.timer
    during rpm -qV shadow</changelog>
  <changelog author="christian.brauner@mailbox.org" date="1463659200">- Update to shadow-4.2.1:
  - add support for subuids/subgids via newuidmap/newgidmap
- Rename chkname-regex.diff to chkname-regex.patch
- Rename encryption_method_nis.diff to encryption_method_nis.patch
- Rename getdef-new-defs.diff to getdef-new-defs.patch
- Rename shadow-login_defs.diff to shadow-login_defs.patch
- Rename userdel-scripts.diff to userdel-script.patch
- Rename useradd-script.diff to useradd-script.patch
- Rename useradd-default.diff to useradd-default.patch
- Rename useradd-mkdirs.diff to useradd-mkdirs.patch
- Add fixes from Red Hat/Fedora:
  - shadow-4.1.5.1-audit-owner.patch.patch:
  - log owner changes for home directory
  - shadow-4.1.5.1-userdel-helpfix.patch.patch:
  - give a hint about what happens when you force the removal of a user
  - shadow-4.2.1-defs-chroot.patch.patch:
  - initialize uid_t uid_min and uid_t uid_max not before we need them
  - shadow-4.2.1-merge-group.patch.patch:
  - simplify by using a single call to snprintf()
- Add upstream fix
  - Fix-user-busy-errors-at-userdel.patch:
  - call sub_uid_close()</changelog>
  <changelog author="mvetter@suse.com" date="1464609600">- shadow 4.2.1 requested by fate#320422
- bsc#979069: Dont include shadow-4.1.5.1-bug935203-manpage.patch
- Dont set SUID bit yet. Once bsc#979282 is through, which will adapt the permissions package, we can enable the SUID bits.
  Remove the files used to circumvent the check.
- Remove:
  * shadow-rpmlintrc
  * shadow-subids
  * shadow-subids.easy
  * shadow-subids.secure
  * shadow-subids.paranoid</changelog>
  <changelog author="mvetter@suse.com" date="1464696000">- Add package dependency for aaa_base, fixing bnc#899409
  (was done by tbehrens@suse.com but not submitted to Factory)</changelog>
  <changelog author="mvetter@suse.com" date="1473854400">- boo#994486: Include shadow.5 manpage
  Previously this was provided by man-pages package in
  the man-pages-addons tarball which got removed later on.</changelog>
  <changelog author="mvetter@suse.com" date="1476792000">- bsc#1002975: Use permissions according to permissions package
  and dont try to manipulate them in %files section.</changelog>
  <changelog author="meissner@suse.com" date="1478088000">- add keyring, three public keys from https://pkg-shadow.alioth.debian.org/download.php</changelog>
  <changelog author="josef.moellers@suse.com" date="1487592000">- useradd: call external program "/sbin/pam_tally2" to reset
  failed login counter in "/var/log/tallylog"
  (bsc#980486, useradd-clear-tallylog.patch)</changelog>
  <changelog author="adam.majer@suse.de" date="1495454400">- New upstream version 4.5
- Refreshed patches:
  * shadow-login_defs.patch
  * chkname-regex.patch
  * getdef-new-defs.patch
  * useradd-mkdirs.patch
- Upstreamed patches:
  * shadow-4.1.5.1-manfix.patch
  * shadow-4.1.5.1-errmsg.patch
  * shadow-4.1.5.1-backup-mode.patch
  * shadow-4.1.5.1-audit-owner.patch
  * shadow-4.2.1-defs-chroot.patch
  * shadow-4.2.1-merge-group.patch
  * Fix-user-busy-errors-at-userdel.patch
  * useradd-clear-tallylog.patch
- shadow-4.1.5.1-pam_group.patch
  dynamically added users via pam_group are not listed in groups
  databases but are still valid
- shadow.keyring: update keyring with current maintainer's keyid
  only - Serge Hallyn 'F1D08DB778185BF784002DFFE9FEEA06A85E3F9D'
- disable_new_audit_function.patch:
  Disable newer libaudit functionality for older distributions</changelog>
  <changelog author="kukuk@suse.de" date="1496923200">- Adjust requires (we need user/group root instead of aaa_base now)</changelog>
  <changelog author="mvetter@suse.com" date="1504872000">- run spec-cleaner
- bsc#1023895:
  man page contained invalid options because they depend
  on compile flags and we shipped pre built ones.
  New BuildRequires: docbook-xsl-stylesheets docbook_4 xml2po
  xsltproc</changelog>
  <changelog author="mvetter@suse.com" date="1505390400">- Revert the changes for bsc#1023895 back
  Pulls in too many deps into ring0.
  Next version of shadow plans to have no conditional man pages.</changelog>
  <changelog author="mvetter@suse.com" date="1505390401">- boo#1048645:
  Set suid bit for newuidmap and newgimap</changelog>
  <changelog author="mvetter@suse.com" date="1507550400">- bsc#1061838:
  Add Requires for group(mail)</changelog>
  <changelog author="schwab@suse.de" date="1507809600">- Prequire group(shadow), group(root), user(root)</changelog>
  <changelog author="adam.majer@suse.de" date="1507896000">- Revert accidentalied prerequisites.
  Use PreReq for permissions</changelog>
  <changelog author="mvetter@suse.com" date="1510142400">- bsc#1061838:
  Revert: Requires: group(mail)
  Introduced circular dependency</changelog>
  <changelog author="kbabioch@suse.com" date="1518782400">- Added CVE-2018-7169.patch: Fixed an privilege escalation in newgidmap,
  which allowed an unprivileged user to be placed in a user namespace where
  setgroups(2) is allowed. (CVE-2018-7169 bsc#1081294)</changelog>
  <changelog author="fvogt@suse.com" date="1519300800">- Use %license (boo#1082318)</changelog>
  <changelog author="mvetter@suse.com" date="1536062400">- bsc#1106914 useradd:
  create intermediate directories with 0755 instead of 0777
- Adapted useradd-mkdirs.patch</changelog>
</package>
<package pkgid="cfe29815330dc02db4e9980bbbc3f35de48c66bf94c7c787889ddce3f5662c44" name="shim" arch="src">
  <version epoch="0" ver="14" rel="lp150.8.5.1"/>
  <changelog author="mchang@suse.com" date="1474459200">- shim-install :
  * add option --no-nvram (bsc#999818)
  * improve removable media and fallback mode handling</changelog>
  <changelog author="glin@suse.com" date="1479470400">- Add SIGNATURE_UPDATE.txt to state the steps to update
  signature-*.asc
- Update the comment of strip_signature.sh</changelog>
  <changelog author="mchang@suse.com" date="1484308800">- Support %posttrans with marcos provided by update-bootloader-rpm-macros
  package (bsc#997317)</changelog>
  <changelog author="mchang@suse.com" date="1490184000">- shim-install: add option --suse-enable-tpm (fate#315831)</changelog>
  <changelog author="glin@suse.com" date="1495540800">- Add the build flag to enable HTTPBoot</changelog>
  <changelog author="glin@suse.com" date="1498132800">- Update to 12
- Rename the result EFI images due to the upstream name change
  + shimx64 -&gt; shim
  + mmx64 -&gt; MokManager
  + fbx64 -&gt; fallback
- Refresh patches:
  + shim-only-os-name.patch
  + shim-change-debug-file-path.patch
  + shim-opensuse-cert-prompt.patch
- Drop upstreamed patches:
  + shim-httpboot-support.patch
  + shim-bsc973496-mokmanager-no-append-write.patch
  + shim-bsc991885-fix-sig-length.patch
  + shim-update-openssl-1.0.2g.patch
  + shim-update-openssl-1.0.2h.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1500033600">- Make build reproducible by avoiding race between find and cp</changelog>
  <changelog author="glin@suse.com" date="1503403200">- Add shim-arch-independent-names.patch to use the Arch-independent
  names. (bsc#1054712)
- Refresh shim-change-debug-file-path.patch
- Disable shim-opensuse-cert-prompt.patch automatically in SLE
- Diable AArch64 until we have a real user and aarch64 signature</changelog>
  <changelog author="glin@suse.com" date="1503489600">- Add upstream fixes
  + shim-fix-httpboot-crash.patch
  + shim-fix-openssl-flags.patch
  + shim-fix-fallback-double-free.patch
  + shim-fallback-workaround-masked-ami-variables.patch
- Remove the stderr mask while compiling MokManager.efi since the
  warnings in Cryptlib were fixed.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Add shim-add-fallback-verbose-print.patch to print the debug
  messages in fallback.efi dynamically
- Refresh shim-fallback-workaround-masked-ami-variables.patch
- Add shim-more-tpm-measurement.patch to measure more components
  and support TPM better</changelog>
  <changelog author="glin@suse.com" date="1505304000">- Add shim-back-to-openssl-1.0.2e.patch to avoid rejecting some
  legit certificates (bsc#1054712)
- Add the stderr mask back while compiling MokManager.efi since the
  warnings in Cryptlib is back after reverting the openssl commits.</changelog>
  <changelog author="ngompa13@gmail.com" date="1514548800">- Fix debuginfo + debugsource subpackage generation for RPM 4.14
- Set the RPM groups correctly for debug{info,source} subpackages
- Drop deprecated and out of date Authors information in description</changelog>
  <changelog author="glin@suse.com" date="1515067200">- Update to 14 (bsc#1054712)
- Adjust make commands in spec
- Drop upstreamed fixes
  + shim-add-fallback-verbose-print.patch
  + shim-back-to-openssl-1.0.2e.patch
  + shim-fallback-workaround-masked-ami-variables.patch
  + shim-fix-fallback-double-free.patch
  + shim-fix-httpboot-crash.patch
  + shim-fix-openssl-flags.patch
  + shim-more-tpm-measurement.patch
- Add shim-httpboot-include-console.h.patch to include console.h
  in httpboot.c to avoid build failure
- Add shim-remove-cryptpem.patch to replace functions in CryptPem.c
  with the null function
- Update SUSE/openSUSE specific patches
  + shim-only-os-name.patch
  + shim-arch-independent-names.patch
  + shim-change-debug-file-path.patch
  + shim-opensuse-cert-prompt.patch</changelog>
  <changelog author="glin@suse.com" date="1515153600">- Add shim-httpboot-amend-device-path.patch to amend the device
  path matching rule for httpboot (bsc#1065370)</changelog>
  <changelog author="jsegitz@suse.com" date="1518091200">- Acquired updated signature from Microsoft (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1521806400">- Add the missing leading backlash to the DEFAULT_LOADER
  (bsc#1086589)</changelog>
  <changelog author="glin@suse.com" date="1523361600">- Add shim-bsc1088585-handle-mok-allocations-better.patch to avoid
  double-freeing after enrolling a key from the disk (bsc#1088585)
  + Also refresh shim-opensuse-cert-prompt.patch due to the change
    in MokManager.c</changelog>
  <changelog author="jsegitz@suse.com" date="1524571200">- Acquired updated signature from Microsoft (bsc#1086589)</changelog>
  <changelog author="glin@suse.com" date="1525953600">- Add shim-bsc1092000-fallback-always-try-first-option.patch to
  avoid being trapped in the infinite reset loop in machines with
  faulty firmware (bsc#1092000)</changelog>
  <changelog author="glin@suse.com" date="1527508800">- Replace shim-bsc1092000-fallback-always-try-first-option.patch
  with shim-bsc1092000-fallback-menu.patch to show a countdown menu
  before reset (bsc#1092000)</changelog>
</package>
<package pkgid="9d7ed96e0885a5c18bcc144939a751251ec8503bc353ab86c441f2b4d48fe08c" name="shim" arch="x86_64">
  <version epoch="0" ver="14" rel="lp150.8.5.1"/>
  <changelog author="mchang@suse.com" date="1474459200">- shim-install :
  * add option --no-nvram (bsc#999818)
  * improve removable media and fallback mode handling</changelog>
  <changelog author="glin@suse.com" date="1479470400">- Add SIGNATURE_UPDATE.txt to state the steps to update
  signature-*.asc
- Update the comment of strip_signature.sh</changelog>
  <changelog author="mchang@suse.com" date="1484308800">- Support %posttrans with marcos provided by update-bootloader-rpm-macros
  package (bsc#997317)</changelog>
  <changelog author="mchang@suse.com" date="1490184000">- shim-install: add option --suse-enable-tpm (fate#315831)</changelog>
  <changelog author="glin@suse.com" date="1495540800">- Add the build flag to enable HTTPBoot</changelog>
  <changelog author="glin@suse.com" date="1498132800">- Update to 12
- Rename the result EFI images due to the upstream name change
  + shimx64 -&gt; shim
  + mmx64 -&gt; MokManager
  + fbx64 -&gt; fallback
- Refresh patches:
  + shim-only-os-name.patch
  + shim-change-debug-file-path.patch
  + shim-opensuse-cert-prompt.patch
- Drop upstreamed patches:
  + shim-httpboot-support.patch
  + shim-bsc973496-mokmanager-no-append-write.patch
  + shim-bsc991885-fix-sig-length.patch
  + shim-update-openssl-1.0.2g.patch
  + shim-update-openssl-1.0.2h.patch</changelog>
  <changelog author="bwiedemann@suse.com" date="1500033600">- Make build reproducible by avoiding race between find and cp</changelog>
  <changelog author="glin@suse.com" date="1503403200">- Add shim-arch-independent-names.patch to use the Arch-independent
  names. (bsc#1054712)
- Refresh shim-change-debug-file-path.patch
- Disable shim-opensuse-cert-prompt.patch automatically in SLE
- Diable AArch64 until we have a real user and aarch64 signature</changelog>
  <changelog author="glin@suse.com" date="1503489600">- Add upstream fixes
  + shim-fix-httpboot-crash.patch
  + shim-fix-openssl-flags.patch
  + shim-fix-fallback-double-free.patch
  + shim-fallback-workaround-masked-ami-variables.patch
- Remove the stderr mask while compiling MokManager.efi since the
  warnings in Cryptlib were fixed.</changelog>
  <changelog author="glin@suse.com" date="1504008000">- Add shim-add-fallback-verbose-print.patch to print the debug
  messages in fallback.efi dynamically
- Refresh shim-fallback-workaround-masked-ami-variables.patch
- Add shim-more-tpm-measurement.patch to measure more components
  and support TPM better</changelog>
  <changelog author="glin@suse.com" date="1505304000">- Add shim-back-to-openssl-1.0.2e.patch to avoid rejecting some
  legit certificates (bsc#1054712)
- Add the stderr mask back while compiling MokManager.efi since the
  warnings in Cryptlib is back after reverting the openssl commits.</changelog>
  <changelog author="ngompa13@gmail.com" date="1514548800">- Fix debuginfo + debugsource subpackage generation for RPM 4.14
- Set the RPM groups correctly for debug{info,source} subpackages
- Drop deprecated and out of date Authors information in description</changelog>
  <changelog author="glin@suse.com" date="1515067200">- Update to 14 (bsc#1054712)
- Adjust make commands in spec
- Drop upstreamed fixes
  + shim-add-fallback-verbose-print.patch
  + shim-back-to-openssl-1.0.2e.patch
  + shim-fallback-workaround-masked-ami-variables.patch
  + shim-fix-fallback-double-free.patch
  + shim-fix-httpboot-crash.patch
  + shim-fix-openssl-flags.patch
  + shim-more-tpm-measurement.patch
- Add shim-httpboot-include-console.h.patch to include console.h
  in httpboot.c to avoid build failure
- Add shim-remove-cryptpem.patch to replace functions in CryptPem.c
  with the null function
- Update SUSE/openSUSE specific patches
  + shim-only-os-name.patch
  + shim-arch-independent-names.patch
  + shim-change-debug-file-path.patch
  + shim-opensuse-cert-prompt.patch</changelog>
  <changelog author="glin@suse.com" date="1515153600">- Add shim-httpboot-amend-device-path.patch to amend the device
  path matching rule for httpboot (bsc#1065370)</changelog>
  <changelog author="jsegitz@suse.com" date="1518091200">- Acquired updated signature from Microsoft (bsc#1054712)</changelog>
  <changelog author="glin@suse.com" date="1521806400">- Add the missing leading backlash to the DEFAULT_LOADER
  (bsc#1086589)</changelog>
  <changelog author="glin@suse.com" date="1523361600">- Add shim-bsc1088585-handle-mok-allocations-better.patch to avoid
  double-freeing after enrolling a key from the disk (bsc#1088585)
  + Also refresh shim-opensuse-cert-prompt.patch due to the change
    in MokManager.c</changelog>
  <changelog author="jsegitz@suse.com" date="1524571200">- Acquired updated signature from Microsoft (bsc#1086589)</changelog>
  <changelog author="glin@suse.com" date="1525953600">- Add shim-bsc1092000-fallback-always-try-first-option.patch to
  avoid being trapped in the infinite reset loop in machines with
  faulty firmware (bsc#1092000)</changelog>
  <changelog author="glin@suse.com" date="1527508800">- Replace shim-bsc1092000-fallback-always-try-first-option.patch
  with shim-bsc1092000-fallback-menu.patch to show a countdown menu
  before reset (bsc#1092000)</changelog>
</package>
<package pkgid="ca73eaf11c533f3e92fea73db3048ac3ceec02ac7f548cb9239917f387a7610b" name="skelcd-installer-net-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.373" rel="lp150.2.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/installation-images#234
- add vmd.ko module (bsc#1079924)
- 14.359</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- build skelcd-installer-net subpackage containing the network
  install setup (bsc#1063789)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596800">- merge gh#openSUSE/installation-images#235
- udevadm should retrigger 'add' events (bsc#1084357)
- 14.360</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596801">- merge gh#openSUSE/installation-images#236
- remove default driver update url (bsc#1084510)
- 14.361</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521201600">- merge gh#openSUSE/installation-images#237
- move tftpboot location (bsc#1085479)
- 14.362</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720000">- merge gh#openSUSE/installation-images#238
- allow udevd to be run with --debug (bsc#1085212)
- 14.363</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720001">- merge gh#openSUSE/installation-images#239
- add novnc &amp; python3-websockify (bsc#1078785)
- 14.364</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522065600">- merge gh#openSUSE/installation-images#240
- add libstorage-ng translations (bsc#1081454)
- 14.365</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522238400">- merge gh#openSUSE/installation-images#241
- s390x: add zpxe.rexx to dvd (bsc#813454)
- 14.366</changelog>
  <changelog author="wfeldt@opensuse.org" date="1523016000">- merge gh#openSUSE/installation-images#242
- adjust adddir script to allow updating coreutils (bsc#1087901)
- 14.367</changelog>
  <changelog author="snwint@suse.de" date="1523275200">- do not delete efi image in skelcd-installer-net (bsc#1088679)</changelog>
  <changelog author="kukuk@suse.de" date="1523275201">- No upgrade option for Kubic (bsc#1088304)</changelog>
  <changelog author="snwint@suse.de" date="1523448000">- disable Kubic 32-bit build (bsc#1089102)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524052800">- merge gh#openSUSE/installation-images#243
- run postin script of yast2-storage-ng (bsc#1081198)
- 14.368</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524139200">- merge gh#openSUSE/installation-images#244
- remove dmraid from inst-sys (fate#323743, bsc#1088570)
- remove explicit dependency from mozilla-nspr
- 14.369</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
</package>
<package pkgid="dd267bae4b3b8198b5e0a95f63eb20eeaf71b28a64cdd28713c9ca286feef6e2" name="skelcd-installer-openSUSE" arch="x86_64">
  <version epoch="0" ver="14.373" rel="lp150.2.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/installation-images#234
- add vmd.ko module (bsc#1079924)
- 14.359</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- build skelcd-installer-net subpackage containing the network
  install setup (bsc#1063789)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596800">- merge gh#openSUSE/installation-images#235
- udevadm should retrigger 'add' events (bsc#1084357)
- 14.360</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596801">- merge gh#openSUSE/installation-images#236
- remove default driver update url (bsc#1084510)
- 14.361</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521201600">- merge gh#openSUSE/installation-images#237
- move tftpboot location (bsc#1085479)
- 14.362</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720000">- merge gh#openSUSE/installation-images#238
- allow udevd to be run with --debug (bsc#1085212)
- 14.363</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720001">- merge gh#openSUSE/installation-images#239
- add novnc &amp; python3-websockify (bsc#1078785)
- 14.364</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522065600">- merge gh#openSUSE/installation-images#240
- add libstorage-ng translations (bsc#1081454)
- 14.365</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522238400">- merge gh#openSUSE/installation-images#241
- s390x: add zpxe.rexx to dvd (bsc#813454)
- 14.366</changelog>
  <changelog author="wfeldt@opensuse.org" date="1523016000">- merge gh#openSUSE/installation-images#242
- adjust adddir script to allow updating coreutils (bsc#1087901)
- 14.367</changelog>
  <changelog author="snwint@suse.de" date="1523275200">- do not delete efi image in skelcd-installer-net (bsc#1088679)</changelog>
  <changelog author="kukuk@suse.de" date="1523275201">- No upgrade option for Kubic (bsc#1088304)</changelog>
  <changelog author="snwint@suse.de" date="1523448000">- disable Kubic 32-bit build (bsc#1089102)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524052800">- merge gh#openSUSE/installation-images#243
- run postin script of yast2-storage-ng (bsc#1081198)
- 14.368</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524139200">- merge gh#openSUSE/installation-images#244
- remove dmraid from inst-sys (fate#323743, bsc#1088570)
- remove explicit dependency from mozilla-nspr
- 14.369</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
</package>
<package pkgid="c9376d6af5cd927e19e05de98591f408207d8966cb7e1ab07893cc123e1e3843" name="slf4j" arch="noarch">
  <version epoch="0" ver="1.7.12" rel="lp150.4.3.1"/>
  <changelog author="dmacvicar@suse.de" date="1309780800">- add BuildRoot tag</changelog>
  <changelog author="dmacvicar@suse.de" date="1311768000">- Completely remove all maven build parts. Build with ant</changelog>
  <changelog author="dmacvicar@suse.de" date="1323691200">- Fix absolute path in maven-build.xml that prevented
  package task in newer versions of openSUSE
- Fix javadoc group</changelog>
  <changelog author="mvyskocil@suse.cz" date="1335528000">- format spec file to be suitable for Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1378900800">- use add_maven_depmap from javapackages-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1379073600">- fix build with apache-commons-lang</changelog>
  <changelog author="mvyskocil@suse.com" date="1379592000">- self-provide osgi(slf4j.api) symbol</changelog>
  <changelog author="coolo@suse.com" date="1409313600">- build against log4j-mini to avoid a cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="dmacvicar@suse.de" date="1445601600">- update to version 1.7.12</changelog>
  <changelog author="dmacvicar@suse.de" date="1445601601">- remove all unnecessary maven depmap metadata</changelog>
  <changelog author="dmacvicar@suse.de" date="1447156800">- note:
  slf4j-pom_xml.patch was removed (not relevant anymore)</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Remove some not-needed deps</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Specify java source and target levels 1.6 in order to allow
  building with jdk9
- Disable doclint to avoid bailing out on formatting errors
- Recompress the build.xml.tar.bz2, so that it is a real tar.bz2</changelog>
  <changelog author="fstrba@suse.com" date="1507723200">- Adeed patch:
  * slf4j-commons-lang3.patch
    + Use apache-commons-lang3 instead of apache-commons-lang</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526644800">- Security fix:  [bsc#1085970, CVE-2018-8088]
  * Disallow EventData deserialization by default
  * Added slf4j-Disallow-EventData-deserialization-by-default.patch
    refreshed from Fedora [ https://src.fedoraproject.org/rpms/slf4j/
    blob/d7cd96bc7a8e8d8d62c8bc62baa7df02cef56c63/f/
    0001-Disallow-EventData-deserialization-by-default.patch ]</changelog>
</package>
<package pkgid="54b8387c9a7704666d58056a0944c1157444647180b5095e070cb042bf47c2d6" name="slf4j" arch="src">
  <version epoch="0" ver="1.7.12" rel="lp150.4.3.1"/>
  <changelog author="dmacvicar@suse.de" date="1309780800">- add BuildRoot tag</changelog>
  <changelog author="dmacvicar@suse.de" date="1311768000">- Completely remove all maven build parts. Build with ant</changelog>
  <changelog author="dmacvicar@suse.de" date="1323691200">- Fix absolute path in maven-build.xml that prevented
  package task in newer versions of openSUSE
- Fix javadoc group</changelog>
  <changelog author="mvyskocil@suse.cz" date="1335528000">- format spec file to be suitable for Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1378900800">- use add_maven_depmap from javapackages-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1379073600">- fix build with apache-commons-lang</changelog>
  <changelog author="mvyskocil@suse.com" date="1379592000">- self-provide osgi(slf4j.api) symbol</changelog>
  <changelog author="coolo@suse.com" date="1409313600">- build against log4j-mini to avoid a cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="dmacvicar@suse.de" date="1445601600">- update to version 1.7.12</changelog>
  <changelog author="dmacvicar@suse.de" date="1445601601">- remove all unnecessary maven depmap metadata</changelog>
  <changelog author="dmacvicar@suse.de" date="1447156800">- note:
  slf4j-pom_xml.patch was removed (not relevant anymore)</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Remove some not-needed deps</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Specify java source and target levels 1.6 in order to allow
  building with jdk9
- Disable doclint to avoid bailing out on formatting errors
- Recompress the build.xml.tar.bz2, so that it is a real tar.bz2</changelog>
  <changelog author="fstrba@suse.com" date="1507723200">- Adeed patch:
  * slf4j-commons-lang3.patch
    + Use apache-commons-lang3 instead of apache-commons-lang</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526644800">- Security fix:  [bsc#1085970, CVE-2018-8088]
  * Disallow EventData deserialization by default
  * Added slf4j-Disallow-EventData-deserialization-by-default.patch
    refreshed from Fedora [ https://src.fedoraproject.org/rpms/slf4j/
    blob/d7cd96bc7a8e8d8d62c8bc62baa7df02cef56c63/f/
    0001-Disallow-EventData-deserialization-by-default.patch ]</changelog>
</package>
<package pkgid="eb1c9878f0c2b546455f65d49c4f94e1895379c85d38273fc8f5dbc966932788" name="slf4j-javadoc" arch="noarch">
  <version epoch="0" ver="1.7.12" rel="lp150.4.3.1"/>
  <changelog author="dmacvicar@suse.de" date="1309780800">- add BuildRoot tag</changelog>
  <changelog author="dmacvicar@suse.de" date="1311768000">- Completely remove all maven build parts. Build with ant</changelog>
  <changelog author="dmacvicar@suse.de" date="1323691200">- Fix absolute path in maven-build.xml that prevented
  package task in newer versions of openSUSE
- Fix javadoc group</changelog>
  <changelog author="mvyskocil@suse.cz" date="1335528000">- format spec file to be suitable for Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1378900800">- use add_maven_depmap from javapackages-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1379073600">- fix build with apache-commons-lang</changelog>
  <changelog author="mvyskocil@suse.com" date="1379592000">- self-provide osgi(slf4j.api) symbol</changelog>
  <changelog author="coolo@suse.com" date="1409313600">- build against log4j-mini to avoid a cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="dmacvicar@suse.de" date="1445601600">- update to version 1.7.12</changelog>
  <changelog author="dmacvicar@suse.de" date="1445601601">- remove all unnecessary maven depmap metadata</changelog>
  <changelog author="dmacvicar@suse.de" date="1447156800">- note:
  slf4j-pom_xml.patch was removed (not relevant anymore)</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Remove some not-needed deps</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Specify java source and target levels 1.6 in order to allow
  building with jdk9
- Disable doclint to avoid bailing out on formatting errors
- Recompress the build.xml.tar.bz2, so that it is a real tar.bz2</changelog>
  <changelog author="fstrba@suse.com" date="1507723200">- Adeed patch:
  * slf4j-commons-lang3.patch
    + Use apache-commons-lang3 instead of apache-commons-lang</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526644800">- Security fix:  [bsc#1085970, CVE-2018-8088]
  * Disallow EventData deserialization by default
  * Added slf4j-Disallow-EventData-deserialization-by-default.patch
    refreshed from Fedora [ https://src.fedoraproject.org/rpms/slf4j/
    blob/d7cd96bc7a8e8d8d62c8bc62baa7df02cef56c63/f/
    0001-Disallow-EventData-deserialization-by-default.patch ]</changelog>
</package>
<package pkgid="ca00096b31d3b19f929769ae3d485cb240542e2feb1defff919b205f2610173e" name="slf4j-manual" arch="noarch">
  <version epoch="0" ver="1.7.12" rel="lp150.4.3.1"/>
  <changelog author="dmacvicar@suse.de" date="1309780800">- add BuildRoot tag</changelog>
  <changelog author="dmacvicar@suse.de" date="1311768000">- Completely remove all maven build parts. Build with ant</changelog>
  <changelog author="dmacvicar@suse.de" date="1323691200">- Fix absolute path in maven-build.xml that prevented
  package task in newer versions of openSUSE
- Fix javadoc group</changelog>
  <changelog author="mvyskocil@suse.cz" date="1335528000">- format spec file to be suitable for Factory</changelog>
  <changelog author="tchvatal@suse.com" date="1378728000">- Move from jpackage-utils to javapackage-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1378900800">- use add_maven_depmap from javapackages-tools</changelog>
  <changelog author="mvyskocil@suse.com" date="1379073600">- fix build with apache-commons-lang</changelog>
  <changelog author="mvyskocil@suse.com" date="1379592000">- self-provide osgi(slf4j.api) symbol</changelog>
  <changelog author="coolo@suse.com" date="1409313600">- build against log4j-mini to avoid a cycle</changelog>
  <changelog author="tchvatal@suse.com" date="1426680000">- Fix build with new javapackages-tools</changelog>
  <changelog author="dmacvicar@suse.de" date="1445601600">- update to version 1.7.12</changelog>
  <changelog author="dmacvicar@suse.de" date="1445601601">- remove all unnecessary maven depmap metadata</changelog>
  <changelog author="dmacvicar@suse.de" date="1447156800">- note:
  slf4j-pom_xml.patch was removed (not relevant anymore)</changelog>
  <changelog author="tchvatal@suse.com" date="1495195200">- Remove some not-needed deps</changelog>
  <changelog author="fstrba@suse.com" date="1505044800">- Specify java source and target levels 1.6 in order to allow
  building with jdk9
- Disable doclint to avoid bailing out on formatting errors
- Recompress the build.xml.tar.bz2, so that it is a real tar.bz2</changelog>
  <changelog author="fstrba@suse.com" date="1507723200">- Adeed patch:
  * slf4j-commons-lang3.patch
    + Use apache-commons-lang3 instead of apache-commons-lang</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1526644800">- Security fix:  [bsc#1085970, CVE-2018-8088]
  * Disallow EventData deserialization by default
  * Added slf4j-Disallow-EventData-deserialization-by-default.patch
    refreshed from Fedora [ https://src.fedoraproject.org/rpms/slf4j/
    blob/d7cd96bc7a8e8d8d62c8bc62baa7df02cef56c63/f/
    0001-Disallow-EventData-deserialization-by-default.patch ]</changelog>
</package>
<package pkgid="cd34e0cfcc68edc03ba744fbf217b1b18e6dde182bf8b143ae1d30d60f27b022" name="slurm" arch="src">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="a9836592689171ac707a7a37d6d958c1ab9c1a21f5cacebf92cf3b5704b41165" name="slurm" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="af4eec2d0c586b911f7b86ba3b9e760e6a1bb65374baffd1460ef2431f5f94ec" name="slurm" arch="src">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="4ae9f03530d2fa35d32fce70c9b52ecaf30c335a2f016d8d2c1b467626af53f8" name="slurm" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="5f9c2d1cc8f28638bd4cb31f7f07ade8ec0dd34e4ac20b312a2734c1871769b9" name="slurm-auth-none" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="b3030d7aa366b04ab3232cdfb9993ec8d631551ea85642b2dc0b96fb3c3a9713" name="slurm-auth-none" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="909cec20e930c4f4ebf6c7c605b8b6940fd5599ebfbb798a07e214a4b8f83cce" name="slurm-config" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="84ad258cb396d82bed306fb2d2ac1a77765438409329ef22ad9e6df9119ae270" name="slurm-config" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="1c55c76bac5947a07191eee956d079bab2f802d8356599b6eafbf95d5d2d4791" name="slurm-devel" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="583ec77c2692b55602cc33f08f8d77951cd2df403107c5d1a47751eb82327832" name="slurm-devel" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="d9c2ca5547c89e586520fc739ba23d6389d241f7f03c30b03fe0f3641b90f4d9" name="slurm-doc" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="f4a4078c9038614c32a316ee3add2181846bbd6eebcf16669bb7e8b0f902b877" name="slurm-doc" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="30e4909fc017bb03e5b7ee65f9e18efa57e2e1773b33f7eab359005b2dd5bcb6" name="slurm-lua" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="19c8f62ef96d14232fa2ff52f30da7b5d5f4c755d10ae542fcc27d6306a16560" name="slurm-lua" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="826b1200af841b32ff5aef38b4630036445936b18a4dfe078d978b746d527a8b" name="slurm-munge" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="ad996f7496d4c2b7f751f961e6c62d1cd0f9818eda559c8c977180edb28f98ed" name="slurm-munge" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="8dbac785dfa7b5829c02dfc183b41cc58e339455924f7082f1da3242f369d424" name="slurm-node" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="b220a27c6bdb4d603e7885b349c47525060eea42a338c24b553234519fa29706" name="slurm-node" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="dd35b42d0040c5ad0b99cd4018002c0926d696c133202fc27052e28f4cc8af00" name="slurm-openlava" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="e8b9946fdc08f0ecf6f1a32622fdd5a816eedf0670cea3cc47d728b5a4610225" name="slurm-openlava" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="84295a2de518d862e7c7e866339bf4a3d7e1a3e0776b497d3b7faa37177a2e8d" name="slurm-pam_slurm" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="7862a889817bb74ba8c1ca9e3371678503442b523ed2e4f16ddccf9291cc5b14" name="slurm-pam_slurm" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="6530059e0d9eb1d5c01249573e0e1def31d1b8adfd40f8a601b6d7b628c336ae" name="slurm-plugins" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="3a709eb1e1bec17d8dba3db703b26ce6141766108fa3cec5616d1e6e2c97fff0" name="slurm-plugins" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="0aece4575fbaec1153c85fc2b307ab97fac3a41f1feb155851423501e9421b08" name="slurm-seff" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="5690dac35e9fe13c2feae793ead6f18e7dea57efd18ecea236d1c7fd350d2795" name="slurm-seff" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="b51798e5e26778462087e02d459bb0b7d0a26f825ae8541717f19ead1ef91b31" name="slurm-sjstat" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="3dca1746afd2b522c9f6bb8afea5b77ab39700f8403237cdc133c692a6117e40" name="slurm-sjstat" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="024370e33d7ae68ba06988419600965551919840f6c3fcc1cfbfcae8c05093df" name="slurm-slurmdbd" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="9e6eeefaded968c75c5583035beed2c10cbec4a200ed7d18d902cbf54794726e" name="slurm-slurmdbd" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="1077fcb3372f4b73083be301f04227ebdb2a65b908a526a3475529e4655e7fc4" name="slurm-sql" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="0f1e6a96a503154b46dea3e27b1ebdaa6b9cdefb5e28980b05c29efe47833bb8" name="slurm-sql" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="85585d994838f50130c49d51f4617082d752074c730822259ad0f45f9cc4dfd7" name="slurm-sview" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="dd239b332233275ea50b11b254984e45aa4bfde682b24756896fa09a8a0ffb7e" name="slurm-sview" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="02159dc65d617a71e0dcb6738fda19f05412532eee0bb913f5ea8ed7386e65de" name="slurm-torque" arch="x86_64">
  <version epoch="0" ver="17.11.7" rel="lp150.5.7.1"/>
  <changelog author="jjolly@suse.com" date="1499688000">- Allows OpenSUSE Factory build as well
- Removes unused .service files from project
- Adds /var/run/slurm to /usr/lib/tmpfiles.d for boottime creation
  * Patches upstream .service files to allow for /var/run/slurm path
  * Modifies slurm.conf to allow for /var/run/slurm path</changelog>
  <changelog author="jjolly@suse.com" date="1505217600">- Made tmpfiles_create post-install macro SLE12 SP2 or greater
- Directly calling systemd-tmpfiles --create for before SLE12 SP2</changelog>
  <changelog author="jjolly@suse.com" date="1506513600">- Updated to slurm 17-02-7-1
  * Added python as BuildRequires
  * Removed sched-wiki package
  * Removed slurmdb-direct package
  * Obsoleted sched-wiki and slurmdb-direct packages
  * Removing Cray-specific files
  * Added /etc/slurm/layout.d files (new for this version)
  * Remove /etc/slurm/cgroup files from package
  * Added lib/slurm/mcs_account.so
  * Removed lib/slurm/jobacct_gather_aix.so
  * Removed lib/slurm/job_submit_cnode.so
- Created slurm-sql package
- Moved files from slurm-plugins to slurm-torque package
- Moved creation of /usr/lib/tmpfiles.d/slurm.conf into slurm.spec
  * Removed tmpfiles.d-slurm.conf
- Changed /var/run path for slurm daemons to /var/run/slurm
  * Added slurmctld-service-var-run-path.patch
  (FATE#324026).</changelog>
  <changelog author="jengelh@inai.de" date="1507291200">- Trim redundant wording in descriptions.</changelog>
  <changelog author="eich@suse.com" date="1509537600">- Updated to 17.02.9 to fix CVE-2017-15566 (bsc#1065697).
  Changes in 17.0.9
  * When resuming powered down nodes, mark DOWN nodes right after
    ResumeTimeout
    has been reached (previous logic would wait about one minute longer).
  * Fix sreport not showing full column name for TRES Count.
  * Fix slurmdb_reservations_get() giving wrong usage data when job's spanned
    reservation that was modified.
  * Fix sreport reservation utilization report showing bad data.
  * Show all TRES' on a reservation in sreport reservation utilization report
    by default.
  * Fix sacctmgr show reservation handling "end" parameter.
  * Work around issue with sysmacros.h and gcc7 / glibc 2.25.
  * Fix layouts code to only allow setting a boolean.
  * Fix sbatch --wait to keep waiting even if a message timeout occurs.
  * CRAY - If configured with NodeFeatures=knl_cray and there are non-KNL
    nodes which include no features the slurmctld will abort without
    this patch when attemping strtok_r(NULL).
  * Fix regression in 17.02.7 which would run the spank_task_privileged as
    part of the slurmstepd instead of it's child process.
  * Fix security issue in Prolog and Epilog by always prepending SPANK_ to
    all user-set environment variables. CVE-2017-15566.
  Changes in 17.0.8:
  * Add 'slurmdbd:' to the accounting plugin to notify message is from dbd
    instead of local.
  * mpi/mvapich - Buffer being only partially cleared. No failures observed.
  * Fix for job  --switch option on dragonfly network.
  * In salloc with  --uid option, drop supplementary groups before changing UID.
  * jobcomp/elasticsearch - strip any trailing slashes from JobCompLoc.
  * jobcomp/elasticsearch - fix memory leak when transferring generated buffer.
  * Prevent slurmstepd ABRT when parsing gres.conf CPUs.
  * Fix sbatch --signal to signal all MPI ranks in a step instead of just those
    on node 0.
  * Check multiple partition limits when scheduling a job that were previously
    only checked on submit.
  * Cray: Avoid running application/step Node Health Check on the external
    job step.
  * Optimization enhancements for partition based job preemption.
  * Address some build warnings from GCC 7.1, and one possible memory leak if
    /proc is inaccessible.
  * If creating/altering a core based reservation with scontrol/sview on a
    remote cluster correctly determine the select type.
  * Fix autoconf test for libcurl when clang is used.
  * Fix default location for cgroup_allowed_devices_file.conf to use correct
    default path.
  * Document NewName option to sacctmgr.
  * Reject a second PMI2_Init call within a single step to prevent slurmstepd
    from hanging.
  * Handle old 32bit values stored in the database for requested memory
    correctly in sacct.
  * Fix memory leaks in the task/cgroup plugin when constraining devices.
  * Make extremely verbose info messages debug2 messages in the task/cgroup
    plugin when constraining devices.
  * Fix issue that would deny the stepd access to /dev/null where GRES has a
    'type' but no file defined.
  * Fix issue where the slurmstepd would fatal on job launch if you have no
    gres listed in your slurm.conf but some in gres.conf.
  * Fix validating time spec to correctly validate various time formats.
  * Make scontrol work correctly with job update timelimit [+|-]=.
  * Reduce the visibily of a number of warnings in _part_access_check.
  * Prevent segfault in sacctmgr if no association name is specified for
    an update command.
  * burst_buffer/cray plugin modified to work with changes in Cray UP05
    software release.
  * Fix job reasons for jobs that are violating assoc MaxTRESPerNode limits.
  * Fix segfault when unpacking a 16.05 slurm_cred in a 17.02 daemon.
  * Fix setting TRES limits with case insensitive TRES names.
  * Add alias for xstrncmp() -- slurm_xstrncmp().
  * Fix sorting of case insensitive strings when using xstrcasecmp().
  * Gracefully handle race condition when reading /proc as process exits.
  * Avoid error on Cray duplicate setup of core specialization.
  * Skip over undefined (hidden in Slurm) nodes in pbsnodes.
  * Add empty hashes in perl api's slurm_load_node() for hidden nodes.
  * CRAY - Add rpath logic to work for the alpscomm libs.
  * Fixes for administrator extended TimeLimit (job reason &amp; time limit reset).
  * Fix gres selection on systems running select/linear.
  * sview: Added window decorator for maximize,minimize,close buttons for all
    systems.
  * squeue: interpret negative length format specifiers as a request to
    delimit values with spaces.
  * Fix the torque pbsnodes wrapper script to parse a gres field with a type
    set correctly.
- Fixed ABI version of libslurm.</changelog>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
</package>
<package pkgid="cc90bc0876ced75767fe9bfcc59aac27bebb35683b334d037c07948d1ad91f76" name="slurm-torque" arch="x86_64">
  <version epoch="0" ver="17.11.9" rel="lp150.5.11.1"/>
  <changelog author="eich@suse.com" date="1510315200">- Package so-versioned libs separately. libslurm is expected
  to change more frequently and thus is packaged separately
  from libpmi.</changelog>
  <changelog author="cgoll@suse.com" date="1512129600">- added /var/spool/ directory and removed duplicated entries from slurm.conf</changelog>
  <changelog author="cgoll@suse.com" date="1516190400">- split up light wight slurm-node package for deployment on nodes
  (FATE#324574).</changelog>
  <changelog author="jjolly@suse.com" date="1517227200">- Moved slurmstepd and man page into slurm-node due to slurmd dependency
- Moved config files into slurm-node
- Moved slurmd rc scripts into slurm-node
- Made slurm-munge require slurm-plugins instead of slurm itself
  - slurm-node suggested slurm-munge, causing the whole slurm to be
    installed. The slurm-plugins seems to be a more base class
    (FATE#324574).</changelog>
  <changelog author="cgoll@suse.com" date="1517227201">- moved config files to slurm-config package (FATE#324574).</changelog>
  <changelog author="eich@suse.com" date="1521028800">- Fix security issue in accounting_storage/mysql plugin by always escaping
  strings within the slurmdbd. CVE-2018-7033
  http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2018-7033
  (bsc#1085240).
- Update slurm to v17.11.5 (FATE#325451)
  Highlights of 17.11:
  * Support for federated clusters to manage a single work-flow
    across a set of clusters.
  * Support for heterogeneous job allocations (various processor types,
    memory sizes, etc. by job component). Support for heterogeneous job
    steps within a single MPI_COMM_WORLD is not yet supported for most
    configurations.
  * X11 support is now fully integrated with the main Slurm code. Remove
    any X11 plugin configured in your plugstack.conf file to avoid errors
    being logged about conflicting options.
  * Added new advanced reservation flag of "flex", which permits jobs
    requesting the reservation to begin prior to the reservation's
    start time and use resources inside or outside of the reservation.
    A typical use case is to prevent jobs not explicitly requesting the
    reservation from using those reserved resources rather than forcing
    jobs requesting the reservation to use those resources in the time
    frame reserved.
  * The sprio command has been modified to report a job's priority
    information for every partition the job has been submitted to.
  * Group ID lookup performed at job submit time to avoid lookup on
    all compute nodes. Enable with PrologFlags=SendGIDs configuration
    parameter.
  * Slurm commands and daemons dynamically link to libslurmfull.so
    instead of statically linking. This dramatically reduces the
    footprint of Slurm.
  * In switch plugin, added plugin_id symbol to plugins and wrapped
    switch_jobinfo_t with dynamic_plugin_data_t in interface calls
    in order to pass switch information between clusters with different
    switch types.
  * Changed default ProctrackType to cgroup.
  * Changed default sched_min_interval from 0 to 2 microseconds.
  * Added new 'scontrol write batch_script ' command to fetch a job's
    batch script. Removed the ability to see the script as part of the
    'scontrol -dd   show job' command.
  * Add new "billing" TRES which allows jobs to be limited based on the
    job's billable TRES calculated by the job's partition's
    TRESBillingWeights.
  * Regular user use of "scontrol top" command is now disabled. Use the
    configuration parameter "SchedulerParameters=enable_user_top" to
    enable that functionality. The configuration parameter
    "SchedulerParameters=disable_user_top" will be silently ignored.
  * Change default to let pending jobs run outside of reservation after
    reservation is gone to put jobs in held state. Added
    NO_HOLD_JOBS_AFTER_END reservation flag to use old default.
    Support for PMIx v2.0 as well as UCX support.
  * Remove plugins for obsolete MPI stacks:
  - lam
  - mpich1_p4
  - mpich1_shmem
  - mvapich
  * Numerous fixes - check 'NEWS' file.
- slurmd-Fix-slurmd-for-new-API-in-hwloc-2.0.patch
  plugins-cgroup-Fix-slurmd-for-new-API-in-hwloc-2.0.patch:
  Removed. Code upstream.
- slurmctld-service-var-run-path.patch:
  Replaced by sed script.
- Fix some rpmlint warnings.</changelog>
  <changelog author="cgoll@suse.com" date="1521201600">- added comment for (bsc#1085606)</changelog>
  <changelog author="cgoll@suse.com" date="1521806400">- fixed wrong log file location in slurmdbd.conf and
  fixed pid location for slurmdbd and made slurm-slurmdbd
  depend on slurm config which provides the dir /var/run/slurm
  (bsc#1086859).</changelog>
  <changelog author="eich@suse.com" date="1523448000">- Make sure systemd services get restarted only when all
  packages are in a consistent state, not in the middle
  of an 'update' transaction (bsc#1088693).
  Since the %postun scripts that run on update are from
  the old package they cannot be changed - thus we work
  around the restart breakage.</changelog>
  <changelog author="eich@suse.com" date="1523534400">- Add:
  * split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  * slurmctld-uses-xdaemon_-for-systemd.patch
  * slurmd-uses-xdaemon_-for-systemd.patch
  * slurmdbd-uses-xdaemon_-for-systemd.patch
  * removed-deprecated-xdaemon.patch
  Fix interaction with systemd: systemd expects that a
  daemonizing process doesn't go away until the PID file
  with it PID of the daemon has bee written (bsc#1084125).</changelog>
  <changelog author="eich@suse.com" date="1523534401">- Package READMEs for pam and pam_slurm_adopt.
- Use the new %%license directive for COPYING file.</changelog>
  <changelog author="eich@suse.com" date="1523620800">- Add requires for slurm-sql to the slurmdbd package.</changelog>
  <changelog author="eich@suse.com" date="1524139200">- Avoid running pretrans scripts when running in an instsys:
  there may be not much installed, yet. pretrans code should
  be done in lua, this way, it will be executed by the rpm-internal
  lua interpreter and not be passed to a shell which may not be
  around at the time this scriptlet is run (bsc#1090292).</changelog>
  <changelog author="cgoll@suse.com" date="1528200000">- Update from 17.11.5 to 17.11.7
- Fix security issue in handling of username and gid fields
  CVE-2018-10995 and bsc#1095508 what implied an
  update from 17.11.5 to 17.11.7
  Highlights of 17.11.6:
  * CRAY - Add slurmsmwd to the contribs/cray dir
  * PMIX - Added the direct connect authentication.
  * Prevent the backup slurmctld from losing the active/available node
    features list on takeover.
  * Be able to force power_down of cloud node even if in power_save state.
  * Allow cloud nodes to be recognized in Slurm when booted out of band.
  * Numerous fixes - check 'NEWS' file.
  Highlights of 17.11.7:
  * Notify srun and ctld when unkillable stepd exits.
  * Numerous fixes - check 'NEWS' file.
- Add: slurmsmwd-uses-xdaemon_-for-systemd.patch
  * Fixes daemoniziation in newly introduced slurmsmwd daemon.
- Rename:
  split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for-systemd-compatibilty.patch
  to split-xdaemon-in-xdaemon_init-and-xdaemon_finish-for.patch
  * remain in sync with commit messages which introduced that file</changelog>
  <changelog author="eich@suse.com" date="1531310400">- Shield comments between script snippets with a %{!?nil:...} to
  avoid them being interpreted as scripts - in which case the update
  level is passed as argument (see chapter 'Shared libraries' in:
  https://en.opensuse.org/openSUSE:Packaging_scriptlet_snippets)
  (bsc#1100850).</changelog>
  <changelog author="eich@suse.com" date="1532779200">- Add a 'Recommends: slurm-munge' to slurm-slurmdbd.</changelog>
  <changelog author="eich@suse.com" date="1533038400">- slurmctld-rerun-agent_init-when-backup-controller-takes-over.patch:
  Fix race in the slurmctld backup controller which prevents it
  to clean up allocations on nodes properly after failing over
  (bsc#1084917).
- Handled %license in a backward compatible manner.</changelog>
  <changelog author="eich@suse.com" date="1533038401">- Update to 17.11.8
  * Fix incomplete RESPONSE_[RESOURCE|JOB_PACK]_ALLOCATION building path.
  * Do not allocate nodes that were marked down due to the node not responding
    by ResumeTimeout.
  * task/cray plugin - search for "mems" cgroup information in the file
    "cpuset.mems" then fall back to the file "mems".
  * Fix ipmi profile debug uninitialized variable.
  * PMIx: fixed the direct connect inline msg sending.
  * MYSQL: Fix issue not handling all fields when loading an archive dump.
  * Allow a job_submit plugin to change the admin_comment field during
    job_submit_plugin_modify().
  * job_submit/lua - fix access into reservation table.
  * MySQL - Prevent deadlock caused by archive logic locking reads.
  * Don't enforce MaxQueryTimeRange when requesting specific jobs.
  * Modify --test-only logic to properly support jobs submitted to more than
    one partition.
  * Prevent slurmctld from abort when attempting to set non-existing
    qos as def_qos_id.
  * Add new job dependency type of "afterburstbuffer". The pending job will be
    delayed until the first job completes execution and it's burst buffer
    stage-out is completed.
  * Reorder proctrack/task plugin load in the slurmstepd to match that of
    slurmd
    and avoid race condition calling task before proctrack can introduce.
  * Prevent reboot of a busy KNL node when requesting inactive features.
  * Revert to previous behavior when requesting memory per cpu/node introduced
    in 17.11.7.
  * Fix to reinitialize previously adjusted job members to their original
    value
    when validating the job memory in multi-partition requests.
  * Fix _step_signal() from always returning SLURM_SUCCESS.
  * Combine active and available node feature change logs on one line rather
    than one line per node for performance reasons.
  * Prevent occasionally leaking freezer cgroups.
  * Fix potential segfault when closing the mpi/pmi2 plugin.
  * Fix issues with  --exclusive=[user|mcs] to work correctly
    with preemption or when job requests a specific list of hosts.
  * Make code compile with hdf5 1.10.2+
  * mpi/pmix: Fixed the collectives canceling.
  * SlurmDBD: improve error message handling on archive load failure.
  * Fix incorrect locking when deleting reservations.
  * Fix incorrect locking when setting up the power save module.
  * Fix setting format output length for squeue when showing array jobs.
  * Add xstrstr function.
  * Fix printing out of --hint options in sbatch, salloc --help.
  * Prevent possible divide by zero in _validate_time_limit().
  * Add Delegate=yes to the slurmd.service file to prevent systemd from
    interfering with the jobs' cgroup hierarchies.
  * Change the backlog argument to the listen() syscall within srun to 4096
    to match elsewhere in the code, and avoid communication problems at scale.</changelog>
  <changelog author="eich@suse.com" date="1533211200">- When using a remote shared StateSaveLocation, slurmctld needs to
  be started after remote filesystems have become available.
  Add 'remote-fs.target' to the 'After=' directive in slurmctld.service
  (boo#1103561).</changelog>
  <changelog author="eich@suse.com" date="1534248000">- Update to 17.11.9
  * Fix segfault in slurmctld when a job's node bitmap is NULL during a
    scheduling cycle.  Primarily caused by EnforcePartLimits=ALL.
  * Remove erroneous unlock in acct_gather_energy/ipmi.
  * Enable support for hwloc version 2.0.1.
  * Fix 'srun -q' (--qos) option handling.
  * Fix socket communication issue that can lead to lost task completition
    messages, which will cause a permanently stuck srun process.
  * Handle creation of TMPDIR if environment variable is set or changed in
    a task prolog script.
  * Avoid node layout fragmentation if running with a fixed CPU count but
    without Sockets and CoresPerSocket defined.
  * burst_buffer/cray - Fix datawarp swap default pool overriding jobdw.
  * Fix incorrect job priority assignment for multi-partition job with
    different PriorityTier settings on the partitions.
  * Fix sinfo to print correct node state.</changelog>
</package>
<package pkgid="433148570bb04710aabf075cf2438f803bf5645a46a8dddf7c89608217e965a8" name="snapper" arch="src">
  <version epoch="0" ver="0.5.4" rel="lp150.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1470657600">- better messages for some btrfs quota errors
  (gh#openSUSE/snapper#257)</changelog>
  <changelog author="aschnell@suse.com" date="1470744000">- merged patch to fix order of object destruction on shutdown
  (gh#openSUSE/snapper#258)</changelog>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
</package>
<package pkgid="e5147db1024c875e1fc794a29308f5dd953b134d7e58743b2cf9c48df2d742bf" name="snapper" arch="x86_64">
  <version epoch="0" ver="0.5.4" rel="lp150.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1470657600">- better messages for some btrfs quota errors
  (gh#openSUSE/snapper#257)</changelog>
  <changelog author="aschnell@suse.com" date="1470744000">- merged patch to fix order of object destruction on shutdown
  (gh#openSUSE/snapper#258)</changelog>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
</package>
<package pkgid="f620020f4285662efd42e5757f3ea25b0753bb23a955d784d708a098d685c252" name="snapper" arch="src">
  <version epoch="0" ver="0.5.6" rel="lp150.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
  <changelog author="aschnell@suse.com" date="1527508800">- merged (gh#openSUSE/snapper#409) to build with boost 1.67.0
  (bsc#1096208)
- version 0.5.5</changelog>
  <changelog author="aschnell@suse.com" date="1532347200">- fixed logging during shutdown of snapperd to avoid core dumps
  (bsc#1096401 and others)
- version 0.5.6</changelog>
</package>
<package pkgid="c0773cc81db86b6f63caadc3badcc3eda7df74ea6955dad5d06181221b11d4e5" name="snapper" arch="x86_64">
  <version epoch="0" ver="0.5.6" rel="lp150.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
  <changelog author="aschnell@suse.com" date="1527508800">- merged (gh#openSUSE/snapper#409) to build with boost 1.67.0
  (bsc#1096208)
- version 0.5.5</changelog>
  <changelog author="aschnell@suse.com" date="1532347200">- fixed logging during shutdown of snapperd to avoid core dumps
  (bsc#1096401 and others)
- version 0.5.6</changelog>
</package>
<package pkgid="16b5d7ef5152eac87224d6366476153dfdafab7e1b29960733e70fdf67906be2" name="snapper-zypp-plugin" arch="noarch">
  <version epoch="0" ver="0.5.4" rel="lp150.3.3.1"/>
  <changelog author="aschnell@suse.com" date="1470657600">- better messages for some btrfs quota errors
  (gh#openSUSE/snapper#257)</changelog>
  <changelog author="aschnell@suse.com" date="1470744000">- merged patch to fix order of object destruction on shutdown
  (gh#openSUSE/snapper#258)</changelog>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
</package>
<package pkgid="704f61a82e410c5f3d65bff7f4d86492ea2d3af2b7b4d95e6e41d1a3163bd3b4" name="snapper-zypp-plugin" arch="noarch">
  <version epoch="0" ver="0.5.6" rel="lp150.3.6.1"/>
  <changelog author="aschnell@suse.com" date="1478088000">- fixed use of getpwuid_r, getpwnam_r and getgrnam_r</changelog>
  <changelog author="aschnell@suse.com" date="1478260800">- catch exception if setting default subvolume fails (bsc#1008544)</changelog>
  <changelog author="aschnell@suse.com" date="1481803200">- support option --no-dbus for all snapper commands (fate#319404,
  fate#321049)
- version 0.4.0</changelog>
  <changelog author="aschnell@suse.com" date="1482321600">- fixed --root option (bsc#1016633)
- version 0.4.1</changelog>
  <changelog author="aschnell@suse.com" date="1486036800">- build SLE12 versions with quota support again (bsc#1021370)
- version 0.4.2</changelog>
  <changelog author="aschnell@suse.com" date="1486036801">- deal with CaaSP btrfs setup where certain subvolumes are
  read-only (bsc#1018302 and bsc#1018095)
- version 0.4.3</changelog>
  <changelog author="aschnell@suse.com" date="1490184000">- remove read-only mount option for new fstab entry in mksubvolume
  (bsc#1030257)
- version 0.4.4</changelog>
  <changelog author="aschnell@suse.com" date="1492689600">- generate build file for Ubuntu 17.04
- version 0.4.5</changelog>
  <changelog author="aschnell@suse.com" date="1494331200">- set cleanup algorithm for rollback snapshots (fate#321773)
- version 0.5.0</changelog>
  <changelog author="lslezak@suse.com" date="1501761600">- fixed table formatting for non-ACSII characters (bsc#1051901)
  (::mbrtowc behavior has been changed in glibc-2.22)
- version 0.5.1</changelog>
  <changelog author="aschnell@suse.com" date="1504699200">- fix compilation with boost 1.65.0 (gh#openSUSE/snapper#354)
  (bsc#1061262)
- version 0.5.2</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="kukuk@suse.de" date="1512561600">- Switched from cron to systemd timers (spec file based
  distributions) (fate#324529)
- version 0.5.3</changelog>
  <changelog author="aschnell@suse.com" date="1515585600">- use python3 instead of python2 (bsc#1070324)</changelog>
  <changelog author="aschnell@suse.com" date="1516968000">- improved error handling for systemd services
  (gh#openSUSE/snapper#382)</changelog>
  <changelog author="aschnell@suse.com" date="1517227200">- create subvolume instead of snapshot for initial system
  (bsc#1077240)
- version 0.5.4</changelog>
  <changelog author="aschnell@suse.com" date="1524225600">- soften error handling if setting locale fails due to broken
  system setup (bsc#1085832)</changelog>
  <changelog author="jsrain@suse.cz" date="1525953600">- move warning in case of non-UTF8 locale to man page (bsc#1092103)</changelog>
  <changelog author="aschnell@suse.com" date="1527508800">- merged (gh#openSUSE/snapper#409) to build with boost 1.67.0
  (bsc#1096208)
- version 0.5.5</changelog>
  <changelog author="aschnell@suse.com" date="1532347200">- fixed logging during shutdown of snapperd to avoid core dumps
  (bsc#1096401 and others)
- version 0.5.6</changelog>
</package>
<package pkgid="14c1317843cb3393601da3e4d38953eba6fc1cbf3c4810783d00dfa339b946e4" name="spec-cleaner" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="lp150.2.5.1"/>
  <changelog author="tchvatal@suse.com" date="1467288000">- Version update to 0.9.0:
  * Various small fixes
  * Support for tex/perl/cmake conversions:
    + bla-devel -&gt; cmake(bla)</changelog>
  <changelog author="tchvatal@suse.com" date="1483099200">- Version update to 0.9.1:
  * Switch from regexp macro detection to full-blown parser to avoid
    bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Version update to 0.9.2:
  * More minimal fixes
  * Add option to keep vertical space in preamble if desired</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 0.9.3:
  * Fix regression (gh#openSUSE/spec-cleaner#171)</changelog>
  <changelog author="tchvatal@suse.com" date="1491652800">- Version update to 0.9.4:
  * Fixes in the dep_parser
  * Vertical whitespace is now safeguarded
  * More excludes_bracketing
  * Update list of known licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Version update to 0.9.5:
  * More fixes for the dep_parser
  * Convert pypy urls to new format
  * Start of rpmpreamble cleanup</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Version update to 0.9.6:
  * Deduplication of requires/buildrequires
  * Preamble detection fixups
  * Detect buildignores</changelog>
  <changelog author="tchvatal@suse.com" date="1497268800">- Version update to 0.9.7:
  * Fix help parsing that crashed the app on execution</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Version update to 0.9.8 bsc#1046652:
  * Various fixes as reported on github
  * Remove defattr as default from new rpm should be enough
  * Remove buildroot as new rpms do not need it at all</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Version update to 0.9.9:
  * Include pkgconfig and others from leap 42.3 instead of 42.2</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Version update to 1.0.0 bsc#1060402:
  * Recognise the BuildConflicts tag
  * Fix few make parsing errors
  * Fix some codeblock error detection
  * More path replacements detection
  * Keep uppercase URL tag as per vote</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Version update to 1.0.1 bsc#1071561:
  * Recognize new rpm trgger* events
  * Remove otherproviders conflicts syntax (just keep the pkg name)
  * Detect more apache macros
  * Drop py_requires macro that is useless</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 1.0.2 bsc#1077177:
  * Allow changelog-year specification via cmdline
  * Switch to pytest
  * Add groups for rust
  * Fix bug in otherprovides removal</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Drop the debian control things, all releases fail to build
- Update to 1.0.3:
  * Fix various lint issues
  * Switch to SPDX-3.0 license format
  * Add %doc -&gt; %license conversion script
  * Fix crash bugs found when scanning whole Tumbleweed repo</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Fix issue with the %doc -&gt; %license conversion in some complex
  cases, multiple licenses at once, prefixed licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1520337600">- Version update to 1.0.6 release:
  * Fixes license conversions to spdx3.0
  * Allows better parsing of pattern packages
  * Various manpage suffixing fixes
  * Added more things to exclude bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Version update to 1.0.7 bsc#1089297:
  * Fix haskell macro bracketing
  * Fix firewalld macros bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Version update to 1.0.8 bsc#1092933:
  * Be case insensitive on license detection
  * Exclude limit_build from bracketing
  * Replace _libexecdir as we now do not really bother about
    SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Version uppdate to 1.0.9 bsc#1099674:
  * Move some checks from rpmlint to be autochecked
  * Dropped support of py2
  * Fixed error reported on parsing non-utf spec-file
  * Leap 15.0 used as base for conversions to pkgconfig/etc.</changelog>
  <changelog author="tchvatal@suse.com" date="1530446400">- Version update to 1.1.0 bsc#1099674:
  * Fix issue with previous release not finding datadirs</changelog>
</package>
<package pkgid="b54ddded45619c9128e5b40c2928821f8686b0abc149a5b5fbdd9c5c7f36aa3c" name="spec-cleaner" arch="src">
  <version epoch="0" ver="1.1.0" rel="lp150.2.5.1"/>
  <changelog author="tchvatal@suse.com" date="1467288000">- Version update to 0.9.0:
  * Various small fixes
  * Support for tex/perl/cmake conversions:
    + bla-devel -&gt; cmake(bla)</changelog>
  <changelog author="tchvatal@suse.com" date="1483099200">- Version update to 0.9.1:
  * Switch from regexp macro detection to full-blown parser to avoid
    bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Version update to 0.9.2:
  * More minimal fixes
  * Add option to keep vertical space in preamble if desired</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 0.9.3:
  * Fix regression (gh#openSUSE/spec-cleaner#171)</changelog>
  <changelog author="tchvatal@suse.com" date="1491652800">- Version update to 0.9.4:
  * Fixes in the dep_parser
  * Vertical whitespace is now safeguarded
  * More excludes_bracketing
  * Update list of known licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Version update to 0.9.5:
  * More fixes for the dep_parser
  * Convert pypy urls to new format
  * Start of rpmpreamble cleanup</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Version update to 0.9.6:
  * Deduplication of requires/buildrequires
  * Preamble detection fixups
  * Detect buildignores</changelog>
  <changelog author="tchvatal@suse.com" date="1497268800">- Version update to 0.9.7:
  * Fix help parsing that crashed the app on execution</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Version update to 0.9.8 bsc#1046652:
  * Various fixes as reported on github
  * Remove defattr as default from new rpm should be enough
  * Remove buildroot as new rpms do not need it at all</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Version update to 0.9.9:
  * Include pkgconfig and others from leap 42.3 instead of 42.2</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Version update to 1.0.0 bsc#1060402:
  * Recognise the BuildConflicts tag
  * Fix few make parsing errors
  * Fix some codeblock error detection
  * More path replacements detection
  * Keep uppercase URL tag as per vote</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Version update to 1.0.1 bsc#1071561:
  * Recognize new rpm trgger* events
  * Remove otherproviders conflicts syntax (just keep the pkg name)
  * Detect more apache macros
  * Drop py_requires macro that is useless</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 1.0.2 bsc#1077177:
  * Allow changelog-year specification via cmdline
  * Switch to pytest
  * Add groups for rust
  * Fix bug in otherprovides removal</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Drop the debian control things, all releases fail to build
- Update to 1.0.3:
  * Fix various lint issues
  * Switch to SPDX-3.0 license format
  * Add %doc -&gt; %license conversion script
  * Fix crash bugs found when scanning whole Tumbleweed repo</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Fix issue with the %doc -&gt; %license conversion in some complex
  cases, multiple licenses at once, prefixed licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1520337600">- Version update to 1.0.6 release:
  * Fixes license conversions to spdx3.0
  * Allows better parsing of pattern packages
  * Various manpage suffixing fixes
  * Added more things to exclude bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Version update to 1.0.7 bsc#1089297:
  * Fix haskell macro bracketing
  * Fix firewalld macros bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Version update to 1.0.8 bsc#1092933:
  * Be case insensitive on license detection
  * Exclude limit_build from bracketing
  * Replace _libexecdir as we now do not really bother about
    SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Version uppdate to 1.0.9 bsc#1099674:
  * Move some checks from rpmlint to be autochecked
  * Dropped support of py2
  * Fixed error reported on parsing non-utf spec-file
  * Leap 15.0 used as base for conversions to pkgconfig/etc.</changelog>
  <changelog author="tchvatal@suse.com" date="1530446400">- Version update to 1.1.0 bsc#1099674:
  * Fix issue with previous release not finding datadirs</changelog>
</package>
<package pkgid="fa5bf75f043a860e7341117277a9cddf37dd0cfd797c9e271b5e72b31d651807" name="spec-cleaner" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="lp150.2.8.1"/>
  <changelog author="tchvatal@suse.com" date="1483099200">- Version update to 0.9.1:
  * Switch from regexp macro detection to full-blown parser to avoid
    bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Version update to 0.9.2:
  * More minimal fixes
  * Add option to keep vertical space in preamble if desired</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 0.9.3:
  * Fix regression (gh#openSUSE/spec-cleaner#171)</changelog>
  <changelog author="tchvatal@suse.com" date="1491652800">- Version update to 0.9.4:
  * Fixes in the dep_parser
  * Vertical whitespace is now safeguarded
  * More excludes_bracketing
  * Update list of known licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Version update to 0.9.5:
  * More fixes for the dep_parser
  * Convert pypy urls to new format
  * Start of rpmpreamble cleanup</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Version update to 0.9.6:
  * Deduplication of requires/buildrequires
  * Preamble detection fixups
  * Detect buildignores</changelog>
  <changelog author="tchvatal@suse.com" date="1497268800">- Version update to 0.9.7:
  * Fix help parsing that crashed the app on execution</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Version update to 0.9.8 bsc#1046652:
  * Various fixes as reported on github
  * Remove defattr as default from new rpm should be enough
  * Remove buildroot as new rpms do not need it at all</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Version update to 0.9.9:
  * Include pkgconfig and others from leap 42.3 instead of 42.2</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Version update to 1.0.0 bsc#1060402:
  * Recognise the BuildConflicts tag
  * Fix few make parsing errors
  * Fix some codeblock error detection
  * More path replacements detection
  * Keep uppercase URL tag as per vote</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Version update to 1.0.1 bsc#1071561:
  * Recognize new rpm trgger* events
  * Remove otherproviders conflicts syntax (just keep the pkg name)
  * Detect more apache macros
  * Drop py_requires macro that is useless</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 1.0.2 bsc#1077177:
  * Allow changelog-year specification via cmdline
  * Switch to pytest
  * Add groups for rust
  * Fix bug in otherprovides removal</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Drop the debian control things, all releases fail to build
- Update to 1.0.3:
  * Fix various lint issues
  * Switch to SPDX-3.0 license format
  * Add %doc -&gt; %license conversion script
  * Fix crash bugs found when scanning whole Tumbleweed repo</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Fix issue with the %doc -&gt; %license conversion in some complex
  cases, multiple licenses at once, prefixed licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1520337600">- Version update to 1.0.6 release:
  * Fixes license conversions to spdx3.0
  * Allows better parsing of pattern packages
  * Various manpage suffixing fixes
  * Added more things to exclude bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Version update to 1.0.7 bsc#1089297:
  * Fix haskell macro bracketing
  * Fix firewalld macros bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Version update to 1.0.8 bsc#1092933:
  * Be case insensitive on license detection
  * Exclude limit_build from bracketing
  * Replace _libexecdir as we now do not really bother about
    SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Version uppdate to 1.0.9 bsc#1099674:
  * Move some checks from rpmlint to be autochecked
  * Dropped support of py2
  * Fixed error reported on parsing non-utf spec-file
  * Leap 15.0 used as base for conversions to pkgconfig/etc.</changelog>
  <changelog author="tchvatal@suse.com" date="1530446400">- Version update to 1.1.0 bsc#1099674:
  * Fix issue with previous release not finding datadirs</changelog>
  <changelog author="tchvatal@suse.com" date="1534766400">- Version update to 1.1.1 bsc#1099674:
  * Fix help message not working
  * Make libexecdir opt-in rather than opt-out
  * Account for LICENCE string not just LICENSE
  * Warn about direct qmake/meson usage
  * Use https when mentioning bugzilla in header
  * Use tuples on some places rather than lists</changelog>
</package>
<package pkgid="cd13ee51a26f692fc22375abc63c33a4d6a6534e62bc31a728093ad9190dd8bc" name="spec-cleaner" arch="src">
  <version epoch="0" ver="1.1.1" rel="lp150.2.8.1"/>
  <changelog author="tchvatal@suse.com" date="1483099200">- Version update to 0.9.1:
  * Switch from regexp macro detection to full-blown parser to avoid
    bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Version update to 0.9.2:
  * More minimal fixes
  * Add option to keep vertical space in preamble if desired</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 0.9.3:
  * Fix regression (gh#openSUSE/spec-cleaner#171)</changelog>
  <changelog author="tchvatal@suse.com" date="1491652800">- Version update to 0.9.4:
  * Fixes in the dep_parser
  * Vertical whitespace is now safeguarded
  * More excludes_bracketing
  * Update list of known licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Version update to 0.9.5:
  * More fixes for the dep_parser
  * Convert pypy urls to new format
  * Start of rpmpreamble cleanup</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Version update to 0.9.6:
  * Deduplication of requires/buildrequires
  * Preamble detection fixups
  * Detect buildignores</changelog>
  <changelog author="tchvatal@suse.com" date="1497268800">- Version update to 0.9.7:
  * Fix help parsing that crashed the app on execution</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Version update to 0.9.8 bsc#1046652:
  * Various fixes as reported on github
  * Remove defattr as default from new rpm should be enough
  * Remove buildroot as new rpms do not need it at all</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Version update to 0.9.9:
  * Include pkgconfig and others from leap 42.3 instead of 42.2</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Version update to 1.0.0 bsc#1060402:
  * Recognise the BuildConflicts tag
  * Fix few make parsing errors
  * Fix some codeblock error detection
  * More path replacements detection
  * Keep uppercase URL tag as per vote</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Version update to 1.0.1 bsc#1071561:
  * Recognize new rpm trgger* events
  * Remove otherproviders conflicts syntax (just keep the pkg name)
  * Detect more apache macros
  * Drop py_requires macro that is useless</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 1.0.2 bsc#1077177:
  * Allow changelog-year specification via cmdline
  * Switch to pytest
  * Add groups for rust
  * Fix bug in otherprovides removal</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Drop the debian control things, all releases fail to build
- Update to 1.0.3:
  * Fix various lint issues
  * Switch to SPDX-3.0 license format
  * Add %doc -&gt; %license conversion script
  * Fix crash bugs found when scanning whole Tumbleweed repo</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Fix issue with the %doc -&gt; %license conversion in some complex
  cases, multiple licenses at once, prefixed licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1520337600">- Version update to 1.0.6 release:
  * Fixes license conversions to spdx3.0
  * Allows better parsing of pattern packages
  * Various manpage suffixing fixes
  * Added more things to exclude bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Version update to 1.0.7 bsc#1089297:
  * Fix haskell macro bracketing
  * Fix firewalld macros bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Version update to 1.0.8 bsc#1092933:
  * Be case insensitive on license detection
  * Exclude limit_build from bracketing
  * Replace _libexecdir as we now do not really bother about
    SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Version uppdate to 1.0.9 bsc#1099674:
  * Move some checks from rpmlint to be autochecked
  * Dropped support of py2
  * Fixed error reported on parsing non-utf spec-file
  * Leap 15.0 used as base for conversions to pkgconfig/etc.</changelog>
  <changelog author="tchvatal@suse.com" date="1530446400">- Version update to 1.1.0 bsc#1099674:
  * Fix issue with previous release not finding datadirs</changelog>
  <changelog author="tchvatal@suse.com" date="1534766400">- Version update to 1.1.1 bsc#1099674:
  * Fix help message not working
  * Make libexecdir opt-in rather than opt-out
  * Account for LICENCE string not just LICENSE
  * Warn about direct qmake/meson usage
  * Use https when mentioning bugzilla in header
  * Use tuples on some places rather than lists</changelog>
</package>
<package pkgid="354f3c832ab81c40ee875a59bac09df467f5e6518a67b03f0d76ed5884179d9b" name="spec-cleaner-format_spec_file" arch="noarch">
  <version epoch="0" ver="1.1.0" rel="lp150.2.5.1"/>
  <changelog author="tchvatal@suse.com" date="1467288000">- Version update to 0.9.0:
  * Various small fixes
  * Support for tex/perl/cmake conversions:
    + bla-devel -&gt; cmake(bla)</changelog>
  <changelog author="tchvatal@suse.com" date="1483099200">- Version update to 0.9.1:
  * Switch from regexp macro detection to full-blown parser to avoid
    bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Version update to 0.9.2:
  * More minimal fixes
  * Add option to keep vertical space in preamble if desired</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 0.9.3:
  * Fix regression (gh#openSUSE/spec-cleaner#171)</changelog>
  <changelog author="tchvatal@suse.com" date="1491652800">- Version update to 0.9.4:
  * Fixes in the dep_parser
  * Vertical whitespace is now safeguarded
  * More excludes_bracketing
  * Update list of known licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Version update to 0.9.5:
  * More fixes for the dep_parser
  * Convert pypy urls to new format
  * Start of rpmpreamble cleanup</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Version update to 0.9.6:
  * Deduplication of requires/buildrequires
  * Preamble detection fixups
  * Detect buildignores</changelog>
  <changelog author="tchvatal@suse.com" date="1497268800">- Version update to 0.9.7:
  * Fix help parsing that crashed the app on execution</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Version update to 0.9.8 bsc#1046652:
  * Various fixes as reported on github
  * Remove defattr as default from new rpm should be enough
  * Remove buildroot as new rpms do not need it at all</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Version update to 0.9.9:
  * Include pkgconfig and others from leap 42.3 instead of 42.2</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Version update to 1.0.0 bsc#1060402:
  * Recognise the BuildConflicts tag
  * Fix few make parsing errors
  * Fix some codeblock error detection
  * More path replacements detection
  * Keep uppercase URL tag as per vote</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Version update to 1.0.1 bsc#1071561:
  * Recognize new rpm trgger* events
  * Remove otherproviders conflicts syntax (just keep the pkg name)
  * Detect more apache macros
  * Drop py_requires macro that is useless</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 1.0.2 bsc#1077177:
  * Allow changelog-year specification via cmdline
  * Switch to pytest
  * Add groups for rust
  * Fix bug in otherprovides removal</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Drop the debian control things, all releases fail to build
- Update to 1.0.3:
  * Fix various lint issues
  * Switch to SPDX-3.0 license format
  * Add %doc -&gt; %license conversion script
  * Fix crash bugs found when scanning whole Tumbleweed repo</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Fix issue with the %doc -&gt; %license conversion in some complex
  cases, multiple licenses at once, prefixed licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1520337600">- Version update to 1.0.6 release:
  * Fixes license conversions to spdx3.0
  * Allows better parsing of pattern packages
  * Various manpage suffixing fixes
  * Added more things to exclude bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Version update to 1.0.7 bsc#1089297:
  * Fix haskell macro bracketing
  * Fix firewalld macros bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Version update to 1.0.8 bsc#1092933:
  * Be case insensitive on license detection
  * Exclude limit_build from bracketing
  * Replace _libexecdir as we now do not really bother about
    SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Version uppdate to 1.0.9 bsc#1099674:
  * Move some checks from rpmlint to be autochecked
  * Dropped support of py2
  * Fixed error reported on parsing non-utf spec-file
  * Leap 15.0 used as base for conversions to pkgconfig/etc.</changelog>
  <changelog author="tchvatal@suse.com" date="1530446400">- Version update to 1.1.0 bsc#1099674:
  * Fix issue with previous release not finding datadirs</changelog>
</package>
<package pkgid="03e0bbb1142d510bf331d16e2ab6d66864a57835f2f0948c0d5334cc45c0b1c2" name="spec-cleaner-format_spec_file" arch="noarch">
  <version epoch="0" ver="1.1.1" rel="lp150.2.8.1"/>
  <changelog author="tchvatal@suse.com" date="1483099200">- Version update to 0.9.1:
  * Switch from regexp macro detection to full-blown parser to avoid
    bugs</changelog>
  <changelog author="tchvatal@suse.com" date="1486987200">- Version update to 0.9.2:
  * More minimal fixes
  * Add option to keep vertical space in preamble if desired</changelog>
  <changelog author="mpluskal@suse.com" date="1488196800">- Update to version 0.9.3:
  * Fix regression (gh#openSUSE/spec-cleaner#171)</changelog>
  <changelog author="tchvatal@suse.com" date="1491652800">- Version update to 0.9.4:
  * Fixes in the dep_parser
  * Vertical whitespace is now safeguarded
  * More excludes_bracketing
  * Update list of known licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1495022400">- Version update to 0.9.5:
  * More fixes for the dep_parser
  * Convert pypy urls to new format
  * Start of rpmpreamble cleanup</changelog>
  <changelog author="tchvatal@suse.com" date="1496923200">- Version update to 0.9.6:
  * Deduplication of requires/buildrequires
  * Preamble detection fixups
  * Detect buildignores</changelog>
  <changelog author="tchvatal@suse.com" date="1497268800">- Version update to 0.9.7:
  * Fix help parsing that crashed the app on execution</changelog>
  <changelog author="tchvatal@suse.com" date="1498737600">- Version update to 0.9.8 bsc#1046652:
  * Various fixes as reported on github
  * Remove defattr as default from new rpm should be enough
  * Remove buildroot as new rpms do not need it at all</changelog>
  <changelog author="tchvatal@suse.com" date="1502280000">- Version update to 0.9.9:
  * Include pkgconfig and others from leap 42.3 instead of 42.2</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Version update to 1.0.0 bsc#1060402:
  * Recognise the BuildConflicts tag
  * Fix few make parsing errors
  * Fix some codeblock error detection
  * More path replacements detection
  * Keep uppercase URL tag as per vote</changelog>
  <changelog author="tchvatal@suse.com" date="1512561600">- Version update to 1.0.1 bsc#1071561:
  * Recognize new rpm trgger* events
  * Remove otherproviders conflicts syntax (just keep the pkg name)
  * Detect more apache macros
  * Drop py_requires macro that is useless</changelog>
  <changelog author="tchvatal@suse.com" date="1516708800">- Version update to 1.0.2 bsc#1077177:
  * Allow changelog-year specification via cmdline
  * Switch to pytest
  * Add groups for rust
  * Fix bug in otherprovides removal</changelog>
  <changelog author="tchvatal@suse.com" date="1518696000">- Drop the debian control things, all releases fail to build
- Update to 1.0.3:
  * Fix various lint issues
  * Switch to SPDX-3.0 license format
  * Add %doc -&gt; %license conversion script
  * Fix crash bugs found when scanning whole Tumbleweed repo</changelog>
  <changelog author="tchvatal@suse.com" date="1519819200">- Fix issue with the %doc -&gt; %license conversion in some complex
  cases, multiple licenses at once, prefixed licenses</changelog>
  <changelog author="tchvatal@suse.com" date="1520337600">- Version update to 1.0.6 release:
  * Fixes license conversions to spdx3.0
  * Allows better parsing of pattern packages
  * Various manpage suffixing fixes
  * Added more things to exclude bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1523534400">- Version update to 1.0.7 bsc#1089297:
  * Fix haskell macro bracketing
  * Fix firewalld macros bracketing</changelog>
  <changelog author="tchvatal@suse.com" date="1526040000">- Version update to 1.0.8 bsc#1092933:
  * Be case insensitive on license detection
  * Exclude limit_build from bracketing
  * Replace _libexecdir as we now do not really bother about
    SLE11</changelog>
  <changelog author="tchvatal@suse.com" date="1530273600">- Version uppdate to 1.0.9 bsc#1099674:
  * Move some checks from rpmlint to be autochecked
  * Dropped support of py2
  * Fixed error reported on parsing non-utf spec-file
  * Leap 15.0 used as base for conversions to pkgconfig/etc.</changelog>
  <changelog author="tchvatal@suse.com" date="1530446400">- Version update to 1.1.0 bsc#1099674:
  * Fix issue with previous release not finding datadirs</changelog>
  <changelog author="tchvatal@suse.com" date="1534766400">- Version update to 1.1.1 bsc#1099674:
  * Fix help message not working
  * Make libexecdir opt-in rather than opt-out
  * Account for LICENCE string not just LICENSE
  * Warn about direct qmake/meson usage
  * Use https when mentioning bugzilla in header
  * Use tuples on some places rather than lists</changelog>
</package>
<package pkgid="13e137493b3cbb34007e6f5cfce3c53eced08fd4ce5e027d732d8edfcee53de5" name="spice" arch="src">
  <version epoch="0" ver="0.14.0" rel="lp150.3.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1368619200">- Update to version 0.12.2:
  + Skipped 0.12.1, it existed in git but was never released.
  + spice-server now requires glib2 (like qemu does).
  + More robust ssl error and certificate handling.
  + Added support for websockets.
  + Tons of seamless migration bugfixes.
  + Also some none seamless migration bugfixes.
- Clean spec file using spec-cleaner.
- Rebase spice-glibc217.patch.
- Add pkgconfig(glib-2.0) BuildRequires: new dependency.
- Pass --enable-client and --enable-smartcard to configure in
  order to ensure the client and smartcard support are built (SC
  only on openSUSE &gt;= 12.2).</changelog>
  <changelog author="aevseev@gmail.com" date="1375099200">- Update to version 0.12.4:
  + log actual address spice-server binds to
  + main_channel: fix double release of migration target data (rhbz#859027)
  + red_channel: replace an assert upon threads mismatch with a warning (rhbz#823472)
  + support for filtering out agent file-xfer msgs (rhbz#961848)
  ++ new library export spice_server_set_agent_file_xfer
  + mjpeg encoder statistics (mjpeg_encoder_get_stats)
  + improve stream stats readability and ease of parsing
  + fix for stuck display_channel over WAN (jpeg_enabled=true) (rhbz#977998)
  + Use RING_FOREACH_SAFE and other SAFE macros (rhbz#887775)
  + Some server/tests fixes.
- New features from 0.12.3:
  + monitor client bandwidth and latency.
  + dynamically adjust video stream quality based on client bandwidth &amp; latency.
  ++ new SPICE_MSGC_DISPLAY_STREAM_REPORT
  ++ can also set SPICE_BIT_RATE environment variable to override.
  + support arbitrary latency of audio stream wrt video stream:
  ++ new SPICE_MSG_PLAYBACK_LATENCY
  + notify agent on client disconnection
  ++ new VD_AGENT_CLIENT_DISCONNECTED message
  + better support for switching from qxl to vga mode
  ++ new library export spice_qxl_driver_unload
  + multiple monitor support in single channel fixes.
  + stop streams before migration.
  + don't send empty volume messages.
  + Bugs fixed: rhbz#891326, rhbz#958276, rhbz#956345
  + fixes to inputs, chardev, build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1413374400">- Update to version 0.12.5:
  + Added Opus support. Celt support will be obsoleted in a future
    release.
  + Addition of webdav channel.
  + Force use of TLS 1.0 or newer for TLS connections.
  + Reference manual.
  + Some optimizations improving CPU use.
  + Various bug fixes for race conditions, memory corruption, which
    could be triggered on client disconnections, migration, and
    cause spice-server to misbehave.
  + Portability fixes.
  + Code cleanups.
  + bsc#848279: fix CVE-2013-4282.
- Add pkconfig(opus) BuildRequires: Needed to build new opus
  support.
- Add spice-Don-t-use-48kHz-for-playback-recording-rates.patch:
  Fix advertised sound playback/recording rates in public headers
  (rh#1129961).
- Drop spice-glibc217.patch: No longer needed.
- Run spec-clean on spec file, remove conditionals for obsolete
  versions of openSUSE, enable parallel build and drop obsolete
  clean section.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1413720000">- Replace xorg-x11-devel buildrequire by selected pkgconfig(xlibs..)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Don't allow setting password longer than what the spice protocol
  allows. password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1441627200">- bsc#944460: fix CVE-2015-3247.
  cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1444132800">- Update to version 0.12.6
  + Removed spicec client code, it has been superseded by remote-viewer
    and other spice-gtk based clients
  + Unix socket support
  + LZ4 support
  + Let clients specify their preferred image compression format
  + Allow to record and replay a spice-server session
  + Fixes for CVE-2015-3247 CVE-2015-5260 and CVE-2015-5261
    bsc#944787, bsc#948976
  + spice-protocol submodule has been removed, spice-protocol must
    now be installed when building spice-server
  + Remove write polling in chardevs to reduce wakeups
- Remove upstream merged patches:
  + spice-Don-t-use-48kHz-for-playback-recording-rates.patch
  + password-length-check.patch
  + cve-2015-3247.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1460721600">- Update to version 0.12.7 (fate#320079)
  + spice-server will now send TCP keepalive probes on the TCP connections it
    uses. This can prevent unwanted idle disconnections if proxies are used
    between the client and the host.
  + Fix important memory usage when the webdav channel is used
  + Do not disconnect when the client requests an unsupported compression type
  + Fix a few race conditions
  + Fix display glitch when using XSpice
  + Improve help string for 'replay -s'
  + Fix crashes in corner cases (buggy spice-html5 + win10, vnc + SPICE port
    configured, USB webcam redirection over a slow link)
  + Fix various compilation warning when building on 32 bit machines
  + Some fixes for big-endian machines, more work is likely to be needed
  + Do not build static libraries by default, this can be reenabled with --enable-static
  + Fix small leak in MJPEG code</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.12.8:
  + Fixes for bsc#982385 / CVE-2016-0749 and bsc#982386 / CVE-2016-2150.</changelog>
  <changelog author="msuchanek@suse.com" date="1478779200">- remove ExclusiveArch (boo#1009438)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Obsolete spice-client (bsc#1013916)</changelog>
  <changelog author="astieger@suse.com" date="1482408000">- restrict suppression of obsoletes-not-provided warning to
  spice-client bsc#1013916</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Synchronize with SLES (fate#322402):
  + bnc#894069: disable smartcard support for SLES
  + merge changelog</changelog>
  <changelog author="psimons@suse.com" date="1486036801">- Added patches to fix two security vulnerabilities.
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
    [CVE-2016-9577, bsc#1023078]
  * CVE-2016-9578-remote-dos-via-crafted-message.patch
    [CVE-2016-9578, bsc#1023079]</changelog>
  <changelog author="cbosdonnat@suse.com" date="1509019200">- Release 0.14.0
  * fix client mouse with virgl
  * fix frozen display after seamless migration
  * set human-readable name on spice threads
  * add sanity-checks for ORC library as it can abort spice-server
    when selinux is in use
  * Close TCP connection early when client did not send the correct
    SPICE magic bytes: this allows VNC clients to gracefully fail
    when connecting to a SPICE port
  * Add VP9 encoding support when GStreamer is being used and misc
    streaming/encoding improvements
  * Improvements to replay utility
  * Limit (deprecated/unusud) QXLMessage size to 100,000 characters
    for improved safety
  * Improve image quality in low bitrate situation when using the
    GStreamer backend
  * Added GStreamer support to the video streaming code
  * Fix old migration bug causing migration to never end in some cases
  * Added lz4 compression to the spicevmc channel
  * Ongoing code cleanups
  * add spice_qxl_gl_scanout() spice_qxl_gl_draw_async() for local
    virgl support
  * spice_server_set_keepalive_timeout() has been removed in favour of
    unconditionally sending keepalive probes every 10 minutes
  * Added public spice_server_set_keepalive_timeout() to make it possible
    to tweak keepalive on all SPICE connection. This can prevent unwanted
    idle disconnections if proxies are used between the client and the host.
  * Fix important memory usage when the webdav channel is used
  * Do not disconnect when the client requests an unsupported compression type
  * Fix potential race condition when using multiple QXL devices
  * Fix display glitch when using XSpice
  * Improve help string for 'replay -s'
  * Fix small leak in MJPEG code
- Removed patches:
  * CVE-2016-9577-buffer-overflow-in-main_channel_alloc_msg_rcv_buf.patch
  * CVE-2016-9578-remote-dos-via-crafted-message.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1516276800">- Enable smartcards on sle15 as the supportlib is available
  * Condition it using name everywhere instead of suse versions
    and join together with lz4
- Format with spec-cleaner
- Convert dependencies to pkgconfig style
- Install documentation and license file
- Add configure arguments to most of the options to not rely on
  autotools automatic behavior
  * Also enable gstreamer and lz4 options
- Drop the not needed python dependencies, they are needed only
  when building from git snapshot</changelog>
  <changelog author="tchvatal@suse.com" date="1517313600">- Split the sle condition again for exact features to allow their
  override</changelog>
  <changelog author="jengelh@inai.de" date="1517313601">- Correct RPM group for shared library.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="0a02481d8ddb83923bbe434a435dfe78f89bebe7c5737c3c608ae6f774a8405f" name="spice-gtk" arch="src">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="17c7f0da4a4cdd56801feec315f78eef315e30658c88cae366062427eabfdb43" name="spice-gtk" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="5943da8436767bb1733ed6f25817ddf44344a833114344855642c65a7680e7c5" name="spice-gtk-devel" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="46cf683a4097a8edc22aa21181dbe7c7339237c21c91f26344b6816973a55038" name="spice-gtk-lang" arch="noarch">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="1ed6f390cf3124df8df9780b55e74123987e1113a3053a80b0891ac59a04139c" name="spyder3" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="5e35cac9aa833ec84bbc6b3987b66e79380e7078ead3ca252572c13ee11a0faf" name="spyder3" arch="src">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="279f3843b68d5b1f2118f6865923228277933d4129cc3b14d3b871b062a8923f" name="spyder3-breakpoints" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="383f85473f3a0cb15bb57479dc87015d76de00b7b7892f5df1e37f4fe196b747" name="spyder3-breakpoints-lang" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="601c0f65f76d556391d7292c6a27ea791d0b3d08bc4b1e889b326b1fbb440397" name="spyder3-dicom" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="f8de0832f677e18cd6b72ee0c4633cc19bd53c63e03ded0515732c602fdb1e8b" name="spyder3-doc" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="b743b8a7bcc28fa9fd255dafb8ffac6b7d3dabfc56f3fd0ff20c620a0abfc77a" name="spyder3-hdf5" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="b742d13655cbdd230b0996fc15f7657aaf06c5d17792bca692d239fd0fd8e6cf" name="spyder3-lang" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="03b0ef524d862335490011281f283daeb69f03285f08f05d7785602aab58cc57" name="spyder3-profiler" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="da209445121dfb2df7440a33418a9c1780645571c1e0fab15d50b43d6fd4ce83" name="spyder3-profiler-lang" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="d98307a717854b2b1362c83ccb6f1f3b849f8ebf633dd509c139eff10ca01db1" name="spyder3-pylint" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="153548770263d167e90e4d1cbb95bf70a964c05b6ba70712522e9aacf479522e" name="spyder3-pylint-lang" arch="noarch">
  <version epoch="0" ver="3.2.8" rel="lp150.2.3.1"/>
  <changelog author="toddrme2178@gmail.com" date="1401451200">- Initial python 3 version
- Update to 2.3.0rc
  * No upstream changelog</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405339200">- Update to 2.3.0 final
  - New features
  * Python 3 support
  * Editor
  * Use the Tab key to do code completions
  * Highlight cells, i.e. portions of a file delimited by separators of the form `# %%`
  * First-class support for Enaml files
  * Syntax highlighting for Julia files
  * Use Shift+Tab to show the signature corresponding to a function/method while it's been called
  * Do code completions using the tokens (or words) found in a file
  * Token-based completions work for any file type supported by the Editor
  * Add a new tooltip widget (borrowed from the IPython project) to better handle how to show function signatures
  * IPython console
  * Assign the keyboard shortcut Ctrl+Shift+I to move to it
  * Open a console by default at startup
  * Give visual feedback when opening a console
  * Show kernel error messages in the client tab
  * Object Inspector
  * Add an intro message to explain how to use it
  * New style based on the Bootswatch Cerulean theme
  * Main Window
  * Reorganize several menus
  * Under the hood
  * Improve startup time
  * Develop a new way to update configuration defaults (that doesn't involve resetting user settings)
  - Bug fixes</changelog>
  <changelog author="toddrme2178@gmail.com" date="1405598400">- Add spyder3-rpmlintrc to sources
- Remove unused version_check.patch</changelog>
  <changelog author="toddrme2178@gmail.com" date="1411041600">- Update to 2.3.1
  * New features since
  * Variable Explorer
  * Support for Pandas DataFrame's and TimeSerie's types
  * Support for Numpy 3D arrays
  * Drag and drop works for all its supported file types
    (e.g. images, mat files, json files, etc)
  * Editor
  * F9 runs the current line under the cursor if nothing is
    selected
  * Focus remains on it after evaluating cells and selections
    (an option was added to return to the old behavior)
  * IPython console
  * Connect to external kernels through ssh
  * Object Inspector
  * Add a tutorial for beginners
  * Main Window
  * Improve style on Mac
  * Bug fixes
  * Issue  93  Variable explorer: allow array editor to deal
    with arrays with more than 2 dimensions
  * Issue  1160  Variable Explorer: add support for pandas
    objects
  * Issue  1305  mayavi plot hangs when IPython graphics backend
    is inline (default)
  * Issue  1319  Spyder is not getting its taskbar icon right in
    Win 7/8
  * Issue  1445  Linux style middle mouse button paste not
    executed in console
  * Issue  1530  Wrong encoding for date in pylint widget
  * Issue  1590  Add numpy matrices as a supported type to the
    Variable Explorer
  * Issue  1604  spyder 2.2.5 freezes with netCDF4-python
  * Issue  1627  Run selection (F9) changes focus to Python
    interpreter, but ex-Matlab users expect the
    focus to remain on the editor
  * Issue  1670  Provide a "Run current line" feature
  * Issue  1690  Feature request: connect to existing IPython
    kernel over ssh
  * Issue  1699  Option to disable middle button paste
  * Issue  1783  The new cell delimiter when converting a
    notebook to python file is # In[`*`]
  * Issue  1863  Ctrl-C doesn't work in a *restarted* IPython
    console
  * Issue  1893  Matplotlib plots do not display correctly in
    2.3.0 (when running in dedicated python
    interpreter)
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1413201600">- Fix icon directory ownership</changelog>
  <changelog author="toddrme2178@gmail.com" date="1417867200">- Update to 2.3.2:
  * Editor
  - Improve cells visualization
  - Add support for drag selection and improve look of
    line number area
  - Open on it any text file present in the Variable Explorer
  - View and edit IPython notebooks as Json files
  - Syntax highlighting for Json and Yaml files
  * Variable Explorer:
  - Import csv files as Pandas DataFrames
  - Improve browsing speed for NumPy arrays and DataFrames with more
    han 1e5 elements
  * IPython Console
  - Add a stop button to easily stop computations</changelog>
  <changelog author="toddrme2178@gmail.com" date="1427198400">- Update to 2.3.4:
  * New features
  - Debugging
    + After pressing the Debug button (or Ctrl+F5) move to the first
    breakpoint
  - IPython Console
    + Drop support for Sympy versions less than 0.7.3
  - Python Console
    + Remove support to run system commands with ! (like !diff)
  - Editor
    + Accept drops from compressed files on Windows
  * Bug fixes
  - spyder crashes if ipython installed but not pygments
  - Cannot plot inline in IPython console on Linux
  - Update French translations for 2.3.4
  - Importing a module with debugger causes "TypeError: decoding Unicode is
    not supported"
  - SyntaxErrors with Python 3.2
  - Object Inspector is not showing "No documentation available" for objects
    without docstring
  - IPython does not work with brewed or virtualenv Python(s) in MacOSX
  - Spyder2.3.3 Code completion breaks
  - Spyder's WM_CLASS is empty, resulting in unexpected behavior for task
    managers
  - Code completion issue with Jedi
  - IPython consoles are not named correctly when connecting to existing
    kernels and passing the full kernel path
  - runfile with path containing apostrophes (quotes) will not work
  - Long NumPy arrays throw off errors
  - Special character "!" is not processed correctly when debugging in Python
    consoles
  - Spyder crashes on Windows because of non-ascii chars in working directory
  - Don't execute external commands (!) when running pdb in python consoles
  - Execute until first breakpoint when pressing the Debug button
  - Dragging (not dropping) file from 7zip over spyder window causes
    TypeError in dragEnterEvent
  - spyderlib.utils.external overrides modules for script execution
  - spyder 2.3 ipython console startup code or file not working
  - Running in external system terminals is not working on Windows and Python
    3
  - Spyder crashes on launch trying to load the project config file
    (.spyderproject)
  - raw_input borks with '!'
  - Plot A List Of Floats In Variable Explorer Not Possible
  - Problems with sitecustomize because of pickleshare library
  - "Highlight occurrences" setting is lost after IDE restart
  - Mac app - Sometimes it's not possible to get the user env vars
  - The PYTHONPATH manager on the Mac app does not work with the EPD64
    interpreter
  - Ctrl-C doesn't copy to clipboard in object inspector
  * Pull requests
  - Update French translations
  - Improve message for no docstring
  - catch a reason to crash on startup
  - Fix a bug in completion if callback value is not converted to string
  - Open configuration file with utf-8 encoding on Windows and Python 2
  - Fix zlib segmentation fault in Anaconda 3.4 Linux
- Update to 2.3.3:
  * New features
  - Editor
    + Use the Jedi library to do code completions
    + Add Ctrl+= as a shortcut to do Zoom in and Ctrl+0 to reset zoom
    + Add an option to show blank spaces, under the Source menu. There is
    also an option to make this permanent under Preferences &gt; Editor.
  - IPython Console
    + Don't print DataFrames as html tables because this won't be supported
    since IPython 3.0
    + Drop support for IPython 0.13
    + Support the upcoming 3.0 version
    + Add Ctrl+T as shortcut to open new consoles
    + Simplify how consoles are named
  - Variable Explorer
    + More optimizations to handle big DataFrames and NumPy arrays (i.e. with
    more than 1e6 elements).
  - Main Window
    + Add Ctrl+W and Ctrl+F4 to close tabs in all platforms
    + Show shortcuts to move to each pane in View &gt; Panes
  * Bug fixes
  - Visual help for indentation: draw spaces and tabs
  - Allow the file explorer to open any file into the editor as text
  - Augment or replace rope with Jedi
  - Kill button 'clicked' signal is connected but never disconnected on the
    python shell
  - Add support to get code completions for compiled modules (e.g. OpenCV)
  - Debug ignores breakpoints, if there's no ASCII characters in a file path
  - Creating file gives TypeError on Python 3
  - Keyboard shortcut to come back to normal zoom level
  - Shortcuts to create and close IPython consoles
  - Transition to git and github
  - Evaluating cell or selection in Python consoles takes ages
  - Spyder with GTK/GTKAgg backend on GNOME freezes
  - Matplotlib backend in Mac can't be changed when using PySide
  - exception in spyder internal console when typing 'exit(' in editor
  - autocomplete in the middle of a word
  - Your IPython frontend and kernel versions are incompatible
  - Winpdb (F7) doesn't work in Python 3
  - TkAgg backend unresponsive window on Linux and OS X
  - Improve inline backend options
  - Pandas Dataframe not opening in Variable Explorer
  - "About spyder" and "Report issue ..." output errors
  - Profiler - sorting by Total Time sorts by string order, not numeric order
  - Unable to bring up tutorial
  - Bug on Variable Explorer while viewing DataFrames, with timestamp columns
  - Missing py27 dmg download
  - PYTHON pathmanager on windows 8 does not work properly
  - Spyder 2.3.2 freezes when viewing big collections on the Variable
    Explorer
  - UnicodeDecodeError in the Internal console when trying to run a file with
    non-ascii chars and synatx errors in it
  - Go to definition menu item inactive with rope present.
  - iPython console rendering of pandas.DataFrame.repr_html() note in
    changelog
  - Small typo in Help : Plotting examples
  - Closing takes a long time with Python 3.4
  - UnicodeDecodeError when inspecting pandas DataFrame in ipython console
  - Update French translations for 2.3.3</changelog>
  <changelog author="toddrme2178@gmail.com" date="1435579200">- Update to 2.3.5.2
  * Note: Versions 2.3.5 and 2.3.5.1 have serious startup bugs on
    Windows and Mac respectively. Hence they are not listed here.
  * New features
  - Editor
    + Add support for Jedi 0.9
  - IPython Console
    + Add initial support for IPython/Jupyter 4.0
  - Main Window
    + Improve how Spyder looks in MacOS X
    + Several fixes to prevent startup crashes
  * Bug fixes
  - Issue 2468 - 'Connect to existing kernel' fails if json file not in PWD
  - Issue 2466 - No Notification of Running Instance
  - Issue 2463 - Failure to preserve Matplotlib backend when using symbolic math
  - Issue 2456 - Launching IPython console fails because of errors importing Pandas or Matplotlib
  - Issue 2452 - os.system causes TypeError in Python 3
  - Issue 2448 - Spyder crashes using Variable Explorer with BeautifulSoup
  - Issue 2446 - When importing putting two periods in a row produces an error in a Python console
  - Issue 2363 - Spyder fails to start because of problems with lockfile
  - Issue 2356 - Block comment incorporating whitespace excludes last line
  - Issue 2341 - IPython console: "sre_constants.error: unbalanced parenthesis" while typing
  - Issue 2314 - Cell highlighting not updated after closing the FindReplace widget
  - Issue 2302 - Closing all files in editor shouldn't leave it empty
  - Issue 2299 - IPython preference "Automatically load Pylab and Numpy Modules" not followed
  - Issue 2298 - Cannot stop executing when runing a flask app with debug=True
  - Issue 2285 - Copying from Spyder and pasting into LibreOffice displays strange comments
  - Issue 2228 - Shortcut to run cells on Mac is not working
  - Issue 2188 - can't run win_post_install from pip
  - Issue 2171 - Spyder Mac apps (for Python 2 and 3) hang on startup with OSX 10.9.5
  - Issue 2028 - Background color of theme is not set properly on Mac OSX
  - Issue 1957 - Python 3 Mac app can't start Python or IPython consoles
  - Issue 1844 - "Set as current console's working directory" button not working on Python 3
  - Issue 1615 - Mac app - Matplotlib does not work with Canopy
  * Pull requests
  - PR 2486 - Stop using IPython.lib.kernel 0.13.2 shim and add initial support for Jupyter
  - PR 2484 - Remove unnecessary changes to detected kernel json file when connecting to external kernels
  - PR 2434 - Match for pylint when parsing pylint version
  - PR 2411 - Improve github issue template
  - PR 2377 - Fix the fact that spyder_win_post_install.py can't be run from pip
  - PR 2293 - Hide menu icons on Mac OS X
  - PR 2247 - Add support to run Python programs on xfce and xterm external terminals
  - PR 2216 - Fix broken png files: libpng 1.6.2 and newer has stricter iCCP rules</changelog>
  <changelog author="toddrme2178@gmail.com" date="1440763200">- Update to 2.3.6
  + New Features
  * IPython Console
  * Make it fully compatible with IPython/Jupyter 4.0
  * Variable Explorer
  * Don't refresh it when focused to avoid slow downs when
    working with big data
  * Add variable name to DataFrame editor
  * Fix several crashes and freezes when working with DataFrames
  * Under the hood
  * Use PyQt4 API #2 by default (API #1 is not supported anymore).
    This is necessary to support IPython/Jupyter 4.0
  + Bug fixes
  * Multiple untitled files generate at close
  * Indenting at the first position in file fails/crashes
  * Crash after update IPython to 4.0
  * Call tips and auto completion tips go out of screen on a second monitor
  * Having a lof of data in the Variable explorer slows down Spyder considerably
  * Spyder crash on launch with Babel 2.0/Python 3.4
  * List of pandas dataframes in variable explorer slows down Spyder
  * Variable explorer auto-refreshes after kernel restarts
  * DataFrames with headers that contain BOM utf-8 data are freezing/crashing Spyder (in Python 2)
  * Spyder crashes when displaying DataFrames with duplicate column names in the Variable Explorer
  * Don't ask to confirm exit on default untitled files
  * Display object name in DataFrame editor
  + Pull requests
  * Fix missing exception on Windows when importing data on the Variable Explorer
  * Show call tips at right position when there are multiple screens
  * Fix error when indenting on the first line of a file
- Switch dependencies to jupyter versions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1444132800">- Update to 2.3.7
  + New features
  * Editor
  * Remove support for Jedi 0.9 because it was causing crashes
  * Variable Explorer
  * Fix crashes and freezes when working with DataFrames on Python 2
  * Under the hodd
  * Restore support for PySide
  + Bug fixes
  * Issue 2709 - IPython console error when trying to use SymPy
  * Issue 2693 - README should link to manual
  * Issue 2689 - "Resize" button in variable explorer chops off the array
  * Issue 2684 - Applications directory link is broken in Spyder 2.3.6 dmg's
  * Issue 2680 - "Close all files" hangs Spyder
  * Issue 2661 - Conda package manager is packed in 2.3.6 win32 distribution leading to errors
  * Issue 2659 - Crash while getting completions of DataFrames on the Editor because of Jedi 0.9
  * Issue 2654 - Creating DataFrames in Python or IPython consoles make Spyder 2.3.6 to hang
  * Issue 2649 - PySide can not be used on 2.3.6
  * Issue 2296 - Line numbers misaligned when zooming and scrolling in Mac
  * Issue 2036 - Code analysis and tooltips are not displayed in Ubuntu
  + Pull requests
  * PR 2650 - Failed sip import blocks fallback to PySide</changelog>
  <changelog author="toddrme2178@gmail.com" date="1445947200">- Remove optional dependencies from BuildRequires</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457524800">- Update to Version 2.3.8
  + New features
  * Python and IPython consoles
  * Fix a sitecustomize error when using Matplotlib 1.5 with Python 2 on Linux
  * Variable Explorer
  * Add support for Pandas Series when using Pandas 0.17+
  * Fix a freeze when creating empty DataFrames in Python 2
  * Fix a freeze when working with big Numpy recarray's
  * Under the hood
  * Avoid startup crashes when there are errors importing Numpy, SciPy or Pillow
  + Bug fixes
  * [Issue 2819](../../issues/2819) - Spyder fails to start because of an error with scipy
  * [Issue 2815](../../issues/2815) - Variable explorer is not recognizing Pandas Series objects
  * [Issue 2793](../../issues/2793) - Connecting to kernel fails because of update to Matplotlib 1.5
  * [Issue 2791](../../issues/2791) - DataFrame with no rows gives error when trying to view it
  * [Issue 2783](../../issues/2783) - Spyder freezes on assigning a fits table data
  * [Issue 2744](../../issues/2744) - Spyder hangs when creating an empty DataFrame on Python 2
- Fixes bug BNC#966417</changelog>
  <changelog author="arun@gmx.de" date="1462708800">- specfile:
  * updated source url to files.pythonhosted.org</changelog>
  <changelog author="toddrme2178@gmail.com" date="1465473600">- Update to Version 2.3.9
  * Issue #3067 - File left open in sitecustomize when executing it in Python 3
  * Issue #3031 - Variable Explorer freezes when certain binary data is loaded
  * Issue #2991 - RuntimeWarning with pandas.dataframes that contain np.nan values
  * Issue #2984 - Can't access Preferences in spyder
  * Issue #2983 - Freeze while assigning data from numpy array when the data is a string</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476360000">- Update to version 3.0.0
  * See: https://github.com/spyder-ide/spyder/blob/3.x/CHANGELOG.md
- Remove spyderlib subpackage.  spyderlib no longer exists.
  Everything that was in spyderlib is now in the spyder namespace.
- Split plugins into their own subpackages.  Plugins are each in
  their own namespace, and third-party plugins are now possible.
  Further, some plugins can pull in dependencies that some users
  may not want.
- Update URL to new upstream URL.
- Add additional dependencies.
- Check which dependencies are really needed and which ones are
  optional and divide them into Requires and Recommends
  appropriately.</changelog>
  <changelog author="toddrme2178@gmail.com" date="1476446400">- Fix pylint dependency.</changelog>
  <changelog author="jengelh@inai.de" date="1476705600">- Update descriptions</changelog>
  <changelog author="toddrme2178@gmail.com" date="1503921600">- Update to version 3.2.1
  * See: https://github.com/spyder-ide/spyder/blob/v3.2.1/CHANGELOG.md
- Update dependencies</changelog>
  <changelog author="toddrme2178@gmail.com" date="1524916800">- Update to Version 3.2.8
  + New features
    &gt; Editor
  * Add `Ctrl+Shift+Enter` shortcut to introduce new lines at any point.
    &gt; IPython console
  * Always run Cython files in a dedicated console.
  + Issues Closed
  * ValueError trying to open pandas.DateOffset objects in Variable Explorer
  * AttributeError when attempting to edit non-writeable or non-settable attributes of certain (e.g. many common Pandas) objects in CollectionsEditor
  * TypeError and Python hard crash to desktop after modifying _typ attribute of pandas Period in CollectionsEditor
  * Saving session data (spydata) deletes all arrays nested inside other data structures
  * System time change causes Spyder error
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings' when attempting to activate Automatic Connections for Help
  * Typo in introspection.utils.get_words
  * Sphinx html_use_smartypants is deprecated as of 1.6 and removed in 1.7
  * Spyder always open a new instance after updating to 3.2.7 version
  * Strange behavior for Spyder code annotations
  * AttributeError: 'NoneType' object has no attribute 'apply_plugin_settings'
  * AttributeError: 'NoneType' object has no attribute 'load_module'
  * Setting a path containing a single quote
  * ValueError when closing a file whose folder changed name in File Explorer
  * When browsing MultiIndex in Object Explorer, Pandas raises NotImplementedError: isna is not defined for MultiIndex
  * FileNotFoundError generated for template.py
  * Variable Explorer windows don't close when Spyder exits; prevents it from reopening until manually closed
  * Bug: Find and Replace indicate "no matches" when "[", "(", or ")" included in the search string
  * AttributeError when attempting to view dom.minidom.Element object in Variable Explorer
  * How do I move to a new line while I'm in the middle of the current line?
  * pyximport.install() in sitecustomize.py is not a good idea
  * delete (context="editor", name="delete") keyboard shortcut doesn't work
  * Saving large workspace on network drive crashes Spyder on Windows
  + Pull Requests Merged
  * Error report stopgap to make instructions harder to miss
  * Fix various bugs in Variable Explorer, including an application crash to desktop
  * Replace deprecated function in inline CollectionsEditor tests and add recently supported data types
  * Make several GUI/qtbot tests more reliable by increasing timeouts and tweaking the methods used
  * Add .pytest_cache to gitignore
  * Fix new instance validation on Windows.
  * Fix NotImplementedError when browsing a MultiIndex in the Collection Editor
  * Set parent for Variable Explorer editors so Spyder closes properly
  * Change time elapsed calculation to prevent OSError
  * Fix bugs in session saving to spydata and improve tests
  * Allow TODO check marks with blank line
  * Fix typo in utils.introspection.get_words
  * Pin to a Tornado version less than 5.0 to avoid hangs in our tests
  * Run Cython files in a dedicated console
  * Avoid showing dialogs in IPython console tests to avoid segfaults
  * Be able to open files in the Editor if no template is found
  * Add handling for AttributteError when importing module from path
  * Remove ipyconsole and editor attrs from the Help plugin
  * Update deprecated Sphinx directive html_use_smartypants
  * Allow rename from Explorer to work for directories
  * Fix error when setting a path with a single quote
  * Delay check whether we are running under pytest until run time
  * Allow shortcut key for editor/delete to work like Del key
  * Restore the previous wording for package versions in error report
  * Skip some IPython console tests in PyQt4 because they are segfaulting too much
  * Find/replace - return match counts on unescaped characters
  * Add Ctrl+Shift+Enter to enter a new line in the Editor
- Update to Version 3.2.7
  + New features
    &gt; Main Window
  * Improve the interface to report errors to Github.
    &gt; Variable Explorer
  * Enable the display of many more Numpy array types.
    &gt; Editor
  * Copy text from the search field to the replace one
    after pressing `Tab`.
    &gt; IPython console
  * Make `%edit foo.py` open `foo.py` in the Editor on
    Windows.
    &gt; Find in Files
  * Remove items from the `Search in` list when hovering
    over them and pressing `Del`.
  * Add a `Clear this list` option below `Select other
    directory`.
    &gt; Under the hood
  * Demand PyQt less than 5.10 for our wheels.
  + Issues Closed
  * Update translations for 3.2.7
  * test_completions_custom_path fails with jedi 0.9.0 (Spyder 3)
  * FileNotFoundError history.py when running code in the IPython console
  * Mouse cursor issue with PyQt 5.10
  * Add the the Collapse All and Expand All buttons to the toolbar of the Outline Explorer
  * PermissionError when Spyder is started
  * Selecting "tutorial" from help menu does not bring up Help pane automatically if not loaded, leading to user confusion
  * IndexError when getting help of an object
  * AttributeError when running code in the IPython console
  * RuntimeError when interrupting kernel
  * pdb history doesn't collapse similar text
  * IOError when trying to write to stderr file
  * Convert re expressions to use raw strings
  * Errors pop up when change the key shortcuts in python 2.7
  * %edit magic command does not work on Windows
  * Color scheme changes after kernel restart
  * Spyder Profiler Hangs/Freezes
  * Bug with saved window layouts
  * Icon should be moved from share/pixmaps to share/icons
  * UnicodeEncodeError when searching text in the Editor
  * Uncaught error when opening a pandas DataFrame with out of bounds timestamps
  * Several tests fail locally under user environment with customized keyboard shortcuts due to relying on hardcoded keybindings
  * TypeError: tabText(self, int) when moving plugin tabs
  * UnicodeEncodeError when using a project with non-ascii characters on it
  * UnicodeDecodeError when moving a file with Project Explorer
  * Add missing Keywords metadata in desktop file
  * Paths in the "Search in" combobox of the "Find in File" plugin becomes corrupted
  * Improve interface to report errors
  * IPython console failing when custom interpreter is removed
  * Use Tab key to copy text to "Replace with:" field
  + Pull Requests Merged
  * Update Spanish translation
  * French translation for 3.2.7
  * Update Japanese translation for 3.2.7
  * Update Brazilian Portuguese translation
  * Update Russian translation
  * Demand PyQt5 less than 5.10 in our wheels
  * Skip test_completions_custom_path if jedi version before 0.10.0
  * Update broken matplotlib project URL in install doc
  * Make projects work on unicode directories
  * Handle errors when writing history to disk in the IPython Console
  * Fix all test files to be run independently
  * Xfail test_auto_backend for certain versions of zmq and ipykernel
  * Add test for file directory change in the Project Explorer.
  * Add keywords to desktop files
  * Change share/pixmaps to share/icons in setup.py
  * Add error handling for the lockfile symlink on Windows
  * Harmonized the toolbar of the Outline Explorer with its context menu.
  * Add validation for custom interpreter option
  * Show Help if closed when opening tutorial to avoid user confusion
  * Fix and catch typeerror thrown when from_index is None while moving plugin tab
  * Catch any error in the isdefined method of dochelpers
  * Handle AttributeError when running code in the IPython Console.
  * Catch any error when creating stderr files in the IPython console
  * Catch RuntimeError when no kernel is running
  * Skip test_tab_copies_find_to_replace on Linux because it fails
  * Don't add repeated entries to history while on pdb
  * Skip test_calltip on Python 3 and PyQt &lt; 5.9 because it's failing there
  * Custom layouts not working when hexstate is None
  * Pin pyqt5 to 5.9.2 on tests because 5.10 is giving segfaults during the collection phase
  * Install and run window manager in Travis to fix focus issues and unskip now-passing tests
  * Update Brazilian Portuguese translation
  * Change to re strings for Deprecation Warning
  * Use a temporary config directory to run our tests
  * Preserve color scheme on kernel restart
  * Update super() call to use Python 2 style call
  * Fix %edit magic on Windows
  * Fix Profiler error when run is stopped
  * Catch OutOfBoundsDatetime errors from pandas
  * Use a checkbox in error dialog to dismiss it instead of a button
  * Fix some completion errors in the Editor and show again no docs message in Help
  * Fix error when searching text in the Editor in translated interfaces
  * Find/replace - Copy search text to replace textbox on tabbing between them
  * Add troubleshooting blurb and OS version to issue template and enhance UI
  * Add Troubleshooting links and blurb to various appropriate places in Spyder and doc
  * Enable the display of many more numpy array types in the Variable Explorer
  * Fix 3 bugs and add 4 improvements to Find in Files
  * Major overhaul of Readme, contributing and install docs
  * Differenciate between ), }, and ] when closing brackets
  * Change error report dialog to enter issue description before submitting it
- Update to Version 3.2.6
  + New features
    &gt; Editor
  * Make `Shift+Del` to cut text if users have some text
    selected.
  * Make `Shift+Ins` to paste text.
  * Make `Ctrl+PgUp`, `Ctrl+PgDn` and `Ctrl+Tab` shortcuts
    configurable.
    &gt; Variable Explorer
  * Display date/times in human readable format.
  * Disable editing for immutable types (e.g. tuples).
    &gt; Under the hood
  * Fix installation of wheels with `pip`.
  + Issues Closed
  * Error on Maximize Current Pane
  * AttributeError when resetting console namespace
  * Not able to change layouts after resetting
  * DataFrame Editor raises TypeError when editing any complex type
  * Fix errors when entering a value for a cell larger than the max int in Array and Dataframe editors
  * Consoles get renamed when moved in the IPython console
  * 3.2.5 fails to activate Matplotlib Qt5 backend
  * Variable Explorer throws an error instead of displaying contents when attempting to inspect any loaded modules
  * Spyder not starting in macOS because pyopengl is present
  * Update to 3.2.5 with pip fails for Python 2.7 as it pulls pyqt5
  * Spyder crashes upon typing `net(` in editor
  * When comparing a generated and loaded profile, any negative deltas show (actual_value - ?) 1h:60min, not actual value
  * Improve how we detect that Spyder is running under Anaconda
  * Shift+del should delete line only when empty selection, otherwise clipboard cut
  * Tuples can be "edited" in Variable Explorer but changes are discarded
  * "ValueError: malformed node or string" when evaluating code that contains Path elements
  * Window layout setting error
  * Segmentation fault when trying to change keyboard shortcuts in Preferences
  * File switcher error
  * ValueError: not enough values to unpack in the File Explorer
  * Add ability to change Ctrl+PgUp and PgDn shortcuts
  * Keyboard shortcut hint is missing from menu item Search/Find in files
  * Tab in-between find and replace text boxes
  + Pull Requests Merged
  * Fix error when trying to maximize plugins that don't have a dock widget
  * Catch error when resetting console namespace and no kernel_client is available
  * Skip some tests because they are failing locally or segfaulting
  * Cannot change windows layout on first start after reset
  * Add shortcut to Find in Files in Search menu
  * Mark introspection test slow and re-enable it on certain CIs
  * Add test to verify that the Automatic backend is working correctly
  * Run slow tests only in our CIs
  * Fix TypeError editing any complex val in DataFrameEditor, and bug resulting in bool_s being treated as uneditable
  * Prevent an error in the FileSwitcher when all tabs are closed in the last focused widget.
  * Allow tab cycling shortcuts to be configurable in Editor
  * Patch ipykernel to avoid errors when setting the Qt5 Matplotlib backend
  * Fix crash and error dialog when triggering OverflowError (too large int) when editing arrays and dataframes
  * Fix renames when moving IPython console tabs
  * Fix negative deltas on profiler
  * Avoid a calltip crash when docstring is None
  * Fix mime type error detection in the File Explorer
  * Remove unnecessary flaky from introspection test, minor cleanup
  * Make Tab key properly switch between find and replace fields
  * Fix segfault on shortcut preferences when using mouse
  * Improve how we detect if we are running under Anaconda
  * Avoid errors when importing pyopengl at startup
  * Make pyqt5 a wheel dependency only for Python 3
  * Fix error when attempting to view module contents in CollectionsEditor
  * Add expected default behavior for Shift+Del and Shift+Ins
  * Add coverage files and Notepad++ backups to gitignore
  * Skip several failing tests on Windows and one on a specific CI build
  * Add test coverage reporting with AppVeyor to Codecov
  * Display date/times in human readable format in Variable Explorer
  * Make bullets/numbers/headings more consistent and add Anaconda for Linux in install doc
  * Properly disable editing in Variable Explorer for values in immutable collections (e.g. tuples)
  * Manage types that extend str in value_to_display
- Update to Version 3.2.5
  + New features
    &gt; IPython Console
  * Improve kernel startup time.
  * Add option to show kernel elapsed time.
  * Add button and option to remove all user-defined variables.
  * Load `%autoreload` magic at kernel startup to make changes to
    modules take effect instantly in the console.
  * Use `cloudpickle` to serialize/deserialize data between kernels
    and Spyder.
    &gt; Variable Explorer
  * Add support for `datetime.timedelta` objects.
    &gt; Under the hood
  * Add `pyqt5` as a new wheel dependency.
  * Add a new `--hide-console` option and deprecate `--show-console`
    on Windows.
  + Issues Closed
  * Update translations for 3.2.5
  * Remove 'DMG Installers' option from documentation
  * UserWarning: Config option use_jedi not recognized by IPCompleter
  * Error when choosing rename option after editing tuple value from Variable explorer.
  * Code from one file not updating when called from another if run directly in the console
  * "Real-time code style analysis" checkbox in Prefs &gt; Editor &gt; Introspection checks for pep8, not pycodestyle
  * Return value of EditorStack.has_filename not checked properly
  * IPython console missing features with respect to the old Python console
  * AttributeError is thrown when trying to get help of an object
  * Improve working directory dropdown box
  * TypeError: disconnect() failed between 'sig_prompt_ready' and all its connections
  * Missing python doc in help menu
  * Problems with backend "TkAgg" on Linux
  * NameError when running isdefined
  * Save after moving editor tabs with split panes changes wrong files
  * Symbol finder gives error message
  * Cannot run static code analysis on Spyder 3.2.4
  * Error when trying to explore empty numpy array
  * Variable explorer broken because of DeprecationWarning in ipykernel
  * Close parenthesis when unmatched
  * Crash on profiler because of lack of profiler.results
  * Can't open preferences anymore as I get an error message
  * Runtime Error raised while closing IPython Console instance
  * AttributeError: 'InternalShell' object has no attribute 'is_running'
  * Keyboard shortcuts reset button cannot be canceled/undone and too easy to trigger
  * Explicitly stated default Russian encoding on Windows not recognized
  * Automatic graphics backend throws an error
  * Can't enable debug mode
  * Spyder crashes after typing plt.plot( at the ipython console
  * Change --show-console for --hide-console
  * "Replace Selection" Erroneously Removing/Interpreting Escape Sequences
  * 'Show in external file explorer' on editor menu more than once for split panels
  * ValueError: invalid literal for int() with base 10: b''
  * Error when replacing "\" by "\\"
  * Add Clear button to (find) entry boxes
  * Don't set current working directory for external kernels
  * Error when drag and drop file from zip
  * Fast file switch and fast symbol search do not work properly if the editor is splitted
  * Exploring variables in debugging mode is giving focus to the Editor
  * Spyder always opens a new instance
  * Variable explorer should list datetime.timedelta variables
  * Spyder is not installing the PyQt5 wheel when using pip
  * Outline explorer doesn't work with second Editor window
  * Breakpoint doesn't appear in gui (red circle) but is listed in Debug &gt; Breakpoints &gt; List breakpoints
  * There should be a way to donate money to support the project
  + Pull Requests Merged
  * Update Japanese translation for 3.2.5
  * Update French translation for 3.2.5
  * Update Spanish translations for 3.2.5
  * Update Russian translation for 3.2.5
  * Load %autoreload magic at kernel startup
  * Remove/update outdated refs to Mac OS X, Mac DMG installers and Continuum.io
  * Skip a test that started to fail on Windows and Python 2
  * Disable renames for list, set and tuple in the Variable Explorer
  * Make tabs drag behavior in the IPython console to be the same as the Editor one
  * Several improvements to the IPython console
  * Fix missing documentation links
  * Add PyQt5 as a new wheel dependency
  * Change pep8 check_executable for pycodestyle.
  * Change for file save on split editor when tabs are moved
  * Disable smartpants quotes in Sphinx to prevent crash with MathJax
  * Catch AttributeError while using the Help plugin
  * Adjust calls to use has_filenames return value of None
  * Simplify how pyopengl is declared in setup.py
  * Add a tooltip showing the full path of highlighted item in the working directory dropdown box
  * Improve how Matplotlib backend is set in the IPython console
  * Catch TypeError while executing code instructions in the IPython console
  * Prevent Editor dockwidget to become visible when clicking on the outline explorer if the Editor is in a separate window
  * Skip test_load_kernel_file in PyQt4 because it segfaults too much
  * Catch NameError in isdefined
  * Add validation for mimedata2url in Editor's dragEnterEvent
  * Ignore warning generated by ipykernel.datapub
  * Skip test_issue_4066 in our CIs with PyQt &gt;= 5.9
  * Set focus for filter line when doing symbol search
  * Handle 3d empty numpy arrays
  * Change position of data loading to prevent not calling validation in the Pylint plugin
  * Change default behavior of --show-console option
  * Catch not found file error when loading profiler results.
  * Skip some dataframe tests on Linux
  * Add validation for attribute 'is_running' in the Help plugin
  * Support datetime.timedelta in variable explorer
  * Catch search regexp error while doing replace/find
  * Better feedback for regexp errors in find/replace
  * Do not overwrite unmatched braces
  * Fix ValueError when switching Python interpreters
  * Fix typo in Solarized color schemes.
  * Add confirmation message to reset shortcuts.
  * Add handling for RuntimeError while closing an IPython console instance.
  * Fix syncing of line number and plugin list for breakpoints and add unit tests.
  * Make clear line shortcut configurable in the IPython console
  * Don't unescape control characteres in replace in selection
  * Add cp1251 (default Russian) encoding on Windows to be recognized by the Editor
  * Reduce row height in dependencies dialog
  * Add clear button to find comboboxes
  * Fix bootstrap.py --debug
  * Add validation to not publish pdb_state after getting values of variables
  * Fix EditorSplitter menu_actions and add test.
  * Don't rely on process name when detecting a previous instance
  * Trade ipykernel.serialize for cloudpickle and remove use of publish_data
  * Make the fileswitcher aware of split editorstacks
- Update to Version 3.2.4
  + New features
  * Add compatibility with Jedi 0.11
  * Display lists with all types of elements in the Variable Explorer.
  + Issues Closed
  * Cannot get past splash screen
  * Sorting by column in variable explorer
  * Error in variable explorer for dicts with mixed-type keys
  * Spyder crashes because of race condition in ZMQ
  * Error when opening a new project
  * Not all lists are supported by the variable explorer
  * Error when pressing Ctrl+C in the terminal where Spyder was started
  * Increase kernel_client.hb_channel.time_to_dead even more
  * Variable Explorer: sort by values not working
  * Checking/Unchecking path in the pathmanager is not working as expected in the IPython console
  * Enter in IPython console inserts new line when big Dataframes are in namespace
  * Problem when closing files with split editors whose tabs order are not synced.
  * Variable explorer crash when viewing numpy structured array
  * Profiler incorrectly detects recursion
  * Variable explorer raise error when try to sort dict by values
  * error when closing a file
  * Error when trying to sort dataframe with duplicate columns
  * Error when Selecting Fig from Variable Explorer
  * In ipdb, the up and down keys have a strange behaviour
  * pdb.pm() raises an Error
  * Issues with recognizing directory renaming
  * Closing last open file while being in non-existing working dir raises exception
  * AttributeError: 'NoneType' object has no attribute 'execute'
  * Error when trying to edit elements of a float numpy array in variable explorer
  * Some issues with dedicated consoles
  * "Save as" dialog extremely slow
  + Pull Requests Merged
  * Add an error message when sorting a dataframe on categorical dtypes
  * Make consoles to start without an stderr file
  * Update minimal QtPy required version
  * Skip a Matplotlib test in PyQt4 because it's failing too much
  * Backport PR 5159
  * Fix crashing of the fileswitcher after closing the last file of the Editor.
  * Change spyderproject for spyproject in some missing places.
  * Add an error message when failing to serialize an object
  * Skip some tests to prevent recurrent failures and segfaults
  * Prevent a race condition with ZMQ during startup
  * Fix history browsing while debugging
  * Add handling for OSError's when changing directories.
  * Display all lists in the variable explorer
  * Add a safe getcwd function to handle errors when the current working was deleted
  * Show error when trying to sort dataframe with duplicate columns
  * Fix editing floats in array editor
  * Sync correctly the closing of files in multiple editorstacks.
  * Wait until console is ready before executing code for dedicated consoles
  * Fix some execution delays in the IPython console
  * A couple of fixes for Jedi 0.11
  * Enable sorting by values in Variable Explorer
  * Prevent unchecked paths in the pathmanager to be added to the IPython console sys.path
  * Fix recursion error in profiler
  * Prevent hard crash when inspecting certain structured arrays
  * Don't show errors when kernel_client is None
  * Fix some issues with the Editor Save dialog
  * Apply window style only if it's not None
  * Handle error when using deepcopy in the collections editor.
  * Editor historystack improvements
  * Fix calling pdb.pm() in a console
- Update to Version 3.2.3
  + New features
  * Add a button to the Variable Explorer to remove all variables at
    once.
  + Issues Closed
  * AttributeError when using outline and split code
  * 'Execute in external system terminal' unwantedly uses python2 on ubuntu16.04
  * AttributeError: 'super' object has no attribute '_handle_error' in IPython console
  * Renaming file containing folders yields IndexError.
  * pip created executable name changes between versions
  * KeyboardInterrupt error in waitingspinner
  * Debug: "Run Current Line" past the end of a script doesn't exit the debugger
  * "unblockcomment" incompatible with "automatically remove trailing spaces"
  * RuntimeError when using outline and split code editor
  * Variable Explorer: Add a button to remove all variables at once
  + Pull Requests Merged
  * Use get_python_executable to run in external terminals
  * Fix RuntimeError and AttributeError when using outline and split code editor
  * Stop creating universal wheels
  * Add handling for IndexError in the Editor when renaming folder containing file
  * Don't use super in _handle_error method of IPython console
  * Avoid KeyboardInterrupt to raise an error in waitingspinner
  * Exit the debugger if we are about to enter to sitecustomize.py
  * Fix unblock comments
  * Add a button in the Variable Explorer toolbar to reset namespace
- Update to Version 3.2.2
  + New features
  * Add a button to Find in Files to make searches case sensitive.
  * Extend Find in Files to select other search directories.
  * Add an option to set cursor blinking speed in miliseconds in
    `Preferences &gt; General &gt; Interface &gt; Cursor blinking`.
  * Add checkboxes to PYTHONPATH manager to enable/disable paths.
  * Show the number of matches in the Find/Replace widget.
  + Issues Closed
  * Unable to save file in Python
  * Editor - Cannot close a (vertical) split after open
  * Word operators do not have a color style in the IPython console
  * Increase the limit of DPI setting for IPython inline graphics
  * IPython consoles can't start if Spyder temp directory is missing
  * BUG: Error editing element of numpy array in variable explorer
  * Spyder Issue when using ctrl+P : goto line
  * Unable to start Array builder using keyboard shortcut
  * Console slow to close when debugging
  * Consistent layout in different panes
  * "Replace selection" adds "\." anytime the string to be added contains "."
  * IPython: Run Code at Startup - Magics
  * Force-stop does not work on hanged progress.
  * Run Configuration per file: Working Directory not remembered
  * Error when trying to load third-party plugins
  * Pressing Ctrl+Tab wanting to switch to another tab raises an IndexError
  * Make Spyder remember tab order
  * Kernels fail to start because they can't create stderr files in non-ascii accounts on Windows
  * SPYDER_DEBUG=3 is failing on Windows
  * Find in Files should have ignore case flag
  * Extend Find in Files to select other directories
  * Array editor: Change default float formatter from %.3f to %.6g
  * Debug: If a breakpoint is on the first line of a script the whole script runs
  * Exceptions swallow the prompt!
  * Add icon to mac dock when running with bootstrap
  * Editor autocompletion and help extraction not working in Spyder 3.1.4
  * Option to Disable Blinking Cursor
  * Spyder stops executing commands if Variable explorer shows complicated objects
  * Ctrl+F should show the number of appearances in the file as #current/#total
  * Spyder 3 opens a command prompt window when running certain commands
  * Add the possibility to disable entries in the PYTHONPATH manager
  + Pull Requests Merged
  * Skip package names that end in certain suffixes when loading third-party plugins
  * Correctly move to first breakpoint after entering debugging
  * Fix error when creating some error messagebox
  * Add handling for non existing indexes in IPython Console clients
  * Add more handling to actions with reference deleted
  * Deactivate editor actions when Tab Swither is shown
  * Skip some tests in our CIs
  * Don't run continue when starting debug if there is a breakpoint in the first line with code.
  * Create Spyder TEMPDIR if it does not exist when creating new consoles
  * Fix cwd issues in the "Run &gt; Configuration per file" dialog
  * Increase waiting time and repetitions for tests that enter debugging
  * Fix 1D Numpy arrays edition in the Variable Explorer
  * Make inactive paths to be ignored when Spyder's path list is synchronized with PYTHONPATH on Windows
  * Increase dpi limit of inline plots
  * Allow values with '%' in config system
  * Add a style for word operator tokens in the IPython pygments dictionary
  * Make value_to_display more robust
  * Increase tries for a couple of flaky tests
  * Add test with non-ascii directory for consoles stderr file
  * Fix setting SPYDER_DEBUG variable on Windows
  * Fix handling of line count in the fileswitcher
  * Prevent subprocess.Popen calls to create visible consoles on Windows.
  * Remove regex escape characters from replacement string on the Find/Replace widget
  * Fix shortcut to make array builders appear in the IPython Console
  * Minor fixes in Find in Files
  * Stop console before closing it
  * Send Spyder python path to introspection plugins
  * Reduce row height in shortcut dialog
  * Clean Spyder config before re-running our tests
  * Change format in array and dataframe editors
  * Unify layout for panes and widgets
  * Display prompt after errors
  * Preserve order when saving/loading files from a project.
  * Extend Find in Files to select other search directories
  * Add a button to Find in Files to make searches case sensitive
  * Add an option to set cursor blinking speed in miliseconds
  * Add checkboxes to PYTHONPATH manager to enable/disable paths
  * Add icon earlier when running application
  * Show the number of matches in the Find/Replace widget</changelog>
  <changelog author="sebix+novell.com@sebix.at" date="1528286400">- add missing requirement python3-cloudpickle, fixes boo#1095587</changelog>
</package>
<package pkgid="dbe1065b191331af2b637a661ce47253757d724185c155714d3c8a235f2600ac" name="sssd" arch="src">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="c309802d0c1772c9cbff742c7790a6ebcaeb422a59792e13bb45428738adb070" name="sssd" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="125e0ea4b595da382717b032bf5a60c369c64f8ef189c98b0fa7c49ae9303b23" name="sssd-32bit" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="0b3b046b7f76df5d68142b05685482a17481862663f4cc788d82ae637aa44aae" name="sssd-ad" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="20bbf0aee3f8e2a6706a96ccef3d6e0f97c996bad4072aa0110b3ca6b1eb39b7" name="sssd-dbus" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="2da5cd54a4c7cb0286127b821c58307e513cffef1cde0ebd447fc14b1b0dd0e6" name="sssd-ipa" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="cde03fcdce9a1a31ac64559d52a0d436a4f3157fcb3ca3fd0aa9c274ad7443fe" name="sssd-krb5" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="c3d95822795c27bb2baef7ae65e974c9b3d3255d050aeb4f0ab801763ae9ad3c" name="sssd-krb5-common" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="7476a4c3803fc6b58206ab7046de9bec669dd4894a79219b160ad9280b4dab87" name="sssd-ldap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="7c841a9fd10675e60b74cfd74e2ef0b749674f2dcd6b3c791df77c78e9dc5581" name="sssd-proxy" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="d57ae11a2ede89b30c05fd86bf2f9e5fcda0921b1180e0ace95fa7082cd5a8ec" name="sssd-tools" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="c938dc7db121a46d72b5504b6e2437c009e97fc933be935580e25e5a72299aa9" name="sssd-wbclient" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="74abbcbc8b216207580d0bbefb910aae0f5d6f7288d2a83932ad86333b2620cf" name="sssd-wbclient-devel" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="78f9d840ab438709674f16f39331f41b5a4efc72de89dd024c1148f0c632e05a" name="sssd-winbind-idmap" arch="x86_64">
  <version epoch="0" ver="1.16.1" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1467979200">- Update to new upstream release 1.14.0
  * The AD provider is now able to look up users from Active
  Directory domains by certificate. This change enables logins for
  Active Directory users with the help of a smart card.
  * The sss_override tool is now able to add certificates as local
  overrides in the SSSD cache. Please note that the certificate
  overrides are stored in the local cache, so removing the cache
  also removes all the certificates!
  * Invalid certificates are skipped instead of aborting the whole
  operation when logging in with a smart card using SSH.
  * This version allows several OCSP-related options such as the OCSP
  responder to be configured during smart card authentication.
  * SSSD is now able to determine the name of the user who logs in
  from the inserted smart card without having to type in the
  username. Note that this functionality must be enabled with the
  allow_missing_name pam_sss option.
  * The sss_cache command line tool is now able to invalidate SUDO
  rules with its new -r/-R switches. Note that the sudo rules ar
  not refreshed with the sss_cache tool immediately.
  * A new command line tool called sssctl was added. This tool
  allows to observe the status of SSSD.
  * A new option local_negative_timeout was added. This option
  allows the admin to specify the time during which lookups for
  users that are not handled by SSSD but are present on the
  system (typically in /etc/passwd and /etc/group) and prevents
  repeated lookups of local users on the remote server during
  initgroups operation.
  * An ID-mapping plugin for the winbind deamon was added. With
  this plugin, it's possible for winbind to use the same
  ID-mapping scheme as SSSD uses, producing consistent ID values.
- Remove 0001-build-detect-endianness-at-configure-time.patch
  (included upstream)</changelog>
  <changelog author="michael@stroeder.com" date="1471608000">- Update to new upstream release 1.14.1
  * The IPA provider now supports logins with enterprise principals (also
  known as additional UPN suffixes). This functionality also enabled Active
  Directory users from trusted AD domains who use an additional UPN suffix
  to log in. Please note that this feature requires a recent IPA server.
  * When a user name is overriden in an IPA domain, resolving a group these
  users are a member of now returns the overriden user names
  * Users can be looked up by and log in with their e-mail address as an
  identifier. In order to do so, an attribute that represents the user's
  e-mail address is fetched by default. This attribute can by customized
  by setting the ldap_user_email configuration option.
  * A new ad_enabled_domains option was added. This option lets the
  administrator select domains that SSSD should attempt to reach in the
  AD forest SSSD is joined to. This option is useful for deployments where
  not all domains are reachable on the network level, yet the administrator
  needs to access some trusted domains and therefore disabling the subdomains
  provider completely is not desirable.
  * The sssctl tool has two new commands active-server and servers that
  allow the administrator to observe the server that SSSD is bound to and
  the servers that SSSD autodiscovered
  * SSSD used to fail to start when an attribute name is present in both
  the default SSSD attribute map and the custom ldap_user_extra_attrs map
  * GPO policy procesing no longer fails if the gPCMachineExtensionNames
  attribute only contains whitespaces
  * Several commits fix regressions related to switching all user and group
  names to fully qualified format, such as running initgroups for a user
  who is only a member of a primary group
  * Several patches fix regressions caused by splitting the database into
  two ldb files, such as when user attributes change without increasing
  the modifyTimestamp attribute value
  * systemd unit files are now shipped for the sssd-secrets responder,
  allowing the responder to be socket-activated. To do so, administrators
  should enable the sssd-secrets.socket and sssd-secrets.service systemd
  units.
  * The sssd binary has a new switch --disable-netlink that lets sssd skip
  messages from the kernel's netlink interface.
  * A crash when entries with special characters such as '(' were requested
  was fixed
  * The ldap_rfc_2307_fallback_to_local_users option was broken in the
  previous version. This release fixes the functionality.</changelog>
  <changelog author="michael@stroeder.com" date="1476878400">- Update to new upstream release 1.14.2
  * Several more regressions caused by cache refactoring to use qualified
    names internally were fixed, including a regression that prevented the
    krb5_map_user option from working correctly.
  * A regression when logging in with a smart card using the GDM login manager
    was fixed
  * SSSD now removes the internal timestamp on startup cache when the
    persistent cache is removed. This enables admins to follow their existing
    workflow of just removing the persistent cache and start from a fresh slate
  * Several fixes to the sssd-secrets responder are present in this release
  * A bug in the autofs responder that prevented automounter maps from being
    returned when sssd_be was offline was fixed
  * A similar bug in the NSS responder that prevented netgroups from being
    returned when sssd_be was offline was fixed
  * Disabling the netlink integration can now be done with a new option
    disable_netlink. Previously, the netlink integration could be disabled with
    a sssd command line switch, which is being deprecated in this release.
  * The internal watchdog no longer kills sssd processes in case time shifts
    during sssd runtime
  * The fail over code is able to cope with concurrent SRV resolution
    requests better in this release
  * The proxy provider gained a new option proxy_max_children that allows the
    administrator to control the maximum number of child helper processes that
    authenticate users with auth_provider=proxy
  * The InfoPipe D-Bus responder exports the UUIDs of user and group objects
    through a uniqueID property</changelog>
  <changelog author="jengelh@inai.de" date="1481112000">- Add 0001-krb5-1.15-build-fix.patch to unlock building
  against future KRB versions.</changelog>
  <changelog author="dimstar@opensuse.org" date="1481544000">- BuildRequire pkgconfig(libsystemd) instead of
  pkgconfig(libsystemd-login): the latter has been deprecated since
  systemd 209 and finally removed with systemd 230.</changelog>
  <changelog author="michael@stroeder.com" date="1485345600">- Removed 0001-krb5-1.15-build-fix.patch obsoleted by upstream update
- Update to new upstream release 1.15.0
  * SSSD now allows the responders to be activated by the systemd service
    manager and exit when idle. This means the services line in sssd.conf is
    optional and the responders can be started on-demand, simplifying the sssd
    configuration. Please note that this change is backwards-compatible and
    the responders listed explicitly in sssd.conf's services line are managed
    by sssd in the same manner as in previous releases. Please refer to man
    sssd.conf(5) for more information
  * The sudo provider is no longer disabled for configurations that do not
    explicitly include the sudo responder in the services list. In order to
    disable the sudo-related back end code that executes the periodic LDAP
    queries, set the sudo_provider to none explicitly
  * The watchdog signal handler no longer uses signal-unsafe functions. This
    bug was causing a deadlock in case the watchdog was about to kill a
    stuck process
  * A bug that prevented TLS to be set up correctly on systems where libldap
    links with GnuTLS was fixed
  * The functionality to alter SSSD configuration through the D-Bus interface
    provided by the IFP responder was removed. This functionality was not used to
    the best of our knowledge, had no tests and prevented the InfoPipe responder
    from running as a non-privileged user.
  * A bug that prevented statically-linked applications from using libnss_sss
    was fixed by removing dependency on -lpthreads from the libnss_sss library
    (please see https://sourceware.org/bugzilla/show_bug.cgi?id=20500 for
    an example on why linking with -lpthread from an NSS modules is problematic)
  * Previously, SSSD did not ignore GPOs that were missing the
    gPCFunctionalityVersion attribute and failed the whole GPO
    processing. Starting with this version, the GPOs without the
    gPCFunctionalityVersion are skipped.</changelog>
  <changelog author="luizluca@gmail.com" date="1486555200">- Added /etc/sssd/conf.d/ for configuration snippets</changelog>
  <changelog author="kukuk@suse.de" date="1487419200">- Remove obsolete insserv call</changelog>
  <changelog author="michael@stroeder.com" date="1488628800">- Updated project URL
- Update to new upstream release 1.15.1
  * Several issues related to starting the SSSD services on-demand via
    socket activation were fixed. In particular, it is no longer possible
    to have a service started both by sssd and socket-activated. Another
    bug which might have caused the responder to start before SSSD started
    and cause issues especially on system startup was fixed.
  * A new 'files' provider was added. This provider mirrors the contents
    of '/etc/passwd' and '/etc/shadow' into the SSSD database. The purpose
    of this new provider is to make it possible to use SSSD's interfaces,
    such as the D-Bus interface for local users and enable leveraging the
    in-memory fast cache for local users as well, as a replacement for `nscd`.
    In future, we intend to extend the D-Bus interface to also provide setting
    and retrieving additional custom attributes for the files users.
  * SSSD now autogenerates a fallback configuration that enables the
    files domain if no SSSD configuration exists. This allows distributions
    to enable the 'sssd' service when the SSSD package is installed. Please
    note that SSSD must be build with the configuration option
    '--enable-files-domain' for this functionality to be enabled.
  * Support for public-key authentication with Kerberos (PKINIT) was
    added. This support will enable users who authenticate with a Smart Card
    to obtain a Kerberos ticket during authentication.</changelog>
  <changelog author="jengelh@inai.de" date="1489233600">- Switch *all* URLs after fedorahosted.org retirement</changelog>
  <changelog author="michael@stroeder.com" date="1489579200">- Update to new upstream release 1.15.2
  * It is now possible to configure certain parameters of a
    trusted domain in a configuration file sub-section.
  * Several issues related to socket-activating the NSS service,
    especially if SSSD was configured to use a non-privileged
    userm were fixed. The NSS service now does not change the
    ownership of its log files to avoid triggering a name-service
    lookup while the NSS service is not running yet.
    Additionally, the NSS service is started before any other
    service to make sure username resolution works and the other
    service can resolve the SSSD user correctly.
  * A new option "cache_first" allows the administrator to change
    the way multiple domains are searched. When this option is
    enabled, SSSD will first try to "pin" the requested name or
    ID to a domain by searching the entries that are already
    cached and contact the domain that contains the cached entry
    first. Previously, SSSD would check the cache and the remote
    server for each domain. This option brings performance
    benefit for setups that use multiple domains (even
    auto-discovered trusted domains), especially for ID lookups
    that would previously iterate over all domains. Please note
    that this option must be enabled with care as the
    administrator must ensure that the ID space of domains does
    not overlap.
  * The SSSD D-Bus interface gained two new methods:
    "FindByNameAndCertificate" and "ListByCertificate". These
    methods will be used primarily by IPA and
    `mod_lookup_identity
    &lt;https://github.com/adelton/mod_lookup_identity/&gt; to
    correctly match multple users who use the same certificate
    for Smart Card login.
  * A bug where SSSD did not properly sanitize a username with a
    newline character in it was fixed.</changelog>
  <changelog author="hguo@suse.com" date="1489665600">- Introduce mandatory runtime requirement "cyrus-sasl-gssapi" to
  krb5-common sub-package. Address bsc#1024836.</changelog>
  <changelog author="michael@stroeder.com" date="1500984000">- Update to new upstream release 1.15.3 (KCM disabled)
  New Features
  * In a setup where an IPA domain trusts an Active Directory domain,
    it is now possible to define the domain resolution order
    (see http://www.freeipa.org/page/Releases/4.5.0#AD_User_Short_Names).
  * Design page - Shortnames in trusted domains &lt;https://docs.pagure.org/SSSD.sssd/design_pages/shortnames.html&gt;
  * SSSD ships with a new service called KCM. This service acts as a
    storage for Kerberos tickets when "libkrb5" is configured to use
    "KCM:" in "krb5.conf".
  * Design page - KCM server for SSSD &lt;https://docs.pagure.org/SSSD.sssd/design_pages/kcm.html&gt;
  * NOTE: There are several known issues in the "KCM" responder that
    will be handled in the next release.
  * Support for user and group resolution through the D-Bus interface and
    authentication and/or authorization through the PAM interface even
    for setups without UIDs or Windows SIDs present on the LDAP directory
    side. This enhancement allows SSSD to be used together with apache
    modules &lt;https://github.com/adelton/mod_lookup_identity&gt; to provide
    identities for applications
  * Design page - Support for non-POSIX users and groups &lt;https://docs.pagure.org/SSSD.sssd/design_pages/non_posix_support.html&gt;
  * SSSD ships a new public library called "libsss_certmap" that allows
    a flexible and configurable way of mapping a certificate to a user
    identity.
  * Design page - Matching and Mapping Certificates &lt;https://docs.pagure.org/SSSD.sssd/design_pages/matching_and_mapping_certificates.html&gt;
  * The Kerberos locator plugin can be disabled using an environment variable
    "SSSD_KRB5_LOCATOR_DISABLE". Please refer to the
    "sssd_krb5_locator_plugin" manual page for mode details.
  * The "sssctl" command line tool supports a new command "user-checks"
    that enables the administrator to check whether a certain user should be
    allowed or denied access to a certain PAM service.
  * The "secrets" responder now forwards requests to a proxy Custodia
    back end over a secure channel.</changelog>
  <changelog author="michael@stroeder.com" date="1508760000">- Update to new upstream release 1.16.0
  Security fixes
  * This release fixes CVE-2017-12173: Unsanitized input when searching in
  local cache database. SSSD stores its cached data in an LDAP like local
  database file using libldb. To lookup cached data LDAP search filters
  like (objectClass=user)(name=user_name) are used. However, in
  sysdb_search_user_by_upn_res(), the input was not sanitized and
  allowed to manipulate the search filter for cache lookups. This would
  allow a logged in user to discover the password hash of a different user.
  New Features
  * SSSD now supports session recording configuration through tlog. This
  feature enables recording of everything specific users see or type
  during their sessions on a text terminal. For more information, see
  the sssd-session-recording(5) manual page.
  * SSSD can act as a client agent to deliver
  Fleet Commander &lt;https://wiki.gnome.org/Projects/FleetCommander&gt;
  policies defined on an IPA server. Fleet Commander provides a
  configuration management interface that is controlled centrally and
  that covers desktop, applications and network configuration.
  * Several new systemtap &lt;https://sourceware.org/systemtap/&gt; probes
  were added into various locations in SSSD code to assist in
  troubleshooting and analyzing performance related issues. Please see the
  sssd-systemtap(5) manual page for more information.
  * A new LDAP provide access control mechanism that allows to restrict
  access based on PAM's rhost data field was added. For more details,
  please consult the sssd-ldap(5) manual page, in particular the
  options ldap_user_authorized_rhost and the rhost value of
  ldap_access_filter.</changelog>
  <changelog author="hguo@suse.com" date="1512129600">- In an ongoing effort to reduce dependency on python version 2,
  the following python libraries are no longer built. Nevertheless
  their python3 counterparts remain in place:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config</changelog>
  <changelog author="hguo@suse.com" date="1512388800">- Correct dependency of sss_obfuscate command line program.</changelog>
  <changelog author="hguo@suse.com" date="1519732800">- Remove package descriptions for the python 2 packages that are
  no longer distributed:
  * python-ipa_hbac
  * python-sss-murmur
  * python-sss_nss_idmap
  * python-sssd-config
- Correct python version dependency of tools package. (bsc#1082108)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524571200">- Updated sssd.spec:
  The IPA provider depends on AD provider's PAC executable, hence
  introducing the package dependency. (bsc#1021441, bsc#1062124)</changelog>
  <changelog author="ckowalczyk@suse.com" date="1524830400">- Update to new minor upstream release 1.16.1 (fate#323340):
  New Features:
  * A new option auto_private_groups was added. If this option is
  enabled, SSSD will automatically create user private groups based
  on user?s UID number. The GID number is ignored in this case.
  * The SSSD smart card integration now supports a special type of PAM
  conversation implemented by GDM which allows the user to select
  the appropriate smrt card certificate in GDM.
  * A new API for accessing user and group information was added.
  This API is similar to the tradiional Name Service Switch API, but
  allows the consumer to talk to SSSD directly as well as to
  fine-tune the query with e.g. how cache should be evaluated.
  * The sssctl command line tool gained a new command access-report,
  which can generate who can access the client machine. Currently
  only generating the report on an IPA client based on HBAC rules
  is supported.
  * The hostid provider was moved from the IPA specific code to
  the generic LDAP code. This allows SSH host keys to be access by
  the generic LDAP provider as well. See the ldap_host_* options in
  the sssd-ldap manual page for more details.
  * Setting the memcache_timeout option to 0 disabled creating
  the memory cache files altogether. This can be useful in cases
  there is a bug in the memory cache that needs working around.</changelog>
  <changelog author="ckowalczyk@suse.com" date="1529496000">- Introduce patches:
  * Create sockets with right permissions:
    0001-SUDO-Create-the-socket-with-stricter-permissions.patch
    (bsc#1098377, CVE-2018-10852)
  * Fix for sssd upstream integration tests
    0002-intg-Do-not-hardcode-nsslibdir.patch
    (bsc#1098163)</changelog>
</package>
<package pkgid="53293fc2230e24279d86062582efb632122da08e6af1aaf043ba5cdf44004ac5" name="susefirewall2-to-firewalld" arch="noarch">
  <version epoch="0" ver="0.0.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1459252800">- Initial commit for susefirewall2-to-firewalld-0.0.1</changelog>
  <changelog author="mchandras@suse.de" date="1459771200">- Fix Source URL</changelog>
  <changelog author="mchandras@suse.de" date="1521460800">- Version bump to 0.0.2
  * Handle migration when SF2 is absent (bsc#1084177)
  * Ensure that firewalld is enabled after migration
  * Print firewalld commands in debug mode</changelog>
  <changelog author="mchandras@suse.de" date="1527681600">- Version bump to 0.0.3
  * Do not try to handle unknown iptables chains
  * Handle source whitelisting (gh#openSUSE/susefirewall2-to-firewalld#2, bsc#1105157)</changelog>
</package>
<package pkgid="a556ba8cd48257b80c5b272aa9976149e9834e334fc61d24d70e52abbbe3fb83" name="susefirewall2-to-firewalld" arch="src">
  <version epoch="0" ver="0.0.3" rel="lp150.2.3.1"/>
  <changelog author="mchandras@suse.de" date="1459252800">- Initial commit for susefirewall2-to-firewalld-0.0.1</changelog>
  <changelog author="mchandras@suse.de" date="1459771200">- Fix Source URL</changelog>
  <changelog author="mchandras@suse.de" date="1521460800">- Version bump to 0.0.2
  * Handle migration when SF2 is absent (bsc#1084177)
  * Ensure that firewalld is enabled after migration
  * Print firewalld commands in debug mode</changelog>
  <changelog author="mchandras@suse.de" date="1527681600">- Version bump to 0.0.3
  * Do not try to handle unknown iptables chains
  * Handle source whitelisting (gh#openSUSE/susefirewall2-to-firewalld#2, bsc#1105157)</changelog>
</package>
<package pkgid="a6768d214fb3b91dc62c388311c8450622e07ffa98295fef7249fcce9aab0f45" name="switcheroo-control" arch="src">
  <version epoch="0" ver="1.2" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1492257600">- Initial package.
- Add %{name}-rpmlintrc file to filter out warning about missing
  man file for binary (upstream does not provide it) and set
  badness for 'suse-dbus-unauthorized-service' to zero until
  security review approves the dbus service (see boo#1034309).</changelog>
  <changelog author="badshah400@gmail.com" date="1498392000">- DBus service has been reviewed and approved (boo#1034309),
  remove corresponding entry from rpmlintrc.</changelog>
  <changelog author="badshah400@gmail.com" date="1503489600">- Change License tag to GPL-3.0 instead of GPL-3.0+ (see legal
  review for https://build.opensuse.org/request/show/507370).</changelog>
  <changelog author="badshah400@gmail.com" date="1506081600">- Update to version 1.2:
  + Fix API documentation not being part of the tarball.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519128000">- Add systemd-rpm-macros BuildRequires and service_add_*
  pre/post/preun/postun scriptlets for switcheroo-control.service
  to comply with openSUSE's Guidelines (boo#1096823).
- Pass --with-systemdsystemunitdir=%{_unitdir} parameter to
  configure to correct the systemd unit file's location.
- Adopt the use of %make_install macro rather than raw make
  command, following the best practices.</changelog>
</package>
<package pkgid="c7dc9db2795b8c02340851f1aa3f28239dba5d4a31131aec5252e23566f40a0d" name="switcheroo-control" arch="x86_64">
  <version epoch="0" ver="1.2" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1492257600">- Initial package.
- Add %{name}-rpmlintrc file to filter out warning about missing
  man file for binary (upstream does not provide it) and set
  badness for 'suse-dbus-unauthorized-service' to zero until
  security review approves the dbus service (see boo#1034309).</changelog>
  <changelog author="badshah400@gmail.com" date="1498392000">- DBus service has been reviewed and approved (boo#1034309),
  remove corresponding entry from rpmlintrc.</changelog>
  <changelog author="badshah400@gmail.com" date="1503489600">- Change License tag to GPL-3.0 instead of GPL-3.0+ (see legal
  review for https://build.opensuse.org/request/show/507370).</changelog>
  <changelog author="badshah400@gmail.com" date="1506081600">- Update to version 1.2:
  + Fix API documentation not being part of the tarball.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519128000">- Add systemd-rpm-macros BuildRequires and service_add_*
  pre/post/preun/postun scriptlets for switcheroo-control.service
  to comply with openSUSE's Guidelines (boo#1096823).
- Pass --with-systemdsystemunitdir=%{_unitdir} parameter to
  configure to correct the systemd unit file's location.
- Adopt the use of %make_install macro rather than raw make
  command, following the best practices.</changelog>
</package>
<package pkgid="d745f6ab522263414deb8a28d59a6fa4ff9a9fa72b4c58c9295e1941f25b3f21" name="switcheroo-control-doc" arch="noarch">
  <version epoch="0" ver="1.2" rel="lp150.2.3.1"/>
  <changelog author="badshah400@gmail.com" date="1492257600">- Initial package.
- Add %{name}-rpmlintrc file to filter out warning about missing
  man file for binary (upstream does not provide it) and set
  badness for 'suse-dbus-unauthorized-service' to zero until
  security review approves the dbus service (see boo#1034309).</changelog>
  <changelog author="badshah400@gmail.com" date="1498392000">- DBus service has been reviewed and approved (boo#1034309),
  remove corresponding entry from rpmlintrc.</changelog>
  <changelog author="badshah400@gmail.com" date="1503489600">- Change License tag to GPL-3.0 instead of GPL-3.0+ (see legal
  review for https://build.opensuse.org/request/show/507370).</changelog>
  <changelog author="badshah400@gmail.com" date="1506081600">- Update to version 1.2:
  + Fix API documentation not being part of the tarball.</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519128000">- Add systemd-rpm-macros BuildRequires and service_add_*
  pre/post/preun/postun scriptlets for switcheroo-control.service
  to comply with openSUSE's Guidelines (boo#1096823).
- Pass --with-systemdsystemunitdir=%{_unitdir} parameter to
  configure to correct the systemd unit file's location.
- Adopt the use of %make_install macro rather than raw make
  command, following the best practices.</changelog>
</package>
<package pkgid="18a22a0aed97a01cb9ffc7fddcf19daca56ed6462ba66e83e6659b7fba36059a" name="syncthing" arch="src">
  <version epoch="0" ver="0.14.46" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1491825600">- Update to version 0.14.26:
  * Discovery errors are more clearly displayed in the GUI
    (gh#syncthing/syncthing#2344).
  * The language dropdown menu in the GUI is now correctly sorted
    (gh#syncthing/syncthing#3913).
  * When there are items that could not be synced, their full path
    is displayed in the GUI.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493208000">- Update to version 0.14.27:
  * Devices can now have a list of allowed subnets (advanced
    config) (gh#syncthing/syncthing#219).
  * The transfer rate units can now be changed by clicking on the
    value (gh#syncthing/syncthing#234).
  * UI text explaining "Introducer" is improved
    (gh#syncthing/syncthing#1819).
  * Advanced config editor can now edit lists of things
    (gh#syncthing/syncthing#2267).
  * Directories created for new directories now obey the user umask
    setting (gh#syncthing/syncthing#2519).
  * Incoming index updates are consistency checked better
    (gh#syncthing/syncthing#4053).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 0.14.28:
  * It is now possible to create custom event subscriptions via the
    REST API (gh#syncthing/syncthing#1879).
  * Removing large directories now uses less memory
    (gh#syncthing/syncthing#2250).
  * The minimum disc space (per directory and for the home drive)
    can now be set to an absolute value
    (gh#syncthing/syncthing#3307).
  * Pausing or reconfiguring a directory will no longer start extra
    scans. Pausing a directory stops scanning
    (gh#syncthing/syncthing#3965).
  * Ignore patterns can now be set at directory creation time, and
    for paused directories (gh#syncthing/syncthing#3996).
  * It is no longer possible to configure the GUI/API to listen on
    a privileged port using the standard settings dialogue
    (gh#syncthing/syncthing#4020).
  * The device allowed subnet list can now include negative ("!")
    entries to disallow subnets (gh#syncthing/syncthing#4096).
  * Doing "Override changes" now uses less memory
    (gh#syncthing/syncthing#4112).
- Require golang.org/x/net/context on openSUSE older than
  openSUSE Leap 15.x.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496836800">- Update to version 0.14.29:
  * The layout of the global changes dialogue is improved
    (gh#syncthing/syncthing#3895).
  * Running as root or SYSTEM now triggers a warning recommending
    against it (gh#syncthing/syncthing#4123).
  * Changing the theme no longer causes an HTTP error
    (gh#syncthing/syncthing#4127).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 0.14.31 (changes since 0.14.29):
  * Correctly clear warning "path is a subdirectory of other
    folder" in directory dialogue (gh#syncthing/syncthing#3433).
  * Conflict copies filename now includes the ID of the last device
    to change the file (gh#syncthing/syncthing#3524).
  * Directories offered by other devices can now be ignored
    (gh#syncthing/syncthing#3993).
  * Changed device name takes effect with restart; device name is
    not sent to unknown devices (gh#syncthing/syncthing#4164).
  * Correctly show CPU usage when started with -no-restart option
    (gh#syncthing/syncthing#4183).
  * Icons and directory information in local device summary is
    consistent with that in directories
    (gh#syncthing/syncthing#4100).
  * Fix a data race in KCP &amp; STUN (gh#syncthing/syncthing#4177).
  * Ignore patterns on newly accepted directories are no longer
    erroneously inherited from an earlier added directory
    (gh#syncthing/syncthing#4203).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Update to version 0.14.32:
  * "Nearby devices" are now shown in the add device dialogue,
    avoiding the need to type their device ID
    (gh#syncthing/syncthing#4157).
  * Directories that were once ignored in a sharing request now
    actually work properly when later added manually
    (gh#syncthing/syncthing#4219).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505390400">- Update to version 0.14.37 (changes since 0.14.32):
  * Relative version paths are now correctly relative to the
    directory path (gh#syncthing/syncthing#4188).
  * Remote devices now show bytes remaining to synchronise
    (gh#syncthing/syncthing#4227).
  * Editing ignore patterns no longer incorrectly shows included
    patterns (gh#syncthing/syncthing#4249).
  * The new directory dialogue now suggests a default path.
    Adjustable via advanced config defaultFolderPath
    (gh#syncthing/syncthing#2157).
  * The build script no longer sets -installsuffix by default
    (gh#syncthing/syncthing#4272).
  * Prevent a vulnerability that allows file overwrite via
    versioned symlinks (boo#1074428, gh#syncthing/syncthing#4286).
  * Symlinks are deleted from versioned directories on startup
    (gh#syncthing/syncthing#4288).
  * Directory paths are no longer reset when editing a directory
    without a label (gh#syncthing/syncthing#4297).
  * Better detect synchronisation conflicts that happen while
    synchronising (gh#syncthing/syncthing#3742,
    gh#syncthing/syncthing#4305).
  * Fix a crash related to a nil reference in ignore handling
    (gh#syncthing/syncthing#4300).
- Stop requiring golang.org/x/net/context.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505908800">- Update to version 0.14.38:
  * KCP connections are now more stable
    (gh#syncthing/syncthing#4063, gh#syncthing/syncthing#4343)
  * Hashing benchmarks are skipped if a manual selection has
    been forced (gh#syncthing/syncthing#4348).
  * Relay server RAM usage has been reduced
    (gh#syncthing/syncthing#4245).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1508500800">- Update to version 0.14.39:
  * Removing paused directories no longer triggers a crash
    (gh#syncthing/syncthing#4357).
  * Add further security related HTTP headers
    (gh#syncthing/syncthing#4360).
  * Improve info level logging in some cases
    (gh#syncthing/syncthing#4375).
  * Improve GUI tooltips in chromium based browsers
    (gh#syncthing/syncthing#4377).
  * Add -device-id command line switch
    (gh#syncthing/syncthing#4387).
  * Failure to upgrade directory markers from file to directory
    type is no longer fatal.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510315200">- Update to version 0.14.40:
  - Report more data part of the anonymous usage report
    (gh#syncthing/syncthing#3628)
  - Better report synchronisation errors
    (gh#syncthing/syncthing#4392).
  - Removing paused directories no longer causes a panic
    (gh#syncthing/syncthing#4405).
  - Make local IPv4 discovery more resilient against write failures
    (gh#syncthing/syncthing#4414).
  - Clearer logging around config failures at startup
    (gh#syncthing/syncthing#4431).
  - Do not complain about inability to fsync files
    (gh#syncthing/syncthing#4432).
  - Improve KCP connections (gh#syncthing/syncthing#4446).
  - Improve directory health checking
    (gh#syncthing/syncthing#4451).
  - Include built-in support for file system notifications,
    although it is disabled by default.
  - Enable by default the UDP based "KCP" protocol.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1512475200">- Update to version 0.14.41:
  * Devices with ignored files stay "synchronising" forever
    (gh#syncthing/syncthing#623).
  * No Global Discovery without Synch Protocol Listen Address
    (gh#syncthing/syncthing#4418).
  * Local network classification doesn't always work
    (gh#syncthing/syncthing#4421).
  * Hashed GUI password should not be rehashed
    (gh#syncthing/syncthing#4458).
  * Pulls not triggered correctly on reconnection
    (gh#syncthing/syncthing#4504).
  * A symlink/file replacement doesn't work properly
    (gh#syncthing/syncthing#4505).
  * File/directory replacement doesn't work properly
    (gh#syncthing/syncthing#4506).
  * Logging at info level and above should always include context
    (gh#syncthing/syncthing#4510).
  * Panic in "pfilter" package on 32 bit architectures
    (gh#syncthing/syncthing#4537).
  * Allow synchronising read-only directories as
    "Master Directories" (gh#syncthing/syncthing#1126).
  * "Global Changes" button is confusing, retitle to
    "Recent Changes" (gh#syncthing/syncthing#4326).
  * Dial device addresses in parallel
    (gh#syncthing/syncthing#4456).
  * Avoid lots and lots of announced addresses in the presence of
    symmetric NAT (gh#syncthing/syncthing#4519).
  * Split transport usage reporting per stack
    (gh#syncthing/syncthing#4463).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514980800">- Update to version 0.14.42:
  * Discovering new files in a deleted directory does not resurrect
    the directory (gh#syncthing/syncthing#4475).
  * "Panic: interface conversion: *errors.errorString is not
    net.Error" after restart (gh#syncthing/syncthing#4561).
  * Auto-accept shared directories from trusted devices
    (gh#syncthing/syncthing#2299).
  * Empty directories in .stversions should be removed
    (gh#syncthing/syncthing#4406).
  * Human readable errors on attempted deletion of a non-empty
    directory (gh#syncthing/syncthing#4476).
  * Add confirmation on the Remove Folder / Device button
    (gh#syncthing/syncthing#4543).</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to version 0.14.43:
  * Path completion in the new directory dialogue does not work
    anymore (gh#syncthing/syncthing#4475).
  * Fd leak when temp file cannot be truncated
    (gh#syncthing/syncthing#4593).
  * Panic: runtime error related to KCP
    (gh#syncthing/syncthing#4605).
  * UI for debug levels and log access
    (gh#syncthing/syncthing#2644).
  * GUI should indicate which files are out of synchronisation on
    remote devices (gh#syncthing/syncthing#4369).
  * Keep enough counters and state in the database to avoid initial
    database traversal (gh#syncthing/syncthing#4400).
  * Should understand ?socks? in addition to ?socks5? in proxy URLs
    (gh#syncthing/syncthing#4515).
  * Contribute kcp-go changes/features and/or fix tests
    (gh#syncthing/syncthing#4407).
  * Update vendored github.com/minio/sha256-simd for AVX512 support
    (gh#syncthing/syncthing#4585).
  * Update vendored x/sys/unix for dragonfly
    (gh#syncthing/syncthing#4615).</changelog>
  <changelog author="jengelh@inai.de" date="1515672001">- Replace marketing blurb with a software description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1517486400">- Override BUILD_HOST to make build reproducible</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1519387200">- Update to version 0.14.44:
  * Panic when connecting to device with auto accept and paused
    directories (gh#syncthing/syncthing#4634).
  * List of files needed on remote were not wrapped at word
    boundaries (gh#syncthing/syncthing#4636).
  * It was impossible to run non-release builds without deadlock
    detectors (gh#syncthing/syncthing#4644).
  * Fix UTF-8 normalisation not working correctly on ZFS
    (gh#syncthing/syncthing#4649).
  * Fix upgrade system showing an error on RCs in some cases
    (gh#syncthing/syncthing#4654).
  * Fix sparse files with zero blocks not closing when pulling
    (gh#syncthing/syncthing#4657).
  * Fix remote device out of synch items showing "0 items, ~0 B"
    (gh#syncthing/syncthing#4668).
  * GUI for .stversion restoration (gh#syncthing/syncthing#2599).
  * Log entries showing IP addresses now show the connection type
    (gh#syncthing/syncthing#4499).
  * Set background priority / niceness
    (gh#syncthing/syncthing#4628).
  * Fix arguments to fs.CreateSymlink being mixed up
    (gh#syncthing/syncthing#4567).
  * More scalable global discovery (gh#syncthing/syncthing#4618).
  * lib/model test failed with "ThreadSanitizer failed to allocate
    0x200000 (2097152) bytes" with Go 1.9.2
    (gh#syncthing/syncthing#4653).
  * Fix spurious "é" in GUI (gh#syncthing/syncthing#4663).
  * Should clean out generated testdata in lib/model/testdata
    (gh#syncthing/syncthing#4706).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 0.14.45:
  * panic: bug: removed more than added
    (gh#syncthing/syncthing#4659).
  * Ignore pattern beginning with "#" does not match subpaths
    (gh#syncthing/syncthing#4680).
  * Ignore patterns in web UI aren't reloaded if only comments
    change (gh#syncthing/syncthing#4689).
  * Global is different from local state when ignoring files
    (gh#syncthing/syncthing#4701).
  * Fix basicfs_watch_tests being flaky
    (gh#syncthing/syncthing#4687).
  * Remove KCP (gh#syncthing/syncthing#4737).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1523966400">- Update to version 0.14.46:
  * Replacing a directory with a symlink or vice versa is buggy
    (gh#syncthing/syncthing#2571).
  * Inaccessible files during scan are marked as deleted
    (gh#syncthing/syncthing#4573).
  * Send only directories out of synch due to ignored items
    (gh#syncthing/syncthing#4616).
  * A file deleted from all nodes may exist in the "out of synch"
    list (gh#syncthing/syncthing#4627).
  * Relay server doesn?t make outgoing HTTPS requests from its bind
    address (gh#syncthing/syncthing#4745).
  * The list of out of synch items from remote device is not
    displayed (gh#syncthing/syncthing#4759).
  * Env var for db metadata in help text differs from code
    (gh#syncthing/syncthing#4764).
  * Doesn't connect when multiple remote devices are using the
    same relay (gh#syncthing/syncthing#4778).
  * Scan on absolute path creates incorrect absolute duplicate file
    infos (gh#syncthing/syncthing#4799).
  * Panic in FS watcher in FreeBSD 8.3
    (gh#syncthing/syncthing#4806).</changelog>
  <changelog author="jengelh@inai.de" date="1523966401">- Drop redundant wording from descriptions.</changelog>
  <changelog author="marius.kittler@suse.com" date="1527681600">- Fix build command / prevent Syncthing to update itself
  Arguments go before commands so both -version and -no-upgrade
  were previously ignored resulting in Syncthing trying to update
  itself without permissions (boo#1095169).</changelog>
</package>
<package pkgid="fd158a04f01d122143e6924da61f839d36a12231f7db1ffdef9d26d20c93e4b3" name="syncthing" arch="x86_64">
  <version epoch="0" ver="0.14.46" rel="lp150.3.3.1"/>
  <changelog author="sor.alexei@meowr.ru" date="1491825600">- Update to version 0.14.26:
  * Discovery errors are more clearly displayed in the GUI
    (gh#syncthing/syncthing#2344).
  * The language dropdown menu in the GUI is now correctly sorted
    (gh#syncthing/syncthing#3913).
  * When there are items that could not be synced, their full path
    is displayed in the GUI.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1493208000">- Update to version 0.14.27:
  * Devices can now have a list of allowed subnets (advanced
    config) (gh#syncthing/syncthing#219).
  * The transfer rate units can now be changed by clicking on the
    value (gh#syncthing/syncthing#234).
  * UI text explaining "Introducer" is improved
    (gh#syncthing/syncthing#1819).
  * Advanced config editor can now edit lists of things
    (gh#syncthing/syncthing#2267).
  * Directories created for new directories now obey the user umask
    setting (gh#syncthing/syncthing#2519).
  * Incoming index updates are consistency checked better
    (gh#syncthing/syncthing#4053).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1495627200">- Update to version 0.14.28:
  * It is now possible to create custom event subscriptions via the
    REST API (gh#syncthing/syncthing#1879).
  * Removing large directories now uses less memory
    (gh#syncthing/syncthing#2250).
  * The minimum disc space (per directory and for the home drive)
    can now be set to an absolute value
    (gh#syncthing/syncthing#3307).
  * Pausing or reconfiguring a directory will no longer start extra
    scans. Pausing a directory stops scanning
    (gh#syncthing/syncthing#3965).
  * Ignore patterns can now be set at directory creation time, and
    for paused directories (gh#syncthing/syncthing#3996).
  * It is no longer possible to configure the GUI/API to listen on
    a privileged port using the standard settings dialogue
    (gh#syncthing/syncthing#4020).
  * The device allowed subnet list can now include negative ("!")
    entries to disallow subnets (gh#syncthing/syncthing#4096).
  * Doing "Override changes" now uses less memory
    (gh#syncthing/syncthing#4112).
- Require golang.org/x/net/context on openSUSE older than
  openSUSE Leap 15.x.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1496836800">- Update to version 0.14.29:
  * The layout of the global changes dialogue is improved
    (gh#syncthing/syncthing#3895).
  * Running as root or SYSTEM now triggers a warning recommending
    against it (gh#syncthing/syncthing#4123).
  * Changing the theme no longer causes an HTTP error
    (gh#syncthing/syncthing#4127).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1498651200">- Update to version 0.14.31 (changes since 0.14.29):
  * Correctly clear warning "path is a subdirectory of other
    folder" in directory dialogue (gh#syncthing/syncthing#3433).
  * Conflict copies filename now includes the ID of the last device
    to change the file (gh#syncthing/syncthing#3524).
  * Directories offered by other devices can now be ignored
    (gh#syncthing/syncthing#3993).
  * Changed device name takes effect with restart; device name is
    not sent to unknown devices (gh#syncthing/syncthing#4164).
  * Correctly show CPU usage when started with -no-restart option
    (gh#syncthing/syncthing#4183).
  * Icons and directory information in local device summary is
    consistent with that in directories
    (gh#syncthing/syncthing#4100).
  * Fix a data race in KCP &amp; STUN (gh#syncthing/syncthing#4177).
  * Ignore patterns on newly accepted directories are no longer
    erroneously inherited from an earlier added directory
    (gh#syncthing/syncthing#4203).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1500638400">- Update to version 0.14.32:
  * "Nearby devices" are now shown in the add device dialogue,
    avoiding the need to type their device ID
    (gh#syncthing/syncthing#4157).
  * Directories that were once ignored in a sharing request now
    actually work properly when later added manually
    (gh#syncthing/syncthing#4219).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505390400">- Update to version 0.14.37 (changes since 0.14.32):
  * Relative version paths are now correctly relative to the
    directory path (gh#syncthing/syncthing#4188).
  * Remote devices now show bytes remaining to synchronise
    (gh#syncthing/syncthing#4227).
  * Editing ignore patterns no longer incorrectly shows included
    patterns (gh#syncthing/syncthing#4249).
  * The new directory dialogue now suggests a default path.
    Adjustable via advanced config defaultFolderPath
    (gh#syncthing/syncthing#2157).
  * The build script no longer sets -installsuffix by default
    (gh#syncthing/syncthing#4272).
  * Prevent a vulnerability that allows file overwrite via
    versioned symlinks (boo#1074428, gh#syncthing/syncthing#4286).
  * Symlinks are deleted from versioned directories on startup
    (gh#syncthing/syncthing#4288).
  * Directory paths are no longer reset when editing a directory
    without a label (gh#syncthing/syncthing#4297).
  * Better detect synchronisation conflicts that happen while
    synchronising (gh#syncthing/syncthing#3742,
    gh#syncthing/syncthing#4305).
  * Fix a crash related to a nil reference in ignore handling
    (gh#syncthing/syncthing#4300).
- Stop requiring golang.org/x/net/context.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1505908800">- Update to version 0.14.38:
  * KCP connections are now more stable
    (gh#syncthing/syncthing#4063, gh#syncthing/syncthing#4343)
  * Hashing benchmarks are skipped if a manual selection has
    been forced (gh#syncthing/syncthing#4348).
  * Relay server RAM usage has been reduced
    (gh#syncthing/syncthing#4245).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1508500800">- Update to version 0.14.39:
  * Removing paused directories no longer triggers a crash
    (gh#syncthing/syncthing#4357).
  * Add further security related HTTP headers
    (gh#syncthing/syncthing#4360).
  * Improve info level logging in some cases
    (gh#syncthing/syncthing#4375).
  * Improve GUI tooltips in chromium based browsers
    (gh#syncthing/syncthing#4377).
  * Add -device-id command line switch
    (gh#syncthing/syncthing#4387).
  * Failure to upgrade directory markers from file to directory
    type is no longer fatal.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1510315200">- Update to version 0.14.40:
  - Report more data part of the anonymous usage report
    (gh#syncthing/syncthing#3628)
  - Better report synchronisation errors
    (gh#syncthing/syncthing#4392).
  - Removing paused directories no longer causes a panic
    (gh#syncthing/syncthing#4405).
  - Make local IPv4 discovery more resilient against write failures
    (gh#syncthing/syncthing#4414).
  - Clearer logging around config failures at startup
    (gh#syncthing/syncthing#4431).
  - Do not complain about inability to fsync files
    (gh#syncthing/syncthing#4432).
  - Improve KCP connections (gh#syncthing/syncthing#4446).
  - Improve directory health checking
    (gh#syncthing/syncthing#4451).
  - Include built-in support for file system notifications,
    although it is disabled by default.
  - Enable by default the UDP based "KCP" protocol.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1512475200">- Update to version 0.14.41:
  * Devices with ignored files stay "synchronising" forever
    (gh#syncthing/syncthing#623).
  * No Global Discovery without Synch Protocol Listen Address
    (gh#syncthing/syncthing#4418).
  * Local network classification doesn't always work
    (gh#syncthing/syncthing#4421).
  * Hashed GUI password should not be rehashed
    (gh#syncthing/syncthing#4458).
  * Pulls not triggered correctly on reconnection
    (gh#syncthing/syncthing#4504).
  * A symlink/file replacement doesn't work properly
    (gh#syncthing/syncthing#4505).
  * File/directory replacement doesn't work properly
    (gh#syncthing/syncthing#4506).
  * Logging at info level and above should always include context
    (gh#syncthing/syncthing#4510).
  * Panic in "pfilter" package on 32 bit architectures
    (gh#syncthing/syncthing#4537).
  * Allow synchronising read-only directories as
    "Master Directories" (gh#syncthing/syncthing#1126).
  * "Global Changes" button is confusing, retitle to
    "Recent Changes" (gh#syncthing/syncthing#4326).
  * Dial device addresses in parallel
    (gh#syncthing/syncthing#4456).
  * Avoid lots and lots of announced addresses in the presence of
    symmetric NAT (gh#syncthing/syncthing#4519).
  * Split transport usage reporting per stack
    (gh#syncthing/syncthing#4463).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1514980800">- Update to version 0.14.42:
  * Discovering new files in a deleted directory does not resurrect
    the directory (gh#syncthing/syncthing#4475).
  * "Panic: interface conversion: *errors.errorString is not
    net.Error" after restart (gh#syncthing/syncthing#4561).
  * Auto-accept shared directories from trusted devices
    (gh#syncthing/syncthing#2299).
  * Empty directories in .stversions should be removed
    (gh#syncthing/syncthing#4406).
  * Human readable errors on attempted deletion of a non-empty
    directory (gh#syncthing/syncthing#4476).
  * Add confirmation on the Remove Folder / Device button
    (gh#syncthing/syncthing#4543).</changelog>
  <changelog author="kbabioch@suse.com" date="1515672000">- Update to version 0.14.43:
  * Path completion in the new directory dialogue does not work
    anymore (gh#syncthing/syncthing#4475).
  * Fd leak when temp file cannot be truncated
    (gh#syncthing/syncthing#4593).
  * Panic: runtime error related to KCP
    (gh#syncthing/syncthing#4605).
  * UI for debug levels and log access
    (gh#syncthing/syncthing#2644).
  * GUI should indicate which files are out of synchronisation on
    remote devices (gh#syncthing/syncthing#4369).
  * Keep enough counters and state in the database to avoid initial
    database traversal (gh#syncthing/syncthing#4400).
  * Should understand ?socks? in addition to ?socks5? in proxy URLs
    (gh#syncthing/syncthing#4515).
  * Contribute kcp-go changes/features and/or fix tests
    (gh#syncthing/syncthing#4407).
  * Update vendored github.com/minio/sha256-simd for AVX512 support
    (gh#syncthing/syncthing#4585).
  * Update vendored x/sys/unix for dragonfly
    (gh#syncthing/syncthing#4615).</changelog>
  <changelog author="jengelh@inai.de" date="1515672001">- Replace marketing blurb with a software description.</changelog>
  <changelog author="bwiedemann@suse.com" date="1517486400">- Override BUILD_HOST to make build reproducible</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1519387200">- Update to version 0.14.44:
  * Panic when connecting to device with auto accept and paused
    directories (gh#syncthing/syncthing#4634).
  * List of files needed on remote were not wrapped at word
    boundaries (gh#syncthing/syncthing#4636).
  * It was impossible to run non-release builds without deadlock
    detectors (gh#syncthing/syncthing#4644).
  * Fix UTF-8 normalisation not working correctly on ZFS
    (gh#syncthing/syncthing#4649).
  * Fix upgrade system showing an error on RCs in some cases
    (gh#syncthing/syncthing#4654).
  * Fix sparse files with zero blocks not closing when pulling
    (gh#syncthing/syncthing#4657).
  * Fix remote device out of synch items showing "0 items, ~0 B"
    (gh#syncthing/syncthing#4668).
  * GUI for .stversion restoration (gh#syncthing/syncthing#2599).
  * Log entries showing IP addresses now show the connection type
    (gh#syncthing/syncthing#4499).
  * Set background priority / niceness
    (gh#syncthing/syncthing#4628).
  * Fix arguments to fs.CreateSymlink being mixed up
    (gh#syncthing/syncthing#4567).
  * More scalable global discovery (gh#syncthing/syncthing#4618).
  * lib/model test failed with "ThreadSanitizer failed to allocate
    0x200000 (2097152) bytes" with Go 1.9.2
    (gh#syncthing/syncthing#4653).
  * Fix spurious "é" in GUI (gh#syncthing/syncthing#4663).
  * Should clean out generated testdata in lib/model/testdata
    (gh#syncthing/syncthing#4706).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1521288000">- Update to version 0.14.45:
  * panic: bug: removed more than added
    (gh#syncthing/syncthing#4659).
  * Ignore pattern beginning with "#" does not match subpaths
    (gh#syncthing/syncthing#4680).
  * Ignore patterns in web UI aren't reloaded if only comments
    change (gh#syncthing/syncthing#4689).
  * Global is different from local state when ignoring files
    (gh#syncthing/syncthing#4701).
  * Fix basicfs_watch_tests being flaky
    (gh#syncthing/syncthing#4687).
  * Remove KCP (gh#syncthing/syncthing#4737).</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1523966400">- Update to version 0.14.46:
  * Replacing a directory with a symlink or vice versa is buggy
    (gh#syncthing/syncthing#2571).
  * Inaccessible files during scan are marked as deleted
    (gh#syncthing/syncthing#4573).
  * Send only directories out of synch due to ignored items
    (gh#syncthing/syncthing#4616).
  * A file deleted from all nodes may exist in the "out of synch"
    list (gh#syncthing/syncthing#4627).
  * Relay server doesn?t make outgoing HTTPS requests from its bind
    address (gh#syncthing/syncthing#4745).
  * The list of out of synch items from remote device is not
    displayed (gh#syncthing/syncthing#4759).
  * Env var for db metadata in help text differs from code
    (gh#syncthing/syncthing#4764).
  * Doesn't connect when multiple remote devices are using the
    same relay (gh#syncthing/syncthing#4778).
  * Scan on absolute path creates incorrect absolute duplicate file
    infos (gh#syncthing/syncthing#4799).
  * Panic in FS watcher in FreeBSD 8.3
    (gh#syncthing/syncthing#4806).</changelog>
  <changelog author="jengelh@inai.de" date="1523966401">- Drop redundant wording from descriptions.</changelog>
  <changelog author="marius.kittler@suse.com" date="1527681600">- Fix build command / prevent Syncthing to update itself
  Arguments go before commands so both -version and -no-upgrade
  were previously ignored resulting in Syncthing trying to update
  itself without permissions (boo#1095169).</changelog>
</package>
<package pkgid="88d3d6c95921928a0cd0fce3e093e65b6df88a6d1dec52acbd2daf0053991213" name="sysconfig" arch="src">
  <version epoch="0" ver="0.84.3" rel="lp150.3.3.2"/>
  <changelog author="mt@suse.de" date="1394625600">- version 0.83.4
- config: check ipv4 duplicates by default (fate#314399)</changelog>
  <changelog author="mt@suse.de" date="1401278400">- version 0.83.5
- sysconfig/network/config: new default to send gratuitous arp
  Enabled to send gratuitous arp by default, when duplicate IPv4
  check is enabled and were successful (bnc#879911,fate#314399).
- netconfig: improved troubleshooting capabilities
  Added NETCONFIG_VERBOSE and NETCONFIG_FORCE_REPLACE config
  variables allowing to run all netconfig calls in debug mode
  and force update of modified files as default. Show service,
  policy resolving info and log the commandline in debug mode.
  Fixed to log info/warnings that were printed to stderr only
  before (bnc#860644, bnc#868323).</changelog>
  <changelog author="mt@suse.de" date="1401278401">- version 0.83.6
- netconfig: fixed manual page to not refer README (bnc#876755)</changelog>
  <changelog author="mt@suse.de" date="1411473600">- version 0.83.7
- netconfig: create missed /var/run/ntp directory (bnc#892877)
  When the directory does not exists yet, the ntp service is not
  yet started/running and it is even more important to write the
  servers so ntpd can pickup them at start.
- config: changed NM_ONLINE_TIMEOUT to 30 (bnc#889175)
- config: updated to list new variables in network/dhcp,
  cleanup of ifcfg.template and network/config variables</changelog>
  <changelog author="mt@suse.de" date="1411560000">- rpm: fixed SUSE spelling in the spec file (bnc#889002)</changelog>
  <changelog author="mt@suse.de" date="1414497600">- rpm: kill all NetworkManager child processes on migration
  Before we stop (the always running) NetworkManager.service,
  ensure to kill all (child) processes when migrating from the
  NETWORKMANAGER=no variable (bnc#895447).</changelog>
  <changelog author="mt@suse.de" date="1421150400">- version 0.83.8
- netconfig: use domain name from hostname (bnc#912891)
  When there is no dns domain or search list provided (by dhcp),
  but a hostname as FQDN, use it's domain for /etc/resolv.conf
  search list.
- netconfig: merge NetworkManager settings on -m (bnc#900982)</changelog>
  <changelog author="mt@suse.de" date="1424174400">- dhcp: add variables for handling of DHCPv4 user-class (bsc#909307)
  [+ 0001-dhcp-network-variables-for-dhcp4-user-class.909307.patch]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1431432000">- sysconfig-netconfig requires /bin/logger, otherwise the following
  happens:
  linux.site wickedd[31]:
  /etc/sysconfig/network/scripts/functions.netconfig:
  line 44: logger: command not found</changelog>
  <changelog author="mt@suse.de" date="1433851200">- netconfig: use ntpd.service on &gt;13.1 (boo#930309)
  [+ 0002-netconfig-use-ntpd.service-on-13.2-boo-930309.patch]</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.83.9
- ppp: install refactored ip-up and related scripts (bsc#865573)
- removed patches shipped inside of the source archive
  [- 0001-dhcp-network-variables-for-dhcp4-user-class.909307.patch]
  [- 0002-netconfig-use-ntpd.service-on-13.2-boo-930309.patch]</changelog>
  <changelog author="mgorman@suse.com" date="1464696000">- Add a blacklist entry for the ACPI power meter driver (bnc#974373)</changelog>
  <changelog author="mt@suse.de" date="1473422400">- version 0.84.0
- netconfig: intoduced a batch mode (bsc#989741)
  It permits to preform multiple modify/remove operations
  and call the effective update at the end of the batch.
- netconfig: use ntpq, as ntpdc is deprecated (bsc#894889),
  lower sleep lock wait granularity and fix NTP_KEYS parsing
- Drop the omc svcinfo data as they are not used anymore
- Run spec-cleaner to remove few obsolete things
- Drop cvs helper files as we are in git
- Rename configure.in to configure.ac</changelog>
  <changelog author="kukuk@suse.de" date="1476187200">- Remove requires for not needed insserv (bsc#999850)</changelog>
  <changelog author="mt@suse.de" date="1491825600">- version 0.84.1
- netconfig: cleanup tmp files (boo#1010760)
  When /var/run/ntp/servers-netconfig has been modified externaly,
  don't try to backup or keep tmp files to show what we would do.
- netconfig: improve input check for duplicate keys (bsc#1009801)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496923200">- Make /etc/ppp owned by root:root. The group dialout usage is no
  longer used.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mt@suse.com" date="1511784000">- version 0.84.2
- spec: revert change to use _fillupdir in update hook from &lt; 0.80
- merged fixes of the the fillup templates logic and macro in
  configure.ac by Marcus Meissner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mt@suse.de" date="1526558400">- version 0.84.3
- netconfig: change policy to permit non-NM settings (bsc#1079793)
  As requested and approved by NetworkManager maintainer, the 'auto'
  policy permits now also per interface settings provided by other
  services when NetworkManager is enabled. That is, the auto policy
  resolving has been changed from "STATIC_FALLBACK NetworkManager"
  to "STATIC_FALLBACK * NetworkManager".</changelog>
</package>
<package pkgid="a2754a90f66da2e98706b70d3113cee209717cf44e0e84b3cf42ab176a55f134" name="sysconfig" arch="x86_64">
  <version epoch="0" ver="0.84.3" rel="lp150.3.3.2"/>
  <changelog author="mt@suse.de" date="1394625600">- version 0.83.4
- config: check ipv4 duplicates by default (fate#314399)</changelog>
  <changelog author="mt@suse.de" date="1401278400">- version 0.83.5
- sysconfig/network/config: new default to send gratuitous arp
  Enabled to send gratuitous arp by default, when duplicate IPv4
  check is enabled and were successful (bnc#879911,fate#314399).
- netconfig: improved troubleshooting capabilities
  Added NETCONFIG_VERBOSE and NETCONFIG_FORCE_REPLACE config
  variables allowing to run all netconfig calls in debug mode
  and force update of modified files as default. Show service,
  policy resolving info and log the commandline in debug mode.
  Fixed to log info/warnings that were printed to stderr only
  before (bnc#860644, bnc#868323).</changelog>
  <changelog author="mt@suse.de" date="1401278401">- version 0.83.6
- netconfig: fixed manual page to not refer README (bnc#876755)</changelog>
  <changelog author="mt@suse.de" date="1411473600">- version 0.83.7
- netconfig: create missed /var/run/ntp directory (bnc#892877)
  When the directory does not exists yet, the ntp service is not
  yet started/running and it is even more important to write the
  servers so ntpd can pickup them at start.
- config: changed NM_ONLINE_TIMEOUT to 30 (bnc#889175)
- config: updated to list new variables in network/dhcp,
  cleanup of ifcfg.template and network/config variables</changelog>
  <changelog author="mt@suse.de" date="1411560000">- rpm: fixed SUSE spelling in the spec file (bnc#889002)</changelog>
  <changelog author="mt@suse.de" date="1414497600">- rpm: kill all NetworkManager child processes on migration
  Before we stop (the always running) NetworkManager.service,
  ensure to kill all (child) processes when migrating from the
  NETWORKMANAGER=no variable (bnc#895447).</changelog>
  <changelog author="mt@suse.de" date="1421150400">- version 0.83.8
- netconfig: use domain name from hostname (bnc#912891)
  When there is no dns domain or search list provided (by dhcp),
  but a hostname as FQDN, use it's domain for /etc/resolv.conf
  search list.
- netconfig: merge NetworkManager settings on -m (bnc#900982)</changelog>
  <changelog author="mt@suse.de" date="1424174400">- dhcp: add variables for handling of DHCPv4 user-class (bsc#909307)
  [+ 0001-dhcp-network-variables-for-dhcp4-user-class.909307.patch]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1431432000">- sysconfig-netconfig requires /bin/logger, otherwise the following
  happens:
  linux.site wickedd[31]:
  /etc/sysconfig/network/scripts/functions.netconfig:
  line 44: logger: command not found</changelog>
  <changelog author="mt@suse.de" date="1433851200">- netconfig: use ntpd.service on &gt;13.1 (boo#930309)
  [+ 0002-netconfig-use-ntpd.service-on-13.2-boo-930309.patch]</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.83.9
- ppp: install refactored ip-up and related scripts (bsc#865573)
- removed patches shipped inside of the source archive
  [- 0001-dhcp-network-variables-for-dhcp4-user-class.909307.patch]
  [- 0002-netconfig-use-ntpd.service-on-13.2-boo-930309.patch]</changelog>
  <changelog author="mgorman@suse.com" date="1464696000">- Add a blacklist entry for the ACPI power meter driver (bnc#974373)</changelog>
  <changelog author="mt@suse.de" date="1473422400">- version 0.84.0
- netconfig: intoduced a batch mode (bsc#989741)
  It permits to preform multiple modify/remove operations
  and call the effective update at the end of the batch.
- netconfig: use ntpq, as ntpdc is deprecated (bsc#894889),
  lower sleep lock wait granularity and fix NTP_KEYS parsing
- Drop the omc svcinfo data as they are not used anymore
- Run spec-cleaner to remove few obsolete things
- Drop cvs helper files as we are in git
- Rename configure.in to configure.ac</changelog>
  <changelog author="kukuk@suse.de" date="1476187200">- Remove requires for not needed insserv (bsc#999850)</changelog>
  <changelog author="mt@suse.de" date="1491825600">- version 0.84.1
- netconfig: cleanup tmp files (boo#1010760)
  When /var/run/ntp/servers-netconfig has been modified externaly,
  don't try to backup or keep tmp files to show what we would do.
- netconfig: improve input check for duplicate keys (bsc#1009801)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496923200">- Make /etc/ppp owned by root:root. The group dialout usage is no
  longer used.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mt@suse.com" date="1511784000">- version 0.84.2
- spec: revert change to use _fillupdir in update hook from &lt; 0.80
- merged fixes of the the fillup templates logic and macro in
  configure.ac by Marcus Meissner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mt@suse.de" date="1526558400">- version 0.84.3
- netconfig: change policy to permit non-NM settings (bsc#1079793)
  As requested and approved by NetworkManager maintainer, the 'auto'
  policy permits now also per interface settings provided by other
  services when NetworkManager is enabled. That is, the auto policy
  resolving has been changed from "STATIC_FALLBACK NetworkManager"
  to "STATIC_FALLBACK * NetworkManager".</changelog>
</package>
<package pkgid="3802c2a2b33ca3846dd6f4017b6730243c5b4521ffbe783db730d8905e561405" name="sysconfig-netconfig" arch="x86_64">
  <version epoch="0" ver="0.84.3" rel="lp150.3.3.2"/>
  <changelog author="mt@suse.de" date="1394625600">- version 0.83.4
- config: check ipv4 duplicates by default (fate#314399)</changelog>
  <changelog author="mt@suse.de" date="1401278400">- version 0.83.5
- sysconfig/network/config: new default to send gratuitous arp
  Enabled to send gratuitous arp by default, when duplicate IPv4
  check is enabled and were successful (bnc#879911,fate#314399).
- netconfig: improved troubleshooting capabilities
  Added NETCONFIG_VERBOSE and NETCONFIG_FORCE_REPLACE config
  variables allowing to run all netconfig calls in debug mode
  and force update of modified files as default. Show service,
  policy resolving info and log the commandline in debug mode.
  Fixed to log info/warnings that were printed to stderr only
  before (bnc#860644, bnc#868323).</changelog>
  <changelog author="mt@suse.de" date="1401278401">- version 0.83.6
- netconfig: fixed manual page to not refer README (bnc#876755)</changelog>
  <changelog author="mt@suse.de" date="1411473600">- version 0.83.7
- netconfig: create missed /var/run/ntp directory (bnc#892877)
  When the directory does not exists yet, the ntp service is not
  yet started/running and it is even more important to write the
  servers so ntpd can pickup them at start.
- config: changed NM_ONLINE_TIMEOUT to 30 (bnc#889175)
- config: updated to list new variables in network/dhcp,
  cleanup of ifcfg.template and network/config variables</changelog>
  <changelog author="mt@suse.de" date="1411560000">- rpm: fixed SUSE spelling in the spec file (bnc#889002)</changelog>
  <changelog author="mt@suse.de" date="1414497600">- rpm: kill all NetworkManager child processes on migration
  Before we stop (the always running) NetworkManager.service,
  ensure to kill all (child) processes when migrating from the
  NETWORKMANAGER=no variable (bnc#895447).</changelog>
  <changelog author="mt@suse.de" date="1421150400">- version 0.83.8
- netconfig: use domain name from hostname (bnc#912891)
  When there is no dns domain or search list provided (by dhcp),
  but a hostname as FQDN, use it's domain for /etc/resolv.conf
  search list.
- netconfig: merge NetworkManager settings on -m (bnc#900982)</changelog>
  <changelog author="mt@suse.de" date="1424174400">- dhcp: add variables for handling of DHCPv4 user-class (bsc#909307)
  [+ 0001-dhcp-network-variables-for-dhcp4-user-class.909307.patch]</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1431432000">- sysconfig-netconfig requires /bin/logger, otherwise the following
  happens:
  linux.site wickedd[31]:
  /etc/sysconfig/network/scripts/functions.netconfig:
  line 44: logger: command not found</changelog>
  <changelog author="mt@suse.de" date="1433851200">- netconfig: use ntpd.service on &gt;13.1 (boo#930309)
  [+ 0002-netconfig-use-ntpd.service-on-13.2-boo-930309.patch]</changelog>
  <changelog author="mt@suse.de" date="1463745600">- version 0.83.9
- ppp: install refactored ip-up and related scripts (bsc#865573)
- removed patches shipped inside of the source archive
  [- 0001-dhcp-network-variables-for-dhcp4-user-class.909307.patch]
  [- 0002-netconfig-use-ntpd.service-on-13.2-boo-930309.patch]</changelog>
  <changelog author="mgorman@suse.com" date="1464696000">- Add a blacklist entry for the ACPI power meter driver (bnc#974373)</changelog>
  <changelog author="mt@suse.de" date="1473422400">- version 0.84.0
- netconfig: intoduced a batch mode (bsc#989741)
  It permits to preform multiple modify/remove operations
  and call the effective update at the end of the batch.
- netconfig: use ntpq, as ntpdc is deprecated (bsc#894889),
  lower sleep lock wait granularity and fix NTP_KEYS parsing
- Drop the omc svcinfo data as they are not used anymore
- Run spec-cleaner to remove few obsolete things
- Drop cvs helper files as we are in git
- Rename configure.in to configure.ac</changelog>
  <changelog author="kukuk@suse.de" date="1476187200">- Remove requires for not needed insserv (bsc#999850)</changelog>
  <changelog author="mt@suse.de" date="1491825600">- version 0.84.1
- netconfig: cleanup tmp files (boo#1010760)
  When /var/run/ntp/servers-netconfig has been modified externaly,
  don't try to backup or keep tmp files to show what we would do.
- netconfig: improve input check for duplicate keys (bsc#1009801)</changelog>
  <changelog author="dimstar@opensuse.org" date="1496923200">- Make /etc/ppp owned by root:root. The group dialout usage is no
  longer used.</changelog>
  <changelog author="rbrown@suse.com" date="1511438400">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468)</changelog>
  <changelog author="mt@suse.com" date="1511784000">- version 0.84.2
- spec: revert change to use _fillupdir in update hook from &lt; 0.80
- merged fixes of the the fillup templates logic and macro in
  configure.ac by Marcus Meissner</changelog>
  <changelog author="kukuk@suse.de" date="1521460800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="mt@suse.de" date="1526558400">- version 0.84.3
- netconfig: change policy to permit non-NM settings (bsc#1079793)
  As requested and approved by NetworkManager maintainer, the 'auto'
  policy permits now also per interface settings provided by other
  services when NetworkManager is enabled. That is, the auto policy
  resolving has been changed from "STATIC_FALLBACK NetworkManager"
  to "STATIC_FALLBACK * NetworkManager".</changelog>
</package>
<package pkgid="bd7a6e8544786fece5ee9d7bc92828803ddeb49212d4484192c6739b02d8b179" name="sysdig" arch="src">
  <version epoch="0" ver="0.20.0" rel="lp150.3.2.1"/>
  <changelog author="mpluskal@suse.com" date="1450440000">- Exclude archs on which build fails</changelog>
  <changelog author="aspiers@suse.com" date="1450526400">- Fix .spec file bug which was causing Frankenstein kernel modules:
  https://github.com/draios/sysdig/issues/496#issuecomment-165929462</changelog>
  <changelog author="mpluskal@suse.com" date="1453809600">- Update to 0.7.1
  * Fix sysdig-probe compilation for kernel &lt; 3.4.0
  * Fix compilation on OSX
- Changes for 0.7.0
  * Fix sysdig-probe for kernel 4.4
  * Fix a remotely possible deadlock during ioctl calls
  * Fix Kubernetes support when data returned from the API server
    is particularly big
  * Minor bugfixes
  * Spectrogram views in csysdig: spectro_all (System call latency
    spectrogram) and spectro_file (File I/O latency spectrogram)
  * Ability to authenticate to a Kubernetes API server using a
    certificate, via -K &lt;file_name&gt; or --k8s-api-cert=&lt;file_name&gt;.
    Can also be specified via the environment variable
    SYSDIG_K8S_API_CERT
  * Ability to sort columns in csysdig views using the keyboard
  * --filter-proclist: apply the filter to the process table
  * -M: add the possibility to stop collecting after X seconds
    evt.latency.quantized: 10-base log of the delta between an
    exit event and the correspondent enter event evt.latency.human:
    delta between an exit event and the correspondent enter event,
    as a human readable string (e.g. 10.3ms)</changelog>
  <changelog author="mpluskal@suse.com" date="1454760000">- Update to 0.8.0
  * Bug fixes
    + Better terminal mouse handling for csysdig
    + Minor bugfixes
  * New and updated features
    + rkt support (when running sysdig in a container, bind
    mounting the rkt directory is necessary, e.g. -v
    /var/lib/rkt:/host/var/lib/rkt:ro for Docker)
    + chroot event
    + container.type: the container type, e.g. docker or rkt
    + Prebuild sysdig-probe for Debian kernels</changelog>
  <changelog author="mpluskal@suse.com" date="1460462400">- Update to 0.9.0
  * Mesos and Marathon support:
  + csysdig views: Mesos Tasks, Mesos Frameworks, Marathon Apps,
    arathon Groups
  + -m sysdig/csysdig parameter to specify URLs for Mesos Master
    Marathon API
  + -pm sysdig parameter to get a Mesos-friendly event output
  + Filter fields: mesos.task.name, mesos.task.id,
    mesos.task.label, mesos.task.labels, mesos.framework.name,
    mesos.framework.id, marathon.app.name, marathon.app.id,
    marathon.app.label, marathon.app.labels, marathon.group.name,
    marathon.group.id
  * icontains filter comparison operator: case-insensitive string
    comparison
  * Support for SSL based authentication and bearer token
    authentication against the Kubernetes API server. Previously,
    SSL was just supported for CA verification. See the updated
    documentation for -K
  * New actions on csysdig views: lsof and renice
  * New network filter fields that support a CIDR notation
    (e.g. 127.0.0.1/24): fd.net, fd.cnet, fd.snet, fd.lnet, fd.rnet</changelog>
  <changelog author="mpluskal@suse.com" date="1466164800">- Update to version 0.10.0:
  * setsid event
  * proc.sid filter field: the session id of the process
    generating the event
  * proc.sname filter field: the name of the current process
    session leader
  * --force-term-compat command line option: try to configure
    simple terminal
  * settings (xterm-1002) that work better with terminals like
    putty
  * Many minor bugfixes
  * builds with gcc6 (boo#985121)
- Use pkgconfig() style dependencies
- Build with lua-5.1 as builds fail with lua-5.2 and later</changelog>
  <changelog author="mpluskal@suse.com" date="1467547200">- Update to version 0.10.1:
  * Minor bugfixes, mostly related to Kubernetes and Mesos parsing</changelog>
  <changelog author="mpluskal@suse.com" date="1468584000">- Update to version 0.11.0:
  * Support for tracers. A way to add user level events to sysdig
    stream. Seeannouncement blog post.
  * New csysdig views: Traces List, Traces Summary, Traces
    Spectogram
  * New evtin.* and span.* filters startswith operand for strings,
    ex: fd.name startswith /etc
  * evt.is_open_{read,write} fields, true or false if an event is
    an open() in read or write
  * Improved performances of Kubernetes metadata parsing.
  * Bug fixes for IPv6
- Add sysdig-do-not-use-private-jq-api.patch to allow building
  with system JQ</changelog>
  <changelog author="mpluskal@suse.com" date="1471694400">- Use current macros for KMP building
  * drop sysdig-kmp-preamble
- Use exclusivearch instead of excluding architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1479211200">- Update to version 0.12.1:
  * Compilation issues when using non-bundled OpenSSL #672
  * Compilation issues under S390 architecture
  * Various issues on k8s parsing
  * Stale thread info when parsing processes within containers #665
  * Avoid getting cwd from driver, causes issues on Kernel 4.8
- Changes for version 0.12.0:
  * New filters container.mount.* to match container mount points
  * New filter container.privileged to match containers running in
    privileged mode
  * Support latest kubernetes features: k8s.deployment.* and
    k8s.rs.* filters are now available
  * Added glob operator for strings, works as classic shell glob
    path matcher
  * Added pmatch operator
  * Add less package on docker image
- Drop upstreamed sysdig-do-not-use-private-jq-api.patch
- Enable building on s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1482580800">- Update to version 0.13.0 (boo#1017181):
  * Ability to open concatenated capture files
  * evtin.* fields can be used also for displaying now
  * Fix driver for Kernel 4.9
  * Fix on IPv4 mapped IPv6 parsing
  * Fix memory leak #694
  * Fix issue #687 about connecting to an K8s API server via HTTPS</changelog>
  <changelog author="mpluskal@suse.com" date="1485345600">- Update to version 0.14.0:
  * JSON output is not: an object per event separated by newline,
    instead of objects inside array as before.
  * New filter proc.pcmdline, which represents the full command
    line (proc.name + proc.args) of the parent of the process
    generating the event
  * Fixes for kernel version 4.9.3
  * Improved detection of Mesos containers
  * Fix compilation with HAS_CAPTURE disabled on Linux
  * Fixes for merged captures support
- Add sysdig-no_return_random.patch
- Enable building on more platforms</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 0.15.0
  * New Features
    + Support for Linux Kernel 4.10
    + Use /proc/&lt;pid&gt;/status instead of custom ioctl to get process vpid for kernels &gt;= 4.1
  * Bug fixes
    + Various fixes on Kubernetes ingestion
    + Fix some happening deadlocks in the driver when ioctl were exiting with error
    + Fix mkdir and rmdir events, they were skipped in case of page faults
    + Bugfix on topports_server chisel
    + Avoid some cases of infinite loop when evaluating filters like proc.aname
  * Fixed sysdig-no_return_random.patch https://github.com/draios/sysdig/issues/734</changelog>
  <changelog author="mpluskal@suse.com" date="1491134400">- Update to version 0.15.1 (boo#1032025):
  * Bug fixes:
    + Fixed driver compilation issues on armv6l
    + Fixes on Kubernetes support
    + Regression on rkt detection #748
    + Fixed high cpu usage when sysdig was used with -M parameter, #783
    + Fixed a memory leak #772</changelog>
  <changelog author="mpluskal@suse.com" date="1494244800">- Update to version 0.16.0:
  * New features:
    + support for Kernel 4.11
    + sysdig -N is now the default option, server port decoding can be reenabled with -R
    + Decode unshare syscall
  * Bugfixes:
    + Fix rkt detection for containers created before sysdig runs
    + Fix container detection if docker itself is running inside a container
    + Fix detection of lxc containers
    + Fix compilation issues on RHEL5
    + Fix memory leak on spy_users chisel</changelog>
  <changelog author="mpluskal@suse.com" date="1501502400">- Update to version 0.17.0 (boo#1051562):
  * New features:
    + Support netlink sockets [#809]
  * Bug fixes:
    + Fix a bug on cgroups parsing that prevented sysdig to start [#835]
    + Allow sysdig to read k8s state from very large k8s environments [#856]
    + Improve compatibility with older linux kernels [#889]
    + Improve rkt detection by checking the existence of files into /var/lib/rkt [#893]</changelog>
  <changelog author="mpluskal@suse.com" date="1504612800">- Fix building with recent curl (gh#draios/sysdig#895):
  * sysdig-curlbuild.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.19.1:
  * Fix a compilation issue on old versions of kernels 2.6.32 shipped by RHEL/CentOS
- Changes for version 0.19.0:
  * Add per-cpu counters when a tracepoint is hit [#947]
  * mq_unlink syscall reports as ptrace [#927]
  * Fixed copy-paste typo [#946]
  * expose the event masking/unmasking mechanism at the inspector level [#951]
  * Fix targetViewFilter for "Accessed Files" in wsysdig_summary chisel [#952]
  * Various improvements and fixes for Sysdig Inspect
- Changes for version 0.18.0:
  * Changed language of CLA to also cover government contributions [#902]
  * Support mapped container docker networking mode, currently used by k8s pods [#922]
  * Allow an external event capture dumper object to be used together with an inspector object [#912]
  * Handle reading large execve args/env that might otherwise cause a page fault [#920]
  * Add container events (container start/stop/etc) to capture files. In the future, will also be used for orchestrator information. [#935]
  * Add the executable path as a filterable/displayable item proc.exepath [#845] [#934]
  * Small README changes [#936]
  * Support additional flags to clone() syscall [#909]
  * Support page faults as events [#904]
  * Support for upcoming visualization product [#931]
  * Compilation fixes for sysdig monitor agent [#942]
  * Fix minor problems found by valgrind [#938]
  * Fix crash when reading large messages from docker daemon [#932]
  * Better cleanup of failed installation of the sysdig driver under coreos [#926]
  * Ensure that a parent's ptid is set when an execve fills in information on a new process [#914]
  * Fix IN operator so it works with non-string values [#913]
  * fix compile errors with newer versions of libcurl [#895] [#911]
  * fix compile errors when O_DIRECTORY not defined [#907]
  * Use session id, not process group id, for proc.sid [#904] [#905]
  * Small docs fixes related to container.mount.* [#901]
  * Update installation script to use latest version of EPEL repository [#897]
- Drop no longer needed sysdig-curlbuild.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1518091200">- Update to version 0.20.0:
  * Use dithered boxes to increase the number of available colors for spectrogram/subsecoffset views [#961] [#963] [#966]
  * Add the ability to log json parse errors to a separate log file [#975] [#981] [#990]
  * Update the embedded jsonpp implementation to 0.10.6 [#975] [#982]
  * Reduce inactive container scan time from 20 minutes to 30 seconds [#985]
  * Added the ability to parse and represent RAW sockets [#991]
  * Handle finit_module syscall [#996] [#1001]
  * Add error message when scap_open() is called with incorrect mode [#997]
  * Use explicit versions for all Docker API Endpoints [#1000]
  * Report more detailed errors when PPM_IOCTL_GET_N_TRACEPOINT_HIT fails [#1016]
  * Add support for bpf/seccomp syscalls [#1031] [#1033]
  * When trying to build the kernel module using dkms fails, include dkms.log output along with the failure [#1038]</changelog>
  <changelog author="mpluskal@suse.com" date="1519905600">- Modernise spec file using spec-cleaner</changelog>
</package>
<package pkgid="bd0ed88db6648fff2c084303627169522c9c8df4f7852865534c4beb2e8beeb9" name="sysdig" arch="x86_64">
  <version epoch="0" ver="0.20.0" rel="lp150.3.2.1"/>
  <changelog author="mpluskal@suse.com" date="1450440000">- Exclude archs on which build fails</changelog>
  <changelog author="aspiers@suse.com" date="1450526400">- Fix .spec file bug which was causing Frankenstein kernel modules:
  https://github.com/draios/sysdig/issues/496#issuecomment-165929462</changelog>
  <changelog author="mpluskal@suse.com" date="1453809600">- Update to 0.7.1
  * Fix sysdig-probe compilation for kernel &lt; 3.4.0
  * Fix compilation on OSX
- Changes for 0.7.0
  * Fix sysdig-probe for kernel 4.4
  * Fix a remotely possible deadlock during ioctl calls
  * Fix Kubernetes support when data returned from the API server
    is particularly big
  * Minor bugfixes
  * Spectrogram views in csysdig: spectro_all (System call latency
    spectrogram) and spectro_file (File I/O latency spectrogram)
  * Ability to authenticate to a Kubernetes API server using a
    certificate, via -K &lt;file_name&gt; or --k8s-api-cert=&lt;file_name&gt;.
    Can also be specified via the environment variable
    SYSDIG_K8S_API_CERT
  * Ability to sort columns in csysdig views using the keyboard
  * --filter-proclist: apply the filter to the process table
  * -M: add the possibility to stop collecting after X seconds
    evt.latency.quantized: 10-base log of the delta between an
    exit event and the correspondent enter event evt.latency.human:
    delta between an exit event and the correspondent enter event,
    as a human readable string (e.g. 10.3ms)</changelog>
  <changelog author="mpluskal@suse.com" date="1454760000">- Update to 0.8.0
  * Bug fixes
    + Better terminal mouse handling for csysdig
    + Minor bugfixes
  * New and updated features
    + rkt support (when running sysdig in a container, bind
    mounting the rkt directory is necessary, e.g. -v
    /var/lib/rkt:/host/var/lib/rkt:ro for Docker)
    + chroot event
    + container.type: the container type, e.g. docker or rkt
    + Prebuild sysdig-probe for Debian kernels</changelog>
  <changelog author="mpluskal@suse.com" date="1460462400">- Update to 0.9.0
  * Mesos and Marathon support:
  + csysdig views: Mesos Tasks, Mesos Frameworks, Marathon Apps,
    arathon Groups
  + -m sysdig/csysdig parameter to specify URLs for Mesos Master
    Marathon API
  + -pm sysdig parameter to get a Mesos-friendly event output
  + Filter fields: mesos.task.name, mesos.task.id,
    mesos.task.label, mesos.task.labels, mesos.framework.name,
    mesos.framework.id, marathon.app.name, marathon.app.id,
    marathon.app.label, marathon.app.labels, marathon.group.name,
    marathon.group.id
  * icontains filter comparison operator: case-insensitive string
    comparison
  * Support for SSL based authentication and bearer token
    authentication against the Kubernetes API server. Previously,
    SSL was just supported for CA verification. See the updated
    documentation for -K
  * New actions on csysdig views: lsof and renice
  * New network filter fields that support a CIDR notation
    (e.g. 127.0.0.1/24): fd.net, fd.cnet, fd.snet, fd.lnet, fd.rnet</changelog>
  <changelog author="mpluskal@suse.com" date="1466164800">- Update to version 0.10.0:
  * setsid event
  * proc.sid filter field: the session id of the process
    generating the event
  * proc.sname filter field: the name of the current process
    session leader
  * --force-term-compat command line option: try to configure
    simple terminal
  * settings (xterm-1002) that work better with terminals like
    putty
  * Many minor bugfixes
  * builds with gcc6 (boo#985121)
- Use pkgconfig() style dependencies
- Build with lua-5.1 as builds fail with lua-5.2 and later</changelog>
  <changelog author="mpluskal@suse.com" date="1467547200">- Update to version 0.10.1:
  * Minor bugfixes, mostly related to Kubernetes and Mesos parsing</changelog>
  <changelog author="mpluskal@suse.com" date="1468584000">- Update to version 0.11.0:
  * Support for tracers. A way to add user level events to sysdig
    stream. Seeannouncement blog post.
  * New csysdig views: Traces List, Traces Summary, Traces
    Spectogram
  * New evtin.* and span.* filters startswith operand for strings,
    ex: fd.name startswith /etc
  * evt.is_open_{read,write} fields, true or false if an event is
    an open() in read or write
  * Improved performances of Kubernetes metadata parsing.
  * Bug fixes for IPv6
- Add sysdig-do-not-use-private-jq-api.patch to allow building
  with system JQ</changelog>
  <changelog author="mpluskal@suse.com" date="1471694400">- Use current macros for KMP building
  * drop sysdig-kmp-preamble
- Use exclusivearch instead of excluding architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1479211200">- Update to version 0.12.1:
  * Compilation issues when using non-bundled OpenSSL #672
  * Compilation issues under S390 architecture
  * Various issues on k8s parsing
  * Stale thread info when parsing processes within containers #665
  * Avoid getting cwd from driver, causes issues on Kernel 4.8
- Changes for version 0.12.0:
  * New filters container.mount.* to match container mount points
  * New filter container.privileged to match containers running in
    privileged mode
  * Support latest kubernetes features: k8s.deployment.* and
    k8s.rs.* filters are now available
  * Added glob operator for strings, works as classic shell glob
    path matcher
  * Added pmatch operator
  * Add less package on docker image
- Drop upstreamed sysdig-do-not-use-private-jq-api.patch
- Enable building on s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1482580800">- Update to version 0.13.0 (boo#1017181):
  * Ability to open concatenated capture files
  * evtin.* fields can be used also for displaying now
  * Fix driver for Kernel 4.9
  * Fix on IPv4 mapped IPv6 parsing
  * Fix memory leak #694
  * Fix issue #687 about connecting to an K8s API server via HTTPS</changelog>
  <changelog author="mpluskal@suse.com" date="1485345600">- Update to version 0.14.0:
  * JSON output is not: an object per event separated by newline,
    instead of objects inside array as before.
  * New filter proc.pcmdline, which represents the full command
    line (proc.name + proc.args) of the parent of the process
    generating the event
  * Fixes for kernel version 4.9.3
  * Improved detection of Mesos containers
  * Fix compilation with HAS_CAPTURE disabled on Linux
  * Fixes for merged captures support
- Add sysdig-no_return_random.patch
- Enable building on more platforms</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 0.15.0
  * New Features
    + Support for Linux Kernel 4.10
    + Use /proc/&lt;pid&gt;/status instead of custom ioctl to get process vpid for kernels &gt;= 4.1
  * Bug fixes
    + Various fixes on Kubernetes ingestion
    + Fix some happening deadlocks in the driver when ioctl were exiting with error
    + Fix mkdir and rmdir events, they were skipped in case of page faults
    + Bugfix on topports_server chisel
    + Avoid some cases of infinite loop when evaluating filters like proc.aname
  * Fixed sysdig-no_return_random.patch https://github.com/draios/sysdig/issues/734</changelog>
  <changelog author="mpluskal@suse.com" date="1491134400">- Update to version 0.15.1 (boo#1032025):
  * Bug fixes:
    + Fixed driver compilation issues on armv6l
    + Fixes on Kubernetes support
    + Regression on rkt detection #748
    + Fixed high cpu usage when sysdig was used with -M parameter, #783
    + Fixed a memory leak #772</changelog>
  <changelog author="mpluskal@suse.com" date="1494244800">- Update to version 0.16.0:
  * New features:
    + support for Kernel 4.11
    + sysdig -N is now the default option, server port decoding can be reenabled with -R
    + Decode unshare syscall
  * Bugfixes:
    + Fix rkt detection for containers created before sysdig runs
    + Fix container detection if docker itself is running inside a container
    + Fix detection of lxc containers
    + Fix compilation issues on RHEL5
    + Fix memory leak on spy_users chisel</changelog>
  <changelog author="mpluskal@suse.com" date="1501502400">- Update to version 0.17.0 (boo#1051562):
  * New features:
    + Support netlink sockets [#809]
  * Bug fixes:
    + Fix a bug on cgroups parsing that prevented sysdig to start [#835]
    + Allow sysdig to read k8s state from very large k8s environments [#856]
    + Improve compatibility with older linux kernels [#889]
    + Improve rkt detection by checking the existence of files into /var/lib/rkt [#893]</changelog>
  <changelog author="mpluskal@suse.com" date="1504612800">- Fix building with recent curl (gh#draios/sysdig#895):
  * sysdig-curlbuild.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.19.1:
  * Fix a compilation issue on old versions of kernels 2.6.32 shipped by RHEL/CentOS
- Changes for version 0.19.0:
  * Add per-cpu counters when a tracepoint is hit [#947]
  * mq_unlink syscall reports as ptrace [#927]
  * Fixed copy-paste typo [#946]
  * expose the event masking/unmasking mechanism at the inspector level [#951]
  * Fix targetViewFilter for "Accessed Files" in wsysdig_summary chisel [#952]
  * Various improvements and fixes for Sysdig Inspect
- Changes for version 0.18.0:
  * Changed language of CLA to also cover government contributions [#902]
  * Support mapped container docker networking mode, currently used by k8s pods [#922]
  * Allow an external event capture dumper object to be used together with an inspector object [#912]
  * Handle reading large execve args/env that might otherwise cause a page fault [#920]
  * Add container events (container start/stop/etc) to capture files. In the future, will also be used for orchestrator information. [#935]
  * Add the executable path as a filterable/displayable item proc.exepath [#845] [#934]
  * Small README changes [#936]
  * Support additional flags to clone() syscall [#909]
  * Support page faults as events [#904]
  * Support for upcoming visualization product [#931]
  * Compilation fixes for sysdig monitor agent [#942]
  * Fix minor problems found by valgrind [#938]
  * Fix crash when reading large messages from docker daemon [#932]
  * Better cleanup of failed installation of the sysdig driver under coreos [#926]
  * Ensure that a parent's ptid is set when an execve fills in information on a new process [#914]
  * Fix IN operator so it works with non-string values [#913]
  * fix compile errors with newer versions of libcurl [#895] [#911]
  * fix compile errors when O_DIRECTORY not defined [#907]
  * Use session id, not process group id, for proc.sid [#904] [#905]
  * Small docs fixes related to container.mount.* [#901]
  * Update installation script to use latest version of EPEL repository [#897]
- Drop no longer needed sysdig-curlbuild.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1518091200">- Update to version 0.20.0:
  * Use dithered boxes to increase the number of available colors for spectrogram/subsecoffset views [#961] [#963] [#966]
  * Add the ability to log json parse errors to a separate log file [#975] [#981] [#990]
  * Update the embedded jsonpp implementation to 0.10.6 [#975] [#982]
  * Reduce inactive container scan time from 20 minutes to 30 seconds [#985]
  * Added the ability to parse and represent RAW sockets [#991]
  * Handle finit_module syscall [#996] [#1001]
  * Add error message when scap_open() is called with incorrect mode [#997]
  * Use explicit versions for all Docker API Endpoints [#1000]
  * Report more detailed errors when PPM_IOCTL_GET_N_TRACEPOINT_HIT fails [#1016]
  * Add support for bpf/seccomp syscalls [#1031] [#1033]
  * When trying to build the kernel module using dkms fails, include dkms.log output along with the failure [#1038]</changelog>
  <changelog author="mpluskal@suse.com" date="1519905600">- Modernise spec file using spec-cleaner</changelog>
</package>
<package pkgid="698973e83c324b057a3a22eb929008b0dd11db0f4fbe0f6e5deef882904b6c63" name="sysdig-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.20.0_k4.12.14_lp150.12.13" rel="lp150.3.2.1"/>
  <changelog author="mpluskal@suse.com" date="1450440000">- Exclude archs on which build fails</changelog>
  <changelog author="aspiers@suse.com" date="1450526400">- Fix .spec file bug which was causing Frankenstein kernel modules:
  https://github.com/draios/sysdig/issues/496#issuecomment-165929462</changelog>
  <changelog author="mpluskal@suse.com" date="1453809600">- Update to 0.7.1
  * Fix sysdig-probe compilation for kernel &lt; 3.4.0
  * Fix compilation on OSX
- Changes for 0.7.0
  * Fix sysdig-probe for kernel 4.4
  * Fix a remotely possible deadlock during ioctl calls
  * Fix Kubernetes support when data returned from the API server
    is particularly big
  * Minor bugfixes
  * Spectrogram views in csysdig: spectro_all (System call latency
    spectrogram) and spectro_file (File I/O latency spectrogram)
  * Ability to authenticate to a Kubernetes API server using a
    certificate, via -K &lt;file_name&gt; or --k8s-api-cert=&lt;file_name&gt;.
    Can also be specified via the environment variable
    SYSDIG_K8S_API_CERT
  * Ability to sort columns in csysdig views using the keyboard
  * --filter-proclist: apply the filter to the process table
  * -M: add the possibility to stop collecting after X seconds
    evt.latency.quantized: 10-base log of the delta between an
    exit event and the correspondent enter event evt.latency.human:
    delta between an exit event and the correspondent enter event,
    as a human readable string (e.g. 10.3ms)</changelog>
  <changelog author="mpluskal@suse.com" date="1454760000">- Update to 0.8.0
  * Bug fixes
    + Better terminal mouse handling for csysdig
    + Minor bugfixes
  * New and updated features
    + rkt support (when running sysdig in a container, bind
    mounting the rkt directory is necessary, e.g. -v
    /var/lib/rkt:/host/var/lib/rkt:ro for Docker)
    + chroot event
    + container.type: the container type, e.g. docker or rkt
    + Prebuild sysdig-probe for Debian kernels</changelog>
  <changelog author="mpluskal@suse.com" date="1460462400">- Update to 0.9.0
  * Mesos and Marathon support:
  + csysdig views: Mesos Tasks, Mesos Frameworks, Marathon Apps,
    arathon Groups
  + -m sysdig/csysdig parameter to specify URLs for Mesos Master
    Marathon API
  + -pm sysdig parameter to get a Mesos-friendly event output
  + Filter fields: mesos.task.name, mesos.task.id,
    mesos.task.label, mesos.task.labels, mesos.framework.name,
    mesos.framework.id, marathon.app.name, marathon.app.id,
    marathon.app.label, marathon.app.labels, marathon.group.name,
    marathon.group.id
  * icontains filter comparison operator: case-insensitive string
    comparison
  * Support for SSL based authentication and bearer token
    authentication against the Kubernetes API server. Previously,
    SSL was just supported for CA verification. See the updated
    documentation for -K
  * New actions on csysdig views: lsof and renice
  * New network filter fields that support a CIDR notation
    (e.g. 127.0.0.1/24): fd.net, fd.cnet, fd.snet, fd.lnet, fd.rnet</changelog>
  <changelog author="mpluskal@suse.com" date="1466164800">- Update to version 0.10.0:
  * setsid event
  * proc.sid filter field: the session id of the process
    generating the event
  * proc.sname filter field: the name of the current process
    session leader
  * --force-term-compat command line option: try to configure
    simple terminal
  * settings (xterm-1002) that work better with terminals like
    putty
  * Many minor bugfixes
  * builds with gcc6 (boo#985121)
- Use pkgconfig() style dependencies
- Build with lua-5.1 as builds fail with lua-5.2 and later</changelog>
  <changelog author="mpluskal@suse.com" date="1467547200">- Update to version 0.10.1:
  * Minor bugfixes, mostly related to Kubernetes and Mesos parsing</changelog>
  <changelog author="mpluskal@suse.com" date="1468584000">- Update to version 0.11.0:
  * Support for tracers. A way to add user level events to sysdig
    stream. Seeannouncement blog post.
  * New csysdig views: Traces List, Traces Summary, Traces
    Spectogram
  * New evtin.* and span.* filters startswith operand for strings,
    ex: fd.name startswith /etc
  * evt.is_open_{read,write} fields, true or false if an event is
    an open() in read or write
  * Improved performances of Kubernetes metadata parsing.
  * Bug fixes for IPv6
- Add sysdig-do-not-use-private-jq-api.patch to allow building
  with system JQ</changelog>
  <changelog author="mpluskal@suse.com" date="1471694400">- Use current macros for KMP building
  * drop sysdig-kmp-preamble
- Use exclusivearch instead of excluding architectures</changelog>
  <changelog author="mpluskal@suse.com" date="1479211200">- Update to version 0.12.1:
  * Compilation issues when using non-bundled OpenSSL #672
  * Compilation issues under S390 architecture
  * Various issues on k8s parsing
  * Stale thread info when parsing processes within containers #665
  * Avoid getting cwd from driver, causes issues on Kernel 4.8
- Changes for version 0.12.0:
  * New filters container.mount.* to match container mount points
  * New filter container.privileged to match containers running in
    privileged mode
  * Support latest kubernetes features: k8s.deployment.* and
    k8s.rs.* filters are now available
  * Added glob operator for strings, works as classic shell glob
    path matcher
  * Added pmatch operator
  * Add less package on docker image
- Drop upstreamed sysdig-do-not-use-private-jq-api.patch
- Enable building on s390x</changelog>
  <changelog author="mpluskal@suse.com" date="1482580800">- Update to version 0.13.0 (boo#1017181):
  * Ability to open concatenated capture files
  * evtin.* fields can be used also for displaying now
  * Fix driver for Kernel 4.9
  * Fix on IPv4 mapped IPv6 parsing
  * Fix memory leak #694
  * Fix issue #687 about connecting to an K8s API server via HTTPS</changelog>
  <changelog author="mpluskal@suse.com" date="1485345600">- Update to version 0.14.0:
  * JSON output is not: an object per event separated by newline,
    instead of objects inside array as before.
  * New filter proc.pcmdline, which represents the full command
    line (proc.name + proc.args) of the parent of the process
    generating the event
  * Fixes for kernel version 4.9.3
  * Improved detection of Mesos containers
  * Fix compilation with HAS_CAPTURE disabled on Linux
  * Fixes for merged captures support
- Add sysdig-no_return_random.patch
- Enable building on more platforms</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1488283200">- Update to version 0.15.0
  * New Features
    + Support for Linux Kernel 4.10
    + Use /proc/&lt;pid&gt;/status instead of custom ioctl to get process vpid for kernels &gt;= 4.1
  * Bug fixes
    + Various fixes on Kubernetes ingestion
    + Fix some happening deadlocks in the driver when ioctl were exiting with error
    + Fix mkdir and rmdir events, they were skipped in case of page faults
    + Bugfix on topports_server chisel
    + Avoid some cases of infinite loop when evaluating filters like proc.aname
  * Fixed sysdig-no_return_random.patch https://github.com/draios/sysdig/issues/734</changelog>
  <changelog author="mpluskal@suse.com" date="1491134400">- Update to version 0.15.1 (boo#1032025):
  * Bug fixes:
    + Fixed driver compilation issues on armv6l
    + Fixes on Kubernetes support
    + Regression on rkt detection #748
    + Fixed high cpu usage when sysdig was used with -M parameter, #783
    + Fixed a memory leak #772</changelog>
  <changelog author="mpluskal@suse.com" date="1494244800">- Update to version 0.16.0:
  * New features:
    + support for Kernel 4.11
    + sysdig -N is now the default option, server port decoding can be reenabled with -R
    + Decode unshare syscall
  * Bugfixes:
    + Fix rkt detection for containers created before sysdig runs
    + Fix container detection if docker itself is running inside a container
    + Fix detection of lxc containers
    + Fix compilation issues on RHEL5
    + Fix memory leak on spy_users chisel</changelog>
  <changelog author="mpluskal@suse.com" date="1501502400">- Update to version 0.17.0 (boo#1051562):
  * New features:
    + Support netlink sockets [#809]
  * Bug fixes:
    + Fix a bug on cgroups parsing that prevented sysdig to start [#835]
    + Allow sysdig to read k8s state from very large k8s environments [#856]
    + Improve compatibility with older linux kernels [#889]
    + Improve rkt detection by checking the existence of files into /var/lib/rkt [#893]</changelog>
  <changelog author="mpluskal@suse.com" date="1504612800">- Fix building with recent curl (gh#draios/sysdig#895):
  * sysdig-curlbuild.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1507550400">- Update to version 0.19.1:
  * Fix a compilation issue on old versions of kernels 2.6.32 shipped by RHEL/CentOS
- Changes for version 0.19.0:
  * Add per-cpu counters when a tracepoint is hit [#947]
  * mq_unlink syscall reports as ptrace [#927]
  * Fixed copy-paste typo [#946]
  * expose the event masking/unmasking mechanism at the inspector level [#951]
  * Fix targetViewFilter for "Accessed Files" in wsysdig_summary chisel [#952]
  * Various improvements and fixes for Sysdig Inspect
- Changes for version 0.18.0:
  * Changed language of CLA to also cover government contributions [#902]
  * Support mapped container docker networking mode, currently used by k8s pods [#922]
  * Allow an external event capture dumper object to be used together with an inspector object [#912]
  * Handle reading large execve args/env that might otherwise cause a page fault [#920]
  * Add container events (container start/stop/etc) to capture files. In the future, will also be used for orchestrator information. [#935]
  * Add the executable path as a filterable/displayable item proc.exepath [#845] [#934]
  * Small README changes [#936]
  * Support additional flags to clone() syscall [#909]
  * Support page faults as events [#904]
  * Support for upcoming visualization product [#931]
  * Compilation fixes for sysdig monitor agent [#942]
  * Fix minor problems found by valgrind [#938]
  * Fix crash when reading large messages from docker daemon [#932]
  * Better cleanup of failed installation of the sysdig driver under coreos [#926]
  * Ensure that a parent's ptid is set when an execve fills in information on a new process [#914]
  * Fix IN operator so it works with non-string values [#913]
  * fix compile errors with newer versions of libcurl [#895] [#911]
  * fix compile errors when O_DIRECTORY not defined [#907]
  * Use session id, not process group id, for proc.sid [#904] [#905]
  * Small docs fixes related to container.mount.* [#901]
  * Update installation script to use latest version of EPEL repository [#897]
- Drop no longer needed sysdig-curlbuild.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1518091200">- Update to version 0.20.0:
  * Use dithered boxes to increase the number of available colors for spectrogram/subsecoffset views [#961] [#963] [#966]
  * Add the ability to log json parse errors to a separate log file [#975] [#981] [#990]
  * Update the embedded jsonpp implementation to 0.10.6 [#975] [#982]
  * Reduce inactive container scan time from 20 minutes to 30 seconds [#985]
  * Added the ability to parse and represent RAW sockets [#991]
  * Handle finit_module syscall [#996] [#1001]
  * Add error message when scap_open() is called with incorrect mode [#997]
  * Use explicit versions for all Docker API Endpoints [#1000]
  * Report more detailed errors when PPM_IOCTL_GET_N_TRACEPOINT_HIT fails [#1016]
  * Add support for bpf/seccomp syscalls [#1031] [#1033]
  * When trying to build the kernel module using dkms fails, include dkms.log output along with the failure [#1038]</changelog>
  <changelog author="mpluskal@suse.com" date="1519905600">- Modernise spec file using spec-cleaner</changelog>
</package>
<package pkgid="88a82ac13b18cd746203911d58d38674d2fb7a87b6a3bbb5caa1e42373986b7e" name="syslog-ng" arch="src">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="536c29b29f9129e5edacf70208437990a57a5e900059f4cfffcede5fae155a48" name="syslog-ng" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="71ce99c4e8d77fdc032fa855a63b3f65fff114e2f97cedbd05ca080ead14b522" name="syslog-ng-curl" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="e65cbc1f8cbe369b724e0d5461c4cf6c682ba3f8875d32a866abcf64ae1a33b8" name="syslog-ng-devel" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="dd3d5298feca0db310ad9f5bfd7fb83bf61384368389a8bb3d70dfe67b79259e" name="syslog-ng-geoip" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="7573c88cb35320170b878a5da3bd6bebe26495e7e3f811b6a8584aad741ac917" name="syslog-ng-python" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="030e6e2deb505bb27849079da4f237ed5febb57b512555bae10ec762e280ab9d" name="syslog-ng-redis" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="a1d86968267db37b0837c46fe1001d93ff877581f2fbeda98576d58d022ffa5c" name="syslog-ng-smtp" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="12e8649cf34af76186534d304ad4d10ef3cf66564f8a18157331e95a0c809dbb" name="syslog-ng-sql" arch="x86_64">
  <version epoch="0" ver="3.14.1" rel="lp150.2.3.1"/>
  <changelog author="mt@suse.de" date="1400500800">- rpm: use _rundir rpm macro if defined (bnc#873857)</changelog>
  <changelog author="czanik@balabit.hu" date="1405944000">- update to 3.5.5 (bugfix release)
- copying ivykis headers manually is no more necessary</changelog>
  <changelog author="pczanik@genesi-usa.com" date="1407240000">- update to 3.5.6 (bugfix release)</changelog>
  <changelog author="mt@suse.de" date="1408708800">- Stop syslog.socket in %preun to avoid the daemon we uninstall
  gets started by a log message due to dependencies (bnc#840815).</changelog>
  <changelog author="dimstar@opensuse.org" date="1425384000">- Do not BuildRequire libhiredis0_10: It's responsibility of the
  respective -devel package to pull in the library. On openSUSE &lt;
  13.2.1 (Current Tumbleweed) we keep it to workaround a bug in
  the hiredis-devel package of those releases.</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1427284800">- fix shebang in syslog-ng-service-prepare script that contains
  bash-specific constructions</changelog>
  <changelog author="czanik@balabit.hu" date="1441627200">- update to syslog-ng 3.7.1
- for a detailed changelog, see upstream at:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.1
  and
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.6.1
- FYI: no java support due to lack of gradle
- follow geoip modul name change (tfgeoip -&gt; geoip-plugin)
- add libkvformat.so
- remove notls workaround (openssl is now a hard dependency)
- add python support
- update version in syslog-ng.conf
- move json support to core
- tmp patch to fix compilation on SLES11:
  e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- SLES notes: some core dependencies are missing, so you need to
  build in your home repo and have json, libevtlog from Factory</changelog>
  <changelog author="peter@czanik.hu" date="1464782400">- fix bnc#965191 by adding back "Alias=syslog.service" to
  "syslog.service"
- update to 3.7.3, which fixes many small bugs
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.7.3
- remove obsolate e30fe7c3717a7bda4036448c7777747df1a4e0f9.patch
- using self generated dist tgz, as official tgz is missing
  generated man pages
- fix bnc#982487 by copying config.h manually</changelog>
  <changelog author="peter@czanik.hu" date="1471953600">- update to 3.8.1
  for a complete list of changes see:
  https://github.com/balabit/syslog-ng/releases/tag/syslog-ng-3.8.1
- add Java support. NOTE:
  no modules due to missing gradle and JAR dependencies
- add curl HTTP support
- disable mongodb for SLES11 (fails to compile)
- update configuration to 3.8
- change datadir parameter (default now includes 'syslog-ng')
- add cef &amp; date modules, apache, loggly, logmatic scl-s
- add disk buffer support
- update java module list
- uncomment Alias=syslog.service in syslog-ng.service
- rename system-expand to system-expand.sh
- add missing: Obsolates: syslog-ng-json (JSON is now in core)</changelog>
  <changelog author="peter@czanik.hu" date="1473422400">- really update config version to 3.8 (thanks Per for the report)
- move curl (HTTP) support into a subpackage
  to reduce the number of dependencies in the base package</changelog>
  <changelog author="meissner@suse.com" date="1491134400">- require group and user "news" in new system model.</changelog>
  <changelog author="peter@czanik.hu" date="1498046400">- update to version 3.10.1
- update config version
- libcurl.so renamed to libhttp.so
- added module libtfgetent.so
- added module libmap-value-pairs.so
- added module libstardate.so
- added cisco parser (scl)
- added snmptrapd parser files
- add pkgconfig for add-contextual-data
- don't compile curl dest on SLES 11</changelog>
  <changelog author="fstrba@suse.com" date="1507636800">- Do not hardcode dependency on java-1_7_0-openjdk, depend on
  java-devel &gt;= 1.7 instead
- Added patch:
  * syslog-ng-3.10.1-sourcetarget.patch
    + Build Java classes with the lowest required source and target
    levels.</changelog>
  <changelog author="jengelh@inai.de" date="1507723200">- Update package summaries and RPM group classifications.
  Drop author lists from descriptions. Remove redundant %clean
  section. Replace old $RPM_ shell vars and make consistent use
  of macros instead.</changelog>
  <changelog author="peter@czanik.hu" date="1511956800">- update to syslog-ng 3.12.1
- add tags parser
- add xml parser
- add Windows eventlog parser
- add syslog-ng-debun + man
- handle evtlog merge (add obsolates, new files, etc.)
- use Python version of merge-grammar
- add libmaxminddb-devel BuildRequires for the geoip2 parser
- add geoip2 parser
- add osquery parser (scl)
- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468) (by @RBrownSUSE)
- WARNING:
  disable RabbitMQ and AMQP support as they fail
  to compile with openssl 1.1
  Will be most likely re-enabled in 3.14.1</changelog>
  <changelog author="peter@czanik.hu" date="1512475200">- fix %post and mongodb as requested by @idonmez</changelog>
  <changelog author="peter@czanik.hu" date="1515499200">- disable Java destination temporarily (it does not build)</changelog>
  <changelog author="Thomas.Blume@suse.com" date="1515585600">- fix build error with json-c v0.13 with patch
  0001-modules-json-Adaptions-for-json-c-v0.13.patch</changelog>
  <changelog author="peter@czanik.hu" date="1523016000">- update to syslog-ng 3.14.1
- remove patch, as merged upstream:
  0001-modules-json-Adaptions-for-json-c-v0.13.patch
- remove patch and revert to jdk 1.7 as 1.9 is problematic:
  syslog-ng-3.10.1-sourcetarget.patch
- add secret-storage, appmodell and SCL files</changelog>
  <changelog author="peter@czanik.hu" date="1527768000">- added network.target to syslog-ng.service
  to resolve bnc#1077975</changelog>
</package>
<package pkgid="222efc93877d78bd9c462412b7ba7e8f3234d1e6198b88f6477ba37e5d6afd4e" name="systemd" arch="src">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="d09c791f6ca3fd0d2f8a777524f819bfb0ada2edda2230beddabe73923cfec2e" name="systemd" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="96550985beceaa7d3c76b627cffd459cbf5982b72a5e1714f669efb3049e8bf5" name="systemd" arch="src">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="f7777b089c5ebe96a0c9bb347d8b40113a0b375e48e27b18768fe1013dba3bbe" name="systemd" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="cf11cfef5645308c2ff42ee3ce56166daf86514a68c977e089ef358c5f79bb75" name="systemd-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="7f0cf2e141681987a3f9c130501cb9e11cd01c0f024b0433a41190283e5c4275" name="systemd-32bit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="146be3413a14eee82bb7882180fa5a7366948fa4c01324b9ac57cdb3c123cdad" name="systemd-bash-completion" arch="noarch">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="e8dfcdfb7cffbd9c5bb6a6b4ffe7dbc293597edd16fb066f68e7e4ef87179730" name="systemd-bash-completion" arch="noarch">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="d06f87292881fefe508f5cb79ad707cbb9500ea0ce48349e6a6228721f41cee8" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="5c6be92ad261be63e92f82f02861c273c2c695b27e88dee15457a85830c1ba92" name="systemd-container" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="c9e2dc0fa04c518bc9340dd963257e6ff444592dafb5bfb2470d22582cf9d151" name="systemd-coredump" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="8ee06a244aa06f41d136db66da898cae7c8f5c63c299f971d1ffc8dbfb3bb5a9" name="systemd-coredump" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="628aa3670bb544ff9cfa5d8615d5f73740c2d91b675f588cfacbe6a03fef2104" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="ca6e7f7cdcbeff3657470c3e49c539fe77f10d5d6134b9963f6a9d9112c5a271" name="systemd-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="f5817c9a952751516315123ff029ce378b2d2c6e46a2202316b61a2775250e34" name="systemd-logger" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="24cd0377d563b89c7e59bb9671dc1cf11b3aa1e4789624ed2f8415d401c1e0f9" name="systemd-logger" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="a32153c1c4f96a82a5702ec12ac27167acc41e8bfbbc835964053afb8be4fe81" name="systemd-mini" arch="src">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="a6065b7457a1bbaa5ed7d5a88a794f66501e3644720a65bdc2e486b46dc4fde0" name="systemd-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="e6eb2664d15756fa36b9921876e0fe32a8038ef23c8a3051e0583fea87be4445" name="systemd-mini" arch="src">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="5a3e4ac0c596218a0c1fb8031139c4f314f679956da3ee25ddeb0ed6ba54ec82" name="systemd-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="f9bab328d0e5f6974ff132e94f2eb6aa0b45db20764b27e92121db69e1de9add" name="systemd-mini-bash-completion" arch="noarch">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="ae29e08b08a5c71346aee0db24f4f72051f03f99ffe6d3d6b032d5d9feaf2d16" name="systemd-mini-bash-completion" arch="noarch">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="0e95603bac71c3d9682461bb4e03bab1d83f545e80ea29031a3b28e2ec9014c1" name="systemd-mini-container-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="a4aba66bd98526e84d708d3d8ee3334623bd32eeb946848ccb69fe8411d6238b" name="systemd-mini-container-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="b8d3211702ae43e27f35bb4db0cfdaf12bf692ab50a603429e3a3e9d23f4dcf8" name="systemd-mini-coredump-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="d3e1ef123ff4f3703927222373b8f0152364a5f2dcc5cc821003ffdae0eeec63" name="systemd-mini-coredump-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="cf45aebb8ebe43f8abb7d21c5e2618aa25f6b5e40fba831f8e743be803432ee8" name="systemd-mini-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="496bfcf63456ecca9b01d324bbe8bb2dbd94db396a3989e1d517e02f32b7ce8a" name="systemd-mini-devel" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="6a52fbfe677d218309f2ef6613c0c4d4216109f48953ad60ff863cfb09605c4c" name="systemd-mini-sysvinit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="64d2f407ce6f559e75719961b39739ef55ee679d95f22552ccf8e3dac088aa54" name="systemd-mini-sysvinit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="2c27c226e83574ebfcb056118007b8f06a1569739c341883548430c35356b095" name="systemd-presets-branding-transactional-server" arch="noarch">
  <version epoch="0" ver="15.0" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1523361600">- Initial version [boo#1088893]</changelog>
  <changelog author="rbrown@suse.com" date="1523448000">- Add %pre, %post, and %prettrans scripts for improved upgrade</changelog>
  <changelog author="iforster@suse.de" date="1533729600">- Enable create-dirs-from-rpmdb.service [boo#1104179]</changelog>
</package>
<package pkgid="2bd97d10345fd11dee6e6cd0cb2ed992b93a9e0ae75a46a4887d20e7e2f44e95" name="systemd-presets-branding-transactional-server" arch="src">
  <version epoch="0" ver="15.0" rel="lp150.2.3.1"/>
  <changelog author="rbrown@suse.com" date="1523361600">- Initial version [boo#1088893]</changelog>
  <changelog author="rbrown@suse.com" date="1523448000">- Add %pre, %post, and %prettrans scripts for improved upgrade</changelog>
  <changelog author="iforster@suse.de" date="1533729600">- Enable create-dirs-from-rpmdb.service [boo#1104179]</changelog>
</package>
<package pkgid="95c6fe26383a2de012f4d7bbda3e64a4a04270886b84301571c74ba566bb70e9" name="systemd-sysvinit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="9597df66b0b16f3a807220f9f42c00088f07d3a4959cdd35c4e6fb2a14cb29f2" name="systemd-sysvinit" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="9e5c51e953427ce22585de98a5cd57cfe51f47edc32dbc000069e7c317caf548" name="taglib" arch="src">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="ebe4bb693cfd829be86be21a05ac8b351be0edc85204bd69a4eba0e30d5ab99a" name="taglib" arch="x86_64">
  <version epoch="0" ver="1.11.1" rel="lp150.3.3.1"/>
  <changelog author="cgiboudeaux@gmx.com" date="1347537600">- Update to 1.8
  * Added support for OWNE ID3 frames.
  * Changed key validation in the new PropertyMap API.
  * ID3v1::Tag::setStringHandler will no londer delete the previous handler, the caller is responsible for this.
  * File objects will also no longer delete the passed IOStream objects. It should be done in the caller code after the File object is no longer used.
  * Added ID3v2::Tag::setLatin1StringHandler for custom handling of latin1-encoded text in ID3v2 frames.
  * Fixed validation of ID3v2 frame IDs (IDs with ?0? were ignored).
  * New API for accessing tags by name.
  * New abstract I/O stream layer to allow custom I/O handlers.
  * Support for writing ID3v2.3 tags.
  * Support for various module file formats (MOD, S3M, IT, XM).
  * Support for MP4 and ASF is now enabled by default.
  * Started using atomic int operations for reference counting.
  * Added methods for checking if WMA and MP4 files are DRM-protected.
  * Added taglib_free to the C bindings.
  * New method to allow removing pictures from FLAC files.
  * Support for reading audio properties from ALAC and Musepack SV8 files.
  * Added replay-gain information to Musepack audio properties.
  * Support for APEv2 binary tags.
  * Many AudioProperties subclasses now provide information about the total number of samples.
  * Various small bug fixes.
- Drop taglib-noansiflags.patch (no longer relevant)</changelog>
  <changelog author="klaussfreire@gmail.com" date="1352376000">- Add patch taglib-1.8-version_fix.patch: fix version defines
  in taglib.h</changelog>
  <changelog author="coolo@suse.com" date="1359720000">- update license to new format</changelog>
  <changelog author="hessijames@gmail.com" date="1359979200">- Update rusxmms patch to version taglib-1.8-ds-rusxmms-r2 in order to fix bnc#780256</changelog>
  <changelog author="hessijames@gmail.com" date="1359979201">- Replace taglib-1.6-ds-rusxmms.patch with
  taglib-1.8-ds-rusxmms-r2.patch: Update rusxmms patch to also work
  with non-Russian locale (bnc#780256).</changelog>
  <changelog author="davejplater@gmail.com" date="1366891200">- Incorporated updated taglib-1.8-ds-rusxmms-r4.patch see bnc#814814
- Added built binary examples which manipulate tags from the command line
  to enable easier testing of libtag. These are in the taglib rpm.
- Created taglib-1.8-strip-rpath.patch to remove rpath from binaries.</changelog>
  <changelog author="davejplater@gmail.com" date="1366977600">- Added taglib-1.8-ds-rusxmms-r8.patch which fixes bnc#814814
- Removed old taglib-1.8-ds-rusxmms-r4.patch</changelog>
  <changelog author="davejplater@gmail.com" date="1369310400">- Added taglib-1.8-ds-rusxmms-r9.patch and deleted
  taglib-1.8-ds-rusxmms-r8.patch to fix the reopened bnc#814814</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1370779200">- JUst like the rest of the system, taglib has to be built
  with LFS support/ 64bit off_t in 32 bit archs.</changelog>
  <changelog author="jslaby@suse.com" date="1371816000">- Added-check-if-file-is-open-before-attempting-to-rea.patch: Added
  check if file is open before attempting to read tags (bnc#826228)
- Fixed Urls in .spec</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381060800">- Update to 1.9
  * Added support for the Ogg Opus file format.
  * Added support for INFO tags in WAV files.
  * Changed FileStream to use Windows file API.
  * Included taglib-config.cmd script for Windows.
  * New ID3v1::Tag methods for working directly with
    genre numbers.
  * New MPEG::File methods for checking which tags are saved in
    the file.
  * Added support for the PropertyMap API to ASF and MP4 files.
  * Added MusicBrainz identifiers to the PropertyMap API.
  * Allowed reading of MP4 cover art without an explicitly
    specified format.
  * Better parsing of corrupted FLAC files.
  * Fixed saving of PropertyMap comments without description
    into ID3v2 tags.
  * Fixed crash when parsing certain XM files.
  * Fixed compilation of unit test with clang.
  * Better handling of files that can't be open or have
    read-only permissions.
  * Improved atomic reference counting.
  * New hookable API for debug messages.
  * More complete Windows install instructions.
  * Many smaller bug fixes and performance improvements.
- Dropped taglib-1.8-ds-rusxmms-r9.patch, not required anymore
- Dropped Added-check-if-file-is-open-before-attempting-to-rea.patch
  and taglib-1.8-version_fix.patch, merged upstream</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1381320000">- Update to 1.9.1
  * Fixed binary incompatible change in TagLib::Map and TagLib::List.
  * Fixed constructing String from ByteVector.
  * Fixed compilation on MSVC with the /Zc:wchar_t- option.
  * Fixed detecting of RIFF files with invalid chunk sizes.
  * Added TagLib::MP4::PropertyMap::codec().</changelog>
  <changelog author="olaf@aepfle.de" date="1397563200">- Fix build error in 11.4
  taglib-1.9.1.uint.patch</changelog>
  <changelog author="ohering@suse.de" date="1400241600">- BuildRequire cmake &gt;= 2.8</changelog>
  <changelog author="mpluskal@suse.com" date="1451736000">- Cleanup spec file with spec-cleaner
- Use cmake macros
- Update to 1.10
  * New API for the audio length in milliseconds.
  * Added new options to the tagwriter example.
  * Added support for ID3v2 ETCO and SYLT frames.
  * Added support for album artist in PropertyMap API of MP4 files.
  * Added support for embedded frames in ID3v2 CHAP and CTOC
    frames.
  * Added support for AIFF-C files.
  * Better handling of duplicate ID3v2 tags in MPEG files.
  * Allowed generating taglib.pc on Windows.
  * Added ZLIB_SOURCE build option.
  * Fixed backwards-incompatible change in TagLib::String when
    constructing UTF16 strings.
  * Fixed crash when parsing certain FLAC files.
  * Fixed crash when encoding empty strings.
  * Fixed saving of certain XM files on OS X.
  * Changed Xiph and APE generic getters to return
    space-concatenated values.
  * Fixed possible file corruptions when removing tags from WAV
    files.
  * Added support for MP4 files with 64-bit atoms in certain 64-bit
    environments.
  * Prevented ID3v2 padding from being too large.
  * Fixed crash when parsing corrupted APE files.
  * Fixed crash when parsing corrupted WAV files.
  * Fixed crash when parsing corrupted Ogg FLAC files.
  * Fixed crash when parsing corrupted MPEG files.
  * Fixed saving empty tags in WAV files.
  * Fixed crash when parsing corrupted Musepack files.
  * Fixed possible memory leaks when parsing AIFF and WAV files.
  * Fixed crash when parsing corrupted MP4 files.
  * Stopped writing empty ID3v2 frames.
  * Fixed possible file corruptions when saving WMA files.
  * Added TagLib::MP4::Tag::isEmpty().
  * Added accessors to manipulate MP4 tags.
  * Fixed crash when parsing corrupted WavPack files.
  * Fixed seeking MPEG frames.
  * Fixed reading FLAC files with zero-sized padding blocks.
  * Added support for reading the encoder information of WMA files.
  * Added support for reading the codec of WAV files.
  * Added support for multi channel WavPack files.
  * Added support for reading the nominal bitrate of Ogg Speex
    files.
  * Added support for VBR headers in MPEG files.
  * Marked FLAC::File::streamInfoData() deprecated. It returns an
    empty ByteVector.
  * Marked FLAC::File::streamLength() deprecated. It returns zero.
  * Fixed possible file corruptions when adding an ID3v1 tag to
    FLAC files.
  * Fixed self-assignment operator in some types.
  * Fixed extraction of MP4 tag keys with an empty list.
  * Many smaller bug fixes and performance improvements.
- Drop no longer needed patches:
  * taglib-1.7.2-doxygen.patch
  * taglib-1.8-strip-rpath.patch
  * taglib-1.9.1.uint.patch</changelog>
  <changelog author="olaf@aepfle.de" date="1451908800">- Fix build in SLE_11 by disabling post-install</changelog>
  <changelog author="aloisio@gmx.com" date="1462190400">- Update to 1.11
  * Fixed reading APE items with long keys.
  * Fixed reading ID3v2 SYLT frames when description is empty.
  1.11 BETA 2:
  * Better handling of PCM WAV files with a 'fact' chunk.
  * Better handling of corrupted APE tags.
  * Efficient decoding of unsynchronized ID3v2 frames.
  * Fixed text encoding when saving certain frames in ID3v2.3
    tags.
  * Fixed updating the size of RIFF files when removing chunks.
  * Several smaller bug fixes and performance improvements.
  1.11 BETA:
  * New API for creating FileRef from IOStream.
  * Added support for ID3v2 PCST and WFED frames.
  * Added support for pictures in XiphComment.
  * Added String::clear().
  * Added FLAC::File::strip() for removing non-standard tags.
  * Added alternative functions to XiphComment::removeField().
  * Added BUILD_BINDINGS build option.
  * Added ENABLE_CCACHE build option.
  * Replaced ENABLE_STATIC build option with BUILD_SHARED_LIBS.
  * Better handling of duplicate ID3v2 tags in all kinds of
    files.
  * Better handling of duplicate tag chunks in WAV files.
  * Better handling of duplicate tag chunks in AIFF files.
  * Better handling of duplicate Vorbis comment blocks in FLAC
    files.
  * Better handling of broken MPEG audio frames.
  * Fixed crash when calling File::properties() after strip().
  * Fixed crash when parsing certain MPEG files.
  * Fixed crash when saving Ogg files.
  * Fixed possible file corruptions when saving ASF files.
  * Fixed possible file corruptions when saving FLAC files.
  * Fixed possible file corruptions when saving MP4 files.
  * Fixed possible file corruptions when saving MPEG files.
  * Fixed possible file corruptions when saving APE files.
  * Fixed possible file corruptions when saving Musepack files.
  * Fixed possible file corruptions when saving WavPack files.
  * Fixed updating the comment field of Vorbis comments.
  * Fixed reading date and time in ID3v2.3 tags.
  * Marked ByteVector::null and ByteVector::isNull()
    deprecated.
  * Marked String::null and String::isNull() deprecated.
  * Marked XiphComment::removeField() deprecated.
  * Marked Ogg::Page::getCopyWithNewPageSequenceNumber()
    deprecated. It returns null.
  * Marked custom integer types deprecated.
  * Many smaller bug fixes and performance improvements.</changelog>
  <changelog author="sbrabec@suse.com" date="1502193600">- Update to versio 1.11.1:
  * Fixed binary incompatible change in TagLib::String.
  * Fixed reading ID3v2 CTOC frames with a lot of entries.
  * Fixed seeking ByteVectorStream from the end.
- Prevent denial of service (bsc#1052699, CVE-2017-12678,
  taglib-CVE-2017-12678.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1506427200">- Cleanup bit with spec-cleaner
- Drop librcc dependency as there is no actual code dependency in taglib</changelog>
  <changelog author="kbabioch@suse.com" date="1528286400">- Added taglib-CVE-2018-11439.patch: Fix an out-of-bounds read when loading
  invalid ogg flac files (CVE-2018-11439, bsc#1096180).
- Applied spec-cleaner to specfile</changelog>
</package>
<package pkgid="5afa154c4d49caaf6e20c744e2fafe95f76a3b76be9f719acc62ffd5735baaac" name="talloc" arch="src">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="f286bfc7b38e931f55b68016b89c1a5005d161415933121d7c508d9c0b279033" name="talloc-man" arch="src">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="cc77394e85c7a41b39b40790c4164d19565d78814e7d2ce9dd2e821b64f24714" name="talloc-man" arch="x86_64">
  <version epoch="0" ver="2.1.11" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1429185600">- Update to 2.1.2.
  + Fix memory leak in SMB2 notify handling; (bso#11144).
  + fix _talloc_total_limit_size prototype
  + build: improve detection of srcdir</changelog>
  <changelog author="lmuelle@suse.com" date="1437566400">- Update to 2.1.3; (bsc#939051).
  + improved python3 bindings
  + documentation fixes regarding talloc_reference() and talloc_unlink()</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'talloc.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Update to 2.1.4; (bsc#951660).
  + Test that talloc magic differs between processes.
  + Increment minor version due to added talloc_test_get_magic.
  + Provide tests access to talloc_magic.
  + Test magic protection measures.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515201">- Rename pytalloc to python-talloc.</changelog>
  <changelog author="lmuelle@suse.com" date="1445688000">- Add python3-talloc and python3-talloc-devel; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Add doxygen at build time to add the development documentation.
- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1446984000">- Point LD_LIBRARY_PATH to the just-built libraries while calling make test.
- Create a 2nd talloc-man spec-file to avoid a build cycle.
- Recommend to install talloc-man from libtalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 2.1.5; (bsc#954658).
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455278400">- Provide python-talloc and python-talloc-devel; (bsc#966523).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="toddrme2178@gmail.com" date="1457352000">- Add talloc-python3.5-fix-soabi_name.patch: Do not change x86_64 to
  x86-64 when building with python 3.5.</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Update to 2.1.6; (bsc#954658).
  + pytalloc: Add new BaseObject
  + pytalloc: add a _pytalloc_get_type() helper function and generate
    PyExc_TypeError on mismatch
  + talloc: add _pytalloc_get_ptr/_pytalloc_get_mem_ctx helper functions
  + Improve testsuite by avoiding path issues
  + Only set public headers field when installing as a public library
  + Fix a documentation typo</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 2.1.8.
  + performance improvements
  + Fix memory leak when destructors reparent children; (bso#11901).</changelog>
  <changelog author="jmcdonough@suse.com" date="1490184000">- Update to version 2.1.9; (bsc#1032915).
  + fix some coverity defects
  + fix TALLOC_VERSION_MINOR and talloc_version_minor()
  + add new tests
  + add pytalloc_get_type()
  + add pytalloc_GenericObject_{steal,reference}[_ex]()</changelog>
  <changelog author="jmcdonough@suse.com" date="1490270400">- sle11-remove-unknown-compiler-options.patch: build SLE11 and earlier
  without -Wno-format-length.</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 2.1.10
  + build, documentation and python3 improvements
  + delete sle11-remove-unknown-compiler-options.patch, supported
    options are checked for in upstream code</changelog>
  <changelog author="jengelh@inai.de" date="1506945600">- Remove %if guards for blocks that do not affect the build result.
  Fix RPM groups and summaries. Drop very old SUSE support.
  Replace old RPM macros by new constructs.</changelog>
  <changelog author="jmcdonough@suse.com" date="1507550400">- Reference library name directly instead of using variables to
  pass obs source validator.</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 2.1.11
  + disable-python - fix talloc wscript if bundling disabled
  + Do not disclose the random talloc magic in free()'ed memory
- Changes required for adding Python3 support to the samba package.</changelog>
</package>
<package pkgid="33f7dca5970eaaba4e6694b549bcea816164672c7ba82f579fef0572bebfcb0d" name="tar" arch="src">
  <version epoch="0" ver="1.30" rel="lp150.2.3.2"/>
  <changelog author="vcizek@suse.com" date="1395835200">- fix an infinite loop in handle_option (bnc#867919 and bnc#870422)
  * added tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406548800">- don't print lone zero blocks warning (bnc#881863)
  * there are many tar implementations around that create invalid
    archives with a zero block in the middle
  * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=235820
  * added tar-ignore_lone_zero_blocks.patch from Fedora</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1406980800">- GNU tar 1.28:
  * New --checkpoint-action=totals
  * Extended checkpoint format specification
  * New option --one-top-level
  * New option --sort
  * New exclusion options:
  - -exclude-ignore=FILE
  - -exclude-ignore-recursive=FILE
  - -exclude-vcs-ignores
  * refuses to read input from and write output to a tty
- packaging changes:
  * adjust patch for context change: add_readme-tests.patch
  * remove patch applied upstream:
    tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1416484800">- compile in ACLs, Xattr and selinux support [boo#906413]</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="vcizek@suse.com" date="1423483200">- extract files recursively with --files-from (bnc#913058)
  * added tar-recursive--files-from.patch
- call autoreconf in %prep</changelog>
  <changelog author="vcizek@suse.com" date="1428926400">- Revert tar-recursive--files-from.patch because it causes regression
  (bnc#918487, bnc#919233)</changelog>
  <changelog author="svalx@svalx.net" date="1458734400">- Add add-return-values-to-backup-scripts.patch</changelog>
  <changelog author="astieger@suse.com" date="1464436800">- GNU tar 1.29:
  * New options: --verbatim-files-from, --no-verbatim-files-from
  * --null option reads file names verbatim
  * New options: --owner-map=FILE and --group-map=FILE
  * New option --clamp-mtime
  * Deprecated --preserve option removed
  * Sparse file detection - now uses SEEK_DATA/SEEK_HOLE on
    systems that support it. This allows for considerable speed-up
    in sparse-file detection. New option --hole-detection for
    algorithm selection.</changelog>
  <changelog author="kstreitova@suse.com" date="1478606400">- add tar-1.29-extract_pathname_bypass.patch to fix POINTYFEATHER
  vulnerability - GNU tar archiver can be tricked into extracting
  files and directories in the given destination, regardless of the
  path name(s) specified on the command line [bsc#1007188]
  [CVE-2016-6321]</changelog>
  <changelog author="vcizek@suse.com" date="1481803200">- update tar-1.29-extract_pathname_bypass.patch to the upstream
  one that fixes POINTYFEATHER issue but it doesn't limit append or
  create operations as the initial patch did [bsc#1012633]
  [CVE-2016-6321]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- move binaries from /bin to /usr/bin [bsc#1029977]
  * refresh tar-backup-spec-fix-paths.patch to change path of the
    tar binary from TAR=/bin/tar to TAR=/usr/bin/tar
- use spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490616000">- Disable tar-1.26-remove_O_NONBLOCK.patch - this issue has been
  fixed in tar-1.27
- backup-scripts subpackage change to noarch
- Change rpm group of tar-tests to Development/Tools/Other
- Enable rmt building, change package description
- Switch rmt to alternatives system
- Separate rmt subpackage - it can be used by different archiving
  tools as a dedicated program
- Change rmt path to /usr/bin folder - it can be used by non privileged
  users for backup purposes. Security is controlled by access rights to
  the targets and remote shell.
- Separate doc subpackage
- Remove conditions for old SUSE builds and lang subpackage
- Rename restore script to restore.sh for avoiding file conflicts
  with dump/restore</changelog>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
</package>
<package pkgid="3df4e6f9c60f95a142ed338181b6d0d8de90b7ea70602838bbe26015254f2b84" name="tar" arch="x86_64">
  <version epoch="0" ver="1.30" rel="lp150.2.3.2"/>
  <changelog author="vcizek@suse.com" date="1395835200">- fix an infinite loop in handle_option (bnc#867919 and bnc#870422)
  * added tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406548800">- don't print lone zero blocks warning (bnc#881863)
  * there are many tar implementations around that create invalid
    archives with a zero block in the middle
  * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=235820
  * added tar-ignore_lone_zero_blocks.patch from Fedora</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1406980800">- GNU tar 1.28:
  * New --checkpoint-action=totals
  * Extended checkpoint format specification
  * New option --one-top-level
  * New option --sort
  * New exclusion options:
  - -exclude-ignore=FILE
  - -exclude-ignore-recursive=FILE
  - -exclude-vcs-ignores
  * refuses to read input from and write output to a tty
- packaging changes:
  * adjust patch for context change: add_readme-tests.patch
  * remove patch applied upstream:
    tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1416484800">- compile in ACLs, Xattr and selinux support [boo#906413]</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="vcizek@suse.com" date="1423483200">- extract files recursively with --files-from (bnc#913058)
  * added tar-recursive--files-from.patch
- call autoreconf in %prep</changelog>
  <changelog author="vcizek@suse.com" date="1428926400">- Revert tar-recursive--files-from.patch because it causes regression
  (bnc#918487, bnc#919233)</changelog>
  <changelog author="svalx@svalx.net" date="1458734400">- Add add-return-values-to-backup-scripts.patch</changelog>
  <changelog author="astieger@suse.com" date="1464436800">- GNU tar 1.29:
  * New options: --verbatim-files-from, --no-verbatim-files-from
  * --null option reads file names verbatim
  * New options: --owner-map=FILE and --group-map=FILE
  * New option --clamp-mtime
  * Deprecated --preserve option removed
  * Sparse file detection - now uses SEEK_DATA/SEEK_HOLE on
    systems that support it. This allows for considerable speed-up
    in sparse-file detection. New option --hole-detection for
    algorithm selection.</changelog>
  <changelog author="kstreitova@suse.com" date="1478606400">- add tar-1.29-extract_pathname_bypass.patch to fix POINTYFEATHER
  vulnerability - GNU tar archiver can be tricked into extracting
  files and directories in the given destination, regardless of the
  path name(s) specified on the command line [bsc#1007188]
  [CVE-2016-6321]</changelog>
  <changelog author="vcizek@suse.com" date="1481803200">- update tar-1.29-extract_pathname_bypass.patch to the upstream
  one that fixes POINTYFEATHER issue but it doesn't limit append or
  create operations as the initial patch did [bsc#1012633]
  [CVE-2016-6321]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- move binaries from /bin to /usr/bin [bsc#1029977]
  * refresh tar-backup-spec-fix-paths.patch to change path of the
    tar binary from TAR=/bin/tar to TAR=/usr/bin/tar
- use spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490616000">- Disable tar-1.26-remove_O_NONBLOCK.patch - this issue has been
  fixed in tar-1.27
- backup-scripts subpackage change to noarch
- Change rpm group of tar-tests to Development/Tools/Other
- Enable rmt building, change package description
- Switch rmt to alternatives system
- Separate rmt subpackage - it can be used by different archiving
  tools as a dedicated program
- Change rmt path to /usr/bin folder - it can be used by non privileged
  users for backup purposes. Security is controlled by access rights to
  the targets and remote shell.
- Separate doc subpackage
- Remove conditions for old SUSE builds and lang subpackage
- Rename restore script to restore.sh for avoiding file conflicts
  with dump/restore</changelog>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
</package>
<package pkgid="34cc4faaac1ea3f858f767e6652feaa0776fdfa3014ce83a5377969ff46126d1" name="tar-backup-scripts" arch="noarch">
  <version epoch="0" ver="1.30" rel="lp150.2.3.2"/>
  <changelog author="vcizek@suse.com" date="1395835200">- fix an infinite loop in handle_option (bnc#867919 and bnc#870422)
  * added tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406548800">- don't print lone zero blocks warning (bnc#881863)
  * there are many tar implementations around that create invalid
    archives with a zero block in the middle
  * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=235820
  * added tar-ignore_lone_zero_blocks.patch from Fedora</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1406980800">- GNU tar 1.28:
  * New --checkpoint-action=totals
  * Extended checkpoint format specification
  * New option --one-top-level
  * New option --sort
  * New exclusion options:
  - -exclude-ignore=FILE
  - -exclude-ignore-recursive=FILE
  - -exclude-vcs-ignores
  * refuses to read input from and write output to a tty
- packaging changes:
  * adjust patch for context change: add_readme-tests.patch
  * remove patch applied upstream:
    tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1416484800">- compile in ACLs, Xattr and selinux support [boo#906413]</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="vcizek@suse.com" date="1423483200">- extract files recursively with --files-from (bnc#913058)
  * added tar-recursive--files-from.patch
- call autoreconf in %prep</changelog>
  <changelog author="vcizek@suse.com" date="1428926400">- Revert tar-recursive--files-from.patch because it causes regression
  (bnc#918487, bnc#919233)</changelog>
  <changelog author="svalx@svalx.net" date="1458734400">- Add add-return-values-to-backup-scripts.patch</changelog>
  <changelog author="astieger@suse.com" date="1464436800">- GNU tar 1.29:
  * New options: --verbatim-files-from, --no-verbatim-files-from
  * --null option reads file names verbatim
  * New options: --owner-map=FILE and --group-map=FILE
  * New option --clamp-mtime
  * Deprecated --preserve option removed
  * Sparse file detection - now uses SEEK_DATA/SEEK_HOLE on
    systems that support it. This allows for considerable speed-up
    in sparse-file detection. New option --hole-detection for
    algorithm selection.</changelog>
  <changelog author="kstreitova@suse.com" date="1478606400">- add tar-1.29-extract_pathname_bypass.patch to fix POINTYFEATHER
  vulnerability - GNU tar archiver can be tricked into extracting
  files and directories in the given destination, regardless of the
  path name(s) specified on the command line [bsc#1007188]
  [CVE-2016-6321]</changelog>
  <changelog author="vcizek@suse.com" date="1481803200">- update tar-1.29-extract_pathname_bypass.patch to the upstream
  one that fixes POINTYFEATHER issue but it doesn't limit append or
  create operations as the initial patch did [bsc#1012633]
  [CVE-2016-6321]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- move binaries from /bin to /usr/bin [bsc#1029977]
  * refresh tar-backup-spec-fix-paths.patch to change path of the
    tar binary from TAR=/bin/tar to TAR=/usr/bin/tar
- use spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490616000">- Disable tar-1.26-remove_O_NONBLOCK.patch - this issue has been
  fixed in tar-1.27
- backup-scripts subpackage change to noarch
- Change rpm group of tar-tests to Development/Tools/Other
- Enable rmt building, change package description
- Switch rmt to alternatives system
- Separate rmt subpackage - it can be used by different archiving
  tools as a dedicated program
- Change rmt path to /usr/bin folder - it can be used by non privileged
  users for backup purposes. Security is controlled by access rights to
  the targets and remote shell.
- Separate doc subpackage
- Remove conditions for old SUSE builds and lang subpackage
- Rename restore script to restore.sh for avoiding file conflicts
  with dump/restore</changelog>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
</package>
<package pkgid="e027aee8d3dbafdc080fe29af561573614a2b838334a126b92d59dc58c1816d7" name="tar-doc" arch="noarch">
  <version epoch="0" ver="1.30" rel="lp150.2.3.2"/>
  <changelog author="vcizek@suse.com" date="1395835200">- fix an infinite loop in handle_option (bnc#867919 and bnc#870422)
  * added tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406548800">- don't print lone zero blocks warning (bnc#881863)
  * there are many tar implementations around that create invalid
    archives with a zero block in the middle
  * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=235820
  * added tar-ignore_lone_zero_blocks.patch from Fedora</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1406980800">- GNU tar 1.28:
  * New --checkpoint-action=totals
  * Extended checkpoint format specification
  * New option --one-top-level
  * New option --sort
  * New exclusion options:
  - -exclude-ignore=FILE
  - -exclude-ignore-recursive=FILE
  - -exclude-vcs-ignores
  * refuses to read input from and write output to a tty
- packaging changes:
  * adjust patch for context change: add_readme-tests.patch
  * remove patch applied upstream:
    tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1416484800">- compile in ACLs, Xattr and selinux support [boo#906413]</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="vcizek@suse.com" date="1423483200">- extract files recursively with --files-from (bnc#913058)
  * added tar-recursive--files-from.patch
- call autoreconf in %prep</changelog>
  <changelog author="vcizek@suse.com" date="1428926400">- Revert tar-recursive--files-from.patch because it causes regression
  (bnc#918487, bnc#919233)</changelog>
  <changelog author="svalx@svalx.net" date="1458734400">- Add add-return-values-to-backup-scripts.patch</changelog>
  <changelog author="astieger@suse.com" date="1464436800">- GNU tar 1.29:
  * New options: --verbatim-files-from, --no-verbatim-files-from
  * --null option reads file names verbatim
  * New options: --owner-map=FILE and --group-map=FILE
  * New option --clamp-mtime
  * Deprecated --preserve option removed
  * Sparse file detection - now uses SEEK_DATA/SEEK_HOLE on
    systems that support it. This allows for considerable speed-up
    in sparse-file detection. New option --hole-detection for
    algorithm selection.</changelog>
  <changelog author="kstreitova@suse.com" date="1478606400">- add tar-1.29-extract_pathname_bypass.patch to fix POINTYFEATHER
  vulnerability - GNU tar archiver can be tricked into extracting
  files and directories in the given destination, regardless of the
  path name(s) specified on the command line [bsc#1007188]
  [CVE-2016-6321]</changelog>
  <changelog author="vcizek@suse.com" date="1481803200">- update tar-1.29-extract_pathname_bypass.patch to the upstream
  one that fixes POINTYFEATHER issue but it doesn't limit append or
  create operations as the initial patch did [bsc#1012633]
  [CVE-2016-6321]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- move binaries from /bin to /usr/bin [bsc#1029977]
  * refresh tar-backup-spec-fix-paths.patch to change path of the
    tar binary from TAR=/bin/tar to TAR=/usr/bin/tar
- use spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490616000">- Disable tar-1.26-remove_O_NONBLOCK.patch - this issue has been
  fixed in tar-1.27
- backup-scripts subpackage change to noarch
- Change rpm group of tar-tests to Development/Tools/Other
- Enable rmt building, change package description
- Switch rmt to alternatives system
- Separate rmt subpackage - it can be used by different archiving
  tools as a dedicated program
- Change rmt path to /usr/bin folder - it can be used by non privileged
  users for backup purposes. Security is controlled by access rights to
  the targets and remote shell.
- Separate doc subpackage
- Remove conditions for old SUSE builds and lang subpackage
- Rename restore script to restore.sh for avoiding file conflicts
  with dump/restore</changelog>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
</package>
<package pkgid="837591de1f9c51080fb53b60d1032b99b24fcf34b2b928f1a26e3df3c42cf0b9" name="tar-lang" arch="noarch">
  <version epoch="0" ver="1.30" rel="lp150.2.3.2"/>
  <changelog author="vcizek@suse.com" date="1395835200">- fix an infinite loop in handle_option (bnc#867919 and bnc#870422)
  * added tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406548800">- don't print lone zero blocks warning (bnc#881863)
  * there are many tar implementations around that create invalid
    archives with a zero block in the middle
  * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=235820
  * added tar-ignore_lone_zero_blocks.patch from Fedora</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1406980800">- GNU tar 1.28:
  * New --checkpoint-action=totals
  * Extended checkpoint format specification
  * New option --one-top-level
  * New option --sort
  * New exclusion options:
  - -exclude-ignore=FILE
  - -exclude-ignore-recursive=FILE
  - -exclude-vcs-ignores
  * refuses to read input from and write output to a tty
- packaging changes:
  * adjust patch for context change: add_readme-tests.patch
  * remove patch applied upstream:
    tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1416484800">- compile in ACLs, Xattr and selinux support [boo#906413]</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="vcizek@suse.com" date="1423483200">- extract files recursively with --files-from (bnc#913058)
  * added tar-recursive--files-from.patch
- call autoreconf in %prep</changelog>
  <changelog author="vcizek@suse.com" date="1428926400">- Revert tar-recursive--files-from.patch because it causes regression
  (bnc#918487, bnc#919233)</changelog>
  <changelog author="svalx@svalx.net" date="1458734400">- Add add-return-values-to-backup-scripts.patch</changelog>
  <changelog author="astieger@suse.com" date="1464436800">- GNU tar 1.29:
  * New options: --verbatim-files-from, --no-verbatim-files-from
  * --null option reads file names verbatim
  * New options: --owner-map=FILE and --group-map=FILE
  * New option --clamp-mtime
  * Deprecated --preserve option removed
  * Sparse file detection - now uses SEEK_DATA/SEEK_HOLE on
    systems that support it. This allows for considerable speed-up
    in sparse-file detection. New option --hole-detection for
    algorithm selection.</changelog>
  <changelog author="kstreitova@suse.com" date="1478606400">- add tar-1.29-extract_pathname_bypass.patch to fix POINTYFEATHER
  vulnerability - GNU tar archiver can be tricked into extracting
  files and directories in the given destination, regardless of the
  path name(s) specified on the command line [bsc#1007188]
  [CVE-2016-6321]</changelog>
  <changelog author="vcizek@suse.com" date="1481803200">- update tar-1.29-extract_pathname_bypass.patch to the upstream
  one that fixes POINTYFEATHER issue but it doesn't limit append or
  create operations as the initial patch did [bsc#1012633]
  [CVE-2016-6321]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- move binaries from /bin to /usr/bin [bsc#1029977]
  * refresh tar-backup-spec-fix-paths.patch to change path of the
    tar binary from TAR=/bin/tar to TAR=/usr/bin/tar
- use spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490616000">- Disable tar-1.26-remove_O_NONBLOCK.patch - this issue has been
  fixed in tar-1.27
- backup-scripts subpackage change to noarch
- Change rpm group of tar-tests to Development/Tools/Other
- Enable rmt building, change package description
- Switch rmt to alternatives system
- Separate rmt subpackage - it can be used by different archiving
  tools as a dedicated program
- Change rmt path to /usr/bin folder - it can be used by non privileged
  users for backup purposes. Security is controlled by access rights to
  the targets and remote shell.
- Separate doc subpackage
- Remove conditions for old SUSE builds and lang subpackage
- Rename restore script to restore.sh for avoiding file conflicts
  with dump/restore</changelog>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
</package>
<package pkgid="3ff594a312cfe04689fb19ba8519de918b079a9938f1b81dbcd6c8ae5fe9189b" name="tar-rmt" arch="x86_64">
  <version epoch="0" ver="1.30" rel="lp150.2.3.2"/>
  <changelog author="vcizek@suse.com" date="1395835200">- fix an infinite loop in handle_option (bnc#867919 and bnc#870422)
  * added tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406548800">- don't print lone zero blocks warning (bnc#881863)
  * there are many tar implementations around that create invalid
    archives with a zero block in the middle
  * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=235820
  * added tar-ignore_lone_zero_blocks.patch from Fedora</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1406980800">- GNU tar 1.28:
  * New --checkpoint-action=totals
  * Extended checkpoint format specification
  * New option --one-top-level
  * New option --sort
  * New exclusion options:
  - -exclude-ignore=FILE
  - -exclude-ignore-recursive=FILE
  - -exclude-vcs-ignores
  * refuses to read input from and write output to a tty
- packaging changes:
  * adjust patch for context change: add_readme-tests.patch
  * remove patch applied upstream:
    tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1416484800">- compile in ACLs, Xattr and selinux support [boo#906413]</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="vcizek@suse.com" date="1423483200">- extract files recursively with --files-from (bnc#913058)
  * added tar-recursive--files-from.patch
- call autoreconf in %prep</changelog>
  <changelog author="vcizek@suse.com" date="1428926400">- Revert tar-recursive--files-from.patch because it causes regression
  (bnc#918487, bnc#919233)</changelog>
  <changelog author="svalx@svalx.net" date="1458734400">- Add add-return-values-to-backup-scripts.patch</changelog>
  <changelog author="astieger@suse.com" date="1464436800">- GNU tar 1.29:
  * New options: --verbatim-files-from, --no-verbatim-files-from
  * --null option reads file names verbatim
  * New options: --owner-map=FILE and --group-map=FILE
  * New option --clamp-mtime
  * Deprecated --preserve option removed
  * Sparse file detection - now uses SEEK_DATA/SEEK_HOLE on
    systems that support it. This allows for considerable speed-up
    in sparse-file detection. New option --hole-detection for
    algorithm selection.</changelog>
  <changelog author="kstreitova@suse.com" date="1478606400">- add tar-1.29-extract_pathname_bypass.patch to fix POINTYFEATHER
  vulnerability - GNU tar archiver can be tricked into extracting
  files and directories in the given destination, regardless of the
  path name(s) specified on the command line [bsc#1007188]
  [CVE-2016-6321]</changelog>
  <changelog author="vcizek@suse.com" date="1481803200">- update tar-1.29-extract_pathname_bypass.patch to the upstream
  one that fixes POINTYFEATHER issue but it doesn't limit append or
  create operations as the initial patch did [bsc#1012633]
  [CVE-2016-6321]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- move binaries from /bin to /usr/bin [bsc#1029977]
  * refresh tar-backup-spec-fix-paths.patch to change path of the
    tar binary from TAR=/bin/tar to TAR=/usr/bin/tar
- use spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490616000">- Disable tar-1.26-remove_O_NONBLOCK.patch - this issue has been
  fixed in tar-1.27
- backup-scripts subpackage change to noarch
- Change rpm group of tar-tests to Development/Tools/Other
- Enable rmt building, change package description
- Switch rmt to alternatives system
- Separate rmt subpackage - it can be used by different archiving
  tools as a dedicated program
- Change rmt path to /usr/bin folder - it can be used by non privileged
  users for backup purposes. Security is controlled by access rights to
  the targets and remote shell.
- Separate doc subpackage
- Remove conditions for old SUSE builds and lang subpackage
- Rename restore script to restore.sh for avoiding file conflicts
  with dump/restore</changelog>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
</package>
<package pkgid="1a6d448bd730a139b37c13a72d1f5679808cdb09ba777dbefc53dc2c56399618" name="tar-tests" arch="x86_64">
  <version epoch="0" ver="1.30" rel="lp150.2.3.2"/>
  <changelog author="vcizek@suse.com" date="1395835200">- fix an infinite loop in handle_option (bnc#867919 and bnc#870422)
  * added tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="vcizek@suse.com" date="1406548800">- don't print lone zero blocks warning (bnc#881863)
  * there are many tar implementations around that create invalid
    archives with a zero block in the middle
  * https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=235820
  * added tar-ignore_lone_zero_blocks.patch from Fedora</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1406980800">- GNU tar 1.28:
  * New --checkpoint-action=totals
  * Extended checkpoint format specification
  * New option --one-top-level
  * New option --sort
  * New exclusion options:
  - -exclude-ignore=FILE
  - -exclude-ignore-recursive=FILE
  - -exclude-vcs-ignores
  * refuses to read input from and write output to a tty
- packaging changes:
  * adjust patch for context change: add_readme-tests.patch
  * remove patch applied upstream:
    tar-fix_eternal_loop_in_handle_option.patch</changelog>
  <changelog author="jengelh@inai.de" date="1409313600">- Improve on RPM group classification</changelog>
  <changelog author="andreas.stieger@gmx.de" date="1416484800">- compile in ACLs, Xattr and selinux support [boo#906413]</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="vcizek@suse.com" date="1423483200">- extract files recursively with --files-from (bnc#913058)
  * added tar-recursive--files-from.patch
- call autoreconf in %prep</changelog>
  <changelog author="vcizek@suse.com" date="1428926400">- Revert tar-recursive--files-from.patch because it causes regression
  (bnc#918487, bnc#919233)</changelog>
  <changelog author="svalx@svalx.net" date="1458734400">- Add add-return-values-to-backup-scripts.patch</changelog>
  <changelog author="astieger@suse.com" date="1464436800">- GNU tar 1.29:
  * New options: --verbatim-files-from, --no-verbatim-files-from
  * --null option reads file names verbatim
  * New options: --owner-map=FILE and --group-map=FILE
  * New option --clamp-mtime
  * Deprecated --preserve option removed
  * Sparse file detection - now uses SEEK_DATA/SEEK_HOLE on
    systems that support it. This allows for considerable speed-up
    in sparse-file detection. New option --hole-detection for
    algorithm selection.</changelog>
  <changelog author="kstreitova@suse.com" date="1478606400">- add tar-1.29-extract_pathname_bypass.patch to fix POINTYFEATHER
  vulnerability - GNU tar archiver can be tricked into extracting
  files and directories in the given destination, regardless of the
  path name(s) specified on the command line [bsc#1007188]
  [CVE-2016-6321]</changelog>
  <changelog author="vcizek@suse.com" date="1481803200">- update tar-1.29-extract_pathname_bypass.patch to the upstream
  one that fixes POINTYFEATHER issue but it doesn't limit append or
  create operations as the initial patch did [bsc#1012633]
  [CVE-2016-6321]</changelog>
  <changelog author="kstreitova@suse.com" date="1490270400">- move binaries from /bin to /usr/bin [bsc#1029977]
  * refresh tar-backup-spec-fix-paths.patch to change path of the
    tar binary from TAR=/bin/tar to TAR=/usr/bin/tar
- use spec-cleaner</changelog>
  <changelog author="svalx@svalx.net" date="1490616000">- Disable tar-1.26-remove_O_NONBLOCK.patch - this issue has been
  fixed in tar-1.27
- backup-scripts subpackage change to noarch
- Change rpm group of tar-tests to Development/Tools/Other
- Enable rmt building, change package description
- Switch rmt to alternatives system
- Separate rmt subpackage - it can be used by different archiving
  tools as a dedicated program
- Change rmt path to /usr/bin folder - it can be used by non privileged
  users for backup purposes. Security is controlled by access rights to
  the targets and remote shell.
- Separate doc subpackage
- Remove conditions for old SUSE builds and lang subpackage
- Rename restore script to restore.sh for avoiding file conflicts
  with dump/restore</changelog>
  <changelog author="svalx@svalx.net" date="1491220800">- Use update-alternatives according to current documentation</changelog>
  <changelog author="kstreitova@suse.com" date="1492689600">- remove tar-1.26-remove_O_NONBLOCK.patch as this issue was fixed
  in tar 1.27 (commit 03858cf583ce299b836d8a848967ce290a6bf303)</changelog>
  <changelog author="avindra@opensuse.org" date="1513598400">- GNU tar 1.30:
  * Member names containing '..' components are now skipped when
    extracting.
  * Report erroneous use of position-sensitive options.
  * --numeric-owner now affects private headers too.
  * Fixed the --delay-directory-restore option
  * The --warnings=failed-read option
  * The --warnings=none option now suppresses all warnings
  * Fix reporting of hardlink mismatches during compare
- cleanup with spec-cleaner
- switch all urls to https
- drop upstreamed patches
  * add-return-values-to-backup-scripts.patch
  * tar-1.29-extract_pathname_bypass.patch
- rebase add_readme-tests.patch</changelog>
  <changelog author="kstreitova@suse.com" date="1515067200">- add tar-1.30-tests-difflink.patch to fix difflink.at test
  (https://www.mail-archive.com/bug-tar@gnu.org/msg05440.html)</changelog>
  <changelog author="kukuk@suse.de" date="1522756800">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kstreitova@suse.com" date="1526040000">- add tar-1.30-tests_dirrem_race.patch to fix race in dirrem01 and
  dirrem02 tests that were passing/failing randomly because of that
- run spec-cleaner
- renumber patches</changelog>
</package>
<package pkgid="32f66eca32fd0edc7049dcf7d777ccdab31a9d17e51ac55a2017e7185a19d353" name="terminator" arch="noarch">
  <version epoch="0" ver="1.91" rel="lp150.3.3.1"/>
  <changelog author="Chris Jones &lt;cmsj@tenshu.net&gt; 0.91-1" date="1270036800">- Update to fix some stupid release bugs in 0.90.
    Note that this specfile is untested.</changelog>
  <changelog author="Stefan Lijewski &lt;lijewski.stefan@gmail.com&gt; 0.95" date="1285070400">-initial changelog for openSuse</changelog>
  <changelog author="Stefan Lijewski &lt;lijewski.stefan@gmail.com&gt; 0.95" date="1299844800">- Fix build bug about directories in openSuSE 11.4</changelog>
  <changelog author="Stefan Lijewski &lt;lijewski.stefan@gmail.com&gt; 0.95" date="1300104000">- Fix dependencies bug (bug id 679206)</changelog>
  <changelog author="lijewski.stefan@gmail.com" date="1302004800">- fix openSUSE:Factory build missing lang files</changelog>
  <changelog author="lijewski.stefan@gmail.com" date="1321531200">- update to 0.96 - for details see package changelog</changelog>
  <changelog author="lijewski.stefan@gmail.com" date="1321617600">- fix build on 12.1</changelog>
  <changelog author="lijewski.stefan@zabka.pl" date="1327579200">- spec cleanup
- split languge package
- add python-keybinder recomends</changelog>
  <changelog author="saschpe@suse.de" date="1331812800">- Some more spec cleanup</changelog>
  <changelog author="rbrownccb@opensuse.org" date="1380024000">- update to 0.97
- bug fixes incl. bnc#842059
- for details see package changelog</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post/postun scripts</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 0.98:
  * Run the macro scriptlets for icons/desktop files
  * Adjust filelist for the current state
  * Fix few tiny rpmlint warnings
- Add patch:
  * 0001-terminator-fix-RHBZ#1268289.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1485259200">- Version update to 1.0:
  * Few last fixes from 0.98 marking last release using gtk2
- Drop merged patch:
  * 0001-terminator-fix-RHBZ#1268289.patch
- Drop support for SLE-11</changelog>
  <changelog author="tchvatal@suse.com" date="1485259201">- Version update to 1.90 release:
  * Switch to gtk3 RC release</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Fix dependency chain (auto-detection, boo#1023712):
  + Add gobject-introspection BuildRequires
  + Drop typlib-1_0-Keybinder-3_0 Requires: it is being
    auto-detected.
  + Drop vte Requires: this is provided by the library, but the
    terminator code does not interact with it directly. It uses
    the g-i bindings only.
  + Drop python-vte Requires: since the app was ported to be
    gobject introspected, the legacy python-vte is no longer
    needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486555200">- Filter out auto-detected typelib(Gnome) dependency. This does not
  exist on recent GNOME desktops and terminator's code can handle
  it as an optional feature (boo#1024260).</changelog>
  <changelog author="scabrero@suse.com" date="1511956800">- Version update to 1.91 release:
  * No significant new features. Just minor enhancements and lots
    of fixes.</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Fix URL and format with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Add direct dependency on python-gobject-Gdk without it the pkg
  fails on not finding the screen</changelog>
  <changelog author="tchvatal@suse.com" date="1535371200">- Add dependency on python-cairo wrt bug#1105830</changelog>
</package>
<package pkgid="64a3d5364a276bd32f126bb5c9a7dff18db8f9d0e12800c147ad8f32cbde2b58" name="terminator" arch="src">
  <version epoch="0" ver="1.91" rel="lp150.3.3.1"/>
  <changelog author="Chris Jones &lt;cmsj@tenshu.net&gt; 0.91-1" date="1270036800">- Update to fix some stupid release bugs in 0.90.
    Note that this specfile is untested.</changelog>
  <changelog author="Stefan Lijewski &lt;lijewski.stefan@gmail.com&gt; 0.95" date="1285070400">-initial changelog for openSuse</changelog>
  <changelog author="Stefan Lijewski &lt;lijewski.stefan@gmail.com&gt; 0.95" date="1299844800">- Fix build bug about directories in openSuSE 11.4</changelog>
  <changelog author="Stefan Lijewski &lt;lijewski.stefan@gmail.com&gt; 0.95" date="1300104000">- Fix dependencies bug (bug id 679206)</changelog>
  <changelog author="lijewski.stefan@gmail.com" date="1302004800">- fix openSUSE:Factory build missing lang files</changelog>
  <changelog author="lijewski.stefan@gmail.com" date="1321531200">- update to 0.96 - for details see package changelog</changelog>
  <changelog author="lijewski.stefan@gmail.com" date="1321617600">- fix build on 12.1</changelog>
  <changelog author="lijewski.stefan@zabka.pl" date="1327579200">- spec cleanup
- split languge package
- add python-keybinder recomends</changelog>
  <changelog author="saschpe@suse.de" date="1331812800">- Some more spec cleanup</changelog>
  <changelog author="rbrownccb@opensuse.org" date="1380024000">- update to 0.97
- bug fixes incl. bnc#842059
- for details see package changelog</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post/postun scripts</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 0.98:
  * Run the macro scriptlets for icons/desktop files
  * Adjust filelist for the current state
  * Fix few tiny rpmlint warnings
- Add patch:
  * 0001-terminator-fix-RHBZ#1268289.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1485259200">- Version update to 1.0:
  * Few last fixes from 0.98 marking last release using gtk2
- Drop merged patch:
  * 0001-terminator-fix-RHBZ#1268289.patch
- Drop support for SLE-11</changelog>
  <changelog author="tchvatal@suse.com" date="1485259201">- Version update to 1.90 release:
  * Switch to gtk3 RC release</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Fix dependency chain (auto-detection, boo#1023712):
  + Add gobject-introspection BuildRequires
  + Drop typlib-1_0-Keybinder-3_0 Requires: it is being
    auto-detected.
  + Drop vte Requires: this is provided by the library, but the
    terminator code does not interact with it directly. It uses
    the g-i bindings only.
  + Drop python-vte Requires: since the app was ported to be
    gobject introspected, the legacy python-vte is no longer
    needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486555200">- Filter out auto-detected typelib(Gnome) dependency. This does not
  exist on recent GNOME desktops and terminator's code can handle
  it as an optional feature (boo#1024260).</changelog>
  <changelog author="scabrero@suse.com" date="1511956800">- Version update to 1.91 release:
  * No significant new features. Just minor enhancements and lots
    of fixes.</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Fix URL and format with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Add direct dependency on python-gobject-Gdk without it the pkg
  fails on not finding the screen</changelog>
  <changelog author="tchvatal@suse.com" date="1535371200">- Add dependency on python-cairo wrt bug#1105830</changelog>
</package>
<package pkgid="2a90b00929fd45cb87624af6e1e7d9129cbfdb4a59487dff3e9b69bda813b986" name="terminator-lang" arch="noarch">
  <version epoch="0" ver="1.91" rel="lp150.3.3.1"/>
  <changelog author="Chris Jones &lt;cmsj@tenshu.net&gt; 0.91-1" date="1270036800">- Update to fix some stupid release bugs in 0.90.
    Note that this specfile is untested.</changelog>
  <changelog author="Stefan Lijewski &lt;lijewski.stefan@gmail.com&gt; 0.95" date="1285070400">-initial changelog for openSuse</changelog>
  <changelog author="Stefan Lijewski &lt;lijewski.stefan@gmail.com&gt; 0.95" date="1299844800">- Fix build bug about directories in openSuSE 11.4</changelog>
  <changelog author="Stefan Lijewski &lt;lijewski.stefan@gmail.com&gt; 0.95" date="1300104000">- Fix dependencies bug (bug id 679206)</changelog>
  <changelog author="lijewski.stefan@gmail.com" date="1302004800">- fix openSUSE:Factory build missing lang files</changelog>
  <changelog author="lijewski.stefan@gmail.com" date="1321531200">- update to 0.96 - for details see package changelog</changelog>
  <changelog author="lijewski.stefan@gmail.com" date="1321617600">- fix build on 12.1</changelog>
  <changelog author="lijewski.stefan@zabka.pl" date="1327579200">- spec cleanup
- split languge package
- add python-keybinder recomends</changelog>
  <changelog author="saschpe@suse.de" date="1331812800">- Some more spec cleanup</changelog>
  <changelog author="rbrownccb@opensuse.org" date="1380024000">- update to 0.97
- bug fixes incl. bnc#842059
- for details see package changelog</changelog>
  <changelog author="Led &lt;ledest@gmail.com&gt;" date="1415448000">- fix bashisms in post/postun scripts</changelog>
  <changelog author="tchvatal@suse.com" date="1455969600">- Version update to 0.98:
  * Run the macro scriptlets for icons/desktop files
  * Adjust filelist for the current state
  * Fix few tiny rpmlint warnings
- Add patch:
  * 0001-terminator-fix-RHBZ#1268289.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1485259200">- Version update to 1.0:
  * Few last fixes from 0.98 marking last release using gtk2
- Drop merged patch:
  * 0001-terminator-fix-RHBZ#1268289.patch
- Drop support for SLE-11</changelog>
  <changelog author="tchvatal@suse.com" date="1485259201">- Version update to 1.90 release:
  * Switch to gtk3 RC release</changelog>
  <changelog author="dimstar@opensuse.org" date="1486382400">- Fix dependency chain (auto-detection, boo#1023712):
  + Add gobject-introspection BuildRequires
  + Drop typlib-1_0-Keybinder-3_0 Requires: it is being
    auto-detected.
  + Drop vte Requires: this is provided by the library, but the
    terminator code does not interact with it directly. It uses
    the g-i bindings only.
  + Drop python-vte Requires: since the app was ported to be
    gobject introspected, the legacy python-vte is no longer
    needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1486555200">- Filter out auto-detected typelib(Gnome) dependency. This does not
  exist on recent GNOME desktops and terminator's code can handle
  it as an optional feature (boo#1024260).</changelog>
  <changelog author="scabrero@suse.com" date="1511956800">- Version update to 1.91 release:
  * No significant new features. Just minor enhancements and lots
    of fixes.</changelog>
  <changelog author="tchvatal@suse.com" date="1521806400">- Fix URL and format with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1524052800">- Add direct dependency on python-gobject-Gdk without it the pkg
  fails on not finding the screen</changelog>
  <changelog author="tchvatal@suse.com" date="1535371200">- Add dependency on python-cairo wrt bug#1105830</changelog>
</package>
<package pkgid="448a18c0435cad7f3f8ddf2f08a87bb15a61e096bd2f6ef235f258b59a362446" name="tevent" arch="src">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="1ce3f8ea9bb569f78e1749a43f033db63741bde4c3efb535df20a20781e07b56" name="tevent-man" arch="src">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="1a8beda64e381322bdc1d9fa8815c0da34d68cc1c81565c993b4538d8f262e3a" name="tevent-man" arch="x86_64">
  <version epoch="0" ver="0.9.36" rel="lp150.2.3.1"/>
  <changelog author="lmuelle@suse.com" date="1435406400">- Update to 0.9.25.
  + Fix compile error in Solaris ports backend.
  + Fix access after free in tevent_common_check_signal(); (bso#11308).
  + Improve pytevent bindings.
  + Testsuite fixes.
  + Improve the documentation of the tevent_add_fd() assumtions. It must be
    talloc_free'ed before closing the fd! (bso##11141); (bso#11316).</changelog>
  <changelog author="dimstar@opensuse.org" date="1440072000">- Create 2nd spec-file tevent-man.spec: build the man pages in a
  separate cycle in order to avoid the follwing build cycle:
  doxygen -&gt; curl -&gt; krb5-mini -&gt; libverto -&gt; tevent -&gt; doxygen.
- Recommend tevent-man for installation.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627200">- Update the Samba Library Distribution Key file 'tevent.keyring';
  (bso#945116).</changelog>
  <changelog author="lmuelle@suse.com" date="1441627201">- Remove superfluous _name define.</changelog>
  <changelog author="lmuelle@suse.com" date="1441627202">- Recommend to install tevent-man from libtevent-devel on post-10.3 systems.</changelog>
  <changelog author="lmuelle@suse.com" date="1445515200">- Require python-talloc-devel instead of pytalloc-devel.</changelog>
  <changelog author="lmuelle@suse.com" date="1445774400">- Add python3-tevent; (bsc#951911).</changelog>
  <changelog author="lmuelle@suse.com" date="1446206400">- Disable rpath-install and silent-rules while configure.</changelog>
  <changelog author="lmuelle@suse.com" date="1447243200">- Update to 0.9.26; (bsc#954658).
  + New tevent_thread_proxy API
  + Minor build fixes</changelog>
  <changelog author="lmuelle@suse.com" date="1455883200">- Update to 0.9.28; (bsc#954658).
  + Fix memory leak when old signal action restored (bso#11742).
- Update to 0.9.27.
  + Fix bug in poll backend - poll_event_loop_poll() exits the for loop on
    POLLNVAL instead of continuing to find an event that is ready.
  + Fix ETIME handling for Solaris event ports (bso#11728).</changelog>
  <changelog author="lmuelle@suse.com" date="1456056000">- Avoid a file collision for non SUSE build targets; (bsc#966174).</changelog>
  <changelog author="lmuelle@suse.com" date="1458043200">- Require talloc 2.1.6 at build-time; (bsc#954658).</changelog>
  <changelog author="jmcdonough@suse.com" date="1473854400">- Update to version 0.9.29.
  + performance improvements.</changelog>
  <changelog author="ddiss@suse.com" date="1485259200">- Update to version 0.9.31; (bsc#1032915).
  + Add tevent_req_reset_endtime
  + Make talloc_free safe when threaded_contexts exist
  + Add tevent_update_timer
  + Factor out tevent_common_insert_timer
  + Add threaded immediate activation</changelog>
  <changelog author="aaptel@suse.com" date="1486036800">- Use https urls.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Drop redundant PreReq for ldconfig; this is autodetected.
  Set RPM group right.</changelog>
  <changelog author="scabrero@suse.com" date="1498824000">- Update to version 0.9.32
  + Fix mutex locking in tevent_threaded_context_destructor().
  + Fix a memleak on FreeBSD.
  + Re-init threading in tevent_re_initialise().
  + Include the finish location in tevent_req_default_print().</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Update to version 0.9.33
  + make tevent_req_print() more robust against crashes</changelog>
  <changelog author="scabrero@suse.com" date="1511870400">- Update to version 0.9.34; (bsc#1069666);
  + Remove unused select backend
  + Fix a race condition in tevent_threaded_schedule_immediate();
    (bso#13130);</changelog>
  <changelog author="jmcdonough@suse.com" date="1521201600">- Update to version 0.9.36; (bso#13291);
  + improve documentation of tevent_queue_add_optimize_empty()
  + add tevent_queue_entry_untrigger()
  + Minor cleanup. wakeup_fd can always be gotten from the event context.
  + Use smb_set_close_on_exec() in example code.
- Use tirpc on newer sytems</changelog>
</package>
<package pkgid="dece801d31db1d1b980af6b66066bc7973b9c86f0b8ca956c23ce8d418e6c167" name="texlive" arch="src">
  <version epoch="0" ver="2017.20170520" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="902ae874dc98a33995e9401f4d4b9832ad1c24ef7a27e8b8a2a9af7a060271f2" name="texlive" arch="x86_64">
  <version epoch="0" ver="2017.20170520" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="2771bb8bfcb08ce7c14b0175f7d739f00a5f38ad0e7ff8c809de3da849771ee6" name="texlive-a2ping-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn27321" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="85abd4808e3879932d40c106208603368b5d311dcb8e1af7bb544683412683ca" name="texlive-accfonts-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn12688" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="888a47f93192c33125b2bf517940f775d831aeee4e88730fe04b989cfb5bb16e" name="texlive-adhocfilelist-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn28038" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="2780b3e701f636ec70f12944667e8e979ebd3df599640098a9ec6ca529cf0f70" name="texlive-afm2pl-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="3e1f79868327b91e74d5857118e15824814e23dc54918ae422628607f460d175" name="texlive-aleph-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c978640063d12848b7c9cf86c6b1bc5c150cfd01e6f843e2781bc185bff894af" name="texlive-amstex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn3006" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="a97932419e3e534d8aa35ada393b694d42610d0e967c04a778ed1b2c3a65f64d" name="texlive-arara-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29036" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="245dfd6827169d5f1d999cfe292dfc5ab793516669d40eb16f7aa3feeda6238f" name="texlive-asymptote-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn43843" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="70ee798a8995f79cf05e47d70ea1d979d3602fa35db7cb9bdd2af3d7db09b9f7" name="texlive-authorindex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn18790" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="f28e5e50245544e73d611e46789568236c48b4ea3a15c5956cb8c8b70a0e30c4" name="texlive-autosp-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ed8e633963edf7b930ebdb22e37c56cc0379cd8dda13081abd31775f6b7d142c" name="texlive-biber-bin" arch="noarch">
  <version epoch="0" ver="2017.20170520.svn42679" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="6b73b4e4ad522b54a04fa9b8c1e70fdc00cf8f3d6fdede15206f300dd13ed6b3" name="texlive-bibexport-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn16219" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ffc502381f57cb299db6650a138d515f0c25cbbe26f0aefb3a33618d1e5fc97c" name="texlive-bibtex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="e6503f8ed59819dfb341eb8479852e668c86345fb3d7d8c236c41d4d0b252d95" name="texlive-bibtex8-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="b8ac915882007fff1b2c4cd9fef0c258150eb735965c32b58ec2dc5d534ae2f2" name="texlive-bibtexu-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="74b258bfb1755705d61517b8c04193d441fd0b5863c300b4ed6ae2a883bcf9a5" name="texlive-bin-devel" arch="x86_64">
  <version epoch="0" ver="2017.20170520" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="5f56c63b338be4a9513714465143dc89b8239ca09aec96163257e0e49104b698" name="texlive-bundledoc-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn17794" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c9017945aa2e73afbd10afb1271113e635f3ce952f9878fdf5c33dbaafb0c110" name="texlive-cachepic-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn15543" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d61f53f398ea85623360f58c009d2043e5416d6f7281415c80c0c6fb140bad33" name="texlive-checkcites-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn25623" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="18e97418c3a1dada215e02f4f6aee3dae94c180065b38860a420d9ab369559df" name="texlive-checklistings-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn38300" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="843fda0e58b36a413431ce9ead58342f164e70d32e0036f2873ed068ca9d1844" name="texlive-chktex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="8cea7e920f1cc6dc06c996f32170d56f153ebef9bf5761f777f71e2f9a3b527f" name="texlive-cjk-gs-integrate-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn37223" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="58d6b2840d9dbcbda600b9296a6fafc72bb5876952244c3d3af109d0b8f60a31" name="texlive-cjkutils-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="9d570cd952e012921967be40895314336425384385f421338381df787a7d92d7" name="texlive-context-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn34112" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="cbe638fbac3b6e8d76f6a4bb0e368609f69016d8049d3d09d6d05f15dbbe70ef" name="texlive-convbkmk-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn30408" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c3622e80bb07f3a17b5f0a262ad422a948ec69f767a375962d6face7b425e7e3" name="texlive-crossrefware-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn43866" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="aa5b84884054859b2a4794a998ab5bd7246862bdd3370e2c84cfec1021ffb2a6" name="texlive-cslatex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn3006" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="73949e8c199650e66ecbc7ddf2e4bb582fe7d13d07ccf26e19c53ac367cf6469" name="texlive-csplain-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn33902" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="e5e4a0baeaa13b2fb3f887c751959842c1e7a6a1ad41c85820fe12b0fcad2cf3" name="texlive-ctanify-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn24061" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="147c9d2f3d1575c4876292e619e35d4a385fa4d0b545591d9ca3c2a10b740a6a" name="texlive-ctanupload-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn23866" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d75e16d6931372b3b143a9e602538b86ea000de1fca5faf858bfebcab143d4f9" name="texlive-ctie-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d781f074f35355a2aaf0aedc8821206c2415fb8daf7b6d9bfa74aaeff475cffe" name="texlive-cweb-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="282988521b038acc9bf398b6d24881690fa33dae88404dd2be11d6906984390b" name="texlive-cyrillic-bin-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29741" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="aaae7a233e882d4786237e2189215dcbb4bbb0c5c3bfd284f4d0bf329d3a1680" name="texlive-de-macro-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn17399" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="dc59cd717d2b8d4b2105602553a6226c2bad482c6339b50ac8281fd08316b1c7" name="texlive-detex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="35ee17f86013304527c2c95af50c3a93a30c10212aca9c7fb34ab3330f661a46" name="texlive-diadia-bin" arch="noarch">
  <version epoch="0" ver="2017.20170520.svn37645" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="3109bf9ab7358b49ba3ca5ba9b6e8b5a7fee0c1023443d1492c3cdcc10e0a311" name="texlive-dosepsbin-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn24759" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="09770027b7682153413251f4a7592576a1ab358279e07bcd21fa0e7c4981c4f0" name="texlive-dtl-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="de170ba25636dd9bdde1545c75aa8059c06a164e78d2064ed1e58c80d8021f9f" name="texlive-dtxgen-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29031" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="1930313edc2b4929b8c7a45be821b098fe15f78b4e7858e0654ebe10b3991cd1" name="texlive-dviasm-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn8329" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="fd4d0d84c255bb6c314bbb8be15bae570826d2ae0c9d983c4a363af3ba6f3d43" name="texlive-dvicopy-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="69dba3758836ebc94a56e6bc93bddadb99d2b50f8646097d0b44be50ca161650" name="texlive-dvidvi-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="a6270ea4f96be9618a6c4bc35b48081704d5956af7254fd4eab4ba1b60d8e1e4" name="texlive-dviinfox-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44515" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="5d316753a19c104d4764e3eb22a788ca9a4ca866cec43d36213c14af62759a13" name="texlive-dviljk-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="8d35186c7426e29544d8d85ff058f54960f1e9951488f8eda6649372f7e9df32" name="texlive-dvipdfmx-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn40273" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ed7f1164d1b212cfe90ec417c9797c80cb7c5410c656a9223ff027ec3c12ffde" name="texlive-dvipng-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="575f34dfa90955bfcf355375da4c193d9846b9f55a2db87e3d065bfbfbb60b7b" name="texlive-dvipos-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="5f3663426ff6c917e95c73a71b76bb9e9dfeba3612ce8faf97be7551e5544420" name="texlive-dvips-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="e0ac3e94e0b451f0285face8ff07a6fd4cdd83bb4edc8b5e2d4ec0ddcf33087b" name="texlive-dvisvgm-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn40987" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4f5841ec1084407aea18ea8ddff95f604c39501ceefb9f92a3d110896b9141d8" name="texlive-ebong-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn21000" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="96bc6aa641a05cc625cf4e9048715aed0d16b4bdda39cc455f88a324167714b7" name="texlive-eplain-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn3006" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="549ba5808e7abec1d8306427d14dbda20987dddcc9d6fe336f49b6e04c047b96" name="texlive-epspdf-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29050" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ca4ef14bf749a45066c5e6ae7d4e41b387a8cab04d606f7ddad62c5ef945e6b6" name="texlive-epstopdf-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn18336" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="5ab5c6c9544f9425abf8c439c323d49a50b34e87f10331f43361ef2cc3456040" name="texlive-exceltex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn25860" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="076a07bb55adc8251838aecfbef6a3cfe2b2ffa2ab3e9d3eae3c031d65b062e1" name="texlive-fig4latex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn14752" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="2d97f4dec7deee11280e987561fa626be5573a31e47d4ff6b83f2b2eb3ba4d91" name="texlive-findhyph-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn14758" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4e830e6b0f58fac8187a117feeb50e6f56e8a89e556bb26badc9f12e2b6de5b6" name="texlive-fontinst-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29741" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="6c6aa0286efc41d1c9470bb2f4606f5308ce16aec38e33e2af5e263896a95667" name="texlive-fontools-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn25997" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4ecd05a6d86466e7d6af3247b50baec76af21bb121831adbccab0d0e4d1fd71c" name="texlive-fontware-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4f3ba2b0e26d8b4e3872c0b6f7e62b1d5e004cce200c6b55544507c26ce3dc04" name="texlive-fragmaster-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn13663" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="3fae12278cb777341f76838973477dcbbd1b22973e4996d675fdcc86e2b0379a" name="texlive-getmap-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn34971" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="f17b66d8b225b9c6ac305dbda3c96e211b3e2f98649f50b15d6aec3b53b8b9ff" name="texlive-glossaries-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn37813" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c9d599c779ebf8fe5f3cc2288585d321ff2e3563cc16a594b1299f197f754bd0" name="texlive-gregoriotex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="1046a89dc5bb3daf96f5f17f568abd3096b6a6fb408a187ebb5f0dbc237f2f38" name="texlive-gsftopk-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c7cda81f74e320d4fffb4fd747963972254b5e458acae1917ce10622e8240ef0" name="texlive-jadetex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn3006" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="28b7c5d06c1f943379d8b1b27c8f51b2a3b60459a9defb601fbd976a3a17c3cf" name="texlive-kotex-utils-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn32101" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ae873f1fff5a6b880afa3eda542048d6099a139cf66e38d91abad5531452e89d" name="texlive-kpathsea-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="10803423f7cc32fa941524ac87b3d650b57cf31adb287d1c61f4ec6126c9409f" name="texlive-kpathsea-devel" arch="x86_64">
  <version epoch="0" ver="6.2.3" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="a2ecf3fbb8a78056b629a09b752484c40094f1262de8109f842c3676243a7a57" name="texlive-lacheck-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="23a58f962f89852ce141a4e746515025c224500c3e29b7ca873a0f7fd6213ef7" name="texlive-latex-bin-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn14050" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="7fa3fcca8e0c01ecf76706645d0510df50613f440e4d3d936e3f08f329cf3411" name="texlive-latex-git-log-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn30983" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="02717ea5f29fe715dddf080e1301ac6750b5b3347fd7743daff22425f3b9b777" name="texlive-latex-papersize-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn42296" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="1975df20b6d9144168aa6e42fa2611dea694bfa00f6c6ab81b86c2318be65ee1" name="texlive-latex2man-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn13663" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="95924fcf77fd73d64a868d91b65ea4e5b74f3272b2dc178b14fca3e7fe85903b" name="texlive-latex2nemeth-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn42300" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="fa573a9f5fa23643ae96c026b662d8fd9e3d7fc5eb6b6be727da014627ffc5c4" name="texlive-latexdiff-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn16420" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="193d0198de38471abf498944e38529bf3a9e82a270505692ae2e778b0c6b1680" name="texlive-latexfileversion-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn25012" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="f76f8f84817d993092ee0b9dfbbb8536fe76145e586396ae480408089a78585d" name="texlive-latexindent-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn32150" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="73a0f50733caea0a5e7bd260ae84be4916542fa505d8932458b5d8fa43f62565" name="texlive-latexmk-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn10937" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="864c5dd4438055b68d06b1c53be3e6e80bdd5dac5abe9860a1fbf3b8ea93d742" name="texlive-latexpand-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn27025" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="089fa936cd88a7ab4ea0b57622aa3a930387cb4971cfc111add8253d626e798c" name="texlive-lcdftypetools-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="3372a662e83f0e1afde35981f2702b480d40d2d16334d4f55fa19d1677d390bd" name="texlive-lilyglyphs-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn31696" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d3941ce9c0d7aeda95e234d3ea62d87a67196a2c5980ded8baf8f94b6137b3f5" name="texlive-listbib-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn26126" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="f10ed05f85d90405349e3366d50cc977195d4dc28abd23ea2b78858af5623c58" name="texlive-listings-ext-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn15093" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="f9c4dcb16e881abd182dca17a8e076642e176439cd8ad4b44173233c50eecad9" name="texlive-lollipop-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn41465" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="55b454d4286e67cfa534d933f677d2252efc12736dbe95b53c01cf4b0f6d0c8e" name="texlive-ltxfileinfo-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29005" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="40a2837544b6399c1b843c2f2ea3c3c6b0a21e7c802c8960d0c1e426a40e2c5c" name="texlive-ltximg-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn32346" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="82b0d93225618aafa69c886e45f355b5469e1378ba48d2226eb27bdee557a9e6" name="texlive-lua2dox-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29053" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="2db8fd94382cd2832217a3c77696cfe29febafaf1a5f7cc138191139b7638577" name="texlive-luaotfload-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn34647" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4eaeaa308bcf69aa6335303ea60eb7662586a6144c7605c39c099db2beb04577" name="texlive-luatex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44549" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="310730fcd52ae41b17f1f8b13462b9f70d6b04c0c7a0a94dc2a8b8ab4b315e75" name="texlive-lwarp-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn43292" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="9030e07f4f2d9d8f99d737c59ceb326bc1287679543cc690c47b613352ceda8f" name="texlive-m-tx-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="b969e9a218c6b219f444ec56f8486d7dba611e6a37c4bcc5c54e42005457cdc6" name="texlive-make4ht-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn37750" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="76c04a2d4d64e47b83267e4c42cdf1e09cd437051c97d9795c7bae5e65a9c8fc" name="texlive-makedtx-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn38769" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ec44a23064857e179d85a12d8ffbea019a17101f44b9fb12b548cd991802827b" name="texlive-makeindex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="196c97bd71202409cc37093bd8273bc407665eb7ecd49038472d5a1d764fcfd3" name="texlive-match_parens-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn23500" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="fd81e48e32c7504f44c651e28469c62920d7eada0c87bcf886aa98d0c54a009a" name="texlive-mathspic-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn23661" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="bd704935fa4bc0b29db4d34318cdaeb13e77491e2bff924bc6a7ca438ec6ef37" name="texlive-metafont-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="7b54f7739cd460f03ba3410879436e71a6c2893d353ebd16ac58f943c9b6b62a" name="texlive-metapost-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="9741fc1b14a47d329f31120cd3a0d30d00d6f742fc34a94066ccf4dab00a837d" name="texlive-mex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn3006" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="dd6005e5d8fba30139d044ce0734331c617e19c79439036a05ad675d38f2bdb4" name="texlive-mf2pt1-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn23406" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="8f3eedd4fef8d3b9970fae405f6d9b3532357ccfd892a51804cc971ec466e5be" name="texlive-mflua-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="6796711e8927829754f059f6f63e7575ff0ce317c1a6b9a0e3b6a2e9eedf5852" name="texlive-mfware-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="68f8927252a50946045e16ae8af2317bf9b0af82c101d297eb4c9d5fdfb46cbe" name="texlive-mkgrkindex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn14428" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c8e1336966d836c203ea615213814c99d6b410d220bcb888446c03574942cee9" name="texlive-mkjobtexmf-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn8457" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="f7e0d39054dc6393d5515c145b43790a202b7294c9a9b6dafca5867ecd734a30" name="texlive-mkpic-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn33688" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="56cb4667ab59aa907394ba47f7a547733ffe4b5310d83333c4b187229755c244" name="texlive-mltex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn3006" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="8f88a34e4a18b2bba5830bfd94339a090fd6ccab4f58539c2ef74bbb1ed4d7c6" name="texlive-mptopdf-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn18674" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4f6929ce2e38fcd3223e5beb463b46829212e9c3e0ed55f64fb710d83de112d1" name="texlive-multibibliography-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn30534" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="91ec31cec32f80f32fc2018f7a6633687b68a72cbe105b19a6b940c427a0debf" name="texlive-musixtex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn37026" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="00dc416e803a6def3622596f30ecaf6346af4261139aa330a115a0c9dc635dbc" name="texlive-musixtnt-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="55b40c6742ee63aa1191f47122f7183699f8d00b993a5055b061a24000627c7b" name="texlive-omegaware-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="6cd293b1469ca2d3ceb6627d7c8a428373f64c8e9189e4b3d5ba2cd8525d9c9b" name="texlive-patgen-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4ca9311788d06dbd773947de18c66dfa2745493c22f1945683c30299cc4966c7" name="texlive-pax-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn10843" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="34b52f299c5735721ca495f1137944918e8da2d9cc8fcd731543c8eca703bc2d" name="texlive-pdfbook2-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn37537" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ab1143a8ec404b71416e3e78a92ac50dd90fcbf3750096d24acf7dbe2728ff2b" name="texlive-pdfcrop-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn14387" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="fca4bea16c8b6f24f42dbdcb0fea13ff4e0fe30b3cd232cd5c8e6579b235b639" name="texlive-pdfjam-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn17868" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="328acf8f1dd254d089e8416fc8f66f3e8493ff61148de35cfa3cb388ba049ebf" name="texlive-pdflatexpicscale-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn41779" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="bcca78776e9207563c9b0f15e7501e7d4155f9c75674e049e93cf31ea3e088c4" name="texlive-pdftex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="020e8335116cc97c7e35866b47c64acea51bc79ada3375ebd4160af79f8b9dd6" name="texlive-pdftools-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="7ca923f26ba0f0a90eebe7a3f32483d2a49065f7480d5e809db3246628265958" name="texlive-pdfxup-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn40690" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="871dce022e22aab89a78e0634e6eff91200fe3d79a67d0413f764a6f3bbf02bb" name="texlive-pedigree-perl-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn25962" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="3194ecdae0862411cab3457dfccfa9931724edea4420a8e43484e819ea0325db" name="texlive-perltex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn16181" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="f384af2055443a342a4467b911529ac9ffc6eb0b36d206e8eeb4cabde3991341" name="texlive-petri-nets-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn39165" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="4186c97a11fc46141a7e0f8bbe5097238da6c99d3211d46e2ab31122d7e1b35b" name="texlive-pfarrei-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29348" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d94ca1c5aadff7bc23a386d62f7133aa6882cf1063ba09f5f21c03c0bdaba431" name="texlive-pkfix-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn13364" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="5344f758b270a2b39750b056b410b05cdba3cc77bea411481f7981c9347bb866" name="texlive-pkfix-helper-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn13663" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="92c0b5d906b0bb50197540928d30fcf99184a8f100b04e7fcfc75295fbb2ac5a" name="texlive-platex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn22859" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="9a6409d8f730f91394d0bed371287523ff13ee479c8ae913f8383b030bac42ce" name="texlive-pmx-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="038ff82029a777861e90eba7de02f2ae078c45f5ac4715c3f986889b00ac91f4" name="texlive-pmxchords-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn32405" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c1aac66573557afe16defe72eb50be1aa0d001e21b273349935028924ecbdb91" name="texlive-ps2pk-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="511520a4187da16fe09effe7700aecbc59c7d311f45bc714b75518a60286b6e7" name="texlive-pst-pdf-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn7838" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="679cafbd462d5f97272b882955111fc6405888067f29d48620fe3a228abd584b" name="texlive-pst2pdf-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29333" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="7cd5314dae5b645c81419bdf8f1e0b116281e2ca8e7cd3333b9b4485d84a234e" name="texlive-pstools-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="cd67f8870ae6ecb79305806a5fcd97361286f217d570dbb75e65d212facd081f" name="texlive-ptex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="22549fe51d759cc47f643cfda99fd695d5fcc8685d055213752729b25303d727" name="texlive-ptex-fontmaps-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44206" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c75f54911f2b21174e7a4e52dc5f864c664d4f133894e0ba237ee032c68ce2c2" name="texlive-ptex2pdf-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29335" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="314896dc4b38f55e3e20f7d0558452067f745705e4be4264aade526602692e07" name="texlive-ptexenc-devel" arch="x86_64">
  <version epoch="0" ver="1.3.5" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d5c00ffb4521670766de235de99001dbe59650efe41e21fd604a8dc252655966" name="texlive-purifyeps-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn13663" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="17a81706ecde43898d8fc130906d2051bf8deefefc4eab6c7402d0ab597a4307" name="texlive-pygmentex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn34996" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="a952265b66411527e00a96e81142a63319cba7b7bff6acea79baa55dc317d2f1" name="texlive-pythontex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn31638" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="dc38fd0f9d9dda4e0fa7e8fc7fe7494b573778edab4e3ab166c0507ede7d150d" name="texlive-rubik-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn32919" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c164940f898a1dff1a2e181268fcd17237054a442122c6f866bad3bca837a8ae" name="texlive-seetexk-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="59f882a619975cb4a0f4a91b58b648d81d2d628565bee6d10466004894899b04" name="texlive-splitindex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29688" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="13bb97116b4c1fe8e4bea6f7da57ea350b0a5cd7d5911924bd0710183b694448" name="texlive-srcredact-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn38710" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="f6c7ed17efa4e5b8f2a41c19687cb09b9dccbae04f1751dfd3aa5115c9e1d47b" name="texlive-sty2dtx-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn21215" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c7b691eba1009bc2dca77ff5d96576497318b06bb1c88a6a54d60b05f5b016fb" name="texlive-svn-multi-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn13663" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c1d4577735908b4253d032454c9f1f175679bf61e379e8554ccb4a7c3cc9fc4c" name="texlive-synctex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="1a741128577bc5b988b4aeec79e78004c9619b551b8b3e214f24a0afcf5c276d" name="texlive-synctex-devel" arch="x86_64">
  <version epoch="0" ver="1.18" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="1785db9ea46e2361d1e0410ae9c3fde47c252dd5eb3777cabffcd536c8c0e8c7" name="texlive-tetex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn43957" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ca9185aaec7379a3b5a308ba401a918e97fc62e7c7132aaeccf13b35f3e9356d" name="texlive-tex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="3dcd061fa3b0b386c7f88f21db35059256616aa9fbba45e420db389fe473be7b" name="texlive-tex4ebook-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn37771" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="edc636594eb60bf6b2697ab3541b7a39d14fbb5b9485ad30eec4cdc4581efc16" name="texlive-tex4ht-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="31671fa12cc7adc89764364f0a8f95ca6945c97cfd101ae5e3c778b0f09e983a" name="texlive-texconfig-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29741" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d889e0f92f1294fe7c4449fd683ee5bb02b6fba45c900fdc3dd51d279bc7a690" name="texlive-texcount-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn13013" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="b9758939529a5bcd0a14a4fe11c8aa340d3aefe308f406e53076e278c2b15879" name="texlive-texdef-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn21802" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ef894418d5ac569f16463416c7443bc7fd1174abdabe8af0efe30381b457ce28" name="texlive-texdiff-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn15506" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="cfa574fac545d5cfa6c9add11f703c3fab97051d351f58886639c2a5a478d69a" name="texlive-texdirflatten-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn12782" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="fd38a0c5afc7a8c7cb30092ada44f71a79805b83b7035e398b6a5c2c05ef9ec6" name="texlive-texdoc-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29741" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="34eb0294a9ca330a1d55e04b9c4a1d1bf09f9405e6a3537a29f387c6370451d7" name="texlive-texfot-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn33155" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="df74952b3f0313852b3e34b731ad02550a1d5bda3180ef66d0a8373b49b5180e" name="texlive-texliveonfly-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn24062" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="7272d98d238934f70143812a4be6819dedd228daf8f90afee61800580b362a02" name="texlive-texloganalyser-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn13663" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="a73a4f336399a8c83aaf64b68b2eae55d10d765ff79b770861c245606b4dafd5" name="texlive-texlua-devel" arch="x86_64">
  <version epoch="0" ver="5.2.4" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="bc3038f3c8b360e97c5506e652adf1b8750914f41eb8decfceb87deed0d4f382" name="texlive-texluajit-devel" arch="x86_64">
  <version epoch="0" ver="2.1.0beta2" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c16adf910b86ae4aa4b2e97083d34ed70c282d82ba8382d3f6ccd229e0e42fa3" name="texlive-texosquery-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn43596" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c7d1ad980f8e6fe5ab013ade369d553156ef071de28d288c412a16db1a3bd158" name="texlive-texsis-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn3006" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="8a1634880de5a742f99af82a0ef982da7651fc8bdf4491dddd476f3f62e882e4" name="texlive-texware-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="ac690db8a7e4b9111e577f5e15316e0f061ae7d0831eb4ff23901b58528f64a8" name="texlive-thumbpdf-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn6898" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="3db496eea8c1418b04f387bb43706b0493241325b484009e09fd1ad51b22dcfd" name="texlive-tie-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="2881558120c36ed05458790f1351139d61385a441e7352d77f6a4ca404c28ffb" name="texlive-tpic2pdftex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn29741" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="260c60d0f39b4c11b48273b3ccbb369fe090f7f1dda0929cf7f167f657737223" name="texlive-ttfutils-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="7adcf43f18570b10fc5957dca99126182686af189fbbf5ae01e6f3adb5e2a7d4" name="texlive-typeoutfileinfo-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn25648" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="3dcad57e7e489a05b919698431fb4c8c1b4dacf7bfd75d04789186cd53c3e6d2" name="texlive-ulqda-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn13663" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="c90d5030a054a15d035014ece6fba0946d98e12631eb0c65d4c8a9ed92ab1a09" name="texlive-uplatex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn26326" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="8e0811d49b99addedcfa6f210b999352e0cb46d11632e2846fc203664e42cf16" name="texlive-uptex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="d3dd832a04e8b13839b6bc4a1b896f3fc0fbdd52d7428ec5f35a47126362ad8f" name="texlive-urlbst-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn23262" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="5a60348b25653dcaea8ca83f27a2b9cdd4bcbdc2b80c345e43049adaf56f2745" name="texlive-velthuis-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="20cc0d109b1313680bc38f88b754557b6e0dab24f0ef5a886734fb87e5bf0b3f" name="texlive-vlna-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="b63115a07731e6f6ae04bb72cb737b502ba4f68ec0c228e028e36201577cd588" name="texlive-vpe-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn6897" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="5cdac5c5176456d1210246ea70afd1c148f2f20fa12a283437b9a04b87991094" name="texlive-web-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="37c41be6477b8ef2db0ebaf44d9d24af13bb14175d8d02073a14511f3c441a51" name="texlive-xdvi-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44143" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="bebe610081dc0398faa81bddb887e577b7bcdf8b7742f17a269f007d38ae78c4" name="texlive-xetex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn44361" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="7c6cd52069927ec60c77b4a824a3b560d89b30cb08c8343318e391e39360fc4f" name="texlive-xmltex-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn3006" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="09a4475483e1d6b4af9d9a162ad10f2e73dd853fce9c5d28161e7e0af47f2951" name="texlive-yplan-bin" arch="x86_64">
  <version epoch="0" ver="2017.20170520.svn34398" rel="lp150.9.3.1"/>
  <changelog author="nico.kruber@gmail.com" date="1498651200">- add missing dependencies for perl-biber</changelog>
  <changelog author="werner@suse.de" date="1498737600">- Avoid nasty warning about missing batchmode in ENVironment</changelog>
  <changelog author="schwab@suse.de" date="1501588800">- Define _GNU_SOURCE to request GNU extensions</changelog>
  <changelog author="werner@suse.de" date="1502712000">- Add missing link from texdef to latexdef</changelog>
  <changelog author="dimstar@opensuse.org" date="1506081600">- Add texlive-20170524-source-poppler059-1.patch: Adapt API usage
  to poppler 0.59.</changelog>
  <changelog author="werner@suse.de" date="1510142400">- Add yet an other patch source-poppler-0.59.1.dif for poppler
  0.59 and up (boo#1060652)</changelog>
  <changelog author="werner@suse.de" date="1510660800">- Sometimes user nobody has its own ~/.cache directory therefore
  split path at colon if found</changelog>
  <changelog author="werner@suse.de" date="1511524800">- Disable by a build conditions using zypper way of posttrans scripts
  as we already use %posttrans. Nevertheless correct naming scheme
  (boo#1069445)</changelog>
  <changelog author="dimstar@opensuse.org" date="1512648000">- Escape the usage of %{VERSION} when calling out to rpm.
  RPM 4.14 has %{VERSION} defined as 'the main packages version'.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513080000">- Replace Mesa-libGL-devel and libOSMesa-devel BuildRequires with
  pkgconfig(gl) and pkgconfig(osmesa).
- Drop Mesa-libglapi-devel Buildequires: not needed by texlive for
  a while already.</changelog>
  <changelog author="werner@suse.de" date="1515412800">- If zypper way of posttrans scripts are disabled do use the rpm
  %posttrans scriptlets (boo#1074128)</changelog>
  <changelog author="werner@suse.de" date="1517227200">- For Leap 42.3 build without biber as the perl version does not fit</changelog>
  <changelog author="sndirsch@suse.com" date="1517227201">- removed unneeded 'BuildRequires: xorg-x11-util-devel' (bsc#1077489)</changelog>
  <changelog author="meissner@suse.com" date="1517918400">- drop freetype-devel buildrequires, we use freetype2 here.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1521028800">- Remove xorg-x11-devel and Mesa-devel from buildrequires.</changelog>
  <changelog author="werner@suse.de" date="1521115200">- Add missing dependencies for perl-biber (boo#1084900)</changelog>
  <changelog author="werner@suse.de" date="1521115201">- Add patch biber-perl-5.30.dif to avoid trouble with perl 5.30 and biber</changelog>
  <changelog author="idonmez@suse.com" date="1523275200">- Update source-poppler-0.59.1.dif to fix compilation with poppler
  0.63. Dict objects are now uncopyable, make a const reference
  instead.</changelog>
  <changelog author="werner@suse.de" date="1524139200">- Add patch source-lcdf-typetools.dif to help gcc8 (boo#1087075)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1524830400">- Add patch source-dvipdfm-x.dif to fix XeTeX bug #151 (boo#1099563)</changelog>
</package>
<package pkgid="177874eceeab3726df11c3fb2ffde49b1bdb983e92029d86c12d35ba2c93515a" name="tftpboot-installation-openSUSE-Leap-15.0-x86_64" arch="noarch">
  <version epoch="0" ver="14.373" rel="lp150.2.3.2"/>
  <changelog author="wfeldt@opensuse.org" date="1518177600">- merge gh#openSUSE/installation-images#234
- add vmd.ko module (bsc#1079924)
- 14.359</changelog>
  <changelog author="snwint@suse.de" date="1519300800">- build skelcd-installer-net subpackage containing the network
  install setup (bsc#1063789)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596800">- merge gh#openSUSE/installation-images#235
- udevadm should retrigger 'add' events (bsc#1084357)
- 14.360</changelog>
  <changelog author="wfeldt@opensuse.org" date="1520596801">- merge gh#openSUSE/installation-images#236
- remove default driver update url (bsc#1084510)
- 14.361</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521201600">- merge gh#openSUSE/installation-images#237
- move tftpboot location (bsc#1085479)
- 14.362</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720000">- merge gh#openSUSE/installation-images#238
- allow udevd to be run with --debug (bsc#1085212)
- 14.363</changelog>
  <changelog author="wfeldt@opensuse.org" date="1521720001">- merge gh#openSUSE/installation-images#239
- add novnc &amp; python3-websockify (bsc#1078785)
- 14.364</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522065600">- merge gh#openSUSE/installation-images#240
- add libstorage-ng translations (bsc#1081454)
- 14.365</changelog>
  <changelog author="wfeldt@opensuse.org" date="1522238400">- merge gh#openSUSE/installation-images#241
- s390x: add zpxe.rexx to dvd (bsc#813454)
- 14.366</changelog>
  <changelog author="wfeldt@opensuse.org" date="1523016000">- merge gh#openSUSE/installation-images#242
- adjust adddir script to allow updating coreutils (bsc#1087901)
- 14.367</changelog>
  <changelog author="snwint@suse.de" date="1523275200">- do not delete efi image in skelcd-installer-net (bsc#1088679)</changelog>
  <changelog author="kukuk@suse.de" date="1523275201">- No upgrade option for Kubic (bsc#1088304)</changelog>
  <changelog author="snwint@suse.de" date="1523448000">- disable Kubic 32-bit build (bsc#1089102)</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524052800">- merge gh#openSUSE/installation-images#243
- run postin script of yast2-storage-ng (bsc#1081198)
- 14.368</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524139200">- merge gh#openSUSE/installation-images#244
- remove dmraid from inst-sys (fate#323743, bsc#1088570)
- remove explicit dependency from mozilla-nspr
- 14.369</changelog>
  <changelog author="wfeldt@opensuse.org" date="1524484800">- merge gh#openSUSE/installation-images#245
- remove last mozilla-nspr reference
- 14.370</changelog>
  <changelog author="tchvatal@suse.com" date="1524657600">- Use proper libsmbios_c2 name for the smbios library</changelog>
  <changelog author="jsrain@suse.cz" date="1525435200">- merge gh#openSUSE/installation-images#247
- adjusted libopenssl*_*-hmac dependency to match current versions
  (bsc#1090360)
- 14.371</changelog>
  <changelog author="tchvatal@suse.com" date="1526299200">- merge gh#openSUSE/installation-images#248
- Use proper libsmbios_c2 name for the smbios library
- 14.372</changelog>
  <changelog author="wfeldt@opensuse.org" date="1526558400">- merge gh#openSUSE/installation-images#250
- use reiserfs-kmp (fate#323394)
- 14.373</changelog>
</package>
<package pkgid="308288b804992ed20238a0f3de9162f4be1e78cf2687e2b821d88a05b8b24b6e" name="thunar-sendto-blueman" arch="noarch">
  <version epoch="0" ver="2.0.6" rel="lp150.3.3.1"/>
  <changelog author="and.november@opensuse.org" date="1434283200">- build with python3</changelog>
  <changelog author="and.november@opensuse.org" date="1444392000">- update to version 2.0.1</changelog>
  <changelog author="and.november@opensuse.org" date="1450353600">- update to version 2.0.2</changelog>
  <changelog author="and.november@opensuse.org" date="1451649600">- update to version 2.0.3</changelog>
  <changelog author="and.november@opensuse.org" date="1459944000">- update to version 2.0.4</changelog>
  <changelog author="meissner@suse.com" date="1493294400">- removed rpmlintrc</changelog>
  <changelog author="bosim@opensuse.org" date="1493294401">- ran spec-cleaner</changelog>
  <changelog author="jengelh@inai.de" date="1493380800">- Ensure neutrality of description</changelog>
  <changelog author="aavindraa@gmail.com" date="1509796800">- update to version 2.0.5
  * Bugs fixed
    + PPPSupport: Correct binary name for ModemManager
    + PPPSupport: Exclude grep process from process list
    + GameControllerWakeLock: Check for Class property before using it
    + SerialManager: Properly check for None
    + NetConf: Treat UnicodeDecodeError as if there was no file
    + Notification: Also check if notification daemon supports body
    + Correct bold tag in portugese translation (thanks @andreyluiz)
    + Properly check for None in SerialManager
    + GameControllerWakeLock: Check for Class property first
    + Fix bugs in NetworkService ui
    + NetConf: fix writing PID file for dhcpd(3)
    + Notification: Make sure x and y hint are in screen geometry
- ran spec-cleaner</changelog>
  <changelog author="badshah400@gmail.com" date="1524744000">- Switch adwaita-icon-theme for gnome-icon-theme in BuildRequires.
- Run sed to change env-based hashbangs to ones depending directly
  on the system python3 binary.
- Only run post(un) scripts for openSUSE &lt; 1500; rpm file triggers
  takes care of these for newer versions.</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1533297600">- update to version 2.0.6: This fixes the security of the polkit authorization
  checks in blueman (bsc#1083066). Previously any user with access to the
  D-Bus system bus could trigger certain network configuration logic in
  blueman without authentication.</changelog>
</package>
<package pkgid="e90ff0963b296e2ad182349f1f05445a046cb09157bc18edc61adb8426927156" name="thunar-volman-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="b48f226625c1a778c99e2adbb66d783196618f7bef34b33a793d102ea3e9331f" name="tiff" arch="src">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="df132f95ff134c64bb1aba45578352d0b20e679c031c4ab457a18f3ea19e902d" name="tiff" arch="x86_64">
  <version epoch="0" ver="4.0.9" rel="lp150.4.3.1"/>
  <changelog author="fstrba@suse.com" date="1459944000">- Added patch:
  * tiff-4.0.6-CVE-2016-3186.patch
  - fix CVE-2016-3186: buffer overflow in gif2tiff [bsc#973340]</changelog>
  <changelog author="fstrba@suse.com" date="1468324800">- Added patches:
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  - Upstream commits to fix CVE-2016-5314 [bsc#984831],
    CVE-2016-5316 [bsc#984837], CVE-2016-5317 [bsc#984842],
    CVE-2016-5320 [bsc#984808] and CVE-2016-5875 [bsc#987351]</changelog>
  <changelog author="fstrba@suse.com" date="1472731200">- Added patches:
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  - Upstream commits to fix CVE-2016-3623 [bsc#974618],
    CVE-2016-3945 [bsc#974614], CVE-2016-3990 [bsc#975069],
    CVE-2016-3991 [bsc#975070]</changelog>
  <changelog author="fstrba@suse.com" date="1475755200">- Added patches:
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Upstream fixes for MSVR 35093, MSVR 35094, MSVR 35095,
    MSVR 35096, MSVR 35097, MSVR 35098.
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  - Enforce bits-per-sample requirements of floating point
    predictor. Fixes CVE-2016-3622 [bsc#974449]</changelog>
  <changelog author="fstrba@suse.com" date="1480420800">- Upgrade to upstream release 4.0.7
  * libtiff/tif_aux.c
    + Fix crash in TIFFVGetFieldDefaulted() when requesting
    Predictor tag and that the zip/lzw codec is not configured.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2591
  * libtiff/tif_compress.c
    + Make TIFFNoDecode() return 0 to indicate an error and make
    upper level read routines treat it accordingly. (linked to the
    test case of http://bugzilla.maptools.org/show_bug.cgi?id=2517)
  * libtiff/tif_dir.c
    + Discard values of SMinSampleValue and SMaxSampleValue when
    they have been read and the value of SamplesPerPixel is
    changed afterwards (like when reading a OJPEG compressed image
    with a missing SamplesPerPixel tag, and whose photometric is
    RGB or YCbCr, forcing SamplesPerPixel being 3). Otherwise when
    rewriting the directory (for example with tiffset, we will
    expect 3 values whereas the array had been allocated with just
    one), thus causing a out of bound read access. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658, bsc#974840)
  * libtiff/tif_dirread.c
    + In TIFFFetchNormalTag(), do not dereference NULL pointer when
    values of tags with TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII
    access are 0-byte arrays. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2593 (regression
    introduced by previous fix done on 2016-11-11 for
    CVE-2016-9297, bsc#1010161). Assigned as CVE-2016-9448,
    bsc#1011103
    + In TIFFFetchNormalTag(), make sure that values of tags with
    TIFF_SETGET_C16_ASCII/TIFF_SETGET_C32_ASCII access are null
    terminated, to avoid potential read outside buffer in
    _TIFFPrintField(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2590
    (CVE-2016-9297, bsc#1010161)
    + Initialize doubledata at line 3693 to NULL to please MSVC 2013
    + Prevent reading ColorMap or TransferFunction if
    BitsPerPixel &gt; 24, so as to avoid huge memory allocation and
    file read attempts
    + Reject images with OJPEG compression that have no
    TileOffsets/StripOffsets tag, when OJPEG compression is
    disabled. Prevent null pointer dereference in
    TIFFReadRawStrip1() and other functions that expect
    td_stripbytecount to be non NULL. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2585
    + When compiled with DEFER_STRILE_LOAD, fix regression, when
    reading a one-strip file without a StripByteCounts tag.
    + Workaround false positive warning of Clang Static Analyzer
    about null pointer dereference in TIFFCheckDirOffset().
  * libtiff/tif_dirwrite.c
    + Avoid null pointer dereference on td_stripoffset when writing
    directory, if FIELD_STRIPOFFSETS was artificially set for a
    hack case in OJPEG case. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2500
    (CVE-2014-8127, bsc#914890, duplicate: CVE-2016-3658,
    bsc#974840)
    + Fix truncation to 32 bit of file offsets in TIFFLinkDirectory()
    and TIFFWriteDirectorySec() when aligning directory offsets on
    an even offset (affects BigTIFF).
  * libtiff/tif_dumpmode.c
    + DumpModeEncode() should return 0 in case of failure so that
    the above mentionned functions detect the error.
  * libtiff/tif_fax3.c
    + remove dead assignment in Fax3PutEOLgdal().
  * libtiff/tif_fax3.h
    + make Param member of TIFFFaxTabEnt structure a uint16 to
    reduce size of the binary.
  * libtiff/tif_getimage.c
    + Fix out-of-bound reads in TIFFRGBAImage interface in case of
    unsupported values of SamplesPerPixel/ExtraSamples for
    LogLUV/CIELab. Add explicit call to TIFFRGBAImageOK() in
    TIFFRGBAImageBegin(). Fix CVE-2015-8665 and CVE-2015-8683.
    + Fix some benign warnings which appear in 64-bit compilation
    under Microsoft Visual Studio of the form "Arithmetic
    overflow: 32-bit value is shifted, then cast to 64-bit value.
    Results might not be an expected value."
    + TIFFRGBAImageOK: Reject attempts to read floating point images.
  * libtiff/tif_luv.c
    + Fix potential out-of-bound writes in decode functions in non
    debug builds by replacing assert()s by regular if checks
    (http://bugzilla.maptools.org/show_bug.cgi?id=2522). Fix
    potential out-of-bound reads in case of short input data.
    + Validate that for COMPRESSION_SGILOG and PHOTOMETRIC_LOGL,
    there is only one sample per pixel. Avoid potential invalid
    memory write on corrupted/unexpected images when using the
    TIFFRGBAImageBegin() interface
  * libtiff/tif_next.c
    + Fix potential out-of-bound write in NeXTDecode()
    (http://bugzilla.maptools.org/show_bug.cgi?id=2508)
  * libtiff/tif_pixarlog.c
    + Avoid zlib error messages to pass a NULL string to %s
    formatter, which is undefined behaviour in sprintf().
    + Fix out-of-bounds write vulnerabilities in heap allocated
    buffers. Reported as MSVR 35094.
    + Fix potential buffer write overrun in PixarLogDecode() on
    corrupted/unexpected images (CVE-2016-5875, bsc#987351)
    + Fix write buffer overflow in PixarLogEncode if more input
    samples are provided than expected by PixarLogSetupEncode.
    Idea based on libtiff-CVE-2016-3990.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, but with different and simpler
    check. (http://bugzilla.maptools.org/show_bug.cgi?id=2544,
    bsc#975069)
  * libtiff/tif_predict.c
    + PredictorSetup: Enforce bits-per-sample requirements of
    floating point predictor (3). Fixes CVE-2016-3622 "Divide By
    Zero in the tiff2rgba tool." (bsc#974449)
  * libtiff/tif_predict.h, libtiff/tif_predict.c
    + Replace assertions by runtime checks to avoid assertions in
    debug mode, or buffer overflows in release mode. Can happen
    when dealing with unusual tile size like YCbCr with
    subsampling. Reported as MSVR 35105.
  * libtiff/tif_read.c
    + Fix out-of-bounds read on memory-mapped files in
    TIFFReadRawStrip1() and TIFFReadRawTile1() when stripoffset
    is beyond tmsize_t max value
    + Make TIFFReadEncodedStrip() and TIFFReadEncodedTile() directly
    use user provided buffer when no compression (and other
    conditions) to save a memcpy().
  * libtiff/tif_strip.c
    + Make TIFFNumberOfStrips() return the td-&gt;td_nstrips value when
    it is non-zero, instead of recomputing it. This is needed in
    TIFF_STRIPCHOP mode where td_nstrips is modified. Fixes a read
    outsize of array in tiffsplit (or other utilities using
    TIFFNumberOfStrips()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2587
    (CVE-2016-9273, bsc#1010163)
  * libtiff/tif_write.c
    + Fix issue in error code path of TIFFFlushData1() that didn't
    reset the tif_rawcc and tif_rawcp members. I'm not completely
    sure if that could happen in practice outside of the odd
    behaviour of t2p_seekproc() of tiff2pdf). The report points
    that a better fix could be to check the return value of
    TIFFFlushData1() in places where it isn't done currently, but
    it seems this patch is enough. Reported as MSVR 35095.
    + Make TIFFWriteEncodedStrip() and TIFFWriteEncodedTile()
    directly use user provided buffer when no compression to save
    a memcpy().
    + TIFFWriteEncodedStrip() and TIFFWriteEncodedTile() should
    return -1 in case of failure of tif_encodestrip() as documented
  * tools/fax2tiff.D    c
    + Fix segfault when specifying -r without argument. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2572
  * tools/Makefile.am
    + The libtiff tools bmp2tiff, gif2tiff, ras2tiff, sgi2tiff,
    sgisv, and ycbcr are completely removed from the distribution.
    The libtiff tools rgb2ycbcr and thumbnail are only built in
    the build tree for testing. Old files are put in new 'archive'
    subdirectory of the source repository, but not in
    distribution archives. These changes are made in order to
    lessen the maintenance burden.
  * tools/rgb2ycbcr.c
    + Validate values of -v and -h parameters to avoid potential
    divide by zero. Fixes CVE-2016-3623, bsc#974618
    (http://bugzilla.maptools.org/show_bug.cgi?id=2569)
  * tools/tiff2bw.c
    + Fix weight computation that could result of color value
    overflow (no security implication). Fix
    http://bugzilla.maptools.org/show_bug.cgi?id=2550.
  * tools/tiff2pdf.c
    + Avoid undefined behaviour related to overlapping of source and
    destination buffer in memcpy() call in
    t2p_sample_rgbaa_to_rgb() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2577
    + Fix out-of-bounds write vulnerabilities in heap allocate buffer
    in t2p_process_jpeg_strip(). Reported as MSVR 35098.
    + Fix potential integer overflows on 32 bit builds in
    t2p_read_tiff_size() Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2576
    + Fix read -largely- outsize of buffer in
    t2p_readwrite_pdf_image_tile(), causing crash, when reading a
    JPEG compressed image with TIFFTAG_JPEGTABLES length being one.
    Reported as MSVR 35101. CVE-2016-9453, bsc#1011107
    + Fix write buffer overflow of 2 bytes on JPEG compressed images.
    Reported as TALOS-CAN-0187, CVE-2016-5652, bsc#1007280. Also
    prevents writing 2 extra uninitialized bytes to the file
    stream.
  * tools/tiff2rgba.c
    + Fix integer overflow in size of allocated buffer, when -b mode
    is enabled, that could result in out-of-bounds write. Based
    initially on patch tiff-CVE-2016-3945.patch from
    libtiff-4.0.3-25.el7_2.src.rpm, with correction for invalid
    tests that rejected valid files.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2545, bsc#974614)
  * tools/tiffcp.c
    + Fix out-of-bounds write on tiled images with odd tile width vs
    image width. Reported as MSVR 35103. (bsc#1011841,
    CVE-2016-9538)
    + Fix read of undefined variable in case of missing required
    tags. Found on test case of MSVR 35100.
  * tools/tiffcrop.c
    + Avoid access outside of stack allocated array on a tiled
    separate TIFF with more than 8 samples per pixel.
    (CVE-2016-5321, CVE-2016-5323,
    http://bugzilla.maptools.org/show_bug.cgi?id=2558,
    http://bugzilla.maptools.org/show_bug.cgi?id=2559, bsc#984813,
    bsc#984815)
    + Fix memory leak in (recent) error code path. Fixes Coverity
    1394415.
    + Fix multiple uint32 overflows in writeBufferToSeparateStrips(),
    writeBufferToContigTiles() and writeBufferToSeparateTiles()
    that could cause heap buffer overflows. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2592
    + Fix out-of-bound read of up to 3 bytes in
    readContigTilesIntoBuffer(). Reported as MSVR 35092.
    + Fix out-of-bounds write in loadImage(). From patch
    libtiff-CVE-2016-3991.patch from
    libtiff-4.0.3-25.el7_2.src.rpm
    (http://bugzilla.maptools.org/show_bug.cgi?id=2543, bsc#975070)
    + Fix read of undefined buffer in readContigStripsIntoBuffer()
    due to uint16 overflow. Reported as MSVR 35100. (bsc#1011841,
    CVE-2016-9538)
    + Fix various out-of-bounds write vulnerabilities in heap or
    stack allocated buffers. Reported as MSVR 35093, MSVR 35096
    and MSVR 35097.
    + readContigTilesIntoBuffer: Fix signed/unsigned comparison
    warning.
  * tools/tiffdump.c
    + Fix a few misaligned 64-bit reads warned by -fsanitize
    + ReadDirectory: Remove uint32 cast to_TIFFmalloc() argument
    which resulted in Coverity report. Added more mutiplication
    overflow checks
  * tools/tiffinfo.c
    + Fix out-of-bound read on some tiled images.
    (http://bugzilla.maptools.org/show_bug.cgi?id=2517)
    + TIFFReadContigTileData: Fix signed/unsigned comparison warning.
    + TIFFReadSeparateTileData: Fix signed/unsigned comparison
    warning.
- Removed patches:
  * tiff-4.0.4-uninitialized_mem_NeXTDecode.patch
  * tiff-4.0.6-CVE-2015-8782.patch
  * tiff-4.0.6-CVE-2016-3186.patch
  * tiff-4.0.6-CVE-2016-3623.patch
  * tiff-4.0.6-CVE-2016-3945.patch
  * tiff-4.0.6-CVE-2016-3990.patch
  * tiff-4.0.6-CVE-2016-3991.patch
  * tiff-4.0.6-libtiff-tif_getimage.c-TIFFRGBAImageOK-Reject-attemp.patch
  * tiff-4.0.6-libtiff-tif_luv.c-validate-that-for-COMPRESSION_SGIL.patch
  * tiff-4.0.6-libtiff-tif_pixarlog.c-fix-potential-buffer-write-ov.patch
  * tiff-4.0.6-libtiff-tif_read.c-make-TIFFReadEncodedStrip-and.patch
  * tiff-4.0.6-tools-tiffcrop.c-fix-various-out-of-bounds-write-vul.patch
  - Fixed in the upsteam release
- Changed patch:
  * tiff-4.0.6-CVE-2015-7554.patch -&gt; tiff-4.0.7-CVE-2015-7554.patch
  - Rediffed to the changed context</changelog>
  <changelog author="idonmez@suse.com" date="1482148800">- Update homepage</changelog>
  <changelog author="jengelh@inai.de" date="1482148801">- Drop --with-pic, this is only for static libs (which are not built)
- Update descriptions</changelog>
  <changelog author="fstrba@suse.com" date="1484308800">- Added patch:
  * tiff-4.0.7-CVE-2017-5225.patch
  - Upstream fix for CVE-2017-5225, bsc#1019611: heap buffer
    overflow in tools/tiffcp via a crafted BitsPerSample value</changelog>
  <changelog author="fstrba@suse.com" date="1486036800">- Added patch:
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  - Fix a regression introduced in 4.0.7 (bsc#1022103)
  - http://bugzilla.maptools.org/show_bug.cgi?id=2636</changelog>
  <changelog author="fstrba@suse.com" date="1490788800">- Added patches:
  * tiff-CVE-2016-10266.patch
    + Upstream fix for CVE-2016-10266, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031263)
  * tiff-CVE-2016-10267.patch
    + Upstream fix for CVE-2016-10267, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031262)
  * tiff-CVE-2016-10268.patch
    + Upstream fix for CVE-2016-10268, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (divide-by-zero error
    and application crash) via a crafted TIFF image (bsc#1031255)
  * tiff-CVE-2016-10269.patch
    + Upstream fix for CVE-2016-10269, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031254)
  * tiff-CVE-2016-10270.patch
    + Upstream fix for CVE-2016-10270, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031250)
  * tiff-CVE-2016-10271.patch
    + Upstream fix for CVE-2016-10271, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    over-read and buffer overflow) or possibly have unspecified
    other impact via a crafted TIFF image (bsc#1031249)
  * tiff-CVE-2016-10272.patch
    + Upstream fix for CVE-2016-10272, LibTIFF 4.0.7 allows remote
    attackers to cause a denial of service (heap-based buffer
    overflow) or possibly have unspecified other impact via a
    crafted TIFF image (bsc#1031247)</changelog>
  <changelog author="fstrba@suse.com" date="1497960000">- Upgrade to upstream release 4.0.8
  * libtiff/tif_getimage.c, libtiff/tif_open.c
    + add parenthesis to fix cppcheck clarifyCalculation warnings
  * libtiff/tif_predict.c, libtiff/tif_print.c
    + fix printf unsigned vs signed formatting (cppcheck
    invalidPrintfArgType_uint warnings)
  * libtiff/tif_read.c, libtiff/tiffiop.h
    + fix uint32 overflow in TIFFReadEncodedStrip() that caused an
    integer division by zero. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2596
  * libtiff/tif_pixarlog.c, libtiff/tif_luv.c
    + fix heap-based buffer overflow on generation of PixarLog / LUV
    compressed files, with ColorMap, TransferFunction attached and
    nasty plays with bitspersample. The fix for LUV has not been
    tested, but suffers from the same kind of issue of PixarLog.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2604
  * libtiff/tif_strip.c
    + revert the change in TIFFNumberOfStrips() done for
    http://bugzilla.maptools.org/show_bug.cgi?id=2587 /
    CVE-2016-9273 since the above change is a better fix that
    makes it unnecessary.
  * libtiff/tif_dirread.c
    + modify ChopUpSingleUncompressedStrip() to instanciate compute
    ntrips as TIFFhowmany_32(td-&gt;td_imagelength, rowsperstrip),
    instead of a logic based on the total size of data. Which is
    faulty is the total size of data is not sufficient to fill the
    whole image, and thus results in reading outside of the
    StripByCounts/StripOffsets arrays when using
    TIFFReadScanline(). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2608.
  * libtiff/tif_ojpeg.c
    + make OJPEGDecode() early exit in case of failure in
    OJPEGPreDecode(). This will avoid a divide by zero, and
    potential other issues. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2611
  * libtiff/tif_write.c
    + fix misleading indentation as warned by GCC.
  * libtiff/tif_fax3.h
    + revert change done on 2016-01-09 that made Param member of
    TIFFFaxTabEnt structure a uint16 to reduce size of the
    binary. It happens that the Hylafax software uses the tables
    that follow this typedef (TIFFFaxMainTable, TIFFFaxWhiteTable,
    TIFFFaxBlackTable), although they are not in a public libtiff
    header. Raised by Lee Howard.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2636
  * libtiff/tiffio.h, libtiff/tif_getimage.c
    + add TIFFReadRGBAStripExt() and TIFFReadRGBATileExt() variants
    of the functions without ext, with an extra argument to control
    the stop_on_error behaviour.
  * libtiff/tif_getimage.c
    + fix potential memory leaks in error code path of
    TIFFRGBAImageBegin().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2627
  * libtiff/tif_jpeg.c
    + increase libjpeg max memory usable to 10 MB instead of libjpeg
    1MB default. This helps when creating files with "big" tile,
    without using libjpeg temporary files.
    Related to https://trac.osgeo.org/gdal/ticket/6757
  * libtiff/tif_jpeg.c
    + avoid integer division by zero in JPEGSetupEncode() when
    horizontal or vertical sampling is set to 0.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2653,
    bsc#1033127, CVE-2017-7595
  * libtiff/tif_dirwrite.c
    + in TIFFWriteDirectoryTagCheckedRational, replace assertion by
    runtime check to error out if passed value is strictly
    negative.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2535,
    bsc#1038438, CVE-2016-10371
  * libtiff/tif_dirread.c
    + avoid division by floating point 0 in
    TIFFReadDirEntryCheckedRational() and
    TIFFReadDirEntryCheckedSrational(), and return 0 in that case
    (instead of infinity as before presumably) Apparently some
    sanitizers do not like those divisions by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2644,
    bsc#1033118, CVE-2017-7598
  * libtiff/tif_dir.c, tif_dirread.c, tif_dirwrite.c
    + implement various clampings of double to other data types to
    avoid undefined behaviour if the output range isn't big enough
    to hold the input value.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2643
    http://bugzilla.maptools.org/show_bug.cgi?id=2642
    http://bugzilla.maptools.org/show_bug.cgi?id=2646
    http://bugzilla.maptools.org/show_bug.cgi?id=2647,
    bsc#1033126, CVE-2017-7596, bsc#1033120, CVE-2017-7597,
    bsc#1033113, CVE-2017-7599, bsc#1033112, CVE-2017-7600,
  * libtiff/tif_jpeg.c
    + validate BitsPerSample in JPEGSetupEncode() to avoid undefined
    behaviour caused by invalid shift exponent.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2648,
    bsc#1033111, CVE-2017-7601
  * libtiff/tif_read.c
    + avoid potential undefined behaviour on signed integer addition
    in TIFFReadRawStrip1() in isMapped() case.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2650,
    bsc#1033109, CVE-2017-7602
  * libtiff/tif_getimage.c
    + add explicit uint32 cast in putagreytile to avoid
    UndefinedBehaviorSanitizer warning. Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2658,
    bsc#1033131, CVE-2017-7592
  * libtiff/tif_read.c
    + TIFFReadBufferSetup(): use _TIFFcalloc() to zero initialize
    tif_rawdata.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2651,
    bsc#1033129, CVE-2017-7593
  * libtiff/tiffio.h, tif_unix.c, tif_win32.c, tif_vms.c
    + add _TIFFcalloc()
  * libtiff/tif_luv.c, tif_lzw.c, tif_packbits.c
    + return 0 in Encode functions instead of -1 when
    TIFFFlushData1() fails.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2130
  * libtiff/tif_ojpeg.c
    + fix leak in OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable when read fails. Patch by
    Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2659,
    bsc#1033128, CVE-2017-7594
  * libtiff/tif_jpeg.c
    + only run JPEGFixupTagsSubsampling() if the YCbCrSubsampling
    tag is not explicitly present. This helps a bit to reduce the
    I/O amount when the tag is present (especially on cloud hosted
    files).
  * libtiff/tif_lzw.c
    + in LZWPostEncode(), increase, if necessary, the code bit-width
    after flushing the remaining code and before emitting the EOI
    code. Fixes http://bugzilla.maptools.org/show_bug.cgi?id=1982
  * libtiff/tif_pixarlog.c
    + fix memory leak in error code path of PixarLogSetupDecode().
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2665
  * libtiff/tif_fax3.c, tif_predict.c, tif_getimage.c
    + fix GCC 7 -Wimplicit-fallthrough warnings.
  * libtiff/tif_dirread.c
    + fix memory leak in non DEFER_STRILE_LOAD mode (ie default)
    when there is both a StripOffsets and TileOffsets tag, or a
    StripByteCounts and TileByteCounts
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2689,
    bsc#1042805, CVE-2017-9403)
  * libtiff/tif_ojpeg.c
    + fix potential memory leak in
    OJPEGReadHeaderInfoSecTablesQTable,
    OJPEGReadHeaderInfoSecTablesDcTable and
    OJPEGReadHeaderInfoSecTablesAcTable
    Patch by Nicolas Pena.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2670
  * libtiff/tif_fax3.c
    + avoid crash in Fax3Close() on empty file. Patch by Alan
    Coopersmith + complement by myself.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2673
  * libtiff/tif_read.c
    + TIFFFillStrip(): add limitation to the number of bytes read
    in case td_stripbytecount[strip] is bigger than reasonable,
    so as to avoid excessive memory allocation.
  * libtiff/tif_zip.c, tif_pixarlog.c, tif_predict.c
    + fix memory leak when the underlying codec (ZIP, PixarLog)
    succeeds its setupdecode() method, but PredictorSetup fails.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStrip() and TIFFFillTile(): avoid excessive memory
    allocation in case of shorten files. Only effective on 64 bit
    builds and non-mapped cases.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + TIFFFillStripPartial() / TIFFSeek(), avoid potential integer
    overflows with read_ahead in CHUNKY_STRIP_READ_SUPPORT mode.
    Should especially occur on 32 bit platforms.
  * libtiff/tif_read.c
    + TIFFFillStripPartial()
    + avoid excessive memory allocation in case of shorten files.
    Only effective on 64 bit builds.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_read.c
    + update tif_rawcc in CHUNKY_STRIP_READ_SUPPORT mode with
    tif_rawdataloaded when calling TIFFStartStrip() or
    TIFFFillStripPartial(). This avoids reading beyond tif_rawdata
    when bytecount &gt; tif_rawdatasize. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1545.
    Credit to OSS-Fuzz
  * libtiff/tif_color.c
    + avoid potential int32 overflow in TIFFYCbCrToRGBInit() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1533
    Credit to OSS-Fuzz
  * libtiff/tif_pixarlog.c, tif_luv.c
    + avoid potential int32 overflows in multiply_ms() and add_ms().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1558
    Credit to OSS-Fuzz
  * libtiff/tif_packbits.c
    + fix out-of-buffer read in PackBitsDecode() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1563
    Credit to OSS-Fuzz
  * libtiff/tif_luv.c
    + LogL16InitState(): avoid excessive memory allocation when
    RowsPerStrip tag is missing.
    Credit to OSS-Fuzz (locally run, on GDAL)
  * libtiff/tif_lzw.c
    + update dec_bitsleft at beginning of LZWDecode(), and update
    tif_rawcc at end of LZWDecode(). This is needed to properly
    work with the latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode.
  * libtiff/tif_pixarlog.c
    + PixarLogDecode(): resync tif_rawcp with next_in and tif_rawcc
    with avail_in at beginning and end of function, similarly to
    what is done in LZWDecode(). Likely needed so that it works
    properly with latest chnges in tif_read.c in
    CHUNKY_STRIP_READ_SUPPORT mode. But untested...
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): add basic validation of luma and
    refBlackWhite coefficients (just check they are not NaN for
    now), to avoid potential float to int overflows. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1663
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_read.c
    + _TIFFVSetField(): fix outside range cast of double to float.
    Credit to Google Autofuzz project
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): check luma[1] is not zero to avoid
    division by zero. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1665
    Credit to OSS Fuzz
  * libtiff/tif_getimage.c
    + initYCbCrConversion(): stricter validation for refBlackWhite
    coefficients values. To avoid invalid float-&gt;int32 conversion.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1718
    Credit to OSS Fuzz
  * tools/fax2tiff.c (main)
    + Applied patch by Joerg Ahrens to fix passing client data for
    Win32 builds using tif_win32.c (USE_WIN32_FILEIO defined) for
    file I/O. Patch was provided via email on November 20, 2016.
  * tools/tiffcp.c
    + avoid uint32 underflow in cpDecodedStrips that can cause
    various issues, such as buffer overflows in the library.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2598
  * tools/tiffcrop.c
    + fix readContigStripsIntoBuffer() in -i (ignore) mode so that
    the output buffer is correctly incremented to avoid write
    outside bounds. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2620
  * tools/tiffcrop.c
    + add 3 extra bytes at end of strip buffer in
    readSeparateStripsIntoBuffer() to avoid read outside of heap
    allocated buffer. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2621
  * tools/tiffcrop.c
    + fix integer division by zero when BitsPerSample is missing.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2619
  * tools/tiffinfo.c
    + fix null pointer dereference in -r mode when the image has no
    StripByteCount tag. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2594
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2597
  * tools/tif_dir.c
    + when TIFFGetField(, TIFFTAG_NUMBEROFINKS, ) is called, limit
    the return number of inks to SamplesPerPixel, so that code
    that parses ink names doesn't go past the end of the buffer.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2599
  * tools/tiffcp.c
    + avoid potential division by zero is BitsPerSamples tag is
    missing. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2607
  * tools/tiffcp.c
    + fix uint32 underflow/overflow that can cause heap-based buffer
    overflow. Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2610
  * tools/tiffcp.c
    + replace assert( (bps % 8) == 0 ) by a non assert check.
    Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2605
  * tools/tiff2ps.c
    + fix 2 heap-based buffer overflows (in PSDataBW and
    PSDataColorContig). Reported by Agostino Sarubbo.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2633 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2634.
  * tools/tiff2pdf.c
    + prevent heap-based buffer overflow in -j mode on a paletted
    image. Note: this fix errors out before the overflow happens.
    There could probably be a better fix.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2635
  * tools/tiff2pdf.c
    + fix wrong usage of memcpy() that can trigger unspecified behaviour.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2638
  * tools/tiff2pdf.c
    + avoid potential invalid memory read in t2p_writeproc.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2639
  * tools/tiff2pdf.c
    + avoid potential heap-based overflow in t2p_readwrite_pdf_image_tile().
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2640
  * tools/tiffcrop.c
    + remove extraneous TIFFClose() in error code path, that caused
    double free.
    Related to http://bugzilla.maptools.org/show_bug.cgi?id=2535
  * tools/tiffcp.c
    + error out cleanly in cpContig2SeparateByRow and
    cpSeparate2ContigByRow if BitsPerSample != 8 to avoid heap
    based overflow.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2656 and
    http://bugzilla.maptools.org/show_bug.cgi?id=2657
  * tools/raw2tiff.c
    + avoid integer division by zero.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2631
  * tools/tiff2ps.c
    + call TIFFClose() in error code paths.
  * tools/fax2tiff.c
    + emit appropriate message if the input file is empty. Patch by
    Alan Coopersmith.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2672
  * tools/tiff2bw.c
    + close TIFF handle in error code path.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2677
  * Other issues fixed:
    + bsc#1042804, CVE-2017-9404
- Removed patches:
  * tiff-4.0.7-CVE-2015-7554.patch
  * tiff-4.0.7-CVE-2017-5225.patch
  * tiff-4.0.7-TIFFTAG_FAXRECVPARAMS.patch
  * tiff-CVE-2016-10266.patch
  * tiff-CVE-2016-10267.patch
  * tiff-CVE-2016-10268.patch
  * tiff-CVE-2016-10269.patch
  * tiff-CVE-2016-10270.patch
  * tiff-CVE-2016-10271.patch
  * tiff-CVE-2016-10272.patch
    + Fixed upstream</changelog>
  <changelog author="fstrba@suse.com" date="1511956800">- Upgrade to upstream release 4.0.9
  * Changes in the software configuration:
    + test/Makefile.am: Add some tests for tiff2bw.
    + .appveyor.yml, .travis.yml, build/travis-ci: apply patches
    0001-ci-Travis-script-improvements.patch and
    0002-ci-Invoke-helper-script-via-shell.patch by Roger Leigh
    + .travis.yml, build/travis-ci: new files from
    0001-ci-Add-Travis-support-for-Linux-builds-with-Autoconf.patch
    by Roger Leigh. This patch adds support for the Travis-CI
    service.
    + .appveyor.yml: new file from
    0002-ci-Add-AppVeyor-support.patch by Roger Leigh (sent to
    mailing list on 2017-06-08) This patch adds a .appveyor.yml
    file to the top-level. This allows one to opt in to having a
    branch built on Windows with Cygwin, MinGW and MSVC
    automatically when a branch is pushed to GitHub, GitLab,
    BitBucket or any other supported git hosting service.
    + CMakeLists.txt, test/CMakeLists.txt,
    test/TiffTestCommon.cmake: apply patch
    0001-cmake-Improve-Cygwin-and-MingGW-test-support.patch from
    Roger Leigh. This patch makes the CMake build system support
    running the tests with MinGW or  Cygwin.
    + test/tiffcp-lzw-compat.sh, test/images/quad-lzw-compat.tiff:
    new files to test old-style LZW decompression
    + test/common.sh, Makefile.am, CMakeList.txt: updated with above
    + test/Makefile.am: add missing reference to
    images/quad-lzw-compat.tiff to fix "make distcheck". Patch by
    Roger Leigh
    + nmake.opt: support a DEBUG=1 option, so as to adjust OPTFLAGS
    and use /MDd runtime in debug mode.
  * Changes in libtiff:
    + libtiff/tif_color.c: TIFFYCbCrToRGBInit(): stricter clamping
    to avoid int32 overflow in TIFFYCbCrtoRGB(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1844
    + libtiff/tif_getimage.c: initYCbCrConversion(): stricter
    validation for refBlackWhite coefficients values. To avoid
    invalid float-&gt;int32 conversion (when refBlackWhite[0] ==
    2147483648.f) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=1907
    + libtiff/tif_dirinfo.c, tif_dirread.c: add
    _TIFFCheckFieldIsValidForCodec(), and use it in
    TIFFReadDirectory() so as to ignore fields whose tag is a
    codec-specified tag but this codec is not enabled. This avoids
    TIFFGetField() to behave differently depending on whether the
    codec is enabled or not, and thus can avoid stack based buffer
    overflows in a number of TIFF utilities such as tiffsplit,
    tiffcmp, thumbnail, etc. Patch derived from
    0063-Handle-properly-CODEC-specific-tags.patch
    (http://bugzilla.maptools.org/show_bug.cgi?id=2580) by Raphaël
    Hertzog.
    Fixes: http://bugzilla.maptools.org/show_bug.cgi?id=2580
    http://bugzilla.maptools.org/show_bug.cgi?id=2693
    http://bugzilla.maptools.org/show_bug.cgi?id=2625
    (CVE-2016-10095, bsc#1017690)
    http://bugzilla.maptools.org/show_bug.cgi?id=2564
    (CVE-2015-7554, bsc#960341)
    http://bugzilla.maptools.org/show_bug.cgi?id=2561
    (CVE-2016-5318, bsc#983436)
    http://bugzilla.maptools.org/show_bug.cgi?id=2499
    (CVE-2014-8128, bsc#969783)
    http://bugzilla.maptools.org/show_bug.cgi?id=2441
    http://bugzilla.maptools.org/show_bug.cgi?id=2433
    + libtiff/tif_swab.c: if DISABLE_CHECK_TIFFSWABMACROS is
    defined, do not do the #ifdef TIFFSwabXXX checks. Make it
    easier for GDAL to rename the symbols of its internal libtiff
    copy.
    + libtiff/tif_dirread.c: fix regression of libtiff 4.0.8 in
    ChopUpSingleUncompressedStrip() regarding update of newly
    single-strip uncompressed files whose bytecount is 0. Before
    the change of 2016-12-03, the condition bytecount==0 used to
    trigger an early exit/disabling of strip chop. Re-introduce
    that in update mode. Otherwise this cause later incorrect
    setting for the value of StripByCounts/StripOffsets.
    (https://trac.osgeo.org/gdal/ticket/6924)
    + libtiff/tif_dirread.c: TIFFFetchStripThing(): limit the
    number of items read in StripOffsets/StripByteCounts tags to
    the number of strips to avoid excessive memory allocation.
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2215
    + libtiff/tif_getimage.c: avoid many (harmless) unsigned int
    overflows.
    + libtiff/tif_fax3.c: avoid unsigned int overflow in
    Fax3Encode2DRow(). Could potentially be a bug with huge rows.
    + libtiff/tif_jpeg.c: avoid (harmless) unsigned int overflow on
    tiled images.
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts() and BYTECOUNTLOOKSBAD when file is
    too short.
    + libtiff/tif_predict.c: decorate legitimate functions where
    unsigned int overflow occur with
    TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    + libtiff/tif_dirread.c: avoid unsigned int overflow in
    EstimateStripByteCounts()
    + libtiff/tiffiop.h: add TIFF_NOSANITIZE_UNSIGNED_INT_OVERFLOW
    macro to disable CLang warnings raised by
  - fsanitize=undefined,unsigned-integer-overflow
    + libtiff/tif_jpeg.c: add anti-denial of service measure to
    avoid excessive CPU consumption on progressive JPEGs with a
    huge number of scans. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    Note: only affects libtiff since 2014-12-29 where support of
    non-baseline JPEG was added.
    + libtiff/tif_jpeg.c: error out at decoding time if anticipated
    libjpeg memory allocation is above 100 MB. libjpeg in case of
    multiple scans, which is allowed even in baseline JPEG, if
    components are spread over several scans and not
    interleavedin a single one, needs to allocate memory (or
    backing store) for the whole strip/tile. See
    http://www.libjpeg-turbo.org/pmwiki/uploads/About/TwoIssueswiththeJPEGStandard.pdf
    This limitation may be overriden by setting the
    LIBTIFF_ALLOW_LARGE_LIBJPEG_MEM_ALLOC environment variable, or
    recompiling libtiff with a custom value of
    TIFF_LIBJPEG_LARGEST_MEM_ALLOC macro.
    + libtiff/tif_jbig.c: fix memory leak in error code path of
    JBIGDecode()
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2706
    (CVE-2017-9936, bsc#1046073)
    + libtiff/tif_dirread.c: in TIFFReadDirEntryFloat(), check that
    a double value can fit in a float before casting.
    + libtiff/tiffiop.h, libtiff/tif_jpeg.c, libtiff/tif_jpeg_12.c,
    libtiff/tif_read.c: make TIFFReadScanline() works in
    CHUNKY_STRIP_READ_SUPPORT mode with JPEG stream with multiple
    scans. Also make configurable through a
    LIBTIFF_JPEG_MAX_ALLOWED_SCAN_NUMBER environment variable the
    maximum number of scans allowed. Defaults to 100.
    + libtiff/tif_read.c: TIFFFillTile(): add limitation to the
    number of bytes read in case td_stripbytecount[strip] is
    bigger than reasonable, so as to avoid excessive memory
    allocation (similarly to what was done for TIFFFileStrip() on
    2017-05-10)
    + libtiff/tif_getimage.c: use
    _TIFFReadEncodedStripAndAllocBuffer(). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2433
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedStripAndAllocBuffer() function, variant of
    TIFFReadEncodedStrip() that allocates the decoded buffer only
    after a first successful TIFFFillStrip(). This avoids
    excessive memory allocation on corrupted files.
    + libtiff/tif_dirwrite.c: in TIFFWriteDirectoryTagCheckedXXXX()
    functions associated with LONG8/SLONG8 data type, replace
    assertion that the file is BigTIFF, by a non-fatal error.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2712
    + libtiff/tif_read.c: TIFFStartTile(): set tif_rawcc to
    tif_rawdataloaded when it is set. Similarly to
    TIFFStartStrip(). This issue was revealed by the change of
    2017-06-30 in TIFFFileTile(), limiting the number of bytes
    read. But it could probably have been hit too in
    CHUNKY_STRIP_READ_SUPPORT mode previously. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2454
    + libtiff/tif_error.c, tif_warning.c: correctly use va_list
    when both an old-style and new-style warning/error handlers
    are installed. Patch by Paavo Helde (sent on the mailing list)
    + libtiff/tif_getimage.c: use _TIFFReadTileAndAllocBuffer().
    Fixes https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2470
    + libtiff/tif_read.c, tiffiop.h: add a
    _TIFFReadEncodedTileAndAllocBuffer() and
    _TIFFReadTileAndAllocBuffer() variants of
    TIFFReadEncodedTile() and TIFFReadTile() that allocates the
    decoded buffer only after a first successful TIFFFillTile().
    This avoids excessive memory allocation on corrupted files.
    + libtiff/tif_pixarlog.c: avoid excessive memory allocation on
    decoding when RowsPerStrip tag is not defined (and thus
    td_rowsperstrip == UINT_MAX) Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2554
    + libtiff/tif_lzw.c: fix 4.0.8 regression in the decoding of
    old-style LZW compressed files.
    + libtiff/tif_lzw.c: fix potential out-of-buffer read on 1-byte
    LZW strips. Crashing issue only on memory mapped files, where
    the strip offset is the last byte of the file, and the file
    size is a multiple of one page size on the CPU architecture
    (typically 4096)
    + libtiff/tif_dir.c: avoid potential null pointer dereference
    in _TIFFVGetField() on corrupted TIFFTAG_NUMBEROFINKS tag
    instance.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2713
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + libtiff/tif_read.c: TIFFFillStrip() / TIFFFillTile().
    Complementary fix for
    http://bugzilla.maptools.org/show_bug.cgi?id=2708 in the
    isMapped() case, so as to avoid excessive memory allocation
    when we need a temporary buffer but the file is truncated.
    + libtiff/tif_read.c: in TIFFFetchStripThing(), only grow the
    arrays that hold StripOffsets/StripByteCounts, when they are
    smaller than the expected number of striles, up to 1 million
    striles, and error out beyond. Can be tweaked by setting the
    environment variable LIBTIFF_STRILE_ARRAY_MAX_RESIZE_COUNT.
    This partially goes against a change added on 2002-12-17 to
    accept those arrays of wrong sizes, but is needed to avoid
    denial of services. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2350
    + libtiff/tif_read.c: add protection against excessive memory
    allocation attempts in TIFFReadDirEntryArray() on short files.
    Effective for mmap'ed case. And non-mmap'ed case, but
    restricted to 64bit builds. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2675
    + libtiff/tif_luv.c: LogLuvInitState(): avoid excessive memory
    allocation when RowsPerStrip tag is missing. Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2683
    + libtiff/tif_getimage.c: gtTileContig() and gtTileSeparate():
    properly break from loops on error when stoponerr is set,
    instead of going on iterating on row based loop.
    + libtiff/tif_getimage.c: fix fromskew computation when
    to-be-skipped pixel number is not a multiple of the horizontal
    subsampling, and also in some other cases. Impact
    putcontig8bitYCbCr44tile, putcontig8bitYCbCr42tile,
    putcontig8bitYCbCr41tile, putcontig8bitYCbCr21tile and
    putcontig8bitYCbCr12tile Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2637 and
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2691
    + libtiff/tif_luv.c: further reduce memory requirements for
    temporary buffer when RowsPerStrip &gt;= image_length in
    LogLuvInitState() and LogL16InitState(). Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=2700
    + libtiff/tif_dirwrite.c: replace assertion related to not
    finding the SubIFD tag by runtime check (in
    TIFFWriteDirectorySec()) Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2727
    + libtiff/tif_dirwrite.c: replace assertion to tag value not
    fitting on uint32 when selecting the value of SubIFD tag by
    runtime check (in TIFFWriteDirectoryTagSubifd()). Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2728
    + libtiff/tif_jpeg.c: accept reading the last strip of a JPEG
    compressed file if the codestream height is larger than the
    truncated height of the strip. Emit a warning in this
    situation since this is non compliant.
    + libtiff/tiffiop.h, tif_aux.c: redirect SeekOK() macro to a
    _TIFFSeekoK() function that checks if the offset is not
    bigger than INT64_MAX, so as to avoid a -1 error return code
    of TIFFSeekFile() to match a required seek to UINT64_MAX/-1.
    Fixes http://bugzilla.maptools.org/show_bug.cgi?id=2726
    + libtiff/tif_dirread.c: add NULL check to avoid likely false
    positive null-pointer dereference warning by CLang Static
    Analyzer.
    + libtiff/libtiff.def: add TIFFReadRGBAStripExt and
    TIFFReadRGBATileExt Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2735
    + libtiff/tif_jpeg.c: add compatibility with libjpeg-turbo
    1.5.2 that honours max_memory_to_use &gt; 0. Cf
    https://github.com/libjpeg-turbo/libjpeg-turbo/issues/162
    + libtiff/tif_getimage.c: avoid floating point division by zero
    in initCIELabConversion() Fixes
    https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=3733
  * Changes in the tools:
    + tools/tiff2pdf.c: prevent heap buffer overflow write in "Raw"
    mode on PlanarConfig=Contig input images. Fixes
    http://bugzilla.maptools.org/show_bug.cgi?id=2715
    + tools/tiffset.c: fix setting a single value for the
    ExtraSamples tag (and other tags with variable number of
    values). So 'tiffset -s ExtraSamples 1 X'. This only worked
    when setting 2 or more values, but not just one.
    + tools/fax2tiff.c (_FAX_Client_Data): Pass FAX_Client_Data as
    the client data. This client data is not used at all at the
    moment, but it makes the most sense. Issue that the value of
    client_data.fd was passed where a pointer is expected.
    + tools/tiff2pdf.c (t2p_sample_realize_palette): Fix possible
    arithmetic overflow in bounds checking code and eliminate
    comparison between signed and unsigned type.
    + tools/tiff2bw.c (main): Free memory allocated in the tiff2bw
    program. This is in response to the report associated with
    CVE-2017-16232, bsc#1069213 but does not solve the extremely
    high memory usage with the associated POC file.</changelog>
  <changelog author="dimstar@opensuse.org" date="1513857600">- Fix check section:
  + Make sure to get back to the right directory after chdir to
    'tools', or we can't run the 2nd test suite.
  + Fix typo: the tests are located in a directory called 'test',
    not 'tests'.</changelog>
  <changelog author="mvetter@suse.com" date="1518782400">- bsc#1046077: Add tiff-4.0.9-bsc1046077-CVE-2017-9935.patch
  Fix Heap-based buffer overflow in t2p_write_pdf</changelog>
  <changelog author="mvetter@suse.com" date="1519128000">- bsc#1081690: Add tiff-4.0.9-bsc1081690-CVE-2018-5784.patch
  Fix uncontrolled resource consumption in TIFFSetDirectory</changelog>
  <changelog author="pgajdos@suse.com" date="1526385600">- security update
  * CVE-2018-10963 [bsc#1092949]
    + tiff-CVE-2018-10963.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1526644800">- security update
  * CVE-2017-18013 [bsc#1074317]
    + tiff-CVE-2017-18013.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113600">- security update
  * CVE-2018-7456 [bsc#1082825]
    + tiff-CVE-2018-7456.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528113601">- security update
  * CVE-2017-11613 [bsc#1082332]
    + tiff-CVE-2017-11613.patch</changelog>
  <changelog author="pgajdos@suse.com" date="1528200000">- security update
  * CVE-2018-8905 [bsc#1086408]
    + tiff-CVE-2018-8905.patch</changelog>
</package>
<package pkgid="d364406cf8abadd1928d279b375c93d3dc6a0b2f86407a750ab3184935d1bf09" name="tigervnc" arch="src">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="f0954b89167c2db1771b20f0e6725a1df22e9a02486fecd9e1fa0a3c81f8136a" name="tigervnc" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="42dee20c8b59d2fe4c9ba5bd314c5cac059bf1d98361a8b9e736c7e63112332b" name="tigervnc-x11vnc" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="9ec8a3e2e2c18cd3aebb7d3e0258702e0c3ef7eb9a24690d3aefcbd197aa387a" name="timezone" arch="src">
  <version epoch="0" ver="2018e" rel="lp150.2.3.3"/>
  <changelog author="lchiquitto@suse.com" date="1458216000">- timezone update 2016b [boo#971377]
  * New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan
    and Ulyanovsk Oblasts, Russia, both of which will switch from
    +03 to +04 on 2016-03-27 at 02:00 local time.
  * New zone Asia/Barnaul for Altai Krai and Altai Republic, Russia,
    which will switch from +06 to +07 on the same date and local time.
  * Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  * As a trial of a new system that needs less information to be made
    up, the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  * Haiti will not observe DST in 2016.
  * Palestine's spring-forward transition on 2016-03-26 is at 01:00,
    not 00:00.
  * tzselect's diagnostics and checking, and checktab.awk's checking,
    have been improved.
  * tzselect now tests Julian-date TZ settings more accurately.
    (Thanks to J William Piggott.)
- tzcode-revert-01-8c9cb9580.patch, tzcode-revert-02-301f794f3.patch,
  tzcode-revert-03-39fd078a6.patch: Revert some porting fixes specific
  to MS-Windows that rewrites parts of zic touched by our patches.</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- timezone update 2016c [boo#972433]
  * Azerbaijan no longer observes DST (Asia/Baku)
  * Chile reverts from permanent to seasonal DST.
  * Correct past timestamps for Europe/Kaliningrad, Europe/Vilnius,
    Europe/Volgograd 1989-1991</changelog>
  <changelog author="astieger@suse.com" date="1460980800">- timezone update 2016d
  * Venezuela (America/Caracas) switches from -0430 to -04 on
    2016-05-01 at 02:30 [boo#975875]
  * Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  * New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on
    2016-05-29 at 02:00
  * Changes for past time zones (corrections and new Europe/Kirov)
  * Corrections to historical time in Kazakhstan from 1991
    through 2005.</changelog>
  <changelog author="astieger@suse.com" date="1465905600">- timezone update 2016e:
  * Africa/Cairo observes DST in 2016 from July 7 to the end of
    October (boo#982833)
  * Changes affecting past timestamps in arctic and antarctic
    locations while uninhabited
  * Adjust Asia/Baku's 1992 DST transition
  * zic now outputs a dummy transition at time 2**31 - 1 in zones
    whose POSIX-style TZ strings contain a '&lt;', working around Qt
    bug 53071</changelog>
  <changelog author="astieger@suse.com" date="1467720000">- timezone update 2016f:
  * Egypt (Africa/Cairo) DST change 2016-07-07 cancelled boo#987720
  * Asia/Novosibirsk switches from +06 to +07 on 2016-07-24 02:00
  * Asia/Novokuznetsk and Asia/Novosibirsk now use numeric time
    zone abbreviations instead of invented ones.
  * Europe/Minsk's 1992-03-29 spring-forward transition was at
    02:00 not 00:00.
- new upstream signing key not available, dropping</changelog>
  <changelog author="astieger@suse.com" date="1470139200">- add new signing key which is now available. Next release will
  revert to previous key.</changelog>
  <changelog author="astieger@suse.com" date="1470657600">- A positive leap second will be added at the end of 2016-12-31
  (bsc#988184) 0001-Positive-leap-second-on-2016-12-31.patch</changelog>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
</package>
<package pkgid="8f81efe47cc4dd15f4d679327f7d762dc05270d16166658ae63d83315bdbf4b1" name="timezone" arch="x86_64">
  <version epoch="0" ver="2018e" rel="lp150.2.3.3"/>
  <changelog author="lchiquitto@suse.com" date="1458216000">- timezone update 2016b [boo#971377]
  * New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan
    and Ulyanovsk Oblasts, Russia, both of which will switch from
    +03 to +04 on 2016-03-27 at 02:00 local time.
  * New zone Asia/Barnaul for Altai Krai and Altai Republic, Russia,
    which will switch from +06 to +07 on the same date and local time.
  * Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  * As a trial of a new system that needs less information to be made
    up, the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  * Haiti will not observe DST in 2016.
  * Palestine's spring-forward transition on 2016-03-26 is at 01:00,
    not 00:00.
  * tzselect's diagnostics and checking, and checktab.awk's checking,
    have been improved.
  * tzselect now tests Julian-date TZ settings more accurately.
    (Thanks to J William Piggott.)
- tzcode-revert-01-8c9cb9580.patch, tzcode-revert-02-301f794f3.patch,
  tzcode-revert-03-39fd078a6.patch: Revert some porting fixes specific
  to MS-Windows that rewrites parts of zic touched by our patches.</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- timezone update 2016c [boo#972433]
  * Azerbaijan no longer observes DST (Asia/Baku)
  * Chile reverts from permanent to seasonal DST.
  * Correct past timestamps for Europe/Kaliningrad, Europe/Vilnius,
    Europe/Volgograd 1989-1991</changelog>
  <changelog author="astieger@suse.com" date="1460980800">- timezone update 2016d
  * Venezuela (America/Caracas) switches from -0430 to -04 on
    2016-05-01 at 02:30 [boo#975875]
  * Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  * New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on
    2016-05-29 at 02:00
  * Changes for past time zones (corrections and new Europe/Kirov)
  * Corrections to historical time in Kazakhstan from 1991
    through 2005.</changelog>
  <changelog author="astieger@suse.com" date="1465905600">- timezone update 2016e:
  * Africa/Cairo observes DST in 2016 from July 7 to the end of
    October (boo#982833)
  * Changes affecting past timestamps in arctic and antarctic
    locations while uninhabited
  * Adjust Asia/Baku's 1992 DST transition
  * zic now outputs a dummy transition at time 2**31 - 1 in zones
    whose POSIX-style TZ strings contain a '&lt;', working around Qt
    bug 53071</changelog>
  <changelog author="astieger@suse.com" date="1467720000">- timezone update 2016f:
  * Egypt (Africa/Cairo) DST change 2016-07-07 cancelled boo#987720
  * Asia/Novosibirsk switches from +06 to +07 on 2016-07-24 02:00
  * Asia/Novokuznetsk and Asia/Novosibirsk now use numeric time
    zone abbreviations instead of invented ones.
  * Europe/Minsk's 1992-03-29 spring-forward transition was at
    02:00 not 00:00.
- new upstream signing key not available, dropping</changelog>
  <changelog author="astieger@suse.com" date="1470139200">- add new signing key which is now available. Next release will
  revert to previous key.</changelog>
  <changelog author="astieger@suse.com" date="1470657600">- A positive leap second will be added at the end of 2016-12-31
  (bsc#988184) 0001-Positive-leap-second-on-2016-12-31.patch</changelog>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
</package>
<package pkgid="ffa359b2f954d19e415decf2c767861c5cb2bc0623f67c703daa6c6419fb2855" name="timezone" arch="src">
  <version epoch="0" ver="2018e" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1458734400">- timezone update 2016c [boo#972433]
  * Azerbaijan no longer observes DST (Asia/Baku)
  * Chile reverts from permanent to seasonal DST.
  * Correct past timestamps for Europe/Kaliningrad, Europe/Vilnius,
    Europe/Volgograd 1989-1991</changelog>
  <changelog author="astieger@suse.com" date="1460980800">- timezone update 2016d
  * Venezuela (America/Caracas) switches from -0430 to -04 on
    2016-05-01 at 02:30 [boo#975875]
  * Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  * New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on
    2016-05-29 at 02:00
  * Changes for past time zones (corrections and new Europe/Kirov)
  * Corrections to historical time in Kazakhstan from 1991
    through 2005.</changelog>
  <changelog author="astieger@suse.com" date="1465905600">- timezone update 2016e:
  * Africa/Cairo observes DST in 2016 from July 7 to the end of
    October (boo#982833)
  * Changes affecting past timestamps in arctic and antarctic
    locations while uninhabited
  * Adjust Asia/Baku's 1992 DST transition
  * zic now outputs a dummy transition at time 2**31 - 1 in zones
    whose POSIX-style TZ strings contain a '&lt;', working around Qt
    bug 53071</changelog>
  <changelog author="astieger@suse.com" date="1467720000">- timezone update 2016f:
  * Egypt (Africa/Cairo) DST change 2016-07-07 cancelled boo#987720
  * Asia/Novosibirsk switches from +06 to +07 on 2016-07-24 02:00
  * Asia/Novokuznetsk and Asia/Novosibirsk now use numeric time
    zone abbreviations instead of invented ones.
  * Europe/Minsk's 1992-03-29 spring-forward transition was at
    02:00 not 00:00.
- new upstream signing key not available, dropping</changelog>
  <changelog author="astieger@suse.com" date="1470139200">- add new signing key which is now available. Next release will
  revert to previous key.</changelog>
  <changelog author="astieger@suse.com" date="1470657600">- A positive leap second will be added at the end of 2016-12-31
  (bsc#988184) 0001-Positive-leap-second-on-2016-12-31.patch</changelog>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- in SLE 15 / Leap 15.0 yast2-country stopped setting TIMEZONE in
  /etc/sysconfig/clock and called systemd timedatectl instead.
  No longer set /etc/localtime on timezone package updates to
  avoid setting an incorrect timezone. bsc#1093392</changelog>
</package>
<package pkgid="a9831c7484d454e97f4591ff9a5892ce75a43dd8bd633fa9c447425e40be272a" name="timezone" arch="x86_64">
  <version epoch="0" ver="2018e" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1458734400">- timezone update 2016c [boo#972433]
  * Azerbaijan no longer observes DST (Asia/Baku)
  * Chile reverts from permanent to seasonal DST.
  * Correct past timestamps for Europe/Kaliningrad, Europe/Vilnius,
    Europe/Volgograd 1989-1991</changelog>
  <changelog author="astieger@suse.com" date="1460980800">- timezone update 2016d
  * Venezuela (America/Caracas) switches from -0430 to -04 on
    2016-05-01 at 02:30 [boo#975875]
  * Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  * New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on
    2016-05-29 at 02:00
  * Changes for past time zones (corrections and new Europe/Kirov)
  * Corrections to historical time in Kazakhstan from 1991
    through 2005.</changelog>
  <changelog author="astieger@suse.com" date="1465905600">- timezone update 2016e:
  * Africa/Cairo observes DST in 2016 from July 7 to the end of
    October (boo#982833)
  * Changes affecting past timestamps in arctic and antarctic
    locations while uninhabited
  * Adjust Asia/Baku's 1992 DST transition
  * zic now outputs a dummy transition at time 2**31 - 1 in zones
    whose POSIX-style TZ strings contain a '&lt;', working around Qt
    bug 53071</changelog>
  <changelog author="astieger@suse.com" date="1467720000">- timezone update 2016f:
  * Egypt (Africa/Cairo) DST change 2016-07-07 cancelled boo#987720
  * Asia/Novosibirsk switches from +06 to +07 on 2016-07-24 02:00
  * Asia/Novokuznetsk and Asia/Novosibirsk now use numeric time
    zone abbreviations instead of invented ones.
  * Europe/Minsk's 1992-03-29 spring-forward transition was at
    02:00 not 00:00.
- new upstream signing key not available, dropping</changelog>
  <changelog author="astieger@suse.com" date="1470139200">- add new signing key which is now available. Next release will
  revert to previous key.</changelog>
  <changelog author="astieger@suse.com" date="1470657600">- A positive leap second will be added at the end of 2016-12-31
  (bsc#988184) 0001-Positive-leap-second-on-2016-12-31.patch</changelog>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- in SLE 15 / Leap 15.0 yast2-country stopped setting TIMEZONE in
  /etc/sysconfig/clock and called systemd timedatectl instead.
  No longer set /etc/localtime on timezone package updates to
  avoid setting an incorrect timezone. bsc#1093392</changelog>
</package>
<package pkgid="368f4cf03e07f998d92ed27d94580abd7952814496276dfb3528d687a2d0e33f" name="timezone-java" arch="noarch">
  <version epoch="0" ver="2018e" rel="lp150.2.3.3"/>
  <changelog author="lchiquitto@suse.com" date="1458216000">- timezone update 2016b [boo#971377]
  * New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan
    and Ulyanovsk Oblasts, Russia, both of which will switch from
    +03 to +04 on 2016-03-27 at 02:00 local time.
  * New zone Asia/Barnaul for Altai Krai and Altai Republic, Russia,
    which will switch from +06 to +07 on the same date and local time.
  * Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  * As a trial of a new system that needs less information to be made
    up, the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  * Haiti will not observe DST in 2016.
  * Palestine's spring-forward transition on 2016-03-26 is at 01:00,
    not 00:00.
  * tzselect's diagnostics and checking, and checktab.awk's checking,
    have been improved.
  * tzselect now tests Julian-date TZ settings more accurately.
    (Thanks to J William Piggott.)
- tzcode-revert-01-8c9cb9580.patch, tzcode-revert-02-301f794f3.patch,
  tzcode-revert-03-39fd078a6.patch: Revert some porting fixes specific
  to MS-Windows that rewrites parts of zic touched by our patches.</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- timezone update 2016c [boo#972433]
  * Azerbaijan no longer observes DST (Asia/Baku)
  * Chile reverts from permanent to seasonal DST.
  * Correct past timestamps for Europe/Kaliningrad, Europe/Vilnius,
    Europe/Volgograd 1989-1991</changelog>
  <changelog author="astieger@suse.com" date="1460980800">- timezone update 2016d
  * Venezuela (America/Caracas) switches from -0430 to -04 on
    2016-05-01 at 02:30 [boo#975875]
  * Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  * New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on
    2016-05-29 at 02:00
  * Changes for past time zones (corrections and new Europe/Kirov)
  * Corrections to historical time in Kazakhstan from 1991
    through 2005.</changelog>
  <changelog author="astieger@suse.com" date="1465905600">- timezone update 2016e:
  * Africa/Cairo observes DST in 2016 from July 7 to the end of
    October (boo#982833)
  * Changes affecting past timestamps in arctic and antarctic
    locations while uninhabited
  * Adjust Asia/Baku's 1992 DST transition
  * zic now outputs a dummy transition at time 2**31 - 1 in zones
    whose POSIX-style TZ strings contain a '&lt;', working around Qt
    bug 53071</changelog>
  <changelog author="astieger@suse.com" date="1467720000">- timezone update 2016f:
  * Egypt (Africa/Cairo) DST change 2016-07-07 cancelled boo#987720
  * Asia/Novosibirsk switches from +06 to +07 on 2016-07-24 02:00
  * Asia/Novokuznetsk and Asia/Novosibirsk now use numeric time
    zone abbreviations instead of invented ones.
  * Europe/Minsk's 1992-03-29 spring-forward transition was at
    02:00 not 00:00.
- new upstream signing key not available, dropping</changelog>
  <changelog author="astieger@suse.com" date="1470139200">- add new signing key which is now available. Next release will
  revert to previous key.</changelog>
  <changelog author="astieger@suse.com" date="1470657600">- A positive leap second will be added at the end of 2016-12-31
  (bsc#988184) 0001-Positive-leap-second-on-2016-12-31.patch</changelog>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
</package>
<package pkgid="453799accdced924f38eab7a8f2153efecd488759b02c29d16d923ce2bbbeba8" name="timezone-java" arch="src">
  <version epoch="0" ver="2018e" rel="lp150.2.3.3"/>
  <changelog author="lchiquitto@suse.com" date="1458216000">- timezone update 2016b [boo#971377]
  * New zones Europe/Astrakhan and Europe/Ulyanovsk for Astrakhan
    and Ulyanovsk Oblasts, Russia, both of which will switch from
    +03 to +04 on 2016-03-27 at 02:00 local time.
  * New zone Asia/Barnaul for Altai Krai and Altai Republic, Russia,
    which will switch from +06 to +07 on the same date and local time.
  * Asia/Sakhalin moves from +10 to +11 on 2016-03-27 at 02:00.
  * As a trial of a new system that needs less information to be made
    up, the new zones use numeric time zone abbreviations like "+04"
    instead of invented abbreviations like "ASTT".
  * Haiti will not observe DST in 2016.
  * Palestine's spring-forward transition on 2016-03-26 is at 01:00,
    not 00:00.
  * tzselect's diagnostics and checking, and checktab.awk's checking,
    have been improved.
  * tzselect now tests Julian-date TZ settings more accurately.
    (Thanks to J William Piggott.)
- tzcode-revert-01-8c9cb9580.patch, tzcode-revert-02-301f794f3.patch,
  tzcode-revert-03-39fd078a6.patch: Revert some porting fixes specific
  to MS-Windows that rewrites parts of zic touched by our patches.</changelog>
  <changelog author="astieger@suse.com" date="1458734400">- timezone update 2016c [boo#972433]
  * Azerbaijan no longer observes DST (Asia/Baku)
  * Chile reverts from permanent to seasonal DST.
  * Correct past timestamps for Europe/Kaliningrad, Europe/Vilnius,
    Europe/Volgograd 1989-1991</changelog>
  <changelog author="astieger@suse.com" date="1460980800">- timezone update 2016d
  * Venezuela (America/Caracas) switches from -0430 to -04 on
    2016-05-01 at 02:30 [boo#975875]
  * Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  * New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on
    2016-05-29 at 02:00
  * Changes for past time zones (corrections and new Europe/Kirov)
  * Corrections to historical time in Kazakhstan from 1991
    through 2005.</changelog>
  <changelog author="astieger@suse.com" date="1465905600">- timezone update 2016e:
  * Africa/Cairo observes DST in 2016 from July 7 to the end of
    October (boo#982833)
  * Changes affecting past timestamps in arctic and antarctic
    locations while uninhabited
  * Adjust Asia/Baku's 1992 DST transition
  * zic now outputs a dummy transition at time 2**31 - 1 in zones
    whose POSIX-style TZ strings contain a '&lt;', working around Qt
    bug 53071</changelog>
  <changelog author="astieger@suse.com" date="1467720000">- timezone update 2016f:
  * Egypt (Africa/Cairo) DST change 2016-07-07 cancelled boo#987720
  * Asia/Novosibirsk switches from +06 to +07 on 2016-07-24 02:00
  * Asia/Novokuznetsk and Asia/Novosibirsk now use numeric time
    zone abbreviations instead of invented ones.
  * Europe/Minsk's 1992-03-29 spring-forward transition was at
    02:00 not 00:00.
- new upstream signing key not available, dropping</changelog>
  <changelog author="astieger@suse.com" date="1470139200">- add new signing key which is now available. Next release will
  revert to previous key.</changelog>
  <changelog author="astieger@suse.com" date="1470657600">- A positive leap second will be added at the end of 2016-12-31
  (bsc#988184) 0001-Positive-leap-second-on-2016-12-31.patch</changelog>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
</package>
<package pkgid="a2d8d0259696ec8d10b08e098f02e2044c5b3c285c998c578748829cbbcf9a02" name="timezone-java" arch="noarch">
  <version epoch="0" ver="2018e" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1458734400">- timezone update 2016c [boo#972433]
  * Azerbaijan no longer observes DST (Asia/Baku)
  * Chile reverts from permanent to seasonal DST.
  * Correct past timestamps for Europe/Kaliningrad, Europe/Vilnius,
    Europe/Volgograd 1989-1991</changelog>
  <changelog author="astieger@suse.com" date="1460980800">- timezone update 2016d
  * Venezuela (America/Caracas) switches from -0430 to -04 on
    2016-05-01 at 02:30 [boo#975875]
  * Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  * New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on
    2016-05-29 at 02:00
  * Changes for past time zones (corrections and new Europe/Kirov)
  * Corrections to historical time in Kazakhstan from 1991
    through 2005.</changelog>
  <changelog author="astieger@suse.com" date="1465905600">- timezone update 2016e:
  * Africa/Cairo observes DST in 2016 from July 7 to the end of
    October (boo#982833)
  * Changes affecting past timestamps in arctic and antarctic
    locations while uninhabited
  * Adjust Asia/Baku's 1992 DST transition
  * zic now outputs a dummy transition at time 2**31 - 1 in zones
    whose POSIX-style TZ strings contain a '&lt;', working around Qt
    bug 53071</changelog>
  <changelog author="astieger@suse.com" date="1467720000">- timezone update 2016f:
  * Egypt (Africa/Cairo) DST change 2016-07-07 cancelled boo#987720
  * Asia/Novosibirsk switches from +06 to +07 on 2016-07-24 02:00
  * Asia/Novokuznetsk and Asia/Novosibirsk now use numeric time
    zone abbreviations instead of invented ones.
  * Europe/Minsk's 1992-03-29 spring-forward transition was at
    02:00 not 00:00.
- new upstream signing key not available, dropping</changelog>
  <changelog author="astieger@suse.com" date="1470139200">- add new signing key which is now available. Next release will
  revert to previous key.</changelog>
  <changelog author="astieger@suse.com" date="1470657600">- A positive leap second will be added at the end of 2016-12-31
  (bsc#988184) 0001-Positive-leap-second-on-2016-12-31.patch</changelog>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- in SLE 15 / Leap 15.0 yast2-country stopped setting TIMEZONE in
  /etc/sysconfig/clock and called systemd timedatectl instead.
  No longer set /etc/localtime on timezone package updates to
  avoid setting an incorrect timezone. bsc#1093392</changelog>
</package>
<package pkgid="4ade55e7bf5ba3d8a088dab60de9d3eaf314de49c6c5b692432bf072a500cbfb" name="timezone-java" arch="src">
  <version epoch="0" ver="2018e" rel="lp150.2.6.1"/>
  <changelog author="astieger@suse.com" date="1458734400">- timezone update 2016c [boo#972433]
  * Azerbaijan no longer observes DST (Asia/Baku)
  * Chile reverts from permanent to seasonal DST.
  * Correct past timestamps for Europe/Kaliningrad, Europe/Vilnius,
    Europe/Volgograd 1989-1991</changelog>
  <changelog author="astieger@suse.com" date="1460980800">- timezone update 2016d
  * Venezuela (America/Caracas) switches from -0430 to -04 on
    2016-05-01 at 02:30 [boo#975875]
  * Asia/Magadan switches from +10 to +11 on 2016-04-24 at 02:00.
  * New zone Asia/Tomsk, split off from Asia/Novosibirsk. It covers
    Tomsk Oblast, Russia, which switches from +06 to +07 on
    2016-05-29 at 02:00
  * Changes for past time zones (corrections and new Europe/Kirov)
  * Corrections to historical time in Kazakhstan from 1991
    through 2005.</changelog>
  <changelog author="astieger@suse.com" date="1465905600">- timezone update 2016e:
  * Africa/Cairo observes DST in 2016 from July 7 to the end of
    October (boo#982833)
  * Changes affecting past timestamps in arctic and antarctic
    locations while uninhabited
  * Adjust Asia/Baku's 1992 DST transition
  * zic now outputs a dummy transition at time 2**31 - 1 in zones
    whose POSIX-style TZ strings contain a '&lt;', working around Qt
    bug 53071</changelog>
  <changelog author="astieger@suse.com" date="1467720000">- timezone update 2016f:
  * Egypt (Africa/Cairo) DST change 2016-07-07 cancelled boo#987720
  * Asia/Novosibirsk switches from +06 to +07 on 2016-07-24 02:00
  * Asia/Novokuznetsk and Asia/Novosibirsk now use numeric time
    zone abbreviations instead of invented ones.
  * Europe/Minsk's 1992-03-29 spring-forward transition was at
    02:00 not 00:00.
- new upstream signing key not available, dropping</changelog>
  <changelog author="astieger@suse.com" date="1470139200">- add new signing key which is now available. Next release will
  revert to previous key.</changelog>
  <changelog author="astieger@suse.com" date="1470657600">- A positive leap second will be added at the end of 2016-12-31
  (bsc#988184) 0001-Positive-leap-second-on-2016-12-31.patch</changelog>
  <changelog author="astieger@suse.com" date="1475755200">- timezone update 2016g:
  * Turkey will remain on UTC+03 after 2016-10-30 bsc#997830
  * New leap second 2016-12-31 23:59:60 UTC
    Remove 0001-Positive-leap-second-on-2016-12-31.patch
  * Corrections for past DST transitions
  * Antarcica and nautical time zones now use numeric time zone
    abbreviations instead of obsolete alphanumeric ones
  * Renamed Asia/Rangoon to Asia/Yangon
  * The following change was previously patched in the package
    and is now upstream:
    + If the installed localtime and/or posixrules files are
    symbolic links, zic now keeps them symbolic links when
    updating them, for compatibility with platforms like
    openSUSE where other programs configure these files as
    symlinks.
    + zic now avoids hard linking to symbolic links, avoids
    some unnecessary mkdir and stat system calls, and uses
    shorter file names internally.
    + Drop the patches:
    tzcode-link.diff
    tzcode-revert-01-8c9cb9580.patch
    tzcode-revert-02-301f794f3.patch
    tzcode-revert-03-39fd078a6.patch
    tzcode-symlink.patch
    tzcode-zic.diff
    tzcode-fromname.patch
    + Upstream changes did not account for TZDEFAULT being an
    absolute path. Prevent broken symlinks (bsc#1003324),
    add timezone-2016g-absolute-TZDEFAULT.patch
  * zdump has a new -i option to generate transitions in a
    more-compact but still human-readable format. (experimental)</changelog>
  <changelog author="astieger@suse.com" date="1477051200">- timezone update 2016h:
  * Asia/Gaza and Asia/Hebron end DST on 2016-10-29 at 01:00, not
    2016-10-21 at 00:00.
  * Adjust 1986-1990, 1994 Turkey DST transistions
  * Asia/Colombo now uses numeric time zone abbreviations
  * drop timezone-2016g-absolute-TZDEFAULT.patch, upstream</changelog>
  <changelog author="astieger@suse.com" date="1478174400">- timezone update 2016i:
  * Pacific/Tongatapu begins DST on 2016-11-06 at 02:00, ending on
    2017-01-15 at 03:00. [bsc#1007725]
  * Northern Cyprus is now +03 year round, causing a split in Cyprus
    time zones starting 2016-10-30 at 04:00.  This creates a zone
    Asia/Famagusta [bsc#1007726]
  * Antarctica/Casey switched from +08 to +11 on 2016-10-22
  * Corrections to pre-1975 timestamps in Italy</changelog>
  <changelog author="astieger@suse.com" date="1479988800">- timezone update 2016j [bsc#1011797]:
  * Saratov, Russia switches from +03 to +04 on 2016-12-04 at 02:00.
    (new zone Europe/Saratov split from Europe/Volgograd)
  * 1994-1999 corrections for Kazakhstan, with new zone Asia/Atyrau
  * Asia/Gaza and Asia/Hebron now use "EEST", not "EET", to denote
    summer time before 1948.  The old use of "EET" was a typo.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- timezone update 2017a:
  * Mongolia no longer observes DST bsc#1024676
  * Chile's Region of Magallanes moves from -04/-03 to -03
    year-round starting 2017-05-13 23:00, split from
    America/Santiago creating a new zone America/Punta_Arenas
    Also affects Antarctica/Palmer. bsc#1024677
  * Fixes to historical time stamps: Spain, Ecuador, Atyrau, Oral
  * Switch to numeric, or commonly used time zone abbreviations
  * zic no longer mishandles some transitions in January 2038
  * date and strftime now cause %z to generate "-0000" instead of
    "+0000" when the UT offset is zero and the time zone
    abbreviation begins with "-".</changelog>
  <changelog author="astieger@suse.com" date="1490184000">- timezone update 2017b:
  * Haiti resumed observance of DST in 2017 (bsc#1030417)
  * Liberia changed from -004430 to +00 on 1972-01-07, not 1972-05-01.
  * Use "MMT" to abbreviate Liberia's time zone before 1972, as
    "-004430" is one byte over the POSIX limit</changelog>
  <changelog author="fstrba@suse.com" date="1505563200">- Do not require java-bootstrap, since it does not exist any more;
  use java &lt; 1.8 instead</changelog>
  <changelog author="fstrba@suse.com" date="1507291200">- Require simply java, since with the new version of javazic, it
  is possible to generate the timezone information using any java
  version</changelog>
  <changelog author="jengelh@inai.de" date="1507377600">- Replace old RPM constructs by new equivalents.
  Remove redundant %clean section.</changelog>
  <changelog author="astieger@suse.com" date="1508760000">- timezone update 2017c (bsc#1064571):
  * Northern Cyprus switches from +03 to +02/+03 on 2017-10-29
  * Fiji ends DST 2018-01-14, not 2018-01-21
  * Namibia switches from +01/+02 to +02 on 2018-04-01
  * Sudan switches from +03 to +02 on 2017-11-01
  * Tonga likely switches from +13/+14 to +13 on 2017-11-05
  * Turks &amp; Caicos switches from -04 to -05/-04 on 2018-11-04
  * corrections to past DST transitions
  * Move oversized Canada/East-Saskatchewan to 'backward' file
  * zic and the reference runtime now reject multiple leap seconds
    within 28 days of each other, or leap seconds before the Epoch</changelog>
  <changelog author="astieger@suse.com" date="1516363200">- timezone update 2018c:
  * São Tomé and Príncipe switched from +00 to +01 on 2018-01-01
  * Southern Brazil's DST will now start on November's first Sunday
    (bsc#1073275)
  * New zic option -t to specify the time zone file if TZ is unset</changelog>
  <changelog author="astieger@suse.com" date="1521892800">- timezone update 2018d (bsc#1086729):
  * In 2018, Palestine starts DST on March 24, not March 31
  * Casey Station in Antarctica changed from +11 to +08 on
    2018-03-11 at 04:00
  * corrections for historical transitions</changelog>
  <changelog author="astieger@suse.com" date="1525435200">- timezone update 2018e:
  * North Korea switches back from +0830 to +09 on 2018-05-05.
  * Ireland's standard time is in the summer, with negative DST
    offset to standard time used in Winter (bsc#1073299)</changelog>
  <changelog author="astieger@suse.com" date="1526990400">- in SLE 15 / Leap 15.0 yast2-country stopped setting TIMEZONE in
  /etc/sysconfig/clock and called systemd timedatectl instead.
  No longer set /etc/localtime on timezone package updates to
  avoid setting an incorrect timezone. bsc#1093392</changelog>
</package>
<package pkgid="0504dd1166e1b53bfd0a9625cc122f5bd6e40e303fe9c2ac68bc2c8a01e96062" name="tmon" arch="src">
  <version epoch="0" ver="1.0" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1455710400">- Initial submit (version 1.0)</changelog>
  <changelog author="trenn@suse.de" date="1455883200">- Add include path for ncurses to build against SLE12 SP1 and others.
  ncurses-devel is missing pkg config on older distros.
  Add: tmon_pkg_config_ncurses_missing.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added misiing references.
  [bsc#1041585,fate#319184]</changelog>
  <changelog author="josef.moellers@suse.com" date="1523880000">- Backported a patch from upstream to prevent a race condition
  wrt "cur_thermal_record".
  [bsc#1075156, prevent-cur_thermal_record_race.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Format with spec-cleaner
- Update URL to point out to the real location in kernel for easier
  understanding</changelog>
</package>
<package pkgid="fb5be69a8e537525cdce050742aecaa698e739e330523fad378ea11100b272a6" name="tmon" arch="x86_64">
  <version epoch="0" ver="1.0" rel="lp150.2.3.1"/>
  <changelog author="trenn@suse.de" date="1455710400">- Initial submit (version 1.0)</changelog>
  <changelog author="trenn@suse.de" date="1455883200">- Add include path for ncurses to build against SLE12 SP1 and others.
  ncurses-devel is missing pkg config on older distros.
  Add: tmon_pkg_config_ncurses_missing.patch</changelog>
  <changelog author="josef.moellers@suse.com" date="1507291200">- Added misiing references.
  [bsc#1041585,fate#319184]</changelog>
  <changelog author="josef.moellers@suse.com" date="1523880000">- Backported a patch from upstream to prevent a race condition
  wrt "cur_thermal_record".
  [bsc#1075156, prevent-cur_thermal_record_race.patch]</changelog>
  <changelog author="tchvatal@suse.com" date="1523966400">- Format with spec-cleaner
- Update URL to point out to the real location in kernel for easier
  understanding</changelog>
</package>
<package pkgid="210a25ba361509a4bee75a0d5498d4ee70f80f949b43c52eaf0a67fcc7701514" name="tmux-powerline" arch="noarch">
  <version epoch="0" ver="2.6" rel="lp150.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1394625600">- Update to revision 70a94ee7d39a0958a06436aaeba05bd830830cc8.</changelog>
  <changelog author="asn@cryptomilk.org" date="1399464000">- Update to revision 9e7c6cf0bed52e47451c81377b5a1a96366b053f.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931200">- Update to revisiion 7453e58680c27a3435fd95d03f502d25eb80e98b.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931201">- Fix package type.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417521600">- Update to version 1.3.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417694400">- Fix powerline-config.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418126400">- Update to version 1.3.1
- Fixed some packaging issues.
- Added patch to support CFLAGS.</changelog>
  <changelog author="asn@cryptomilk.org" date="1421755200">- Update to version 2.0
  * Added fbterm (framebuffer terminal emulator) support.
  * Added theme with unicode-7.0 symbols.
  * Added support for PyPy3.
  * Compiler is now called with CFLAGS from environment in setup.py if present.
  * Added support for pyuv-1.*.
  * Added a way to write error log to Vim global variable.
  * powerline script now supports overrides from $POWERLINE_CONFIG_OVERRIDES,
    $POWERLINE_THEME_OVERRIDES environment variables, so does powerline-config
    script.
  * powerline and powerline-config scripts now support taking paths from
    $POWERLINE_CONFIG_PATHS.
  * powerline-lint is now able to report dictionaries which were merged in to
    form marked dictionary and what were the previous values of overridden
    values.
  * Added support for Byron Rakitzis? rc shell reimplementation.
  * Added support for querying battery status on cygwin platform.</changelog>
  <changelog author="asn@cryptomilk.org" date="1424433600">- Update to version 2.1
  * Added BAR support.
  * Added support for pdb (Python debugger) prompt.
  * Added more highlight groups to solarized colorscheme.
  * Updated zpython bindings.
  * Fixed C version of the client on non-Linux platforms.
  * Fixed some errors in powerline-lint code.
  * Fixed Python-2.6 incompatibilities in setup.py.</changelog>
  <changelog author="asn@cryptomilk.org" date="1431432000">- Update to version 2.1.4
  * Added support for placing powerline on the left in qtile.
  * Added qtile-1.9 support.
  * Fixed tmux-2.0 support.
  * Made it easier to run tests outside of travis.
  * Added some missing highlight groups.
  * Made it omit writing empty above lines.
  * Fixed UnicodeEncodeError when running powerline-lint with non-ASCII
    characters in error messages.
  * Fixed code that replaces &amp;statusline value: it now is able to replace
    non-ASCII &amp;statuslines as well.
  * Fixed powerline-render arguments parsing.</changelog>
  <changelog author="asn@cryptomilk.org" date="1436184000">- Update to version 2.2
  * Added support for newest psutil version.
  * Added support for non-SSL IMAP4 connection.
  * Added support for clickable tab names in Vim.
  * Added support for truncating tmux segments.
  * Added support for new (i3ipc) module that interacts with i3.
  * Added support for i3 modes.
  * Fixed coloring of network_load segment.
  * Fixed dash bindings on OS X.
  * Fixed parsing numbers starting with 2 supplied by POWERLINE_*_OVERRIDES
    environment variables.</changelog>
  <changelog author="asn@cryptomilk.org" date="1445342400">- Update to version 2.3
  * Added ability to hide domain part of the user name to common.env.user segment.
  * Added ability to show conda environment to virtualenv segment.
  * Added systemd service file.
  * Added ability to detect internal_ip interface using default gateway.
  * Added support for password-protected connections in mpd player bindings.
  * Added `output` option to i3wm.workspaces segment to filter workspaces based on
    their output.
  * Added ?charging? indicator to battery segment.
  * Made tmux bindings show zoom indicator in window status.
  * Fixed tmux bindings so that they support tmux-2.1.
  * Fixed support for unicode characters in common.time.date segment.</changelog>
  <changelog author="asn@cryptomilk.org" date="1461067200">- Update to version 2.4
  * Added short parameter for system_load segment that leaves only one load
    average number out of three.
  * Added powerline.segments.i3wm.scratchpad segment used to list windows
    that are currently on the scratchpad.
  * Added support for multiple batteries in battery segment.
  * Added ?.i3wm.workspace segment which describes single i3wm workspace and
    workspaces lister. Old .i3wm.workspaces segment was deprecated.
  * Added support for multiple monitors in lemonbar bindings.
  * Added support for most recent tmux version (2.2).
  * Fixed battery status support on some linux systems.
  * Fixed MPD bindings: they sometimes were not able to handle names if they
    did not fit ASCII.
  * Fixed MPD bindings: they did not correctly get elapsed time.
  * Fixed AttributeError on some systems: LC_MESSAGES is not always available.
  * Fixed Mac OS-specific variant of spotify player support when Python-3 is used.
  * Fixed performance of the tabline.</changelog>
  <changelog author="fcrozat@suse.com" date="1469620800">- Update to version 2.5:
  * Fix trailing whitespace segment on Python 3.
  * Fix left segments support in tmux-2.1
  * Add support for IPython-5
  * Increase socket backlog number for `powerline-daemon`
  * Use different query to retrieve weather
  * implement stash backend for git
  * provide stash counter
  * include stash in default shell layout
  * expose stash to Vim</changelog>
  <changelog author="asn@cryptomilk.org" date="1486728000">- Update to version 2.5.2:
  * Fixed ipython-5.2* support.
  * Made more robust theme default.
  * Made it use hglib in place of unstable mercurial plugin API.
  * Fixed latest fish version support.
  * Some other fixes and documentation adjustments.</changelog>
  <changelog author="lbeltrame@kde.org" date="1490702400">- Reformat spec properly
- Add a license</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Improve package summary.
- Avoid unnecessary %__-type macro indirections.
  Replace find -exec rm by just find -delete.</changelog>
  <changelog author="asn@cryptomilk.org" date="1494417600">- Update to version 2.6:
  * Added support for new Vim modes.
  * Added ability to control output padding.
  * Added iTunes player segment.
  * Added support for tmux development builds.
  * Added a workaround for a fish bug sometimes occurring when using eval from
  * config.fish (upstream status unknown).
  * Added a workaround for tmux 2.4 bug: excessive CPU usage when having multiple
  * panes (also fixed upstream).
  * Fixed clean file status support in mercurial.
  * Fixed error when battery capacity is zero and using DBus.
  * Fixed mercurial command servers leakage.
  * Refactored awesome bindings to use powerline daemon.</changelog>
  <changelog author="asn@cryptomilk.org" date="1519819200">- Fix powerline requiring both python2 and python3</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533902400">- add powerline-2.6-gcc7_fixes.patch
- add powerline-py2v3-fix.patch fixes boo#1101303
- cleanup spec
- correctly install systemd service</changelog>
</package>
<package pkgid="6c438659472b84dfd1a0786c52b11acf87c3ea18f9b9cfbd3abd77c6650b1902" name="tor" arch="src">
  <version epoch="0" ver="0.3.4.8" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- tor 0.2.9.9:
  * Downgrade the "-ftrapv" option from "always on" to "only on
    when --enable-expensive-hardening is provided." This hardening
    option, like others, can turn survivable bugs into crashes --
    and having it on by default made a (relatively harmless)
    integer overflow bug into a denial-of-service bug
  * Fix a client-side onion service reachability bug
  * Update geoip and geoip6 to the January 4 2017 Maxmind GeoLite2
    Country database.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- tor 0.2.9.10:
  * directory authority: During voting, when marking a relay as a
    probable sybil, do not clear its BadExit flag: sybils can still
    be bad in other ways too.
  * IPv6 Exits: Stop rejecting all IPv6 traffic on Exits whose exit
    policy rejects any IPv6 addresses. Instead, only reject a port
    over IPv6 if the exit policy rejects that port on more than an
    IPv6 /16 of addresses.
  * parsing: Fix an integer underflow bug when comparing malformed
    Tor versions. This bug could crash Tor when built with
  - -enable-expensive-hardening, or on Tor 0.2.9.1-alpha through
    Tor 0.2.9.8, which were built with -ftrapv by default. In other
    cases it was harmless. Part of TROVE-2017-001 boo#1027539
  * Directory authorities now reject descriptors that claim to be
    malformed versions of Tor
  * Reject version numbers with components that exceed INT32_MAX.
  * Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2
    Country database.
  * The tor-resolve command line tool now rejects hostnames over 255
    characters in length</changelog>
  <changelog author="astieger@suse.com" date="1493294400">- tor 0.3.0.6:
  * clients and relays now use Ed25519 keys to authenticate their
    link connections to relays, rather than the old RSA1024 keys
    that they used before.
  * replace the guard selection and replacement algorithm to behave
    more robustly in the presence of unreliable networks, and to
    resist guard-capture attacks.
  * numerous other small features and bugfixes
  * groundwork for the upcoming hidden-services revamp</changelog>
  <changelog author="astieger@suse.com" date="1494936000">- tor 0.3.0.7:
  * Fix an assertion failure in the hidden service directory code,
    which could be used by an attacker to remotely cause a Tor
    relay process to exit. TROVE-2017-002 bsc#1039211
  * Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2
    Country database.
  * Tor no longer refuses to download microdescriptors or
    descriptors if they are listed as "published in the future"
  * The getpid() system call is now permitted under the Linux
    seccomp2 sandbox, to avoid crashing with versions of OpenSSL
    (and other libraries) that attempt to learn the process's PID
    by using the syscall rather than the VDSO code</changelog>
  <changelog author="astieger@suse.com" date="1496232000">- fix build with GCC 7: warning-errors on implicit fallthrough
  add tor-0.3.0.7-gcc7-fallthrough.patch bsc#1041262</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- tor 0.3.0.8 fixing a pair of bugs that would allow an attacker to
  remotely crash a hidden service with an assertion failure
  * CVE-2017-0375: remotely triggerable assertion failure when a
    hidden service handles a malformed BEGIN cell (bsc#1043455)
  * CVE-2017-0376: remotely triggerable assertion failure caused by
    receiving a BEGIN_DIR cell on a hidden service rendezvous
    circuit (bsc#1043456)
- further bug fixes:
  * link handshake fixes when changing x509 certificates
  * Regenerate link and authentication certificates whenever the key
    that signs them changes; also, regenerate link certificates
    whenever the signed key changes
  * When sending an Ed25519 signing-&gt;link certificate in a CERTS cell,
    send the certificate that matches the x509 certificate that was
    used on the TLS connection
  * Stop rejecting v3 hidden service descriptors because their size
    did not match an old padding rule</changelog>
  <changelog author="astieger@suse.com" date="1498824000">- tor 0.3.0.9:
  * CVE-2017-0377: Fix path selection bug that would allow a client
    to use a guard that was in the same network family as a chosen
    exit relay (bsc#1046845)
  * Don't block bootstrapping when a primary bridge is offline and
    tor cannot get its descriptor
  * When starting with an old consensus, do not add new entry guards
    unless the consensus is "reasonably live" (under 1 day old).
  * Update geoip and geoip6 to the June 8 2017 Maxmind GeoLite2
    Country database.</changelog>
  <changelog author="jloehel@suse.com" date="1501761600">- tor 0.3.0.10
  * Fix a typo that had prevented TPROXY-based transparent proxying
    from working under Linux.
  * Avoid an assertion failure bug affecting our implementation of
    inet_pton(AF_INET6) on certain OpenBSD systems.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- tor 0.3.0.11:
  * CVE-2017-0380: hidden services with the SafeLogging option
    disabled could disclose the stack TROVE-2017-008, boo#1059194
  * Update geoip and geoip6 to the September 6 2017 Maxmind GeoLite2
    Country database.
  * drop tor-0.3.0.7-gcc7-fallthrough.patch, now upstream</changelog>
  <changelog author="astieger@suse.com" date="1505908800">- tor 0.3.1.7:
  * Serve and download directory information in more compact
    formats
  * New padding padding system to resist netflow-based traffic
    analysis
  * Improve protection against identification of tor traffic by ISP
    via ConnectionPadding option
  * Reduce the number of long-term connections open between relays
- add tor-0.3.1.7-fix-zstd-i586.patch to fix 32 bit build with zstd</changelog>
  <changelog author="astieger@suse.com" date="1508932800">- tor 0.3.1.8:
  * Add "Bastet" as a ninth directory authority to the default list
  * The directory authority "Longclaw" has changed its IP address
  * Fix a timing-based assertion failure that could occur when the
    circuit out-of-memory handler freed a connection's output buffer
  * Update geoip and geoip6 to the October 4 2017 Maxmind GeoLite2
    Country database
- drop tor-0.3.1.7-fix-zstd-i586.patch, upstreamed</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- tor 0.3.1.9 with the following security fixes that prevent some
  traffic confirmation, DoS and other problems (bsc#1070849):
  * CVE-2017-8819: Replay-cache ineffective for v2 onion services
  * CVE-2017-8820: Remote DoS attack against directory authorities
  * CVE-2017-8821: An attacker can make Tor ask for a password
  * CVE-2017-8822: Relays can pick themselves in a circuit path
  * CVE-2017-8823: Use-after-free in onion service v2</changelog>
  <changelog author="astieger@suse.com" date="1515585600">- tor 0.3.2.9:
  * new onion service design (v3), not default
  * new circuit scheduler algorithm for improved performance
  * directory authority updates
  * many other updates and improvements</changelog>
  <changelog author="astieger@suse.com" date="1520078400">- tor 0.3.2.10:
  * CVE-2018-0490: remote crash vulnerability against directory
    authorities (boo#1083845, TROVE-2018-001)
  * CVE-2018-0491: remote relay crash (boo#1083846, TROVE-2018-002)
  * New system for improved resistance to DoS attacks against relays
  * Various other bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- tor 0.3.3.6:
  * new stable release series
  * controller support and other improvements for v3 onion services
  * official support for embedding Tor within other application
  * Improvements to IPv6 support
  * Relay option ReducedExitPolicy to configure a reasonable default
  * Revent DoS via malicious protocol version string (boo#1094283)
  * Many other other bug fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1528804800">- tor 0.3.3.7:
  * Add an IPv6 address for the "dannenberg" directory authority
  * Improve accuracy of the BUILDTIMEOUT_SET control port event's
    TIMEOUT_RATE and CLOSE_RATE fields
  * Only select relays when tor has descriptors that it prefers to
    use for them, avoiding nonfatal errors later</changelog>
  <changelog author="astieger@suse.com" date="1531137600">- tor 0.3.3.8:
  * directory authority memory leak fix
  * various minor bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1531569600">- tor 0.3.3.9:
  * move to a new bridge authority
  * backport some bug fixes
- refresh upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1536580800">- tor 0.3.3.10:
  * various build and compatibility fixes
  * The control port now exposes the list of HTTPTunnelPorts and
    ExtOrPorts via GETINFO net/listeners/httptunnel and
    net/listeners/extor respectively
  * Authorities no longer vote to make the subprotocol version
    "LinkAuth=1" a requirement: it is unsupportable with NSS, and
    hasn't been needed since Tor 0.3.0.1-alpha
  * When voting for recommended versions, make sure that all of the
    versions are well-formed and parsable
  * various minor bug fixes on onion services</changelog>
  <changelog author="astieger@suse.com" date="1536580801">- tor 0.3.4.8 (boo#1107847):
  * improvements for running in low-power and embedded environments
  * preliminary changes for new bandwidth measurement system
  * refine anti-denial-of-service code</changelog>
</package>
<package pkgid="7731ad9d38ce669339109542670fa2f8b09e708f59438a2e02d96870d61f2ce6" name="tor" arch="x86_64">
  <version epoch="0" ver="0.3.4.8" rel="lp150.2.3.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- tor 0.2.9.9:
  * Downgrade the "-ftrapv" option from "always on" to "only on
    when --enable-expensive-hardening is provided." This hardening
    option, like others, can turn survivable bugs into crashes --
    and having it on by default made a (relatively harmless)
    integer overflow bug into a denial-of-service bug
  * Fix a client-side onion service reachability bug
  * Update geoip and geoip6 to the January 4 2017 Maxmind GeoLite2
    Country database.</changelog>
  <changelog author="astieger@suse.com" date="1488369600">- tor 0.2.9.10:
  * directory authority: During voting, when marking a relay as a
    probable sybil, do not clear its BadExit flag: sybils can still
    be bad in other ways too.
  * IPv6 Exits: Stop rejecting all IPv6 traffic on Exits whose exit
    policy rejects any IPv6 addresses. Instead, only reject a port
    over IPv6 if the exit policy rejects that port on more than an
    IPv6 /16 of addresses.
  * parsing: Fix an integer underflow bug when comparing malformed
    Tor versions. This bug could crash Tor when built with
  - -enable-expensive-hardening, or on Tor 0.2.9.1-alpha through
    Tor 0.2.9.8, which were built with -ftrapv by default. In other
    cases it was harmless. Part of TROVE-2017-001 boo#1027539
  * Directory authorities now reject descriptors that claim to be
    malformed versions of Tor
  * Reject version numbers with components that exceed INT32_MAX.
  * Update geoip and geoip6 to the February 8 2017 Maxmind GeoLite2
    Country database.
  * The tor-resolve command line tool now rejects hostnames over 255
    characters in length</changelog>
  <changelog author="astieger@suse.com" date="1493294400">- tor 0.3.0.6:
  * clients and relays now use Ed25519 keys to authenticate their
    link connections to relays, rather than the old RSA1024 keys
    that they used before.
  * replace the guard selection and replacement algorithm to behave
    more robustly in the presence of unreliable networks, and to
    resist guard-capture attacks.
  * numerous other small features and bugfixes
  * groundwork for the upcoming hidden-services revamp</changelog>
  <changelog author="astieger@suse.com" date="1494936000">- tor 0.3.0.7:
  * Fix an assertion failure in the hidden service directory code,
    which could be used by an attacker to remotely cause a Tor
    relay process to exit. TROVE-2017-002 bsc#1039211
  * Update geoip and geoip6 to the May 2 2017 Maxmind GeoLite2
    Country database.
  * Tor no longer refuses to download microdescriptors or
    descriptors if they are listed as "published in the future"
  * The getpid() system call is now permitted under the Linux
    seccomp2 sandbox, to avoid crashing with versions of OpenSSL
    (and other libraries) that attempt to learn the process's PID
    by using the syscall rather than the VDSO code</changelog>
  <changelog author="astieger@suse.com" date="1496232000">- fix build with GCC 7: warning-errors on implicit fallthrough
  add tor-0.3.0.7-gcc7-fallthrough.patch bsc#1041262</changelog>
  <changelog author="astieger@suse.com" date="1496923200">- tor 0.3.0.8 fixing a pair of bugs that would allow an attacker to
  remotely crash a hidden service with an assertion failure
  * CVE-2017-0375: remotely triggerable assertion failure when a
    hidden service handles a malformed BEGIN cell (bsc#1043455)
  * CVE-2017-0376: remotely triggerable assertion failure caused by
    receiving a BEGIN_DIR cell on a hidden service rendezvous
    circuit (bsc#1043456)
- further bug fixes:
  * link handshake fixes when changing x509 certificates
  * Regenerate link and authentication certificates whenever the key
    that signs them changes; also, regenerate link certificates
    whenever the signed key changes
  * When sending an Ed25519 signing-&gt;link certificate in a CERTS cell,
    send the certificate that matches the x509 certificate that was
    used on the TLS connection
  * Stop rejecting v3 hidden service descriptors because their size
    did not match an old padding rule</changelog>
  <changelog author="astieger@suse.com" date="1498824000">- tor 0.3.0.9:
  * CVE-2017-0377: Fix path selection bug that would allow a client
    to use a guard that was in the same network family as a chosen
    exit relay (bsc#1046845)
  * Don't block bootstrapping when a primary bridge is offline and
    tor cannot get its descriptor
  * When starting with an old consensus, do not add new entry guards
    unless the consensus is "reasonably live" (under 1 day old).
  * Update geoip and geoip6 to the June 8 2017 Maxmind GeoLite2
    Country database.</changelog>
  <changelog author="jloehel@suse.com" date="1501761600">- tor 0.3.0.10
  * Fix a typo that had prevented TPROXY-based transparent proxying
    from working under Linux.
  * Avoid an assertion failure bug affecting our implementation of
    inet_pton(AF_INET6) on certain OpenBSD systems.</changelog>
  <changelog author="astieger@suse.com" date="1505736000">- tor 0.3.0.11:
  * CVE-2017-0380: hidden services with the SafeLogging option
    disabled could disclose the stack TROVE-2017-008, boo#1059194
  * Update geoip and geoip6 to the September 6 2017 Maxmind GeoLite2
    Country database.
  * drop tor-0.3.0.7-gcc7-fallthrough.patch, now upstream</changelog>
  <changelog author="astieger@suse.com" date="1505908800">- tor 0.3.1.7:
  * Serve and download directory information in more compact
    formats
  * New padding padding system to resist netflow-based traffic
    analysis
  * Improve protection against identification of tor traffic by ISP
    via ConnectionPadding option
  * Reduce the number of long-term connections open between relays
- add tor-0.3.1.7-fix-zstd-i586.patch to fix 32 bit build with zstd</changelog>
  <changelog author="astieger@suse.com" date="1508932800">- tor 0.3.1.8:
  * Add "Bastet" as a ninth directory authority to the default list
  * The directory authority "Longclaw" has changed its IP address
  * Fix a timing-based assertion failure that could occur when the
    circuit out-of-memory handler freed a connection's output buffer
  * Update geoip and geoip6 to the October 4 2017 Maxmind GeoLite2
    Country database
- drop tor-0.3.1.7-fix-zstd-i586.patch, upstreamed</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- tor 0.3.1.9 with the following security fixes that prevent some
  traffic confirmation, DoS and other problems (bsc#1070849):
  * CVE-2017-8819: Replay-cache ineffective for v2 onion services
  * CVE-2017-8820: Remote DoS attack against directory authorities
  * CVE-2017-8821: An attacker can make Tor ask for a password
  * CVE-2017-8822: Relays can pick themselves in a circuit path
  * CVE-2017-8823: Use-after-free in onion service v2</changelog>
  <changelog author="astieger@suse.com" date="1515585600">- tor 0.3.2.9:
  * new onion service design (v3), not default
  * new circuit scheduler algorithm for improved performance
  * directory authority updates
  * many other updates and improvements</changelog>
  <changelog author="astieger@suse.com" date="1520078400">- tor 0.3.2.10:
  * CVE-2018-0490: remote crash vulnerability against directory
    authorities (boo#1083845, TROVE-2018-001)
  * CVE-2018-0491: remote relay crash (boo#1083846, TROVE-2018-002)
  * New system for improved resistance to DoS attacks against relays
  * Various other bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1527422400">- tor 0.3.3.6:
  * new stable release series
  * controller support and other improvements for v3 onion services
  * official support for embedding Tor within other application
  * Improvements to IPv6 support
  * Relay option ReducedExitPolicy to configure a reasonable default
  * Revent DoS via malicious protocol version string (boo#1094283)
  * Many other other bug fixes and improvements</changelog>
  <changelog author="astieger@suse.com" date="1528804800">- tor 0.3.3.7:
  * Add an IPv6 address for the "dannenberg" directory authority
  * Improve accuracy of the BUILDTIMEOUT_SET control port event's
    TIMEOUT_RATE and CLOSE_RATE fields
  * Only select relays when tor has descriptors that it prefers to
    use for them, avoiding nonfatal errors later</changelog>
  <changelog author="astieger@suse.com" date="1531137600">- tor 0.3.3.8:
  * directory authority memory leak fix
  * various minor bug fixes</changelog>
  <changelog author="astieger@suse.com" date="1531569600">- tor 0.3.3.9:
  * move to a new bridge authority
  * backport some bug fixes
- refresh upstream signing keyring</changelog>
  <changelog author="astieger@suse.com" date="1536580800">- tor 0.3.3.10:
  * various build and compatibility fixes
  * The control port now exposes the list of HTTPTunnelPorts and
    ExtOrPorts via GETINFO net/listeners/httptunnel and
    net/listeners/extor respectively
  * Authorities no longer vote to make the subprotocol version
    "LinkAuth=1" a requirement: it is unsupportable with NSS, and
    hasn't been needed since Tor 0.3.0.1-alpha
  * When voting for recommended versions, make sure that all of the
    versions are well-formed and parsable
  * various minor bug fixes on onion services</changelog>
  <changelog author="astieger@suse.com" date="1536580801">- tor 0.3.4.8 (boo#1107847):
  * improvements for running in low-power and embedded environments
  * preliminary changes for new bandwidth measurement system
  * refine anti-denial-of-service code</changelog>
</package>
<package pkgid="08c37a7a45f030c7067c7f11f2c9583f1a2bfaec98b77e3b0805710382e93912" name="transactional-update" arch="src">
  <version epoch="0" ver="2.5" rel="lp150.2.3.2"/>
  <changelog author="kukuk@suse.de" date="1498824000">- Update to version 1.19
  - Add 'shell' option for debugging and testing</changelog>
  <changelog author="kukuk@suse.de" date="1505304000">- Update to version 1.20
  - Improve documentation
  - Add pkg update option</changelog>
  <changelog author="kukuk@suse.de" date="1509105600">- Update to version 1.21
  - Reset salt grains even if no update was found</changelog>
  <changelog author="kukuk@suse.de" date="1510056000">- Update to version 1.22
  - Rewrite cleanup code to be more aggressive</changelog>
  <changelog author="kukuk@suse.de" date="1510920000">- Update to version 1.23
  - Fix re-registration in rollback case
  - Fix problems with updating the grub2 bootloader
  - Add support for migration of products with SCC/SMT
  - Re-add support to re-write bootloader
  [bsc#1068933]</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Update to version 1.24
  - Don't save unused snapshots if we may delete them again.
    Partly fixes [bsc#1071038]
  - Copy passwd, group and shadow to /usr/etc if modified</changelog>
  <changelog author="kukuk@suse.de" date="1515499200">- Update to version 1.25
  - preliminary SELinux support
  - support for seperate /var subvolume</changelog>
  <changelog author="kukuk@suse.de" date="1517400000">- Update to version 1.26
  - Auto accept repo keys config option
  - Detect broken snapshots after abort
  - Ignore user deleted snapshots
  - Include all error messages in main log file
  - Add configuration file
  - Correctly implement migration of major OS versions
  - Default reboot strategy is configuration option
  - Salt option is deprecated</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1520337600">- Update to version 1.27
  - Fallback to snapper without dbus support if dbus fails
  - Add workaround for update-alternatives
  - Add support for /usr/etc/transactional-update.conf</changelog>
  <changelog author="kukuk@suse.de" date="1520856000">- Update to version 1.28
  - Adjust for latest grub2</changelog>
  <changelog author="rbrown@suse.com" date="1521288000">- Require perl-HTML-Parser (needed since 1.26) [boo#1085764]</changelog>
  <changelog author="rbrown@suse.com" date="1522756800">- Add conflicts with snapper-zypp-plugin</changelog>
  <changelog author="kukuk@suse.de" date="1524225600">- Update to version 1.29
  - Implement self-update
  - Disable optical media on dup
  - Ignore certain zypper return codes</changelog>
  <changelog author="kukuk@suse.de" date="1524571200">- Update to version 2.0
  - Create missing directories from rpm database during boot
  - Merge /etc overlay with root subvolume during update</changelog>
  <changelog author="kukuk@suse.de" date="1524744000">- Update to version 2.1
  - Cleanup the code cleaning up /etc</changelog>
  <changelog author="iforster@suse.com" date="1525262400">- Update to version 2.2
  - Fix security issue in self update [boo#1091316]
  - Create dirs in /var more reliably by sorting the list
- Rebuild initrd (needed since 2.0)</changelog>
  <changelog author="iforster@suse.com" date="1526299200">- Update to version 2.3
  - Reformat help text / synopsis
  - More detailled output (use --quiet for less output)
  - Log all error messages into log file
  - Avoid potential lock file race condition on self update
  - Accept package names with whitespace
  - Don't wait for user input during self-update
  - Fix broken error message output when creating new snapshot without reboot
  - Fix erroneous mounting of stale grub mounts</changelog>
  <changelog author="kukuk@suse.de" date="1528200000">- Update to version 2.4
  - Bug fix release</changelog>
  <changelog author="iforster@suse.com" date="1529064000">- Update to version 2.5
  - Support for overlayfs attributes like trusted.overlay.opaque - this will
    avoid disappearing configuration files on system updates
  - Documentation update
  - Only sync /etc if it's on an overlayfs mount
  - Use correct locale for zypper - thus updating locale specific packages and
    avoiding "empty" updates where transactional-update didn't see the change
- Add dependency to attr
- Fix permissions of systemd script</changelog>
</package>
<package pkgid="7226dad611453c254984e82726806cc2dcc2db0459b755541932755f5ab0557c" name="transactional-update" arch="x86_64">
  <version epoch="0" ver="2.5" rel="lp150.2.3.2"/>
  <changelog author="kukuk@suse.de" date="1498824000">- Update to version 1.19
  - Add 'shell' option for debugging and testing</changelog>
  <changelog author="kukuk@suse.de" date="1505304000">- Update to version 1.20
  - Improve documentation
  - Add pkg update option</changelog>
  <changelog author="kukuk@suse.de" date="1509105600">- Update to version 1.21
  - Reset salt grains even if no update was found</changelog>
  <changelog author="kukuk@suse.de" date="1510056000">- Update to version 1.22
  - Rewrite cleanup code to be more aggressive</changelog>
  <changelog author="kukuk@suse.de" date="1510920000">- Update to version 1.23
  - Fix re-registration in rollback case
  - Fix problems with updating the grub2 bootloader
  - Add support for migration of products with SCC/SMT
  - Re-add support to re-write bootloader
  [bsc#1068933]</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Update to version 1.24
  - Don't save unused snapshots if we may delete them again.
    Partly fixes [bsc#1071038]
  - Copy passwd, group and shadow to /usr/etc if modified</changelog>
  <changelog author="kukuk@suse.de" date="1515499200">- Update to version 1.25
  - preliminary SELinux support
  - support for seperate /var subvolume</changelog>
  <changelog author="kukuk@suse.de" date="1517400000">- Update to version 1.26
  - Auto accept repo keys config option
  - Detect broken snapshots after abort
  - Ignore user deleted snapshots
  - Include all error messages in main log file
  - Add configuration file
  - Correctly implement migration of major OS versions
  - Default reboot strategy is configuration option
  - Salt option is deprecated</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1520337600">- Update to version 1.27
  - Fallback to snapper without dbus support if dbus fails
  - Add workaround for update-alternatives
  - Add support for /usr/etc/transactional-update.conf</changelog>
  <changelog author="kukuk@suse.de" date="1520856000">- Update to version 1.28
  - Adjust for latest grub2</changelog>
  <changelog author="rbrown@suse.com" date="1521288000">- Require perl-HTML-Parser (needed since 1.26) [boo#1085764]</changelog>
  <changelog author="rbrown@suse.com" date="1522756800">- Add conflicts with snapper-zypp-plugin</changelog>
  <changelog author="kukuk@suse.de" date="1524225600">- Update to version 1.29
  - Implement self-update
  - Disable optical media on dup
  - Ignore certain zypper return codes</changelog>
  <changelog author="kukuk@suse.de" date="1524571200">- Update to version 2.0
  - Create missing directories from rpm database during boot
  - Merge /etc overlay with root subvolume during update</changelog>
  <changelog author="kukuk@suse.de" date="1524744000">- Update to version 2.1
  - Cleanup the code cleaning up /etc</changelog>
  <changelog author="iforster@suse.com" date="1525262400">- Update to version 2.2
  - Fix security issue in self update [boo#1091316]
  - Create dirs in /var more reliably by sorting the list
- Rebuild initrd (needed since 2.0)</changelog>
  <changelog author="iforster@suse.com" date="1526299200">- Update to version 2.3
  - Reformat help text / synopsis
  - More detailled output (use --quiet for less output)
  - Log all error messages into log file
  - Avoid potential lock file race condition on self update
  - Accept package names with whitespace
  - Don't wait for user input during self-update
  - Fix broken error message output when creating new snapshot without reboot
  - Fix erroneous mounting of stale grub mounts</changelog>
  <changelog author="kukuk@suse.de" date="1528200000">- Update to version 2.4
  - Bug fix release</changelog>
  <changelog author="iforster@suse.com" date="1529064000">- Update to version 2.5
  - Support for overlayfs attributes like trusted.overlay.opaque - this will
    avoid disappearing configuration files on system updates
  - Documentation update
  - Only sync /etc if it's on an overlayfs mount
  - Use correct locale for zypper - thus updating locale specific packages and
    avoiding "empty" updates where transactional-update didn't see the change
- Add dependency to attr
- Fix permissions of systemd script</changelog>
</package>
<package pkgid="a11df5c9405b54b4f0fa52d7bba82ed204fe16b85431318f2dba35f42dc37e03" name="transactional-update" arch="src">
  <version epoch="0" ver="2.6" rel="lp150.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1505304000">- Update to version 1.20
  - Improve documentation
  - Add pkg update option</changelog>
  <changelog author="kukuk@suse.de" date="1509105600">- Update to version 1.21
  - Reset salt grains even if no update was found</changelog>
  <changelog author="kukuk@suse.de" date="1510056000">- Update to version 1.22
  - Rewrite cleanup code to be more aggressive</changelog>
  <changelog author="kukuk@suse.de" date="1510920000">- Update to version 1.23
  - Fix re-registration in rollback case
  - Fix problems with updating the grub2 bootloader
  - Add support for migration of products with SCC/SMT
  - Re-add support to re-write bootloader
  [bsc#1068933]</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Update to version 1.24
  - Don't save unused snapshots if we may delete them again.
    Partly fixes [bsc#1071038]
  - Copy passwd, group and shadow to /usr/etc if modified</changelog>
  <changelog author="kukuk@suse.de" date="1515499200">- Update to version 1.25
  - preliminary SELinux support
  - support for seperate /var subvolume</changelog>
  <changelog author="kukuk@suse.de" date="1517400000">- Update to version 1.26
  - Auto accept repo keys config option
  - Detect broken snapshots after abort
  - Ignore user deleted snapshots
  - Include all error messages in main log file
  - Add configuration file
  - Correctly implement migration of major OS versions
  - Default reboot strategy is configuration option
  - Salt option is deprecated</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1520337600">- Update to version 1.27
  - Fallback to snapper without dbus support if dbus fails
  - Add workaround for update-alternatives
  - Add support for /usr/etc/transactional-update.conf</changelog>
  <changelog author="kukuk@suse.de" date="1520856000">- Update to version 1.28
  - Adjust for latest grub2</changelog>
  <changelog author="rbrown@suse.com" date="1521288000">- Require perl-HTML-Parser (needed since 1.26) [boo#1085764]</changelog>
  <changelog author="rbrown@suse.com" date="1522756800">- Add conflicts with snapper-zypp-plugin</changelog>
  <changelog author="kukuk@suse.de" date="1524225600">- Update to version 1.29
  - Implement self-update
  - Disable optical media on dup
  - Ignore certain zypper return codes</changelog>
  <changelog author="kukuk@suse.de" date="1524571200">- Update to version 2.0
  - Create missing directories from rpm database during boot
  - Merge /etc overlay with root subvolume during update</changelog>
  <changelog author="kukuk@suse.de" date="1524744000">- Update to version 2.1
  - Cleanup the code cleaning up /etc</changelog>
  <changelog author="iforster@suse.com" date="1525262400">- Update to version 2.2
  - Fix security issue in self update [boo#1091316]
  - Create dirs in /var more reliably by sorting the list
- Rebuild initrd (needed since 2.0)</changelog>
  <changelog author="iforster@suse.com" date="1526299200">- Update to version 2.3
  - Reformat help text / synopsis
  - More detailled output (use --quiet for less output)
  - Log all error messages into log file
  - Avoid potential lock file race condition on self update
  - Accept package names with whitespace
  - Don't wait for user input during self-update
  - Fix broken error message output when creating new snapshot without reboot
  - Fix erroneous mounting of stale grub mounts</changelog>
  <changelog author="kukuk@suse.de" date="1528200000">- Update to version 2.4
  - Bug fix release</changelog>
  <changelog author="iforster@suse.com" date="1529064000">- Update to version 2.5
  - Support for overlayfs attributes like trusted.overlay.opaque - this will
    avoid disappearing configuration files on system updates
  - Documentation update
  - Only sync /etc if it's on an overlayfs mount
  - Use correct locale for zypper - thus updating locale specific packages and
    avoiding "empty" updates where transactional-update didn't see the change
- Add dependency to attr
- Fix permissions of systemd script</changelog>
  <changelog author="iforster@suse.com" date="1534766400">- Update to version 2.6
  - Add --interactive and --non-interactive options to change the default
    interactivity for zypper calls. For previously non-interactive calls (e.g.
    dup) these options makes it possible to pick the correct solution in case
    of conflicts or make sure that a script will never be stuck at an input
    prompt.
  - Add kured reboot support
  - Tries to clean up temporary files and mount points if transactional-update
    quits unexpectedly
  - Remove trancactional-update-helper (replaced by zypper options)
  - Create /var/lib/zypp if not available (boo#1104452)
  - Robustify parsing zypper output (boo#1105992)
  - Various small fixes
- Changed permissions of systemd script again</changelog>
</package>
<package pkgid="95cfc18e3b4e4c4703b649865ffbee95a623e8691ab7937795ebe7563f4fdf87" name="transactional-update" arch="x86_64">
  <version epoch="0" ver="2.6" rel="lp150.2.6.1"/>
  <changelog author="kukuk@suse.de" date="1505304000">- Update to version 1.20
  - Improve documentation
  - Add pkg update option</changelog>
  <changelog author="kukuk@suse.de" date="1509105600">- Update to version 1.21
  - Reset salt grains even if no update was found</changelog>
  <changelog author="kukuk@suse.de" date="1510056000">- Update to version 1.22
  - Rewrite cleanup code to be more aggressive</changelog>
  <changelog author="kukuk@suse.de" date="1510920000">- Update to version 1.23
  - Fix re-registration in rollback case
  - Fix problems with updating the grub2 bootloader
  - Add support for migration of products with SCC/SMT
  - Re-add support to re-write bootloader
  [bsc#1068933]</changelog>
  <changelog author="kukuk@suse.de" date="1512475200">- Update to version 1.24
  - Don't save unused snapshots if we may delete them again.
    Partly fixes [bsc#1071038]
  - Copy passwd, group and shadow to /usr/etc if modified</changelog>
  <changelog author="kukuk@suse.de" date="1515499200">- Update to version 1.25
  - preliminary SELinux support
  - support for seperate /var subvolume</changelog>
  <changelog author="kukuk@suse.de" date="1517400000">- Update to version 1.26
  - Auto accept repo keys config option
  - Detect broken snapshots after abort
  - Ignore user deleted snapshots
  - Include all error messages in main log file
  - Add configuration file
  - Correctly implement migration of major OS versions
  - Default reboot strategy is configuration option
  - Salt option is deprecated</changelog>
  <changelog author="kukuk@suse.com" date="1519387200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="kukuk@suse.de" date="1520337600">- Update to version 1.27
  - Fallback to snapper without dbus support if dbus fails
  - Add workaround for update-alternatives
  - Add support for /usr/etc/transactional-update.conf</changelog>
  <changelog author="kukuk@suse.de" date="1520856000">- Update to version 1.28
  - Adjust for latest grub2</changelog>
  <changelog author="rbrown@suse.com" date="1521288000">- Require perl-HTML-Parser (needed since 1.26) [boo#1085764]</changelog>
  <changelog author="rbrown@suse.com" date="1522756800">- Add conflicts with snapper-zypp-plugin</changelog>
  <changelog author="kukuk@suse.de" date="1524225600">- Update to version 1.29
  - Implement self-update
  - Disable optical media on dup
  - Ignore certain zypper return codes</changelog>
  <changelog author="kukuk@suse.de" date="1524571200">- Update to version 2.0
  - Create missing directories from rpm database during boot
  - Merge /etc overlay with root subvolume during update</changelog>
  <changelog author="kukuk@suse.de" date="1524744000">- Update to version 2.1
  - Cleanup the code cleaning up /etc</changelog>
  <changelog author="iforster@suse.com" date="1525262400">- Update to version 2.2
  - Fix security issue in self update [boo#1091316]
  - Create dirs in /var more reliably by sorting the list
- Rebuild initrd (needed since 2.0)</changelog>
  <changelog author="iforster@suse.com" date="1526299200">- Update to version 2.3
  - Reformat help text / synopsis
  - More detailled output (use --quiet for less output)
  - Log all error messages into log file
  - Avoid potential lock file race condition on self update
  - Accept package names with whitespace
  - Don't wait for user input during self-update
  - Fix broken error message output when creating new snapshot without reboot
  - Fix erroneous mounting of stale grub mounts</changelog>
  <changelog author="kukuk@suse.de" date="1528200000">- Update to version 2.4
  - Bug fix release</changelog>
  <changelog author="iforster@suse.com" date="1529064000">- Update to version 2.5
  - Support for overlayfs attributes like trusted.overlay.opaque - this will
    avoid disappearing configuration files on system updates
  - Documentation update
  - Only sync /etc if it's on an overlayfs mount
  - Use correct locale for zypper - thus updating locale specific packages and
    avoiding "empty" updates where transactional-update didn't see the change
- Add dependency to attr
- Fix permissions of systemd script</changelog>
  <changelog author="iforster@suse.com" date="1534766400">- Update to version 2.6
  - Add --interactive and --non-interactive options to change the default
    interactivity for zypper calls. For previously non-interactive calls (e.g.
    dup) these options makes it possible to pick the correct solution in case
    of conflicts or make sure that a script will never be stuck at an input
    prompt.
  - Add kured reboot support
  - Tries to clean up temporary files and mount points if transactional-update
    quits unexpectedly
  - Remove trancactional-update-helper (replaced by zypper options)
  - Create /var/lib/zypp if not available (boo#1104452)
  - Robustify parsing zypper output (boo#1105992)
  - Various small fixes
- Changed permissions of systemd script again</changelog>
</package>
<package pkgid="16f70541d2dae83d83d8b0bc23a615a73dfcc5ec79d45a725930ef620b09751c" name="tryton" arch="noarch">
  <version epoch="0" ver="4.2.14" rel="lp150.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1391774400">- update to 3.0.2, changes to specfile</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1446724800">- Version 3.8.1
  tryton-lang removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1459771200">- added GNUHealth Camera and OpenCV</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1486468800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Do not pull in python-gnome-desktop package
- Add null build phase to make rpmlint happy</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1521633600">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.12 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 4.2.14 - Bugfix Release</changelog>
</package>
<package pkgid="63ce1ae1518c895d9fb57d4ff1a8a60966cdda901e0a138e6cf8812c2931a0f8" name="tryton" arch="src">
  <version epoch="0" ver="4.2.14" rel="lp150.2.3.1"/>
  <changelog author="axel.braun@gmx.de" date="1391774400">- update to 3.0.2, changes to specfile</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1446724800">- Version 3.8.1
  tryton-lang removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1459771200">- added GNUHealth Camera and OpenCV</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1486468800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Do not pull in python-gnome-desktop package
- Add null build phase to make rpmlint happy</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1521633600">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.12 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 4.2.14 - Bugfix Release</changelog>
</package>
<package pkgid="fdd6de792b6f5b27e4a55cbf064f1700b4257f11c231633085faa83cf1af37a5" name="tryton" arch="noarch">
  <version epoch="0" ver="4.2.17" rel="lp150.2.7.1"/>
  <changelog author="axel.braun@gmx.de" date="1446724800">- Version 3.8.1
  tryton-lang removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1459771200">- added GNUHealth Camera and OpenCV</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1486468800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Do not pull in python-gnome-desktop package
- Add null build phase to make rpmlint happy</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1521633600">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.12 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 4.2.14 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.15 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1533384000">- Version 4.2.16 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1534939200">- Version 4.2.17 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="c40da4bf53d716faa9638e20b6c67374b20fddb82868b5c84f879c4293fbc5ec" name="tryton" arch="src">
  <version epoch="0" ver="4.2.17" rel="lp150.2.7.1"/>
  <changelog author="axel.braun@gmx.de" date="1446724800">- Version 3.8.1
  tryton-lang removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1459771200">- added GNUHealth Camera and OpenCV</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1486468800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1507118400">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="tchvatal@suse.com" date="1517227200">- Do not pull in python-gnome-desktop package
- Add null build phase to make rpmlint happy</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1521633600">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.12 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528200000">- Version 4.2.14 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.15 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1533384000">- Version 4.2.16 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1534939200">- Version 4.2.17 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="ecc379fa9ba8b6e7b64577dd4b764c1598f7082737c134778847ff48e8e10f57" name="trytond" arch="noarch">
  <version epoch="0" ver="4.2.12" rel="lp150.2.5.1"/>
  <changelog author="axel.braun@gmx.de" date="1472040000">- Update description
- Add missing %service_add_pre and convert open-coded other
  three scriptlets to %service_*.</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- Patch for user login user_login.patch from GNU Health 3.20 applied
  trytond_server.diff removed as not needed anymore</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1499688000">- default setting for database access in trytond.conf</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6
  bugfix release
  typo in trytond.conf removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1515153600">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1518868800">- user_login.patch replaced by trytond_get_login.patch
  see boo#1078111</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1524830400">- requires postgres96, otherwise trytond-admin fails (Leap 15)</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528718400">- Version 4.2.12 - Bugfix Release
  boo#1096706 requirement for postgres96 fixed
  copyright to log file and readme added
  Specfile cleaned up</changelog>
  <changelog author="axel.braun@gmx.de" date="1528804800">- boo#1096706 set postgres96 using update-alternatives (openQA failure)</changelog>
</package>
<package pkgid="9ff50550f435268f90a6293eff0702d416418b203955fe7bf911206a671b6fa0" name="trytond" arch="src">
  <version epoch="0" ver="4.2.12" rel="lp150.2.5.1"/>
  <changelog author="axel.braun@gmx.de" date="1472040000">- Update description
- Add missing %service_add_pre and convert open-coded other
  three scriptlets to %service_*.</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- Patch for user login user_login.patch from GNU Health 3.20 applied
  trytond_server.diff removed as not needed anymore</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1499688000">- default setting for database access in trytond.conf</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6
  bugfix release
  typo in trytond.conf removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1515153600">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1518868800">- user_login.patch replaced by trytond_get_login.patch
  see boo#1078111</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1524830400">- requires postgres96, otherwise trytond-admin fails (Leap 15)</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528718400">- Version 4.2.12 - Bugfix Release
  boo#1096706 requirement for postgres96 fixed
  copyright to log file and readme added
  Specfile cleaned up</changelog>
  <changelog author="axel.braun@gmx.de" date="1528804800">- boo#1096706 set postgres96 using update-alternatives (openQA failure)</changelog>
</package>
<package pkgid="25bfc16004ea2ec5e7253119c32743da61dcf5c9be4f80f80023f591c8a14f96" name="trytond" arch="noarch">
  <version epoch="0" ver="4.2.13" rel="lp150.2.8.1"/>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- Patch for user login user_login.patch from GNU Health 3.20 applied
  trytond_server.diff removed as not needed anymore</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1499688000">- default setting for database access in trytond.conf</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6
  bugfix release
  typo in trytond.conf removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1515153600">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1518868800">- user_login.patch replaced by trytond_get_login.patch
  see boo#1078111</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1524830400">- requires postgres96, otherwise trytond-admin fails (Leap 15)</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528718400">- Version 4.2.12 - Bugfix Release
  boo#1096706 requirement for postgres96 fixed
  copyright to log file and readme added
  Specfile cleaned up</changelog>
  <changelog author="axel.braun@gmx.de" date="1528804800">- boo#1096706 set postgres96 using update-alternatives (openQA failure)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.13 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1532001600">- trytond42_psql10.diff applied for postgres10 compatibility
  Kudos to mbehrle@m9s.biz!</changelog>
</package>
<package pkgid="4445139a0ae3c2c9f71c1e1d07f02d5bd69566ca3dcb350895d6d61674d27679" name="trytond" arch="src">
  <version epoch="0" ver="4.2.13" rel="lp150.2.8.1"/>
  <changelog author="axel.braun@gmx.de" date="1483704000">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1491220800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- Patch for user login user_login.patch from GNU Health 3.20 applied
  trytond_server.diff removed as not needed anymore</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1499688000">- default setting for database access in trytond.conf</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6
  bugfix release
  typo in trytond.conf removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1515153600">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1518868800">- user_login.patch replaced by trytond_get_login.patch
  see boo#1078111</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1524830400">- requires postgres96, otherwise trytond-admin fails (Leap 15)</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528718400">- Version 4.2.12 - Bugfix Release
  boo#1096706 requirement for postgres96 fixed
  copyright to log file and readme added
  Specfile cleaned up</changelog>
  <changelog author="axel.braun@gmx.de" date="1528804800">- boo#1096706 set postgres96 using update-alternatives (openQA failure)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.13 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1532001600">- trytond42_psql10.diff applied for postgres10 compatibility
  Kudos to mbehrle@m9s.biz!</changelog>
</package>
<package pkgid="34ebeab4ff3fcbe3cef3be31fda52b02e294e60f73534baa69d330df2479e847" name="trytond" arch="noarch">
  <version epoch="0" ver="4.2.15" rel="lp150.2.12.1"/>
  <changelog author="axel.braun@gmx.de" date="1491220800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- Patch for user login user_login.patch from GNU Health 3.20 applied
  trytond_server.diff removed as not needed anymore</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1499688000">- default setting for database access in trytond.conf</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6
  bugfix release
  typo in trytond.conf removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1515153600">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1518868800">- user_login.patch replaced by trytond_get_login.patch
  see boo#1078111</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1524830400">- requires postgres96, otherwise trytond-admin fails (Leap 15)</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528718400">- Version 4.2.12 - Bugfix Release
  boo#1096706 requirement for postgres96 fixed
  copyright to log file and readme added
  Specfile cleaned up</changelog>
  <changelog author="axel.braun@gmx.de" date="1528804800">- boo#1096706 set postgres96 using update-alternatives (openQA failure)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.13 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1532001600">- trytond42_psql10.diff applied for postgres10 compatibility
  Kudos to mbehrle@m9s.biz!</changelog>
  <changelog author="axel.braun@gmx.de" date="1533384000">- Version 4.2.14 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1534939200">- Version 4.2.15 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="e42bc4fc04c3e42c9535112415c47bb610e382ef162ee31b908cb0ef07fc0c69" name="trytond" arch="src">
  <version epoch="0" ver="4.2.15" rel="lp150.2.12.1"/>
  <changelog author="axel.braun@gmx.de" date="1491220800">- Version 4.2.3</changelog>
  <changelog author="axel.braun@gmx.de" date="1496750400">- Version 4.2.4</changelog>
  <changelog author="axel.braun@gmx.de" date="1497960000">- Patch for user login user_login.patch from GNU Health 3.20 applied
  trytond_server.diff removed as not needed anymore</changelog>
  <changelog author="axel.braun@gmx.de" date="1499083200">- Version 4.2.5</changelog>
  <changelog author="axel.braun@gmx.de" date="1499688000">- default setting for database access in trytond.conf</changelog>
  <changelog author="axel.braun@gmx.de" date="1502366400">- Version 4.2.6
  bugfix release
  typo in trytond.conf removed</changelog>
  <changelog author="axel.braun@gmx.de" date="1505390400">- Documentation updated</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.7 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1512475200">- Version 4.2.8 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1515153600">- Version 4.2.9 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1518868800">- user_login.patch replaced by trytond_get_login.patch
  see boo#1078111</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.10 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1524830400">- requires postgres96, otherwise trytond-admin fails (Leap 15)</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.11 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1528718400">- Version 4.2.12 - Bugfix Release
  boo#1096706 requirement for postgres96 fixed
  copyright to log file and readme added
  Specfile cleaned up</changelog>
  <changelog author="axel.braun@gmx.de" date="1528804800">- boo#1096706 set postgres96 using update-alternatives (openQA failure)</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.13 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1532001600">- trytond42_psql10.diff applied for postgres10 compatibility
  Kudos to mbehrle@m9s.biz!</changelog>
  <changelog author="axel.braun@gmx.de" date="1533384000">- Version 4.2.14 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1534939200">- Version 4.2.15 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="c93e49006cee64e3d067340285b3a727e471d635304c37cad29fc056211b25bb" name="trytond_purchase" arch="noarch">
  <version epoch="0" ver="4.2.6" rel="lp150.2.4.1"/>
  <changelog author="axel.braun@gmx.de" date="1367496000">- initial build</changelog>
  <changelog author="axel.braun@gmx.de" date="1382702400">- new branch 3.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1504958400">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.5 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.6 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="ff664923212ac29f6f01f8f6029d07a794829186137746962a9ecb955bf7d7ba" name="trytond_purchase" arch="src">
  <version epoch="0" ver="4.2.6" rel="lp150.2.4.1"/>
  <changelog author="axel.braun@gmx.de" date="1367496000">- initial build</changelog>
  <changelog author="axel.braun@gmx.de" date="1382702400">- new branch 3.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1489147200">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1504958400">- Version 4.2.2 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1510228800">- Version 4.2.3 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1519992000">- Version 4.2.4 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1526126400">- Version 4.2.5 - Bugfix Release</changelog>
  <changelog author="axel.braun@gmx.de" date="1531310400">- Version 4.2.6 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="97ec482471a8f8bfc0633c7108334a9379945dc4e5ec710e7fb4a8ed8f36e99c" name="trytond_stock_supply" arch="noarch">
  <version epoch="0" ver="4.2.2" rel="lp150.2.4.1"/>
  <changelog author="axel.braun@gmx.de" date="1367496000">- initial build</changelog>
  <changelog author="axel.braun@gmx.de" date="1382702400">- new branch 3.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1486468800">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1534939200">- Version 4.2.2 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="c7dc7e9f3738b66de5515ed63371d4f40c4fcd782dacd0057dfafe20735c7b71" name="trytond_stock_supply" arch="src">
  <version epoch="0" ver="4.2.2" rel="lp150.2.4.1"/>
  <changelog author="axel.braun@gmx.de" date="1367496000">- initial build</changelog>
  <changelog author="axel.braun@gmx.de" date="1382702400">- new branch 3.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1429099200">- Tryton Release 3.6</changelog>
  <changelog author="axel.braun@gmx.de" date="1445256000">- Tryton Release 3.8</changelog>
  <changelog author="axel.braun@gmx.de" date="1462190400">- Tryton Release 4.0</changelog>
  <changelog author="axel.braun@gmx.de" date="1480334400">- Tryton Release 4.2</changelog>
  <changelog author="axel.braun@gmx.de" date="1486468800">- Version 4.2.1</changelog>
  <changelog author="axel.braun@gmx.de" date="1534939200">- Version 4.2.2 - Bugfix Release (boo#1107771)</changelog>
</package>
<package pkgid="3b4082797a3fdce95820e00daf43cbb23d44fac2f92315019bbe30dcb3e9a0db" name="typelib-1_0-Gdm-1_0" arch="x86_64">
  <version epoch="0" ver="3.26.2.1" rel="lp150.11.3.1"/>
  <changelog author="yfjiang@suse.com" date="1517313600">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: examine
  filename argument in gdm_settings_desktop_backend_new instead of
  examining GDM_RUNTIME_CONF (bsc#1078030).</changelog>
  <changelog author="yfjiang@suse.com" date="1517400000">- Add back translation-update-upstream as BuildRequires since
  SLE still needs it.</changelog>
  <changelog author="xwang@suse.com" date="1519905600">- Remove gdm-default-wm-sle12.patch: default session in SLE15
  becomes 'GNOME', don't need this patch anymore.</changelog>
  <changelog author="xwang@suse.com" date="1519992000">- Add gdm-Revert-session-don-t-call-gdm_session_defaults_chang.patch:
  fix showing right active session of user in login dialog
  (bsc#1082958 bgo#793609).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1519992001">- Adopt the use of %make_build macro rather than raw make command,
  following the best practices.
- Remove obsolete %clean section as RPM already do this kind of
  work itself.
- Update typelib-1_0-Gdm-1_0 package's summary to make it shorter
  but still meaningful.
- Update gdmflexiserver package's summary to avoid redundancies and
  correct name case in the description.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519992002">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="yfjiang@suse.com" date="1520856000">- Update gdm-disable-wayland-on-unsupported-chipsets.patch: update
  the comments section in data/61-gdm.rules to make the context
  easier to append.
- Add gdm-disable-wayland-on-mgag200-chipsets.patch: by falling
  back GNOME to X, the patch targets to provide a better user
  experiences for servers with mgag200 graphic chips, which suffer
  the sluggish keyboard/mouse issues running GNOME on wayland
  (bsc#1073550, bsc#1077802). Some of the servers could not
  initiate GNOME in a similar context (bsc#1070933).
  With the complexity of the problem, Wayland probably needs
  further track to get the specific hardware adapted. At the
  same time the issue itself is tracked in upstream
  (glgo#GNOME/mutter/issues/59), the better way for now to make
  SLE-15 working smoothly is to disable the chipset on Wayland
  (bsc#1083609, bgo#794106).
  In addition, the patch updates the comments section in
  data/61-gdm.rules to make the context easier to append.</changelog>
  <changelog author="hpj@suse.com" date="1521028800">- Add gdm-xwayland-xauth.patch (bsc#1084737): Creates an Xauthority
  file and exports XAUTHORITY for Xwayland.</changelog>
  <changelog author="fcrozat@suse.com" date="1521201600">- Add requirement on xdm package, it provides common scripts and
  systemd service used by display managers (bsc#1084655).</changelog>
  <changelog author="dimstar@opensuse.org" date="1521547200">- Unconditionally enable translation-update-upstream: on
  Tumbleweed, this results in a NOP and for Leap in SLE paid
  translations being used (boo#1086036).</changelog>
  <changelog author="hpj@suse.com" date="1521720000">- Retire gdm-xwayland-xauth.patch (bsc#1084737): We now do this
  in the compositor instead.</changelog>
  <changelog author="sbrabec@suse.com" date="1522238400">- Drop gdm-nb-translations.patch that breaks
  translation-update-upstream (boo#1087338).</changelog>
  <changelog author="fezhang@suse.com" date="1522843200">- Clean up specfile: Enable Wayland unconditionally.</changelog>
  <changelog author="fezhang@suse.com" date="1523188800">- Update gdm-disable-wayland-on-unsupported-chipsets.patch:
  + merge gdm-disable-wayland-on-mgag200-chipsets.patch.
  + add rules for ASPEED ast drivers (boo#1088539).</changelog>
  <changelog author="yfjiang@suse.com" date="1523361600">- Add gdm-quit-plymouth-when-xdmcp-is-the-only-allowed-connection.patch:
  gdm is responsible to kill plymouth by spawning the "plymouth
  quit" subprocesses in gdm-manager. The current code pathes of
  quiting plymouth can never be reached when xdmcp is the only
  connection allowed. The patch handles this edge case by quit
  plymouth immediately when the condition is detected (bsc#1083646
  bgo#795120).</changelog>
  <changelog author="fezhang@suse.com" date="1524484800">- Add gdm-quit-plymouth-on-headless.patch: Stop boot splash
  whenever a display is managed, to avoid systems without monitor
  from hanging (boo#1089673 bgo#795477).</changelog>
  <changelog author="fezhang@suse.com" date="1525348800">- Drop gdm-quit-plymouth-on-headless.patch: Patch is known to cause
  the first login to fail, a reworked patch needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1532606400">- Enable pam_keyinit module (boo#1081947).</changelog>
  <changelog author="bwiedemann@suse.com" date="1533038400">- Update gdm-disable-gnome-initial-setup.patch to avoid build race
  in SLE (boo#1103093)</changelog>
  <changelog author="fezhang@suse.com" date="1534334400">- Add gdm-CVE-2018-14424.patch: Pass the display object rather than
  the id in the removed signal, fix use-after-free of disposed
  transient displays (CVE-2018-14424, glgo#GNOME#gdm#401,
  boo#1103737).</changelog>
</package>
<package pkgid="e9d75dfe148827351d6ea7850a34324fa0ac6f639973189677ddc9f9fdc5e4e6" name="typelib-1_0-JavaScriptCore-4_0" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="acf40f9d40b416270389fa196059dbe86ac3fd8c0cd66fbf91c0b5fb3f3d9c54" name="typelib-1_0-JavaScriptCore-4_0" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="a9b8fd8f9f5e56b8cc1fbf69af9fdeb334349e70222d7c7db4d29ad5b973f4f0" name="typelib-1_0-Pango-1_0" arch="x86_64">
  <version epoch="0" ver="1.40.14" rel="lp150.2.3.1"/>
  <changelog author="zaitor@opensuse.org" date="1444651200">- Update to version 1.38.1:
  + Require Harfbuzz 0.9.30.
  + Fix make check with --enable-debug=no.
  + Win32 build fixes.</changelog>
  <changelog author="zaitor@opensuse.org" date="1450785600">- Update to version 1.39.0:
  + Update PangoScript to Unicode 8.0.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458734400">- Update to version 1.40.0:
  + Fix typos.
  + Don't treat OGHAM SPACE MARK as whitespace.</changelog>
  <changelog author="zaitor@opensuse.org" date="1460462400">- Update to version 1.40.1 (Fate#318572):
  + Use $PKG_CONFIG consistently (bgo#764191).
  + Fix a PangoWin32FontMap memory leak (bgo#764089).</changelog>
  <changelog author="hpj@suse.com" date="1470225600">- Make libpango obsolete/provide pango-modules bsc#978972. Change
  by idonmez@suse.com.</changelog>
  <changelog author="dimstar@opensuse.org" date="1472472000">- Update to version 1.40.2:
  + Improve introspection builds in msvc (bgo#764984).
  + Properly handle UTF32 chars in coretext.
  + Add rebeccapurple to list of colors.
  + Correct font weight mapping in coretext (bgo#766148).
  + Use version macros for exports (bgo#767587).</changelog>
  <changelog author="zaitor@opensuse.org" date="1473854400">- Update to version 1.40.3:
  + Fix export of pango_cairo_win32_font_map_get_type (bgo#771004).
  + Fix build on OS X (bgo#770729).</changelog>
  <changelog author="zaitor@opensuse.org" date="1488196800">- Update to version 1.40.4:
  + Fix introspection annotation of pango_lkayout_get_size
    (bgo#779232).
  + Fix some Coverity findings: bgo#778601, bgo#778602, bgo#778654,
    bgo#778656.</changelog>
  <changelog author="zaitor@opensuse.org" date="1491825600">- Update to version 1.40.5:
  + Add missing introspection annotations (bgo#778663).
  + Fix line-end handling in pango_read_line (bgo#778816).
  + Make alpha attribute work without color (bgo#773767).
  + win32: Enable rendering colored texti and underlines
    (bgo#768779).</changelog>
  <changelog author="zaitor@opensuse.org" date="1495540800">- Update to version 1.40.6:
  + Don't use deprecated harfbuzz api.
  + Correctly implement min-required/max-allowed support.
  + Avoid compiler warnings.
  + Drop -uninstalled.pd files.
  + Add support for building with meson.</changelog>
  <changelog author="zaitor@opensuse.org" date="1500379200">- Update to version 1.40.7:
  + Some fixes for meson build support.
  + Don't change fonts for variation selectors (bgo#781123).
  + Fix some bugs in the libthai glue layer.
  + Pass text along when calling into cairo (bgo#784394).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502107200">- Update to version 1.40.8:
  + Support emoji sequences in boundary determination.
  + Choose emoji font for color emoji.</changelog>
  <changelog author="zaitor@opensuse.org" date="1502280000">- Update to version 1.40.9:
  + Build and dist fixes.
  + Fix build on Windows with MSVC (bgo#783274).</changelog>
  <changelog author="zaitor@opensuse.org" date="1502884800">- Update to version 1.40.10:
  + Update Emoji data to version 5.
  + Apply gravity across spans in markup (bgo#784243).
  + Support variation selectors for shaping.
  + CoreText: Rely on CGFont for scaling (bgo#782393).
  + Fix grapheme breaks and backspacing for Emoji.
- Add meson BuildRequires and switch autotools macros configure,
  make and makeinstall to meson, meson_build and meson_install
  following upstream switch to Meson build system.
- Add help2man BuildRequires, needed to build manpages.
- Minor spec file cleanup.</changelog>
  <changelog author="zaitor@opensuse.org" date="1503144000">- Update to version 1.40.11:
  + Fix backspacing for more Emoji sequences.
  + Make tests run faster.</changelog>
  <changelog author="pmonrealgonzalez@suse.com" date="1504180800">- Add pango-fix-default-break-function.patch: Fix
  pango_default_break function for sentence start/end (bgo#785978).</changelog>
  <changelog author="zaitor@opensuse.org" date="1504526400">- Update to version 1.40.12:
  + Fix pango_default_break for sentence start/end (bgo#785978).
  + Fix multilib issue in pango-enum-types.h (bgo#786887).
- Drop pango-fix-default-break-function.patch: Fixed upstream.</changelog>
  <changelog author="badshah400@gmail.com" date="1509192000">- Update to version 1.40.13:
  + Some performance improvements (bgo#788643).
  + Update pango_default_break for line breaks (bgo#788115).
  + Fix an introspection warning (bgo#781857).</changelog>
  <changelog author="luc14n0@linuxmail.org" date="1510920000">- Update to version 1.40.14:
  + Fix char break problem introduced in 1.40.13 (bgo#789625).
  + Add tests for char breaking.</changelog>
  <changelog author="sreeves@suse.com" date="1534593600">- Add pango-emoji-bsc1103877.patch: Fix denial of service
  when parsing emoji (bsc#1103877, CVE-2018-15120)</changelog>
</package>
<package pkgid="5300e344a97d513bb02fc049fd86ac0b387b34a95f28878822e121f9833bde6d" name="typelib-1_0-Polkit-1_0" arch="x86_64">
  <version epoch="0" ver="0.114" rel="lp150.2.3.1"/>
  <changelog author="saschpe@suse.de" date="1357732800">- Only mark the following files as %config, not %config(noreplace):
  + %{_sysconfdir}/dbus-1/system.d/org.freedesktop.PolicyKit1.conf
  + %{_sysconfdir}/pam.d/polkit-1
  + %{_sysconfdir}/polkit-1/rules.d/50-default.rules
  PolicyKit's own config files should only be changed for good reason
  and we want to prefer openSUSE's defaults (you still get an .rpmsafe
  file)</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1358164800">- Update to 0.110
  + Set XAUTHORITY environment variable if is unset
  + Use mutex and condition variables properly
  + Build fixes.
- Changes from version 0.109:
  + Include gmodule-2.0 to avoid linker errors
  + Don't require libmozjs185 devel packages for polkit rules
    to work
- Drop polkit-link-gmodule.patch and polkit-libmozjs.patch, those
  are merged upstream</changelog>
  <changelog author="gber@opensuse.org" date="1361188800">- Recommend libmozjs185-1_0 which is dlopen'ed and required for JS
  rules</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1365681600">- Add automake-113.patch, fixes build with automake-1.13</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1371211200">- Update to 0.111
  + Both js185 and mozjs17 versions of SpiderMonkey are supported
  + The JavaScript interpreter is now mandatory
  + Fixed various memory leaks
  + Respect SUID_CFLAGS and SUID_LDFLAGS
  + Set process environment from pam_getenvlist()
  + Fix the build with automake 1.13
- Drop polkit-suid_flags.patch and automake-113.patch, those
  patches are included in this release</changelog>
  <changelog author="dimstar@opensuse.org" date="1373025600">- On openSUSE 13.1+, switch from mozjs185 to mozjs-17.0 by:
  + Conditionally BuildRequire pkgconfig(mozjs-17.0).
- Drop libmozjs185-1_0 Recommends: the library is actually required
  and auto-detected as such by rpm (from 0.111 changes: "The
  JavaScript interpreter is now mandatory").</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1379592000">- Update to 0.112
  + polkitunixprocess: Deprecate racy APIs
  + pkcheck: Support --process=pid,start-time,uid syntax too
    (CVE-2013-4288)
  + Use GOnce for interface type registration
  + Add czech translation po file to distribution
  + Update the czech once more with newest pot file</changelog>
  <changelog author="toms@opensuse.org" date="1380283200">- Fixed URL</changelog>
  <changelog author="meissner@suse.com" date="1418126400">- Added gpg signature and keyring with David Zeuthen and Miloslav Trmac
  ids.</changelog>
  <changelog author="tchvatal@suse.com" date="1421064000">- Try to fix kded leaking due to powerdevil exposing this issue in
  polkit: (bsc#912889)
  * polkit-no-kded-leak.patch</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1438862400">- Update to 0.113:
  * Fix CVE-2015-4625
  * Fix CVE-2015-3256
  * Fix CVE-2015-3255
  * Fix CVE-2015-3218
  * On systemd-213 and later, the ?active? state is shared across
    all sessions of an user, instead of being tracked separately
  * pkexec: when not given a program to execute, runs the users?
    shell by default
- Remove polkit-no-kded-leak.patch (upstreamed)</changelog>
  <changelog author="meissner@suse.com" date="1448539200">- polkit-revert-session-magic.patch: revert a session detection change
  that could lead to sessions not being detected as active due to
  a systemd bug. bsc#954139</changelog>
  <changelog author="fbui@suse.com" date="1465300800">- systemd.pc is shipped by systemd main package (bsc#983167)
  Strangely polkit wants systemd.pc to detect that the target system
  is running systemd even if its configured to build systemd support...</changelog>
  <changelog author="fbui@suse.com" date="1465387200">- Use pkgconfig() instead of requiring systemd package names directly.</changelog>
  <changelog author="lnussel@suse.de" date="1497355200">- Use gettext as fallback to get potential distro translations for
  polkit actions. Similar mechnism as used for desktop file
  translations. That way it's possible to use weblate to add
  additional translations that are not provided by upstream
  (polkit-gettext.patch).</changelog>
  <changelog author="dimstar@opensuse.org" date="1502798400">- Add polkit-itstools.patch: Add gettext support for .policy files.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519819200">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="schwab@suse.de" date="1519905600">- pkexec.patch: pkexec: allow --version and --help even if not setuid</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523275200">- Update to version 0.114:
  + Port to mozjs 52, the latest version of the firefox JavaScript
    engine.
  + Add gettext support for policy files.
  + Fixes for various memory leaks.
  + Updated translations.
- Update keyring with Ray Strode &lt;halfline@gmail.com&gt; public key.
- Drop with_systemd define and all conditionals and
  polkit-no-systemd.patch and ConsoleKit BuildRequires, we only
  support systemd now.
- Drop upstream fixed polkit-itstools.patch.
- Rebase pkexec.patch with quilt.
- Add gcc-c++ and pkgconfig(mozjs-52) BuildRequires: New
  dependencies.
- Drop conditional pkgconfig(mozjs-17.0) and pkgconfig(mozjs185):
  no longer supported.
- Drop autoconf and automake BuildRequires: They are implicit via
  libtool BuildRequires.
- Replace glib2-devel and gobject-introspection-devel with their
  pkgconfig counterparts: pkgconfig(gio-unix-2.0),
  pkgconfig(gmodule-2.0) and pkgconfig(gobject-introspection-1.0).
- Add polkit-jsauthority-pass-format-string.patch: jsauthority:
  pass "%s" format string to remaining report function, patch from
  upstream git, adding missed commit (bgo#105865).
- Drop polkit-revert-session-magic.patch: Upstream systemd bug is
  since a long time fixed (gh#systemd#58) (boo#954139).</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- 0001-Fix-CVE-FIXME-Trusting-client-supplied-UID.patch:
  Fixed trusting the client-supplied UID (CVE-2018-1116 bsc#1099031)</changelog>
</package>
<package pkgid="7f87a776467ee04c0bb0fbc84c52859c8b219c75bc7e6853202270fdff6361c3" name="typelib-1_0-SpiceClientGlib-2_0" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="5fc978351e98116e13f5167cef1d3e9ea24fb4dba9125887ea22d44b0a0a4834" name="typelib-1_0-SpiceClientGtk-3_0" arch="x86_64">
  <version epoch="0" ver="0.34" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1365768000">- Update to version 0.19:
  + snappy has been renamed to spicy-screenshot.
  + Several file-xfer fixes and improvements.
  + Many win32 and USB redirection related fixes.
  + Compile and work again with RHEL6 and older glib releases.
  + misc fixes and improvements.</changelog>
  <changelog author="zaitor@opensuse.org" date="1372593600">- Update to version 0.20:
  + Adaptive video streaming support (sync with PulseAudio
    backend only).
  + Add spice_usb_device_manager_get_devices_with_filter().
  + Add --spice-secure-channels to explicitely specify secure
    channels.
  + Multi-monitor, win32, USB redir fixes.
  + Add basic gtk+ wayland and broadway backend support.
  + Removed the GnomeRR code.</changelog>
  <changelog author="dimstar@opensuse.org" date="1376481600">- Add spice-gtk-mapfile.patch: Add spice_channel_string_to_type to
  map files (bnc#834896).</changelog>
  <changelog author="dimstar@opensuse.org" date="1379678400">- Update to version 0.21:
  + Improve inverted cursor support.
  + Win32 usb redirected device uninstall fix.
  + Add support for libusb hotplug API.
  + Smartcard initialization fixes.
  + C&amp;p converts line-endings if necessary.
  + Rendering and overall performance improvements.
  + Build and bindings fixes.
- Drop spice-gtk-mapfile.patch: fixed upstream.</changelog>
  <changelog author="fcrozat@suse.com" date="1404302400">- Release 0.25:
  + Fix SPICE_GTK_MICRO_VERSION define for default value
  + Make "phodav", the webdav server, an external dependency rather
  than a submodule.
- Changes from 0.24:
  + support folder sharing, via WebDAV channel
  + add HTTPS proxy support (requires glib 2.28), and Basic auth
  + add SPICE_GTK_CHECK_VERSION macro
  + advertise SASL capability early (to help fips-enabled servers)
  + fix crash when releasing primary surface
  + fix a few memory leaks with SASL
  + fix spice_display_get_pixbuf() with offset area
- Changes from 0.23:
  + support Opus codec for audio channels
  + ssl: use tls 1.0 or better
  + support gdbus instead of dbus-glib when available
- Changes from 0.22:
  + improve inverted cursor support
  + use system-wide trust certificate store
  + make sasl support work with other method than MD5
  + fix some clipboard crasher, limit clipboard size
  + fix various regressions:
    usbredir, alt-tab on win32, palette crash, agent notification,
    old protocol support, sasl ending crash, gthread coroutine
    crash, close  sockets on migration, pulse backend crash
  + fix a few memory leaks
- Add pkgconfig(libsoup-2.4) and pkgconfig(usbutils) BuildRequires.</changelog>
  <changelog author="zaitor@opensuse.org" date="1418990400">- Update to version 0.27:
  + Add GStreamer 1.0 audio support.
  + Add LZ4 compression algorithm support.
  + Learn to release the keyboard grab on release keys pressed
    (ctrl+alt by default), to let alt+f4/alt-tab and others for
    client side.
  + Session and channels life-cycle changes: a channel will no
    longer hold a reference after session disconnection.
  + Migration fixes, fail early on client provided fds (this is
    left to solve in the future).
  + Fix support for Gtk+ 3.0 on Windows.
  + Clipboard size fixes.
  + Server-side pointer drawing on grab.
  + Build-sys improvements.
  + New APIs:
  - spice_usb_device_get_libusb_device()
  - spice_session_is_for_migration()</changelog>
  <changelog author="zaitor@opensuse.org" date="1427371200">- Update to version 0.28:
  + webdav improvements:
  - No longer spawn a server thread
  - No longer use local TCP sockets &amp; port
  - Provides read-only mode with SpiceSession:share-dir-ro
  - Requires libphodav-2.0 glib-2.0 &gt;= 2.43.90 libsoup-2.4 &gt;=
    2.49.91
  + Drop gstreamer 0.10 in favour of 1.0
  + Add spice+unix://path connection support
  + Accept URI with empty parameters value, such as
    spice://localhost?port=5900&amp;tls-port=
  + Fixed lz4 support
  + Silence some harmless warnings
  + Misc API documentation improvements
  + Switch-host migration fixes
  + Learn to build --without-gtk
  + Bugs and regressions fixes
- Add pkgconfig(liblz4) BuildRequires and pass --enable-lz4 to
  configure.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1433505600">- Check for passwords longer than what spice protocol allows to
  help reporting the error to the user.
  password-length-check.patch. boo#931044</changelog>
  <changelog author="cbosdonnat@suse.com" date="1435665600">- Update to version 0.29:
  + sync guest audio volume with client volume
  + use stream volume for PulseAudio source
  + on Windows, fail early during initialization if the usbclerk service
    can't be reached
  + fix audio and usb managers to work with client provided fds
  + check for too long passwords, boo#931044
  + many crasher and bug fixes, (boo#898383)
- Drop now useless patch: password-length-check.patch
- bnc#894069: disable smart card support for SLE</changelog>
  <changelog author="zaitor@opensuse.org" date="1443700800">- Update to version 0.30:
  + spice-protocol is no longer bundled with spice-gtk. Requires
    spice-protocol &gt;= 0.12.10
  + Handle single headed monitors that have a non-zero x, y config
  + Various small improvements to 'spicy' test application
  + Fix build with automake &lt; 1.13
  + various bug fixes and improvements (boo#958306)
  + New API:
  - spice_main_update_display_enabled()
  - Add SpiceSession::preferred-compression property and
  - -spice-preferred-compression commandline switch (requires a
    yet-to-be-released version of spice server)
  + Ability to set the SpiceDisplay::keypress-delay property via a
    new SPICE_KEYPRESS_DELAY environment variable
- Add python-six BuildRequires: New dependency, that configure
  fails to look for.</changelog>
  <changelog author="dimstar@opensuse.org" date="1458302400">- Update to version 0.31:
  + NOTE: this is the last release to support gtk+ 2.0.
  + Add local GL scanout support for virtio-gpu/virgl guests.
  + New file-transfer API, to be able to monitor transfers etc.
  + New spice_display_change_preferred_compression() API.
  + Better authentication error reports.
  + usbredir: drop isoc packets on low bandwidth (rh#1264156).
  + usbredir: add counter of free channels (rh#1298772).
  + Add a toplevel include header spice-client-gtk.h.
  + Grab keyboard based on session focus (rh#1275231).
  + Don't print error message on successful file transfer
    (rh#1265562).
  + Allow simultaneous support for Pulse and GStreamer audio.
  + Remove GSlice usage.
  + Some BE endianness fixes.
  + Misc leak and use after-free fixes.
  + Documentation fixes.
- Drop pkgconfig(x11) and pkgconfig(xrandr) BuildRequires: no
  longer needed.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1472644800">- Move acl helper to a new libspice-client-glib-helper package and
  add a corresponding dependency (bsc#994858)</changelog>
  <changelog author="zaitor@opensuse.org" date="1475928000">- Update to version 0.33:
  + lz4 compression of USB channel.
  + Keyboard: pause key fixes, set keypress-delay to 0 on local
    socket.
  + Mouse: fix pointer grabbing in server mode.
  + Clipboard: fix copying text from old application without
    UTF8_STRING target (motif).
  + File-xfer changes: grouping all transferred files per
    operation.
  + New
    spice_file_transfer_task_get_{total_bytes,transferred_bytes}
    API and associated properties.
  + New SpiceChannel:socket property.
  + Fix rendering issues with CSD on Windows.
  + Fix gettext support, some translations updates.
  + Fix display refresh issue on f25 after resize (init egl only
    when required).
  + Many leaks and races fixes, new tests (bsc#1016291).
- Changes from version 0.32:
  + Libspice-client-gtk API/ABI break: library soname/version has
    been bumped, and deprecated symbols have been removed. In
    practice, most of the API (in particular for language bindings)
    should be unchanged.
  + Drop gtk+ 2.0 support.
  + Require gtk+ &gt;= 3.12 and glib &gt;= 2.36.
  + Add GStreamer as a backend for mjpeg, vp8 &amp; h264 decoding. This
    allows the upcoming Spice server release to send video regions
    with better codecs.
  + A number of spice-gtk structures are now private.
  + Spice-gtk widget is no longer a GtkDrawingArea but an opaque
    type with only guarantee to be a GtkWidget.
  + Virgl:
  - Use GtkGlArea if possible (on wayland only atm).
  - Various fixes (multiple display, resize, canvas-less
    support).
  + Win-usbredir: use UsbDk backend when available and various
    improvements.
  + Ensure that dnd file copy get cancelled.
  + Some JP and KR keyboard handling fixes on Windows.
  + Fix SASL GSSAPI.
  + Fix ipv6 proxy address handling.
  + Allow smaller widget with scaling enabled.
  + Add spice_main_request_mouse_mode() to request mouse mode.
  + Add SpiceGtkSession:sync-modifiers to change modifiers sync
    behaviour.
  + Various video decoding improvements.
  + Use GTask instead of GSimpleAsyncResult.
  + Misc bindings, leaks, warnings, and spelling fixes (bsc#1010188).
- Add gstreamer-plugins-bad, gstreamer-plugins-good,
  pkgconfig(gstreamer-1.0), pkgconfig(gstreamer-app-1.0),
  pkgconfig(gstreamer-audio-1.0), pkgconfig(gstreamer-base-1.0) and
  pkgconfig(opus) BuildRequires: New dependencies.
- Add disabled pkgconfig(libphodav-2.0) BuildRequires: New optional
  dependency, not yet available in openSUSE.
- Drop pkgconfig(gtk+-2.0) BuildRequires: No longer needed as
  upstream dropped gtk2 support.
- Remove all buildhandling of gtk2.
- Changes to subpackages following upstream changes:
  + Bump sover for libspice-client-gtk-3.
  + Drop libspice-client-gtk-2,python-SpiceClientGtk and
    typelib-1_0-SpiceClientGtk-2_0 no longer built.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1480939200">- Merge SLES and openSUSE differences in one spec file.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1481630400">- Better check for lz4.
  48da2c66-fix-lz4-deps.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1486036800">- Merge SLES changelog (fate#322402)</changelog>
  <changelog author="zaitor@opensuse.org" date="1488283200">- Drop pkgconfig(pygtk-2.0) BuildRequires: No longer needed, nor
  used as gtk2 support was dropped.
- Add spice-gtk-remove-pygtk-bindings-leftovers.patch: Remove
  leftover pygtk bindings, patch from upstream git.
- Stop using sed to insert usbredirhost-0.5 into configure checks,
  no longer needed: fixed upstream.</changelog>
  <changelog author="cbosdonnat@suse.com" date="1503921600">- Update to version 0.34 (bsc#1055295):
  + NOTE: this is the last release with the spice-controller library
  + add VP9 codec support
  + API: add spice_display_change_preferred_video_codec_type()
  + API: add new SpiceCursorChannel:cursor property, deprecate "cursor-set" signal
  + API: spice_audio_new() is no longer in public header
  + fix clipboard crash and other regressions from 0.33
  + report invalid or stopped streams to the server
  + use playbin instead of decodebin with gstreamer &gt; 1.9
  + support GST_DEBUG_BIN_TO_DOT_FILE debug
  + deprecate a few esoteric options from --spice group:
  - -spice-color-depth, --spice-cache-size, --spice-glz-window-size used
    mainly for development. They may be available with spicy in the future.
  + win32: handle failures when starting win-usb manager
  + win32: removed windows usb-clerk support, replaced by UsbDk
  + win32: fix alt-tab &amp; grab issues
  + spicy learned to tweak codec preference, cancel transfer, and resize
    precisely for debugging purposes
  + use keycodemapdb submodule, drop perl(Text::CSV) dependency
  + file-xfer: fix bad filename encoding
  + file-xfer: handle new error kind
  + build-sys fixes for macos
  + replace some deprecated gtk code
  + memory leak fixes, new tests
- Drop now useless patches:
  + 48da2c66-fix-lz4-deps.patch
  + spice-gtk-remove-pygtk-bindings-leftovers.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1531742400">- Avoid buffer overflow on image lz cheks (CVE-2018-10893, bsc#1101295)
  Added patches:
    0001-lz-Avoid-buffer-reading-overflow-checking-for-image-.patch
    0002-lz-More-checks-on-image-sizes.patch
- Add setuid bit to spice-client-glib-usb-acl-helper (bsc#1101420)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1534766400">- Fix potential heap corruption when demarshalling (CVE-2018-10873,
  bsc#1104448)
  Added patch:
    bb15d481-Fix-flexible-array-buffer-overflow.patch</changelog>
</package>
<package pkgid="a6e636aeefb99ab26e9afefb7719e97978df574faf9cb3c11a8cb240533424ad" name="typelib-1_0-WebKit2-4_0" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="d4055be89e7a205cbe003a519090da0ee2e170033d78a1e1c6700b26b707eedd" name="typelib-1_0-WebKit2-4_0" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="8b5a92f1c0281163985002ccf0a0936dbb3af68f748b82eea61fe4786aa63727" name="typelib-1_0-WebKit2WebExtension-4_0" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="d04895cbc26333dae780000a86c95650bb6937870e62a34e8eca32b06e98dbde" name="typelib-1_0-WebKit2WebExtension-4_0" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="027a90e4ccfafb40e295de442fcea9c3846569ff555e1d9fb6794511959c9318" name="u2f-host" arch="x86_64">
  <version epoch="0" ver="1.1.6" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1414497600">- Version 0.0 (released 2014-09-16)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1418126400">- Version 0.0.2 (released 2014-11-28)
  - Add more devices to udev.</changelog>
  <changelog author="t.gruner@katodev.de" date="1420718400">- Version 0.0.3 (released 2015-01-08)
  - Change license to LGPLv2+ for the library.
  - Some improvements to internal communication code.
  - Some debug mode improvements, from Bram Vandoren.</changelog>
  <changelog author="t.gruner@katodev.de" date="1422014400">- Version 0.0.4 (released 2015-01-22)
  - Add an exponential growing timeout for slow devices (PlugUp).</changelog>
  <changelog author="t.gruner@katodev.de" date="1441108800">- Version 1.0.0 (released 2015-08-27)
  - Add udev rules for older version of udev.
  - Add pam:// as an allowed protocol.
  - Stop using sleep(), use Sleep() on windows and usleep() on others.
  - Fixup tool name in help and manpage.
  - Add a timeout to the register and authenticate actions.</changelog>
  <changelog author="t.gruner@katodev.de" date="1441368000">- Fix path in u2f-host/u2f-host.h</changelog>
  <changelog author="t.gruner@katodev.de" date="1444132800">- Remove fix in u2f-host/u2f-host.h
- Cleanup .spec file</changelog>
  <changelog author="t.gruner@katodev.de" date="1455796800">- Version 1.1.0 (released 2016-02-15)
  - Add udev rules for more devices.
  - Don?t return success when no data is received.
  - Fix typos.
  - Make send_apdu send data like chrome does.
  - Don?t release json object that we don?t own no more.
  - Don?t do memcmp on uninitialized memory.
  - Add u2fh_authenticate2() and u2fh_register2().
  - Remove base64 padding (required by spec).
  - Use unsigned ints to prevent buffer overflows.</changelog>
  <changelog author="t.gruner@katodev.de" date="1458561600">- Version 1.1.1 (released 2016-03-14)
  - Use correct index in u2fh_devs_discover()
  - Fix an issue where we left the authenticate loop early.
  - Fix an issue where authenticate remembered which devices to skip.
  - Stop validating the scheme of the origin.
  - Fixup a crash in u2fh_devs_discover() with closing unplugged devices.
  - Documentation fixes.</changelog>
  <changelog author="jengelh@inai.de" date="1458734400">- Avoid undesired blank lines at start of descriptions.
  Expand description. Trim filelist.</changelog>
  <changelog author="t.gruner@katodev.de" date="1463659200">- Add buildrequirement for libudev to select the rule for udev.
- Add udev directories in %files
- Add udev rule for Feitian ePass FIDO (udev.patch)
- Change License for the library</changelog>
  <changelog author="t.gruner@katodev.de" date="1476273600">- Version 1.1.3 (released 2016-10-04)
  - Added more u2f devices to the udev rulesets.
  - Fixup mac builds.
- Version 1.1.2 (released 2016-06-22)
  - Make authenticate return U2FH_OK if touch is set to not needed. Also minor fixes to error output of authenticate.
  - Documentation fixes.
  - Compilation fixes on visual studio.
  - Add udev rules for Feitian devices.
  - Add optional cmake build.
  - Change license of the commandline tool to LGPL 2.1+
- remove udev.patch</changelog>
  <changelog author="kkaempf@suse.com" date="1505304000">- Version 1.1.4 (released 2017-09-01)
  - Added more u2f devices to the udev rulesets.
  - Increase buffer size, allowing for bigger certificates.
  - Add u2f.conf.sample for FreeBSD permission handling.</changelog>
  <changelog author="kbabioch@suse.com" date="1526385600">- Version 1.1.6 (released 2018-05-15)
  - Change waiting logic on authenticate to allow for faster feedback.
- Version 1.1.5 (released 2018-03-07)
  - Fix refcount when adding json_objects.
  - Handle fido2 keepalive.
  - Add udev rules for more devices.</changelog>
</package>
<package pkgid="9802075771b49f91973d95c59f15404be21eb7b7ba2ffc25b8f89a8f2d6d8342" name="u2f-server" arch="x86_64">
  <version epoch="0" ver="1.0.1" rel="lp150.2.3.1"/>
  <changelog author="t.gruner@katodev.de" date="1420545600">- Version 0.0.0 (released 2014-11-25)
  - Initial release.</changelog>
  <changelog author="t.gruner@katodev.de" date="1436356800">- update to Version 1.0.0 (released 2015-07-01)
  - Improved compatibility for other architectures.</changelog>
  <changelog author="t.gruner@katodev.de" date="1437134400">- Version 1.0.1 (released 2015-07-09)
  - General fixes and improvements.
  - Changed pkg-config settings to accommodate changes in OpenSSL.</changelog>
  <changelog author="t.gruner@katodev.de" date="1444305600">- Change license to BSD-2-Clause
- Cleanup .spec file</changelog>
  <changelog author="matthias.gerstner@suse.com" date="1530187200">- 0001-valgrind-shows-memory-errors-around-this-code-becaus.patch: fix memory
  corruption resulting in SEGFAULT, SIGBUS or an assertion in users of
  libu2f-server, most prominently in pam_u2f (bnc#1099232)</changelog>
</package>
<package pkgid="0bab176ddabf8abaad6dfe217a5ed277013b814a57aa2dddb651d961ebcdab1c" name="ucode-amd" arch="noarch">
  <version epoch="0" ver="20180525" rel="lp150.2.3.1"/>
  <changelog author="tiwai@suse.de" date="1511179200">- Remove iwlwifi-*-34.ucode since they seem breaking with 4.13.x
  TW kernel (bsc#1068838)</changelog>
  <changelog author="mpluskal@suse.com" date="1512043200">- Update to version 20171125:
  * brcm: update firmware for bcm4358
  * brcm: update firmware for bcm4356
  * brcm: update firmware for bcm4354
  * brcm: introduce firmware for bcm43430 revision 0
  * brcm: update firmware for bcm4339
  * Mellanox: Add new mlxsw_spectrum firmware 13.1530.152
  * WHENCE: Add missing entry for mlxsw_spectrum firmware
  * WHENCE: Fix typo in entry for iwlwifi-8265-34.ucode
  * s2255drv: f2255usb: firmware version 1.2.8
  * amdgpu: add new CP firmware for polaris chips
  * qed: Add firmware 8.33.1.0
  * qcom: add venus firmware files for v4.2
  * qcom: add firmware files for Adreno a530
  * iwlwifi: add firmware version 34 for new 9000 series
  * linux-firmware: liquidio: update firmware to v1.7.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * iwlwifi: add firmware version 33 for new 9000 series
  * iwlwifi: add new firmware version 34 for 8000C and 8265
  * iwlwifi: update firmwares for 3160, 3168, 7260, 7265 and 7265D
  * iwlwifi: update firmwares for 3160, 3168, 7265D, 8000C and 8265
  * linux-firmware: DMC firmware for kabylake v1.04
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: GuC firmware for kabylake v9.39
  * linux-firmware: GuC firmware for Broxton v9.29
  * linux-firmware: GuC firmware for Skylake v9.33
  * linux-firmware/i915: Add Cannonlake DMC version 1.06
  * linux-firmware/i915: Add Geminilake DMC version 1.04
  * WHENCE: Add new qed firmware
  * WHENCE: Add new radeon firmware
  * WHENCE: Fix syntax error for iwlwifi-8265-31.ucode entry
  * Revert "ath10k: QCA988X hw2.0: update firmware to 10.2.4.70.63-2"
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00051-QCARMSWP-1
  * cxgb4: update firmware to revision 1.16.63.0
  * linux-firmware: update Marvell PCIe-USB8997 firmware image
  * linux-firmware: update Marvell PCIe-USB8897-A2 firmware image
  * Drop intel wifi firmwares and WHENCE-iwlwifi-update.patch as
  they are upstreamed</changelog>
  <changelog author="dimstar@opensuse.org" date="1512043201">- Change the shebang of check_whence.py (installed as a
  non-executable) to point to python3.</changelog>
  <changelog author="mpluskal@suse.com" date="1512388800">- Update to version 20171204:
  * amdgpu: add firmware for Raven
  * amdgpu: update vega10 vce firmware
  * linux-firmware: DMC firmware for skylake v1.27</changelog>
  <changelog author="mpluskal@suse.com" date="1514030400">- Update to version 20171221:
  * nvidia: add GP108 signed firmware
  * linux-firmware: liquidio: add v1.7.0 vswitch firmware
  * brcm: add CYW4373 firmwares and Cypress license file
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * Revert commits a42f895, c113d33, 041aff8, 73d13b5
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * linux-firmware: Update firmware file for Intel Bluetooth 8265
  * linux-firmware: Add firmware file for Intel Bluetooth 9260
  * linux-firmware: Add firmware file for Intel Bluetooth 9560
  * linux-firmware: intel: Add Cannonlake audio firmware
  * nfp: add firmware for tc-flower
  * nfp: change firmware directory layout
  * nfp: update firmware for Agilio CX SmartNICs</changelog>
  <changelog author="meissner@suse.com" date="1514203200">- Add microcode_amd_fam17h.bin (bsc#1068032 CVE-2017-5715)</changelog>
  <changelog author="mpluskal@suse.com" date="1515067200">- Update to version 20180104:
  * wl18xx: update firmware file 8.9.0.0.76
  * wl127x/wl128x: update firmwares
  * rtlwifi: rtl8723de: Add firmware for new driver/device
  * linux-firmware: DMC firmware for cannonlake v1.07</changelog>
  <changelog author="mpluskal@suse.com" date="1516622400">- Update to version 20180119:
  * amdgpu: update uvd firmware for polaris asics
  * amdgpu: update vce firmware for Fiji
  * amdgpu: update vcn firmware for raven
  * amdgpu: update vce and uvd firmware for Vega10
  * mediatek: update MT8173 VPU firmware to 1.0.8 [decoder h264] Fix h264 decoder output delay for some low latency bitstreams
  * cxgb4: update firmware to revision 1.17.14.0
  * linux-firmware: update Marvell PCIe-USB8897/8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: intel: Update Geminilake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1518177600">- Update to version 20180201:
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * wl127x/wl128x: update PLT firmwares
  * linux-firmware: intel: Update Kabylake audio firmware
- Mark license files as such</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 20180222:
  * ath10k: QCA9984 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA988X hw2.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9888 hw2.0: update firmware-5.bin to 10.4-3.5.3-00053
  * ath10k: QCA9887 hw1.0: update firmware-5.bin to 10.2.4-1.0-00037
  * ath10k: QCA9377 hw1.0: update firmware-5.bin to WLAN.TF.1.0-00002-QCATFSWPZ-5
  * ath10k: QCA6174 hw3.0: update board-2.bin
  * ath10k: QCA6174 hw3.0: update firmware-6.bin to WLAN.RM.4.4.1-00079-QCARMSWPZ-1
  * ath10k: QCA4019 hw1.0: update board-2.bin
  * ath10k: QCA4019 hw1.0: update firmware-5.bin to 10.4-3.5.3-00053
  * rtl_bt: Add firmware and configuration files for the Bluetooth parts of RTL8821C and RTL8723D
  * qed: Add firmwares 8.30.12.0 and 8.10.9.0
  * nfp: update Agilio SmartNIC firmware to rev 2.0.4</changelog>
  <changelog author="mpluskal@suse.com" date="1521028800">- Update to version 20180312:
  * Mellanox: Add new mlxsw_spectrum firmware 13.1620.192
  * qed: Add firmware 8.33.11.0
  * BCM-0bb4-0306: Cypress Bluetooth firmware for HTC Vive
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * qed: Add firmwares 8.20.0.0 8.18.9.0 and 8.14.6.0
  * iwlwifi: update firmware version 34 for 9000 series</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- detect new style modalias too for AMD CPUs in ucode-amd
  (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1521806400">- Update to version 20180320:
  * BCM-0bb4-0306: Update to Cypress license in WHENCE
  * linux-firmware: intel: Update Kabylake audio firmware</changelog>
  <changelog author="mpluskal@suse.com" date="1522756800">- Update to version 20180402:
  * amdgpu: update vce firmware for Polaris
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * nfp: update Agilio SmartNIC firmware to rev 2.0.7
  * cxgb4: update firmware to revision 1.18.9.0
  * linux-firmware: intel: Update Geminilake audio firmware
  * linux-firmware: intel: Update Kabylake audio firmware
  * linux-firmware: intel: Update Broxton audio firmware
  * linux-firmware: intel: Update Skylake audio firmware</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- fixed new style modalias detection too for AMD CPUs in ucode-amd,
  it can only use 1 : (bsc#1084687)</changelog>
  <changelog author="mpluskal@suse.com" date="1523966400">- Update to version 20180416:
  * linux-firmware: update wil6210 firmware to 5.2.0.18
  * linux-firmware: rsi: update firmware images for Redpine 9113 chipset
  * iwlwifi: update firmwares for 3160, 3168 and 7265
  * iwlwifi: add some new FW versions and update older ones</changelog>
  <changelog author="mpluskal@suse.com" date="1525867200">- Update to version 20180507:
  * linux-firmware: update Marvell USB8997 firmware image to add WPA2 vulnerability fix
  * linux-firmware: update Marvell SD8897-B0 firmware image to add WPA2 vulnerability fix
  * Update Intel OPA hfi1 firmware
  * qed: Add firmware 8.33.12.0
  * linux-firmware: Add firmware file for Intel Bluetooth,9560
  * linux-firmware: Add firmware file for Intel Bluetooth,9260
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * cxgb4: update firmware to revision 1.19.1.0
  * nfp: add symlink for mixed mode Agilio CX 2x25GbE cards
  * nfp: update Agilio SmartNIC flower firmware to rev 5701</changelog>
  <changelog author="mpluskal@suse.com" date="1526904000">- Update to version 20180518:
  * linux-firmware: Update firmware file for Intel Bluetooth,8265
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B5/B6)
  * linux-firmware: Update firmware patch for Intel Bluetooth 7260 (B3/B4)
  * linux-firmware: Update firmware file for Intel Bluetooth,9260
  * linux-firmware:Update firmware patch for Intel Bluetooth 7265 (D1)
  * linux-firmware: Update firmware file for Intel Bluetooth,9560
  * linux-firmware: Update AMD cpu microcode
  * amdgpu: sync up polaris12 firmware with 18.10 release
  * amdgpu: sync up polaris11 firmware with 18.10 release
  * amdgpu: sync up polaris10 firmware with 18.10 release
  * amdgpu: sync up vega10 firmware with 18.10 release
  * amdgpu: sync up carrizo firmware with 18.10 release
  * amdgpu: sync up topaz firmware with 18.10 release
  * amdgpu: sync up stoney firmware with 18.10 release
  * amdgpu: sync up tonga firmware with 18.10 release
  * amdgpu: sync up fiji firmware with 18.10 release
  * amdgpu: sync up raven firmware with 18.10 release
  * nfp: Add symlink for Agilio CX 1x40GbE flower firmware
  * nfp: update Agilio SmartNIC flower firmware to rev AOTC-2.9.A.16
  * linux-firmware: liquidio: update firmware to v1.7.2</changelog>
  <changelog author="mpluskal@suse.com" date="1527595200">- Update to version 20180525:
  * Update AMD cpu microcode for family 15h (CVE-2017-5715,
    bsc#1095735)
  * linux-firmware: Update firmware patch for Intel Bluetooth 8260
  * qed: Add firmware 8.37.2.0</changelog>
  <changelog author="tiwai@suse.de" date="1528113600">- Use the upstream version of AMD ucode for family 17h
  (CVE-2017-5715, bsc#1095735)</changelog>
</package>
<package pkgid="ed3d46d06b3030ebe49d1d729c6666de30b19a5928e7f834e4e1ffe811bf32af" name="ucode-intel" arch="src">
  <version epoch="0" ver="20180703" rel="lp150.2.4.1"/>
  <changelog author="mpluskal@suse.com" date="1421841600">- Pre require coreutils (bnc#914169).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
  <changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
  <changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
  <changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
  <changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
  <changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
  <changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>
  <changelog author="trenn@suse.de" date="1500379200">- Remove binary blob package again. This was intended to be used
  by linuxrc, but the firmware files can simply be concatenated.</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove code in intel-microcode2ucode.c that refers to
  GenuineIntel.bin , previously in binary blob package.</changelog>
  <changelog author="trenn@suse.de" date="1511438400">- Update to microcode version: 20171117 (bsc#1068839)
  - - New Platforms --
  CFL U0 (06-9e-0a:22) 70
  CFL B0 (06-9e-0b:2) 72
  SKX H0 (06-55-04:b7) 2000035
  GLK B0 (06-7a-01:1) 1e
  APL Bx (06-5c-09:3) 2c
  - - Updates --
  KBL Y0 (06-8e-0a:c0) 66-&gt;70</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520251200">- intel-microcode2ucode.c replaced by better maintained and
  feature rich iucode_tool package, add it to buildrequires.</changelog>
  <changelog author="meissner@suse.com" date="1521028800">- Updated to microcode version: 20180312 (bsc#1085207 CVE-2017-5715)
  - - New Platforms --
  BDX-DE EGW A0 6-56-5:10 e000009
  SKX B1 6-55-3:97 1000140
  - - Updates --
  SNB D2 6-2a-7:12 29-&gt;2d
  JKT C1 6-2d-6:6d 619-&gt;61c
  JKT C2 6-2d-7:6d 710-&gt;713
  IVB E2 6-3a-9:12 1c-&gt;1f
  IVT C0 6-3e-4:ed 428-&gt;42c
  IVT D1 6-3e-7:ed 70d-&gt;713
  HSW Cx/Dx 6-3c-3:32 22-&gt;24
  HSW-ULT Cx/Dx 6-45-1:72 20-&gt;23
  CRW Cx 6-46-1:32 17-&gt;19
  HSX C0 6-3f-2:6f 3a-&gt;3c
  HSX-EX E0 6-3f-4:80 0f-&gt;11
  BDW-U/Y E/F 6-3d-4:c0 25-&gt;2a
  BDW-H E/G 6-47-1:22 17-&gt;1d
  BDX-DE V0/V1 6-56-2:10 0f-&gt;15
  BDW-DE V2 6-56-3:10 700000d-&gt;7000012
  BDW-DE Y0 6-56-4:10 f00000a-&gt;f000011
  SKL-U/Y D0 6-4e-3:c0 ba-&gt;c2
  SKL R0 6-5e-3:36 ba-&gt;c2
  KBL-U/Y H0 6-8e-9:c0 62-&gt;84
  KBL B0 6-9e-9:2a 5e-&gt;84
  CFL D0 6-8e-a:c0 70-&gt;84
  CFL U0 6-9e-a:22 70-&gt;84
  CFL B0 6-9e-b:02 72-&gt;84
  SKX H0 6-55-4:b7 2000035-&gt;2000043</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- fix the CPU detection modalias to meet current kernel logic.
  (bsc#1084687)</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- next try to fix CPU detection modalias... The modalias
  can only have 1 : (bsc#1084687)</changelog>
  <changelog author="trenn@suse.de" date="1525435200">- Update to version 20180425 (bsc#1091836)
- Name microcodes which are not allowed to load late
  with a *.early suffix
- Add releasenotes and microcode list to docs
- Remove BuildRequires on iucode-tool, as the microcode files are
  not provided as one big microcode.dat blob anymore, but are
  already split up in the needed family-model-stepping files.
- Add rpmlintrc filter to ignore false-positive osc warning:
  Package contains no binary and should be of noarch architecture
-- Updates upon 20180312 release --
---- updated platforms ------------------------------------
  GLK          B0       6-7a-1/01 0000001e-&gt;00000022
    Pentium Silver N/J5xxx,-Celeron N/J4xxx
---- removed platforms ------------------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b000021
    Xeon E5/E7 v4; Core-i7-69xx/68xx
-- Special release with caveats --
  BDX-ML       B/M/R0   6-4f-1/ef           0b00002c
    Xeon E5/E7 v4; Corei7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- Update to 20180703 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1100147 bsc#1087082 bsc#1087083)
  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File
  Following chipsets are fixed in this round:
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  SNB-EP       C1       6-2d-6/6d 0000061c-&gt;0000061d Xeon E5
  SNB-EP       C2       6-2d-7/6d 00000713-&gt;00000714 Xeon E5
  IVT          C0       6-3e-4/ed 0000042c-&gt;0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K
  IVT          D1       6-3e-7/ed 00000713-&gt;00000714 Xeon E5 v2
  HSX-E/EP/4S  C0       6-3f-2/6f 0000003c-&gt;0000003d Xeon E5 v3
  HSX-EX       E0       6-3f-4/80 00000011-&gt;00000012 Xeon E7 v3
  SKX-SP/D/W/X H0       6-55-4/b7 02000043-&gt;0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX
  BDX-DE       A1       6-56-5/10 0e000009-&gt;0e00000a Xeon D-15x3N
  - --- intel-ucode-with-caveats/ ----------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b00002c-&gt;0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
</package>
<package pkgid="5487b343febb366455d5fa499a55b6a3ccc6a454f2f84fb45c7148bb43d038d2" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20180703" rel="lp150.2.4.1"/>
  <changelog author="mpluskal@suse.com" date="1421841600">- Pre require coreutils (bnc#914169).</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
  <changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
  <changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
  <changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
  <changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
  <changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
  <changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>
  <changelog author="trenn@suse.de" date="1500379200">- Remove binary blob package again. This was intended to be used
  by linuxrc, but the firmware files can simply be concatenated.</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove code in intel-microcode2ucode.c that refers to
  GenuineIntel.bin , previously in binary blob package.</changelog>
  <changelog author="trenn@suse.de" date="1511438400">- Update to microcode version: 20171117 (bsc#1068839)
  - - New Platforms --
  CFL U0 (06-9e-0a:22) 70
  CFL B0 (06-9e-0b:2) 72
  SKX H0 (06-55-04:b7) 2000035
  GLK B0 (06-7a-01:1) 1e
  APL Bx (06-5c-09:3) 2c
  - - Updates --
  KBL Y0 (06-8e-0a:c0) 66-&gt;70</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520251200">- intel-microcode2ucode.c replaced by better maintained and
  feature rich iucode_tool package, add it to buildrequires.</changelog>
  <changelog author="meissner@suse.com" date="1521028800">- Updated to microcode version: 20180312 (bsc#1085207 CVE-2017-5715)
  - - New Platforms --
  BDX-DE EGW A0 6-56-5:10 e000009
  SKX B1 6-55-3:97 1000140
  - - Updates --
  SNB D2 6-2a-7:12 29-&gt;2d
  JKT C1 6-2d-6:6d 619-&gt;61c
  JKT C2 6-2d-7:6d 710-&gt;713
  IVB E2 6-3a-9:12 1c-&gt;1f
  IVT C0 6-3e-4:ed 428-&gt;42c
  IVT D1 6-3e-7:ed 70d-&gt;713
  HSW Cx/Dx 6-3c-3:32 22-&gt;24
  HSW-ULT Cx/Dx 6-45-1:72 20-&gt;23
  CRW Cx 6-46-1:32 17-&gt;19
  HSX C0 6-3f-2:6f 3a-&gt;3c
  HSX-EX E0 6-3f-4:80 0f-&gt;11
  BDW-U/Y E/F 6-3d-4:c0 25-&gt;2a
  BDW-H E/G 6-47-1:22 17-&gt;1d
  BDX-DE V0/V1 6-56-2:10 0f-&gt;15
  BDW-DE V2 6-56-3:10 700000d-&gt;7000012
  BDW-DE Y0 6-56-4:10 f00000a-&gt;f000011
  SKL-U/Y D0 6-4e-3:c0 ba-&gt;c2
  SKL R0 6-5e-3:36 ba-&gt;c2
  KBL-U/Y H0 6-8e-9:c0 62-&gt;84
  KBL B0 6-9e-9:2a 5e-&gt;84
  CFL D0 6-8e-a:c0 70-&gt;84
  CFL U0 6-9e-a:22 70-&gt;84
  CFL B0 6-9e-b:02 72-&gt;84
  SKX H0 6-55-4:b7 2000035-&gt;2000043</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- fix the CPU detection modalias to meet current kernel logic.
  (bsc#1084687)</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- next try to fix CPU detection modalias... The modalias
  can only have 1 : (bsc#1084687)</changelog>
  <changelog author="trenn@suse.de" date="1525435200">- Update to version 20180425 (bsc#1091836)
- Name microcodes which are not allowed to load late
  with a *.early suffix
- Add releasenotes and microcode list to docs
- Remove BuildRequires on iucode-tool, as the microcode files are
  not provided as one big microcode.dat blob anymore, but are
  already split up in the needed family-model-stepping files.
- Add rpmlintrc filter to ignore false-positive osc warning:
  Package contains no binary and should be of noarch architecture
-- Updates upon 20180312 release --
---- updated platforms ------------------------------------
  GLK          B0       6-7a-1/01 0000001e-&gt;00000022
    Pentium Silver N/J5xxx,-Celeron N/J4xxx
---- removed platforms ------------------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b000021
    Xeon E5/E7 v4; Core-i7-69xx/68xx
-- Special release with caveats --
  BDX-ML       B/M/R0   6-4f-1/ef           0b00002c
    Xeon E5/E7 v4; Corei7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- Update to 20180703 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1100147 bsc#1087082 bsc#1087083)
  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File
  Following chipsets are fixed in this round:
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  SNB-EP       C1       6-2d-6/6d 0000061c-&gt;0000061d Xeon E5
  SNB-EP       C2       6-2d-7/6d 00000713-&gt;00000714 Xeon E5
  IVT          C0       6-3e-4/ed 0000042c-&gt;0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K
  IVT          D1       6-3e-7/ed 00000713-&gt;00000714 Xeon E5 v2
  HSX-E/EP/4S  C0       6-3f-2/6f 0000003c-&gt;0000003d Xeon E5 v3
  HSX-EX       E0       6-3f-4/80 00000011-&gt;00000012 Xeon E7 v3
  SKX-SP/D/W/X H0       6-55-4/b7 02000043-&gt;0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX
  BDX-DE       A1       6-56-5/10 0e000009-&gt;0e00000a Xeon D-15x3N
  - --- intel-ucode-with-caveats/ ----------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b00002c-&gt;0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
</package>
<package pkgid="db69d1fe25e079cd1fc26d92ebeacd115fd929b71e0f0f0b5b4429deb89e5159" name="ucode-intel" arch="src">
  <version epoch="0" ver="20180807" rel="lp150.2.7.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
  <changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
  <changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
  <changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
  <changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
  <changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
  <changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>
  <changelog author="trenn@suse.de" date="1500379200">- Remove binary blob package again. This was intended to be used
  by linuxrc, but the firmware files can simply be concatenated.</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove code in intel-microcode2ucode.c that refers to
  GenuineIntel.bin , previously in binary blob package.</changelog>
  <changelog author="trenn@suse.de" date="1511438400">- Update to microcode version: 20171117 (bsc#1068839)
  - - New Platforms --
  CFL U0 (06-9e-0a:22) 70
  CFL B0 (06-9e-0b:2) 72
  SKX H0 (06-55-04:b7) 2000035
  GLK B0 (06-7a-01:1) 1e
  APL Bx (06-5c-09:3) 2c
  - - Updates --
  KBL Y0 (06-8e-0a:c0) 66-&gt;70</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520251200">- intel-microcode2ucode.c replaced by better maintained and
  feature rich iucode_tool package, add it to buildrequires.</changelog>
  <changelog author="meissner@suse.com" date="1521028800">- Updated to microcode version: 20180312 (bsc#1085207 CVE-2017-5715)
  - - New Platforms --
  BDX-DE EGW A0 6-56-5:10 e000009
  SKX B1 6-55-3:97 1000140
  - - Updates --
  SNB D2 6-2a-7:12 29-&gt;2d
  JKT C1 6-2d-6:6d 619-&gt;61c
  JKT C2 6-2d-7:6d 710-&gt;713
  IVB E2 6-3a-9:12 1c-&gt;1f
  IVT C0 6-3e-4:ed 428-&gt;42c
  IVT D1 6-3e-7:ed 70d-&gt;713
  HSW Cx/Dx 6-3c-3:32 22-&gt;24
  HSW-ULT Cx/Dx 6-45-1:72 20-&gt;23
  CRW Cx 6-46-1:32 17-&gt;19
  HSX C0 6-3f-2:6f 3a-&gt;3c
  HSX-EX E0 6-3f-4:80 0f-&gt;11
  BDW-U/Y E/F 6-3d-4:c0 25-&gt;2a
  BDW-H E/G 6-47-1:22 17-&gt;1d
  BDX-DE V0/V1 6-56-2:10 0f-&gt;15
  BDW-DE V2 6-56-3:10 700000d-&gt;7000012
  BDW-DE Y0 6-56-4:10 f00000a-&gt;f000011
  SKL-U/Y D0 6-4e-3:c0 ba-&gt;c2
  SKL R0 6-5e-3:36 ba-&gt;c2
  KBL-U/Y H0 6-8e-9:c0 62-&gt;84
  KBL B0 6-9e-9:2a 5e-&gt;84
  CFL D0 6-8e-a:c0 70-&gt;84
  CFL U0 6-9e-a:22 70-&gt;84
  CFL B0 6-9e-b:02 72-&gt;84
  SKX H0 6-55-4:b7 2000035-&gt;2000043</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- fix the CPU detection modalias to meet current kernel logic.
  (bsc#1084687)</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- next try to fix CPU detection modalias... The modalias
  can only have 1 : (bsc#1084687)</changelog>
  <changelog author="trenn@suse.de" date="1525435200">- Update to version 20180425 (bsc#1091836)
- Name microcodes which are not allowed to load late
  with a *.early suffix
- Add releasenotes and microcode list to docs
- Remove BuildRequires on iucode-tool, as the microcode files are
  not provided as one big microcode.dat blob anymore, but are
  already split up in the needed family-model-stepping files.
- Add rpmlintrc filter to ignore false-positive osc warning:
  Package contains no binary and should be of noarch architecture
-- Updates upon 20180312 release --
---- updated platforms ------------------------------------
  GLK          B0       6-7a-1/01 0000001e-&gt;00000022
    Pentium Silver N/J5xxx,-Celeron N/J4xxx
---- removed platforms ------------------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b000021
    Xeon E5/E7 v4; Core-i7-69xx/68xx
-- Special release with caveats --
  BDX-ML       B/M/R0   6-4f-1/ef           0b00002c
    Xeon E5/E7 v4; Corei7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- Update to 20180703 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1100147 bsc#1087082 bsc#1087083)
  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File
  Following chipsets are fixed in this round:
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  SNB-EP       C1       6-2d-6/6d 0000061c-&gt;0000061d Xeon E5
  SNB-EP       C2       6-2d-7/6d 00000713-&gt;00000714 Xeon E5
  IVT          C0       6-3e-4/ed 0000042c-&gt;0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K
  IVT          D1       6-3e-7/ed 00000713-&gt;00000714 Xeon E5 v2
  HSX-E/EP/4S  C0       6-3f-2/6f 0000003c-&gt;0000003d Xeon E5 v3
  HSX-EX       E0       6-3f-4/80 00000011-&gt;00000012 Xeon E7 v3
  SKX-SP/D/W/X H0       6-55-4/b7 02000043-&gt;0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX
  BDX-DE       A1       6-56-5/10 0e000009-&gt;0e00000a Xeon D-15x3N
  - --- intel-ucode-with-caveats/ ----------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b00002c-&gt;0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1533729600">- Update to 20180807 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1104134 bsc#1087082 bsc#1087083)
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx
  NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx
  BXT          C0       6-5c-2/01           00000014 Atom T5500/5700
  APL          E0       6-5c-a/03           0000000c Atom x5-E39xx
  DVN          B0       6-5f-1/01           00000024 Atom C3xxx
  - --- updated platforms ------------------------------------
  NHM-EP/WS    D0       6-1a-5/03 00000019-&gt;0000001d Xeon E/L/X/W55xx
  NHM          B1       6-1e-5/13 00000007-&gt;0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx
  WSM          B1       6-25-2/12 0000000e-&gt;00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406
  WSM          K0       6-25-5/92 00000004-&gt;00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx
  SNB          D2       6-2a-7/12 0000002d-&gt;0000002e Core Gen2; Xeon E3
  WSM-EX       A2       6-2f-2/05 00000037-&gt;0000003b Xeon E7
  IVB          E2       6-3a-9/12 0000001f-&gt;00000020 Core Gen3 Mobile
  HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-&gt;00000025 Core Gen4 Desktop; Xeon E3 v3
  BDW-U/Y      E/F      6-3d-4/c0 0000002a-&gt;0000002b Core Gen5 Mobile
  HSW-ULT      Cx/Dx    6-45-1/72 00000023-&gt;00000024 Core Gen4 Mobile and derived Pentium/Celeron
  HSW-H        Cx       6-46-1/32 00000019-&gt;0000001a Core Extreme i7-5xxxX
  BDW-H/E3     E/G      6-47-1/22 0000001d-&gt;0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4
  SKL-U/Y      D0       6-4e-3/c0 000000c2-&gt;000000c6 Core Gen6 Mobile
  BDX-DE       V1       6-56-2/10 00000015-&gt;00000017 Xeon D-1520/40
  BDX-DE       V2/3     6-56-3/10 07000012-&gt;07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  BDX-DE       Y0       6-56-4/10 0f000011-&gt;0f000012 Xeon D-1557/59/67/71/77/81/87
  APL          D0       6-5c-9/03 0000002c-&gt;00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  SKL-H/S/E3   R0       6-5e-3/36 000000c2-&gt;000000c6 Core Gen6; Xeon E3 v5
  GLK          B0       6-7a-1/01 00000022-&gt;00000028 Pentium Silver N/J5xxx, Celeron N/J4xxx
  KBL-U/Y      H0       6-8e-9/c0 00000084-&gt;0000008e Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 00000084-&gt;00000096 Core Gen8 Mobile
  KBL-H/S/E3   B0       6-9e-9/2a 00000084-&gt;0000008e Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 00000084-&gt;00000096 Core Gen8
  CFL-H/S/E3   B0       6-9e-b/02 00000084-&gt;0000008e Core Gen8 Desktop</changelog>
</package>
<package pkgid="20938bb8c210eab081c189234f0287f821ec4d928a61b742c93a6cb085a5deac" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20180807" rel="lp150.2.7.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1426766400">- Update to microcode 20150121.</changelog>
  <changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
  <changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
  <changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
  <changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
  <changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
  <changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>
  <changelog author="trenn@suse.de" date="1500379200">- Remove binary blob package again. This was intended to be used
  by linuxrc, but the firmware files can simply be concatenated.</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove code in intel-microcode2ucode.c that refers to
  GenuineIntel.bin , previously in binary blob package.</changelog>
  <changelog author="trenn@suse.de" date="1511438400">- Update to microcode version: 20171117 (bsc#1068839)
  - - New Platforms --
  CFL U0 (06-9e-0a:22) 70
  CFL B0 (06-9e-0b:2) 72
  SKX H0 (06-55-04:b7) 2000035
  GLK B0 (06-7a-01:1) 1e
  APL Bx (06-5c-09:3) 2c
  - - Updates --
  KBL Y0 (06-8e-0a:c0) 66-&gt;70</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520251200">- intel-microcode2ucode.c replaced by better maintained and
  feature rich iucode_tool package, add it to buildrequires.</changelog>
  <changelog author="meissner@suse.com" date="1521028800">- Updated to microcode version: 20180312 (bsc#1085207 CVE-2017-5715)
  - - New Platforms --
  BDX-DE EGW A0 6-56-5:10 e000009
  SKX B1 6-55-3:97 1000140
  - - Updates --
  SNB D2 6-2a-7:12 29-&gt;2d
  JKT C1 6-2d-6:6d 619-&gt;61c
  JKT C2 6-2d-7:6d 710-&gt;713
  IVB E2 6-3a-9:12 1c-&gt;1f
  IVT C0 6-3e-4:ed 428-&gt;42c
  IVT D1 6-3e-7:ed 70d-&gt;713
  HSW Cx/Dx 6-3c-3:32 22-&gt;24
  HSW-ULT Cx/Dx 6-45-1:72 20-&gt;23
  CRW Cx 6-46-1:32 17-&gt;19
  HSX C0 6-3f-2:6f 3a-&gt;3c
  HSX-EX E0 6-3f-4:80 0f-&gt;11
  BDW-U/Y E/F 6-3d-4:c0 25-&gt;2a
  BDW-H E/G 6-47-1:22 17-&gt;1d
  BDX-DE V0/V1 6-56-2:10 0f-&gt;15
  BDW-DE V2 6-56-3:10 700000d-&gt;7000012
  BDW-DE Y0 6-56-4:10 f00000a-&gt;f000011
  SKL-U/Y D0 6-4e-3:c0 ba-&gt;c2
  SKL R0 6-5e-3:36 ba-&gt;c2
  KBL-U/Y H0 6-8e-9:c0 62-&gt;84
  KBL B0 6-9e-9:2a 5e-&gt;84
  CFL D0 6-8e-a:c0 70-&gt;84
  CFL U0 6-9e-a:22 70-&gt;84
  CFL B0 6-9e-b:02 72-&gt;84
  SKX H0 6-55-4:b7 2000035-&gt;2000043</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- fix the CPU detection modalias to meet current kernel logic.
  (bsc#1084687)</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- next try to fix CPU detection modalias... The modalias
  can only have 1 : (bsc#1084687)</changelog>
  <changelog author="trenn@suse.de" date="1525435200">- Update to version 20180425 (bsc#1091836)
- Name microcodes which are not allowed to load late
  with a *.early suffix
- Add releasenotes and microcode list to docs
- Remove BuildRequires on iucode-tool, as the microcode files are
  not provided as one big microcode.dat blob anymore, but are
  already split up in the needed family-model-stepping files.
- Add rpmlintrc filter to ignore false-positive osc warning:
  Package contains no binary and should be of noarch architecture
-- Updates upon 20180312 release --
---- updated platforms ------------------------------------
  GLK          B0       6-7a-1/01 0000001e-&gt;00000022
    Pentium Silver N/J5xxx,-Celeron N/J4xxx
---- removed platforms ------------------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b000021
    Xeon E5/E7 v4; Core-i7-69xx/68xx
-- Special release with caveats --
  BDX-ML       B/M/R0   6-4f-1/ef           0b00002c
    Xeon E5/E7 v4; Corei7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- Update to 20180703 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1100147 bsc#1087082 bsc#1087083)
  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File
  Following chipsets are fixed in this round:
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  SNB-EP       C1       6-2d-6/6d 0000061c-&gt;0000061d Xeon E5
  SNB-EP       C2       6-2d-7/6d 00000713-&gt;00000714 Xeon E5
  IVT          C0       6-3e-4/ed 0000042c-&gt;0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K
  IVT          D1       6-3e-7/ed 00000713-&gt;00000714 Xeon E5 v2
  HSX-E/EP/4S  C0       6-3f-2/6f 0000003c-&gt;0000003d Xeon E5 v3
  HSX-EX       E0       6-3f-4/80 00000011-&gt;00000012 Xeon E7 v3
  SKX-SP/D/W/X H0       6-55-4/b7 02000043-&gt;0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX
  BDX-DE       A1       6-56-5/10 0e000009-&gt;0e00000a Xeon D-15x3N
  - --- intel-ucode-with-caveats/ ----------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b00002c-&gt;0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1533729600">- Update to 20180807 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1104134 bsc#1087082 bsc#1087083)
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx
  NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx
  BXT          C0       6-5c-2/01           00000014 Atom T5500/5700
  APL          E0       6-5c-a/03           0000000c Atom x5-E39xx
  DVN          B0       6-5f-1/01           00000024 Atom C3xxx
  - --- updated platforms ------------------------------------
  NHM-EP/WS    D0       6-1a-5/03 00000019-&gt;0000001d Xeon E/L/X/W55xx
  NHM          B1       6-1e-5/13 00000007-&gt;0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx
  WSM          B1       6-25-2/12 0000000e-&gt;00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406
  WSM          K0       6-25-5/92 00000004-&gt;00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx
  SNB          D2       6-2a-7/12 0000002d-&gt;0000002e Core Gen2; Xeon E3
  WSM-EX       A2       6-2f-2/05 00000037-&gt;0000003b Xeon E7
  IVB          E2       6-3a-9/12 0000001f-&gt;00000020 Core Gen3 Mobile
  HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-&gt;00000025 Core Gen4 Desktop; Xeon E3 v3
  BDW-U/Y      E/F      6-3d-4/c0 0000002a-&gt;0000002b Core Gen5 Mobile
  HSW-ULT      Cx/Dx    6-45-1/72 00000023-&gt;00000024 Core Gen4 Mobile and derived Pentium/Celeron
  HSW-H        Cx       6-46-1/32 00000019-&gt;0000001a Core Extreme i7-5xxxX
  BDW-H/E3     E/G      6-47-1/22 0000001d-&gt;0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4
  SKL-U/Y      D0       6-4e-3/c0 000000c2-&gt;000000c6 Core Gen6 Mobile
  BDX-DE       V1       6-56-2/10 00000015-&gt;00000017 Xeon D-1520/40
  BDX-DE       V2/3     6-56-3/10 07000012-&gt;07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  BDX-DE       Y0       6-56-4/10 0f000011-&gt;0f000012 Xeon D-1557/59/67/71/77/81/87
  APL          D0       6-5c-9/03 0000002c-&gt;00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  SKL-H/S/E3   R0       6-5e-3/36 000000c2-&gt;000000c6 Core Gen6; Xeon E3 v5
  GLK          B0       6-7a-1/01 00000022-&gt;00000028 Pentium Silver N/J5xxx, Celeron N/J4xxx
  KBL-U/Y      H0       6-8e-9/c0 00000084-&gt;0000008e Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 00000084-&gt;00000096 Core Gen8 Mobile
  KBL-H/S/E3   B0       6-9e-9/2a 00000084-&gt;0000008e Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 00000084-&gt;00000096 Core Gen8
  CFL-H/S/E3   B0       6-9e-b/02 00000084-&gt;0000008e Core Gen8 Desktop</changelog>
</package>
<package pkgid="eef60853ca99a1c0d0cf1c425c655af1a2cf1d3dce64d76f39a19bdd09c9e4d1" name="ucode-intel" arch="src">
  <version epoch="0" ver="20180807a" rel="lp150.2.10.1"/>
  <changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
  <changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
  <changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
  <changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
  <changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
  <changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>
  <changelog author="trenn@suse.de" date="1500379200">- Remove binary blob package again. This was intended to be used
  by linuxrc, but the firmware files can simply be concatenated.</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove code in intel-microcode2ucode.c that refers to
  GenuineIntel.bin , previously in binary blob package.</changelog>
  <changelog author="trenn@suse.de" date="1511438400">- Update to microcode version: 20171117 (bsc#1068839)
  - - New Platforms --
  CFL U0 (06-9e-0a:22) 70
  CFL B0 (06-9e-0b:2) 72
  SKX H0 (06-55-04:b7) 2000035
  GLK B0 (06-7a-01:1) 1e
  APL Bx (06-5c-09:3) 2c
  - - Updates --
  KBL Y0 (06-8e-0a:c0) 66-&gt;70</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520251200">- intel-microcode2ucode.c replaced by better maintained and
  feature rich iucode_tool package, add it to buildrequires.</changelog>
  <changelog author="meissner@suse.com" date="1521028800">- Updated to microcode version: 20180312 (bsc#1085207 CVE-2017-5715)
  - - New Platforms --
  BDX-DE EGW A0 6-56-5:10 e000009
  SKX B1 6-55-3:97 1000140
  - - Updates --
  SNB D2 6-2a-7:12 29-&gt;2d
  JKT C1 6-2d-6:6d 619-&gt;61c
  JKT C2 6-2d-7:6d 710-&gt;713
  IVB E2 6-3a-9:12 1c-&gt;1f
  IVT C0 6-3e-4:ed 428-&gt;42c
  IVT D1 6-3e-7:ed 70d-&gt;713
  HSW Cx/Dx 6-3c-3:32 22-&gt;24
  HSW-ULT Cx/Dx 6-45-1:72 20-&gt;23
  CRW Cx 6-46-1:32 17-&gt;19
  HSX C0 6-3f-2:6f 3a-&gt;3c
  HSX-EX E0 6-3f-4:80 0f-&gt;11
  BDW-U/Y E/F 6-3d-4:c0 25-&gt;2a
  BDW-H E/G 6-47-1:22 17-&gt;1d
  BDX-DE V0/V1 6-56-2:10 0f-&gt;15
  BDW-DE V2 6-56-3:10 700000d-&gt;7000012
  BDW-DE Y0 6-56-4:10 f00000a-&gt;f000011
  SKL-U/Y D0 6-4e-3:c0 ba-&gt;c2
  SKL R0 6-5e-3:36 ba-&gt;c2
  KBL-U/Y H0 6-8e-9:c0 62-&gt;84
  KBL B0 6-9e-9:2a 5e-&gt;84
  CFL D0 6-8e-a:c0 70-&gt;84
  CFL U0 6-9e-a:22 70-&gt;84
  CFL B0 6-9e-b:02 72-&gt;84
  SKX H0 6-55-4:b7 2000035-&gt;2000043</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- fix the CPU detection modalias to meet current kernel logic.
  (bsc#1084687)</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- next try to fix CPU detection modalias... The modalias
  can only have 1 : (bsc#1084687)</changelog>
  <changelog author="trenn@suse.de" date="1525435200">- Update to version 20180425 (bsc#1091836)
- Name microcodes which are not allowed to load late
  with a *.early suffix
- Add releasenotes and microcode list to docs
- Remove BuildRequires on iucode-tool, as the microcode files are
  not provided as one big microcode.dat blob anymore, but are
  already split up in the needed family-model-stepping files.
- Add rpmlintrc filter to ignore false-positive osc warning:
  Package contains no binary and should be of noarch architecture
-- Updates upon 20180312 release --
---- updated platforms ------------------------------------
  GLK          B0       6-7a-1/01 0000001e-&gt;00000022
    Pentium Silver N/J5xxx,-Celeron N/J4xxx
---- removed platforms ------------------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b000021
    Xeon E5/E7 v4; Core-i7-69xx/68xx
-- Special release with caveats --
  BDX-ML       B/M/R0   6-4f-1/ef           0b00002c
    Xeon E5/E7 v4; Corei7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- Update to 20180703 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1100147 bsc#1087082 bsc#1087083)
  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File
  Following chipsets are fixed in this round:
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  SNB-EP       C1       6-2d-6/6d 0000061c-&gt;0000061d Xeon E5
  SNB-EP       C2       6-2d-7/6d 00000713-&gt;00000714 Xeon E5
  IVT          C0       6-3e-4/ed 0000042c-&gt;0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K
  IVT          D1       6-3e-7/ed 00000713-&gt;00000714 Xeon E5 v2
  HSX-E/EP/4S  C0       6-3f-2/6f 0000003c-&gt;0000003d Xeon E5 v3
  HSX-EX       E0       6-3f-4/80 00000011-&gt;00000012 Xeon E7 v3
  SKX-SP/D/W/X H0       6-55-4/b7 02000043-&gt;0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX
  BDX-DE       A1       6-56-5/10 0e000009-&gt;0e00000a Xeon D-15x3N
  - --- intel-ucode-with-caveats/ ----------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b00002c-&gt;0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1533729600">- Update to 20180807 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1104134 bsc#1087082 bsc#1087083)
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx
  NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx
  BXT          C0       6-5c-2/01           00000014 Atom T5500/5700
  APL          E0       6-5c-a/03           0000000c Atom x5-E39xx
  DVN          B0       6-5f-1/01           00000024 Atom C3xxx
  - --- updated platforms ------------------------------------
  NHM-EP/WS    D0       6-1a-5/03 00000019-&gt;0000001d Xeon E/L/X/W55xx
  NHM          B1       6-1e-5/13 00000007-&gt;0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx
  WSM          B1       6-25-2/12 0000000e-&gt;00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406
  WSM          K0       6-25-5/92 00000004-&gt;00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx
  SNB          D2       6-2a-7/12 0000002d-&gt;0000002e Core Gen2; Xeon E3
  WSM-EX       A2       6-2f-2/05 00000037-&gt;0000003b Xeon E7
  IVB          E2       6-3a-9/12 0000001f-&gt;00000020 Core Gen3 Mobile
  HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-&gt;00000025 Core Gen4 Desktop; Xeon E3 v3
  BDW-U/Y      E/F      6-3d-4/c0 0000002a-&gt;0000002b Core Gen5 Mobile
  HSW-ULT      Cx/Dx    6-45-1/72 00000023-&gt;00000024 Core Gen4 Mobile and derived Pentium/Celeron
  HSW-H        Cx       6-46-1/32 00000019-&gt;0000001a Core Extreme i7-5xxxX
  BDW-H/E3     E/G      6-47-1/22 0000001d-&gt;0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4
  SKL-U/Y      D0       6-4e-3/c0 000000c2-&gt;000000c6 Core Gen6 Mobile
  BDX-DE       V1       6-56-2/10 00000015-&gt;00000017 Xeon D-1520/40
  BDX-DE       V2/3     6-56-3/10 07000012-&gt;07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  BDX-DE       Y0       6-56-4/10 0f000011-&gt;0f000012 Xeon D-1557/59/67/71/77/81/87
  APL          D0       6-5c-9/03 0000002c-&gt;00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  SKL-H/S/E3   R0       6-5e-3/36 000000c2-&gt;000000c6 Core Gen6; Xeon E3 v5
  GLK          B0       6-7a-1/01 00000022-&gt;00000028 Pentium Silver N/J5xxx, Celeron N/J4xxx
  KBL-U/Y      H0       6-8e-9/c0 00000084-&gt;0000008e Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 00000084-&gt;00000096 Core Gen8 Mobile
  KBL-H/S/E3   B0       6-9e-9/2a 00000084-&gt;0000008e Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 00000084-&gt;00000096 Core Gen8
  CFL-H/S/E3   B0       6-9e-b/02 00000084-&gt;0000008e Core Gen8 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1535112000">- updated to 20180807a, no change except licensing. (bsc#1104479)</changelog>
</package>
<package pkgid="87c2b12d5a5893787eaf0c066899c56b56744579eca6fc0d25435e75232f6c10" name="ucode-intel" arch="x86_64">
  <version epoch="0" ver="20180807a" rel="lp150.2.10.1"/>
  <changelog author="fvogt@suse.com" date="1446465600">- Add ucode-intel-blob subpackage to get the full microcode.dat
    directly</changelog>
  <changelog author="p.drouand@gmail.com" date="1447156800">- Update to version 20151106
  * No changelog available
- Use download Url as source</changelog>
  <changelog author="fvogt@suse.com" date="1447156801">- Fix Url and Source0
- Add GenuineIntel.bin to ucode-intel-blob</changelog>
  <changelog author="tiwai@suse.de" date="1449748800">- Fix dependency on coreutils for initrd macros (boo#958562)
- Call missing initrd macro at postun (boo#958562)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1466683200">- Update to version 20160607, no changelog available</changelog>
  <changelog author="trenn@suse.de" date="1469102400">- Update to version 20160714.
- Should fix bsc#987358, a bug which got introduced with the last
  release.
- Should finally fix "Intel Skylake bug" (bnc#993639), previous
  releases since Jan 2016 may or may not have completely fixed it.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1480939200">- Update to version 20161104.</changelog>
  <changelog author="idonmez@suse.com" date="1494936000">- Update to version 20170511:
  BDX-ML B0/M0/R0 (06-4f-01:ef) b00001f-&gt;b000021
  Skylake D0 (06-4e-03:c0) 9e-&gt;ba
  Broadwell ULT/ULX E/F-step (06-3d-04:c0) 24-&gt;25
  ULT Cx/Dx (06-45-01:72) 1f-&gt;20
  Crystalwell Cx (06-46-01:32) 16-&gt;17
  Broadwell Halo E/G-step (06-47-01:22) 16-&gt;17
  HSX EX E0 (06-3f-04:80) d-&gt;f
  Skylake R0 (06-5e-03:36) 9e-&gt;ba
  Haswell Cx/Dx (06-3c-03:32) 20-&gt;22
  HSX C0 (06-3f-02:6f) 39-&gt;3a</changelog>
  <changelog author="trenn@suse.de" date="1499947200">- Update to version 20170707 (bsc#1048133, bsc#1043358):
  KBL H0 (06-8e-09:c0) 62
  KBL Y0 (06-8e-0a:c0) 66
  KBL B0 (06-9e-09:2a) 5e
  SKX H0 (06-55-04:97) 2000022</changelog>
  <changelog author="trenn@suse.de" date="1500379200">- Remove binary blob package again. This was intended to be used
  by linuxrc, but the firmware files can simply be concatenated.</changelog>
  <changelog author="astieger@suse.com" date="1500465600">- Remove code in intel-microcode2ucode.c that refers to
  GenuineIntel.bin , previously in binary blob package.</changelog>
  <changelog author="trenn@suse.de" date="1511438400">- Update to microcode version: 20171117 (bsc#1068839)
  - - New Platforms --
  CFL U0 (06-9e-0a:22) 70
  CFL B0 (06-9e-0b:2) 72
  SKX H0 (06-55-04:b7) 2000035
  GLK B0 (06-7a-01:1) 1e
  APL Bx (06-5c-09:3) 2c
  - - Updates --
  KBL Y0 (06-8e-0a:c0) 66-&gt;70</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1520251200">- intel-microcode2ucode.c replaced by better maintained and
  feature rich iucode_tool package, add it to buildrequires.</changelog>
  <changelog author="meissner@suse.com" date="1521028800">- Updated to microcode version: 20180312 (bsc#1085207 CVE-2017-5715)
  - - New Platforms --
  BDX-DE EGW A0 6-56-5:10 e000009
  SKX B1 6-55-3:97 1000140
  - - Updates --
  SNB D2 6-2a-7:12 29-&gt;2d
  JKT C1 6-2d-6:6d 619-&gt;61c
  JKT C2 6-2d-7:6d 710-&gt;713
  IVB E2 6-3a-9:12 1c-&gt;1f
  IVT C0 6-3e-4:ed 428-&gt;42c
  IVT D1 6-3e-7:ed 70d-&gt;713
  HSW Cx/Dx 6-3c-3:32 22-&gt;24
  HSW-ULT Cx/Dx 6-45-1:72 20-&gt;23
  CRW Cx 6-46-1:32 17-&gt;19
  HSX C0 6-3f-2:6f 3a-&gt;3c
  HSX-EX E0 6-3f-4:80 0f-&gt;11
  BDW-U/Y E/F 6-3d-4:c0 25-&gt;2a
  BDW-H E/G 6-47-1:22 17-&gt;1d
  BDX-DE V0/V1 6-56-2:10 0f-&gt;15
  BDW-DE V2 6-56-3:10 700000d-&gt;7000012
  BDW-DE Y0 6-56-4:10 f00000a-&gt;f000011
  SKL-U/Y D0 6-4e-3:c0 ba-&gt;c2
  SKL R0 6-5e-3:36 ba-&gt;c2
  KBL-U/Y H0 6-8e-9:c0 62-&gt;84
  KBL B0 6-9e-9:2a 5e-&gt;84
  CFL D0 6-8e-a:c0 70-&gt;84
  CFL U0 6-9e-a:22 70-&gt;84
  CFL B0 6-9e-b:02 72-&gt;84
  SKX H0 6-55-4:b7 2000035-&gt;2000043</changelog>
  <changelog author="meissner@suse.com" date="1521633600">- fix the CPU detection modalias to meet current kernel logic.
  (bsc#1084687)</changelog>
  <changelog author="meissner@suse.com" date="1523620800">- next try to fix CPU detection modalias... The modalias
  can only have 1 : (bsc#1084687)</changelog>
  <changelog author="trenn@suse.de" date="1525435200">- Update to version 20180425 (bsc#1091836)
- Name microcodes which are not allowed to load late
  with a *.early suffix
- Add releasenotes and microcode list to docs
- Remove BuildRequires on iucode-tool, as the microcode files are
  not provided as one big microcode.dat blob anymore, but are
  already split up in the needed family-model-stepping files.
- Add rpmlintrc filter to ignore false-positive osc warning:
  Package contains no binary and should be of noarch architecture
-- Updates upon 20180312 release --
---- updated platforms ------------------------------------
  GLK          B0       6-7a-1/01 0000001e-&gt;00000022
    Pentium Silver N/J5xxx,-Celeron N/J4xxx
---- removed platforms ------------------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b000021
    Xeon E5/E7 v4; Core-i7-69xx/68xx
-- Special release with caveats --
  BDX-ML       B/M/R0   6-4f-1/ef           0b00002c
    Xeon E5/E7 v4; Corei7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1530705600">- Update to 20180703 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1100147 bsc#1087082 bsc#1087083)
  https://downloadcenter.intel.com/download/27945/Linux-Processor-Microcode-Data-File
  Following chipsets are fixed in this round:
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- updated platforms ------------------------------------
  SNB-EP       C1       6-2d-6/6d 0000061c-&gt;0000061d Xeon E5
  SNB-EP       C2       6-2d-7/6d 00000713-&gt;00000714 Xeon E5
  IVT          C0       6-3e-4/ed 0000042c-&gt;0000042d Xeon E5 v2; Core i7-4960X/4930K/4820K
  IVT          D1       6-3e-7/ed 00000713-&gt;00000714 Xeon E5 v2
  HSX-E/EP/4S  C0       6-3f-2/6f 0000003c-&gt;0000003d Xeon E5 v3
  HSX-EX       E0       6-3f-4/80 00000011-&gt;00000012 Xeon E7 v3
  SKX-SP/D/W/X H0       6-55-4/b7 02000043-&gt;0200004d Xeon Bronze 31xx, Silver 41xx, Gold 51xx/61xx Platinum 81xx, D/W-21xx; Core i9-7xxxX
  BDX-DE       A1       6-56-5/10 0e000009-&gt;0e00000a Xeon D-15x3N
  - --- intel-ucode-with-caveats/ ----------------------------
  BDX-ML       B/M/R0   6-4f-1/ef 0b00002c-&gt;0b00002e Xeon E5/E7 v4; Core i7-69xx/68xx</changelog>
  <changelog author="meissner@suse.com" date="1533729600">- Update to 20180807 release, for the listed CPU chipsets
  this fixes CVE-2018-3640 (Spectre v3a) CVE-2018-3639 (Spectre v4).
  (bsc#1104134 bsc#1087082 bsc#1087083)
  Processor             Identifier     Version       Products
  Model        Stepping F-MO-S/PI      Old-&gt;New
  - --- new platforms ----------------------------------------
  WSM-EP/WS    U1       6-2c-2/03           0000001f Xeon E/L/X56xx, W36xx
  NHM-EX       D0       6-2e-6/04           0000000d Xeon E/L/X65xx/75xx
  BXT          C0       6-5c-2/01           00000014 Atom T5500/5700
  APL          E0       6-5c-a/03           0000000c Atom x5-E39xx
  DVN          B0       6-5f-1/01           00000024 Atom C3xxx
  - --- updated platforms ------------------------------------
  NHM-EP/WS    D0       6-1a-5/03 00000019-&gt;0000001d Xeon E/L/X/W55xx
  NHM          B1       6-1e-5/13 00000007-&gt;0000000a Core i7-8xx, i5-7xx; Xeon L3426, X24xx
  WSM          B1       6-25-2/12 0000000e-&gt;00000011 Core i7-6xx, i5-6xx/4xxM, i3-5xx/3xxM, Pentium G69xx, Celeon P45xx; Xeon L3406
  WSM          K0       6-25-5/92 00000004-&gt;00000007 Core i7-6xx, i5-6xx/5xx/4xx, i3-5xx/3xx, Pentium G69xx/P6xxx/U5xxx, Celeron P4xxx/U3xxx
  SNB          D2       6-2a-7/12 0000002d-&gt;0000002e Core Gen2; Xeon E3
  WSM-EX       A2       6-2f-2/05 00000037-&gt;0000003b Xeon E7
  IVB          E2       6-3a-9/12 0000001f-&gt;00000020 Core Gen3 Mobile
  HSW-H/S/E3   Cx/Dx    6-3c-3/32 00000024-&gt;00000025 Core Gen4 Desktop; Xeon E3 v3
  BDW-U/Y      E/F      6-3d-4/c0 0000002a-&gt;0000002b Core Gen5 Mobile
  HSW-ULT      Cx/Dx    6-45-1/72 00000023-&gt;00000024 Core Gen4 Mobile and derived Pentium/Celeron
  HSW-H        Cx       6-46-1/32 00000019-&gt;0000001a Core Extreme i7-5xxxX
  BDW-H/E3     E/G      6-47-1/22 0000001d-&gt;0000001e Core i5-5xxxR/C, i7-5xxxHQ/EQ; Xeon E3 v4
  SKL-U/Y      D0       6-4e-3/c0 000000c2-&gt;000000c6 Core Gen6 Mobile
  BDX-DE       V1       6-56-2/10 00000015-&gt;00000017 Xeon D-1520/40
  BDX-DE       V2/3     6-56-3/10 07000012-&gt;07000013 Xeon D-1518/19/21/27/28/31/33/37/41/48, Pentium D1507/08/09/17/19
  BDX-DE       Y0       6-56-4/10 0f000011-&gt;0f000012 Xeon D-1557/59/67/71/77/81/87
  APL          D0       6-5c-9/03 0000002c-&gt;00000032 Pentium N/J4xxx, Celeron N/J3xxx, Atom x5/7-E39xx
  SKL-H/S/E3   R0       6-5e-3/36 000000c2-&gt;000000c6 Core Gen6; Xeon E3 v5
  GLK          B0       6-7a-1/01 00000022-&gt;00000028 Pentium Silver N/J5xxx, Celeron N/J4xxx
  KBL-U/Y      H0       6-8e-9/c0 00000084-&gt;0000008e Core Gen7 Mobile
  CFL-U43e     D0       6-8e-a/c0 00000084-&gt;00000096 Core Gen8 Mobile
  KBL-H/S/E3   B0       6-9e-9/2a 00000084-&gt;0000008e Core Gen7; Xeon E3 v6
  CFL-H/S/E3   U0       6-9e-a/22 00000084-&gt;00000096 Core Gen8
  CFL-H/S/E3   B0       6-9e-b/02 00000084-&gt;0000008e Core Gen8 Desktop</changelog>
  <changelog author="meissner@suse.com" date="1535112000">- updated to 20180807a, no change except licensing. (bsc#1104479)</changelog>
</package>
<package pkgid="ffa68dca1244246946ddcd19a5b26859a483fcca5a219619f28f3d9b8d4f0de6" name="udev" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="b2b63731afc15768174cdcb12eeab4ddc0e10a6e11743b40c0658ba52a2cc2f1" name="udev" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="25cbd4c3ce1b0fbf16918e3af3d71ddeea675994f9a24c1f66f5f4eebccb92a3" name="udev-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.3.1"/>
  <changelog author="Thomas.Blume@suse.com" date="1519819200">- Add basic user space support for suspend to idle (fate#323814)
  Add 99-wakeup-from-idle.rules
  Currently this only covers the power button and usb/AT keyboards
  as wakeup devices. It is planned to make that configurable in
  the future.</changelog>
  <changelog author="fbui@suse.com" date="1520510400">- Fix hotplug memory in 80-hotplug-cpu-mem.rules
  Drop broken script udev-remount-tmpfs.
  When new memory was hotplugged, the rule was supposed to call the
  external script (udev-remount-tmpfs) to remount all tmpfs. However
  the script was broken since its introduction (commit rev=715,
  14/07/2014) and had no effects... this makes me wonder if we
  shouldn't get rid of this...
  The logic is now embedded in the rule file.</changelog>
  <changelog author="fbui@suse.com" date="1520596800">- Import commit 6efb938f152b60c905b8496980697400b13e02a7
  06d5d0701 rules: maintain 80-hotplug-cpu-mem.rules in the package
  01db63eeb rule-syntax-check: allow commas inside quoted strings
  8247f6155 rule-syntax-check: add support for escaped double quotes
  a6354c05b rule-syntax-check: values can contain escaped double quotes
  5c8d9a358 rule-syntax-check: PROGRAM is not supposed to get value assigned
  88174ae85 compat-rules: fix syntax errors spotted by test/rule-syntax-check.py
  f4f94ab2e meson: install rules/80-hotplug-cpu-mem.rules
  2901aa9b9 meson: install rules/60-ssd-scheduler.rules
  db1d8eacd compat-rules: make path_id_compat build with meson</changelog>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
</package>
<package pkgid="9e4c02fcc548a1ca6ff98012ab5360e2f075d7df9b0b185a5fde49956f9f5563" name="udev-mini" arch="x86_64">
  <version epoch="0" ver="234" rel="lp150.20.6.1"/>
  <changelog author="fbui@suse.com" date="1521115200">- Split systemd-container sub-package off (fate#325469)
  This split off has been in Factory/TW since a couple of weeks now
  without any reported problems and I think it makes also sense to
  have it in SLE.</changelog>
  <changelog author="fbui@suse.com" date="1521720000">- Run migrate-sysconfig-i18n.sh also during package installation (bsc#1086164)
  This is needed when we upgrade from SLE11.</changelog>
  <changelog author="fbui@suse.com" date="1522152000">- Create systemd-container-mini package
  So we don't have to manually track and remove all files that should
  be shipped by systemd-container in the case of a bootstrap build.</changelog>
  <changelog author="fbui@suse.com" date="1522152001">- Don't ship machines.target in systemd-container but in systemd main package
  machines.target is supposed to be a standard target for
  starting/stopping all containers. systemd-nspawn is the main user of
  it but other container managers could also make use of it.</changelog>
  <changelog author="fbui@suse.com" date="1522238400">- Import commit b83c42d5d91a5ace2b4aa7420e83c98292e6f9e3
  a59988ee5 sysusers: make sure to reset errno before calling fget*ent()
  98ddbf6b3 sysusers: also add support for NIS entries in /etc/shadow
  586c08f63 sysusers: do not append entries after the NIS ones (bsc#1085062 bsc#1045092)
  3993df26a compat-rules: fix error detected by the rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1522238401">- Rename the tarball to reflect the exact version used (bsc#1087323)
  So it's clear that it contains some additional patches on top of the
  upstream version. Use the commit hash in the name so the exact
  version can easily be identified.
  Provide _service file which can be used to retrieve the tarball from
  the git repo (with "osc service disabledrun").</changelog>
  <changelog author="fbui@suse.com" date="1522929600">- Split systemd-coredump sub-package off (bsc#1083849)</changelog>
  <changelog author="jlee@suse.com" date="1523880000">- systemd: add offline environmental condition to 80-acpi-container-hotplug.rules (bsc#1082485)
  Add the offline event environmental condition to restrict the rule
  that is can only be triggered when the change event is received with
  the "offline" environmental data. The 27664c581 "ACPI / scan: Send
  change uevent with offine environmental data" kernel patch changed
  the corresponding code in kernel.
  This change prevents the udev rules for acpi container be triggered
  by "udevadm trigger" from user space.</changelog>
  <changelog author="fbui@suse.com" date="1524052800">- Drop dangling symlinks when systemd-container is not installed (bsc#1089376)
  - /usr/lib/systemd/system/remote-fs.target.wants/var-lib-machines.mount
    symlink is now part of systemd-container.
  - Dangling org.freedesktop.*.busname symlinks have been dropped
    completely and the support of busname has been removed from the
    git repo since it was dead code (kdbus was rejected).</changelog>
  <changelog author="fbui@suse.com" date="1524052801">- Import commit 9c35953dd19e90e4bfb03ad41380f3a5f9ae3ce7
  a374ad328 Drop busname unit type (bsc#1089376)
  85a01da56 shared/dissect-image: adapt to LUKS2 format
  a0ac1823c dissect: add a bit of debug logging if dm-crypt fails on us
  386ae68a0 cryptsetup: support LUKS2 on-disk format (bsc#1083571)
  5f3b66fdb systemd-udevd: limit children-max by available memory (#8668) (bsc#1086785 bsc#1066422)
  54833e3ab tmpfiles: fix directory removal with force symlink (#8619)
  04ef8e535 rules: fix syntax inconsistency in 75-persistent-net-generator.rules spotted by rule syntax checker</changelog>
  <changelog author="fbui@suse.com" date="1524225600">- Ship 99-sysctl.conf instead of creating it during package installation/update (bsc#1088769)
  Previously this symlink was created in /etc/sysctl.d during %post
  which made the symlink not owned and more importantly it was created
  only if /etc/sysctl.conf is already installed which is not always
  the case during the installation process it seems.
  So ship the symlink unconditionally and put it in /usr/lib/sysctl.d
  instead since it's a distro default behavior that might be overriden
  by sysadmin later.</changelog>
  <changelog author="fbui@suse.com" date="1524484800">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  92bf37b0a device: skip deserialization of device units when udevd is not running
  0a8984996 device: make sure to always retroactively start device dependencies (bsc#1088052)
  88df88129 cryptsetup-generator: do not bind to the decrypted device unit (#6538) (bsc#1089693)</changelog>
  <changelog author="fbui@suse.com" date="1524484801">- Move 80-container-v[ez].network in systemd-container sub-package
- Move 80-container-host0.network from udev to systemd</changelog>
  <changelog author="fbui@suse.com" date="1526299200">- Make sure /etc/machine-id has correct permissions (boo#1092269)
  This should be only needed for those who keep a Beta/RC
  installations.</changelog>
  <changelog author="fbui@suse.com" date="1526558400">- Add 0001-udev-don-t-create-by-partlabel-primary-and-.-logical.patch (bsc#1089761)</changelog>
  <changelog author="fbui@suse.com" date="1526644800">- Disable user services by default (bsc#1090785)</changelog>
  <changelog author="fbui@suse.com" date="1526644801">- Import commit d5dfab21f033c8af518e169a4cc79365a26974e2
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)</changelog>
  <changelog author="fbui@suse.com" date="1529928000">- Drop runtime dependency on dracut (bsc#1098569)
  Otherwise systemd pulls in tools to generate the initrd even in
  container/chroot installations that don't have a kernel anyways.
  For environments where initrd matters, dracut should be pulled via a
  pattern.</changelog>
  <changelog author="fbui@suse.com" date="1529928001">- Import commit 455f9b8841be896cb9a46a76f441a68a54187b29
  be5d72795 systemctl: mask always reports the same unit names when different unknown units are passed (bsc#1095973)
  d484e8167 systemctl: check existence of all units, not just the first one
  b33745be7 scsi_id: Fixup prefix for pre-SPC inquiry reply (bsc#1039099)
  f141e98a0 device: make sure to always retroactively start device dependencies (take #2) (bsc#1088052)
  cc7cfdc06 locale-util: on overlayfs FTW_MOUNT causes nftw(3) to not list *any* files
  c10206dad Fix pattern to detect distribution
  7b8f97e93 basic/macros: rename noreturn into _noreturn_ (#8456)
  f4836f05a install: "user" and "global" scopes are equivalent for user presets (boo#1093851)
  8f3fb5638 install: search preset files in /run (#7715)
  e871d6192 install: consider globally enabled units as "enabled" for the user (bsc#1093851)
  a25169127 install: consider non-Alias=/non-DefaultInstance= symlinks as "indirect" enablement
  c4635e551 install: only consider names in Alias= as "enabling"
  1b78301a5 install: move and rename to lowercase two functions
  e79156aee udev: whitelist mlx4_core locally-administered MAC addresses in the persistent rule generator (bsc#1083158)
  6c565351b man: updated systemd-analyze blame description for service-units with Type=simple (#8834) (bsc#1091265)
  380e80633 fileio.c: fix incorrect mtime
  0ae375c66 fileio: support writing atomic files with timestamp</changelog>
  <changelog author="fbui@suse.com" date="1530792000">- Import commit 2bf8d0f79760dd75bc221f9e91d294e4957e6c95
  181ae456a udev: use MAC address match only for ibmveth/ibmvnic/mlx4 (bsc#1095096)
  5a1aa8454 compat-rules: generate more compat by-id symlinks for NVMe devices (bsc#1095096)</changelog>
</package>
<package pkgid="2cd6c1921137ad2275487a37126b37804e5f11d173a73930d651ba649624b5d6" name="unzip" arch="src">
  <version epoch="0" ver="6.00" rel="lp150.3.3.1"/>
  <changelog author="jengelh@.medozas.de" date="1260100800">- enable parallel building</changelog>
  <changelog author="pth@suse.de" date="1273492800">- Use librcc to convert russian/slavic file names (bnc#540598).</changelog>
  <changelog author="pth@suse.de" date="1274443200">- Update to 6.0:
  * Support PKWARE ZIP64 extensions, allowing Zip archives and Zip archive
    entries larger than 4 GiBytes and more than 65536 entries within a
    single Zip archive.  This support is currently only available for Unix,
    OpenVMS and Win32/Win64.
  * Support for bzip2 compression method.
  * Support for UTF-8 encoded entry names, both through PKWARE's "General
    Purpose Flags Bit 11" indicator and Info-ZIP's new "up" unicode path
    extra field.  (Currently, on Windows the UTF-8 handling is limited to
    the character subset contained in the configured non-unicode "system
    code page".)
  * Fixed "Time of Creation/Time of Use" vulnerability when setting
    attributes of extracted files, for Unix and Unix-like ports.
  * Fixed memory leak when processing invalid deflated data.
  * Fixed long-standing bug in unshrink (partial_clear), added boundary
    checks against invalid compressed data.
  * On Unix, keep inherited SGID attribute bit for extracted directories
    unless restoration of owner/group id or SUID/SGID/Tacky attributes was
    requested.
  * On Unix, allow extracted filenames to contain embedded control
    characters when explicitly requested by specifying the new command line
    option "-^".
  * On Unix, support restoration of symbolic link attributes.
  * On Unix, support restoration of 32-bit UID/GID data using the new "ux"
    IZUNIX3 extra field introduced with Zip 3.0.
  * Support symbolic links zipped up on VMS.
  * New -D option to suppress restoration of timestamps for extracted
    directory entries (on those ports that support setting of directory
    timestamps).  By specifying "-DD", this new option also allows to
    suppress timestamp restoration for ALL extracted files on all UnZip
    ports which support restoration of timestamps.  On VMS, the default
    behaviour is now to skip restoration of directory timestamps; here,
    "--D" restores ALL timestamps, "-D" restores none.
  * On OS/2, Win32, and Unix, the (previously optional) feature UNIXBACKUP
    to allow saving backup copies of overwritten files on extraction is now
    enabled by default.</changelog>
  <changelog author="pth@suse.de" date="1277467200">- Doing open(O_WRONLY) and then fdopen("w+") will now fail with
  "Invalid Argument" whereas former glibcs would succeed. So now
  do open(O_RDWR).
- Print error message when open(2) fails.
- Add debugging traces in open_outfile.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283169600">- Do not include build host specific info like build dates In
  binaries.</changelog>
  <changelog author="lnussel@suse.de" date="1296216000">- use dlopen for librcc0. A direct requires causes lots of other
  packages to get installed such as aspell which bloats a minimal
  install.</changelog>
  <changelog author="idoenmez@novell.com" date="1304769600">- Sync our compile time flags with Debian except Acorn stuff, this enables
  UTF-8, saves an unrelated warning about lchmod being not implemented.
- Enable make check</changelog>
  <changelog author="lnussel@suse.de" date="1306152000">- remove use of __DATE__ from correct file</changelog>
  <changelog author="pth@suse.de" date="1312545600">- Don't call isprint (bnc#620483).</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Cleanup spec file
- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1375444800">- split the rcc dependency into a spec file of it's own, we don't
  need that complexity during build causing cycles like this:
    unzip -&gt; librcc -&gt; libproxy -&gt; libXau -&gt; xorg-x11-proto-devel -&gt; docbook-xsl-stylesheets</changelog>
  <changelog author="coolo@suse.com" date="1375444801">- fix defaultattr for old distros</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="tbehrens@suse.com" date="1422273600">- Add Fix-CVE-2014-8139-unzip.patch: fix heap overflow condition in
  the CRC32 verification (fixes bnc#909214)
- Add Fix-CVE-2014-8140-and-CVE-2014-8141.patch: fix write error
  (*_8349_*) shows a problem in extract.c:test_compr_eb(), and:
  read errors (*_6430_*, *_3422_*) show problems in
  process.c:getZip64Data() (fixes bnc#909214)</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Require properly the update-alternatives to not throw out errors
  when installing in OBS chroot</changelog>
  <changelog author="josef.moellers@suse.com" date="1476273600">- When decrypting an encrypted file,
  quit early if compressed size &lt; HEAD_LEN.
  When extracting avoid an infinite loop
  if a file never finishes unzipping.
  (bsc#950110, bsc#950111, CVE-2015-7696, CVE-2015-7697,
  CVE-2015-7696.patch, CVE-2015-7697.patch)</changelog>
  <changelog author="josef.moellers@suse.com" date="1487160000">- Fixed two potential buffer overflows.
  The patches were extracted from
  http://antinode.info/ftp/info-zip/unzip60/zipinfo.c and
  http://antinode.info/ftp/info-zip/unzip60/list.c
  (bsc#1013992, bsc#1013993, CVE-2016-9844, CVE-2014-9913,
  CVE-2016-9844.patch, CVE-2014-9913.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1499342400">- Updated Fix-CVE-2014-8139-unzip.patch: the original patch was
  causing errors testing valid jar files:
  $ unzip -t foo.jar
  Archive:  foo.jar
    testing: META-INF/               bad extra-field entry:
    EF block length (0 bytes) invalid (&lt; 4)
    testing: META-INF/MANIFEST.MF     OK
    testing: foo                      OK
  (see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8139
  where the updated patch was taken from)</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Add CVE-2018-1000035.patch: Fix a heap-based buffer overflow in
  password protected ZIP archives (CVE-2018-1000035 bsc#1080074)</changelog>
  <changelog author="kstreitova@suse.com" date="1530100800">- Add unzip60-total_disks_zero.patch that fixes a bug when unzip is
  unable to process Windows zip64 archives because Windows
  archivers set total_disks field to 0 but per standard, valid
  values are 1 and higher [bnc#910683]
- Add Fix-CVE-2014-9636-unzip-buffer-overflow.patch to fix heap
  overflow for STORED field data [bnc#914442] [CVE-2014-9636]</changelog>
</package>
<package pkgid="e660f4bd2bb35abc9f97cbd134c3e33515c11cd6ed8c82b22ce60d0195c4e0ac" name="unzip" arch="x86_64">
  <version epoch="0" ver="6.00" rel="lp150.3.3.1"/>
  <changelog author="jengelh@.medozas.de" date="1260100800">- enable parallel building</changelog>
  <changelog author="pth@suse.de" date="1273492800">- Use librcc to convert russian/slavic file names (bnc#540598).</changelog>
  <changelog author="pth@suse.de" date="1274443200">- Update to 6.0:
  * Support PKWARE ZIP64 extensions, allowing Zip archives and Zip archive
    entries larger than 4 GiBytes and more than 65536 entries within a
    single Zip archive.  This support is currently only available for Unix,
    OpenVMS and Win32/Win64.
  * Support for bzip2 compression method.
  * Support for UTF-8 encoded entry names, both through PKWARE's "General
    Purpose Flags Bit 11" indicator and Info-ZIP's new "up" unicode path
    extra field.  (Currently, on Windows the UTF-8 handling is limited to
    the character subset contained in the configured non-unicode "system
    code page".)
  * Fixed "Time of Creation/Time of Use" vulnerability when setting
    attributes of extracted files, for Unix and Unix-like ports.
  * Fixed memory leak when processing invalid deflated data.
  * Fixed long-standing bug in unshrink (partial_clear), added boundary
    checks against invalid compressed data.
  * On Unix, keep inherited SGID attribute bit for extracted directories
    unless restoration of owner/group id or SUID/SGID/Tacky attributes was
    requested.
  * On Unix, allow extracted filenames to contain embedded control
    characters when explicitly requested by specifying the new command line
    option "-^".
  * On Unix, support restoration of symbolic link attributes.
  * On Unix, support restoration of 32-bit UID/GID data using the new "ux"
    IZUNIX3 extra field introduced with Zip 3.0.
  * Support symbolic links zipped up on VMS.
  * New -D option to suppress restoration of timestamps for extracted
    directory entries (on those ports that support setting of directory
    timestamps).  By specifying "-DD", this new option also allows to
    suppress timestamp restoration for ALL extracted files on all UnZip
    ports which support restoration of timestamps.  On VMS, the default
    behaviour is now to skip restoration of directory timestamps; here,
    "--D" restores ALL timestamps, "-D" restores none.
  * On OS/2, Win32, and Unix, the (previously optional) feature UNIXBACKUP
    to allow saving backup copies of overwritten files on extraction is now
    enabled by default.</changelog>
  <changelog author="pth@suse.de" date="1277467200">- Doing open(O_WRONLY) and then fdopen("w+") will now fail with
  "Invalid Argument" whereas former glibcs would succeed. So now
  do open(O_RDWR).
- Print error message when open(2) fails.
- Add debugging traces in open_outfile.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283169600">- Do not include build host specific info like build dates In
  binaries.</changelog>
  <changelog author="lnussel@suse.de" date="1296216000">- use dlopen for librcc0. A direct requires causes lots of other
  packages to get installed such as aspell which bloats a minimal
  install.</changelog>
  <changelog author="idoenmez@novell.com" date="1304769600">- Sync our compile time flags with Debian except Acorn stuff, this enables
  UTF-8, saves an unrelated warning about lchmod being not implemented.
- Enable make check</changelog>
  <changelog author="lnussel@suse.de" date="1306152000">- remove use of __DATE__ from correct file</changelog>
  <changelog author="pth@suse.de" date="1312545600">- Don't call isprint (bnc#620483).</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Cleanup spec file
- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1375444800">- split the rcc dependency into a spec file of it's own, we don't
  need that complexity during build causing cycles like this:
    unzip -&gt; librcc -&gt; libproxy -&gt; libXau -&gt; xorg-x11-proto-devel -&gt; docbook-xsl-stylesheets</changelog>
  <changelog author="coolo@suse.com" date="1375444801">- fix defaultattr for old distros</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="tbehrens@suse.com" date="1422273600">- Add Fix-CVE-2014-8139-unzip.patch: fix heap overflow condition in
  the CRC32 verification (fixes bnc#909214)
- Add Fix-CVE-2014-8140-and-CVE-2014-8141.patch: fix write error
  (*_8349_*) shows a problem in extract.c:test_compr_eb(), and:
  read errors (*_6430_*, *_3422_*) show problems in
  process.c:getZip64Data() (fixes bnc#909214)</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Require properly the update-alternatives to not throw out errors
  when installing in OBS chroot</changelog>
  <changelog author="josef.moellers@suse.com" date="1476273600">- When decrypting an encrypted file,
  quit early if compressed size &lt; HEAD_LEN.
  When extracting avoid an infinite loop
  if a file never finishes unzipping.
  (bsc#950110, bsc#950111, CVE-2015-7696, CVE-2015-7697,
  CVE-2015-7696.patch, CVE-2015-7697.patch)</changelog>
  <changelog author="josef.moellers@suse.com" date="1487160000">- Fixed two potential buffer overflows.
  The patches were extracted from
  http://antinode.info/ftp/info-zip/unzip60/zipinfo.c and
  http://antinode.info/ftp/info-zip/unzip60/list.c
  (bsc#1013992, bsc#1013993, CVE-2016-9844, CVE-2014-9913,
  CVE-2016-9844.patch, CVE-2014-9913.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1499342400">- Updated Fix-CVE-2014-8139-unzip.patch: the original patch was
  causing errors testing valid jar files:
  $ unzip -t foo.jar
  Archive:  foo.jar
    testing: META-INF/               bad extra-field entry:
    EF block length (0 bytes) invalid (&lt; 4)
    testing: META-INF/MANIFEST.MF     OK
    testing: foo                      OK
  (see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8139
  where the updated patch was taken from)</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Add CVE-2018-1000035.patch: Fix a heap-based buffer overflow in
  password protected ZIP archives (CVE-2018-1000035 bsc#1080074)</changelog>
  <changelog author="kstreitova@suse.com" date="1530100800">- Add unzip60-total_disks_zero.patch that fixes a bug when unzip is
  unable to process Windows zip64 archives because Windows
  archivers set total_disks field to 0 but per standard, valid
  values are 1 and higher [bnc#910683]
- Add Fix-CVE-2014-9636-unzip-buffer-overflow.patch to fix heap
  overflow for STORED field data [bnc#914442] [CVE-2014-9636]</changelog>
</package>
<package pkgid="d82596c7fd9bebc720a1c4db4d2550c78e3e5edc57f8b29c3850e45321032fec" name="unzip-doc" arch="x86_64">
  <version epoch="0" ver="6.00" rel="lp150.3.3.1"/>
  <changelog author="jengelh@.medozas.de" date="1260100800">- enable parallel building</changelog>
  <changelog author="pth@suse.de" date="1273492800">- Use librcc to convert russian/slavic file names (bnc#540598).</changelog>
  <changelog author="pth@suse.de" date="1274443200">- Update to 6.0:
  * Support PKWARE ZIP64 extensions, allowing Zip archives and Zip archive
    entries larger than 4 GiBytes and more than 65536 entries within a
    single Zip archive.  This support is currently only available for Unix,
    OpenVMS and Win32/Win64.
  * Support for bzip2 compression method.
  * Support for UTF-8 encoded entry names, both through PKWARE's "General
    Purpose Flags Bit 11" indicator and Info-ZIP's new "up" unicode path
    extra field.  (Currently, on Windows the UTF-8 handling is limited to
    the character subset contained in the configured non-unicode "system
    code page".)
  * Fixed "Time of Creation/Time of Use" vulnerability when setting
    attributes of extracted files, for Unix and Unix-like ports.
  * Fixed memory leak when processing invalid deflated data.
  * Fixed long-standing bug in unshrink (partial_clear), added boundary
    checks against invalid compressed data.
  * On Unix, keep inherited SGID attribute bit for extracted directories
    unless restoration of owner/group id or SUID/SGID/Tacky attributes was
    requested.
  * On Unix, allow extracted filenames to contain embedded control
    characters when explicitly requested by specifying the new command line
    option "-^".
  * On Unix, support restoration of symbolic link attributes.
  * On Unix, support restoration of 32-bit UID/GID data using the new "ux"
    IZUNIX3 extra field introduced with Zip 3.0.
  * Support symbolic links zipped up on VMS.
  * New -D option to suppress restoration of timestamps for extracted
    directory entries (on those ports that support setting of directory
    timestamps).  By specifying "-DD", this new option also allows to
    suppress timestamp restoration for ALL extracted files on all UnZip
    ports which support restoration of timestamps.  On VMS, the default
    behaviour is now to skip restoration of directory timestamps; here,
    "--D" restores ALL timestamps, "-D" restores none.
  * On OS/2, Win32, and Unix, the (previously optional) feature UNIXBACKUP
    to allow saving backup copies of overwritten files on extraction is now
    enabled by default.</changelog>
  <changelog author="pth@suse.de" date="1277467200">- Doing open(O_WRONLY) and then fdopen("w+") will now fail with
  "Invalid Argument" whereas former glibcs would succeed. So now
  do open(O_RDWR).
- Print error message when open(2) fails.
- Add debugging traces in open_outfile.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283169600">- Do not include build host specific info like build dates In
  binaries.</changelog>
  <changelog author="lnussel@suse.de" date="1296216000">- use dlopen for librcc0. A direct requires causes lots of other
  packages to get installed such as aspell which bloats a minimal
  install.</changelog>
  <changelog author="idoenmez@novell.com" date="1304769600">- Sync our compile time flags with Debian except Acorn stuff, this enables
  UTF-8, saves an unrelated warning about lchmod being not implemented.
- Enable make check</changelog>
  <changelog author="lnussel@suse.de" date="1306152000">- remove use of __DATE__ from correct file</changelog>
  <changelog author="pth@suse.de" date="1312545600">- Don't call isprint (bnc#620483).</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Cleanup spec file
- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1375444800">- split the rcc dependency into a spec file of it's own, we don't
  need that complexity during build causing cycles like this:
    unzip -&gt; librcc -&gt; libproxy -&gt; libXau -&gt; xorg-x11-proto-devel -&gt; docbook-xsl-stylesheets</changelog>
  <changelog author="coolo@suse.com" date="1375444801">- fix defaultattr for old distros</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="tbehrens@suse.com" date="1422273600">- Add Fix-CVE-2014-8139-unzip.patch: fix heap overflow condition in
  the CRC32 verification (fixes bnc#909214)
- Add Fix-CVE-2014-8140-and-CVE-2014-8141.patch: fix write error
  (*_8349_*) shows a problem in extract.c:test_compr_eb(), and:
  read errors (*_6430_*, *_3422_*) show problems in
  process.c:getZip64Data() (fixes bnc#909214)</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Require properly the update-alternatives to not throw out errors
  when installing in OBS chroot</changelog>
  <changelog author="josef.moellers@suse.com" date="1476273600">- When decrypting an encrypted file,
  quit early if compressed size &lt; HEAD_LEN.
  When extracting avoid an infinite loop
  if a file never finishes unzipping.
  (bsc#950110, bsc#950111, CVE-2015-7696, CVE-2015-7697,
  CVE-2015-7696.patch, CVE-2015-7697.patch)</changelog>
  <changelog author="josef.moellers@suse.com" date="1487160000">- Fixed two potential buffer overflows.
  The patches were extracted from
  http://antinode.info/ftp/info-zip/unzip60/zipinfo.c and
  http://antinode.info/ftp/info-zip/unzip60/list.c
  (bsc#1013992, bsc#1013993, CVE-2016-9844, CVE-2014-9913,
  CVE-2016-9844.patch, CVE-2014-9913.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1499342400">- Updated Fix-CVE-2014-8139-unzip.patch: the original patch was
  causing errors testing valid jar files:
  $ unzip -t foo.jar
  Archive:  foo.jar
    testing: META-INF/               bad extra-field entry:
    EF block length (0 bytes) invalid (&lt; 4)
    testing: META-INF/MANIFEST.MF     OK
    testing: foo                      OK
  (see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8139
  where the updated patch was taken from)</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Add CVE-2018-1000035.patch: Fix a heap-based buffer overflow in
  password protected ZIP archives (CVE-2018-1000035 bsc#1080074)</changelog>
  <changelog author="kstreitova@suse.com" date="1530100800">- Add unzip60-total_disks_zero.patch that fixes a bug when unzip is
  unable to process Windows zip64 archives because Windows
  archivers set total_disks field to 0 but per standard, valid
  values are 1 and higher [bnc#910683]
- Add Fix-CVE-2014-9636-unzip-buffer-overflow.patch to fix heap
  overflow for STORED field data [bnc#914442] [CVE-2014-9636]</changelog>
</package>
<package pkgid="6e21079e4f9a8c81d71d3b1b6939d987dc8b7ee5fceb7be0a23944c19fdb9fab" name="unzip-rcc" arch="src">
  <version epoch="0" ver="6.00" rel="lp150.3.3.1"/>
  <changelog author="jengelh@.medozas.de" date="1260100800">- enable parallel building</changelog>
  <changelog author="pth@suse.de" date="1273492800">- Use librcc to convert russian/slavic file names (bnc#540598).</changelog>
  <changelog author="pth@suse.de" date="1274443200">- Update to 6.0:
  * Support PKWARE ZIP64 extensions, allowing Zip archives and Zip archive
    entries larger than 4 GiBytes and more than 65536 entries within a
    single Zip archive.  This support is currently only available for Unix,
    OpenVMS and Win32/Win64.
  * Support for bzip2 compression method.
  * Support for UTF-8 encoded entry names, both through PKWARE's "General
    Purpose Flags Bit 11" indicator and Info-ZIP's new "up" unicode path
    extra field.  (Currently, on Windows the UTF-8 handling is limited to
    the character subset contained in the configured non-unicode "system
    code page".)
  * Fixed "Time of Creation/Time of Use" vulnerability when setting
    attributes of extracted files, for Unix and Unix-like ports.
  * Fixed memory leak when processing invalid deflated data.
  * Fixed long-standing bug in unshrink (partial_clear), added boundary
    checks against invalid compressed data.
  * On Unix, keep inherited SGID attribute bit for extracted directories
    unless restoration of owner/group id or SUID/SGID/Tacky attributes was
    requested.
  * On Unix, allow extracted filenames to contain embedded control
    characters when explicitly requested by specifying the new command line
    option "-^".
  * On Unix, support restoration of symbolic link attributes.
  * On Unix, support restoration of 32-bit UID/GID data using the new "ux"
    IZUNIX3 extra field introduced with Zip 3.0.
  * Support symbolic links zipped up on VMS.
  * New -D option to suppress restoration of timestamps for extracted
    directory entries (on those ports that support setting of directory
    timestamps).  By specifying "-DD", this new option also allows to
    suppress timestamp restoration for ALL extracted files on all UnZip
    ports which support restoration of timestamps.  On VMS, the default
    behaviour is now to skip restoration of directory timestamps; here,
    "--D" restores ALL timestamps, "-D" restores none.
  * On OS/2, Win32, and Unix, the (previously optional) feature UNIXBACKUP
    to allow saving backup copies of overwritten files on extraction is now
    enabled by default.</changelog>
  <changelog author="pth@suse.de" date="1277467200">- Doing open(O_WRONLY) and then fdopen("w+") will now fail with
  "Invalid Argument" whereas former glibcs would succeed. So now
  do open(O_RDWR).
- Print error message when open(2) fails.
- Add debugging traces in open_outfile.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283169600">- Do not include build host specific info like build dates In
  binaries.</changelog>
  <changelog author="lnussel@suse.de" date="1296216000">- use dlopen for librcc0. A direct requires causes lots of other
  packages to get installed such as aspell which bloats a minimal
  install.</changelog>
  <changelog author="idoenmez@novell.com" date="1304769600">- Sync our compile time flags with Debian except Acorn stuff, this enables
  UTF-8, saves an unrelated warning about lchmod being not implemented.
- Enable make check</changelog>
  <changelog author="lnussel@suse.de" date="1306152000">- remove use of __DATE__ from correct file</changelog>
  <changelog author="pth@suse.de" date="1312545600">- Don't call isprint (bnc#620483).</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Cleanup spec file
- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1375444800">- split the rcc dependency into a spec file of it's own, we don't
  need that complexity during build causing cycles like this:
    unzip -&gt; librcc -&gt; libproxy -&gt; libXau -&gt; xorg-x11-proto-devel -&gt; docbook-xsl-stylesheets</changelog>
  <changelog author="coolo@suse.com" date="1375444801">- fix defaultattr for old distros</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="tbehrens@suse.com" date="1422273600">- Add Fix-CVE-2014-8139-unzip.patch: fix heap overflow condition in
  the CRC32 verification (fixes bnc#909214)
- Add Fix-CVE-2014-8140-and-CVE-2014-8141.patch: fix write error
  (*_8349_*) shows a problem in extract.c:test_compr_eb(), and:
  read errors (*_6430_*, *_3422_*) show problems in
  process.c:getZip64Data() (fixes bnc#909214)</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Require properly the update-alternatives to not throw out errors
  when installing in OBS chroot</changelog>
  <changelog author="josef.moellers@suse.com" date="1476273600">- When decrypting an encrypted file,
  quit early if compressed size &lt; HEAD_LEN.
  When extracting avoid an infinite loop
  if a file never finishes unzipping.
  (bsc#950110, bsc#950111, CVE-2015-7696, CVE-2015-7697,
  CVE-2015-7696.patch, CVE-2015-7697.patch)</changelog>
  <changelog author="josef.moellers@suse.com" date="1487160000">- Fixed two potential buffer overflows.
  The patches were extracted from
  http://antinode.info/ftp/info-zip/unzip60/zipinfo.c and
  http://antinode.info/ftp/info-zip/unzip60/list.c
  (bsc#1013992, bsc#1013993, CVE-2016-9844, CVE-2014-9913,
  CVE-2016-9844.patch, CVE-2014-9913.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1499342400">- Updated Fix-CVE-2014-8139-unzip.patch: the original patch was
  causing errors testing valid jar files:
  $ unzip -t foo.jar
  Archive:  foo.jar
    testing: META-INF/               bad extra-field entry:
    EF block length (0 bytes) invalid (&lt; 4)
    testing: META-INF/MANIFEST.MF     OK
    testing: foo                      OK
  (see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8139
  where the updated patch was taken from)</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Add CVE-2018-1000035.patch: Fix a heap-based buffer overflow in
  password protected ZIP archives (CVE-2018-1000035 bsc#1080074)</changelog>
  <changelog author="kstreitova@suse.com" date="1530100800">- Add unzip60-total_disks_zero.patch that fixes a bug when unzip is
  unable to process Windows zip64 archives because Windows
  archivers set total_disks field to 0 but per standard, valid
  values are 1 and higher [bnc#910683]
- Add Fix-CVE-2014-9636-unzip-buffer-overflow.patch to fix heap
  overflow for STORED field data [bnc#914442] [CVE-2014-9636]</changelog>
</package>
<package pkgid="eeaf8e7bf4a6363e3275cdcb3a79cd9b2f67447a2b78991541169309ec200b3d" name="unzip-rcc" arch="x86_64">
  <version epoch="0" ver="6.00" rel="lp150.3.3.1"/>
  <changelog author="jengelh@.medozas.de" date="1260100800">- enable parallel building</changelog>
  <changelog author="pth@suse.de" date="1273492800">- Use librcc to convert russian/slavic file names (bnc#540598).</changelog>
  <changelog author="pth@suse.de" date="1274443200">- Update to 6.0:
  * Support PKWARE ZIP64 extensions, allowing Zip archives and Zip archive
    entries larger than 4 GiBytes and more than 65536 entries within a
    single Zip archive.  This support is currently only available for Unix,
    OpenVMS and Win32/Win64.
  * Support for bzip2 compression method.
  * Support for UTF-8 encoded entry names, both through PKWARE's "General
    Purpose Flags Bit 11" indicator and Info-ZIP's new "up" unicode path
    extra field.  (Currently, on Windows the UTF-8 handling is limited to
    the character subset contained in the configured non-unicode "system
    code page".)
  * Fixed "Time of Creation/Time of Use" vulnerability when setting
    attributes of extracted files, for Unix and Unix-like ports.
  * Fixed memory leak when processing invalid deflated data.
  * Fixed long-standing bug in unshrink (partial_clear), added boundary
    checks against invalid compressed data.
  * On Unix, keep inherited SGID attribute bit for extracted directories
    unless restoration of owner/group id or SUID/SGID/Tacky attributes was
    requested.
  * On Unix, allow extracted filenames to contain embedded control
    characters when explicitly requested by specifying the new command line
    option "-^".
  * On Unix, support restoration of symbolic link attributes.
  * On Unix, support restoration of 32-bit UID/GID data using the new "ux"
    IZUNIX3 extra field introduced with Zip 3.0.
  * Support symbolic links zipped up on VMS.
  * New -D option to suppress restoration of timestamps for extracted
    directory entries (on those ports that support setting of directory
    timestamps).  By specifying "-DD", this new option also allows to
    suppress timestamp restoration for ALL extracted files on all UnZip
    ports which support restoration of timestamps.  On VMS, the default
    behaviour is now to skip restoration of directory timestamps; here,
    "--D" restores ALL timestamps, "-D" restores none.
  * On OS/2, Win32, and Unix, the (previously optional) feature UNIXBACKUP
    to allow saving backup copies of overwritten files on extraction is now
    enabled by default.</changelog>
  <changelog author="pth@suse.de" date="1277467200">- Doing open(O_WRONLY) and then fdopen("w+") will now fail with
  "Invalid Argument" whereas former glibcs would succeed. So now
  do open(O_RDWR).
- Print error message when open(2) fails.
- Add debugging traces in open_outfile.</changelog>
  <changelog author="cristian.rodriguez@opensuse.org" date="1283169600">- Do not include build host specific info like build dates In
  binaries.</changelog>
  <changelog author="lnussel@suse.de" date="1296216000">- use dlopen for librcc0. A direct requires causes lots of other
  packages to get installed such as aspell which bloats a minimal
  install.</changelog>
  <changelog author="idoenmez@novell.com" date="1304769600">- Sync our compile time flags with Debian except Acorn stuff, this enables
  UTF-8, saves an unrelated warning about lchmod being not implemented.
- Enable make check</changelog>
  <changelog author="lnussel@suse.de" date="1306152000">- remove use of __DATE__ from correct file</changelog>
  <changelog author="pth@suse.de" date="1312545600">- Don't call isprint (bnc#620483).</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Cleanup spec file
- Add Source URL, see https://en.opensuse.org/SourceUrls</changelog>
  <changelog author="coolo@suse.com" date="1375444800">- split the rcc dependency into a spec file of it's own, we don't
  need that complexity during build causing cycles like this:
    unzip -&gt; librcc -&gt; libproxy -&gt; libXau -&gt; xorg-x11-proto-devel -&gt; docbook-xsl-stylesheets</changelog>
  <changelog author="coolo@suse.com" date="1375444801">- fix defaultattr for old distros</changelog>
  <changelog author="meissner@suse.com" date="1419163200">- build with PIE</changelog>
  <changelog author="tbehrens@suse.com" date="1422273600">- Add Fix-CVE-2014-8139-unzip.patch: fix heap overflow condition in
  the CRC32 verification (fixes bnc#909214)
- Add Fix-CVE-2014-8140-and-CVE-2014-8141.patch: fix write error
  (*_8349_*) shows a problem in extract.c:test_compr_eb(), and:
  read errors (*_6430_*, *_3422_*) show problems in
  process.c:getZip64Data() (fixes bnc#909214)</changelog>
  <changelog author="tchvatal@suse.com" date="1466078400">- Require properly the update-alternatives to not throw out errors
  when installing in OBS chroot</changelog>
  <changelog author="josef.moellers@suse.com" date="1476273600">- When decrypting an encrypted file,
  quit early if compressed size &lt; HEAD_LEN.
  When extracting avoid an infinite loop
  if a file never finishes unzipping.
  (bsc#950110, bsc#950111, CVE-2015-7696, CVE-2015-7697,
  CVE-2015-7696.patch, CVE-2015-7697.patch)</changelog>
  <changelog author="josef.moellers@suse.com" date="1487160000">- Fixed two potential buffer overflows.
  The patches were extracted from
  http://antinode.info/ftp/info-zip/unzip60/zipinfo.c and
  http://antinode.info/ftp/info-zip/unzip60/list.c
  (bsc#1013992, bsc#1013993, CVE-2016-9844, CVE-2014-9913,
  CVE-2016-9844.patch, CVE-2014-9913.patch)</changelog>
  <changelog author="nico.kruber@gmail.com" date="1499342400">- Updated Fix-CVE-2014-8139-unzip.patch: the original patch was
  causing errors testing valid jar files:
  $ unzip -t foo.jar
  Archive:  foo.jar
    testing: META-INF/               bad extra-field entry:
    EF block length (0 bytes) invalid (&lt; 4)
    testing: META-INF/MANIFEST.MF     OK
    testing: foo                      OK
  (see https://bugzilla.redhat.com/show_bug.cgi?id=CVE-2014-8139
  where the updated patch was taken from)</changelog>
  <changelog author="kbabioch@suse.com" date="1518091200">- Add CVE-2018-1000035.patch: Fix a heap-based buffer overflow in
  password protected ZIP archives (CVE-2018-1000035 bsc#1080074)</changelog>
  <changelog author="kstreitova@suse.com" date="1530100800">- Add unzip60-total_disks_zero.patch that fixes a bug when unzip is
  unable to process Windows zip64 archives because Windows
  archivers set total_disks field to 0 but per standard, valid
  values are 1 and higher [bnc#910683]
- Add Fix-CVE-2014-9636-unzip-buffer-overflow.patch to fix heap
  overflow for STORED field data [bnc#914442] [CVE-2014-9636]</changelog>
</package>
<package pkgid="f572ab93a559256017c2ece7d19f1a6f7be68947e3df9723a48b65af842cd1a9" name="util-linux" arch="src">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="c8f0382265cf2174814e3ce0d718006354745a93868f7c0b6f429e5541b118fd" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="ac985c855a7034ae6e78ffd67197ead1c552570ffebd486a571af6d52f4907ff" name="util-linux" arch="src">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="28aa1764d33e50e92b1c72a5d769d562da5587ce63c01f4d4dfdfad91ead3130" name="util-linux" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="06359028f6c4c7fbd9a52c4e667f68363de7cd528895195a9ca94a4423777b12" name="util-linux-lang" arch="noarch">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="17b17365d58b08f36b1e0763b84d9151c4ed65309409052910d9c1a95eca3369" name="util-linux-lang" arch="noarch">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="3e9611538477a51eb23674f132c76d73fffdfc680dce0a706cfaad335c65c7c5" name="util-linux-systemd" arch="src">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="0b8bc834766331f2c21bef39258d31697a8dbcf55bcad9ea3b6395a37f4e2399" name="util-linux-systemd" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="1f1d5c6a3c43c3f8268666f97a92b8c1afbcee0b4f63e53271492b6a203d8de7" name="util-linux-systemd" arch="src">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="2e43b952ab70a5c420c60667e68c82373e65d6f4167c534794b23d546233b71a" name="util-linux-systemd" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="d10aec782d3c70ca14ec23cdc3f4d5de6205228cbf98e020e465d276ef379104" name="uuidd" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.3.1"/>
  <changelog author="sbrabec@suse.com" date="1505217600">- Fix prerequirement of groups tty and uuidd (boo#1057937).</changelog>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
</package>
<package pkgid="05dbdee3a3260babeddae381e740f18d60061612fda68543fc4d15ff352f9d78" name="uuidd" arch="x86_64">
  <version epoch="0" ver="2.31.1" rel="lp150.7.6.1"/>
  <changelog author="werner@suse.de" date="1505476800">- Ensure libreadline usage as well as _GNU_SOURCE</changelog>
  <changelog author="sbrabec@suse.com" date="1505822400">- Link against tinfow instead of tinfo
  (bsc#1056171, util-linux-use-tinfow.patch).</changelog>
  <changelog author="jengelh@inai.de" date="1505995200">- Update RPM categories and summaries.
  Do not ignore errors from useradd.</changelog>
  <changelog author="sbrabec@suse.com" date="1511179200">- Update to version 2.31:
  * New utilities: uuidparse, rfkill.
  * su has been refactored and extended to create pseudo terminal
    (new option --pty, CVE-2016-2779, bsc#968674). This new
    EXPERIMENTAL feature provides better isolation between root's
    terminal and an unprivileged su.
  * libuuid: Improved to match
  * libuuid, uuidgen: support hash-based UUIDs v3 (md5) and v5
    (sha1) as specified by RFC-4122. Provide UUID templates for
    dns, url, oid, or x500.
  * libblkid: Extended support for DM-integrity, HPE (aka
    extended-XFS) and UBI superblock. New API to hide already
    detected signatures.
  * libfdisk: New API to modify grain, make possible to completely
    disable dialog driven partitioning.
  * libsmartcols: New API to move columns.
  * column: --table-header-repeat to repeat table headers.
  * libfdisk: Use BLKPG ioctls to inform the kernel about changes.
  * fdisk: Improved ^C and ^D behavior.
  * cfdisk: Dialog to resize partition.
  * look: Follow the WORDLIST environment variable.
  * losetup: Added support for --sector-size (FATE#319010).
  * script: Follow the usual semantics for stop/continue signals.
  * setpriv: New command line options --ambient-caps and
  - -init-groups.
  * hwclock: Reduce system shutdown times, log --systz when using
    libaudit.
  * Other bug fixes.
- Drop upstreamed util-linux-use-tinfow.patch.
- Refreshed make-sure-sbin-resp-usr-sbin-are-in-PATH.diff.</changelog>
  <changelog author="sbrabec@suse.com" date="1512388800">- lsmem: Add support for zone awareness (bsc#1065471, FATE#324252,
  util-linux-lsmem-memory-zone-1.patch,
  util-linux-lsmem-memory-zone-2.patch,
  util-linux-lsmem-memory-zone-3.patch).
- Drop util-linux-losetup-Add-support-for-setting-logical-blocksize.patch.
  Different implementations exists in the new kernel, and it has
  a conflicting implementation in util-linux.</changelog>
  <changelog author="sbrabec@suse.com" date="1513598400">- Update bash completion conflict to cover rfkill file conflict.</changelog>
  <changelog author="antoine.belvire@opensuse.org" date="1514808000">- Fix Obsoletes for rfkill (boo#1074250).</changelog>
  <changelog author="sbrabec@suse.com" date="1515758400">- Integrate rfkill-block@.service and rfkill-unblock@.service from
  rfkill package (boo#1074250#c4).
- Remove unneeded release based conflicts and obsolescences
  (boo#1074250#c18).
- Remove sysvinit requirement.</changelog>
  <changelog author="normand@linux.vnet.ibm.com" date="1516104000">- Add util_linux_bigendian.patch solve two failing tests on ppc64
  (sha1, uuid/oids)</changelog>
  <changelog author="bwiedemann@suse.com" date="1516276800">- Provide /usr/sbin/rfkill from rfkill package (boo#1076134)</changelog>
  <changelog author="jengelh@inai.de" date="1516536000">- Combine %service_* calls again.</changelog>
  <changelog author="sbrabec@suse.com" date="1517400000">- Update to version 2.31.1:
  * blkid: Add support for LUKS2 and new LABEL attributes.
  * move rfkill to /usr/sbin (boo#1076134).
  * fsck.cramfs: Fix bus error on broken file system.
  * hwclock: add iso-8601 overflow check
  * libmount:
  * Allow MNT_FORCE and MNT_DETACH at umount
  * add nsfs between pseudo filesystems
  * lscpu: Treat read failure on Xen Hypervisor properties as
    non-fatal
  * sha1: endian fixes (affects util_linux_bigendian.patch)
  * documentation updates
  * other fixes and improvements
- Fix regressions in 2.31.1:
  * sha1 on s390* (update util_linux_bigendian.patch)
  * fsck.cramfs on ppc64le (util-linux-cramfs.patch)
  * fincore/count (disable, util-linux-fincore-count.patch)</changelog>
  <changelog author="sbrabec@suse.com" date="1518177600">- Fix lsblk on NVMe
  (bsc#1078662, util-linux-sysfs-nvme-devno.patch).</changelog>
  <changelog author="kukuk@suse.de" date="1521547200">- Use %license instead of %doc [bsc#1082318]</changelog>
  <changelog author="sbrabec@suse.com" date="1522843200">- su.default: Set ALWAYS_SET_PATH default to "yes" (bsc#353876#c7);
  add one-time wrapper forcing ALWAYS_SET_PATH on upgrade.</changelog>
  <changelog author="sbrabec@suse.com" date="1523534400">- Integrate pam_keyinit pam module (boo#1081947, su-l.pamd,
  runuser-l.pamd, runuser.pamd).</changelog>
  <changelog author="sbrabec@suse.com" date="1524139200">- Backport three upstream patches:
  * Fix crash loop in lscpu
    (bsc#1072947, util-linux-lscpu-loop.patch).
  * Fix possible segfault of umount -a
    (util-linux-libmount-umount-a-segfault.patch).
  * Fix mount -a on NFS bind mounts (bsc#1080740,
    util-linux-libmount-mount-a-nfs-bind-mount.patch).</changelog>
  <changelog author="sbrabec@suse.com" date="1525953600">- Fix lscpu and chcpu on systems with &gt;1024 cores
  (bnc#1091164, util-linux-lscpu-chcpu-new-cpu-macros.patch).
- Fix CPU count in chcpu
  (bnc#1091164, util-linux-chcpu-cpu-count.patch).</changelog>
  <changelog author="tchvatal@suse.com" date="1526990400">- Do not run rfkill-block@.service and rfkill-unblock@service as it
  is just template without parameter bsc#1092820 bsc#1093176</changelog>
  <changelog author="sbrabec@suse.com" date="1529409600">- Fix local vulnerability using embeded shell commands in
  a mountpoint name (bsc#1084300, CVE-2018-7738,
  util-linux-bash-completion-umount-CVE-2018-7738.patch).</changelog>
</package>
<package pkgid="5655ca201124c32221b18d681f52199ff36784990a736a510668888e6bf4a3c7" name="v4l2loopback" arch="src">
  <version epoch="0" ver="0.11.0" rel="lp150.2.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1361102400">- Initial commit (0.6.3)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1389960000">- Update to 0.8.0</changelog>
  <changelog author="aloisio@gmx.com" date="1501243200">- Update to 0.10.0</changelog>
  <changelog author="aloisio@gmx.com" date="1501329600">- Added preamble as source</changelog>
  <changelog author="aloisio@gmx.com" date="1502452800">- Added v4l-utils as runtime dependency</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1522756800">- Update to 0.11.0:
  * Adapted to new kernel timer API
  * VP9 &amp; HEVC support
  * Hacks to work around issues with Google Chrome and GStreamer-0.10</changelog>
</package>
<package pkgid="54d65c2d3d459c456e9e7800f8be860be6cbb7ba4be6e7479e0008d980117b35" name="v4l2loopback-kmp-default" arch="x86_64">
  <version epoch="0" ver="0.11.0_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1361102400">- Initial commit (0.6.3)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1389960000">- Update to 0.8.0</changelog>
  <changelog author="aloisio@gmx.com" date="1501243200">- Update to 0.10.0</changelog>
  <changelog author="aloisio@gmx.com" date="1501329600">- Added preamble as source</changelog>
  <changelog author="aloisio@gmx.com" date="1502452800">- Added v4l-utils as runtime dependency</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1522756800">- Update to 0.11.0:
  * Adapted to new kernel timer API
  * VP9 &amp; HEVC support
  * Hacks to work around issues with Google Chrome and GStreamer-0.10</changelog>
</package>
<package pkgid="e3a7835725f86c509297612c86a7a76baea9e5a538d8de7192bcde8683e59866" name="v4l2loopback-utils" arch="x86_64">
  <version epoch="0" ver="0.11.0" rel="lp150.2.2.1"/>
  <changelog author="matwey.kornilov@gmail.com" date="1361102400">- Initial commit (0.6.3)</changelog>
  <changelog author="matwey.kornilov@gmail.com" date="1389960000">- Update to 0.8.0</changelog>
  <changelog author="aloisio@gmx.com" date="1501243200">- Update to 0.10.0</changelog>
  <changelog author="aloisio@gmx.com" date="1501329600">- Added preamble as source</changelog>
  <changelog author="aloisio@gmx.com" date="1502452800">- Added v4l-utils as runtime dependency</changelog>
  <changelog author="guillaume.gardet@opensuse.org" date="1522756800">- Update to 0.11.0:
  * Adapted to new kernel timer API
  * VP9 &amp; HEVC support
  * Hacks to work around issues with Google Chrome and GStreamer-0.10</changelog>
</package>
<package pkgid="5dda875f819643d592946134201e889bfafcd36207fd409a3845217a94efd649" name="vhba-kmp" arch="src">
  <version epoch="0" ver="20170610" rel="lp150.2.2.1"/>
  <changelog author="jengelh@inai.de" date="1336478400">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1364644800">- Remove unused Supplements; use virtual modutils for building</changelog>
  <changelog author="jengelh@inai.de" date="1370779200">- Update to new upstream release 20130607 (cdemu-2.1.0)
  * Added support for non-blocking I/O.
  * Allow longer commands to be issues on VHBA.
  * Explicitly distinguish between device addition and device removal
  change, and resolve cases when both occur before rescan is done.
- Remove vhba-parallel-build.diff, vhba-pwd.diff (merged upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1405252800">- Update to new upstream release 20140629 (cdemu-3.0.0)
  * CD image write support</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 20140928 (cdemu-3.0.2)
  * Work around a warning occurring in grsecurity kernels</changelog>
  <changelog author="jengelh@inai.de" date="1448280000">- Add vhba-devname.diff</changelog>
  <changelog author="jengelh@inai.de" date="1449662400">- Improve autoloading by editing vhba-devname.diff to assign a
  static misc number.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 20161009
  * Documentation updates</changelog>
  <changelog author="jengelh@inai.de" date="1495022400">- Add vhba-signal.diff so it builds with Linux 4.11</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 20170610
  * Support for Linux 4.11 (integrate vhba-signal.diff)
- Drop vhba-signal.diff (merged upstream)</changelog>
</package>
<package pkgid="8264dfc4303164869adde7a2bfe55a439ec903d3867babcf84b891cde04e0271" name="vhba-kmp-default" arch="x86_64">
  <version epoch="0" ver="20170610_k4.12.14_lp150.12.13" rel="lp150.2.2.1"/>
  <changelog author="jengelh@inai.de" date="1336478400">- Initial package for build.opensuse.org</changelog>
  <changelog author="jengelh@inai.de" date="1364644800">- Remove unused Supplements; use virtual modutils for building</changelog>
  <changelog author="jengelh@inai.de" date="1370779200">- Update to new upstream release 20130607 (cdemu-2.1.0)
  * Added support for non-blocking I/O.
  * Allow longer commands to be issues on VHBA.
  * Explicitly distinguish between device addition and device removal
  change, and resolve cases when both occur before rescan is done.
- Remove vhba-parallel-build.diff, vhba-pwd.diff (merged upstream)</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1405252800">- Update to new upstream release 20140629 (cdemu-3.0.0)
  * CD image write support</changelog>
  <changelog author="jengelh@inai.de" date="1412251200">- Update to new upstream release 20140928 (cdemu-3.0.2)
  * Work around a warning occurring in grsecurity kernels</changelog>
  <changelog author="jengelh@inai.de" date="1448280000">- Add vhba-devname.diff</changelog>
  <changelog author="jengelh@inai.de" date="1449662400">- Improve autoloading by editing vhba-devname.diff to assign a
  static misc number.</changelog>
  <changelog author="jengelh@inai.de" date="1486382400">- Update to new upstream release 20161009
  * Documentation updates</changelog>
  <changelog author="jengelh@inai.de" date="1495022400">- Add vhba-signal.diff so it builds with Linux 4.11</changelog>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 20170610
  * Support for Linux 4.11 (integrate vhba-signal.diff)
- Drop vhba-signal.diff (merged upstream)</changelog>
</package>
<package pkgid="0d2d432fb42c34b9625728a78fc52c013824a9a9fd30f83f7eb53ac2b2f4b088" name="vhostmd" arch="src">
  <version epoch="0" ver="0.4" rel="lp150.2.3.1"/>
  <changelog author="jfehlig@novell.com" date="1245412800">- vhostmd is currently only used with Xen so make it
  ExclusiveArch x86 and x86_64</changelog>
  <changelog author="jfehlig@novell.com" date="1246017600">- Add metric type 'XML'</changelog>
  <changelog author="jfehlig@novell.com" date="1246017601">- Allow larger buffer for 'xml' type</changelog>
  <changelog author="jfehlig@novell.com" date="1246276800">- Validate XML returned by 'action' for metric type 'xml'
- Do not convert metrics values internally in vhostmd.  Treat
  all metric values as strings and leave it to consumers to do
  any conversion.</changelog>
  <changelog author="dmueller@suse.de" date="1253102400">- fix devel package requires</changelog>
  <changelog author="aj@suse.de" date="1254225600">- Fix devel package requires.</changelog>
  <changelog author="jfehlig@novell.com" date="1256904000">- Release of version 0.3
  - change default disk location to /dev/shm/vhostmd0
  - open metrics disk with O_DIRECT
  - Fixes for '--with{,out}-xenstore' option
  - Allow gcc to check calls to vu_log* printf-like functions
  - Always connect to libvirt read-only
  - Add '-u user' command line option to drop root privs
  - Add '-c uri' command line option to specify libvirt connection
    URI
  - Add CONNECT substitution &lt;action&gt;s
  - vm-dump-metrics: On error, exit with status code 1</changelog>
  <changelog author="jfehlig@novell.com" date="1260360000">- Release of version 0.4
  - configure.ac: Fix C compiler detection to be compatible with
    automake
  - chdir ("/") when daemonizing self</changelog>
  <changelog author="jfehlig@novell.com" date="1269950400">- Fixed vm-dump-metrics man page
  bnc#592242
  manpage.patch
- Build vhostmd without xenstore support since it is not well
  tested on SuSE distributions.  Additionally, it can be confusing
  when used in context of KVM where xenstore does not exist.
- Strip 's' (seconds) from metrics that contain a time value
  vhostmd-conf.patch
- Remove stray newline from metric values to improve XML readability
  value-newline.patch</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jfehlig@suse.com" date="1386676800">- link libmetrics with libxml to fix Factory build</changelog>
  <changelog author="mlatimer@suse.com" date="1402488000">- Various updates to vmhostd.xml
  - Replace xm commands with xl commands
  - Add /sbin and /bin to &lt;path&gt;
  - Use xen_version for VirtualizationProductInfo
  vhostmd-conf.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1402660800">- Further updates to vmhostd.xml
  - Support both xen and non-xen hypervisors (kvm)
  - Document reserved characters in 'action' field
  - Revert xen_version back to major/minor/extra to maintain compatability
    with xend
  - Minor syntax and legibility cleanup
  vhostmd-conf.patch
  bnc#872736</changelog>
  <changelog author="jfehlig@suse.com" date="1415016000">- Fix Factory build
  build-fix.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1415707200">- Improve build scripts
  Replace build-fix.patch with build-improvements.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1421236800">- Build vhostmd for all architectures</changelog>
  <changelog author="jfehlig@suse.com" date="1493294400">- Add systemd service file
  add-systemd-service.patch
  bsc#1036427
- Replace build-improvements.patch with
  modernize-build-files.patch sent upstream</changelog>
  <changelog author="jengelh@inai.de" date="1493467200">- Fix RPM group for libmetrics0
- Replace old RPM shell vars in %install
- Author lists do not belong into the description
- Use macros in file list to compact paths</changelog>
  <changelog author="jfehlig@suse.com" date="1525089600">- vhostmd.service: fix typo and move Documentation from [Service]
  to [Unit] section (changed add-systemd-service.patch)
  bsc#1090769</changelog>
  <changelog author="jfehlig@suse.com" date="1529928000">- Handle SIGPIPE and reconnect to libvirtd
  c7646e32-handle-sigpipe-reconnect.patch,
  03dc9982-fix-deallocation.patch
  bsc#1098804</changelog>
</package>
<package pkgid="d3aab324457e3dcfc6a8918454a66393b0f8d21dc1336afab4e846249354e3db" name="vhostmd" arch="x86_64">
  <version epoch="0" ver="0.4" rel="lp150.2.3.1"/>
  <changelog author="jfehlig@novell.com" date="1245412800">- vhostmd is currently only used with Xen so make it
  ExclusiveArch x86 and x86_64</changelog>
  <changelog author="jfehlig@novell.com" date="1246017600">- Add metric type 'XML'</changelog>
  <changelog author="jfehlig@novell.com" date="1246017601">- Allow larger buffer for 'xml' type</changelog>
  <changelog author="jfehlig@novell.com" date="1246276800">- Validate XML returned by 'action' for metric type 'xml'
- Do not convert metrics values internally in vhostmd.  Treat
  all metric values as strings and leave it to consumers to do
  any conversion.</changelog>
  <changelog author="dmueller@suse.de" date="1253102400">- fix devel package requires</changelog>
  <changelog author="aj@suse.de" date="1254225600">- Fix devel package requires.</changelog>
  <changelog author="jfehlig@novell.com" date="1256904000">- Release of version 0.3
  - change default disk location to /dev/shm/vhostmd0
  - open metrics disk with O_DIRECT
  - Fixes for '--with{,out}-xenstore' option
  - Allow gcc to check calls to vu_log* printf-like functions
  - Always connect to libvirt read-only
  - Add '-u user' command line option to drop root privs
  - Add '-c uri' command line option to specify libvirt connection
    URI
  - Add CONNECT substitution &lt;action&gt;s
  - vm-dump-metrics: On error, exit with status code 1</changelog>
  <changelog author="jfehlig@novell.com" date="1260360000">- Release of version 0.4
  - configure.ac: Fix C compiler detection to be compatible with
    automake
  - chdir ("/") when daemonizing self</changelog>
  <changelog author="jfehlig@novell.com" date="1269950400">- Fixed vm-dump-metrics man page
  bnc#592242
  manpage.patch
- Build vhostmd without xenstore support since it is not well
  tested on SuSE distributions.  Additionally, it can be confusing
  when used in context of KVM where xenstore does not exist.
- Strip 's' (seconds) from metrics that contain a time value
  vhostmd-conf.patch
- Remove stray newline from metric values to improve XML readability
  value-newline.patch</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jfehlig@suse.com" date="1386676800">- link libmetrics with libxml to fix Factory build</changelog>
  <changelog author="mlatimer@suse.com" date="1402488000">- Various updates to vmhostd.xml
  - Replace xm commands with xl commands
  - Add /sbin and /bin to &lt;path&gt;
  - Use xen_version for VirtualizationProductInfo
  vhostmd-conf.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1402660800">- Further updates to vmhostd.xml
  - Support both xen and non-xen hypervisors (kvm)
  - Document reserved characters in 'action' field
  - Revert xen_version back to major/minor/extra to maintain compatability
    with xend
  - Minor syntax and legibility cleanup
  vhostmd-conf.patch
  bnc#872736</changelog>
  <changelog author="jfehlig@suse.com" date="1415016000">- Fix Factory build
  build-fix.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1415707200">- Improve build scripts
  Replace build-fix.patch with build-improvements.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1421236800">- Build vhostmd for all architectures</changelog>
  <changelog author="jfehlig@suse.com" date="1493294400">- Add systemd service file
  add-systemd-service.patch
  bsc#1036427
- Replace build-improvements.patch with
  modernize-build-files.patch sent upstream</changelog>
  <changelog author="jengelh@inai.de" date="1493467200">- Fix RPM group for libmetrics0
- Replace old RPM shell vars in %install
- Author lists do not belong into the description
- Use macros in file list to compact paths</changelog>
  <changelog author="jfehlig@suse.com" date="1525089600">- vhostmd.service: fix typo and move Documentation from [Service]
  to [Unit] section (changed add-systemd-service.patch)
  bsc#1090769</changelog>
  <changelog author="jfehlig@suse.com" date="1529928000">- Handle SIGPIPE and reconnect to libvirtd
  c7646e32-handle-sigpipe-reconnect.patch,
  03dc9982-fix-deallocation.patch
  bsc#1098804</changelog>
</package>
<package pkgid="1e236282f5b0356639e2d933402f73671b4289ea953dd426ef51c0e00f3e6a94" name="vim-plugin-powerline" arch="noarch">
  <version epoch="0" ver="2.6" rel="lp150.3.3.1"/>
  <changelog author="asn@cryptomilk.org" date="1394625600">- Update to revision 70a94ee7d39a0958a06436aaeba05bd830830cc8.</changelog>
  <changelog author="asn@cryptomilk.org" date="1399464000">- Update to revision 9e7c6cf0bed52e47451c81377b5a1a96366b053f.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931200">- Update to revisiion 7453e58680c27a3435fd95d03f502d25eb80e98b.</changelog>
  <changelog author="asn@cryptomilk.org" date="1407931201">- Fix package type.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417521600">- Update to version 1.3.</changelog>
  <changelog author="asn@cryptomilk.org" date="1417694400">- Fix powerline-config.</changelog>
  <changelog author="asn@cryptomilk.org" date="1418126400">- Update to version 1.3.1
- Fixed some packaging issues.
- Added patch to support CFLAGS.</changelog>
  <changelog author="asn@cryptomilk.org" date="1421755200">- Update to version 2.0
  * Added fbterm (framebuffer terminal emulator) support.
  * Added theme with unicode-7.0 symbols.
  * Added support for PyPy3.
  * Compiler is now called with CFLAGS from environment in setup.py if present.
  * Added support for pyuv-1.*.
  * Added a way to write error log to Vim global variable.
  * powerline script now supports overrides from $POWERLINE_CONFIG_OVERRIDES,
    $POWERLINE_THEME_OVERRIDES environment variables, so does powerline-config
    script.
  * powerline and powerline-config scripts now support taking paths from
    $POWERLINE_CONFIG_PATHS.
  * powerline-lint is now able to report dictionaries which were merged in to
    form marked dictionary and what were the previous values of overridden
    values.
  * Added support for Byron Rakitzis? rc shell reimplementation.
  * Added support for querying battery status on cygwin platform.</changelog>
  <changelog author="asn@cryptomilk.org" date="1424433600">- Update to version 2.1
  * Added BAR support.
  * Added support for pdb (Python debugger) prompt.
  * Added more highlight groups to solarized colorscheme.
  * Updated zpython bindings.
  * Fixed C version of the client on non-Linux platforms.
  * Fixed some errors in powerline-lint code.
  * Fixed Python-2.6 incompatibilities in setup.py.</changelog>
  <changelog author="asn@cryptomilk.org" date="1431432000">- Update to version 2.1.4
  * Added support for placing powerline on the left in qtile.
  * Added qtile-1.9 support.
  * Fixed tmux-2.0 support.
  * Made it easier to run tests outside of travis.
  * Added some missing highlight groups.
  * Made it omit writing empty above lines.
  * Fixed UnicodeEncodeError when running powerline-lint with non-ASCII
    characters in error messages.
  * Fixed code that replaces &amp;statusline value: it now is able to replace
    non-ASCII &amp;statuslines as well.
  * Fixed powerline-render arguments parsing.</changelog>
  <changelog author="asn@cryptomilk.org" date="1436184000">- Update to version 2.2
  * Added support for newest psutil version.
  * Added support for non-SSL IMAP4 connection.
  * Added support for clickable tab names in Vim.
  * Added support for truncating tmux segments.
  * Added support for new (i3ipc) module that interacts with i3.
  * Added support for i3 modes.
  * Fixed coloring of network_load segment.
  * Fixed dash bindings on OS X.
  * Fixed parsing numbers starting with 2 supplied by POWERLINE_*_OVERRIDES
    environment variables.</changelog>
  <changelog author="asn@cryptomilk.org" date="1445342400">- Update to version 2.3
  * Added ability to hide domain part of the user name to common.env.user segment.
  * Added ability to show conda environment to virtualenv segment.
  * Added systemd service file.
  * Added ability to detect internal_ip interface using default gateway.
  * Added support for password-protected connections in mpd player bindings.
  * Added `output` option to i3wm.workspaces segment to filter workspaces based on
    their output.
  * Added ?charging? indicator to battery segment.
  * Made tmux bindings show zoom indicator in window status.
  * Fixed tmux bindings so that they support tmux-2.1.
  * Fixed support for unicode characters in common.time.date segment.</changelog>
  <changelog author="asn@cryptomilk.org" date="1461067200">- Update to version 2.4
  * Added short parameter for system_load segment that leaves only one load
    average number out of three.
  * Added powerline.segments.i3wm.scratchpad segment used to list windows
    that are currently on the scratchpad.
  * Added support for multiple batteries in battery segment.
  * Added ?.i3wm.workspace segment which describes single i3wm workspace and
    workspaces lister. Old .i3wm.workspaces segment was deprecated.
  * Added support for multiple monitors in lemonbar bindings.
  * Added support for most recent tmux version (2.2).
  * Fixed battery status support on some linux systems.
  * Fixed MPD bindings: they sometimes were not able to handle names if they
    did not fit ASCII.
  * Fixed MPD bindings: they did not correctly get elapsed time.
  * Fixed AttributeError on some systems: LC_MESSAGES is not always available.
  * Fixed Mac OS-specific variant of spotify player support when Python-3 is used.
  * Fixed performance of the tabline.</changelog>
  <changelog author="fcrozat@suse.com" date="1469620800">- Update to version 2.5:
  * Fix trailing whitespace segment on Python 3.
  * Fix left segments support in tmux-2.1
  * Add support for IPython-5
  * Increase socket backlog number for `powerline-daemon`
  * Use different query to retrieve weather
  * implement stash backend for git
  * provide stash counter
  * include stash in default shell layout
  * expose stash to Vim</changelog>
  <changelog author="asn@cryptomilk.org" date="1486728000">- Update to version 2.5.2:
  * Fixed ipython-5.2* support.
  * Made more robust theme default.
  * Made it use hglib in place of unstable mercurial plugin API.
  * Fixed latest fish version support.
  * Some other fixes and documentation adjustments.</changelog>
  <changelog author="lbeltrame@kde.org" date="1490702400">- Reformat spec properly
- Add a license</changelog>
  <changelog author="jengelh@inai.de" date="1491566400">- Improve package summary.
- Avoid unnecessary %__-type macro indirections.
  Replace find -exec rm by just find -delete.</changelog>
  <changelog author="asn@cryptomilk.org" date="1494417600">- Update to version 2.6:
  * Added support for new Vim modes.
  * Added ability to control output padding.
  * Added iTunes player segment.
  * Added support for tmux development builds.
  * Added a workaround for a fish bug sometimes occurring when using eval from
  * config.fish (upstream status unknown).
  * Added a workaround for tmux 2.4 bug: excessive CPU usage when having multiple
  * panes (also fixed upstream).
  * Fixed clean file status support in mercurial.
  * Fixed error when battery capacity is zero and using DBus.
  * Fixed mercurial command servers leakage.
  * Refactored awesome bindings to use powerline daemon.</changelog>
  <changelog author="asn@cryptomilk.org" date="1519819200">- Fix powerline requiring both python2 and python3</changelog>
  <changelog author="mimi.vx@gmail.com" date="1533902400">- add powerline-2.6-gcc7_fixes.patch
- add powerline-py2v3-fix.patch fixes boo#1101303
- cleanup spec
- correctly install systemd service</changelog>
</package>
<package pkgid="5762a8e7f549df3852b796fc923ba43501f9c465733cf0697bdd36678c3d1bbb" name="virt-install" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="lp150.6.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Get rid of "TypeError: Couldn't find foreign struct converter for
  'cairo.Context'" errors by adding a dependency to python3-cairo.
  (bsc#1062865)
- Python3: Fix 'local variable 'e' referenced before assignment'
  0001-py3-store-exception-variables-for-use-outside-except.patch
  (bsc#1073594)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514894400">- Downgrade python3-virt-bootstrap Recommends to Suggests to
  minimize the number of default dependencies. (bsc#1073937)</changelog>
  <changelog author="carnold@suse.com" date="1514894401">- bsc#1074056 - [build 408.1]virt-install tool reports "TypeError:
  must use keyword argument for key function" when parsing vnc
  virtinst-python2-to-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1515153600">- bsc#1072012 - openSUSE Tumbleweed, virt-manager: Opening VM GUI
  fails with "ordinal not in range" (bart.vanassche+novell@gmail.com)
- bsc#1074808 - [beta4+maintain update][virt-manager] Error
  launching details:'ascii' codec can't decode byte
  virtman-python2-to-python3-conversion.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1516104000">- Fix a python3 UnboundLocalError (bsc#1075622)
  c174b550-connection-Another-py3-exception-variable-fix.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Replace conditional gtk2-tools with gtk3-tools BuildRequires.
  (bsc#1070896)</changelog>
  <changelog author="carnold@suse.com" date="1517832000">- Default to sles15 and opensuse15 as the 'preferred_distros' for
  this release. (bsc#1054986)
  virtinst-osdict-get_supported.patch
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1517918400">- Upstream bug fixes (bsc#1027942)
  b5b2433a-baseclass-Fix-UI-file-loading-on-py3.patch
  0c6bcb09-fix-bytes-string-mess-in-serial-console.patch
  bc8c5b07-append--attach-to-virt-viewer-if-graphics-has-listen-type-none.patch
  0e812e3c-dont-skip-authentication-for-listen-type-none-with-fixed-QEMU.patch
  67122615-python2to3-division-compatability.patch
- Dropped in favor of upstream version
  0001-virtinst-python3-terminal-width-should-be-int.patch
  python3-fix-bytes-string-mess-in-serial-console.patch</changelog>
  <changelog author="carnold@suse.com" date="1518004800">- Update to virt-manager 1.5.0 (bsc#1027942)
  virt-manager-1.5.0.tar.bz2
  * python3 prep work (Radostin Stoyanov, Cole Robinson, Cédric Bosdonnat)
  * Switch ?location ISO to use isoinfo (Andrew Wong)
  * virt-install: add ?cpu numa distance handling (Menno Lageman)
  * virt-install: fix ?disk for rbd volumes with auth (Rauno Väli)
  * virt-install: add ?cputune vcpupin handling (Wim ten Have)
  * details ui: Showing attached scsi devices per controller (Lin Ma)
  * network ui: Show details about SR-IOV VF pool (Lin Ma)
  * Greatly expand UI test suite coverage
- Dropped patches
  0001-Improve-container-image-url-example.patch
  0001-py3-store-exception-variables-for-use-outside-except.patch
  0002-create-wizard-fix-alignment-in-os-container-page.patch
  0003-oscontainer-ask-root-password-in-the-wizard.patch
  0004-Harmonize-invisible_char-values.patch
  083dfcc8-Show-details-about-the-network-of-SR-IOV-VF-pool.patch
  08a58d61-pycodestyle-remove-description-of-fixed-errors.patch
  0c6bcb09-fix-bytes-string-mess-in-serial-console.patch
  0e812e3c-dont-skip-authentication-for-listen-type-none-with-fixed-QEMU.patch
  23aaf852-network-Set-bridge-name-to-None-instead-of-blank.patch
  2d276ebe-progress-dont-overwrite-format.patch
  2eb455c9-correctly-calculate-virtio-scsi-controller-index.patch
  374a3779-urlfetcher-write-test-file-as-binary-content.patch
  37ea5207-replace-StandardError-with-Exception.patch
  3b769643-dont-add-URI-into-params-for-tunneled-migration.patch
  3be78d1f-addhardware-dont-allow-panic-option-where-not-supported.patch
  44de92b7-use-reload-from-imp-module.patch
  63fce081-pycodestyle-Use-isinstance-for-type-checking.patch
  67122615-python2to3-division-compatability.patch
  69c84bea-import-reduce-from-functools-module.patch
  6dfc4de1-add-support-for-parsing-formatting-SR-IOV-VFs.patch
  6e6f59e7-diskbackend-get-a-proper-size-of-existing-block-device-while-cloning.patch
  73de8285-systray-remove-redundant-variable-assignment.patch
  75210ed3-replace-StringIO-with-io.patch
  7f1b4cee-pycodestyle-fix-all-E125-warnings.patch
  7fc7e94f-fix-virtio-scsi-controller-target-calculation.patch
  91c0669c-cli-Fix-OrderedDict-mutated-during-iteration-on-python3.patch
  9617d126-systray-Use-APPLICATION_STATUS-for-appindicator.patch
  999dbb36-cli-Make-VirtCLIArgument-instantiation-less-crazy.patch
  9a9f9ecd-ignore-comments-in-keymap-conf-files.patch
  a2bcd6c4-dont-compare-between-None-and-int.patch
  b5b2433a-baseclass-Fix-UI-file-loading-on-py3.patch
  b8fa0c6b-xmlnsqemu-order-XML-output-like-libvirt-does.patch
  b9bc3b60-undefine-only-persistent-domain.patch
  bc3c9a9d-progress-remove-unused-import.patch
  bc8c5b07-append--attach-to-virt-viewer-if-graphics-has-listen-type-none.patch
  c174b550-connection-Another-py3-exception-variable-fix.patch
  d1e1cf64-progress-remove-trailing-white-space.patch
  d2648d81-virtconv-dont-implicitly-depend-on-dict-hash-order.patch
  d82022bd-manager-drop-python2-only-cmp-usage.patch
  dff00d4f-remove-deprecated-statvfs-module.patch
  e2ad4b2f-convert-iteritems-to-items.patch
  e73abe5a-diskbackend-convert-to-long-the-calculated-size.patch
  f41aafc7-Use-enumerate-instead-of-range-and-len.patch
  f7c8cf9f-devicepanic-dont-return-empty-model-list.patch
  f836e47b-virtinst-Fix-URLFetcher-for-reading-files.patch</changelog>
  <changelog author="carnold@suse.com" date="1518177600">- Upstream bug fix (bsc#1027942)
  4c7c4590-manager-Fix-mem-disk-net-stats-graphs.patch</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Replace old $RPM_* shell vars. Use %_datadir more consistently.</changelog>
  <changelog author="carnold@suse.com" date="1520424000">- bsc#1067018 - L3: KVM Guest creation failed - Property .cmt not
  found
  virtinst-dont-use-special-copy-cpu-features.patch
- Upstream bug fix (bsc#1027942)
  27d4b167-virtinst-update-location-for-opensuse.patch</changelog>
  <changelog author="carnold@suse.com" date="1521720000">- bsc#1086038 - VM guests cannot be properly installed with
  virt-install
  virtinst-dont-set-cpu-model-when-caps-mismatch.patch</changelog>
  <changelog author="carnold@suse.com" date="1522324800">- Fallback to latest version of openSUSE when opensuse-unknown is
  detected for the ISO (bsc#1085757)
  virtinst-use-latest-opensuse-version-when-unknown-media.patch</changelog>
  <changelog author="carnold@suse.com" date="1522756800">- bsc#1086038 - VM guests cannot be properly installed with
  virt-install
  d15b78ab-virtinst-read-CPU-model-from-domain-capabilities.patch
  fd6a8154-virtinst-compare-host-and-domain-cpu-models.patch
- Drop virtinst-dont-set-cpu-model-when-caps-mismatch.patch in
  favor of upstream versions.</changelog>
  <changelog author="carnold@suse.com" date="1524744000">- bsc#1091113 - virt-install errs with: No option 'version' in
  section: 'general
  virtinst-handle-tumbleweed-treeinfo-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1526904000">- Update to virt-manager 1.5.1 (bsc#1027942). This was a quick bug
  bugfix release that came out shortly after version 1.5.0
  virt-manager-1.5.1.tar.bz2
- Drop 4c7c4590-manager-Fix-mem-disk-net-stats-graphs.patch</changelog>
  <changelog author="carnold@suse.com" date="1527768000">- bsc#1081544 - SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text
  'Options' in Virtualization/Create a new Virtual Machine/Network
  Install (HTTP...)/Step 2 of 5 dialog
- bsc#1081542 - SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text.
  Translation fix included in new tarball.
  virtman-fix-missing-translations.patch</changelog>
  <changelog author="carnold@suse.com" date="1529409600">- bsc#1098054 - osinfo-query and virt-install do not detect
  caasp3.0
  virtinst-add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1529496000">- bsc#1096819 - virt-install - Couldn't find hvm kernel for SUSE
  tree
  virtinst-python2-to-python3-conversion.patch</changelog>
</package>
<package pkgid="f0abce6ca14f57bebafbbf67ddec361dffe972f373ad581362af83d75d994a4a" name="virt-manager" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="lp150.6.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Get rid of "TypeError: Couldn't find foreign struct converter for
  'cairo.Context'" errors by adding a dependency to python3-cairo.
  (bsc#1062865)
- Python3: Fix 'local variable 'e' referenced before assignment'
  0001-py3-store-exception-variables-for-use-outside-except.patch
  (bsc#1073594)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514894400">- Downgrade python3-virt-bootstrap Recommends to Suggests to
  minimize the number of default dependencies. (bsc#1073937)</changelog>
  <changelog author="carnold@suse.com" date="1514894401">- bsc#1074056 - [build 408.1]virt-install tool reports "TypeError:
  must use keyword argument for key function" when parsing vnc
  virtinst-python2-to-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1515153600">- bsc#1072012 - openSUSE Tumbleweed, virt-manager: Opening VM GUI
  fails with "ordinal not in range" (bart.vanassche+novell@gmail.com)
- bsc#1074808 - [beta4+maintain update][virt-manager] Error
  launching details:'ascii' codec can't decode byte
  virtman-python2-to-python3-conversion.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1516104000">- Fix a python3 UnboundLocalError (bsc#1075622)
  c174b550-connection-Another-py3-exception-variable-fix.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Replace conditional gtk2-tools with gtk3-tools BuildRequires.
  (bsc#1070896)</changelog>
  <changelog author="carnold@suse.com" date="1517832000">- Default to sles15 and opensuse15 as the 'preferred_distros' for
  this release. (bsc#1054986)
  virtinst-osdict-get_supported.patch
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1517918400">- Upstream bug fixes (bsc#1027942)
  b5b2433a-baseclass-Fix-UI-file-loading-on-py3.patch
  0c6bcb09-fix-bytes-string-mess-in-serial-console.patch
  bc8c5b07-append--attach-to-virt-viewer-if-graphics-has-listen-type-none.patch
  0e812e3c-dont-skip-authentication-for-listen-type-none-with-fixed-QEMU.patch
  67122615-python2to3-division-compatability.patch
- Dropped in favor of upstream version
  0001-virtinst-python3-terminal-width-should-be-int.patch
  python3-fix-bytes-string-mess-in-serial-console.patch</changelog>
  <changelog author="carnold@suse.com" date="1518004800">- Update to virt-manager 1.5.0 (bsc#1027942)
  virt-manager-1.5.0.tar.bz2
  * python3 prep work (Radostin Stoyanov, Cole Robinson, Cédric Bosdonnat)
  * Switch ?location ISO to use isoinfo (Andrew Wong)
  * virt-install: add ?cpu numa distance handling (Menno Lageman)
  * virt-install: fix ?disk for rbd volumes with auth (Rauno Väli)
  * virt-install: add ?cputune vcpupin handling (Wim ten Have)
  * details ui: Showing attached scsi devices per controller (Lin Ma)
  * network ui: Show details about SR-IOV VF pool (Lin Ma)
  * Greatly expand UI test suite coverage
- Dropped patches
  0001-Improve-container-image-url-example.patch
  0001-py3-store-exception-variables-for-use-outside-except.patch
  0002-create-wizard-fix-alignment-in-os-container-page.patch
  0003-oscontainer-ask-root-password-in-the-wizard.patch
  0004-Harmonize-invisible_char-values.patch
  083dfcc8-Show-details-about-the-network-of-SR-IOV-VF-pool.patch
  08a58d61-pycodestyle-remove-description-of-fixed-errors.patch
  0c6bcb09-fix-bytes-string-mess-in-serial-console.patch
  0e812e3c-dont-skip-authentication-for-listen-type-none-with-fixed-QEMU.patch
  23aaf852-network-Set-bridge-name-to-None-instead-of-blank.patch
  2d276ebe-progress-dont-overwrite-format.patch
  2eb455c9-correctly-calculate-virtio-scsi-controller-index.patch
  374a3779-urlfetcher-write-test-file-as-binary-content.patch
  37ea5207-replace-StandardError-with-Exception.patch
  3b769643-dont-add-URI-into-params-for-tunneled-migration.patch
  3be78d1f-addhardware-dont-allow-panic-option-where-not-supported.patch
  44de92b7-use-reload-from-imp-module.patch
  63fce081-pycodestyle-Use-isinstance-for-type-checking.patch
  67122615-python2to3-division-compatability.patch
  69c84bea-import-reduce-from-functools-module.patch
  6dfc4de1-add-support-for-parsing-formatting-SR-IOV-VFs.patch
  6e6f59e7-diskbackend-get-a-proper-size-of-existing-block-device-while-cloning.patch
  73de8285-systray-remove-redundant-variable-assignment.patch
  75210ed3-replace-StringIO-with-io.patch
  7f1b4cee-pycodestyle-fix-all-E125-warnings.patch
  7fc7e94f-fix-virtio-scsi-controller-target-calculation.patch
  91c0669c-cli-Fix-OrderedDict-mutated-during-iteration-on-python3.patch
  9617d126-systray-Use-APPLICATION_STATUS-for-appindicator.patch
  999dbb36-cli-Make-VirtCLIArgument-instantiation-less-crazy.patch
  9a9f9ecd-ignore-comments-in-keymap-conf-files.patch
  a2bcd6c4-dont-compare-between-None-and-int.patch
  b5b2433a-baseclass-Fix-UI-file-loading-on-py3.patch
  b8fa0c6b-xmlnsqemu-order-XML-output-like-libvirt-does.patch
  b9bc3b60-undefine-only-persistent-domain.patch
  bc3c9a9d-progress-remove-unused-import.patch
  bc8c5b07-append--attach-to-virt-viewer-if-graphics-has-listen-type-none.patch
  c174b550-connection-Another-py3-exception-variable-fix.patch
  d1e1cf64-progress-remove-trailing-white-space.patch
  d2648d81-virtconv-dont-implicitly-depend-on-dict-hash-order.patch
  d82022bd-manager-drop-python2-only-cmp-usage.patch
  dff00d4f-remove-deprecated-statvfs-module.patch
  e2ad4b2f-convert-iteritems-to-items.patch
  e73abe5a-diskbackend-convert-to-long-the-calculated-size.patch
  f41aafc7-Use-enumerate-instead-of-range-and-len.patch
  f7c8cf9f-devicepanic-dont-return-empty-model-list.patch
  f836e47b-virtinst-Fix-URLFetcher-for-reading-files.patch</changelog>
  <changelog author="carnold@suse.com" date="1518177600">- Upstream bug fix (bsc#1027942)
  4c7c4590-manager-Fix-mem-disk-net-stats-graphs.patch</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Replace old $RPM_* shell vars. Use %_datadir more consistently.</changelog>
  <changelog author="carnold@suse.com" date="1520424000">- bsc#1067018 - L3: KVM Guest creation failed - Property .cmt not
  found
  virtinst-dont-use-special-copy-cpu-features.patch
- Upstream bug fix (bsc#1027942)
  27d4b167-virtinst-update-location-for-opensuse.patch</changelog>
  <changelog author="carnold@suse.com" date="1521720000">- bsc#1086038 - VM guests cannot be properly installed with
  virt-install
  virtinst-dont-set-cpu-model-when-caps-mismatch.patch</changelog>
  <changelog author="carnold@suse.com" date="1522324800">- Fallback to latest version of openSUSE when opensuse-unknown is
  detected for the ISO (bsc#1085757)
  virtinst-use-latest-opensuse-version-when-unknown-media.patch</changelog>
  <changelog author="carnold@suse.com" date="1522756800">- bsc#1086038 - VM guests cannot be properly installed with
  virt-install
  d15b78ab-virtinst-read-CPU-model-from-domain-capabilities.patch
  fd6a8154-virtinst-compare-host-and-domain-cpu-models.patch
- Drop virtinst-dont-set-cpu-model-when-caps-mismatch.patch in
  favor of upstream versions.</changelog>
  <changelog author="carnold@suse.com" date="1524744000">- bsc#1091113 - virt-install errs with: No option 'version' in
  section: 'general
  virtinst-handle-tumbleweed-treeinfo-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1526904000">- Update to virt-manager 1.5.1 (bsc#1027942). This was a quick bug
  bugfix release that came out shortly after version 1.5.0
  virt-manager-1.5.1.tar.bz2
- Drop 4c7c4590-manager-Fix-mem-disk-net-stats-graphs.patch</changelog>
  <changelog author="carnold@suse.com" date="1527768000">- bsc#1081544 - SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text
  'Options' in Virtualization/Create a new Virtual Machine/Network
  Install (HTTP...)/Step 2 of 5 dialog
- bsc#1081542 - SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text.
  Translation fix included in new tarball.
  virtman-fix-missing-translations.patch</changelog>
  <changelog author="carnold@suse.com" date="1529409600">- bsc#1098054 - osinfo-query and virt-install do not detect
  caasp3.0
  virtinst-add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1529496000">- bsc#1096819 - virt-install - Couldn't find hvm kernel for SUSE
  tree
  virtinst-python2-to-python3-conversion.patch</changelog>
</package>
<package pkgid="6ad1bdce50581da3450567561e3a60141cc26167f72999d9c11309eaf10b3403" name="virt-manager" arch="src">
  <version epoch="0" ver="1.5.1" rel="lp150.6.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Get rid of "TypeError: Couldn't find foreign struct converter for
  'cairo.Context'" errors by adding a dependency to python3-cairo.
  (bsc#1062865)
- Python3: Fix 'local variable 'e' referenced before assignment'
  0001-py3-store-exception-variables-for-use-outside-except.patch
  (bsc#1073594)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514894400">- Downgrade python3-virt-bootstrap Recommends to Suggests to
  minimize the number of default dependencies. (bsc#1073937)</changelog>
  <changelog author="carnold@suse.com" date="1514894401">- bsc#1074056 - [build 408.1]virt-install tool reports "TypeError:
  must use keyword argument for key function" when parsing vnc
  virtinst-python2-to-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1515153600">- bsc#1072012 - openSUSE Tumbleweed, virt-manager: Opening VM GUI
  fails with "ordinal not in range" (bart.vanassche+novell@gmail.com)
- bsc#1074808 - [beta4+maintain update][virt-manager] Error
  launching details:'ascii' codec can't decode byte
  virtman-python2-to-python3-conversion.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1516104000">- Fix a python3 UnboundLocalError (bsc#1075622)
  c174b550-connection-Another-py3-exception-variable-fix.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Replace conditional gtk2-tools with gtk3-tools BuildRequires.
  (bsc#1070896)</changelog>
  <changelog author="carnold@suse.com" date="1517832000">- Default to sles15 and opensuse15 as the 'preferred_distros' for
  this release. (bsc#1054986)
  virtinst-osdict-get_supported.patch
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1517918400">- Upstream bug fixes (bsc#1027942)
  b5b2433a-baseclass-Fix-UI-file-loading-on-py3.patch
  0c6bcb09-fix-bytes-string-mess-in-serial-console.patch
  bc8c5b07-append--attach-to-virt-viewer-if-graphics-has-listen-type-none.patch
  0e812e3c-dont-skip-authentication-for-listen-type-none-with-fixed-QEMU.patch
  67122615-python2to3-division-compatability.patch
- Dropped in favor of upstream version
  0001-virtinst-python3-terminal-width-should-be-int.patch
  python3-fix-bytes-string-mess-in-serial-console.patch</changelog>
  <changelog author="carnold@suse.com" date="1518004800">- Update to virt-manager 1.5.0 (bsc#1027942)
  virt-manager-1.5.0.tar.bz2
  * python3 prep work (Radostin Stoyanov, Cole Robinson, Cédric Bosdonnat)
  * Switch ?location ISO to use isoinfo (Andrew Wong)
  * virt-install: add ?cpu numa distance handling (Menno Lageman)
  * virt-install: fix ?disk for rbd volumes with auth (Rauno Väli)
  * virt-install: add ?cputune vcpupin handling (Wim ten Have)
  * details ui: Showing attached scsi devices per controller (Lin Ma)
  * network ui: Show details about SR-IOV VF pool (Lin Ma)
  * Greatly expand UI test suite coverage
- Dropped patches
  0001-Improve-container-image-url-example.patch
  0001-py3-store-exception-variables-for-use-outside-except.patch
  0002-create-wizard-fix-alignment-in-os-container-page.patch
  0003-oscontainer-ask-root-password-in-the-wizard.patch
  0004-Harmonize-invisible_char-values.patch
  083dfcc8-Show-details-about-the-network-of-SR-IOV-VF-pool.patch
  08a58d61-pycodestyle-remove-description-of-fixed-errors.patch
  0c6bcb09-fix-bytes-string-mess-in-serial-console.patch
  0e812e3c-dont-skip-authentication-for-listen-type-none-with-fixed-QEMU.patch
  23aaf852-network-Set-bridge-name-to-None-instead-of-blank.patch
  2d276ebe-progress-dont-overwrite-format.patch
  2eb455c9-correctly-calculate-virtio-scsi-controller-index.patch
  374a3779-urlfetcher-write-test-file-as-binary-content.patch
  37ea5207-replace-StandardError-with-Exception.patch
  3b769643-dont-add-URI-into-params-for-tunneled-migration.patch
  3be78d1f-addhardware-dont-allow-panic-option-where-not-supported.patch
  44de92b7-use-reload-from-imp-module.patch
  63fce081-pycodestyle-Use-isinstance-for-type-checking.patch
  67122615-python2to3-division-compatability.patch
  69c84bea-import-reduce-from-functools-module.patch
  6dfc4de1-add-support-for-parsing-formatting-SR-IOV-VFs.patch
  6e6f59e7-diskbackend-get-a-proper-size-of-existing-block-device-while-cloning.patch
  73de8285-systray-remove-redundant-variable-assignment.patch
  75210ed3-replace-StringIO-with-io.patch
  7f1b4cee-pycodestyle-fix-all-E125-warnings.patch
  7fc7e94f-fix-virtio-scsi-controller-target-calculation.patch
  91c0669c-cli-Fix-OrderedDict-mutated-during-iteration-on-python3.patch
  9617d126-systray-Use-APPLICATION_STATUS-for-appindicator.patch
  999dbb36-cli-Make-VirtCLIArgument-instantiation-less-crazy.patch
  9a9f9ecd-ignore-comments-in-keymap-conf-files.patch
  a2bcd6c4-dont-compare-between-None-and-int.patch
  b5b2433a-baseclass-Fix-UI-file-loading-on-py3.patch
  b8fa0c6b-xmlnsqemu-order-XML-output-like-libvirt-does.patch
  b9bc3b60-undefine-only-persistent-domain.patch
  bc3c9a9d-progress-remove-unused-import.patch
  bc8c5b07-append--attach-to-virt-viewer-if-graphics-has-listen-type-none.patch
  c174b550-connection-Another-py3-exception-variable-fix.patch
  d1e1cf64-progress-remove-trailing-white-space.patch
  d2648d81-virtconv-dont-implicitly-depend-on-dict-hash-order.patch
  d82022bd-manager-drop-python2-only-cmp-usage.patch
  dff00d4f-remove-deprecated-statvfs-module.patch
  e2ad4b2f-convert-iteritems-to-items.patch
  e73abe5a-diskbackend-convert-to-long-the-calculated-size.patch
  f41aafc7-Use-enumerate-instead-of-range-and-len.patch
  f7c8cf9f-devicepanic-dont-return-empty-model-list.patch
  f836e47b-virtinst-Fix-URLFetcher-for-reading-files.patch</changelog>
  <changelog author="carnold@suse.com" date="1518177600">- Upstream bug fix (bsc#1027942)
  4c7c4590-manager-Fix-mem-disk-net-stats-graphs.patch</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Replace old $RPM_* shell vars. Use %_datadir more consistently.</changelog>
  <changelog author="carnold@suse.com" date="1520424000">- bsc#1067018 - L3: KVM Guest creation failed - Property .cmt not
  found
  virtinst-dont-use-special-copy-cpu-features.patch
- Upstream bug fix (bsc#1027942)
  27d4b167-virtinst-update-location-for-opensuse.patch</changelog>
  <changelog author="carnold@suse.com" date="1521720000">- bsc#1086038 - VM guests cannot be properly installed with
  virt-install
  virtinst-dont-set-cpu-model-when-caps-mismatch.patch</changelog>
  <changelog author="carnold@suse.com" date="1522324800">- Fallback to latest version of openSUSE when opensuse-unknown is
  detected for the ISO (bsc#1085757)
  virtinst-use-latest-opensuse-version-when-unknown-media.patch</changelog>
  <changelog author="carnold@suse.com" date="1522756800">- bsc#1086038 - VM guests cannot be properly installed with
  virt-install
  d15b78ab-virtinst-read-CPU-model-from-domain-capabilities.patch
  fd6a8154-virtinst-compare-host-and-domain-cpu-models.patch
- Drop virtinst-dont-set-cpu-model-when-caps-mismatch.patch in
  favor of upstream versions.</changelog>
  <changelog author="carnold@suse.com" date="1524744000">- bsc#1091113 - virt-install errs with: No option 'version' in
  section: 'general
  virtinst-handle-tumbleweed-treeinfo-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1526904000">- Update to virt-manager 1.5.1 (bsc#1027942). This was a quick bug
  bugfix release that came out shortly after version 1.5.0
  virt-manager-1.5.1.tar.bz2
- Drop 4c7c4590-manager-Fix-mem-disk-net-stats-graphs.patch</changelog>
  <changelog author="carnold@suse.com" date="1527768000">- bsc#1081544 - SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text
  'Options' in Virtualization/Create a new Virtual Machine/Network
  Install (HTTP...)/Step 2 of 5 dialog
- bsc#1081542 - SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text.
  Translation fix included in new tarball.
  virtman-fix-missing-translations.patch</changelog>
  <changelog author="carnold@suse.com" date="1529409600">- bsc#1098054 - osinfo-query and virt-install do not detect
  caasp3.0
  virtinst-add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1529496000">- bsc#1096819 - virt-install - Couldn't find hvm kernel for SUSE
  tree
  virtinst-python2-to-python3-conversion.patch</changelog>
</package>
<package pkgid="a9a809d3f571a6a1b026f8bd9e1e240cb785667c3e36c509f78b9cc9beb7913e" name="virt-manager-common" arch="noarch">
  <version epoch="0" ver="1.5.1" rel="lp150.6.3.1"/>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Get rid of "TypeError: Couldn't find foreign struct converter for
  'cairo.Context'" errors by adding a dependency to python3-cairo.
  (bsc#1062865)
- Python3: Fix 'local variable 'e' referenced before assignment'
  0001-py3-store-exception-variables-for-use-outside-except.patch
  (bsc#1073594)</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514894400">- Downgrade python3-virt-bootstrap Recommends to Suggests to
  minimize the number of default dependencies. (bsc#1073937)</changelog>
  <changelog author="carnold@suse.com" date="1514894401">- bsc#1074056 - [build 408.1]virt-install tool reports "TypeError:
  must use keyword argument for key function" when parsing vnc
  virtinst-python2-to-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1515153600">- bsc#1072012 - openSUSE Tumbleweed, virt-manager: Opening VM GUI
  fails with "ordinal not in range" (bart.vanassche+novell@gmail.com)
- bsc#1074808 - [beta4+maintain update][virt-manager] Error
  launching details:'ascii' codec can't decode byte
  virtman-python2-to-python3-conversion.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1516104000">- Fix a python3 UnboundLocalError (bsc#1075622)
  c174b550-connection-Another-py3-exception-variable-fix.patch</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1516795200">- Replace conditional gtk2-tools with gtk3-tools BuildRequires.
  (bsc#1070896)</changelog>
  <changelog author="carnold@suse.com" date="1517832000">- Default to sles15 and opensuse15 as the 'preferred_distros' for
  this release. (bsc#1054986)
  virtinst-osdict-get_supported.patch
  virt-manager.spec</changelog>
  <changelog author="carnold@suse.com" date="1517918400">- Upstream bug fixes (bsc#1027942)
  b5b2433a-baseclass-Fix-UI-file-loading-on-py3.patch
  0c6bcb09-fix-bytes-string-mess-in-serial-console.patch
  bc8c5b07-append--attach-to-virt-viewer-if-graphics-has-listen-type-none.patch
  0e812e3c-dont-skip-authentication-for-listen-type-none-with-fixed-QEMU.patch
  67122615-python2to3-division-compatability.patch
- Dropped in favor of upstream version
  0001-virtinst-python3-terminal-width-should-be-int.patch
  python3-fix-bytes-string-mess-in-serial-console.patch</changelog>
  <changelog author="carnold@suse.com" date="1518004800">- Update to virt-manager 1.5.0 (bsc#1027942)
  virt-manager-1.5.0.tar.bz2
  * python3 prep work (Radostin Stoyanov, Cole Robinson, Cédric Bosdonnat)
  * Switch ?location ISO to use isoinfo (Andrew Wong)
  * virt-install: add ?cpu numa distance handling (Menno Lageman)
  * virt-install: fix ?disk for rbd volumes with auth (Rauno Väli)
  * virt-install: add ?cputune vcpupin handling (Wim ten Have)
  * details ui: Showing attached scsi devices per controller (Lin Ma)
  * network ui: Show details about SR-IOV VF pool (Lin Ma)
  * Greatly expand UI test suite coverage
- Dropped patches
  0001-Improve-container-image-url-example.patch
  0001-py3-store-exception-variables-for-use-outside-except.patch
  0002-create-wizard-fix-alignment-in-os-container-page.patch
  0003-oscontainer-ask-root-password-in-the-wizard.patch
  0004-Harmonize-invisible_char-values.patch
  083dfcc8-Show-details-about-the-network-of-SR-IOV-VF-pool.patch
  08a58d61-pycodestyle-remove-description-of-fixed-errors.patch
  0c6bcb09-fix-bytes-string-mess-in-serial-console.patch
  0e812e3c-dont-skip-authentication-for-listen-type-none-with-fixed-QEMU.patch
  23aaf852-network-Set-bridge-name-to-None-instead-of-blank.patch
  2d276ebe-progress-dont-overwrite-format.patch
  2eb455c9-correctly-calculate-virtio-scsi-controller-index.patch
  374a3779-urlfetcher-write-test-file-as-binary-content.patch
  37ea5207-replace-StandardError-with-Exception.patch
  3b769643-dont-add-URI-into-params-for-tunneled-migration.patch
  3be78d1f-addhardware-dont-allow-panic-option-where-not-supported.patch
  44de92b7-use-reload-from-imp-module.patch
  63fce081-pycodestyle-Use-isinstance-for-type-checking.patch
  67122615-python2to3-division-compatability.patch
  69c84bea-import-reduce-from-functools-module.patch
  6dfc4de1-add-support-for-parsing-formatting-SR-IOV-VFs.patch
  6e6f59e7-diskbackend-get-a-proper-size-of-existing-block-device-while-cloning.patch
  73de8285-systray-remove-redundant-variable-assignment.patch
  75210ed3-replace-StringIO-with-io.patch
  7f1b4cee-pycodestyle-fix-all-E125-warnings.patch
  7fc7e94f-fix-virtio-scsi-controller-target-calculation.patch
  91c0669c-cli-Fix-OrderedDict-mutated-during-iteration-on-python3.patch
  9617d126-systray-Use-APPLICATION_STATUS-for-appindicator.patch
  999dbb36-cli-Make-VirtCLIArgument-instantiation-less-crazy.patch
  9a9f9ecd-ignore-comments-in-keymap-conf-files.patch
  a2bcd6c4-dont-compare-between-None-and-int.patch
  b5b2433a-baseclass-Fix-UI-file-loading-on-py3.patch
  b8fa0c6b-xmlnsqemu-order-XML-output-like-libvirt-does.patch
  b9bc3b60-undefine-only-persistent-domain.patch
  bc3c9a9d-progress-remove-unused-import.patch
  bc8c5b07-append--attach-to-virt-viewer-if-graphics-has-listen-type-none.patch
  c174b550-connection-Another-py3-exception-variable-fix.patch
  d1e1cf64-progress-remove-trailing-white-space.patch
  d2648d81-virtconv-dont-implicitly-depend-on-dict-hash-order.patch
  d82022bd-manager-drop-python2-only-cmp-usage.patch
  dff00d4f-remove-deprecated-statvfs-module.patch
  e2ad4b2f-convert-iteritems-to-items.patch
  e73abe5a-diskbackend-convert-to-long-the-calculated-size.patch
  f41aafc7-Use-enumerate-instead-of-range-and-len.patch
  f7c8cf9f-devicepanic-dont-return-empty-model-list.patch
  f836e47b-virtinst-Fix-URLFetcher-for-reading-files.patch</changelog>
  <changelog author="carnold@suse.com" date="1518177600">- Upstream bug fix (bsc#1027942)
  4c7c4590-manager-Fix-mem-disk-net-stats-graphs.patch</changelog>
  <changelog author="jengelh@inai.de" date="1520251200">- Replace old $RPM_* shell vars. Use %_datadir more consistently.</changelog>
  <changelog author="carnold@suse.com" date="1520424000">- bsc#1067018 - L3: KVM Guest creation failed - Property .cmt not
  found
  virtinst-dont-use-special-copy-cpu-features.patch
- Upstream bug fix (bsc#1027942)
  27d4b167-virtinst-update-location-for-opensuse.patch</changelog>
  <changelog author="carnold@suse.com" date="1521720000">- bsc#1086038 - VM guests cannot be properly installed with
  virt-install
  virtinst-dont-set-cpu-model-when-caps-mismatch.patch</changelog>
  <changelog author="carnold@suse.com" date="1522324800">- Fallback to latest version of openSUSE when opensuse-unknown is
  detected for the ISO (bsc#1085757)
  virtinst-use-latest-opensuse-version-when-unknown-media.patch</changelog>
  <changelog author="carnold@suse.com" date="1522756800">- bsc#1086038 - VM guests cannot be properly installed with
  virt-install
  d15b78ab-virtinst-read-CPU-model-from-domain-capabilities.patch
  fd6a8154-virtinst-compare-host-and-domain-cpu-models.patch
- Drop virtinst-dont-set-cpu-model-when-caps-mismatch.patch in
  favor of upstream versions.</changelog>
  <changelog author="carnold@suse.com" date="1524744000">- bsc#1091113 - virt-install errs with: No option 'version' in
  section: 'general
  virtinst-handle-tumbleweed-treeinfo-file.patch</changelog>
  <changelog author="carnold@suse.com" date="1526904000">- Update to virt-manager 1.5.1 (bsc#1027942). This was a quick bug
  bugfix release that came out shortly after version 1.5.0
  virt-manager-1.5.1.tar.bz2
- Drop 4c7c4590-manager-Fix-mem-disk-net-stats-graphs.patch</changelog>
  <changelog author="carnold@suse.com" date="1527768000">- bsc#1081544 - SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text
  'Options' in Virtualization/Create a new Virtual Machine/Network
  Install (HTTP...)/Step 2 of 5 dialog
- bsc#1081542 - SLEx_15_LOC : YaST: ALL_LANGS:Untranslated text.
  Translation fix included in new tarball.
  virtman-fix-missing-translations.patch</changelog>
  <changelog author="carnold@suse.com" date="1529409600">- bsc#1098054 - osinfo-query and virt-install do not detect
  caasp3.0
  virtinst-add-caasp-support.patch</changelog>
  <changelog author="carnold@suse.com" date="1529496000">- bsc#1096819 - virt-install - Couldn't find hvm kernel for SUSE
  tree
  virtinst-python2-to-python3-conversion.patch</changelog>
</package>
<package pkgid="e0f68ca57d544f7436ca6f9d0766b03677ecb27692eef5306c725d8a0ca53f7e" name="virtualbox" arch="src">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="b19dc2b9a47f5ec1d0e7e97a0bdcf1872eddcbcf29ee58990c597d1c4b50b3a1" name="virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="3bc4bff8e2e9f0e321a5ec3fe725b898e199dbb59085050562043a8c02395064" name="virtualbox" arch="src">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="3e0d646f63a9d1348fd021b5cc6e50373701dcd44cadc14788e5de7e9195235b" name="virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="339675cb5c6cd18bc943be6700fa6fa46cbfbb16fb36a0711d8bd84b4d81fb5a" name="virtualbox" arch="src">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="16d2c5ff39ebd23d807e3a1e223036b538409f9c41833b5ee80032f52b99c857" name="virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="3df5a5df9587951201b0b9ef9122f7994c7422ebf60a9f4c90b3e42ba2052d96" name="virtualbox" arch="src">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="6f87e0ca55405f724c2d81e8c4e23d60ad192ec18a205591ddace10224fe3113" name="virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="42da025b0bfee8b29d85c132d72940b793585f1decd17d076220b8102f219bc7" name="virtualbox" arch="src">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="b5573b1f2b1b74195fdbf79c4a224b9ac0330b8fdc08114b90dceb80127aabc8" name="virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="79fe873b3ca6204f76b7458d1b0b2a4aba17107991eee285d1a62ccef83c5e8a" name="virtualbox" arch="src">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="7df097a660083aeb1e38af9f62356184cdc9a04dba04edbb33b14857ba0e7bbf" name="virtualbox" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="c3834ffd4b9c6b70f8f81f65988d8ad69c5050a99d957b815eacb8d2a692f1a9" name="virtualbox-devel" arch="x86_64">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="2e611f210832375079df05bb3fa7a97352eaa3220dafcab0539342e1fd3317ad" name="virtualbox-devel" arch="x86_64">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="32f008a0311ce41f8d26219a81a97f2eae413b2f88744bb43b64f5d115f4ba7b" name="virtualbox-devel" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="ea37c23e170b5a61d5a7eba8d3517e4dd6f9153ae1dc89fa0f97f1b2b5f43892" name="virtualbox-devel" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="53def7a86f1201cc1b95044598fe1dfb4baa24d9da61477de9cfd873c87638a3" name="virtualbox-devel" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="fe877161384e7cb98511e16298b456b1c951d55a9d84fca216ed63bfa20dd44b" name="virtualbox-devel" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="8ef874d7393c50ffb6f3664e39f693a0454c41aad677ac4ddfa8fec75e93129a" name="virtualbox-guest-desktop-icons" arch="noarch">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="aeb857ca486e905a940e8a4334aa4289663f47237cffdfb37ae8bf3bb2c437d6" name="virtualbox-guest-desktop-icons" arch="noarch">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="a74140cdc55563f1eb9e28056a565072de4c407f56317eae9b2728f8f9d50d26" name="virtualbox-guest-desktop-icons" arch="noarch">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="57bc68307f9759909b12c94f639dbcdfd0b1b01d7e5ad860dadbaa9df6231926" name="virtualbox-guest-desktop-icons" arch="noarch">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="8393044658874c260b977dc96cff543839613bb047cd7a1e83f94fa481a33c32" name="virtualbox-guest-desktop-icons" arch="noarch">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="6460b03d774d4337d7f2f50165e4ab0e0bce7cc0923376f25188153d4d01c7fd" name="virtualbox-guest-desktop-icons" arch="noarch">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="386418d2b04cb034e6c13769c89d698e2f6892d512bc85308f33dde6819c15d0" name="virtualbox-guest-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.12_k4.12.14_lp150.11" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="3972640bdf728bdd01061433a0bf118cf7bd66f92b8670c2f60fe4174ff19510" name="virtualbox-guest-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.14_k4.12.14_lp150.12.4" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="9ce0715bbc165e1bea595a9455be44672cb6095528ba2e1e349405e948cabd67" name="virtualbox-guest-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.16_k4.12.14_lp150.12.13" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="eb3e1b671a8ee1cb48f9dcae2fec21867f10ec85747b3ed4317d7151fdfbf29c" name="virtualbox-guest-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.16_k4.12.14_lp150.12.7" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="1b30e4126526d879664091ad247025a3f90afcaf397ac8d78bc8ab0207aea98a" name="virtualbox-guest-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.18_k4.12.14_lp150.12.16" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="cbea2f71f271abc03ed42a94d432e1580b0571bafcd5191c31e1341b58d9083d" name="virtualbox-guest-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.18_k4.12.14_lp150.12.16" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="c4a33584d007e426ecfe7afc0004f3129e8e635ad5a595894dcbf2eea711e1ca" name="virtualbox-guest-source" arch="noarch">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="6df0b2559724b1d94219c6923fbaf34a40f5e5498fcd939727414b878c583891" name="virtualbox-guest-source" arch="noarch">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="da9b891e01ce4c1abe0a02de90e4906b08fe05ae2f289f241b59e1d82bbfad92" name="virtualbox-guest-source" arch="noarch">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="dfe9170f5b30b16fc74198d7720bfde7e31f1ae05cc07d81f20e58b1104bffe8" name="virtualbox-guest-source" arch="noarch">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="5393a6362c15ddd1f002fe6be00ae1796fee3c7956a8b52e4e92541bc46ed819" name="virtualbox-guest-source" arch="noarch">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="095b82f4c6e08784154dbe65453e254cfec8f21c090c1ae228ddd4329ebab242" name="virtualbox-guest-source" arch="noarch">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="b14e68c93422ed98a8841e8e524ed86d101436a8520654cd56e1e663544b24ca" name="virtualbox-guest-tools" arch="x86_64">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="5a71a3b4260a59721a0058525a264ba7996a2c6ee92a307f8d86841ac2636906" name="virtualbox-guest-tools" arch="x86_64">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="c82cddc91eb24ef234dbfc80e7e1ac846120b7e24583f9a07ee9cafe9f240d2f" name="virtualbox-guest-tools" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="994ed91be55537a27a75c3d20823b42651b5acb98b2e2ca92139eccca6c85142" name="virtualbox-guest-tools" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="437202b712ea9c689c4aa600229cb8853f2af3dfb04a79f3055e19f400d6b38e" name="virtualbox-guest-tools" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="0216d72d3913a8b9d7614e9f611da7ebbabb3c8cf241f1f92fd9c44511ddeb97" name="virtualbox-guest-tools" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="1e827094132dafd551c6f9257417a0046c187dd07ed521cc5829151245afddf5" name="virtualbox-guest-x11" arch="x86_64">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="fa3ae40548b5f10fe8924aec42d6868f5199b0e8b2fa2b685e762c8e8260f6e5" name="virtualbox-guest-x11" arch="x86_64">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="49941f9bcbedc8c43cd725b17228c97c9a226d2bc4be77daea2f8c538ef5a1a7" name="virtualbox-guest-x11" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="8b40096f060d3dd7d6a1ea91a39d186610fd7f5586b003bcb1c189a993624899" name="virtualbox-guest-x11" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="6b1a178e3b0111636eb3e8a0922ad5b59de054f4f9302e1a6fe764a3235c2b03" name="virtualbox-guest-x11" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="6befb402068f7178b1e42e5d3fbf98f06fe6e6a7c2791137a6b3f277baf4ce41" name="virtualbox-guest-x11" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="7c5f99ead2915641aaed732275242465f9d0aae95f82c6bd42bd8cb7cb9ad8b6" name="virtualbox-host-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.12_k4.12.14_lp150.11" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="41c6d75d9c3354115bbc3c40c7072c240cf4ab46992c9d14e72e38c39aa467ce" name="virtualbox-host-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.14_k4.12.14_lp150.12.4" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="a9a82eca82a80a785f88964920c97493c07f4007e89dd82c5279822a5ec4ffd3" name="virtualbox-host-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.16_k4.12.14_lp150.12.13" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="e44b5dfeb3ba725fd5b0660de52e2076f866bc3184b28d1fefde481697500f13" name="virtualbox-host-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.16_k4.12.14_lp150.12.7" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="2dd5dbfb680e0e912dc4875fe857d5eee6a9fb52b265fa5bfc68c823ffc1fee2" name="virtualbox-host-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.18_k4.12.14_lp150.12.16" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="4a82e8c6c76673510a2896364c9229a8448e77cb7851d1004a1a896f1cd0e609" name="virtualbox-host-kmp-default" arch="x86_64">
  <version epoch="0" ver="5.2.18_k4.12.14_lp150.12.16" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="683ffcbfe2201e22191bfe5389e73b0bff99edd108528fc186eef8d83e6ed1b9" name="virtualbox-host-source" arch="noarch">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="ef48dba713009e3cf61f9ffb8a55498d2fd58f41ef3d33b3e3430feaef9fc44a" name="virtualbox-host-source" arch="noarch">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="a2c5f17088ff10e65ccdbb953621f9a234a9f086a10d41880e2f7d92f9819aba" name="virtualbox-host-source" arch="noarch">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="4e5ae9d4c1b45b3b8e43a5473cf02a4d62d61d69342cfe789ab18ed5207c33b1" name="virtualbox-host-source" arch="noarch">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="3a6f65a16b3567f4322879c17af98e2c25e916a722524ae6848347abbd2287a8" name="virtualbox-host-source" arch="noarch">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="cebe66d9f8ede056d70f8f38656aae15788f2c9995dccf1643cfee9470ec7e41" name="virtualbox-host-source" arch="noarch">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="20a35ff95115ade401552c82bd1d6ba7cbec80b2ccb4fa6c0a5afa1c02988cfd" name="virtualbox-qt" arch="x86_64">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="a412fbe7e10202d54dd8aa847e580edd13b67d7e9769078396bac4d3f0b9b03d" name="virtualbox-qt" arch="x86_64">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="2606b466bc87d6a6674c836f4186e8806cbdf7a6539ca269e0893fa8b330c62f" name="virtualbox-qt" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="94d58d40ded9fb9f2d3c63421dbcb8003c5440cfb04242c9e910153bf900bc94" name="virtualbox-qt" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="08024c0e684b084b22ee2a2b133e285249d89e8a816a641f8189b84a1d0ac1b0" name="virtualbox-qt" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="c1e6bd0c2560f16eac9aa87b4653978d3cd22f65c3ddb66f9c89d63ec30cf67f" name="virtualbox-qt" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="1c3b632af86a3c0787130a87b1fc6119760b778690323948ce2c01408b399956" name="virtualbox-vnc" arch="x86_64">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="24fd2da92b3f8b0b1c99b6eb0b753344f5f50fe5936e41c9fb4eb26baad939c7" name="virtualbox-vnc" arch="x86_64">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="381fc2a0c055708fa9f9bc7d94730595770e4b62ccda12af1db1463866fff1e9" name="virtualbox-vnc" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="7488432d8d861fdd70b5d5e3d8466c6a79a7d33c9d802627c8ca5a1f47c430e3" name="virtualbox-vnc" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="b59af51c0711f8acb05c27028371a11eab9b8f95eaf662f20195abdea175714a" name="virtualbox-vnc" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="844183fe3c8678044b46a2284e537cfd042172f332c00a8d6ab8802fd76471bc" name="virtualbox-vnc" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="ab8d84dad46d80db4f6407f40a46b6c55f1a27f91fe26d62ad8f69ebe6540c93" name="virtualbox-websrv" arch="x86_64">
  <version epoch="0" ver="5.2.12" rel="lp150.4.3.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1514548800">- File "fixes_for_4.14.patch" deleted - upstream fix.
  File "remove_vbox_video_build.patch" added as current versions of Xorg no longer need this component.
  Version update to 5.2.4 (released 2017-12-19 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: Adjusting desktop file for X11 window managers (bug #17312)
    User interface: various high resolution display adjustments
    Audio: fixed SB16 volume handling (5.2 regression)
    Audio: various fixes
    USB/OHCI: fixed a problem where OHCI emulation might sporadically drop data transfers
    Linux hosts: fixed screen corruption when the host screen changes and a virtual machine window is maximized
    X11 Guest Additions: fixed a hang at the GNOME Shell login screen with 3D enabled (5.2 regression, bugs #17189 and #17190)
  Version bump to 5.2.2 (released 2017-11-24 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    User interface: various improvements for high resolution screens
    User interface: added functionality to duplicate optical and floppy images
    User interface: various improvements for the virtual media manager
    VMM: fixed emulation so that Plan 9 guests can start once more (5.1.0 regression)
    Storage: fixed regression breaking iSCSI (bug #17196)
    Audio: added HDA support for more exotic guests (e.g. Haiku)
    Serial: fixed hanging I/O when using named pipes on Windows (5.2.0 regression; bug #17227)
    Serial: fixed broken communication with certain devices on Linux hosts
    USB/OHCI: improved behavior so that the controller state after a VM reset is closer to the initial state after VM start
    EFI: fixed HFS+ driver which in rare cases failed to access most files on a volume
    Shared clipboard: fixed hang with OS X host and Linux guest (bug #15782)
    Linux hosts: fixed kernel module compilation and start failures with Linux kernel 4.14 (bug #17267)
    X11 hosts: better handle WM_CLASS setting (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14 (bug #12534)
    Linux guests: fixed kernel module compilation and other problems with Linux kernel 4.14
    Linux guests: fixed various 5.2.0 regressions (bug #17163)
    Bridged networking: fixed duplicate EtherType in VLAN/priority tags on Linux (5.2.0 regression; bug #17277)
  Version change to 5.2.0 (released 2017-10-18 by Oracle)
  This is a major update. The following major new features were added:
    VM export to Oracle Cloud (OPC)
    Unattended guest installation (bug #5810; see the manual for more information)
    Overhauled VM selector GUI (improved tools VM / global tools handling, new icons)
    Added experimental audio support for video recording
  In addition, the following items were fixed and/or added:
    VMM: fixed reason for recent Linux kernels on also recent CPU models warning about "XSAVE consistency problem"
    GUI: Virtual Media Manager rework allowing to manage media attributes, like size, location, type and description
    GUI: Host-only Network Manager implemented to simplify managing corresponding networks and their attributes
    GUI: Snapshot Pane rework allowing to manage snapshot attributes, like name and description; reworked snapshot details which looks more clear, corresponds to VM Details pane and reflects current VM state difference according to last snapshot taken
    GUI: Audio settings extended with possibility to enable/disable audio input/output; corresponding changed were done to Audio and Video Capture settings pages; VM Devices menu and status-bar extended with corresponding actions and indicator as well
    GUI: improvements with accessibility support
    GUI: Fixed double mouse cursor when using mouse integration without Guest Additions, actually a Qt 5.6 bug fixed with QT 5.6.3 (Mac OS X hosts only; bug #15610)
    Audio: implemented (optional) device enumeration support for audio backends
    Audio: implemented support for host device callbacks (e.g. when adding or removing an audio device)
    Audio: HDA emulation now uses asynchronous data processing in separate threads
    Audio: implemented ability to enable or disable audio input / output on-the-fly
    Storage: implemented support for CUE/BIN images as CD/DVD media including multiple tracks
    Storage: implemented support for the controller memory buffer feature for NVMe
    Storage: first milestone of the I/O stack redesign landed
    E1000: Fix for Windows XP freeze when booting with unplugged cable
    NAT network: do not skip some port forwarding setup when multiple VMs are active (Windows hosts only; bug #17041)
    Serial: fixed extremely rare misbehavior on VM poweroff
    EFI: better video mode handling, supporting custom video modes and easier configuration (bug #6783)
    BIOS: properly report floppy logical sectors per track for unusual formats
    BIOS: update ATA disk parameter table vectors only if there is actually a corresponding ATA disk attached
    PXE: speed up booting by better handling pending packets when the link is not up yet
    VBoxManage: handle CPUID sub-leaf overrides better
    Windows Additions: fix several 3D related crashes
    Solaris hosts: allow increasing MTU size for host-only adapter to 9706 bytes to support jumbo frames
    Linux Additions: on systems using systemd, make sure that only the Guest Additions timesync service is active
    many unlisted fixes and improvements</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1515758400">- Updated file "fixes_for_leap15.patch" for new source.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1516276800">- Version bump to 5.2.6 (released 2018-01-15 by Oracle)
  Fixes for the following vulnerabilities (bsc#1076372)
  CVE-2018-2694, CVE-2018-2698, CVE-2018-2685, CVE-2018-2686, CVE-2018-2687, CVE-2018-2688
  CVE-2018-2689, CVE-2018-2690, CVE-2018-2676, CVE-2018-2693, CVE-2017-5715
  This is a maintenance release. The following items were fixed and/or added:
    GUI: fixed occasional screen corruption when host screen resolutio n is changed
    User interface: increase proposed disk size when creating new VMs for Windows 7 and newer
    User interface: various improvements for high resolution screens
    VMM: Fixed problems using 256MB VRAM in raw-mode VMs
    Audio: implemented support for audio playback and recording for macOS guests
    Audio: further timing improvements for Windows 10 guests
    Linux hosts: fixed problem accessing mini-toolbar under XFCE (bug #17280, contributed by Dusan Gallo)</changelog>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
</package>
<package pkgid="9ef781b070a9f69a906cf697f68f61bfa596c3069921cddd6c591d286bdce7ad" name="virtualbox-websrv" arch="x86_64">
  <version epoch="0" ver="5.2.14" rel="lp150.4.6.1"/>
  <changelog author="wbauer@tmo.at" date="1517659200">- Update "fixes_for_4.15.patch": remove useless log statement that
  broke building the vboxvideo guest kernel module
- Build and install it again, it's needed for KMS support, i.e. for
  Xorg's "modesetting" driver to work in the guest (boo#1079221)</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
</package>
<package pkgid="785ce3d2ac0310f9a9dfae69dac46d6109e16beae4f1c1e87f6558274e5027be" name="virtualbox-websrv" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.11.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="e532dc777f510a12a68f75cfa37ef84ba78078ed160054cd43c933b0dba7714a" name="virtualbox-websrv" arch="x86_64">
  <version epoch="0" ver="5.2.16" rel="lp150.4.9.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1518782400">- Fix bug in video capture - boo#1081281.
  The variable used to store the time code is only 16 bits, but needs to be 32-bits long.
  File "fix_videocapture.patch" is added to fix the problem.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
</package>
<package pkgid="9bffd0de2d131c8b958875190b806b5f2fad35acac0ab435ec989985b6f7c69b" name="virtualbox-websrv" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.14.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519214400">- Modify virtualbox-vnc to require libvncserver0 (bsc#1081856).</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
</package>
<package pkgid="5ab1bee8c4290352c7d018459f25c820ad90c966562843cd6b831cacf561a03a" name="virtualbox-websrv" arch="x86_64">
  <version epoch="0" ver="5.2.18" rel="lp150.4.17.1"/>
  <changelog author="Larry.Finger@lwfinger.net" date="1519819200">- File "fixes_for_4.15.patch" removed - fixed upstream.
  File "fix_videocapture.patch" removed - fixed upstream.
  Version bump to 5.2.8 (released 2018-02-27 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    VMM: added support for FSGSBASE, PCID, INVPCID CPU features for guests
    VMM: fixed EMM386 issue with detecting suitable page frame base (bug #10022)
    Front end: Linux: prevent VM window from jumping and auto-resizing to tiny size after resizing it on HiDPI screen
    Front end: Linux: fixed seamless regression caused by wm_class functionality (bugs #12534, #17304)
    Front end: switched to https downloads
    Front end: fixed crash while opening New machine wizard (s.a. forums topic 86592)
    Audio: added support for distinguishing recording sources in the PulseAudio mixer on the host when multiple VMs are running
    Audio: various fixes for the DirectSound backend
    Video recording: added better file seeking support and fixed playback of recorded files with certain players (e.g. Firefox)
    Audio: various fixes for Windows guest surround setups
    Audio: various fixes for HDA emulation
    Serial: fixed an issue where the serial port parameters in the emulation and host serial port got out of sync (bug #17116)
    Storage: fixed overwriting certain INQUIRY data for the DVD/CD drive attached to a AHCI controller
    Storage: fixed handling VMDK images created by Amazon EC2 VM export
    Network: fixed PXE boot regression in e1000
    Network: Added a workaround for older guests which do not enable bus mastering for the virtio PCI device
    3D: add environment variable to configure presenting 3D content on main thread (see bug #13653)
    Windows hosts: fixed indiscriminate binding of NDIS5 bridged driver, that caused PPPOE malfunction (bugs #16407, #17489)
    Windows guests: fixed incorrect function error when using shared folders in certain applications (bug #14118)
    Linux guests: Linux 4.15 support (bugs #17311, #17320, #17282)
    Linux guests: fixed black screen when 3D enabled in guests (bug #17463, 5.2.6 regression)
    Linux guests: suppress setuid and setgid in shared folders</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520078400">-  Add file "fixes_for_4.16.patch" to handle API changes in kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520596800">-  Updated the fixes for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1520683200">-  Remove version requirement on GLIBC. That was an error.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633600">-  Update so that the system will build on the new Leap 15 kernel.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521633601">-  Remove extraneouos %posttrans macros</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1521720000">- Further updates for Leap 15 kernel API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1523966400">- Add file "fixes_for_4.17.patch" to follow API changes in kernel 4.17.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524052800">- Version bump to 5.2.10 (released April 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Vulnerabilities CVE-2018-0739, CVE-2018-2830, CVE-2018-2831, CVE-2018-2835, CVE-2018-2836, CVE-2018-2837,
    CVE-2018-2842, CVE-2018-2843, CVE-2018-2844, CVE-2018-2845, and CVE-2018-2860
    VMM: Fixed missing NULL pointer check in MMIO code
    Storage: fixed having multiple NVMe controllers with ICH9 enabled (5.2.0 regression)
    Network: fixed wireless detection regression when bridging to adapters with unbound IP protocols (bug #17543)
    Audio: Fixed interrupt storm in FreeBSD guests with HDA (bug #17219)
    Keyboard: Introduced a small delay to fix old software which expects to be able to read an incoming scan code more than once (bug #17592)
    NAT: Handle nameserver 0.0.0.0 which is a valid setting (bug #17584)
    BIOS: INT 15h/87h service must disable A20 gate when done
    Linux Guest Additions: fix a hang starting KDE Plasma</changelog>
  <changelog author="mliska@suse.cz" date="1524225600">- Add "gcc8-configure.patch" to fix boo#1090367.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657600">- Update "fixes_for_4.17.patch" for some additional API changes.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524657601">- Fix typo that broke builds for kernel 4.16.</changelog>
  <changelog author="Larry.Finger@lwfinger.net" date="1524744000">- The 3rd time is the charm.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1526731200">- Version bump to 5.2.12 (released May 09 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
    Serial: fixed possible data corruption when sending data under certain circumstances
    Video recording: fixed starting / stopping recording under certain circumstances
    Linux hosts: support Linux 4.17 changes. Thank you Larry Finger
    Linux guests: support Linux 4.16 and EL 7.5 kernels (bugs #17676 and #17678)
    Linux guests: 3D fixes for recent guests (bug #17623)
    File "fixes_for_4.16.patch" is removed - fixed upstream.
- Fix build errors with Qt 5.11 - bsc#1093731.
  File "fixes_for_Qt5.11.patch" added.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530619200">- Version update to 5.2.14 (released July 02 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  User interface: fixed a segmentation fault when accessing the interface through VNC (bug #16348)
  User interface: X11: handle repeating keys on the host system correctly (bug #1296, previously fixed, 5.1.0 regression)
  VMM: Fixed emulation of the undocumented SALC instruction
  VMM: Fixed emulation of so-called "huge unreal mode" (bug #17744); this in practice only affected Intel CPUs with VT-x without unrestricted execution.
  Keyboard: The PS/2 keyboard emulation has been corrected to not queue partial scan code sequences (bug #17709); this problem was likely only visible on Linux hosts due to losing the fix for bug #1296
  Storage: Fixed CUE file support to correct REM keyword parsing (bug #17783)
  USB: Fixed a problem where the emulated xHCI device under very rare circumstances failed to report an empty isochronous transfer ring error, causing the transfers on the corresponding endpoint to stop.
  Audio: fixed Linux kernel log flooding (bug #17759)
  Apple hosts: make kernel driver load with Mac OS Mojave pre-release (bug #17805).
  Linux guests: made vboxvideo driver build with kernel 4.17 (bug #17801) and with pre-3.14 and EL 7.1 kernels (bug #17771)
  Removed "fixes_for_4.17.patch" - fixes merged upstream.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530705600">- Fix problem with files not included in any package.
  Updated USB warning (bsc#1097248)</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1530792000">- Add %{?linux_make_arch} macro to modules build.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1531915200">- Version bump to 5.2.16 (released July 17 2018 by Oracle)
  This is a maintenance release. The following items were fixed and/or added:
  OVF: case insensitive comparison of manifest attribute values, to improve compatibility (bug #17357)
  Linux: build for openSUSE 15.0 (bug #17554)
  Linux: various build fixes for distribution builds, thank you Gianfranco Costamagna
  This update fixes CVE-2018-3005, CVE-2018-3055, CVE-2018-3085, CVE-2018-3086,
  CVE-2018-3087, CVE-2018-3088, CVE-2018-3089, CVE-2018-3090, and CVE-2018-3091. bsc#1101667.</changelog>
  <changelog author="Larry.Finger@gmail.com" date="1534420800">-VirtualBox 5.2.18 (released August 14 2018)
  This is a maintenance release. The following items were fixed and/or added:
  VMM: See user manual.
  VMM: fix loading with recent binutils and self-built versions of VirtualBox (bug #17851)
  NAT: fix --nataliasmode sameports which is a valid setting (bug #13000)
  VRDP: fixed VM process termination on RDP client disconnect if 3D is enabled for the virtual machine</changelog>
  <changelog author="Larry Finger &lt;Larry.Finger@gmail.com&gt;" date="1537185600">- Fix autostart of VMs, which is no longer handled by the vboxes.service.
  A new routine "start_vms" Is added to the start section of vboxdrv.sh,
  which is called by vboxdrv.service. Files "vboxes.service", "vboxes.sh",
  and "virtualbox-sysconfig.vbox" are deleted.
  These changes are to satisfy bsc#1107769.</changelog>
</package>
<package pkgid="9be85180f8c5e70bbe0317e9d732936b0cfda2f5103cf24abfdf0b32feb3e711" name="vm-dump-metrics" arch="x86_64">
  <version epoch="0" ver="0.4" rel="lp150.2.3.1"/>
  <changelog author="jfehlig@novell.com" date="1245412800">- vhostmd is currently only used with Xen so make it
  ExclusiveArch x86 and x86_64</changelog>
  <changelog author="jfehlig@novell.com" date="1246017600">- Add metric type 'XML'</changelog>
  <changelog author="jfehlig@novell.com" date="1246017601">- Allow larger buffer for 'xml' type</changelog>
  <changelog author="jfehlig@novell.com" date="1246276800">- Validate XML returned by 'action' for metric type 'xml'
- Do not convert metrics values internally in vhostmd.  Treat
  all metric values as strings and leave it to consumers to do
  any conversion.</changelog>
  <changelog author="dmueller@suse.de" date="1253102400">- fix devel package requires</changelog>
  <changelog author="aj@suse.de" date="1254225600">- Fix devel package requires.</changelog>
  <changelog author="jfehlig@novell.com" date="1256904000">- Release of version 0.3
  - change default disk location to /dev/shm/vhostmd0
  - open metrics disk with O_DIRECT
  - Fixes for '--with{,out}-xenstore' option
  - Allow gcc to check calls to vu_log* printf-like functions
  - Always connect to libvirt read-only
  - Add '-u user' command line option to drop root privs
  - Add '-c uri' command line option to specify libvirt connection
    URI
  - Add CONNECT substitution &lt;action&gt;s
  - vm-dump-metrics: On error, exit with status code 1</changelog>
  <changelog author="jfehlig@novell.com" date="1260360000">- Release of version 0.4
  - configure.ac: Fix C compiler detection to be compatible with
    automake
  - chdir ("/") when daemonizing self</changelog>
  <changelog author="jfehlig@novell.com" date="1269950400">- Fixed vm-dump-metrics man page
  bnc#592242
  manpage.patch
- Build vhostmd without xenstore support since it is not well
  tested on SuSE distributions.  Additionally, it can be confusing
  when used in context of KVM where xenstore does not exist.
- Strip 's' (seconds) from metrics that contain a time value
  vhostmd-conf.patch
- Remove stray newline from metric values to improve XML readability
  value-newline.patch</changelog>
  <changelog author="coolo@suse.com" date="1321790400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jfehlig@suse.com" date="1386676800">- link libmetrics with libxml to fix Factory build</changelog>
  <changelog author="mlatimer@suse.com" date="1402488000">- Various updates to vmhostd.xml
  - Replace xm commands with xl commands
  - Add /sbin and /bin to &lt;path&gt;
  - Use xen_version for VirtualizationProductInfo
  vhostmd-conf.patch</changelog>
  <changelog author="mlatimer@suse.com" date="1402660800">- Further updates to vmhostd.xml
  - Support both xen and non-xen hypervisors (kvm)
  - Document reserved characters in 'action' field
  - Revert xen_version back to major/minor/extra to maintain compatability
    with xend
  - Minor syntax and legibility cleanup
  vhostmd-conf.patch
  bnc#872736</changelog>
  <changelog author="jfehlig@suse.com" date="1415016000">- Fix Factory build
  build-fix.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1415707200">- Improve build scripts
  Replace build-fix.patch with build-improvements.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1421236800">- Build vhostmd for all architectures</changelog>
  <changelog author="jfehlig@suse.com" date="1493294400">- Add systemd service file
  add-systemd-service.patch
  bsc#1036427
- Replace build-improvements.patch with
  modernize-build-files.patch sent upstream</changelog>
  <changelog author="jengelh@inai.de" date="1493467200">- Fix RPM group for libmetrics0
- Replace old RPM shell vars in %install
- Author lists do not belong into the description
- Use macros in file list to compact paths</changelog>
  <changelog author="jfehlig@suse.com" date="1525089600">- vhostmd.service: fix typo and move Documentation from [Service]
  to [Unit] section (changed add-systemd-service.patch)
  bsc#1090769</changelog>
  <changelog author="jfehlig@suse.com" date="1529928000">- Handle SIGPIPE and reconnect to libvirtd
  c7646e32-handle-sigpipe-reconnect.patch,
  03dc9982-fix-deallocation.patch
  bsc#1098804</changelog>
</package>
<package pkgid="576d411d2a3bbde55c1f196f338214db9eba1aba7695116a5c07e6d9d2e50d2c" name="vncmanager" arch="src">
  <version epoch="0" ver="1.0.2" rel="lp150.3.3.1"/>
  <changelog author="msrb@suse.com" date="1447070400">- Create package.</changelog>
  <changelog author="msrb@suse.com" date="1461758400">- n_use_port_5901.patch
  * Use port 5901 to match tigervnc's xinetd based service.</changelog>
  <changelog author="msrb@suse.com" date="1461758401">- Update to v1.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1461931200">- Change group to System/X11/Utilities.</changelog>
  <changelog author="jengelh@inai.de" date="1462449600">- %make_jobs is not defined in SLE; but we can use make %_smp_mflags
- systemd is not a hard runtime requirement (the macros support
  softfail)</changelog>
  <changelog author="msrb@suse.com" date="1463054400">- Add LICENSE file to docs.
- Expand %tmpfiles_create macro.</changelog>
  <changelog author="msrb@suse.com" date="1466078400">- Update to 1.0.1
  * Fix build with gcc 6, fix licence link in README. (bnc#985002)
- Add dependency on xorg-x11-Xvnc. (bnc#984461)
- Add n_use_with_vnc_key_wrapper.patch
  * Use with-vnc-key.sh wrapper to generate VNC key and certificate
    on first use. (bnc#982349)</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="msrb@suse.com" date="1495454400">- Update to 1.0.2
  * Fix crash when client disconnects during of TLS negotiation
  * Add geometry parameter (bnc#1038851)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- U_Add-xvnc-args-configuration-option.patch,
  n_disable_mit_shm.patch
  * Disable MIT-SHM extension in Xvnc started by vncmanager.
    (bnc#1053373)</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- U_ControllerConnection-Split-iostream-into-istream-and.patch
  * Do not try to seek on unix socket. (bnc#1076730)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- n_vncmanager-add-target-to-service.patch
  * Declare the service as part of xvnc.target so it can be used as
    dependency for xvnc-novnc.service. (bnc#1103552)</changelog>
</package>
<package pkgid="e5d9e16195c0be743ff64f0d6f0bb7d3018772487293868d3000b4dc83372d87" name="vncmanager" arch="x86_64">
  <version epoch="0" ver="1.0.2" rel="lp150.3.3.1"/>
  <changelog author="msrb@suse.com" date="1447070400">- Create package.</changelog>
  <changelog author="msrb@suse.com" date="1461758400">- n_use_port_5901.patch
  * Use port 5901 to match tigervnc's xinetd based service.</changelog>
  <changelog author="msrb@suse.com" date="1461758401">- Update to v1.0.0.</changelog>
  <changelog author="msrb@suse.com" date="1461931200">- Change group to System/X11/Utilities.</changelog>
  <changelog author="jengelh@inai.de" date="1462449600">- %make_jobs is not defined in SLE; but we can use make %_smp_mflags
- systemd is not a hard runtime requirement (the macros support
  softfail)</changelog>
  <changelog author="msrb@suse.com" date="1463054400">- Add LICENSE file to docs.
- Expand %tmpfiles_create macro.</changelog>
  <changelog author="msrb@suse.com" date="1466078400">- Update to 1.0.1
  * Fix build with gcc 6, fix licence link in README. (bnc#985002)
- Add dependency on xorg-x11-Xvnc. (bnc#984461)
- Add n_use_with_vnc_key_wrapper.patch
  * Use with-vnc-key.sh wrapper to generate VNC key and certificate
    on first use. (bnc#982349)</changelog>
  <changelog author="adam.majer@suse.de" date="1486036800">- use individual libboost-*-devel packages instead of boost-devel</changelog>
  <changelog author="msrb@suse.com" date="1495454400">- Update to 1.0.2
  * Fix crash when client disconnects during of TLS negotiation
  * Add geometry parameter (bnc#1038851)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- U_Add-xvnc-args-configuration-option.patch,
  n_disable_mit_shm.patch
  * Disable MIT-SHM extension in Xvnc started by vncmanager.
    (bnc#1053373)</changelog>
  <changelog author="msrb@suse.com" date="1518696000">- U_ControllerConnection-Split-iostream-into-istream-and.patch
  * Do not try to seek on unix socket. (bnc#1076730)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- n_vncmanager-add-target-to-service.patch
  * Declare the service as part of xvnc.target so it can be used as
    dependency for xvnc-novnc.service. (bnc#1103552)</changelog>
</package>
<package pkgid="eb677ef8f51dab7abacd8ca6381e8b4ec8ac4a6db7b3a519ecded1d374121191" name="vncmanager-controller" arch="src">
  <version epoch="0" ver="1.0.0" rel="lp150.2.3.1"/>
  <changelog author="msrb@suse.com" date="1447070400">- Create package.</changelog>
  <changelog author="msrb@suse.com" date="1453204800">- Switch to Qt5.</changelog>
  <changelog author="msrb@suse.com" date="1461931200">- Change group to System/X11/Utilities.</changelog>
  <changelog author="msrb@suse.com" date="1463054400">- U_vncmanager-fix-installation-directory-and-metadata-of-gnome-shell-extension.patch
  (bnc#979647)
- Add LICENSE file to docs.</changelog>
  <changelog author="msrb@suse.com" date="1463572800">- Improve dependencies. (bnc#980573)</changelog>
  <changelog author="msrb@suse.com" date="1531828800">- U_vncmanager-controller-Declare-gnome-shell-versions-3.10-to-3.26-as-supported.patch
  * Makes the extension load on newer gnome shell versions.
    (bnc#1102080)</changelog>
</package>
<package pkgid="4499b1c5618d319cd26d4db57c3b65132242ff2dd31eaf7b025ab04aad7a6d11" name="vncmanager-controller" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp150.2.3.1"/>
  <changelog author="msrb@suse.com" date="1447070400">- Create package.</changelog>
  <changelog author="msrb@suse.com" date="1453204800">- Switch to Qt5.</changelog>
  <changelog author="msrb@suse.com" date="1461931200">- Change group to System/X11/Utilities.</changelog>
  <changelog author="msrb@suse.com" date="1463054400">- U_vncmanager-fix-installation-directory-and-metadata-of-gnome-shell-extension.patch
  (bnc#979647)
- Add LICENSE file to docs.</changelog>
  <changelog author="msrb@suse.com" date="1463572800">- Improve dependencies. (bnc#980573)</changelog>
  <changelog author="msrb@suse.com" date="1531828800">- U_vncmanager-controller-Declare-gnome-shell-versions-3.10-to-3.26-as-supported.patch
  * Makes the extension load on newer gnome shell versions.
    (bnc#1102080)</changelog>
</package>
<package pkgid="c460d8828e47d3d1dd5080d408801a0f1774139a6c29d0735257a65cc63f8808" name="vncmanager-controller-gnome" arch="x86_64">
  <version epoch="0" ver="1.0.0" rel="lp150.2.3.1"/>
  <changelog author="msrb@suse.com" date="1447070400">- Create package.</changelog>
  <changelog author="msrb@suse.com" date="1453204800">- Switch to Qt5.</changelog>
  <changelog author="msrb@suse.com" date="1461931200">- Change group to System/X11/Utilities.</changelog>
  <changelog author="msrb@suse.com" date="1463054400">- U_vncmanager-fix-installation-directory-and-metadata-of-gnome-shell-extension.patch
  (bnc#979647)
- Add LICENSE file to docs.</changelog>
  <changelog author="msrb@suse.com" date="1463572800">- Improve dependencies. (bnc#980573)</changelog>
  <changelog author="msrb@suse.com" date="1531828800">- U_vncmanager-controller-Declare-gnome-shell-versions-3.10-to-3.26-as-supported.patch
  * Makes the extension load on newer gnome shell versions.
    (bnc#1102080)</changelog>
</package>
<package pkgid="d9fddc0e83f3d12ff7160b53a3d8d881175717f4fb60dd69efb0218de7ac2675" name="vsftpd" arch="src">
  <version epoch="0" ver="3.0.3" rel="lp150.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1429272000">- Fix hide_file option wrt bnc#927612:
  * vsftpd-path-normalize.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Fix logrotate script to not fail when vsftpd is not running,
  bnc#935279</changelog>
  <changelog author="tchvatal@suse.com" date="1441713600">- Version bump to 3.0.3:
  * Increase VSFTP_AS_LIMIT to 200MB; various reports.
  * Make the PWD response more RFC compliant; report from Barry Kelly
    &lt;barry@modeltwozero.com&gt;.
  * Remove the trailing period from EPSV response to work around BT Internet
    issues; report from Tim Bishop &lt;tdb@mirrorservice.org&gt;.
  * Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil
    &lt;mvyskocil@suse.cz&gt;. At least, syslogging seems to work on my Fedora now.
  * Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I
    probably have a different distro / libc / etc. and there are multiple reports.
  * Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle
    this case gracefully. Report from Vasily Averin &lt;vvs@odin.com&gt;.
  * List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default.
  * Make some compile-time SSL defaults (such as correct client shutdown
    handling) stricter.
  * Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms
    delays. From Tim Kosse &lt;tim.kosse@filezilla-project.org&gt;.
  * Kill the FTP session if we see HTTP protocol commands, to avoid
    cross-protocol attacks. A report from Jann Horn &lt;jann@thejh.net&gt;.
  * Kill the FTP session if we see session re-use failure. A report from
    Tim Kosse &lt;tim.kosse@filezilla-project.org&gt;.
  * Enable ECDHE, Tim Kosse &lt;tim.kosse@filezilla-project.org&gt;.
  * Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384.
  * Minor SSL logging improvements.
  * Un-default tunable_strict_ssl_write_shutdown again. We still have
    tunable_strict_ssl_read_eof defaulted now, which is the important one to prove
    upload integrity.
- Drop patch vsftpd-allow-dev-log-socket.patch should be included
  upstream, se above bullet with mvyskocil's email</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1442836800">- Brought back additional systemv support so it also builds for SLES 10 and 11</changelog>
  <changelog author="tchvatal@suse.com" date="1442836801">- Clean-up the init.d support to be bit more readable and add missing dep</changelog>
  <changelog author="jcejka@suse.com" date="1457611200">- Fix memory leaks in ls.c bnc#968138
  * Add patch vsftpd-ls-memleak.patch
  * Update patch vsftpd-path-normalize.patch
- Fix wildcard ? matching bnc#969411
  * Update patch vsftpd-2.3.4-sqb.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- Fix bnc#970982 hanging on pam_exec in pam.d
  * Add patch vsftpd-3.0.2-wnohang.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1458648000">- Fix user creation to not report error when user alredy exist
  bnc#972169</changelog>
  <changelog author="tchvatal@suse.com" date="1458734400">- Require shadow and do not output the error out of useradd</changelog>
  <changelog author="tchvatal@suse.com" date="1470398400">- Do not bother with omc xml configs, useless nowdays</changelog>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Extend vsftpd-2.0.4-lib64.diff to also find libcap.so.* in
  /usr/lib64.</changelog>
  <changelog author="psimons@suse.com" date="1474286400">- Add vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd
  where files uploaded by an anonymous user could not be chown()ed
  to the desired UID as specified in the daemon's configuration
  file. [bnc#996370]</changelog>
  <changelog author="kukuk@suse.de" date="1493726400">- Adjust to new system user/group RPMs</changelog>
  <changelog author="psimons@suse.com" date="1496232000">- Explicitly depend on OpenSSL version 1.0.x since vsftpd doesn't
  compile against the API provided by newer versions.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Fix build against OpenSSL 1.1. Remove lock on 1.0.x libs
  adds vsftpd-3.0.3-build-with-openssl-1.1.patch
  (bsc#1042673)</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Conditionally install xinetd service only on older releases
  * On current distributions we support the same functionality
    via systemd socket activation</changelog>
  <changelog author="psimons@suse.com" date="1504785600">- Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that
  would cause SSL protocol errors, aborting the connection, whenever
  system errors occurred that were supposed to be non-fatal.
  [bsc#1044292]
- Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with
  various ftp clients that arose when vsftpd is configured with
  option "use_localtime=YES". Basically, it's fine to use local time
  stamps in directory listings, but responding to MDTM commands with
  any time zone other than UTC directly violates RFC3659 and leads
  FTP clients to misinterpret the file's time stamp. [bsc#1024961]
- Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to
  append to a file system pipe. [bsc#1048427]
- Add "vsftpd-3.0.3-address_space_limit.patch" to create the new
  configuration option "address_space_limit", which determines the
  memory limit vsftpd configures for its own process (given in
  bytes). The previously hard-coded limit (100 MB) may not be
  sufficient for vsftpd servers running with certain PAM modules
  enabled, and in such cases administrators may wish to raise the
  limit to match their system's requirements. [bsc#1042137]
- Don't rely on the vsf_findlibs.sh script to figure out the list
  of libraries the build needs to link. The script is wildly
  unreliable and it's hard to predict what results it will produce.
  Also, the results it *does* produce are invisble in the build
  log. We stumbled across this issue when vsftpd suddendly had
  build failures on i586 platforms because the script decided to
  try and link "-lnsl" even though the library was neither
  installed nor required.
- Drop the explicit specification of the LDFLAGS and LINK variables
  from the call to make. The value of LDFLAGS we passed is the
  default anyway and giving LINK has no effect since it's not used
  anywhere in the Makefile.</changelog>
  <changelog author="tchvatal@suse.com" date="1513166400">- Make sure to also require group nobody and user ftp bsc#1070653</changelog>
  <changelog author="vcizek@suse.com" date="1522756800">- Add firewalld service file (bsc#1083705)</changelog>
  <changelog author="psimons@suse.com" date="1524657600">- vsftpd-enable-syscalls-needed-by-sle15.patch: Enable wait4(),
  sysinfo(), and shutdown() syscalls in seccomp sandbox. These are
  required for the daemon to work properly on SLE-15. [bsc#1089088]</changelog>
</package>
<package pkgid="ff1bb793a01f22251725dbf1639aa01071ea6bbb894723a6e3f843ba9c361e0d" name="vsftpd" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="lp150.5.3.1"/>
  <changelog author="tchvatal@suse.com" date="1429272000">- Fix hide_file option wrt bnc#927612:
  * vsftpd-path-normalize.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1435060800">- Fix logrotate script to not fail when vsftpd is not running,
  bnc#935279</changelog>
  <changelog author="tchvatal@suse.com" date="1441713600">- Version bump to 3.0.3:
  * Increase VSFTP_AS_LIMIT to 200MB; various reports.
  * Make the PWD response more RFC compliant; report from Barry Kelly
    &lt;barry@modeltwozero.com&gt;.
  * Remove the trailing period from EPSV response to work around BT Internet
    issues; report from Tim Bishop &lt;tdb@mirrorservice.org&gt;.
  * Fix syslog_enable issues vs. seccomp filtering. Report from Michal Vyskocil
    &lt;mvyskocil@suse.cz&gt;. At least, syslogging seems to work on my Fedora now.
  * Allow gettimeofday() in the seccomp sandbox. I can't repro failures, but I
    probably have a different distro / libc / etc. and there are multiple reports.
  * Some kernels support PR_SET_NO_NEW_PRIVS but not PR_SET_SECCOMP, so handle
    this case gracefully. Report from Vasily Averin &lt;vvs@odin.com&gt;.
  * List the TLS1.2 cipher AES128-GCM-SHA256 as first preference by default.
  * Make some compile-time SSL defaults (such as correct client shutdown
    handling) stricter.
  * Disable Nagle algorithm during SSL data connection shutdown, to avoid 200ms
    delays. From Tim Kosse &lt;tim.kosse@filezilla-project.org&gt;.
  * Kill the FTP session if we see HTTP protocol commands, to avoid
    cross-protocol attacks. A report from Jann Horn &lt;jann@thejh.net&gt;.
  * Kill the FTP session if we see session re-use failure. A report from
    Tim Kosse &lt;tim.kosse@filezilla-project.org&gt;.
  * Enable ECDHE, Tim Kosse &lt;tim.kosse@filezilla-project.org&gt;.
  * Default cipher list is now just ECDHE-RSA-AES256-GCM-SHA384.
  * Minor SSL logging improvements.
  * Un-default tunable_strict_ssl_write_shutdown again. We still have
    tunable_strict_ssl_read_eof defaulted now, which is the important one to prove
    upload integrity.
- Drop patch vsftpd-allow-dev-log-socket.patch should be included
  upstream, se above bullet with mvyskocil's email</changelog>
  <changelog author="joop.boonen@opensuse.org" date="1442836800">- Brought back additional systemv support so it also builds for SLES 10 and 11</changelog>
  <changelog author="tchvatal@suse.com" date="1442836801">- Clean-up the init.d support to be bit more readable and add missing dep</changelog>
  <changelog author="jcejka@suse.com" date="1457611200">- Fix memory leaks in ls.c bnc#968138
  * Add patch vsftpd-ls-memleak.patch
  * Update patch vsftpd-path-normalize.patch
- Fix wildcard ? matching bnc#969411
  * Update patch vsftpd-2.3.4-sqb.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- Fix bnc#970982 hanging on pam_exec in pam.d
  * Add patch vsftpd-3.0.2-wnohang.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1458648000">- Fix user creation to not report error when user alredy exist
  bnc#972169</changelog>
  <changelog author="tchvatal@suse.com" date="1458734400">- Require shadow and do not output the error out of useradd</changelog>
  <changelog author="tchvatal@suse.com" date="1470398400">- Do not bother with omc xml configs, useless nowdays</changelog>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Extend vsftpd-2.0.4-lib64.diff to also find libcap.so.* in
  /usr/lib64.</changelog>
  <changelog author="psimons@suse.com" date="1474286400">- Add vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd
  where files uploaded by an anonymous user could not be chown()ed
  to the desired UID as specified in the daemon's configuration
  file. [bnc#996370]</changelog>
  <changelog author="kukuk@suse.de" date="1493726400">- Adjust to new system user/group RPMs</changelog>
  <changelog author="psimons@suse.com" date="1496232000">- Explicitly depend on OpenSSL version 1.0.x since vsftpd doesn't
  compile against the API provided by newer versions.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Fix build against OpenSSL 1.1. Remove lock on 1.0.x libs
  adds vsftpd-3.0.3-build-with-openssl-1.1.patch
  (bsc#1042673)</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Conditionally install xinetd service only on older releases
  * On current distributions we support the same functionality
    via systemd socket activation</changelog>
  <changelog author="psimons@suse.com" date="1504785600">- Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that
  would cause SSL protocol errors, aborting the connection, whenever
  system errors occurred that were supposed to be non-fatal.
  [bsc#1044292]
- Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with
  various ftp clients that arose when vsftpd is configured with
  option "use_localtime=YES". Basically, it's fine to use local time
  stamps in directory listings, but responding to MDTM commands with
  any time zone other than UTC directly violates RFC3659 and leads
  FTP clients to misinterpret the file's time stamp. [bsc#1024961]
- Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to
  append to a file system pipe. [bsc#1048427]
- Add "vsftpd-3.0.3-address_space_limit.patch" to create the new
  configuration option "address_space_limit", which determines the
  memory limit vsftpd configures for its own process (given in
  bytes). The previously hard-coded limit (100 MB) may not be
  sufficient for vsftpd servers running with certain PAM modules
  enabled, and in such cases administrators may wish to raise the
  limit to match their system's requirements. [bsc#1042137]
- Don't rely on the vsf_findlibs.sh script to figure out the list
  of libraries the build needs to link. The script is wildly
  unreliable and it's hard to predict what results it will produce.
  Also, the results it *does* produce are invisble in the build
  log. We stumbled across this issue when vsftpd suddendly had
  build failures on i586 platforms because the script decided to
  try and link "-lnsl" even though the library was neither
  installed nor required.
- Drop the explicit specification of the LDFLAGS and LINK variables
  from the call to make. The value of LDFLAGS we passed is the
  default anyway and giving LINK has no effect since it's not used
  anywhere in the Makefile.</changelog>
  <changelog author="tchvatal@suse.com" date="1513166400">- Make sure to also require group nobody and user ftp bsc#1070653</changelog>
  <changelog author="vcizek@suse.com" date="1522756800">- Add firewalld service file (bsc#1083705)</changelog>
  <changelog author="psimons@suse.com" date="1524657600">- vsftpd-enable-syscalls-needed-by-sle15.patch: Enable wait4(),
  sysinfo(), and shutdown() syscalls in seccomp sandbox. These are
  required for the daemon to work properly on SLE-15. [bsc#1089088]</changelog>
</package>
<package pkgid="2788bf1831b8d96d072cce21da2311619be66a795f0cbe3104edb8d651ecacc6" name="vsftpd" arch="src">
  <version epoch="0" ver="3.0.3" rel="lp150.5.6.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1442836800">- Brought back additional systemv support so it also builds for SLES 10 and 11</changelog>
  <changelog author="tchvatal@suse.com" date="1442836801">- Clean-up the init.d support to be bit more readable and add missing dep</changelog>
  <changelog author="jcejka@suse.com" date="1457611200">- Fix memory leaks in ls.c bnc#968138
  * Add patch vsftpd-ls-memleak.patch
  * Update patch vsftpd-path-normalize.patch
- Fix wildcard ? matching bnc#969411
  * Update patch vsftpd-2.3.4-sqb.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- Fix bnc#970982 hanging on pam_exec in pam.d
  * Add patch vsftpd-3.0.2-wnohang.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1458648000">- Fix user creation to not report error when user alredy exist
  bnc#972169</changelog>
  <changelog author="tchvatal@suse.com" date="1458734400">- Require shadow and do not output the error out of useradd</changelog>
  <changelog author="tchvatal@suse.com" date="1470398400">- Do not bother with omc xml configs, useless nowdays</changelog>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Extend vsftpd-2.0.4-lib64.diff to also find libcap.so.* in
  /usr/lib64.</changelog>
  <changelog author="psimons@suse.com" date="1474286400">- Add vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd
  where files uploaded by an anonymous user could not be chown()ed
  to the desired UID as specified in the daemon's configuration
  file. [bnc#996370]</changelog>
  <changelog author="kukuk@suse.de" date="1493726400">- Adjust to new system user/group RPMs</changelog>
  <changelog author="psimons@suse.com" date="1496232000">- Explicitly depend on OpenSSL version 1.0.x since vsftpd doesn't
  compile against the API provided by newer versions.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Fix build against OpenSSL 1.1. Remove lock on 1.0.x libs
  adds vsftpd-3.0.3-build-with-openssl-1.1.patch
  (bsc#1042673)</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Conditionally install xinetd service only on older releases
  * On current distributions we support the same functionality
    via systemd socket activation</changelog>
  <changelog author="psimons@suse.com" date="1504785600">- Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that
  would cause SSL protocol errors, aborting the connection, whenever
  system errors occurred that were supposed to be non-fatal.
  [bsc#1044292]
- Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with
  various ftp clients that arose when vsftpd is configured with
  option "use_localtime=YES". Basically, it's fine to use local time
  stamps in directory listings, but responding to MDTM commands with
  any time zone other than UTC directly violates RFC3659 and leads
  FTP clients to misinterpret the file's time stamp. [bsc#1024961]
- Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to
  append to a file system pipe. [bsc#1048427]
- Add "vsftpd-3.0.3-address_space_limit.patch" to create the new
  configuration option "address_space_limit", which determines the
  memory limit vsftpd configures for its own process (given in
  bytes). The previously hard-coded limit (100 MB) may not be
  sufficient for vsftpd servers running with certain PAM modules
  enabled, and in such cases administrators may wish to raise the
  limit to match their system's requirements. [bsc#1042137]
- Don't rely on the vsf_findlibs.sh script to figure out the list
  of libraries the build needs to link. The script is wildly
  unreliable and it's hard to predict what results it will produce.
  Also, the results it *does* produce are invisble in the build
  log. We stumbled across this issue when vsftpd suddendly had
  build failures on i586 platforms because the script decided to
  try and link "-lnsl" even though the library was neither
  installed nor required.
- Drop the explicit specification of the LDFLAGS and LINK variables
  from the call to make. The value of LDFLAGS we passed is the
  default anyway and giving LINK has no effect since it's not used
  anywhere in the Makefile.</changelog>
  <changelog author="tchvatal@suse.com" date="1513166400">- Make sure to also require group nobody and user ftp bsc#1070653</changelog>
  <changelog author="vcizek@suse.com" date="1522756800">- Add firewalld service file (bsc#1083705)</changelog>
  <changelog author="psimons@suse.com" date="1524657600">- vsftpd-enable-syscalls-needed-by-sle15.patch: Enable wait4(),
  sysinfo(), and shutdown() syscalls in seccomp sandbox. These are
  required for the daemon to work properly on SLE-15. [bsc#1089088]</changelog>
  <changelog author="psimons@suse.com" date="1526472000">- Don't start/stop parameterized systemd units in pre/post actions.
  These units cannot be used without an explicit parameter and
  attempts to do so lead to a confusing "failed to try-restart"
  error message. [bsc#1093179, bsc#1010177]</changelog>
  <changelog author="psimons@suse.com" date="1529582400">- Apply "vsftpd-support-dsa-only-setups.patch" to disable the
  problematic default setting for rsa_cert_file. Upstream
  initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and
  vsftpd won't start up if that file does not exist (or if it does
  not contain an RSA certificate). Therefore, users who copy a DSA
  certificate into that location or properly configure a DSA
  certificate via dsa_cert_file without explicitly disabling the
  RSA certificate won't be able to start vsftpd. [bsc#975538]</changelog>
  <changelog author="psimons@suse.com" date="1530187200">- Extend "vsftpd-3.0.3-address_space_limit.patch" to mention the
  new 'address_space_limit' option in the installed vsftpd.conf(5)
  man page. [bsc#1075060]</changelog>
</package>
<package pkgid="3dc6b2beabe6568610c4c30333e27ff5906d7acdfb9fda6ebd222aca1acc4549" name="vsftpd" arch="x86_64">
  <version epoch="0" ver="3.0.3" rel="lp150.5.6.1"/>
  <changelog author="joop.boonen@opensuse.org" date="1442836800">- Brought back additional systemv support so it also builds for SLES 10 and 11</changelog>
  <changelog author="tchvatal@suse.com" date="1442836801">- Clean-up the init.d support to be bit more readable and add missing dep</changelog>
  <changelog author="jcejka@suse.com" date="1457611200">- Fix memory leaks in ls.c bnc#968138
  * Add patch vsftpd-ls-memleak.patch
  * Update patch vsftpd-path-normalize.patch
- Fix wildcard ? matching bnc#969411
  * Update patch vsftpd-2.3.4-sqb.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1458561600">- Fix bnc#970982 hanging on pam_exec in pam.d
  * Add patch vsftpd-3.0.2-wnohang.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1458648000">- Fix user creation to not report error when user alredy exist
  bnc#972169</changelog>
  <changelog author="tchvatal@suse.com" date="1458734400">- Require shadow and do not output the error out of useradd</changelog>
  <changelog author="tchvatal@suse.com" date="1470398400">- Do not bother with omc xml configs, useless nowdays</changelog>
  <changelog author="dimstar@opensuse.org" date="1472644800">- Extend vsftpd-2.0.4-lib64.diff to also find libcap.so.* in
  /usr/lib64.</changelog>
  <changelog author="psimons@suse.com" date="1474286400">- Add vsftpd-3.0.2-fix-chown-uploads.patch to fix a bug in vsftpd
  where files uploaded by an anonymous user could not be chown()ed
  to the desired UID as specified in the daemon's configuration
  file. [bnc#996370]</changelog>
  <changelog author="kukuk@suse.de" date="1493726400">- Adjust to new system user/group RPMs</changelog>
  <changelog author="psimons@suse.com" date="1496232000">- Explicitly depend on OpenSSL version 1.0.x since vsftpd doesn't
  compile against the API provided by newer versions.</changelog>
  <changelog author="daniel.molkentin@suse.com" date="1497268800">- Fix build against OpenSSL 1.1. Remove lock on 1.0.x libs
  adds vsftpd-3.0.3-build-with-openssl-1.1.patch
  (bsc#1042673)</changelog>
  <changelog author="tchvatal@suse.com" date="1497441600">- Conditionally install xinetd service only on older releases
  * On current distributions we support the same functionality
    via systemd socket activation</changelog>
  <changelog author="psimons@suse.com" date="1504785600">- Add "vsftpd-die-with-session.patch" to fix a bug in vsftpd that
  would cause SSL protocol errors, aborting the connection, whenever
  system errors occurred that were supposed to be non-fatal.
  [bsc#1044292]
- Add "vsftpd-mdtm-in-utc.patch" to fix interoperability issue with
  various ftp clients that arose when vsftpd is configured with
  option "use_localtime=YES". Basically, it's fine to use local time
  stamps in directory listings, but responding to MDTM commands with
  any time zone other than UTC directly violates RFC3659 and leads
  FTP clients to misinterpret the file's time stamp. [bsc#1024961]
- Add "vsftpd-append-seek-pipe.patch" to allow the FTP server to
  append to a file system pipe. [bsc#1048427]
- Add "vsftpd-3.0.3-address_space_limit.patch" to create the new
  configuration option "address_space_limit", which determines the
  memory limit vsftpd configures for its own process (given in
  bytes). The previously hard-coded limit (100 MB) may not be
  sufficient for vsftpd servers running with certain PAM modules
  enabled, and in such cases administrators may wish to raise the
  limit to match their system's requirements. [bsc#1042137]
- Don't rely on the vsf_findlibs.sh script to figure out the list
  of libraries the build needs to link. The script is wildly
  unreliable and it's hard to predict what results it will produce.
  Also, the results it *does* produce are invisble in the build
  log. We stumbled across this issue when vsftpd suddendly had
  build failures on i586 platforms because the script decided to
  try and link "-lnsl" even though the library was neither
  installed nor required.
- Drop the explicit specification of the LDFLAGS and LINK variables
  from the call to make. The value of LDFLAGS we passed is the
  default anyway and giving LINK has no effect since it's not used
  anywhere in the Makefile.</changelog>
  <changelog author="tchvatal@suse.com" date="1513166400">- Make sure to also require group nobody and user ftp bsc#1070653</changelog>
  <changelog author="vcizek@suse.com" date="1522756800">- Add firewalld service file (bsc#1083705)</changelog>
  <changelog author="psimons@suse.com" date="1524657600">- vsftpd-enable-syscalls-needed-by-sle15.patch: Enable wait4(),
  sysinfo(), and shutdown() syscalls in seccomp sandbox. These are
  required for the daemon to work properly on SLE-15. [bsc#1089088]</changelog>
  <changelog author="psimons@suse.com" date="1526472000">- Don't start/stop parameterized systemd units in pre/post actions.
  These units cannot be used without an explicit parameter and
  attempts to do so lead to a confusing "failed to try-restart"
  error message. [bsc#1093179, bsc#1010177]</changelog>
  <changelog author="psimons@suse.com" date="1529582400">- Apply "vsftpd-support-dsa-only-setups.patch" to disable the
  problematic default setting for rsa_cert_file. Upstream
  initializes that value to "/usr/share/ssl/certs/vsftpd.pem" and
  vsftpd won't start up if that file does not exist (or if it does
  not contain an RSA certificate). Therefore, users who copy a DSA
  certificate into that location or properly configure a DSA
  certificate via dsa_cert_file without explicitly disabling the
  RSA certificate won't be able to start vsftpd. [bsc#975538]</changelog>
  <changelog author="psimons@suse.com" date="1530187200">- Extend "vsftpd-3.0.3-address_space_limit.patch" to mention the
  new 'address_space_limit' option in the installed vsftpd.conf(5)
  man page. [bsc#1075060]</changelog>
</package>
<package pkgid="421a57c5bbf93283bf55b39471e4edfe76f9bac4619d0a5b6d6a267b6726c6a6" name="webkit-jsc-4" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="e10670012e941a8824b942a81c71c42887316925b8faa9c9f497b4a4a7649f62" name="webkit-jsc-4" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="d7606f3e5d0ab14afb7dc071da4aac8fc0838a7ac39e11d7d6032eacf2eb981f" name="webkit2gtk-4_0-injected-bundles" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="9dc746494453e5e7b462c1fc5f4a081949cacb1f766dfba7083f4fedf098b6c3" name="webkit2gtk-4_0-injected-bundles" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="0bb0b189e27317cbaea49680dcfb33fb8649b427c2ac331bd29b3997e9a97f11" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="ddc420194edd2d4668210835865f0b45ea8e98657aba6848cd6f8ed9eed15acc" name="webkit2gtk3" arch="src">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="da7e62989fc947c916586edef2786f80167dd33454d7ddb2ec43d0980136b014" name="webkit2gtk3-devel" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="4a3a81d0d676d182ba45f56da7ecf5a96baa3f74d6870858de5578173de4d370" name="webkit2gtk3-devel" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="15c428c9ce18d2e2e1477c37ad469f1eb13811f0b8ec94d5c858658494ca254c" name="webkit2gtk3-plugin-process-gtk2" arch="x86_64">
  <version epoch="0" ver="2.20.3" rel="lp150.2.3.1"/>
  <changelog author="ro@suse.de" date="1517313600">- even on recent codestreams there is no binutils gold on s390
  only on s390x.</changelog>
  <changelog author="dimstar@opensuse.org" date="1519905600">- Add missing dependencies from the -devel package to the build
  typelib-1_0-*: just like libraries, a consumer of the devel
  package can assume the typelibs to be present:
  + typelib-1_0-WebKit2-%{_sonameverpkg}.
  + typelib-1_0-WebKit2WebExtension-%{_sonameverpkg}.</changelog>
  <changelog author="fcrozat@suse.com" date="1519992000">- Add webkit2gtk3-fix-wayland-crash.patch: fix crash when using
  Wayland with QXL/virtio (bsc#1079512, webkit#182490).</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
</package>
<package pkgid="358938e0d33d3e86a28cec6ba0f4107e999b69ae768749b319cc9249e2d6bd85" name="webkit2gtk3-plugin-process-gtk2" arch="x86_64">
  <version epoch="0" ver="2.20.5" rel="lp150.2.6.1"/>
  <changelog author="dimstar@opensuse.org" date="1520251200">- Update to version 2.19.1:
  + Add initial resource load statistics support.
  + Add API to expose availability of certain editing commands in
    WebKitEditorState.
  + Add API to query whether a WebKitNavigationAction is a redirect
    or not.
  + Improve complex text rendering.
  + Add support for the "system" CSS font family.
  + Implement low power mode.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-no-return-in-nonvoid.patch: fixed upstream.
- Add pkgconfig(libbrotlidec) and pkgconfig(upower-glib)
  BuildRequires: new dependencies.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251201">- Allow OBS service to verify the tarball signature:
  + Add webkit2gtk3.keyring: Carlos Garcia Campos' public key.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251202">- Update to version 2.19.3:
  + Fix web process crash at startup in bmalloc.
  + Fix several memory leaks in GStreamer media backend.
  + WebKitWebDriver process no longer links to
    libjavascriptcoregtk.
  - Fix several crashes and rendering issues.
- Changes from version 2.19.2:
  + Add new API to add, retrieve and delete cookies via
    WebKitCookieManager.
  + Add functions to WebSettings to convert font sizes between
    points and pixels.
  + Ensure cookie operations take effect when they happen before a
    web process has been spawned.
  + Automatically adjust font size when GtkSettings:gtk-xft-dpi
    changes.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251203">- Apply -DUSE_SYSTEM_MALLOC=ON unconditionally in all builds
  (bmalloc seems to be exhausting memory on run time).</changelog>
  <changelog author="zaitor@opensuse.org" date="1520251204">- Update to version 2.19.5:
  + This is a follow up release to export
    webkit_dom_dom_window_webkit_message_handlers_post_message()
    symbol that was hidden in 2.19.4 by mistake.
- Changes from version 2.19.4:
  + Add web process API to detect when form is submitted via
    JavaScript.
  + Add new API to replace
    webkit_form_submission_request_get_text_fields() that is now
    deprecated.
  + Add WebKitWebView::web-process-terminated signal and deprecate
    web-process-crashed.
  + Fix rendering issues when editing text areas.
  + Use FastMalloc based GstAllocator for GStreamer.
  + Fix several crashes and rendering issues.
  + Updated translations.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251205">- Update to version 2.19.6:
  + Fix crashes due to duplicated symbols in libjavascriptcoregtk
    and libwebkit2gtk.
  + Fix parsing of timeout values in WebDriver.
  + Implement get timeouts command in WebDriver.
  + Fix deadlock in GStreamer video sink during shutdown when
    accelerated compositing is disabled.
  + Fix several crashes and rendering issues.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251206">- Update to version 2.19.90:
  + WebSockets use system proxy settings now (requires libsoup
    2.61.90).
  + Show the context menu on long-press gesture.
  + Add support for Shift + mouse scroll to scroll horizontally.
  + Fix zoom gesture to actually zoom instead of changing the page
    scale.
  + Implement support for Graphics ARIA roles.
  + Make sleep inhibitors work under Flatpak.
  + Add get element CSS value command to WebDriver.
  + Fix a crash aftter a swipe gesture.
  + Fix several crashes and rendering issues.
- Drop webkit2gtk3-fix-wayland-crash.patch: fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520251207">- Update to version 2.19.91:
  + Add ENABLE_ADDRESS_SANITIZER to make it easier to build with
    asan support.
  + Fix a crash a under Wayland when using mesa software
    rasterization.
  + Make fullscreen video work again.
  + Fix handling of missing GStreamer elements.
  + Fix rendering when webm video is played twice.
  + Fix kinetic scrolling sometimes jumping around.
  + Fix build with ICU configured without collation support.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Do a minor spec cleanup.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520251208">- Modernize spec-file by calling spec-cleaner</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1520337600">- Update to version 2.19.92:
  + Ensure DNS prefetching cannot be re-enabled if disabled by
    settings.
  + Fix seek sometimes not working.
  + Fix rendering of emojis that were using the wrong scale factor
    in some cases.
  + Fix rendering of combining enclosed keycap.
  + Fix rendering scale of some layers in HiDPI.
  + Fix a crash in Wayland when closing the web view.
  + Fix crashes upower crashes when running inside a chroot or on
    systems with broken dbus/upower.
  + Fix memory leaks in GStreamer media backend when using
    GStreamer 1.14.
  + Fix the build with Enchant 2.x.
  + Fix several crashes and rendering issues.
  + Updated translations.
- Replace pkgconfig(enchant) with enchant-devel BuildRequires:
  Allow webkit2gtk3 to build with whatever enchant is available in
  target distro.</changelog>
  <changelog author="mgorse@suse.com" date="1520337601">- Add webkit2gtk3-python3.patch: port to python 3 (bsc#1079812,
  webkit#156674).
- Add conditional to optionally require python3, rather than
  python2 + python-xml, and adjust %build to use python3.</changelog>
  <changelog author="dimstar@opensuse.org" date="1520856000">- Update to version 2.20.0 (boo#1088182 boo#1096060):
  + New API to retrieve and delete cookies with
    WebKitCookieManager.
  + New web process API to detect when form is submitted via
    JavaScript.
  + Several improvements and fixes in the touch/gestures support.
  + Support for the ?system? CSS font family.
  + Complex text rendering improvements and fixes.
  + Added a low power mode.
  + More complete and spec compliant WebDriver implementation.
  + Security fixes: CVE-2018-4101, CVE-2018-4113, CVE-2018-4114,
    CVE-2018-4117, CVE-2018-4118, CVE-2018-4119,
    CVE-2018-4120, CVE-2018-4122, CVE-2018-4125,
    CVE-2018-4127, CVE-2018-4128, CVE-2018-4129,
    CVE-2018-4133, CVE-2018-4146, CVE-2018-4161,
    CVE-2018-4162, CVE-2018-4163, CVE-2018-4165, CVE-2018-11713.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1523361600">- Update to version 2.20.1:
  + Improve error message when Gigacage cannot allocate virtual
    memory.
  + Add missing WebKitWebProcessEnumTypes.h to
    webkit-web-extension.h.
  + Improve web process memory monitor thresholds.
  + Fix a web process crash when the web view is created and
    destroyed quickly.
  + Fix a network process crash when load is cancelled while
    searching for stored HTTP auth credentials.
  + Fix the build when ENABLE_VIDEO, ENABLE_WEB_AUDIO and
    ENABLE_XSLT are disabled.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4204.
  + Updated translations.</changelog>
  <changelog author="mgorse@suse.com" date="1523448000">- Add webkit2gtk3-boo1088932-a11y-state-set.patch: fix crash when
  atk_object_ref_state_set is called on an AtkObject that's being
  destroyed (boo#1088932 webkit#184366).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1525694400">- Update to version 2.20.2:
  + Do TLS error checking on GTlsConnection::accept-certificate to
    finish the load earlier in case of errors.
  + Properly close the connection to the nested wayland compositor
    in the Web Process.
  + Avoid painting backing stores for zero-opacity layers.
  + Fix downloads started by context menu failing in some websites
    due to missing user agent HTTP header.
  + Fix video unpause when GStreamerGL is disabled.
  + Fix several GObject introspection annotations.
  + Update user agent quiks to fix Outlook.com and Chase.com.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4200 (boo#1092280), CVE-2018-11712
    (boo#1096061).</changelog>
  <changelog author="schwab@suse.de" date="1525780800">- Disable JIT on riscv64</changelog>
  <changelog author="mgorse@suse.com" date="1528891200">- Update to version 2.20.3 (boo#1095611 boo#1097693):
  + Fix installation directory of API documentation.
  + Disable Gigacage if mmap fails to allocate in Linux.
  + Add user agent quirk for paypal website.
  + Properly detect compiler flags, needed libs, and fallbacks for
    usage of 64-bit atomic operations.
  + Fix a network process crash when trying to get cookies of
    about:blank page.
  + Fix UI process crash when closing the window under Wayland.
  + Fix several crashes and rendering issues.
  + Security fixes: CVE-2018-4190, CVE-2018-4199, CVE-2018-4218,
    CVE-2018-4222, CVE-2018-4232, CVE-2018-4233, CVE-2018-4246,
    CVE-2018-11646.</changelog>
  <changelog author="mgorse@suse.com" date="1532088000">- Add webkit2gtk3-boo1101999-off-by-one.patch: fix off-by-one in
  xdg_mime_get_simple_globs (boo#1101999 CVE-2018-12911).</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1533643200">- Update to version 2.20.4 (boo#1104169):
  + Fix a crash when leaving accelerated compositing mode.
  + Fix non-deterministic build failure due to missing
    JavaScriptCore/JSContextRef.h.
  + Security fixes: CVE-2018-4261, CVE-2018-4262, CVE-2018-4263,
    CVE-2018-4264, CVE-2018-4265, CVE-2018-4266, CVE-2018-4267,
    CVE-2018-4270, CVE-2018-4272, CVE-2018-4273, CVE-2018-4278,
    CVE-2018-4284.
- Drop webkit2gtk3-boo1101999-off-by-one.patch: Fixed upstream.</changelog>
  <changelog author="bjorn.lie@gmail.com" date="1534161600">- Update to version 2.20.5:
  + Fix rendering artifacts in some web sites due to a bug
    introduced in 2.20.4.</changelog>
</package>
<package pkgid="c19a92cb23db07cafa36320ef99d7301ea86735ae3b2f19eda053aea85627c4f" name="wireless-regdb" arch="noarch">
  <version epoch="0" ver="2018.05.09" rel="lp150.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1342008000">- license update: ISC
  The license in the LICENSE file is ISC, not MIT
  (http://www.spdx.org/licenses/ISC)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356955200">- Update database to the most recent 2012.06.08</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls
- Cleanup spec file
- Update database to the most recent 2013.02.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385208000">- update to 2013.10.11
- remove bogus Requires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385553600">- version 2013.10.11 upstream tarballs were incorrectly generated
  and contained an invalid regulatory database, update to version
  2013.11.27 in which the problem has been corrected.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410091200">- Update to 2014.06.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- Update 2014.10.07</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Update to 2015.01.30:
  * Add 60GHz regulatory rules for Russia (RU)
  * Add 60GHz regulatory rules for Japan (JP)
  * update BG rules for 5725 - 5875 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 2015.07.20:
  * update CA rules for 5600 - 5650 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 2015.09.25:
  * Add ETSI as the DFS region for Hong Kong</changelog>
  <changelog author="mpluskal@suse.com" date="1444996800">- Update to 2015.10.13:
  * Update regulatory rules for Malaysia (MY)	?Jouni Malinen	1	-3/+4
  * Add VHT channel bandwidth for Ukraine (UA)	?Jouni Malinen	1	-2/+3
  * Add VHT channel bandwidth for Russia (RU)	?Jouni Malinen	1	-4/+4
  * Update regulatory rules for Uruguay (UY)	?Jouni Malinen	1	-3/+2
  * Update 5 GHz rules for Taiwan (TW) to follow US	?Chen-Yu Tsai	1	-2/+2
  * Add U-NII-1 (5150 ~ 5250 MHz) band for Taiwan (TW)	?Chen-Yu Tsai	1	-1/+3
  * Update 5GHz rules for US	?Chen-Yu Tsai	1	-1/+2
  * Update regulatory rule boundary frequencies for Taiwan (TW)	?Chen-Yu Tsai	1	-3/+3
  * Update U-NII-2c (5470 ~ 5725 MHz) rules for Taiwan (TW)	?Chen-Yu Tsai	1	-2/+8
  * Update ZA rules for 5490-5710 MHz</changelog>
  <changelog author="mpluskal@suse.com" date="1447329600">- Update to 2015.10.22:
  * Update regulatory rules for Croatia (HR)
  * Add 160 MHz channel bandwidth for Greenland (GL)</changelog>
  <changelog author="mpluskal@suse.com" date="1450785600">- Update to 2015.12.14:
  * fix world regdomain
  * Update regulatory rules for Finland (FI)</changelog>
  <changelog author="mpluskal@suse.com" date="1455019200">- Update to 2016.02.08:
  * add 2.4GHz regulatory rules for Cuba (CU)</changelog>
  <changelog author="afaerber@suse.de" date="1455364800">- Explicitly require xz, fixing tar errors for SLE11 builds
- Work around a mismatch of lib vs. lib64 on SLE11 x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 2016.05.02:
  * wireless-regdb: Update regulatory references for Germany (DE)
  * Update the regulatory rules for Bulgaria (BG)
  * Update regulatory rules for NL as per ETSI EN 300 440-1
  * wireless-regdb: Update regulatory rules for Germany (DE) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to 2016.06.10:
  * Republic of Korea: Add 60GHz regulatory rules</changelog>
  <changelog author="mpluskal@suse.com" date="1489838400">- Update to 2017.03.07 (boo#1030085):
  * Update rules for Australia (AU) and add 60GHz rules
  * Update 5 GHz rules for Canada
  * Remove DFS requirement for India (IN)</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 2017.12.23 (boo#1074838):
  * update regulatory database based on preceding changes
  * Document regulatory.db in the manual page
  * Install regulatory.db and regulatory.db.p7s to /lib/firmware
  * Better support for generating public certificates
  * Add sforshee's x509 certificate
  * Restore generation of old format database files
  * regdb: write firmware file format (version code 20)</changelog>
  <changelog author="mpluskal@suse.com" date="1527768000">- Update to version 2018.05.09 (boo#1095397):
  * Updated regulatory database for France and Panama
  * Fixes in python3 scripts</changelog>
</package>
<package pkgid="02dd58066632bb53ba6d38840146b403a92cd44864c8ce54619a3fef512ce260" name="wireless-regdb" arch="src">
  <version epoch="0" ver="2018.05.09" rel="lp150.2.3.1"/>
  <changelog author="cfarrell@suse.com" date="1342008000">- license update: ISC
  The license in the LICENSE file is ISC, not MIT
  (http://www.spdx.org/licenses/ISC)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1356955200">- Update database to the most recent 2012.06.08</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls
- Cleanup spec file
- Update database to the most recent 2013.02.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385208000">- update to 2013.10.11
- remove bogus Requires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385553600">- version 2013.10.11 upstream tarballs were incorrectly generated
  and contained an invalid regulatory database, update to version
  2013.11.27 in which the problem has been corrected.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410091200">- Update to 2014.06.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- Update 2014.10.07</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Update to 2015.01.30:
  * Add 60GHz regulatory rules for Russia (RU)
  * Add 60GHz regulatory rules for Japan (JP)
  * update BG rules for 5725 - 5875 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 2015.07.20:
  * update CA rules for 5600 - 5650 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 2015.09.25:
  * Add ETSI as the DFS region for Hong Kong</changelog>
  <changelog author="mpluskal@suse.com" date="1444996800">- Update to 2015.10.13:
  * Update regulatory rules for Malaysia (MY)	?Jouni Malinen	1	-3/+4
  * Add VHT channel bandwidth for Ukraine (UA)	?Jouni Malinen	1	-2/+3
  * Add VHT channel bandwidth for Russia (RU)	?Jouni Malinen	1	-4/+4
  * Update regulatory rules for Uruguay (UY)	?Jouni Malinen	1	-3/+2
  * Update 5 GHz rules for Taiwan (TW) to follow US	?Chen-Yu Tsai	1	-2/+2
  * Add U-NII-1 (5150 ~ 5250 MHz) band for Taiwan (TW)	?Chen-Yu Tsai	1	-1/+3
  * Update 5GHz rules for US	?Chen-Yu Tsai	1	-1/+2
  * Update regulatory rule boundary frequencies for Taiwan (TW)	?Chen-Yu Tsai	1	-3/+3
  * Update U-NII-2c (5470 ~ 5725 MHz) rules for Taiwan (TW)	?Chen-Yu Tsai	1	-2/+8
  * Update ZA rules for 5490-5710 MHz</changelog>
  <changelog author="mpluskal@suse.com" date="1447329600">- Update to 2015.10.22:
  * Update regulatory rules for Croatia (HR)
  * Add 160 MHz channel bandwidth for Greenland (GL)</changelog>
  <changelog author="mpluskal@suse.com" date="1450785600">- Update to 2015.12.14:
  * fix world regdomain
  * Update regulatory rules for Finland (FI)</changelog>
  <changelog author="mpluskal@suse.com" date="1455019200">- Update to 2016.02.08:
  * add 2.4GHz regulatory rules for Cuba (CU)</changelog>
  <changelog author="afaerber@suse.de" date="1455364800">- Explicitly require xz, fixing tar errors for SLE11 builds
- Work around a mismatch of lib vs. lib64 on SLE11 x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 2016.05.02:
  * wireless-regdb: Update regulatory references for Germany (DE)
  * Update the regulatory rules for Bulgaria (BG)
  * Update regulatory rules for NL as per ETSI EN 300 440-1
  * wireless-regdb: Update regulatory rules for Germany (DE) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to 2016.06.10:
  * Republic of Korea: Add 60GHz regulatory rules</changelog>
  <changelog author="mpluskal@suse.com" date="1489838400">- Update to 2017.03.07 (boo#1030085):
  * Update rules for Australia (AU) and add 60GHz rules
  * Update 5 GHz rules for Canada
  * Remove DFS requirement for India (IN)</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 2017.12.23 (boo#1074838):
  * update regulatory database based on preceding changes
  * Document regulatory.db in the manual page
  * Install regulatory.db and regulatory.db.p7s to /lib/firmware
  * Better support for generating public certificates
  * Add sforshee's x509 certificate
  * Restore generation of old format database files
  * regdb: write firmware file format (version code 20)</changelog>
  <changelog author="mpluskal@suse.com" date="1527768000">- Update to version 2018.05.09 (boo#1095397):
  * Updated regulatory database for France and Panama
  * Fixes in python3 scripts</changelog>
</package>
<package pkgid="d689f3ff607e2d53af139198cc2e5e361874cf4494d3d65951c9b23167617859" name="wireless-regdb" arch="noarch">
  <version epoch="0" ver="2018.05.31" rel="lp150.2.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1356955200">- Update database to the most recent 2012.06.08</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls
- Cleanup spec file
- Update database to the most recent 2013.02.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385208000">- update to 2013.10.11
- remove bogus Requires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385553600">- version 2013.10.11 upstream tarballs were incorrectly generated
  and contained an invalid regulatory database, update to version
  2013.11.27 in which the problem has been corrected.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410091200">- Update to 2014.06.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- Update 2014.10.07</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Update to 2015.01.30:
  * Add 60GHz regulatory rules for Russia (RU)
  * Add 60GHz regulatory rules for Japan (JP)
  * update BG rules for 5725 - 5875 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 2015.07.20:
  * update CA rules for 5600 - 5650 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 2015.09.25:
  * Add ETSI as the DFS region for Hong Kong</changelog>
  <changelog author="mpluskal@suse.com" date="1444996800">- Update to 2015.10.13:
  * Update regulatory rules for Malaysia (MY)	?Jouni Malinen	1	-3/+4
  * Add VHT channel bandwidth for Ukraine (UA)	?Jouni Malinen	1	-2/+3
  * Add VHT channel bandwidth for Russia (RU)	?Jouni Malinen	1	-4/+4
  * Update regulatory rules for Uruguay (UY)	?Jouni Malinen	1	-3/+2
  * Update 5 GHz rules for Taiwan (TW) to follow US	?Chen-Yu Tsai	1	-2/+2
  * Add U-NII-1 (5150 ~ 5250 MHz) band for Taiwan (TW)	?Chen-Yu Tsai	1	-1/+3
  * Update 5GHz rules for US	?Chen-Yu Tsai	1	-1/+2
  * Update regulatory rule boundary frequencies for Taiwan (TW)	?Chen-Yu Tsai	1	-3/+3
  * Update U-NII-2c (5470 ~ 5725 MHz) rules for Taiwan (TW)	?Chen-Yu Tsai	1	-2/+8
  * Update ZA rules for 5490-5710 MHz</changelog>
  <changelog author="mpluskal@suse.com" date="1447329600">- Update to 2015.10.22:
  * Update regulatory rules for Croatia (HR)
  * Add 160 MHz channel bandwidth for Greenland (GL)</changelog>
  <changelog author="mpluskal@suse.com" date="1450785600">- Update to 2015.12.14:
  * fix world regdomain
  * Update regulatory rules for Finland (FI)</changelog>
  <changelog author="mpluskal@suse.com" date="1455019200">- Update to 2016.02.08:
  * add 2.4GHz regulatory rules for Cuba (CU)</changelog>
  <changelog author="afaerber@suse.de" date="1455364800">- Explicitly require xz, fixing tar errors for SLE11 builds
- Work around a mismatch of lib vs. lib64 on SLE11 x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 2016.05.02:
  * wireless-regdb: Update regulatory references for Germany (DE)
  * Update the regulatory rules for Bulgaria (BG)
  * Update regulatory rules for NL as per ETSI EN 300 440-1
  * wireless-regdb: Update regulatory rules for Germany (DE) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to 2016.06.10:
  * Republic of Korea: Add 60GHz regulatory rules</changelog>
  <changelog author="mpluskal@suse.com" date="1489838400">- Update to 2017.03.07 (boo#1030085):
  * Update rules for Australia (AU) and add 60GHz rules
  * Update 5 GHz rules for Canada
  * Remove DFS requirement for India (IN)</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 2017.12.23 (boo#1074838):
  * update regulatory database based on preceding changes
  * Document regulatory.db in the manual page
  * Install regulatory.db and regulatory.db.p7s to /lib/firmware
  * Better support for generating public certificates
  * Add sforshee's x509 certificate
  * Restore generation of old format database files
  * regdb: write firmware file format (version code 20)</changelog>
  <changelog author="mpluskal@suse.com" date="1527768000">- Update to version 2018.05.09 (boo#1095397):
  * Updated regulatory database for France and Panama
  * Fixes in python3 scripts</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 2018.05.31 (boo#1106528):
  * Fix power limit in 5725-5785 GHz rule for France</changelog>
</package>
<package pkgid="827cfb587a1fd4dc9f26711312f54543e296abddea1fe09bb956374c73cabf1f" name="wireless-regdb" arch="src">
  <version epoch="0" ver="2018.05.31" rel="lp150.2.6.1"/>
  <changelog author="crrodriguez@opensuse.org" date="1356955200">- Update database to the most recent 2012.06.08</changelog>
  <changelog author="idonmez@suse.com" date="1365163200">- Add Source URL, see https://en.opensuse.org/SourceUrls
- Cleanup spec file
- Update database to the most recent 2013.02.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385208000">- update to 2013.10.11
- remove bogus Requires</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1385553600">- version 2013.10.11 upstream tarballs were incorrectly generated
  and contained an invalid regulatory database, update to version
  2013.11.27 in which the problem has been corrected.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1410091200">- Update to 2014.06.13</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1416139200">- Update 2014.10.07</changelog>
  <changelog author="mpluskal@suse.com" date="1427544000">- Update to 2015.01.30:
  * Add 60GHz regulatory rules for Russia (RU)
  * Add 60GHz regulatory rules for Japan (JP)
  * update BG rules for 5725 - 5875 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1441540800">- Update to 2015.07.20:
  * update CA rules for 5600 - 5650 mHz</changelog>
  <changelog author="mpluskal@suse.com" date="1443441600">- Update to 2015.09.25:
  * Add ETSI as the DFS region for Hong Kong</changelog>
  <changelog author="mpluskal@suse.com" date="1444996800">- Update to 2015.10.13:
  * Update regulatory rules for Malaysia (MY)	?Jouni Malinen	1	-3/+4
  * Add VHT channel bandwidth for Ukraine (UA)	?Jouni Malinen	1	-2/+3
  * Add VHT channel bandwidth for Russia (RU)	?Jouni Malinen	1	-4/+4
  * Update regulatory rules for Uruguay (UY)	?Jouni Malinen	1	-3/+2
  * Update 5 GHz rules for Taiwan (TW) to follow US	?Chen-Yu Tsai	1	-2/+2
  * Add U-NII-1 (5150 ~ 5250 MHz) band for Taiwan (TW)	?Chen-Yu Tsai	1	-1/+3
  * Update 5GHz rules for US	?Chen-Yu Tsai	1	-1/+2
  * Update regulatory rule boundary frequencies for Taiwan (TW)	?Chen-Yu Tsai	1	-3/+3
  * Update U-NII-2c (5470 ~ 5725 MHz) rules for Taiwan (TW)	?Chen-Yu Tsai	1	-2/+8
  * Update ZA rules for 5490-5710 MHz</changelog>
  <changelog author="mpluskal@suse.com" date="1447329600">- Update to 2015.10.22:
  * Update regulatory rules for Croatia (HR)
  * Add 160 MHz channel bandwidth for Greenland (GL)</changelog>
  <changelog author="mpluskal@suse.com" date="1450785600">- Update to 2015.12.14:
  * fix world regdomain
  * Update regulatory rules for Finland (FI)</changelog>
  <changelog author="mpluskal@suse.com" date="1455019200">- Update to 2016.02.08:
  * add 2.4GHz regulatory rules for Cuba (CU)</changelog>
  <changelog author="afaerber@suse.de" date="1455364800">- Explicitly require xz, fixing tar errors for SLE11 builds
- Work around a mismatch of lib vs. lib64 on SLE11 x86_64</changelog>
  <changelog author="mpluskal@suse.com" date="1462622400">- Update to 2016.05.02:
  * wireless-regdb: Update regulatory references for Germany (DE)
  * Update the regulatory rules for Bulgaria (BG)
  * Update regulatory rules for NL as per ETSI EN 300 440-1
  * wireless-regdb: Update regulatory rules for Germany (DE) on 5GHz</changelog>
  <changelog author="mpluskal@suse.com" date="1465732800">- Update to 2016.06.10:
  * Republic of Korea: Add 60GHz regulatory rules</changelog>
  <changelog author="mpluskal@suse.com" date="1489838400">- Update to 2017.03.07 (boo#1030085):
  * Update rules for Australia (AU) and add 60GHz rules
  * Update 5 GHz rules for Canada
  * Remove DFS requirement for India (IN)</changelog>
  <changelog author="mpluskal@suse.com" date="1515153600">- Update to version 2017.12.23 (boo#1074838):
  * update regulatory database based on preceding changes
  * Document regulatory.db in the manual page
  * Install regulatory.db and regulatory.db.p7s to /lib/firmware
  * Better support for generating public certificates
  * Add sforshee's x509 certificate
  * Restore generation of old format database files
  * regdb: write firmware file format (version code 20)</changelog>
  <changelog author="mpluskal@suse.com" date="1527768000">- Update to version 2018.05.09 (boo#1095397):
  * Updated regulatory database for France and Panama
  * Fixes in python3 scripts</changelog>
  <changelog author="Martin Pluskal &lt;mpluskal@suse.com&gt;" date="1535630400">- Update to version 2018.05.31 (boo#1106528):
  * Fix power limit in 5725-5785 GHz rule for France</changelog>
</package>
<package pkgid="cfbfb13fd36d1394976bb5917c0f004a6a70300e5d692f69b068812a58ba8a29" name="wireshark" arch="src">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="46f586620657e966997558b12b0c04f53ce33a88c22a86e02027fd0f8ab3e71c" name="wireshark" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="e7eb3d48ba408da10da74a93f3197564a47623f6883f46337cd20a75f3157ea2" name="wireshark" arch="src">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="b7b3201ca85bc60b2209aeb2ec9aefe068451d8ebb846adf595dbf593edbe069" name="wireshark" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="75a328dfed26985a2f576e4bda949c3c9b34156c6496649b8c1261e5414fada6" name="wireshark" arch="src">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="4a53b18ed8d52e07708565fdcb0655f4a23539f5df5d40fa54f2514a464e5145" name="wireshark" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="35b98f115590136b4a98e3ede167204e3c0e34d57513b8c2df64ca3a685c35bd" name="wireshark-devel" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="22faeff38438896d7f25fd58550173ee5c184f2845845bfd22b2f19c773f5868" name="wireshark-devel" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="5128b7b954b938f1e97f944133899095b96155013eecb30a0431b994ded6b071" name="wireshark-devel" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="559880f4ddc1cd5e33b89a743408f78726a05948c803ed2655c2044e0fc23043" name="wireshark-plugin-libvirt" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.3.1"/>
  <changelog author="jfehlig@suse.com" date="1513252800">- storage: Don't dereference driver object if virStorageSource is
  not initialized
  2d07f1f0-fix-storage-crash.patch
  bsc#1072974</changelog>
  <changelog author="jfehlig@suse.com" date="1513598400">- libvirt-guests: fix 'stop' operation when action is 'suspend'
  69ed99c7-dom0-persistent.patch,
  8599aedd-libvirt-guests-dom0-filter.patch
  bsc#1070130</changelog>
  <changelog author="cbosdonnat@suse.com" date="1513771200">- Close clients before drivers are cleaned up to avoid crash at
  libvirtd stop (bsc#1073730)
  daemon-close-crasher.patch
- Set a hostname on lxc containers based on guest's name.
  lxc-hostname.patch
- Enhance apparmor rules for virt-aa-helper (bsc#1070916)
  0f33025a-virt-aa-helper-handle-more-disk-images.patch</changelog>
  <changelog author="cbosdonnat@suse.com" date="1514980800">- Fix apparmor rules for virt-aa-helper (bsc#1074265)
  fix-virt-aa-helper-profile.patch
- Lift VirtualBox dependency version to include 5.2.x
- Update upstreamed patches
  Removed patches:
  * daemon-close-crasher.patch
  * lxc-hostname.patch
  Added patches:
  * 2089ab21-netserver-close-clients-before-stopping-all-drivers.patch
  * b475a91b-add-virStringFilterChars-string-utility.patch
  * faec1958-lxc-set-hostname-based-on-container-name.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1515672000">- Add a qemu hook script providing functionality similar to Xen's
  block-dmmd script
  suse-qemu-domain-hook.py
  FATE#324177</changelog>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
</package>
<package pkgid="239477d6eed4d6c0b7c7f44735d8c9a9ad1f5f8d3bdff4daf187f719906007f6" name="wireshark-plugin-libvirt" arch="x86_64">
  <version epoch="0" ver="4.0.0" rel="lp150.7.6.1"/>
  <changelog author="jfehlig@suse.com" date="1516363200">- Update to libvirt 4.0.0
  - Many incremental improvements and bug fixes, see
    http://libvirt.org/news.html
  - Dropped patches:
    2d07f1f0-fix-storage-crash.patch,
    69ed99c7-dom0-persistent.patch,
    8599aedd-libvirt-guests-dom0-filter.patch,
    0f33025a-virt-aa-helper-handle-more-disk-images.patch,
    b475a91b-add-virStringFilterChars-string-utility.patch,
    faec1958-lxc-set-hostname-based-on-container-name.patch,
    2089ab21-netserver-close-clients-before-stopping-all-drivers.patch,
    fix-virt-aa-helper-profile.patch,
  - Patches added to fix upstream bugs:
    72adaf2f-revert-qemu-monitor-error-report.patch,
    71d56a39-nodedev-fix-parse-PCI-address.patch
  - CVE-2018-5748, CVE-2017-5715, bsc#1071651, bsc#1076500</changelog>
  <changelog author="jfehlig@suse.com" date="1516881600">- qemu hook: Change shebang to /usr/bin/python3
- spec: Require python lxml in daemon-hooks subpackage</changelog>
  <changelog author="jfehlig@suse.com" date="1516968000">- qemu: Support setting OEM strings in SMBIOS
  68eed56b-conf-smbios-oem-strings.patch,
  76977061-qemu-smbios-oem-strings.patch
  FATE#323624
- libxl: resume lock process after failed migration
  0c710a37-libxl-resume-lock-on-mig-failure.patch
  bsc#1076861</changelog>
  <changelog author="cbosdonnat@suse.com" date="1518177600">- Remove all uses of python2 during the build (bsc#1080034)
    6b3d716e-keycodemap-py3.patch
    apibuild-py3.patch
- Determine hostname early to avoid code injection
  in lxc driver. (bsc#1080042)
    759b4d1b-virlog-determine-the-hostname-on-startup-CVE-2018-67.patch
    c2dc6698-fix-deadlock-obtaining-hostname.patch
- Add basic support of connectGetAllDomainStats for lxc driver
  (fate#323742)
    0001-Extract-stats-functions-from-the-qemu-driver.patch
    0002-lxc-implement-connectGetAllDomainStats.patch</changelog>
  <changelog author="jfehlig@suse.com" date="1519214400">- libxl: add support for specifying clock offset and adjustment
  c391e07e-libxl-clock-settings.patch
  bsc#1082161</changelog>
  <changelog author="jfehlig@suse.com" date="1519387200">- libxl: round memory values to next 1MiB increment
  ef71caea-libxl-memalign.patch
  bsc#1082041</changelog>
  <changelog author="jfehlig@suse.com" date="1520942400">- libvirtd: Explicit dependency on systemd-machined
  1b0c42ff-libvirtd-depend-machined.patch
  bsc#1074014</changelog>
  <changelog author="jfehlig@suse.com" date="1520942401">- libvirtd: fix potential deadlock when reloading
  33c6eb96-fix-libvirtd-reload-deadlock.patch
  bsc#1079150</changelog>
  <changelog author="jfehlig@suse.com" date="1520942402">- virtlockd: fix loosing lock on re-exec
  464889ff-rpc-aquire-ref-dispatch.patch,
  c6f1d519-rpc-simplify-dispatch.patch,
  06e7ebb6-rpc-invoke-dispatch-unlocked.patch,
  86cae503-rpc-fix-pre-exec.patch,
  eefabb38-rpc-virtlockd-virtlogd-single-thread.patch
  bsc#1076861</changelog>
  <changelog author="jfehlig@suse.com" date="1521028800">- qemu: avoid denial of service reading from QEMU guest agent
  CVE-2018-1064
  fbf31e1a-CVE-2018-1064.patch
  bsc#1083625</changelog>
  <changelog author="jfehlig@suse.com" date="1521028801">- Install correct firewall service file depending on availability
  of firewalld vs SuSEfirewall2
  libvirtd-relocation-server.xml
  bsc#1083455</changelog>
  <changelog author="jfehlig@suse.com" date="1521547200">- libxl: fixes and improvements in migration APIs
  64370c4b-libxl-MigrateBegin.patch,
  99486799-libxl-MigrateConfirm.patch,
  f5eacf2a-libxl-MigratePerform.patch,
  4e6fcdb6-libxl-libxlDomObjFromDomain-cleanup.patch,
  fe51dbda-libxl-use-FindByRef.patch,
  60b3fcd9-libxl-MigratePrepare.patch,
  3c89868c-libxl-lock-after-ListRemove.patch,
  13e81fc6-libxl-EndJob-on-error.patch,
  594b8b99-libxl-DefineXMLFlags-API-pattern.patch,
  c66e344e-libxl-dont-deref-NULL.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1521633600">- libxl: don't hardcode scheduler weight
  83edaf44-libxl-dont-hardcode-sched-weight.patch
  bsc#1086377</changelog>
  <changelog author="jfehlig@suse.com" date="1522929600">- util: improvements in error handling
  09877303-virSocketAddrParseInternal.patch,
  412afdb8-intro-virSocketAddrParseAny.patch
  bsc#1080957</changelog>
  <changelog author="jfehlig@suse.com" date="1526990400">- cpu: add support for 'ssbd' and 'virt-ssbd' CPUID feature bits
  CVE-2018-3639
  1dbca2ec-CVE-2018-3639.patch, 92673422-CVE-2018-3639.patch
  bsc#1092885</changelog>
  <changelog author="jfehlig@suse.com" date="1527681600">- libxl: don't set hasManagedSave when performing save
  ac4a12db-libxl-fix-hasManagedSave.patch
  bsc#959329</changelog>
  <changelog author="jfehlig@suse.com" date="1527854400">- spec: only use apparmor-rpm-macros when suse_version &gt;= 1500</changelog>
  <changelog author="jfehlig@suse.com" date="1528113600">- libxl: fix leaking logfile fds
  67c56f6e-libxl-logfd-leak-fix.patch
  bsc#1094480</changelog>
  <changelog author="jfehlig@suse.com" date="1528200000">- virt-aa-helper: add SUSE path to OVMF and AAVMF images
  Adjusted suse-ovmf-paths.patch
  boo#1095556</changelog>
  <changelog author="jfehlig@suse.com" date="1530878400">- libxl: Implement virDomainBlockResize
  0001-libxl-add-support-for-BlockResize-API.patch
  FATE#325467, bsc#1094325, bsc#1094725</changelog>
</package>
<package pkgid="626fc3ffbc7e0377c5c08ae8ec6b68ec2e26a01e018c266f4dc50bc5a61f587b" name="wireshark-ui-qt" arch="x86_64">
  <version epoch="0" ver="2.4.7" rel="lp150.2.3.1"/>
  <changelog author="tchvatal@suse.com" date="1482840000">- Cleanup a bit with spec-cleaner
- Properly set ethereal symlink based on UI and set it to proper subpkg
- Update conditionals on wireshark to only build Qt or GTK depending
  on the interface, because upstream now only supports Qt5
- Update the caps code in spec but keep it disabled
- Enable geoip only on platforms that support it
- Enable libnl only on newer releases
- Update desktop file and icon caches
- Drop not really needed patch wireshark-1.10.0-authors-pod2man.patch
- Use full commands for icon/desktop cache for gtk mode as on sle11 it
  was not present yet as a macro
- Split shared libraries properly to subpackages</changelog>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
</package>
<package pkgid="f3601a35a68dba7ba3f9072a663ac99b7fa9d2a37df126bea48bffe98b8d8aec" name="wireshark-ui-qt" arch="x86_64">
  <version epoch="0" ver="2.4.8" rel="lp150.2.6.1"/>
  <changelog author="tchvatal@suse.com" date="1483531200">- Obsolete the ui-gtk in the ui-qt to ensure clean non-conflicted install</changelog>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
</package>
<package pkgid="0d9daa927875c9adb8c1177fe424787844f8f2ee20e9741b0cddfc0e046e6fd5" name="wireshark-ui-qt" arch="x86_64">
  <version epoch="0" ver="2.4.9" rel="lp150.2.10.1"/>
  <changelog author="astieger@suse.com" date="1485259200">- Wireshark 2.2.4:
  This release fixes two minor vulnerabilities that could be use to
  cause Wireshark to go into a large or infinite loop by sending
  specially crafted packages over the network or into a capture file
  (bsc#1021739)
  * The ASTERIX dissector could go into an infinite loop
    CVE-2017-5596 wnpa-sec-2017-01
  * The DHCPv6 dissector could go into a large loop.
    CVE-2017-5597 wnpa-sec-2017-02
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.4.html</changelog>
  <changelog author="tchvatal@suse.com" date="1487073600">- Disable gnutls on SLE11 as we are unable to meet the gnutls
  requirements there</changelog>
  <changelog author="astieger@suse.com" date="1488628800">- Wireshark 2.2.5: boo#1027998
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-6467: NetScaler file parser infinite loop (wnpa-sec-2017-11)
  * CVE-2017-6468: NetScaler file parser crash (wnpa-sec-2017-08)
  * CVE-2017-6469: LDSS dissector crash (wnpa-sec-2017-03)
  * CVE-2017-6470: IAX2 dissector infinite loop (wnpa-sec-2017-10)
  * CVE-2017-6471: WSP dissector infinite loop (wnpa-sec-2017-05)
  * CVE-2017-6472: RTMTP dissector infinite loop (wnpa-sec-2017-04)
  * CVE-2017-6473: K12 file parser crash (wnpa-sec-2017-09)
  * CVE-2017-6474: NetScaler file parser infinite loop (wnpa-sec-2017-07)
  * wnpa-sec-2017-06: STANAG 4607 file parser infinite loop
- restore license in about dialog boo#1026507</changelog>
  <changelog author="astieger@suse.com" date="1492171200">- Wireshark 2.2.6:
  This release fixes minor vulnerabilities that could be used to
  trigger a dissector crash or infinite loops by sending specially
  crafted packages over the network or into a capture file:
  * CVE-2017-7700: NetScaler file parser infinite loop (bsc#1033936)
  * CVE-2017-7701: BGP dissector infinite loop (bsc#1033937)
  * CVE-2017-7702: WBMXL dissector infinite loop (bsc#1033938)
  * CVE-2017-7703: IMAP dissector crash (bsc#1033939)
  * CVE-2017-7704: DOF dissector infinite loop (bsc#1033940)
  * CVE-2017-7705: RPCoRDMA dissector infinite loop (bsc#1033941)
  * CVE-2017-7745: SIGCOMP dissector infinite loop (bsc#1033942)
  * CVE-2017-7746: SLSK dissector long loop (bsc#1033943)
  * CVE-2017-7747: PacketBB dissector crash (bsc#1033944)
  * CVE-2017-7748: WSP dissector infinite loop (bsc#1033945)
  - Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.2.6.html</changelog>
  <changelog author="astieger@suse.com" date="1495022400">- Allow opening capture files from desktop without asking for
  privileged credentials. bsc#1025714</changelog>
  <changelog author="astieger@suse.com" date="1496404800">- Wireshark 2.2.7 (bsc#1042330):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of CPU resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-9352: Bazaar dissector infinite loop (bsc#1042304)
  * CVE-2017-9348: DOF dissector read overflow (bsc#1042303)
  * CVE-2017-9351: DHCP dissector read overflow (bsc#1042302)
  * CVE-2017-9346: SoulSeek dissector infinite loop (bsc#1042301)
  * CVE-2017-9345: DNS dissector infinite loop (bsc#1042300)
  * CVE-2017-9349: DICOM dissector infinite loop (bsc#1042305)
  * CVE-2017-9350: openSAFETY dissector memory exhaustion (bsc#1042299)
  * CVE-2017-9344: BT L2CAP dissector divide by zero (bsc#1042298)
  * CVE-2017-9343: MSNIP dissector crash (bsc#1042309)
  * CVE-2017-9347: ROS dissector crash (bsc#1042308)
  * CVE-2017-9354: RGMP dissector crash (bsc#1042307)
  * CVE-2017-9353: IPv6 dissector crash (bsc#1042306)</changelog>
  <changelog author="astieger@suse.com" date="1500379200">- Wireshark 2.2.8 (bsc#1049255):
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-7702 CVE-2017-11410: WBMXL dissector infinite loop
    (wnpa-sec-2017-13)
  * CVE-2017-9350 CVE-2017-11411: openSAFETY dissector memory
    exhaustion (wnpa-sec-2017-28)
  * CVE-2017-11408: AMQP dissector crash (wnpa-sec-2017-34)
  * CVE-2017-11407: MQ dissector crash (wnpa-sec-2017-35)
  * CVE-2017-11406: DOCSIS infinite loop (wnpa-sec-2017-36)</changelog>
  <changelog author="astieger@suse.com" date="1501156800">- Wireshark 2.4.0:
  * SS7 Point Codes can now be resolved into names with a hosts-
    like file.
  * Wireshark can now go fullscreen to have more room for packets
  * TShark can now export objects like the other GUI interfaces.
  * Support for G.722 and G.726 codecs in the RTP Player (via the
    SpanDSP library)
  * You can now choose the output device when playing RTP streams
  * Added support for dissectors to include a unit name natively
    in their hf field. A field can now automatically append
    "seconds" or "ms" to its value without additional printf-style
    APIs
  * The Default profile can now be reset to default values.
  * You can move back and forth in the selection history in the
    Qt UI.
  * IEEE 802.15.4 dissector now uses an UAT for decryption keys.
    The original decryption key preference has been obsoleted.
  * Extcap utilities can now provide configuration for a GUI
    interface toolbar to control the extcap utility while capturing.
  * Extcap utilities can now validate the capture filter.
  * Display filter function len() can now be used on all string and
    byte fields.
  * Added an experimental timeline view for 802.11 wireless packet
    data which can be enabled via the "802.11 radio information
    preferences.
  * Added TLS 1.3 (draft 21) dissection and decryption support
  * The (D)TLS Application Layer protocol (e.g. HTTP or CoAP) can
    now be changed via the Decode As dialog.
  * The RSA keys dialog for SSL keys has improved feedback for
    invalid settings and no longer requires the IP address, Port or
    Protocol fields to be set in addition to the Key File.
  * TCP Analysis will detect and flag more spurious retransmissions.
  * Many new and updated protocol support
  * New and updated Capture File Support:
    ERF, IxVeriWave, Libpcap, and Pcap-ng
  * API changes: IEEE802.11: wlan_mgt display filter element got
    renamed to wlan.</changelog>
  <changelog author="tchvatal@suse.com" date="1503316800">- Gcrypt is now default
- gtk switch was redone to accept value at the end instead of 2
  options</changelog>
  <changelog author="jengelh@inai.de" date="1503748800">- Trim filler wording from description.</changelog>
  <changelog author="astieger@suse.com" date="1504008000">- Wireshark 2.4.1:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes, infinite loops, or cause excessive use
  of memory resources by making Wireshark read specially crafted
  packages from the network or a capture file:
  * CVE-2017-13767: MSDP dissector infinite loop (bsc#1056248)
  * CVE-2017-13766: Profinet I/O buffer overrun (bsc#1056249)
  * CVE-2017-13764: Modbus dissector crash (bsc#1056250)
  * CVE-2017-13765: IrCOMM dissector buffer overrun (bsc#1056251)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.1.html</changelog>
  <changelog author="jmatejek@suse.com" date="1504785600">- downgrade to lua51-devel in order to drop Lua 5.2 from Factory
  (can't upgrade to 5.3 because that is still not supported)</changelog>
  <changelog author="astieger@suse.com" date="1507723200">- Wireshark 2.4.2:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or infinite loops by making Wireshark
  read specially crafted packages from the network or a capture
  file (boo#1062645):
  * CVE-2017-15192: BT ATT dissector crash (wnpa-sec-2017-42)
  * CVE-2017-15193: MBIM dissector crash (wnpa-sec-2017-43)
  * CVE-2017-15191: DMP dissector crash (wnpa-sec-2017-44)
  * CVE-2017-15190: RTSP dissector crash (wnpa-sec-2017-45)
  * CVE-2017-15189: DOCSIS infinite loop (wnpa-sec-2017-46)</changelog>
  <changelog author="astieger@suse.com" date="1512129600">- Wireshark 2.4.3:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes by making Wireshark read specially
  crafted packages from the network or capture files (bsc#1070727):
  * CVE-2017-17084: IWARP_MPA dissector crash (wnpa-sec-2017-47)
  * CVE-2017-17083: NetBIOS dissector crash (wnpa-sec-2017-48)
  * CVE-2017-17085: CIP Safety dissector crash (wnpa-sec-2017-49)
  * Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.3.html</changelog>
  <changelog author="astieger@suse.com" date="1515758400">- Wireshark 2.4.4:
  * fixes for dissector crashes:
    + CVE-2018-5334: IxVeriWave file could crash (bsc#1075737)
    + CVE-2018-5335: WCP dissector could crash (bsc#1075738)
    + CVE-2018-5336: Multiple dissector crashes (bsc#1075739)
  * No longer enable the Linux kernel BPF JIT compiler via the
    net.core.bpf_jit_enable sysctl, as this would make systems
    more vulnerable to Spectre variant 1 (bsc#1075748, CVE-2017-5753)
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.4.html</changelog>
  <changelog author="astieger@suse.com" date="1519473600">- Wireshark 2.4.5:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1082692):
  * CVE-2018-7335: The IEEE 802.11 dissector could crash
  * CVE-2018-7321, CVE-2018-7322, CVE-2018-7323, CVE-2018-7324,
    CVE-2018-7325, CVE-2018-7326, CVE-2018-7327, CVE-2018-7328,
    CVE-2018-7329, CVE-2018-7330, CVE-2018-7331, CVE-2018-7332,
    CVE-2018-7333, CVE-2018-7421: Multiple dissectors could go
    into large infinite loops
  * CVE-2018-7334: The UMTS MAC dissector could crash
  * CVE-2018-7337: The DOCSIS dissector could crash
  * CVE-2018-7336: The FCP dissector could crash
  * CVE-2018-7320: The SIGCOMP dissector could crash
  * CVE-2018-7420: The pcapng file parser could crash
  * CVE-2018-7417: The IPMI dissector could crash
  * CVE-2018-7418: The SIGCOMP dissector could crash
  * CVE-2018-7419: The NBAP disssector could crash
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.5.html</changelog>
  <changelog author="astieger@suse.com" date="1522843200">- Wireshark 2.4.6:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1088200):
  * CVE-2018-9264: ADB dissector crash
  * CVE-2018-9260: IEEE 802.15.4 dissector crash
  * CVE-2018-9261: NBAP dissector crash
  * CVE-2018-9262: VLAN dissector crash
  * CVE-2018-9256: LWAPP dissector crash
  * CVE-2018-9263: Kerberos dissector crash
  * CVE-2018-9258: TCP dissector crash
  * CVE-2018-9257: CQL infinite loop
  * Memory leaks in multiple dissectors:
    CVE-2018-9265, CVE-2018-9266, CVE-2018-9267, CVE-2018-9268,
    CVE-2018-9269, CVE-2018-9270, CVE-2018-9271, CVE-2018-9272,
    CVE-2018-9273, CVE-2018-9274
  * Further bug fixes and updated protocol support as listed in:
    https://www.wireshark.org/docs/relnotes/wireshark-2.4.6.html</changelog>
  <changelog author="astieger@suse.com" date="1527076800">- update to 2.4.7:
  This release fixes minor vulnerabilities that could be used to
  trigger dissector crashes or cause dissectors to go into large
  infinite loops by making Wireshark read specially crafted
  packages from the network or capture files (bsc#1094301):
  * CVE-2018-11356: DNS dissector crash
  * CVE-2018-11357: Multiple dissectors could consume excessive memory
  * CVE-2018-11358: Q.931 dissector crash
  * CVE-2018-11359: The RRC dissector and other dissectors could crash
  * CVE-2018-11360: GSM A DTAP dissector crash
  * CVE-2018-11362: LDSS dissector crash
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.7.html</changelog>
  <changelog author="astieger@suse.com" date="1532088000">- update to 2.4.8:
  * CVE-2018-14342: BGP dissector large loop (wnpa-sec-2018-34, boo#1101777)
  * CVE-2018-14344: ISMP dissector crash (wnpa-sec-2018-35, boo#1101788)
  * CVE-2018-14340: Multiple dissectors could crash (wnpa-sec-2018-36, boo#1101804)
  * CVE-2018-14343: ASN.1 BER dissector crash (wnpa-sec-2018-37, boo#1101786)
  * CVE-2018-14339: MMSE dissector infinite loop (wnpa-sec-2018-38, boo#1101810)
  * CVE-2018-14341: DICOM dissector crash (wnpa-sec-2018-39, boo#1101776)
  * CVE-2018-14368: Bazaar dissector infinite loop (wnpa-sec-2018-40, boo#1101794)
  * CVE-2018-14369: HTTP2 dissector crash (wnpa-sec-2018-41, boo#1101800)
  * CVE-2018-14367: CoAP dissector crash (wnpa-sec-2018-42, boo#1101791)
  * CVE-2018-14370: IEEE 802.11 dissector crash (wnpa-sec-2018-43, boo#1101802)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.8.html</changelog>
  <changelog author="astieger@suse.com" date="1535544000">- Update to 2.4.9 (bsc#1106514):
  * CVE-2018-16058: Bluetooth AVDTP dissector crash (wnpa-sec-2018-44)
  * CVE-2018-16056: Bluetooth Attribute Protocol dissector crash (wnpa-sec-2018-45)
  * CVE-2018-16057: Radiotap dissector crash (wnpa-sec-2018-46)
- Further bug fixes and updated protocol support as listed in:
  https://www.wireshark.org/docs/relnotes/wireshark-2.4.9.html
- packaging change: temporarily disable upstream tarball signature
  verification, use hashes from signed release announcement e-mail</changelog>
</package>
<package pkgid="859fe53cb697dc11beb2bf7596a0983fb833cd5dd7c2469a63ab2ceb828e4962" name="wpa_supplicant" arch="src">
  <version epoch="0" ver="2.6" rel="lp150.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1408536000">- fix dbus systemd activation (bnc#892683)</changelog>
  <changelog author="schwab@suse.de" date="1411041600">- Avoid spurious dependency on /usr/bin/python due to executable doc files</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1413633600">- Update to 2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed wfd_dev_info to be more careful and not read beyond the buffer
    when parsing invalid information for P2P-DEVICE-FOUND
  * extended P2P and GAS query operations to support drivers that have
    maximum remain-on-channel time below 1000 ms (500 ms is the current
    minimum supported value)
  * added p2p_search_delay parameter to make the default p2p_find delay
    configurable
  * improved P2P operating channel selection for various multi-channel
    concurrency cases
  * fixed some TDLS failure cases to clean up driver state
  * fixed dynamic interface addition cases with nl80211 to avoid adding
    ifindex values to incorrect interface to skip foreign interface events
    properly
  * added TDLS workaround for some APs that may add extra data to the
    end of a short frame
  * fixed EAP-AKA' message parser with multiple AT_KDF attributes
  * added configuration option (p2p_passphrase_len) to allow longer
    passphrases to be generated for P2P groups
  * fixed IBSS channel configuration in some corner cases
  * improved HT/VHT/QoS parameter setup for TDLS
  * modified D-Bus interface for P2P peers/groups
  * started to use constant time comparison for various password and hash
    values to reduce possibility of any externally measurable timing
    differences
  * extended explicit clearing of freed memory and expired keys to avoid
    keeping private data in memory longer than necessary
  * added optional scan_id parameter to the SCAN command to allow manual
    scan requests for active scans for specific configured SSIDs
  * fixed CTRL-EVENT-REGDOM-CHANGE event init parameter value
  * added option to set Hotspot 2.0 Rel 2 update_identifier in network
    configuration to support external configuration
  * modified Android PNO functionality to send Probe Request frames only
    for hidden SSIDs (based on scan_ssid=1)
  * added generic mechanism for adding vendor elements into frames at
    runtime (VENDOR_ELEM_ADD, VENDOR_ELEM_GET, VENDOR_ELEM_REMOVE)
  * added fields to show unrecognized vendor elements in P2P_PEER
  * removed EAP-TTLS/MSCHAPv2 interoperability workaround so that
    MS-CHAP2-Success is required to be present regardless of
    eap_workaround configuration
  * modified EAP fast session resumption to allow results to be used only
    with the same network block that generated them
  * extended freq_list configuration to apply for sched_scan as well as
    normal scan
  * modified WPS to merge mixed-WPA/WPA2 credentials from a single session
  * fixed nl80211/RTM_DELLINK processing when a P2P GO interface is
    removed from a bridge
  * fixed number of small P2P issues to make negotiations more robust in
    corner cases
  * added experimental support for using temporary, random local MAC
    address (mac_addr and preassoc_mac_addr parameters); this is disabled
    by default (i.e., previous behavior of using permanent address is
    maintained if configuration is not changed)
  * added D-Bus interface for setting/clearing WFD IEs
  * fixed TDLS AID configuration for VHT
  * modified -m&lt;conf&gt; configuration file to be used only for the P2P
    non-netdev management device and do not load this for the default
    station interface or load the station interface configuration for
    the P2P management interface
  * fixed external MAC address changes while wpa_supplicant is running
  * started to enable HT (if supported by the driver) for IBSS
  * fixed wpa_cli action script execution to use more robust mechanism
    (CVE-2014-3686)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1427976000">- Update to 2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * P2P:
  - add new=&lt;0/1&gt; flag to P2P-DEVICE-FOUND events
  - add passive channels in invitation response from P2P Client
  - enable nl80211 P2P_DEVICE support by default
  - fix regresssion in disallow_freq preventing search on social
    channels
  - fix regressions in P2P SD query processing
  - try to re-invite with social operating channel if no common channels
    in invitation
  - allow cross connection on parent interface (this fixes number of
    use cases with nl80211)
  - add support for P2P services (P2PS)
  - add p2p_go_ctwindow configuration parameter to allow GO CTWindow to
    be configured
  * increase postponing of EAPOL-Start by one second with AP/GO that
    supports WPS 2.0 (this makes it less likely to trigger extra roundtrip
    of identity frames)
  * add support for PMKSA caching with SAE
  * add support for control mesh BSS (IEEE 802.11s) operations
  * fixed number of issues with D-Bus P2P commands
  * fixed regression in ap_scan=2 special case for WPS
  * fixed macsec_validate configuration
  * add a workaround for incorrectly behaving APs that try to use
    EAPOL-Key descriptor version 3 when the station supports PMF even if
    PMF is not enabled on the AP
  * allow TLS v1.1 and v1.2 to be negotiated by default; previous behavior
    of disabling these can be configured to work around issues with broken
    servers with phase1="tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=1"
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * add WMM-AC support (WMM_AC_ADDTS/WMM_AC_DELTS)
  * improved BSS Transition Management processing
  * add support for neighbor report
  * add support for link measurement
  * fixed expiration of BSS entry with all-zeros BSSID
  * add optional LAST_ID=x argument to LIST_NETWORK to allow all
    configured networks to be listed even with huge number of network
    profiles
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed EAP-IKEv2 fragmentation reassembly
  * improved PKCS#11 configuration for OpenSSL
  * set stdout to be line-buffered
  * add TDLS channel switch configuration
  * add support for MAC address randomization in scans with nl80211
  * enable HT for IBSS if supported by the driver
  * add BSSID black and white lists (bssid_blacklist, bssid_whitelist)
  * add support for domain_suffix_match with GnuTLS
  * add OCSP stapling client support with GnuTLS
  * include peer certificate in EAP events even without a separate probe
    operation; old behavior can be restored with cert_in_cb=0
  * add peer ceritficate alt subject name to EAP events
    (CTRL-EVENT-EAP-PEER-ALT)
  * add domain_match network profile parameter (similar to
    domain_suffix_match, but full match is required)
  * enable AP/GO mode HT Tx STBC automatically based on driver support
  * add ANQP-QUERY-DONE event to provide information on ANQP parsing
    status
  * allow passive scanning to be forced with passive_scan=1
  * add a workaround for Linux packet socket behavior when interface is in
    bridge
  * increase 5 GHz band preference in BSS selection (estimate SNR, if info
    not available from driver; estimate maximum throughput based on common
    HT/VHT/specific TX rate support)
  * add INTERWORKING_ADD_NETWORK ctrl_iface command; this can be used to
    implement Interworking network selection behavior in upper layers
    software components
  * add optional reassoc_same_bss_optim=1 (disabled by default)
    optimization to avoid unnecessary Authentication frame exchange
  * extend TDLS frame padding workaround to cover all packets
  * allow wpa_supplicant to recover nl80211 functionality if the cfg80211
    module gets removed and reloaded without restarting wpa_supplicant
  * allow hostapd DFS implementation to be used in wpa_supplicant AP mode</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1428753600">- Delete wpa_priv and eapol_test man pages, these are disabled in config
- Move wpa_gui man page to gui package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1429790400">- 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  Fix CVE-2015-1863, memcpy overflow.
- wpa_supplicant-alloc_size.patch: annotate two wrappers
  with attribute alloc_size, which may help warning us of
  bugs such as the above.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Add wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch
  Fix Segmentation fault in wpa_supplicant. Patch taken from
  upstream master git (arch#44740).</changelog>
  <changelog author="ro@suse.de" date="1431000000">- added patch for bnc#930077
  0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch
- added patch for bnc#930078
  0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch
- added patches for bnc#930079
  0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch
  0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch
  0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch
  0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch
  0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch</changelog>
  <changelog author="michael@stroeder.com" date="1454587200">- removed obsolete security patches:
  * 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  * 0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch
  * 0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch
  * 0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch
  * wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch
  * 0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch
  * 0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch
  * 0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch
  * 0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch
- Update to upstream release 2.5
  * fixed P2P validation of SSID element length before copying it
    [http://w1.fi/security/2015-1/] (CVE-2015-1863)
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
    [http://w1.fi/security/2015-2/] (CVE-2015-4141)
  * fixed WMM Action frame parser (AP mode)
    [http://w1.fi/security/2015-3/] (CVE-2015-4142)
  * fixed EAP-pwd peer missing payload length validation
    [http://w1.fi/security/2015-4/]
    (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146)
  * fixed validation of WPS and P2P NFC NDEF record payload length
    [http://w1.fi/security/2015-5/]
  * nl80211:
  - added VHT configuration for IBSS
  - fixed vendor command handling to check OUI properly
  - allow driver-based roaming to change ESS
  * added AVG_BEACON_RSSI to SIGNAL_POLL output
  * wpa_cli: added tab completion for number of commands
  * removed unmaintained and not yet completed SChannel/CryptoAPI support
  * modified Extended Capabilities element use in Probe Request frames to
    include all cases if any of the values are non-zero
  * added support for dynamically creating/removing a virtual interface
    with interface_add/interface_remove
  * added support for hashed password (NtHash) in EAP-pwd peer
  * added support for memory-only PSK/passphrase (mem_only_psk=1 and
    CTRL-REQ/RSP-PSK_PASSPHRASE)
  * P2P
  - optimize scan frequencies list when re-joining a persistent group
  - fixed number of sequences with nl80211 P2P Device interface
  - added operating class 125 for P2P use cases (this allows 5 GHz
    channels 161 and 169 to be used if they are enabled in the current
    regulatory domain)
  - number of fixes to P2PS functionality
  - do not allow 40 MHz co-ex PRI/SEC switch to force MCC
  - extended support for preferred channel listing
  * D-Bus:
  - fixed WPS property of fi.w1.wpa_supplicant1.BSS interface
  - fixed PresenceRequest to use group interface
  - added new signals: FindStopped, WPS pbc-overlap,
    GroupFormationFailure, WPS timeout, InvitationReceived
  - added new methods: WPS Cancel, P2P Cancel, Reconnect, RemoveClient
  - added manufacturer info
  * added EAP-EKE peer support for deriving Session-Id
  * added wps_priority configuration parameter to set the default priority
    for all network profiles added by WPS
  * added support to request a scan with specific SSIDs with the SCAN
    command (optional "ssid &lt;hexdump&gt;" arguments)
  * removed support for WEP40/WEP104 as a group cipher with WPA/WPA2
  * fixed SAE group selection in an error case
  * modified SAE routines to be more robust and PWE generation to be
    stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * fixed BSS selection based on estimated throughput
  * added option to disable TLSv1.0 with OpenSSL
    (phase1="tls_disable_tlsv1_0=1")
  * added Fast Session Transfer (FST) module
  * fixed OpenSSL PKCS#12 extra certificate handling
  * fixed key derivation for Suite B 192-bit AKM (this breaks
    compatibility with the earlier version)
  * added RSN IE to Mesh Peering Open/Confirm frames
  * number of small fixes</changelog>
  <changelog author="lnussel@suse.de" date="1455710400">- add aliases for both provided dbus names to avoid systemd stopping the
  service when switching runlevels (boo#966535)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455796800">- Previous update did not include version 2.5 tarball
  or changed the version number in spec, only the changelog
  and removed patches.
- config: set CONFIG_NO_RANDOM_POOL=y, we have a reliable
  random number generator by using /dev/urandom, no need to
  keep an internal random number pool which draws entropy from
  /dev/random.
- config: prefer using epoll(7) instead of select(2)
  by setting CONFIG_ELOOP_EPOLL=y
- wpa_supplicant-getrandom.patch: Prefer to use the getrandom(2)
  system call to collect entropy. if it is not present disable
  buffering when reading /dev/urandom, otherwise each os_get_random()
  call will request BUFSIZ of entropy instead of the few needed bytes.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455969600">- spec: Compile the GUI against QT5 in 13.2 and later.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456488000">- Revert CONFIG_ELOOP_EPOLL=y, it is broken in combination
  with CONFIG_DBUS=yes.</changelog>
  <changelog author="lnussel@suse.de" date="1458734400">- add After=dbus.service to prevent too early shutdown (bnc#963652)</changelog>
  <changelog author="tchvatal@suse.com" date="1469016000">- Remove support for &lt;12.3 as we are unresolvable there anyway
- Use qt5 on 13.2 if someone pulls this package in
- Convert to pkgconfig dependencies over the devel pkgs
- Use the %qmake5 macro to build the qt5 gui</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- updated to 2.6 / 2016-10-02
  * fixed WNM Sleep Mode processing when PMF is not enabled
    [http://w1.fi/security/2015-6/] (CVE-2015-5310 bsc#952254)
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5315 bsc#953115)
  * fixed EAP-pwd unexpected Confirm message processing
    [http://w1.fi/security/2015-8/] (CVE-2015-5316 bsc#953115)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476 bsc#978172)
  * fixed configuration update vulnerability with malformed parameters set
    over the local control interface
    [http://w1.fi/security/2016-1/] (CVE-2016-4477 bsc#978175)
  * fixed TK configuration to the driver in EAPOL-Key 3/4 retry case
  * extended channel switch support for P2P GO
  * started to throttle control interface event message bursts to avoid
    issues with monitor sockets running out of buffer space
  * mesh mode fixes/improvements
  - generate proper AID for peer
  - enable WMM by default
  - add VHT support
  - fix PMKID derivation
  - improve robustness on various exchanges
  - fix peer link counting in reconnect case
  - improve mesh joining behavior
  - allow DTIM period to be configured
  - allow HT to be disabled (disable_ht=1)
  - add MESH_PEER_ADD and MESH_PEER_REMOVE commands
  - add support for PMKSA caching
  - add minimal support for SAE group negotiation
  - allow pairwise/group cipher to be configured in the network profile
  - use ieee80211w profile parameter to enable/disable PMF and derive
    a separate TX IGTK if PMF is enabled instead of using MGTK
    incorrectly
  - fix AEK and MTK derivation
  - remove GTKdata and IGTKdata from Mesh Peering Confirm/Close
  - note: these changes are not fully backwards compatible for secure
    (RSN) mesh network
  * fixed PMKID derivation with SAE
  * added support for requesting and fetching arbitrary ANQP-elements
    without internal support in wpa_supplicant for the specific element
    (anqp[265]=&lt;hexdump&gt; in "BSS &lt;BSSID&gt;" command output)
  * P2P
  - filter control characters in group client device names to be
    consistent with other P2P peer cases
  - support VHT 80+80 MHz and 160 MHz
  - indicate group completion in P2P Client role after data association
    instead of already after the WPS provisioning step
  - improve group-join operation to use SSID, if known, to filter BSS
    entries
  - added optional ssid=&lt;hexdump&gt; argument to P2P_CONNECT for join case
  - added P2P_GROUP_MEMBER command to fetch client interface address
  * P2PS
  - fix follow-on PD Response behavior
  - fix PD Response generation for unknown peer
  - fix persistent group reporting
  - add channel policy to PD Request
  - add group SSID to the P2PS-PROV-DONE event
  - allow "P2P_CONNECT &lt;addr&gt; p2ps" to be used without specifying the
    default PIN
  * BoringSSL
  - support for OCSP stapling
  - support building of h20-osu-client
  * D-Bus
  - add ExpectDisconnect()
  - add global config parameters as properties
  - add SaveConfig()
  - add VendorElemAdd(), VendorElemGet(), VendorElemRem()
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * improved PMF behavior for cases where the AP and STA has different
    configuration by not trying to connect in some corner cases where the
    connection cannot succeed
  * added option to reopen debug log (e.g., to rotate the file) upon
    receipt of SIGHUP signal
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * extended INTERFACE_ADD command to allow certain type (sta/ap)
    interface to be created
  * fixed and improved various FST operations
  * added 80+80 MHz and 160 MHz VHT support for IBSS/mesh
  * fixed SIGNAL_POLL in IBSS and mesh cases
  * added an option to abort an ongoing scan (used to speed up connection
    and can also be done with the new ABORT_SCAN command)
  * TLS client
  - do not verify CA certificates when ca_cert is not specified
  - support validating server certificate hash
  - support SHA384 and SHA512 hashes
  - add signature_algorithms extension into ClientHello
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support server certificate probing
  - allow specific TLS versions to be disabled with phase2 parameter
  - support extKeyUsage
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * OpenSSL
  - support OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * added support for multiple schedule scan plans (sched_scan_plans)
  * added support for external server certificate chain validation
    (tls_ext_cert_check=1 in the network profile phase1 parameter)
  * made phase2 parser more strict about correct use of auth=&lt;val&gt; and
    autheap=&lt;val&gt; values
  * improved GAS offchannel operations with comeback request
  * added SIGNAL_MONITOR command to request signal strength monitoring
    events
  * added command for retrieving HS 2.0 icons with in-memory storage
    (REQ_HS20_ICON, GET_HS20_ICON, DEL_HS20_ICON commands and
    RX-HS20-ICON event)
  * enabled ACS support for AP mode operations with wpa_supplicant
  * EAP-PEAP: fixed interoperability issue with Windows 2012r2 server
    ("Invalid Compound_MAC in cryptobinding TLV")
  * EAP-TTLS: fixed success after fragmented final Phase 2 message
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * WNM: workaround for broken AP operating class behavior
  * added kqueue(2) support for eloop (CONFIG_ELOOP_KQUEUE)
  * nl80211:
  - add support for full station state operations
  - do not add NL80211_ATTR_SMPS_MODE attribute if HT is disabled
  - add NL80211_ATTR_PREV_BSSID with Connect command
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added support for PBSS/PCP and P2P on 60 GHz
  * Interworking: add credential realm to EAP-TLS identity
  * fixed EAPOL-Key Request Secure bit to be 1 if PTK is set
  * HS 2.0: add support for configuring frame filters
  * added POLL_STA command to check connectivity in AP mode
  * added initial functionality for location related operations
  * started to ignore pmf=1/2 parameter for non-RSN networks
  * added wps_disabled=1 network profile parameter to allow AP mode to
    be started without enabling WPS
  * wpa_cli: added action script support for AP-ENABLED and AP-DISABLED
    events
  * improved Public Action frame addressing
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * number of small fixes
- wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff: dump x509
  certificates from remote radius server in debug mode in WPA-EAP.</changelog>
  <changelog author="dwaas@suse.com" date="1482494400">- Added .service files that accept interfaces as %i arguments so it's possible
  to call the daemon with:
  "systemctl start wpa_supplicant@$INTERFACE_NAME.service"
  (like openvpn for example)</changelog>
  <changelog author="obs@botter.cc" date="1492776000">- fix wpa_supplicant-sigusr1-changes-debuglevel.patch to match
  eloop_signal_handler type (needed to build eapol_test via config)</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- Fix KRACK attacks (bsc#1056061, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  - rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  - rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  - rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  - rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  - rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  - rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  - rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  - rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="ro@suse.de" date="1532088000">- add two patches from upstream to fix reading private key
  passwords from the configuration file (bsc#1099835)
  - add patch for git 89971d8b1e328a2f79699c953625d1671fd40384
    wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch
  - add patch for git f665c93e1d28fbab3d9127a8c3985cc32940824f
    wpa_supplicant-bnc-1099835-fix-private-key-password.patch</changelog>
</package>
<package pkgid="ae919648f16725536fbd3f9fb1806408be644039f66bd4373fc579e624f4c356" name="wpa_supplicant" arch="x86_64">
  <version epoch="0" ver="2.6" rel="lp150.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1408536000">- fix dbus systemd activation (bnc#892683)</changelog>
  <changelog author="schwab@suse.de" date="1411041600">- Avoid spurious dependency on /usr/bin/python due to executable doc files</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1413633600">- Update to 2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed wfd_dev_info to be more careful and not read beyond the buffer
    when parsing invalid information for P2P-DEVICE-FOUND
  * extended P2P and GAS query operations to support drivers that have
    maximum remain-on-channel time below 1000 ms (500 ms is the current
    minimum supported value)
  * added p2p_search_delay parameter to make the default p2p_find delay
    configurable
  * improved P2P operating channel selection for various multi-channel
    concurrency cases
  * fixed some TDLS failure cases to clean up driver state
  * fixed dynamic interface addition cases with nl80211 to avoid adding
    ifindex values to incorrect interface to skip foreign interface events
    properly
  * added TDLS workaround for some APs that may add extra data to the
    end of a short frame
  * fixed EAP-AKA' message parser with multiple AT_KDF attributes
  * added configuration option (p2p_passphrase_len) to allow longer
    passphrases to be generated for P2P groups
  * fixed IBSS channel configuration in some corner cases
  * improved HT/VHT/QoS parameter setup for TDLS
  * modified D-Bus interface for P2P peers/groups
  * started to use constant time comparison for various password and hash
    values to reduce possibility of any externally measurable timing
    differences
  * extended explicit clearing of freed memory and expired keys to avoid
    keeping private data in memory longer than necessary
  * added optional scan_id parameter to the SCAN command to allow manual
    scan requests for active scans for specific configured SSIDs
  * fixed CTRL-EVENT-REGDOM-CHANGE event init parameter value
  * added option to set Hotspot 2.0 Rel 2 update_identifier in network
    configuration to support external configuration
  * modified Android PNO functionality to send Probe Request frames only
    for hidden SSIDs (based on scan_ssid=1)
  * added generic mechanism for adding vendor elements into frames at
    runtime (VENDOR_ELEM_ADD, VENDOR_ELEM_GET, VENDOR_ELEM_REMOVE)
  * added fields to show unrecognized vendor elements in P2P_PEER
  * removed EAP-TTLS/MSCHAPv2 interoperability workaround so that
    MS-CHAP2-Success is required to be present regardless of
    eap_workaround configuration
  * modified EAP fast session resumption to allow results to be used only
    with the same network block that generated them
  * extended freq_list configuration to apply for sched_scan as well as
    normal scan
  * modified WPS to merge mixed-WPA/WPA2 credentials from a single session
  * fixed nl80211/RTM_DELLINK processing when a P2P GO interface is
    removed from a bridge
  * fixed number of small P2P issues to make negotiations more robust in
    corner cases
  * added experimental support for using temporary, random local MAC
    address (mac_addr and preassoc_mac_addr parameters); this is disabled
    by default (i.e., previous behavior of using permanent address is
    maintained if configuration is not changed)
  * added D-Bus interface for setting/clearing WFD IEs
  * fixed TDLS AID configuration for VHT
  * modified -m&lt;conf&gt; configuration file to be used only for the P2P
    non-netdev management device and do not load this for the default
    station interface or load the station interface configuration for
    the P2P management interface
  * fixed external MAC address changes while wpa_supplicant is running
  * started to enable HT (if supported by the driver) for IBSS
  * fixed wpa_cli action script execution to use more robust mechanism
    (CVE-2014-3686)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1427976000">- Update to 2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * P2P:
  - add new=&lt;0/1&gt; flag to P2P-DEVICE-FOUND events
  - add passive channels in invitation response from P2P Client
  - enable nl80211 P2P_DEVICE support by default
  - fix regresssion in disallow_freq preventing search on social
    channels
  - fix regressions in P2P SD query processing
  - try to re-invite with social operating channel if no common channels
    in invitation
  - allow cross connection on parent interface (this fixes number of
    use cases with nl80211)
  - add support for P2P services (P2PS)
  - add p2p_go_ctwindow configuration parameter to allow GO CTWindow to
    be configured
  * increase postponing of EAPOL-Start by one second with AP/GO that
    supports WPS 2.0 (this makes it less likely to trigger extra roundtrip
    of identity frames)
  * add support for PMKSA caching with SAE
  * add support for control mesh BSS (IEEE 802.11s) operations
  * fixed number of issues with D-Bus P2P commands
  * fixed regression in ap_scan=2 special case for WPS
  * fixed macsec_validate configuration
  * add a workaround for incorrectly behaving APs that try to use
    EAPOL-Key descriptor version 3 when the station supports PMF even if
    PMF is not enabled on the AP
  * allow TLS v1.1 and v1.2 to be negotiated by default; previous behavior
    of disabling these can be configured to work around issues with broken
    servers with phase1="tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=1"
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * add WMM-AC support (WMM_AC_ADDTS/WMM_AC_DELTS)
  * improved BSS Transition Management processing
  * add support for neighbor report
  * add support for link measurement
  * fixed expiration of BSS entry with all-zeros BSSID
  * add optional LAST_ID=x argument to LIST_NETWORK to allow all
    configured networks to be listed even with huge number of network
    profiles
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed EAP-IKEv2 fragmentation reassembly
  * improved PKCS#11 configuration for OpenSSL
  * set stdout to be line-buffered
  * add TDLS channel switch configuration
  * add support for MAC address randomization in scans with nl80211
  * enable HT for IBSS if supported by the driver
  * add BSSID black and white lists (bssid_blacklist, bssid_whitelist)
  * add support for domain_suffix_match with GnuTLS
  * add OCSP stapling client support with GnuTLS
  * include peer certificate in EAP events even without a separate probe
    operation; old behavior can be restored with cert_in_cb=0
  * add peer ceritficate alt subject name to EAP events
    (CTRL-EVENT-EAP-PEER-ALT)
  * add domain_match network profile parameter (similar to
    domain_suffix_match, but full match is required)
  * enable AP/GO mode HT Tx STBC automatically based on driver support
  * add ANQP-QUERY-DONE event to provide information on ANQP parsing
    status
  * allow passive scanning to be forced with passive_scan=1
  * add a workaround for Linux packet socket behavior when interface is in
    bridge
  * increase 5 GHz band preference in BSS selection (estimate SNR, if info
    not available from driver; estimate maximum throughput based on common
    HT/VHT/specific TX rate support)
  * add INTERWORKING_ADD_NETWORK ctrl_iface command; this can be used to
    implement Interworking network selection behavior in upper layers
    software components
  * add optional reassoc_same_bss_optim=1 (disabled by default)
    optimization to avoid unnecessary Authentication frame exchange
  * extend TDLS frame padding workaround to cover all packets
  * allow wpa_supplicant to recover nl80211 functionality if the cfg80211
    module gets removed and reloaded without restarting wpa_supplicant
  * allow hostapd DFS implementation to be used in wpa_supplicant AP mode</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1428753600">- Delete wpa_priv and eapol_test man pages, these are disabled in config
- Move wpa_gui man page to gui package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1429790400">- 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  Fix CVE-2015-1863, memcpy overflow.
- wpa_supplicant-alloc_size.patch: annotate two wrappers
  with attribute alloc_size, which may help warning us of
  bugs such as the above.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Add wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch
  Fix Segmentation fault in wpa_supplicant. Patch taken from
  upstream master git (arch#44740).</changelog>
  <changelog author="ro@suse.de" date="1431000000">- added patch for bnc#930077
  0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch
- added patch for bnc#930078
  0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch
- added patches for bnc#930079
  0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch
  0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch
  0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch
  0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch
  0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch</changelog>
  <changelog author="michael@stroeder.com" date="1454587200">- removed obsolete security patches:
  * 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  * 0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch
  * 0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch
  * 0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch
  * wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch
  * 0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch
  * 0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch
  * 0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch
  * 0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch
- Update to upstream release 2.5
  * fixed P2P validation of SSID element length before copying it
    [http://w1.fi/security/2015-1/] (CVE-2015-1863)
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
    [http://w1.fi/security/2015-2/] (CVE-2015-4141)
  * fixed WMM Action frame parser (AP mode)
    [http://w1.fi/security/2015-3/] (CVE-2015-4142)
  * fixed EAP-pwd peer missing payload length validation
    [http://w1.fi/security/2015-4/]
    (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146)
  * fixed validation of WPS and P2P NFC NDEF record payload length
    [http://w1.fi/security/2015-5/]
  * nl80211:
  - added VHT configuration for IBSS
  - fixed vendor command handling to check OUI properly
  - allow driver-based roaming to change ESS
  * added AVG_BEACON_RSSI to SIGNAL_POLL output
  * wpa_cli: added tab completion for number of commands
  * removed unmaintained and not yet completed SChannel/CryptoAPI support
  * modified Extended Capabilities element use in Probe Request frames to
    include all cases if any of the values are non-zero
  * added support for dynamically creating/removing a virtual interface
    with interface_add/interface_remove
  * added support for hashed password (NtHash) in EAP-pwd peer
  * added support for memory-only PSK/passphrase (mem_only_psk=1 and
    CTRL-REQ/RSP-PSK_PASSPHRASE)
  * P2P
  - optimize scan frequencies list when re-joining a persistent group
  - fixed number of sequences with nl80211 P2P Device interface
  - added operating class 125 for P2P use cases (this allows 5 GHz
    channels 161 and 169 to be used if they are enabled in the current
    regulatory domain)
  - number of fixes to P2PS functionality
  - do not allow 40 MHz co-ex PRI/SEC switch to force MCC
  - extended support for preferred channel listing
  * D-Bus:
  - fixed WPS property of fi.w1.wpa_supplicant1.BSS interface
  - fixed PresenceRequest to use group interface
  - added new signals: FindStopped, WPS pbc-overlap,
    GroupFormationFailure, WPS timeout, InvitationReceived
  - added new methods: WPS Cancel, P2P Cancel, Reconnect, RemoveClient
  - added manufacturer info
  * added EAP-EKE peer support for deriving Session-Id
  * added wps_priority configuration parameter to set the default priority
    for all network profiles added by WPS
  * added support to request a scan with specific SSIDs with the SCAN
    command (optional "ssid &lt;hexdump&gt;" arguments)
  * removed support for WEP40/WEP104 as a group cipher with WPA/WPA2
  * fixed SAE group selection in an error case
  * modified SAE routines to be more robust and PWE generation to be
    stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * fixed BSS selection based on estimated throughput
  * added option to disable TLSv1.0 with OpenSSL
    (phase1="tls_disable_tlsv1_0=1")
  * added Fast Session Transfer (FST) module
  * fixed OpenSSL PKCS#12 extra certificate handling
  * fixed key derivation for Suite B 192-bit AKM (this breaks
    compatibility with the earlier version)
  * added RSN IE to Mesh Peering Open/Confirm frames
  * number of small fixes</changelog>
  <changelog author="lnussel@suse.de" date="1455710400">- add aliases for both provided dbus names to avoid systemd stopping the
  service when switching runlevels (boo#966535)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455796800">- Previous update did not include version 2.5 tarball
  or changed the version number in spec, only the changelog
  and removed patches.
- config: set CONFIG_NO_RANDOM_POOL=y, we have a reliable
  random number generator by using /dev/urandom, no need to
  keep an internal random number pool which draws entropy from
  /dev/random.
- config: prefer using epoll(7) instead of select(2)
  by setting CONFIG_ELOOP_EPOLL=y
- wpa_supplicant-getrandom.patch: Prefer to use the getrandom(2)
  system call to collect entropy. if it is not present disable
  buffering when reading /dev/urandom, otherwise each os_get_random()
  call will request BUFSIZ of entropy instead of the few needed bytes.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455969600">- spec: Compile the GUI against QT5 in 13.2 and later.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456488000">- Revert CONFIG_ELOOP_EPOLL=y, it is broken in combination
  with CONFIG_DBUS=yes.</changelog>
  <changelog author="lnussel@suse.de" date="1458734400">- add After=dbus.service to prevent too early shutdown (bnc#963652)</changelog>
  <changelog author="tchvatal@suse.com" date="1469016000">- Remove support for &lt;12.3 as we are unresolvable there anyway
- Use qt5 on 13.2 if someone pulls this package in
- Convert to pkgconfig dependencies over the devel pkgs
- Use the %qmake5 macro to build the qt5 gui</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- updated to 2.6 / 2016-10-02
  * fixed WNM Sleep Mode processing when PMF is not enabled
    [http://w1.fi/security/2015-6/] (CVE-2015-5310 bsc#952254)
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5315 bsc#953115)
  * fixed EAP-pwd unexpected Confirm message processing
    [http://w1.fi/security/2015-8/] (CVE-2015-5316 bsc#953115)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476 bsc#978172)
  * fixed configuration update vulnerability with malformed parameters set
    over the local control interface
    [http://w1.fi/security/2016-1/] (CVE-2016-4477 bsc#978175)
  * fixed TK configuration to the driver in EAPOL-Key 3/4 retry case
  * extended channel switch support for P2P GO
  * started to throttle control interface event message bursts to avoid
    issues with monitor sockets running out of buffer space
  * mesh mode fixes/improvements
  - generate proper AID for peer
  - enable WMM by default
  - add VHT support
  - fix PMKID derivation
  - improve robustness on various exchanges
  - fix peer link counting in reconnect case
  - improve mesh joining behavior
  - allow DTIM period to be configured
  - allow HT to be disabled (disable_ht=1)
  - add MESH_PEER_ADD and MESH_PEER_REMOVE commands
  - add support for PMKSA caching
  - add minimal support for SAE group negotiation
  - allow pairwise/group cipher to be configured in the network profile
  - use ieee80211w profile parameter to enable/disable PMF and derive
    a separate TX IGTK if PMF is enabled instead of using MGTK
    incorrectly
  - fix AEK and MTK derivation
  - remove GTKdata and IGTKdata from Mesh Peering Confirm/Close
  - note: these changes are not fully backwards compatible for secure
    (RSN) mesh network
  * fixed PMKID derivation with SAE
  * added support for requesting and fetching arbitrary ANQP-elements
    without internal support in wpa_supplicant for the specific element
    (anqp[265]=&lt;hexdump&gt; in "BSS &lt;BSSID&gt;" command output)
  * P2P
  - filter control characters in group client device names to be
    consistent with other P2P peer cases
  - support VHT 80+80 MHz and 160 MHz
  - indicate group completion in P2P Client role after data association
    instead of already after the WPS provisioning step
  - improve group-join operation to use SSID, if known, to filter BSS
    entries
  - added optional ssid=&lt;hexdump&gt; argument to P2P_CONNECT for join case
  - added P2P_GROUP_MEMBER command to fetch client interface address
  * P2PS
  - fix follow-on PD Response behavior
  - fix PD Response generation for unknown peer
  - fix persistent group reporting
  - add channel policy to PD Request
  - add group SSID to the P2PS-PROV-DONE event
  - allow "P2P_CONNECT &lt;addr&gt; p2ps" to be used without specifying the
    default PIN
  * BoringSSL
  - support for OCSP stapling
  - support building of h20-osu-client
  * D-Bus
  - add ExpectDisconnect()
  - add global config parameters as properties
  - add SaveConfig()
  - add VendorElemAdd(), VendorElemGet(), VendorElemRem()
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * improved PMF behavior for cases where the AP and STA has different
    configuration by not trying to connect in some corner cases where the
    connection cannot succeed
  * added option to reopen debug log (e.g., to rotate the file) upon
    receipt of SIGHUP signal
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * extended INTERFACE_ADD command to allow certain type (sta/ap)
    interface to be created
  * fixed and improved various FST operations
  * added 80+80 MHz and 160 MHz VHT support for IBSS/mesh
  * fixed SIGNAL_POLL in IBSS and mesh cases
  * added an option to abort an ongoing scan (used to speed up connection
    and can also be done with the new ABORT_SCAN command)
  * TLS client
  - do not verify CA certificates when ca_cert is not specified
  - support validating server certificate hash
  - support SHA384 and SHA512 hashes
  - add signature_algorithms extension into ClientHello
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support server certificate probing
  - allow specific TLS versions to be disabled with phase2 parameter
  - support extKeyUsage
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * OpenSSL
  - support OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * added support for multiple schedule scan plans (sched_scan_plans)
  * added support for external server certificate chain validation
    (tls_ext_cert_check=1 in the network profile phase1 parameter)
  * made phase2 parser more strict about correct use of auth=&lt;val&gt; and
    autheap=&lt;val&gt; values
  * improved GAS offchannel operations with comeback request
  * added SIGNAL_MONITOR command to request signal strength monitoring
    events
  * added command for retrieving HS 2.0 icons with in-memory storage
    (REQ_HS20_ICON, GET_HS20_ICON, DEL_HS20_ICON commands and
    RX-HS20-ICON event)
  * enabled ACS support for AP mode operations with wpa_supplicant
  * EAP-PEAP: fixed interoperability issue with Windows 2012r2 server
    ("Invalid Compound_MAC in cryptobinding TLV")
  * EAP-TTLS: fixed success after fragmented final Phase 2 message
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * WNM: workaround for broken AP operating class behavior
  * added kqueue(2) support for eloop (CONFIG_ELOOP_KQUEUE)
  * nl80211:
  - add support for full station state operations
  - do not add NL80211_ATTR_SMPS_MODE attribute if HT is disabled
  - add NL80211_ATTR_PREV_BSSID with Connect command
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added support for PBSS/PCP and P2P on 60 GHz
  * Interworking: add credential realm to EAP-TLS identity
  * fixed EAPOL-Key Request Secure bit to be 1 if PTK is set
  * HS 2.0: add support for configuring frame filters
  * added POLL_STA command to check connectivity in AP mode
  * added initial functionality for location related operations
  * started to ignore pmf=1/2 parameter for non-RSN networks
  * added wps_disabled=1 network profile parameter to allow AP mode to
    be started without enabling WPS
  * wpa_cli: added action script support for AP-ENABLED and AP-DISABLED
    events
  * improved Public Action frame addressing
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * number of small fixes
- wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff: dump x509
  certificates from remote radius server in debug mode in WPA-EAP.</changelog>
  <changelog author="dwaas@suse.com" date="1482494400">- Added .service files that accept interfaces as %i arguments so it's possible
  to call the daemon with:
  "systemctl start wpa_supplicant@$INTERFACE_NAME.service"
  (like openvpn for example)</changelog>
  <changelog author="obs@botter.cc" date="1492776000">- fix wpa_supplicant-sigusr1-changes-debuglevel.patch to match
  eloop_signal_handler type (needed to build eapol_test via config)</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- Fix KRACK attacks (bsc#1056061, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  - rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  - rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  - rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  - rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  - rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  - rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  - rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  - rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="ro@suse.de" date="1532088000">- add two patches from upstream to fix reading private key
  passwords from the configuration file (bsc#1099835)
  - add patch for git 89971d8b1e328a2f79699c953625d1671fd40384
    wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch
  - add patch for git f665c93e1d28fbab3d9127a8c3985cc32940824f
    wpa_supplicant-bnc-1099835-fix-private-key-password.patch</changelog>
</package>
<package pkgid="391dd95ff0ca9046a118279044463db98b14ada862a664825b97701388a12948" name="wpa_supplicant-gui" arch="x86_64">
  <version epoch="0" ver="2.6" rel="lp150.3.3.1"/>
  <changelog author="lnussel@suse.de" date="1408536000">- fix dbus systemd activation (bnc#892683)</changelog>
  <changelog author="schwab@suse.de" date="1411041600">- Avoid spurious dependency on /usr/bin/python due to executable doc files</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1413633600">- Update to 2.3
  * fixed number of minor issues identified in static analyzer warnings
  * fixed wfd_dev_info to be more careful and not read beyond the buffer
    when parsing invalid information for P2P-DEVICE-FOUND
  * extended P2P and GAS query operations to support drivers that have
    maximum remain-on-channel time below 1000 ms (500 ms is the current
    minimum supported value)
  * added p2p_search_delay parameter to make the default p2p_find delay
    configurable
  * improved P2P operating channel selection for various multi-channel
    concurrency cases
  * fixed some TDLS failure cases to clean up driver state
  * fixed dynamic interface addition cases with nl80211 to avoid adding
    ifindex values to incorrect interface to skip foreign interface events
    properly
  * added TDLS workaround for some APs that may add extra data to the
    end of a short frame
  * fixed EAP-AKA' message parser with multiple AT_KDF attributes
  * added configuration option (p2p_passphrase_len) to allow longer
    passphrases to be generated for P2P groups
  * fixed IBSS channel configuration in some corner cases
  * improved HT/VHT/QoS parameter setup for TDLS
  * modified D-Bus interface for P2P peers/groups
  * started to use constant time comparison for various password and hash
    values to reduce possibility of any externally measurable timing
    differences
  * extended explicit clearing of freed memory and expired keys to avoid
    keeping private data in memory longer than necessary
  * added optional scan_id parameter to the SCAN command to allow manual
    scan requests for active scans for specific configured SSIDs
  * fixed CTRL-EVENT-REGDOM-CHANGE event init parameter value
  * added option to set Hotspot 2.0 Rel 2 update_identifier in network
    configuration to support external configuration
  * modified Android PNO functionality to send Probe Request frames only
    for hidden SSIDs (based on scan_ssid=1)
  * added generic mechanism for adding vendor elements into frames at
    runtime (VENDOR_ELEM_ADD, VENDOR_ELEM_GET, VENDOR_ELEM_REMOVE)
  * added fields to show unrecognized vendor elements in P2P_PEER
  * removed EAP-TTLS/MSCHAPv2 interoperability workaround so that
    MS-CHAP2-Success is required to be present regardless of
    eap_workaround configuration
  * modified EAP fast session resumption to allow results to be used only
    with the same network block that generated them
  * extended freq_list configuration to apply for sched_scan as well as
    normal scan
  * modified WPS to merge mixed-WPA/WPA2 credentials from a single session
  * fixed nl80211/RTM_DELLINK processing when a P2P GO interface is
    removed from a bridge
  * fixed number of small P2P issues to make negotiations more robust in
    corner cases
  * added experimental support for using temporary, random local MAC
    address (mac_addr and preassoc_mac_addr parameters); this is disabled
    by default (i.e., previous behavior of using permanent address is
    maintained if configuration is not changed)
  * added D-Bus interface for setting/clearing WFD IEs
  * fixed TDLS AID configuration for VHT
  * modified -m&lt;conf&gt; configuration file to be used only for the P2P
    non-netdev management device and do not load this for the default
    station interface or load the station interface configuration for
    the P2P management interface
  * fixed external MAC address changes while wpa_supplicant is running
  * started to enable HT (if supported by the driver) for IBSS
  * fixed wpa_cli action script execution to use more robust mechanism
    (CVE-2014-3686)</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1427976000">- Update to 2.4
  * allow OpenSSL cipher configuration to be set for internal EAP server
    (openssl_ciphers parameter)
  * fixed number of small issues based on hwsim test case failures and
    static analyzer reports
  * P2P:
  - add new=&lt;0/1&gt; flag to P2P-DEVICE-FOUND events
  - add passive channels in invitation response from P2P Client
  - enable nl80211 P2P_DEVICE support by default
  - fix regresssion in disallow_freq preventing search on social
    channels
  - fix regressions in P2P SD query processing
  - try to re-invite with social operating channel if no common channels
    in invitation
  - allow cross connection on parent interface (this fixes number of
    use cases with nl80211)
  - add support for P2P services (P2PS)
  - add p2p_go_ctwindow configuration parameter to allow GO CTWindow to
    be configured
  * increase postponing of EAPOL-Start by one second with AP/GO that
    supports WPS 2.0 (this makes it less likely to trigger extra roundtrip
    of identity frames)
  * add support for PMKSA caching with SAE
  * add support for control mesh BSS (IEEE 802.11s) operations
  * fixed number of issues with D-Bus P2P commands
  * fixed regression in ap_scan=2 special case for WPS
  * fixed macsec_validate configuration
  * add a workaround for incorrectly behaving APs that try to use
    EAPOL-Key descriptor version 3 when the station supports PMF even if
    PMF is not enabled on the AP
  * allow TLS v1.1 and v1.2 to be negotiated by default; previous behavior
    of disabling these can be configured to work around issues with broken
    servers with phase1="tls_disable_tlsv1_1=1 tls_disable_tlsv1_2=1"
  * add support for Suite B (128-bit and 192-bit level) key management and
    cipher suites
  * add WMM-AC support (WMM_AC_ADDTS/WMM_AC_DELTS)
  * improved BSS Transition Management processing
  * add support for neighbor report
  * add support for link measurement
  * fixed expiration of BSS entry with all-zeros BSSID
  * add optional LAST_ID=x argument to LIST_NETWORK to allow all
    configured networks to be listed even with huge number of network
    profiles
  * add support for EAP Re-Authentication Protocol (ERP)
  * fixed EAP-IKEv2 fragmentation reassembly
  * improved PKCS#11 configuration for OpenSSL
  * set stdout to be line-buffered
  * add TDLS channel switch configuration
  * add support for MAC address randomization in scans with nl80211
  * enable HT for IBSS if supported by the driver
  * add BSSID black and white lists (bssid_blacklist, bssid_whitelist)
  * add support for domain_suffix_match with GnuTLS
  * add OCSP stapling client support with GnuTLS
  * include peer certificate in EAP events even without a separate probe
    operation; old behavior can be restored with cert_in_cb=0
  * add peer ceritficate alt subject name to EAP events
    (CTRL-EVENT-EAP-PEER-ALT)
  * add domain_match network profile parameter (similar to
    domain_suffix_match, but full match is required)
  * enable AP/GO mode HT Tx STBC automatically based on driver support
  * add ANQP-QUERY-DONE event to provide information on ANQP parsing
    status
  * allow passive scanning to be forced with passive_scan=1
  * add a workaround for Linux packet socket behavior when interface is in
    bridge
  * increase 5 GHz band preference in BSS selection (estimate SNR, if info
    not available from driver; estimate maximum throughput based on common
    HT/VHT/specific TX rate support)
  * add INTERWORKING_ADD_NETWORK ctrl_iface command; this can be used to
    implement Interworking network selection behavior in upper layers
    software components
  * add optional reassoc_same_bss_optim=1 (disabled by default)
    optimization to avoid unnecessary Authentication frame exchange
  * extend TDLS frame padding workaround to cover all packets
  * allow wpa_supplicant to recover nl80211 functionality if the cfg80211
    module gets removed and reloaded without restarting wpa_supplicant
  * allow hostapd DFS implementation to be used in wpa_supplicant AP mode</changelog>
  <changelog author="stefan.bruens@rwth-aachen.de" date="1428753600">- Delete wpa_priv and eapol_test man pages, these are disabled in config
- Move wpa_gui man page to gui package</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1429790400">- 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  Fix CVE-2015-1863, memcpy overflow.
- wpa_supplicant-alloc_size.patch: annotate two wrappers
  with attribute alloc_size, which may help warning us of
  bugs such as the above.</changelog>
  <changelog author="zaitor@opensuse.org" date="1430481600">- Add wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch
  Fix Segmentation fault in wpa_supplicant. Patch taken from
  upstream master git (arch#44740).</changelog>
  <changelog author="ro@suse.de" date="1431000000">- added patch for bnc#930077
  0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch
- added patch for bnc#930078
  0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch
- added patches for bnc#930079
  0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch
  0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch
  0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch
  0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch
  0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch</changelog>
  <changelog author="michael@stroeder.com" date="1454587200">- removed obsolete security patches:
  * 0001-P2P-Validate-SSID-element-length-before-copying-it-C.patch
  * 0001-WPS-Fix-HTTP-chunked-transfer-encoding-parser.patch
  * 0001-AP-WMM-Fix-integer-underflow-in-WMM-Action-frame-par.patch
  * 0001-EAP-pwd-peer-Fix-payload-length-validation-for-Commi.patch
  * wpa_s-D-Bus-Fix-operations-when-P2P-management-interface-is-used.patch
  * 0002-EAP-pwd-server-Fix-payload-length-validation-for-Com.patch
  * 0003-EAP-pwd-peer-Fix-Total-Length-parsing-for-fragment-r.patch
  * 0004-EAP-pwd-server-Fix-Total-Length-parsing-for-fragment.patch
  * 0005-EAP-pwd-peer-Fix-asymmetric-fragmentation-behavior.patch
- Update to upstream release 2.5
  * fixed P2P validation of SSID element length before copying it
    [http://w1.fi/security/2015-1/] (CVE-2015-1863)
  * fixed WPS UPnP vulnerability with HTTP chunked transfer encoding
    [http://w1.fi/security/2015-2/] (CVE-2015-4141)
  * fixed WMM Action frame parser (AP mode)
    [http://w1.fi/security/2015-3/] (CVE-2015-4142)
  * fixed EAP-pwd peer missing payload length validation
    [http://w1.fi/security/2015-4/]
    (CVE-2015-4143, CVE-2015-4144, CVE-2015-4145, CVE-2015-4146)
  * fixed validation of WPS and P2P NFC NDEF record payload length
    [http://w1.fi/security/2015-5/]
  * nl80211:
  - added VHT configuration for IBSS
  - fixed vendor command handling to check OUI properly
  - allow driver-based roaming to change ESS
  * added AVG_BEACON_RSSI to SIGNAL_POLL output
  * wpa_cli: added tab completion for number of commands
  * removed unmaintained and not yet completed SChannel/CryptoAPI support
  * modified Extended Capabilities element use in Probe Request frames to
    include all cases if any of the values are non-zero
  * added support for dynamically creating/removing a virtual interface
    with interface_add/interface_remove
  * added support for hashed password (NtHash) in EAP-pwd peer
  * added support for memory-only PSK/passphrase (mem_only_psk=1 and
    CTRL-REQ/RSP-PSK_PASSPHRASE)
  * P2P
  - optimize scan frequencies list when re-joining a persistent group
  - fixed number of sequences with nl80211 P2P Device interface
  - added operating class 125 for P2P use cases (this allows 5 GHz
    channels 161 and 169 to be used if they are enabled in the current
    regulatory domain)
  - number of fixes to P2PS functionality
  - do not allow 40 MHz co-ex PRI/SEC switch to force MCC
  - extended support for preferred channel listing
  * D-Bus:
  - fixed WPS property of fi.w1.wpa_supplicant1.BSS interface
  - fixed PresenceRequest to use group interface
  - added new signals: FindStopped, WPS pbc-overlap,
    GroupFormationFailure, WPS timeout, InvitationReceived
  - added new methods: WPS Cancel, P2P Cancel, Reconnect, RemoveClient
  - added manufacturer info
  * added EAP-EKE peer support for deriving Session-Id
  * added wps_priority configuration parameter to set the default priority
    for all network profiles added by WPS
  * added support to request a scan with specific SSIDs with the SCAN
    command (optional "ssid &lt;hexdump&gt;" arguments)
  * removed support for WEP40/WEP104 as a group cipher with WPA/WPA2
  * fixed SAE group selection in an error case
  * modified SAE routines to be more robust and PWE generation to be
    stronger against timing attacks
  * added support for Brainpool Elliptic Curves with SAE
  * added support for CCMP-256 and GCMP-256 as group ciphers with FT
  * fixed BSS selection based on estimated throughput
  * added option to disable TLSv1.0 with OpenSSL
    (phase1="tls_disable_tlsv1_0=1")
  * added Fast Session Transfer (FST) module
  * fixed OpenSSL PKCS#12 extra certificate handling
  * fixed key derivation for Suite B 192-bit AKM (this breaks
    compatibility with the earlier version)
  * added RSN IE to Mesh Peering Open/Confirm frames
  * number of small fixes</changelog>
  <changelog author="lnussel@suse.de" date="1455710400">- add aliases for both provided dbus names to avoid systemd stopping the
  service when switching runlevels (boo#966535)</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455796800">- Previous update did not include version 2.5 tarball
  or changed the version number in spec, only the changelog
  and removed patches.
- config: set CONFIG_NO_RANDOM_POOL=y, we have a reliable
  random number generator by using /dev/urandom, no need to
  keep an internal random number pool which draws entropy from
  /dev/random.
- config: prefer using epoll(7) instead of select(2)
  by setting CONFIG_ELOOP_EPOLL=y
- wpa_supplicant-getrandom.patch: Prefer to use the getrandom(2)
  system call to collect entropy. if it is not present disable
  buffering when reading /dev/urandom, otherwise each os_get_random()
  call will request BUFSIZ of entropy instead of the few needed bytes.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1455969600">- spec: Compile the GUI against QT5 in 13.2 and later.</changelog>
  <changelog author="crrodriguez@opensuse.org" date="1456488000">- Revert CONFIG_ELOOP_EPOLL=y, it is broken in combination
  with CONFIG_DBUS=yes.</changelog>
  <changelog author="lnussel@suse.de" date="1458734400">- add After=dbus.service to prevent too early shutdown (bnc#963652)</changelog>
  <changelog author="tchvatal@suse.com" date="1469016000">- Remove support for &lt;12.3 as we are unresolvable there anyway
- Use qt5 on 13.2 if someone pulls this package in
- Convert to pkgconfig dependencies over the devel pkgs
- Use the %qmake5 macro to build the qt5 gui</changelog>
  <changelog author="meissner@suse.com" date="1475755200">- updated to 2.6 / 2016-10-02
  * fixed WNM Sleep Mode processing when PMF is not enabled
    [http://w1.fi/security/2015-6/] (CVE-2015-5310 bsc#952254)
  * fixed EAP-pwd last fragment validation
    [http://w1.fi/security/2015-7/] (CVE-2015-5315 bsc#953115)
  * fixed EAP-pwd unexpected Confirm message processing
    [http://w1.fi/security/2015-8/] (CVE-2015-5316 bsc#953115)
  * fixed WPS configuration update vulnerability with malformed passphrase
    [http://w1.fi/security/2016-1/] (CVE-2016-4476 bsc#978172)
  * fixed configuration update vulnerability with malformed parameters set
    over the local control interface
    [http://w1.fi/security/2016-1/] (CVE-2016-4477 bsc#978175)
  * fixed TK configuration to the driver in EAPOL-Key 3/4 retry case
  * extended channel switch support for P2P GO
  * started to throttle control interface event message bursts to avoid
    issues with monitor sockets running out of buffer space
  * mesh mode fixes/improvements
  - generate proper AID for peer
  - enable WMM by default
  - add VHT support
  - fix PMKID derivation
  - improve robustness on various exchanges
  - fix peer link counting in reconnect case
  - improve mesh joining behavior
  - allow DTIM period to be configured
  - allow HT to be disabled (disable_ht=1)
  - add MESH_PEER_ADD and MESH_PEER_REMOVE commands
  - add support for PMKSA caching
  - add minimal support for SAE group negotiation
  - allow pairwise/group cipher to be configured in the network profile
  - use ieee80211w profile parameter to enable/disable PMF and derive
    a separate TX IGTK if PMF is enabled instead of using MGTK
    incorrectly
  - fix AEK and MTK derivation
  - remove GTKdata and IGTKdata from Mesh Peering Confirm/Close
  - note: these changes are not fully backwards compatible for secure
    (RSN) mesh network
  * fixed PMKID derivation with SAE
  * added support for requesting and fetching arbitrary ANQP-elements
    without internal support in wpa_supplicant for the specific element
    (anqp[265]=&lt;hexdump&gt; in "BSS &lt;BSSID&gt;" command output)
  * P2P
  - filter control characters in group client device names to be
    consistent with other P2P peer cases
  - support VHT 80+80 MHz and 160 MHz
  - indicate group completion in P2P Client role after data association
    instead of already after the WPS provisioning step
  - improve group-join operation to use SSID, if known, to filter BSS
    entries
  - added optional ssid=&lt;hexdump&gt; argument to P2P_CONNECT for join case
  - added P2P_GROUP_MEMBER command to fetch client interface address
  * P2PS
  - fix follow-on PD Response behavior
  - fix PD Response generation for unknown peer
  - fix persistent group reporting
  - add channel policy to PD Request
  - add group SSID to the P2PS-PROV-DONE event
  - allow "P2P_CONNECT &lt;addr&gt; p2ps" to be used without specifying the
    default PIN
  * BoringSSL
  - support for OCSP stapling
  - support building of h20-osu-client
  * D-Bus
  - add ExpectDisconnect()
  - add global config parameters as properties
  - add SaveConfig()
  - add VendorElemAdd(), VendorElemGet(), VendorElemRem()
  * fixed Suite B 192-bit AKM to use proper PMK length
    (note: this makes old releases incompatible with the fixed behavior)
  * improved PMF behavior for cases where the AP and STA has different
    configuration by not trying to connect in some corner cases where the
    connection cannot succeed
  * added option to reopen debug log (e.g., to rotate the file) upon
    receipt of SIGHUP signal
  * EAP-pwd: added support for Brainpool Elliptic Curves
    (with OpenSSL 1.0.2 and newer)
  * fixed EAPOL reauthentication after FT protocol run
  * fixed FTIE generation for 4-way handshake after FT protocol run
  * extended INTERFACE_ADD command to allow certain type (sta/ap)
    interface to be created
  * fixed and improved various FST operations
  * added 80+80 MHz and 160 MHz VHT support for IBSS/mesh
  * fixed SIGNAL_POLL in IBSS and mesh cases
  * added an option to abort an ongoing scan (used to speed up connection
    and can also be done with the new ABORT_SCAN command)
  * TLS client
  - do not verify CA certificates when ca_cert is not specified
  - support validating server certificate hash
  - support SHA384 and SHA512 hashes
  - add signature_algorithms extension into ClientHello
  - support TLS v1.2 signature algorithm with SHA384 and SHA512
  - support server certificate probing
  - allow specific TLS versions to be disabled with phase2 parameter
  - support extKeyUsage
  - support PKCS #5 v2.0 PBES2
  - support PKCS #5 with PKCS #12 style key decryption
  - minimal support for PKCS #12
  - support OCSP stapling (including ocsp_multi)
  * OpenSSL
  - support OpenSSL 1.1 API changes
  - drop support for OpenSSL 0.9.8
  - drop support for OpenSSL 1.0.0
  * added support for multiple schedule scan plans (sched_scan_plans)
  * added support for external server certificate chain validation
    (tls_ext_cert_check=1 in the network profile phase1 parameter)
  * made phase2 parser more strict about correct use of auth=&lt;val&gt; and
    autheap=&lt;val&gt; values
  * improved GAS offchannel operations with comeback request
  * added SIGNAL_MONITOR command to request signal strength monitoring
    events
  * added command for retrieving HS 2.0 icons with in-memory storage
    (REQ_HS20_ICON, GET_HS20_ICON, DEL_HS20_ICON commands and
    RX-HS20-ICON event)
  * enabled ACS support for AP mode operations with wpa_supplicant
  * EAP-PEAP: fixed interoperability issue with Windows 2012r2 server
    ("Invalid Compound_MAC in cryptobinding TLV")
  * EAP-TTLS: fixed success after fragmented final Phase 2 message
  * VHT: added interoperability workaround for 80+80 and 160 MHz channels
  * WNM: workaround for broken AP operating class behavior
  * added kqueue(2) support for eloop (CONFIG_ELOOP_KQUEUE)
  * nl80211:
  - add support for full station state operations
  - do not add NL80211_ATTR_SMPS_MODE attribute if HT is disabled
  - add NL80211_ATTR_PREV_BSSID with Connect command
  - fix IEEE 802.1X/WEP EAP reauthentication and rekeying to use
    unencrypted EAPOL frames
  * added initial MBO support; number of extensions to WNM BSS Transition
    Management
  * added support for PBSS/PCP and P2P on 60 GHz
  * Interworking: add credential realm to EAP-TLS identity
  * fixed EAPOL-Key Request Secure bit to be 1 if PTK is set
  * HS 2.0: add support for configuring frame filters
  * added POLL_STA command to check connectivity in AP mode
  * added initial functionality for location related operations
  * started to ignore pmf=1/2 parameter for non-RSN networks
  * added wps_disabled=1 network profile parameter to allow AP mode to
    be started without enabling WPS
  * wpa_cli: added action script support for AP-ENABLED and AP-DISABLED
    events
  * improved Public Action frame addressing
  - add gas_address3 configuration parameter to control Address 3
    behavior
  * number of small fixes
- wpa_supplicant-dump-certificate-as-PEM-in-debug-mode.diff: dump x509
  certificates from remote radius server in debug mode in WPA-EAP.</changelog>
  <changelog author="dwaas@suse.com" date="1482494400">- Added .service files that accept interfaces as %i arguments so it's possible
  to call the daemon with:
  "systemctl start wpa_supplicant@$INTERFACE_NAME.service"
  (like openvpn for example)</changelog>
  <changelog author="obs@botter.cc" date="1492776000">- fix wpa_supplicant-sigusr1-changes-debuglevel.patch to match
  eloop_signal_handler type (needed to build eapol_test via config)</changelog>
  <changelog author="meissner@suse.com" date="1508155200">- Fix KRACK attacks (bsc#1056061, CVE-2017-13078, CVE-2017-13079, CVE-2017-13080, CVE-2017-13081, CVE-2017-13087, CVE-2017-13088):
  - rebased-v2.6-0001-hostapd-Avoid-key-reinstallation-in-FT-handshake.patch
  - rebased-v2.6-0002-Prevent-reinstallation-of-an-already-in-use-group-ke.patch
  - rebased-v2.6-0003-Extend-protection-of-GTK-IGTK-reinstallation-of-WNM-.patch
  - rebased-v2.6-0004-Prevent-installation-of-an-all-zero-TK.patch
  - rebased-v2.6-0005-Fix-PTK-rekeying-to-generate-a-new-ANonce.patch
  - rebased-v2.6-0006-TDLS-Reject-TPK-TK-reconfiguration.patch
  - rebased-v2.6-0007-WNM-Ignore-WNM-Sleep-Mode-Response-without-pending-r.patch
  - rebased-v2.6-0008-FT-Do-not-allow-multiple-Reassociation-Response-fram.patch</changelog>
  <changelog author="ro@suse.de" date="1532088000">- add two patches from upstream to fix reading private key
  passwords from the configuration file (bsc#1099835)
  - add patch for git 89971d8b1e328a2f79699c953625d1671fd40384
    wpa_supplicant-bnc-1099835-clear-default_passwd_cb.patch
  - add patch for git f665c93e1d28fbab3d9127a8c3985cc32940824f
    wpa_supplicant-bnc-1099835-fix-private-key-password.patch</changelog>
</package>
<package pkgid="e0d050366d231ce2e9146dd349933d54150be1f1b26e0e904958d32f7babfa63" name="xdg-utils" arch="noarch">
  <version epoch="0" ver="20170508" rel="lp150.3.3.2"/>
  <changelog author="jslaby@suse.de" date="1345464000">- update to snapshot from 20120809
  * fix xdg-su for icewm (bnc#776202)
  * remove xfce-su.diff (merged)
  * few fixes (syntax errors in some cases and such)
  * see ChangeLog for updates</changelog>
  <changelog author="jslaby@suse.com" date="1347883200">- update to snapshot from 20120916
  * mate support added
  * switch to local _service
  * fix bad date in the file name</changelog>
  <changelog author="jslaby@suse.com" date="1369051200">- update to 20121008
  * xdg-mime does not search mimeinfo.cache (BR31629)
- xdg-open-be-more-paranoid-in-escaping.patch: xdg-open: be more
  paranoid in escaping (bnc#811959)</changelog>
  <changelog author="fcrozat@suse.com" date="1380715200">- Requires which package, otherwise most xdg scripts won't work
  properly.</changelog>
  <changelog author="jslaby@suse.com" date="1389268800">- update to 20140109
  * xdg-mime: generic, handle filenames with colon (bnc#854777)
  * xdg-desktop-menu: improperly check for vendor prefix ...
  * xdg-screensaver: Support MATE desktop part 2
  * xdg-desktop-menu: Unquoted file name (BR69399)
  * xdg-open: Detect Enlightenment and make use of it
  * xdg-open: be more paranoid in escaping
- xdg-open-be-more-paranoid-in-escaping.patch: remove</changelog>
  <changelog author="fcrozat@suse.com" date="1404129600">- Update to 20140630:
  * manpage for xdg-su and xdg-terminal
  * xdg-terminal: better support for screen and rxvt variants
  * add xdg-settings tool
  * improve KDE detection
  * xdg-open: various fixes
  * xdg-screensaver: use D-Bus api to lock GNOME screensaver</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1411473600">- Update to 20140922:
  * Initial support for Plasma5
  * XFCE .desktop file created for browser selection is broken
    (fdo#56092)
  * Unnecessary filtering file:// for pcmanfm (fdo#63153)
  * fails if user sets a custom IFS environment variable
    (fdo#81386)
  * xdg-utils-common is broken, xdg-open uses bashism (fdo#83979)
  * xdg-email: do not encode - character</changelog>
  <changelog author="jslaby@suse.com" date="1417089600">- Update to 20141009:
  * more of plasma5
- xdg-mime-generic-do-not-return-more-than-one-default.patch (bnc#906625)
- .spec cleanup</changelog>
  <changelog author="simon@simotek.net" date="1419768000">- add fix-enlightenment-support.patch
  * xdg-su and xdg-terminal both detected enlightenment then did nothing
  * xdg-su and xdg-terminal both use terminology rather then xterm now</changelog>
  <changelog author="jslaby@suse.com" date="1421755200">- update to 20150119
  * xdg-open: Improve performance of get_key function
  * xdg-open: better fix for command injection vulnerability (bnc#913676)
  * xdg-screensaver: Change screensaver_freedesktop's interpretation of GetActive
  * xdg-mime: dereference symlinks when using mimetype or file
  * xdg-open: command injection vulnerability
  * xdg-screensaver should control X11's screensaver in xfce as fallback</changelog>
  <changelog author="jslaby@suse.com" date="1446552000">- update to 20151005
  * ChangeLog: add debian bug number
  * ChangeLog: add some space
  * xdg-open: Add proper quoting so that files with spaces in their names can be opened in generic mode and LXDE
  * t-xdg-open: test opening files with spaces in LXDE too
  * t-xdg-open: quote file variable properly in mock_xdg_mime()
  * xdg-open: Fix regression in generic mode (wrong variable name)
  * t-xdg-open: improve mocking of xdg-mime (check all arguments)
  * t-xdg-open: can open -&gt; opens
  * t-xdg-open: test that it can open files with spaces in their names in generic mode
  * t-xdg-open: move generic open file testing to its own function
  * t-xdg-open: move xdg-mime mocking to its own function
  * t-xdg-open: use the mock script argument instead of writing a mock script manually
  * oops, fix spelling of name
  * xdg-screensaver: Run 'xset -dpms' and then 'xset +dpms' to reset the DPMS timer
  * add .dir-locals.el that switches off change-log-mode in Emacs for ChangeLog
  * add t-xdg-screensaver
  * xdg-screensaver: handle XDG_CURRENT_DESKTOP=X-Generic
  * test-lib: take arbitrary script code as argument to mock
  * remove org.freedesktop.ScreenSaver support from TODO
  * release xdg-utils 1.1.0
  * xdg-email: Remove obsolete references to http://portland.freedesktop.org/wiki/EmailConfig from the manual
  * add releaseinfo element to xdg-settings manual
  * Add references to specifications to the manuals
  * xdg-open: use sed to remove file URL query strings, the shell will interpret '?' as any character despite escaping
  * xdg-open: Only strip queries (?) and fragments (#) from file URLs before decoding them, not from (decoded) paths
  * t-xdg-open: test that it can open files with # characters in generic mode
  * t-xdg-open: test that it can open files in generic mode
  * t-xdg-open: under -&gt; in
  * t-xdg-open: separate out proper testcases
  * autotests: don't print test filename
  * xdg-email: Rewrite open_kde()
  * t-xdg-email: update KDE tests
  * autotests: Add t-xdg-email.sh with KDE5 test
  * Revert "Remove .sh extension from autotests"
  * Remove .sh extension from autotests
  * +x on t-xdg-settings.sh
  * xdg-settings: apply basename to browser desktop file in generic mode
  * t-xdg-settings: test $BROWSER in generic mode
  * xdg-settings: Add a proper generic mode.
  * xdg-settings: Detect generic DE instead of failing. (Debian bug #787791)
  * autotests: add t-xdg-settings.sh
  * add /failed-tests to autotests/.gitignore
  * test-lib: add mock_output()
  * xdg-open, xdg-email: Add iceweasel to the list of fallback browsers. (Debian bug #788047)
  * add Debian bug number to ChangeLog
  * test-lib: better assertion failed message for assert_run
  * indentation
  * use $LABHOME/.local/share for $XDG_DATA_HOME
  * is -&gt; are
  * t-xdg-open: also test Cinnamon
  * xdg-open: Fall back to generic mode if gvfs-open and gnome-open are missing. Don't try to use gnome-open if running under GNOME 3 or Cinnamon.
  * t-xdg-open.sh: test that gnome3 and gnome2 fall back to generic if gvfs-open and gnome-open are missing
  * xdg-mime: Check ~/.config/mimeapps.list instead of ~/.config/applications/mimeapps.list when looking for default application.
  * test-lib: always mock x-www-browser so we have a fallback
  * put default apps in $XDG_CONFIG_HOME/mimeapps.list
  * test-lib: add mock_desktop_file and mock_default_app
  * test-lib: add XDG_CONFIG_HOME and create it in reset_lab_()
  * test-lib: nicer output formatting
  * merge t-xdg-open-url and t-xdg-open-file into t-xdg-open
  * autotests: set COMMAND_TESTED in each test file and rename test_that to test_that_it which prints the command to be tested. Also remove test file printing from makefile
  * test-lib: don't trace which commands are run unless TRACE_RUN=1
  * add test_that invocations before every test
  * test-lib: rename setup_lab to reset_lab_
  * test-lib: add test_that function that resets the lab, echoes the argument and records it
  * test-lib: add XDG_CONFIG_DIRS to environment
  * autotests: add LABHOME directory lab/home and set HOME to LABHOME when running xdg-utils commands
  * test-lib: clear $BROWSER in setup_lab
  * xdg-utils-common: Add support for GNOME-Flashback:GNOME value X-Generic.
  * xdg-open: Percent-decode file:// URLs in open_lxde and add testcase. (BR89654)
  * autotests/Makefile.in: use rm -f insted of -rm
  * autotests: remove Makefile in distclean target
  * speling
  * xdg-icon-resouce: Don't try to install anything into empty $icon_dir's.
  * add autotests/t-xdg-icon-resource.sh
  * test-lib.sh: pass on XDG_UTILS_DEBUG_LEVEL in run()
  * autotests: add autotest target to subdir makefile
  * test-lib.sh: add assert_file_exists
  * test-lib.sh: create hicolor icon directories in lab
  * add changelog entry: xdg-open: Try www-browser first of the non-X browsers.
  * Merge branch 'feature/try-www-browser-first' into upstream
  * add changelog entry: xdg-open: Add support for running without X.
  * Merge branch 'feature/no-X' into upstream
  * changelog message: xdg-email: Add support for the  environment variable.
  * Merge branch 'feature/mailer-envvar' into upstream
  * thank Ben Hutchings for the gnome-screensaver perl script
  * add changelog message for the gnome-screensaver suspend perl code
  * Merge branch 'bug/gnome3-screensaver-suspend' into upstream
  * use Makefile.in in autotests for consistency
  * changelog entry for the new automatic test suite
  * check that $BROWSER with %s is safe from shell injection
  * use empty default target in autotests/Makefile to avoid running tests as part of the build process
  * Merge branch 'bug/prefer-browser-envvar' into feature/autotests
  * run tests with sh in case they lack the x-bit
  * add extra blank line after test failures output
  * add autotests to SUBDIRS in top-level makefile and add clean target
  * collect failed assertions instead of aborting
  * check that $BROWSER overrides mimeapps.list in generic mode
  * add BROWSER to env
  * add autotest target to top makefile
  * Try $BROWSER first in generic mode if it is set by the user.
  * add generic and lxde tests to t-xdg-open-url.sh
  * add test t-xdg-mime-query-default.sh
  * make applications directories and add assert_equal() function
  * Introduce an automated test suite.
  * move www-browser to separate feature/patch
  * Try www-browser first when running without $DISPLAY.
  * Add support for using xdg-open and xdg-email without X.
  * Add $MAILER support to xdg-email.
  * Use DBus API for GNOME since gnome-screensaver-command --poke has been removed
  * xdg-email: Recipients passed to Thunderbird are incorrectly quoted (BR91996)
  * xdg-email: generic mode does nothing (BR92008)
  * xdg-email: Icedove support (BR91997)
  * xdg-email: bashism: relies on bash's echo in run_thunderbird() (BR91990)
  * xdg-open shell script contains bash code (BR86028)
  * xdg-open: Add support for multi-word $BROWSER commands (BR91989)
  * Changelog for previous commit
  * xdg-icon-resource: quote var expansions
  * xdg-icon-resource: does not support filenames with spaces (BR91758)
  * xdg-screensaver support for xautolock (BR89655)
  * xdg-screensaver: fix a comment typo
  * xdg-mime: remove obsolete workaround for bug #33094
  * amend changelog to be more specific
  * add changelog for last batch of commits
  * xdg-terminal: add support for GNOME3, Cinnamon, MATE
  * xdg-su: add support for Cinnamon
  * xdg-settings: add support for all GVfs-based desktops
  * xdg-open: use cygstart on Cygwin
  * xdg-open: fix operation on Darwin
  * xdg-open: add support for Cinnamon
  * xdg-mime: add support for all GVfs-based desktops
  * xdg-mime: implement Mime Apps Spec
  * xdg-file-dialog: use zenity on Cinnamon and MATE
  * xdg-email: add support for all GVfs-based desktops
  * xdg-copy: add support for all GVfs-based desktops
  * Add detection of Cinnamon desktop
  * Improve detection of GNOME Classic and Flashback sessions
  * followup commit, copy-n-paste fail
  * xdg-email: generic check for assigned mailto (BR79929)
  * xdg-mime: search mimeinfo.cache in $xdg_user_dir too (BR31629)
  * typo from previous commit
  * xdg-open: does not exit if it does not recognize the mimetype (BR89902)
  * xdg-desktop-menu:  does not support filenames with spaces (BR66605)
  * xdg-open:  fix regression where &amp; gets replaced with \\&amp; in URLs
  * xdg-email: thunderbird launch in xdg-email in gnome3 fails (BR61475)
  * add ChangeLog entry for previous commit
  * xdg-mime: do not report multiple desktop files (BR60329)
  * one more s/$arg/$target/ rename fix for prior commit
  * xdg-open: safer xdg-open (BR89130)
- Remove: xdg-mime-generic-do-not-return-more-than-one-default.patch
- Remove: xdg-screensaver-gnome-perl.diff</changelog>
  <changelog author="ronisbr@gmail.com" date="1449144000">- Add patch `xdg-terminal-fix-gsettings.patch` to fix upstream
  bfo#93231</changelog>
  <changelog author="jslaby@suse.com" date="1449403200">- update to 20151112
  * xdg-utils-common: bump version number
  * Check for $WAYLAND_DISPLAY as well as $DISPLAY.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453464000">- Update to 20151219:
  * xdg-open: Improve fallbacks, add open_generic (almost)
    everywhere (fdo#93442).
  * xdg-open: Standardise output redirection style.
- Add xdg-terminal-fix-terminal--x-arg.patch: fix for "-x" usage
  (default option for MATE and GNOME terminals).
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1454760000">- Fix a mistake with build architecture.</changelog>
  <changelog author="sflees@suse.de" date="1463745600">- Update to 20160520
  * xdg-mime: support for KDE Frameworks 5.6
  * xdg-mime does not write the file it reads in a query (BR95051)
  * xdg-screensaver: Add cinnamon-screensaver D-Bus API support.
  * xdg-open: standardize output redirection style
- Fix issues related to xdg-open/xdg-mime generic code paths.
  * common-vendor-dirs-in-desktop_to_binary.patch
  * xdg-mime-return-existing-desktop-files.patch</changelog>
  <changelog author="sflees@suse.de" date="1479211200">- Update to 20160610
  * Fixes for last update
- boo#1004321 desktop files with a - are still valid, issue in
  common-vendor-dirs-in-desktop_to_binary.patch
- boo#959912 Introduce LXQt support, renamed
  fix-enlightenment-support.patch to fix-enlightenment-lxqt-support.patch</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Update to version 20170508:
  * xdg-open: Add "chromium" to fallback browsers
  * changelog for prior commit
  * xdg-mime: fails on encountering a list for x-scheme-handler (BR44163)
  * common: implement vendor dirs in desktop_file_to_binary (BR44163)
  * Add better support for Enlightenment and LXQt (BR98561)
  * xdg-screensaver: Restore previous X11 screensaver timeout (BR#98509)
  * adjust version for release/tag
- removed common-vendor-dirs-in-desktop_to_binary.patch
- removed fix-enlightenment-lxqt-support.patch
- removed xdg-mime-return-existing-desktop-files.patch</changelog>
  <changelog author="sflees@suse.de" date="1525176000">- boo#1051353 can't set default browser on kde.
  * fix-kde-browser-check.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1527076800">- Add 0001-Avoid-argument-injection-vulnerability-in-open_envvar.patch from
  upstream to fix an argument injection when BROWSER contains %s
  (boo#1093086, CVE-2017-18266, fdo#103807).</changelog>
</package>
<package pkgid="90c448d41c405ae037e75b9340740586f8eea3b558161fdea1dafed0a720065f" name="xdg-utils" arch="src">
  <version epoch="0" ver="20170508" rel="lp150.3.3.2"/>
  <changelog author="jslaby@suse.de" date="1345464000">- update to snapshot from 20120809
  * fix xdg-su for icewm (bnc#776202)
  * remove xfce-su.diff (merged)
  * few fixes (syntax errors in some cases and such)
  * see ChangeLog for updates</changelog>
  <changelog author="jslaby@suse.com" date="1347883200">- update to snapshot from 20120916
  * mate support added
  * switch to local _service
  * fix bad date in the file name</changelog>
  <changelog author="jslaby@suse.com" date="1369051200">- update to 20121008
  * xdg-mime does not search mimeinfo.cache (BR31629)
- xdg-open-be-more-paranoid-in-escaping.patch: xdg-open: be more
  paranoid in escaping (bnc#811959)</changelog>
  <changelog author="fcrozat@suse.com" date="1380715200">- Requires which package, otherwise most xdg scripts won't work
  properly.</changelog>
  <changelog author="jslaby@suse.com" date="1389268800">- update to 20140109
  * xdg-mime: generic, handle filenames with colon (bnc#854777)
  * xdg-desktop-menu: improperly check for vendor prefix ...
  * xdg-screensaver: Support MATE desktop part 2
  * xdg-desktop-menu: Unquoted file name (BR69399)
  * xdg-open: Detect Enlightenment and make use of it
  * xdg-open: be more paranoid in escaping
- xdg-open-be-more-paranoid-in-escaping.patch: remove</changelog>
  <changelog author="fcrozat@suse.com" date="1404129600">- Update to 20140630:
  * manpage for xdg-su and xdg-terminal
  * xdg-terminal: better support for screen and rxvt variants
  * add xdg-settings tool
  * improve KDE detection
  * xdg-open: various fixes
  * xdg-screensaver: use D-Bus api to lock GNOME screensaver</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1411473600">- Update to 20140922:
  * Initial support for Plasma5
  * XFCE .desktop file created for browser selection is broken
    (fdo#56092)
  * Unnecessary filtering file:// for pcmanfm (fdo#63153)
  * fails if user sets a custom IFS environment variable
    (fdo#81386)
  * xdg-utils-common is broken, xdg-open uses bashism (fdo#83979)
  * xdg-email: do not encode - character</changelog>
  <changelog author="jslaby@suse.com" date="1417089600">- Update to 20141009:
  * more of plasma5
- xdg-mime-generic-do-not-return-more-than-one-default.patch (bnc#906625)
- .spec cleanup</changelog>
  <changelog author="simon@simotek.net" date="1419768000">- add fix-enlightenment-support.patch
  * xdg-su and xdg-terminal both detected enlightenment then did nothing
  * xdg-su and xdg-terminal both use terminology rather then xterm now</changelog>
  <changelog author="jslaby@suse.com" date="1421755200">- update to 20150119
  * xdg-open: Improve performance of get_key function
  * xdg-open: better fix for command injection vulnerability (bnc#913676)
  * xdg-screensaver: Change screensaver_freedesktop's interpretation of GetActive
  * xdg-mime: dereference symlinks when using mimetype or file
  * xdg-open: command injection vulnerability
  * xdg-screensaver should control X11's screensaver in xfce as fallback</changelog>
  <changelog author="jslaby@suse.com" date="1446552000">- update to 20151005
  * ChangeLog: add debian bug number
  * ChangeLog: add some space
  * xdg-open: Add proper quoting so that files with spaces in their names can be opened in generic mode and LXDE
  * t-xdg-open: test opening files with spaces in LXDE too
  * t-xdg-open: quote file variable properly in mock_xdg_mime()
  * xdg-open: Fix regression in generic mode (wrong variable name)
  * t-xdg-open: improve mocking of xdg-mime (check all arguments)
  * t-xdg-open: can open -&gt; opens
  * t-xdg-open: test that it can open files with spaces in their names in generic mode
  * t-xdg-open: move generic open file testing to its own function
  * t-xdg-open: move xdg-mime mocking to its own function
  * t-xdg-open: use the mock script argument instead of writing a mock script manually
  * oops, fix spelling of name
  * xdg-screensaver: Run 'xset -dpms' and then 'xset +dpms' to reset the DPMS timer
  * add .dir-locals.el that switches off change-log-mode in Emacs for ChangeLog
  * add t-xdg-screensaver
  * xdg-screensaver: handle XDG_CURRENT_DESKTOP=X-Generic
  * test-lib: take arbitrary script code as argument to mock
  * remove org.freedesktop.ScreenSaver support from TODO
  * release xdg-utils 1.1.0
  * xdg-email: Remove obsolete references to http://portland.freedesktop.org/wiki/EmailConfig from the manual
  * add releaseinfo element to xdg-settings manual
  * Add references to specifications to the manuals
  * xdg-open: use sed to remove file URL query strings, the shell will interpret '?' as any character despite escaping
  * xdg-open: Only strip queries (?) and fragments (#) from file URLs before decoding them, not from (decoded) paths
  * t-xdg-open: test that it can open files with # characters in generic mode
  * t-xdg-open: test that it can open files in generic mode
  * t-xdg-open: under -&gt; in
  * t-xdg-open: separate out proper testcases
  * autotests: don't print test filename
  * xdg-email: Rewrite open_kde()
  * t-xdg-email: update KDE tests
  * autotests: Add t-xdg-email.sh with KDE5 test
  * Revert "Remove .sh extension from autotests"
  * Remove .sh extension from autotests
  * +x on t-xdg-settings.sh
  * xdg-settings: apply basename to browser desktop file in generic mode
  * t-xdg-settings: test $BROWSER in generic mode
  * xdg-settings: Add a proper generic mode.
  * xdg-settings: Detect generic DE instead of failing. (Debian bug #787791)
  * autotests: add t-xdg-settings.sh
  * add /failed-tests to autotests/.gitignore
  * test-lib: add mock_output()
  * xdg-open, xdg-email: Add iceweasel to the list of fallback browsers. (Debian bug #788047)
  * add Debian bug number to ChangeLog
  * test-lib: better assertion failed message for assert_run
  * indentation
  * use $LABHOME/.local/share for $XDG_DATA_HOME
  * is -&gt; are
  * t-xdg-open: also test Cinnamon
  * xdg-open: Fall back to generic mode if gvfs-open and gnome-open are missing. Don't try to use gnome-open if running under GNOME 3 or Cinnamon.
  * t-xdg-open.sh: test that gnome3 and gnome2 fall back to generic if gvfs-open and gnome-open are missing
  * xdg-mime: Check ~/.config/mimeapps.list instead of ~/.config/applications/mimeapps.list when looking for default application.
  * test-lib: always mock x-www-browser so we have a fallback
  * put default apps in $XDG_CONFIG_HOME/mimeapps.list
  * test-lib: add mock_desktop_file and mock_default_app
  * test-lib: add XDG_CONFIG_HOME and create it in reset_lab_()
  * test-lib: nicer output formatting
  * merge t-xdg-open-url and t-xdg-open-file into t-xdg-open
  * autotests: set COMMAND_TESTED in each test file and rename test_that to test_that_it which prints the command to be tested. Also remove test file printing from makefile
  * test-lib: don't trace which commands are run unless TRACE_RUN=1
  * add test_that invocations before every test
  * test-lib: rename setup_lab to reset_lab_
  * test-lib: add test_that function that resets the lab, echoes the argument and records it
  * test-lib: add XDG_CONFIG_DIRS to environment
  * autotests: add LABHOME directory lab/home and set HOME to LABHOME when running xdg-utils commands
  * test-lib: clear $BROWSER in setup_lab
  * xdg-utils-common: Add support for GNOME-Flashback:GNOME value X-Generic.
  * xdg-open: Percent-decode file:// URLs in open_lxde and add testcase. (BR89654)
  * autotests/Makefile.in: use rm -f insted of -rm
  * autotests: remove Makefile in distclean target
  * speling
  * xdg-icon-resouce: Don't try to install anything into empty $icon_dir's.
  * add autotests/t-xdg-icon-resource.sh
  * test-lib.sh: pass on XDG_UTILS_DEBUG_LEVEL in run()
  * autotests: add autotest target to subdir makefile
  * test-lib.sh: add assert_file_exists
  * test-lib.sh: create hicolor icon directories in lab
  * add changelog entry: xdg-open: Try www-browser first of the non-X browsers.
  * Merge branch 'feature/try-www-browser-first' into upstream
  * add changelog entry: xdg-open: Add support for running without X.
  * Merge branch 'feature/no-X' into upstream
  * changelog message: xdg-email: Add support for the  environment variable.
  * Merge branch 'feature/mailer-envvar' into upstream
  * thank Ben Hutchings for the gnome-screensaver perl script
  * add changelog message for the gnome-screensaver suspend perl code
  * Merge branch 'bug/gnome3-screensaver-suspend' into upstream
  * use Makefile.in in autotests for consistency
  * changelog entry for the new automatic test suite
  * check that $BROWSER with %s is safe from shell injection
  * use empty default target in autotests/Makefile to avoid running tests as part of the build process
  * Merge branch 'bug/prefer-browser-envvar' into feature/autotests
  * run tests with sh in case they lack the x-bit
  * add extra blank line after test failures output
  * add autotests to SUBDIRS in top-level makefile and add clean target
  * collect failed assertions instead of aborting
  * check that $BROWSER overrides mimeapps.list in generic mode
  * add BROWSER to env
  * add autotest target to top makefile
  * Try $BROWSER first in generic mode if it is set by the user.
  * add generic and lxde tests to t-xdg-open-url.sh
  * add test t-xdg-mime-query-default.sh
  * make applications directories and add assert_equal() function
  * Introduce an automated test suite.
  * move www-browser to separate feature/patch
  * Try www-browser first when running without $DISPLAY.
  * Add support for using xdg-open and xdg-email without X.
  * Add $MAILER support to xdg-email.
  * Use DBus API for GNOME since gnome-screensaver-command --poke has been removed
  * xdg-email: Recipients passed to Thunderbird are incorrectly quoted (BR91996)
  * xdg-email: generic mode does nothing (BR92008)
  * xdg-email: Icedove support (BR91997)
  * xdg-email: bashism: relies on bash's echo in run_thunderbird() (BR91990)
  * xdg-open shell script contains bash code (BR86028)
  * xdg-open: Add support for multi-word $BROWSER commands (BR91989)
  * Changelog for previous commit
  * xdg-icon-resource: quote var expansions
  * xdg-icon-resource: does not support filenames with spaces (BR91758)
  * xdg-screensaver support for xautolock (BR89655)
  * xdg-screensaver: fix a comment typo
  * xdg-mime: remove obsolete workaround for bug #33094
  * amend changelog to be more specific
  * add changelog for last batch of commits
  * xdg-terminal: add support for GNOME3, Cinnamon, MATE
  * xdg-su: add support for Cinnamon
  * xdg-settings: add support for all GVfs-based desktops
  * xdg-open: use cygstart on Cygwin
  * xdg-open: fix operation on Darwin
  * xdg-open: add support for Cinnamon
  * xdg-mime: add support for all GVfs-based desktops
  * xdg-mime: implement Mime Apps Spec
  * xdg-file-dialog: use zenity on Cinnamon and MATE
  * xdg-email: add support for all GVfs-based desktops
  * xdg-copy: add support for all GVfs-based desktops
  * Add detection of Cinnamon desktop
  * Improve detection of GNOME Classic and Flashback sessions
  * followup commit, copy-n-paste fail
  * xdg-email: generic check for assigned mailto (BR79929)
  * xdg-mime: search mimeinfo.cache in $xdg_user_dir too (BR31629)
  * typo from previous commit
  * xdg-open: does not exit if it does not recognize the mimetype (BR89902)
  * xdg-desktop-menu:  does not support filenames with spaces (BR66605)
  * xdg-open:  fix regression where &amp; gets replaced with \\&amp; in URLs
  * xdg-email: thunderbird launch in xdg-email in gnome3 fails (BR61475)
  * add ChangeLog entry for previous commit
  * xdg-mime: do not report multiple desktop files (BR60329)
  * one more s/$arg/$target/ rename fix for prior commit
  * xdg-open: safer xdg-open (BR89130)
- Remove: xdg-mime-generic-do-not-return-more-than-one-default.patch
- Remove: xdg-screensaver-gnome-perl.diff</changelog>
  <changelog author="ronisbr@gmail.com" date="1449144000">- Add patch `xdg-terminal-fix-gsettings.patch` to fix upstream
  bfo#93231</changelog>
  <changelog author="jslaby@suse.com" date="1449403200">- update to 20151112
  * xdg-utils-common: bump version number
  * Check for $WAYLAND_DISPLAY as well as $DISPLAY.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1453464000">- Update to 20151219:
  * xdg-open: Improve fallbacks, add open_generic (almost)
    everywhere (fdo#93442).
  * xdg-open: Standardise output redirection style.
- Add xdg-terminal-fix-terminal--x-arg.patch: fix for "-x" usage
  (default option for MATE and GNOME terminals).
- Spec cleanup.</changelog>
  <changelog author="sor.alexei@meowr.ru" date="1454760000">- Fix a mistake with build architecture.</changelog>
  <changelog author="sflees@suse.de" date="1463745600">- Update to 20160520
  * xdg-mime: support for KDE Frameworks 5.6
  * xdg-mime does not write the file it reads in a query (BR95051)
  * xdg-screensaver: Add cinnamon-screensaver D-Bus API support.
  * xdg-open: standardize output redirection style
- Fix issues related to xdg-open/xdg-mime generic code paths.
  * common-vendor-dirs-in-desktop_to_binary.patch
  * xdg-mime-return-existing-desktop-files.patch</changelog>
  <changelog author="sflees@suse.de" date="1479211200">- Update to 20160610
  * Fixes for last update
- boo#1004321 desktop files with a - are still valid, issue in
  common-vendor-dirs-in-desktop_to_binary.patch
- boo#959912 Introduce LXQt support, renamed
  fix-enlightenment-support.patch to fix-enlightenment-lxqt-support.patch</changelog>
  <changelog author="jslaby@suse.com" date="1495540800">- Update to version 20170508:
  * xdg-open: Add "chromium" to fallback browsers
  * changelog for prior commit
  * xdg-mime: fails on encountering a list for x-scheme-handler (BR44163)
  * common: implement vendor dirs in desktop_file_to_binary (BR44163)
  * Add better support for Enlightenment and LXQt (BR98561)
  * xdg-screensaver: Restore previous X11 screensaver timeout (BR#98509)
  * adjust version for release/tag
- removed common-vendor-dirs-in-desktop_to_binary.patch
- removed fix-enlightenment-lxqt-support.patch
- removed xdg-mime-return-existing-desktop-files.patch</changelog>
  <changelog author="sflees@suse.de" date="1525176000">- boo#1051353 can't set default browser on kde.
  * fix-kde-browser-check.patch</changelog>
  <changelog author="alarrosa@suse.com" date="1527076800">- Add 0001-Avoid-argument-injection-vulnerability-in-open_envvar.patch from
  upstream to fix an argument injection when BROWSER contains %s
  (boo#1093086, CVE-2017-18266, fdo#103807).</changelog>
</package>
<package pkgid="118d257f610310a261e5e27b45eac6f46087820762add462c38413cbb7545ca3" name="xen" arch="src">
  <version epoch="0" ver="4.10.1_04" rel="lp150.2.3.1"/>
  <changelog author="ohering@suse.de" date="1515585600">- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu,
  depending on the libxl disk settings
  libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch</changelog>
  <changelog author="carnold@suse.com" date="1516968000">- Fix python3 deprecated atoi call (bsc#1067224)
  pygrub-python3-conversion.patch
- Drop xenmon-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1517227200">- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with
  MSR emulation (XSA-253)
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
  xen: Information leak via side effects of speculative execution
  (XSA-254). Includes Spectre v2 mitigation.
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch</changelog>
  <changelog author="ohering@suse.de" date="1518004800">- Remove outdated /etc/xen/README*</changelog>
  <changelog author="jfehlig@suse.com" date="1518004801">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation"
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
</package>
<package pkgid="02b1502619f8f219f568db32f662553b574ef3fdfcde9cd8c0d571927cf31dbb" name="xen" arch="x86_64">
  <version epoch="0" ver="4.10.1_04" rel="lp150.2.3.1"/>
  <changelog author="ohering@suse.de" date="1515585600">- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu,
  depending on the libxl disk settings
  libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch</changelog>
  <changelog author="carnold@suse.com" date="1516968000">- Fix python3 deprecated atoi call (bsc#1067224)
  pygrub-python3-conversion.patch
- Drop xenmon-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1517227200">- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with
  MSR emulation (XSA-253)
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
  xen: Information leak via side effects of speculative execution
  (XSA-254). Includes Spectre v2 mitigation.
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch</changelog>
  <changelog author="ohering@suse.de" date="1518004800">- Remove outdated /etc/xen/README*</changelog>
  <changelog author="jfehlig@suse.com" date="1518004801">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation"
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
</package>
<package pkgid="bcc5915d2f55f60f2f26bd2a41e969ed824ac168e1aa299ac511f431c99c7b1a" name="xen" arch="src">
  <version epoch="0" ver="4.10.1_06" rel="lp150.2.6.1"/>
  <changelog author="jfehlig@suse.com" date="1518004800">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
</package>
<package pkgid="651f0669e547edcc96e95c5cd6b2135bb6796d2cb79ff8c03d0e0c9bac08150f" name="xen" arch="x86_64">
  <version epoch="0" ver="4.10.1_06" rel="lp150.2.6.1"/>
  <changelog author="jfehlig@suse.com" date="1518004800">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
</package>
<package pkgid="46c1d886937f3f2567966ce958fc7f27b335f5a02cc95b075d21e70f898b06c2" name="xen" arch="src">
  <version epoch="0" ver="4.10.1_08" rel="lp150.2.9.1"/>
  <changelog author="ohering@suse.de" date="1518177600">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928001">- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
  <changelog author="carnold@suse.com" date="1532606400">- Upstream patches from Jan (bsc#1027519)
  5af03009-x86-pv-hide-more-EFER-bits-from-PV.patch
  5b3f8fa5-port-array_index_nospec-from-Linux.patch
  5b4488e7-x86-spec-ctrl-cmdline-handling.patch
  5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
  5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
  5b4db308-SVM-fix-cleanup-svm_inject_event.patch
  5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
  5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
  5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
  5b508775-2-x86-possibly-bring-up-all-CPUs.patch
  5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
  5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
  5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
  5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
  5b56feb1-x86-hvm-disallow-unknown-EFER-bits.patch
  5b56feb2-x86-XPTI-parsing-on-fixed-Intel-HW.patch</changelog>
  <changelog author="carnold@suse.com" date="1533643200">- bsc#1103276 - VUL-0: xen: x86: Incorrect MSR_DEBUGCTL handling
  lets guests enable BTS (XSA-269)
  xsa269.patch</changelog>
  <changelog author="carnold@suse.com" date="1534161600">- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM
  (XSA-273)
  xsa273-1.patch
  xsa273-2.patch
  xsa273-3.patch
  xsa273-4.patch
  xsa273-5.patch
  xsa273-6.patch
  xsa273-7.patch
  xsa273-8.patch
- Upstream prereq patches for XSA-273 (bsc#1027519)
  5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
  5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
  5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
  5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
  5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
  5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
  5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
  5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
  5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
  5b505fe5-VMX-fix-find-msr-build.patch
  5b62ca93-VMX-avoid-hitting-BUG_ON.patch
  5b6d8ce2-x86-XPTI-parsing.patch</changelog>
</package>
<package pkgid="0e516e9a55b9d0f00badffa25c89d4b81861c05e765f885770fc573708375e6a" name="xen" arch="x86_64">
  <version epoch="0" ver="4.10.1_08" rel="lp150.2.9.1"/>
  <changelog author="ohering@suse.de" date="1518177600">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928001">- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
  <changelog author="carnold@suse.com" date="1532606400">- Upstream patches from Jan (bsc#1027519)
  5af03009-x86-pv-hide-more-EFER-bits-from-PV.patch
  5b3f8fa5-port-array_index_nospec-from-Linux.patch
  5b4488e7-x86-spec-ctrl-cmdline-handling.patch
  5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
  5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
  5b4db308-SVM-fix-cleanup-svm_inject_event.patch
  5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
  5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
  5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
  5b508775-2-x86-possibly-bring-up-all-CPUs.patch
  5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
  5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
  5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
  5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
  5b56feb1-x86-hvm-disallow-unknown-EFER-bits.patch
  5b56feb2-x86-XPTI-parsing-on-fixed-Intel-HW.patch</changelog>
  <changelog author="carnold@suse.com" date="1533643200">- bsc#1103276 - VUL-0: xen: x86: Incorrect MSR_DEBUGCTL handling
  lets guests enable BTS (XSA-269)
  xsa269.patch</changelog>
  <changelog author="carnold@suse.com" date="1534161600">- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM
  (XSA-273)
  xsa273-1.patch
  xsa273-2.patch
  xsa273-3.patch
  xsa273-4.patch
  xsa273-5.patch
  xsa273-6.patch
  xsa273-7.patch
  xsa273-8.patch
- Upstream prereq patches for XSA-273 (bsc#1027519)
  5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
  5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
  5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
  5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
  5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
  5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
  5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
  5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
  5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
  5b505fe5-VMX-fix-find-msr-build.patch
  5b62ca93-VMX-avoid-hitting-BUG_ON.patch
  5b6d8ce2-x86-XPTI-parsing.patch</changelog>
</package>
<package pkgid="9e6a74a6baa00e421329ad3f9badb7d315c15d3d4c5a1fbf5a22c7271cea78cb" name="xen-devel" arch="x86_64">
  <version epoch="0" ver="4.10.1_04" rel="lp150.2.3.1"/>
  <changelog author="ohering@suse.de" date="1515585600">- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu,
  depending on the libxl disk settings
  libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch</changelog>
  <changelog author="carnold@suse.com" date="1516968000">- Fix python3 deprecated atoi call (bsc#1067224)
  pygrub-python3-conversion.patch
- Drop xenmon-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1517227200">- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with
  MSR emulation (XSA-253)
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
  xen: Information leak via side effects of speculative execution
  (XSA-254). Includes Spectre v2 mitigation.
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch</changelog>
  <changelog author="ohering@suse.de" date="1518004800">- Remove outdated /etc/xen/README*</changelog>
  <changelog author="jfehlig@suse.com" date="1518004801">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation"
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
</package>
<package pkgid="11f1026462cdb9a91968b666793b6301c97c11eefa83c99bff5d2db9f8758bb2" name="xen-devel" arch="x86_64">
  <version epoch="0" ver="4.10.1_06" rel="lp150.2.6.1"/>
  <changelog author="jfehlig@suse.com" date="1518004800">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
</package>
<package pkgid="c65f399e0b88f20c79fb2257f5a9ec036d26b6c1af56688689faaa613003ba25" name="xen-devel" arch="x86_64">
  <version epoch="0" ver="4.10.1_08" rel="lp150.2.9.1"/>
  <changelog author="ohering@suse.de" date="1518177600">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928001">- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
  <changelog author="carnold@suse.com" date="1532606400">- Upstream patches from Jan (bsc#1027519)
  5af03009-x86-pv-hide-more-EFER-bits-from-PV.patch
  5b3f8fa5-port-array_index_nospec-from-Linux.patch
  5b4488e7-x86-spec-ctrl-cmdline-handling.patch
  5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
  5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
  5b4db308-SVM-fix-cleanup-svm_inject_event.patch
  5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
  5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
  5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
  5b508775-2-x86-possibly-bring-up-all-CPUs.patch
  5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
  5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
  5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
  5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
  5b56feb1-x86-hvm-disallow-unknown-EFER-bits.patch
  5b56feb2-x86-XPTI-parsing-on-fixed-Intel-HW.patch</changelog>
  <changelog author="carnold@suse.com" date="1533643200">- bsc#1103276 - VUL-0: xen: x86: Incorrect MSR_DEBUGCTL handling
  lets guests enable BTS (XSA-269)
  xsa269.patch</changelog>
  <changelog author="carnold@suse.com" date="1534161600">- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM
  (XSA-273)
  xsa273-1.patch
  xsa273-2.patch
  xsa273-3.patch
  xsa273-4.patch
  xsa273-5.patch
  xsa273-6.patch
  xsa273-7.patch
  xsa273-8.patch
- Upstream prereq patches for XSA-273 (bsc#1027519)
  5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
  5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
  5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
  5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
  5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
  5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
  5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
  5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
  5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
  5b505fe5-VMX-fix-find-msr-build.patch
  5b62ca93-VMX-avoid-hitting-BUG_ON.patch
  5b6d8ce2-x86-XPTI-parsing.patch</changelog>
</package>
<package pkgid="a83b25efdaf1801e7dc6d501597f63d105a4acabb8761c9c4d43e6e7bb67ed0a" name="xen-doc-html" arch="x86_64">
  <version epoch="0" ver="4.10.1_04" rel="lp150.2.3.1"/>
  <changelog author="ohering@suse.de" date="1515585600">- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu,
  depending on the libxl disk settings
  libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch</changelog>
  <changelog author="carnold@suse.com" date="1516968000">- Fix python3 deprecated atoi call (bsc#1067224)
  pygrub-python3-conversion.patch
- Drop xenmon-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1517227200">- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with
  MSR emulation (XSA-253)
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
  xen: Information leak via side effects of speculative execution
  (XSA-254). Includes Spectre v2 mitigation.
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch</changelog>
  <changelog author="ohering@suse.de" date="1518004800">- Remove outdated /etc/xen/README*</changelog>
  <changelog author="jfehlig@suse.com" date="1518004801">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation"
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
</package>
<package pkgid="5c466b730fe3c076c3d732ef26fdcfc9d12c9e405224abd3cb711799e0056453" name="xen-doc-html" arch="x86_64">
  <version epoch="0" ver="4.10.1_06" rel="lp150.2.6.1"/>
  <changelog author="jfehlig@suse.com" date="1518004800">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
</package>
<package pkgid="20b3956df0119cbd0fdbfe0241f590b6b08e8e10906519c16d015cc80dbd9b54" name="xen-doc-html" arch="x86_64">
  <version epoch="0" ver="4.10.1_08" rel="lp150.2.9.1"/>
  <changelog author="ohering@suse.de" date="1518177600">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928001">- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
  <changelog author="carnold@suse.com" date="1532606400">- Upstream patches from Jan (bsc#1027519)
  5af03009-x86-pv-hide-more-EFER-bits-from-PV.patch
  5b3f8fa5-port-array_index_nospec-from-Linux.patch
  5b4488e7-x86-spec-ctrl-cmdline-handling.patch
  5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
  5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
  5b4db308-SVM-fix-cleanup-svm_inject_event.patch
  5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
  5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
  5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
  5b508775-2-x86-possibly-bring-up-all-CPUs.patch
  5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
  5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
  5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
  5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
  5b56feb1-x86-hvm-disallow-unknown-EFER-bits.patch
  5b56feb2-x86-XPTI-parsing-on-fixed-Intel-HW.patch</changelog>
  <changelog author="carnold@suse.com" date="1533643200">- bsc#1103276 - VUL-0: xen: x86: Incorrect MSR_DEBUGCTL handling
  lets guests enable BTS (XSA-269)
  xsa269.patch</changelog>
  <changelog author="carnold@suse.com" date="1534161600">- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM
  (XSA-273)
  xsa273-1.patch
  xsa273-2.patch
  xsa273-3.patch
  xsa273-4.patch
  xsa273-5.patch
  xsa273-6.patch
  xsa273-7.patch
  xsa273-8.patch
- Upstream prereq patches for XSA-273 (bsc#1027519)
  5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
  5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
  5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
  5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
  5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
  5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
  5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
  5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
  5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
  5b505fe5-VMX-fix-find-msr-build.patch
  5b62ca93-VMX-avoid-hitting-BUG_ON.patch
  5b6d8ce2-x86-XPTI-parsing.patch</changelog>
</package>
<package pkgid="ddac3fa8ed38080dc62c4e51ca7c070a7fc192a00315782470eb6b46a6b8475f" name="xen-libs-32bit" arch="x86_64">
  <version epoch="0" ver="4.10.1_04" rel="lp150.2.3.1"/>
  <changelog author="ohering@suse.de" date="1515585600">- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu,
  depending on the libxl disk settings
  libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch</changelog>
  <changelog author="carnold@suse.com" date="1516968000">- Fix python3 deprecated atoi call (bsc#1067224)
  pygrub-python3-conversion.patch
- Drop xenmon-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1517227200">- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with
  MSR emulation (XSA-253)
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
  xen: Information leak via side effects of speculative execution
  (XSA-254). Includes Spectre v2 mitigation.
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch</changelog>
  <changelog author="ohering@suse.de" date="1518004800">- Remove outdated /etc/xen/README*</changelog>
  <changelog author="jfehlig@suse.com" date="1518004801">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation"
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
</package>
<package pkgid="0695ac79cac273de2b4f6ad95b6fdf6f59ab9e979122af91093ac8bb90887025" name="xen-libs-32bit" arch="x86_64">
  <version epoch="0" ver="4.10.1_06" rel="lp150.2.6.1"/>
  <changelog author="jfehlig@suse.com" date="1518004800">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
</package>
<package pkgid="bded634902a57cd5ab1d436b565bfe5e3d23df5954eb5117c92ef76d73386865" name="xen-libs-32bit" arch="x86_64">
  <version epoch="0" ver="4.10.1_08" rel="lp150.2.9.1"/>
  <changelog author="ohering@suse.de" date="1518177600">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928001">- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
  <changelog author="carnold@suse.com" date="1532606400">- Upstream patches from Jan (bsc#1027519)
  5af03009-x86-pv-hide-more-EFER-bits-from-PV.patch
  5b3f8fa5-port-array_index_nospec-from-Linux.patch
  5b4488e7-x86-spec-ctrl-cmdline-handling.patch
  5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
  5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
  5b4db308-SVM-fix-cleanup-svm_inject_event.patch
  5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
  5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
  5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
  5b508775-2-x86-possibly-bring-up-all-CPUs.patch
  5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
  5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
  5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
  5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
  5b56feb1-x86-hvm-disallow-unknown-EFER-bits.patch
  5b56feb2-x86-XPTI-parsing-on-fixed-Intel-HW.patch</changelog>
  <changelog author="carnold@suse.com" date="1533643200">- bsc#1103276 - VUL-0: xen: x86: Incorrect MSR_DEBUGCTL handling
  lets guests enable BTS (XSA-269)
  xsa269.patch</changelog>
  <changelog author="carnold@suse.com" date="1534161600">- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM
  (XSA-273)
  xsa273-1.patch
  xsa273-2.patch
  xsa273-3.patch
  xsa273-4.patch
  xsa273-5.patch
  xsa273-6.patch
  xsa273-7.patch
  xsa273-8.patch
- Upstream prereq patches for XSA-273 (bsc#1027519)
  5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
  5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
  5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
  5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
  5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
  5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
  5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
  5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
  5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
  5b505fe5-VMX-fix-find-msr-build.patch
  5b62ca93-VMX-avoid-hitting-BUG_ON.patch
  5b6d8ce2-x86-XPTI-parsing.patch</changelog>
</package>
<package pkgid="8251dc14144f79251682dc0b00a156aee6fbc36553b126511f801f28dffe9282" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.10.1_04" rel="lp150.2.3.1"/>
  <changelog author="ohering@suse.de" date="1515585600">- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu,
  depending on the libxl disk settings
  libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch</changelog>
  <changelog author="carnold@suse.com" date="1516968000">- Fix python3 deprecated atoi call (bsc#1067224)
  pygrub-python3-conversion.patch
- Drop xenmon-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1517227200">- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with
  MSR emulation (XSA-253)
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
  xen: Information leak via side effects of speculative execution
  (XSA-254). Includes Spectre v2 mitigation.
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch</changelog>
  <changelog author="ohering@suse.de" date="1518004800">- Remove outdated /etc/xen/README*</changelog>
  <changelog author="jfehlig@suse.com" date="1518004801">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation"
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
</package>
<package pkgid="4e1d8a1f127a72c0e31467f23ed5d996e8f7f93ed1834c0aff228e3dc214a483" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.10.1_06" rel="lp150.2.6.1"/>
  <changelog author="jfehlig@suse.com" date="1518004800">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
</package>
<package pkgid="24d018b0afa830f3afe747dd2bf86b575e901b61fba2ada778a08e8e8bdcfdf8" name="xen-libs" arch="x86_64">
  <version epoch="0" ver="4.10.1_08" rel="lp150.2.9.1"/>
  <changelog author="ohering@suse.de" date="1518177600">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928001">- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
  <changelog author="carnold@suse.com" date="1532606400">- Upstream patches from Jan (bsc#1027519)
  5af03009-x86-pv-hide-more-EFER-bits-from-PV.patch
  5b3f8fa5-port-array_index_nospec-from-Linux.patch
  5b4488e7-x86-spec-ctrl-cmdline-handling.patch
  5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
  5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
  5b4db308-SVM-fix-cleanup-svm_inject_event.patch
  5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
  5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
  5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
  5b508775-2-x86-possibly-bring-up-all-CPUs.patch
  5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
  5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
  5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
  5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
  5b56feb1-x86-hvm-disallow-unknown-EFER-bits.patch
  5b56feb2-x86-XPTI-parsing-on-fixed-Intel-HW.patch</changelog>
  <changelog author="carnold@suse.com" date="1533643200">- bsc#1103276 - VUL-0: xen: x86: Incorrect MSR_DEBUGCTL handling
  lets guests enable BTS (XSA-269)
  xsa269.patch</changelog>
  <changelog author="carnold@suse.com" date="1534161600">- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM
  (XSA-273)
  xsa273-1.patch
  xsa273-2.patch
  xsa273-3.patch
  xsa273-4.patch
  xsa273-5.patch
  xsa273-6.patch
  xsa273-7.patch
  xsa273-8.patch
- Upstream prereq patches for XSA-273 (bsc#1027519)
  5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
  5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
  5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
  5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
  5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
  5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
  5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
  5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
  5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
  5b505fe5-VMX-fix-find-msr-build.patch
  5b62ca93-VMX-avoid-hitting-BUG_ON.patch
  5b6d8ce2-x86-XPTI-parsing.patch</changelog>
</package>
<package pkgid="6b2b78f2ef5c4a333920dbfa603ae41f5c0d105f5308ef3219a59c4622fc58af" name="xen-tools" arch="x86_64">
  <version epoch="0" ver="4.10.1_04" rel="lp150.2.3.1"/>
  <changelog author="ohering@suse.de" date="1515585600">- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu,
  depending on the libxl disk settings
  libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch</changelog>
  <changelog author="carnold@suse.com" date="1516968000">- Fix python3 deprecated atoi call (bsc#1067224)
  pygrub-python3-conversion.patch
- Drop xenmon-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1517227200">- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with
  MSR emulation (XSA-253)
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
  xen: Information leak via side effects of speculative execution
  (XSA-254). Includes Spectre v2 mitigation.
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch</changelog>
  <changelog author="ohering@suse.de" date="1518004800">- Remove outdated /etc/xen/README*</changelog>
  <changelog author="jfehlig@suse.com" date="1518004801">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation"
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
</package>
<package pkgid="aed1d472b5b8c7a5bfdde70802a51d0464b79aca47c2bb4d95bd8517401ee6af" name="xen-tools" arch="x86_64">
  <version epoch="0" ver="4.10.1_06" rel="lp150.2.6.1"/>
  <changelog author="jfehlig@suse.com" date="1518004800">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
</package>
<package pkgid="072d7df9f87765891721d2d29bf58e388a4ca658287d1950600e37760730828f" name="xen-tools" arch="x86_64">
  <version epoch="0" ver="4.10.1_08" rel="lp150.2.9.1"/>
  <changelog author="ohering@suse.de" date="1518177600">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928001">- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
  <changelog author="carnold@suse.com" date="1532606400">- Upstream patches from Jan (bsc#1027519)
  5af03009-x86-pv-hide-more-EFER-bits-from-PV.patch
  5b3f8fa5-port-array_index_nospec-from-Linux.patch
  5b4488e7-x86-spec-ctrl-cmdline-handling.patch
  5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
  5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
  5b4db308-SVM-fix-cleanup-svm_inject_event.patch
  5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
  5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
  5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
  5b508775-2-x86-possibly-bring-up-all-CPUs.patch
  5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
  5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
  5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
  5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
  5b56feb1-x86-hvm-disallow-unknown-EFER-bits.patch
  5b56feb2-x86-XPTI-parsing-on-fixed-Intel-HW.patch</changelog>
  <changelog author="carnold@suse.com" date="1533643200">- bsc#1103276 - VUL-0: xen: x86: Incorrect MSR_DEBUGCTL handling
  lets guests enable BTS (XSA-269)
  xsa269.patch</changelog>
  <changelog author="carnold@suse.com" date="1534161600">- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM
  (XSA-273)
  xsa273-1.patch
  xsa273-2.patch
  xsa273-3.patch
  xsa273-4.patch
  xsa273-5.patch
  xsa273-6.patch
  xsa273-7.patch
  xsa273-8.patch
- Upstream prereq patches for XSA-273 (bsc#1027519)
  5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
  5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
  5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
  5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
  5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
  5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
  5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
  5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
  5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
  5b505fe5-VMX-fix-find-msr-build.patch
  5b62ca93-VMX-avoid-hitting-BUG_ON.patch
  5b6d8ce2-x86-XPTI-parsing.patch</changelog>
</package>
<package pkgid="abea43681cc24af0668bd8765e4a251f3971c133d111350544ca57a41b246feb" name="xen-tools-domU" arch="x86_64">
  <version epoch="0" ver="4.10.1_04" rel="lp150.2.3.1"/>
  <changelog author="ohering@suse.de" date="1515585600">- bsc#1067317 - pass cache=writeback|unsafe|directsync to qemu,
  depending on the libxl disk settings
  libxl.add-option-to-disable-disk-cache-flushes-in-qdisk.patch</changelog>
  <changelog author="carnold@suse.com" date="1516968000">- Fix python3 deprecated atoi call (bsc#1067224)
  pygrub-python3-conversion.patch
- Drop xenmon-python3-conversion.patch</changelog>
  <changelog author="carnold@suse.com" date="1517227200">- bsc#1073961 - VUL-0: CVE-2018-5244: xen: x86: memory leak with
  MSR emulation (XSA-253)
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
- bsc#1074562 - VUL-0: CVE-2017-5753,CVE-2017-5715,CVE-2017-5754
  xen: Information leak via side effects of speculative execution
  (XSA-254). Includes Spectre v2 mitigation.
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch</changelog>
  <changelog author="ohering@suse.de" date="1518004800">- Remove outdated /etc/xen/README*</changelog>
  <changelog author="jfehlig@suse.com" date="1518004801">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation"
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
</package>
<package pkgid="7aa0e77a841cbee525845a02a0c66c40e755ada166e4e13a5fc3e1e2649ac81b" name="xen-tools-domU" arch="x86_64">
  <version epoch="0" ver="4.10.1_06" rel="lp150.2.6.1"/>
  <changelog author="jfehlig@suse.com" date="1518004800">- tools-domU: Add support for qemu guest agent. New files
  80-xen-channel-setup.rules and xen-channel-setup.sh configure a
  xen-pv-channel for use by the guest agent
  FATE#324963</changelog>
  <changelog author="ohering@suse.de" date="1518177600">- Make sure tools and tools-domU require libs from the very same build</changelog>
  <changelog author="ohering@suse.de" date="1518177601">- Replace hardcoded xen with Name tag when refering to subpkgs</changelog>
  <changelog author="ohering@suse.de" date="1518177602">- fate#324965 - add script, udev rule and systemd service to watch
  for vcpu online/offline events in a HVM domU
  They are triggered via xl vcpu-set domU N</changelog>
  <changelog author="ohering@suse.de" date="1518177603">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
</package>
<package pkgid="a2bd4127b90d61cadf7a40795f081feef73652aeddd7311ba334fbd42e8d5b0d" name="xen-tools-domU" arch="x86_64">
  <version epoch="0" ver="4.10.1_08" rel="lp150.2.9.1"/>
  <changelog author="ohering@suse.de" date="1518177600">- Remove stale systemd presets code for 13.2 and older</changelog>
  <changelog author="carnold@suse.com" date="1518436800">- bsc#1080635 - VUL-0: CVE-2018-7540: xen: DoS via non-preemptable
  L3/L4 pagetable freeing (XSA-252)
  xsa252.patch
- bsc#1080662 - VUL-0: CVE-2018-7541: xen: grant table v2 -&gt; v1
  transition may crash Xen (XSA-255)
  xsa255-1.patch
  xsa255-2.patch
- bsc#1080634 - VUL-0: CVE-2018-7542: xen: x86 PVH guest without
  LAPIC may DoS the host (XSA-256)
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1519905600">- bsc#1072834 - Xen HVM: unchecked MSR access error: RDMSR from
  0xc90 at rIP: 0xffffffff93061456 (native_read_msr+0x6/0x30)
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
- Upstream patches from Jan (bsc#1027519)
  5a79d7ed-libxc-packed-initrd-dont-fail-domain-creation.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch (Replaces xsa252.patch)
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch (Replaces xsa255-1.patch)
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch (Replaces xsa255-2.patch)
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch (Replaces xsa256.patch)
- Drop
  xsa252.patch
  xsa255-1.patch
  xsa255-2.patch
  xsa256.patch</changelog>
  <changelog author="carnold@suse.com" date="1522065600">- Upstream patches from Jan (bsc#1027519) and fixes related to
  Page Table Isolation (XPTI). See also bsc#1074562 XSA-254
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch</changelog>
  <changelog author="ohering@suse.de" date="1522238400">- Preserve xen-syms from xen-dbg.gz to allow processing vmcores
  with crash(1) (bsc#1087251)</changelog>
  <changelog author="carnold@suse.com" date="1523880000">- bsc#1089152 - VUL-0: CVE-2018-10472: xen: Information leak via
  crafted user-supplied CDROM (XSA-258)
  xsa258.patch
- bsc#1089635 - VUL-0: CVE-2018-10471: xen: x86: PV guest may crash
  Xen with XPTI (XSA-259)
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1524657600">- bsc#1090820 - VUL-0: CVE-2018-8897: xen: x86: mishandling of
  debug exceptions (XSA-260)
  xsa260-1.patch
  xsa260-2.patch
  xsa260-3.patch
  xsa260-4.patch
- bsc#1090822 - VUL-0: CVE-2018-10982: xen: x86 vHPET interrupt
  injection errors (XSA-261)
  xsa261.patch
- bsc#1090823 - VUL-0: CVE-2018-10981: xen: qemu may drive Xen into
  unbounded loop (XSA-262)
  xsa262.patch</changelog>
  <changelog author="carnold@suse.com" date="1525780800">- Update to Xen 4.10.1 bug fix release (bsc#1027519)
  xen-4.10.1-testing-src.tar.bz2
  disable-building-pv-shim.patch
- Drop the following patches contained in the new tarball
  5a21a77e-x86-pv-construct-d0v0s-GDT-properly.patch
  5a2fda0d-x86-mb2-avoid-Xen-when-looking-for-module-crashkernel-pos.patch
  5a2ffc1f-x86-mm-drop-bogus-paging-mode-assertion.patch
  5a313972-x86-microcode-add-support-for-AMD-Fam17.patch
  5a32bd79-x86-vmx-dont-use-hvm_inject_hw_exception-in-.patch
  5a4caa5e-x86-IRQ-conditionally-preserve-access-perm.patch
  5a4caa8c-x86-E820-don-t-overrun-array.patch
  5a4e2bca-x86-free-msr_vcpu_policy-during-destruction.patch
  5a4e2c2c-x86-upcall-inject-spurious-event-after-setting-vector.patch
  5a4fd893-1-x86-break-out-alternative-asm-into-separate-header.patch
  5a4fd893-2-x86-introduce-ALTERNATIVE_2-macros.patch
  5a4fd893-3-x86-hvm-rename-update_guest_vendor-to-cpuid_policy_changed.patch
  5a4fd893-4-x86-introduce-cpuid_policy_updated.patch
  5a4fd893-5-x86-entry-remove-partial-cpu_user_regs.patch
  5a4fd894-1-x86-rearrange-RESTORE_ALL-to-restore-in-stack-order.patch
  5a4fd894-2-x86-hvm-use-SAVE_ALL-after-VMExit.patch
  5a4fd894-3-x86-erase-guest-GPRs-on-entry-to-Xen.patch
  5a4fd894-4-clarifications-to-wait-infrastructure.patch
  5a534c78-x86-dont-use-incorrect-CPUID-values-for-topology.patch
  5a5cb24c-x86-mm-always-set-_PAGE_ACCESSED-on-L4-updates.patch
  5a5e2cff-x86-Meltdown-band-aid.patch
  5a5e2d73-x86-Meltdown-band-aid-conditional.patch
  5a5e3a4e-1-x86-support-compiling-with-indirect-branch-thunks.patch
  5a5e3a4e-2-x86-support-indirect-thunks-from-asm.patch
  5a5e3a4e-3-x86-report-speculative-mitigation-details.patch
  5a5e3a4e-4-x86-AMD-set-lfence-as-Dispatch-Serialising.patch
  5a5e3a4e-5-x86-introduce-alternative-indirect-thunks.patch
  5a5e3a4e-6-x86-definitions-for-Indirect-Branch-Controls.patch
  5a5e3a4e-7-x86-cmdline-opt-to-disable-IBRS-IBPB-STIBP.patch
  5a5e459c-1-x86-SVM-offer-CPUID-faulting-to-AMD-HVM-guests.patch
  5a5e459c-2-x86-report-domain-id-on-CPUID.patch
  5a68bc16-x86-acpi-process-softirqs-logging-Cx.patch
  5a69c0b9-x86-fix-GET_STACK_END.patch
  5a6b36cd-1-x86-cpuid-handling-of-IBRS-IBPB-STIBP-and-IBRS-for-guests.patch
  5a6b36cd-2-x86-msr-emulation-of-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-3-x86-migrate-MSR_SPEC_CTRL.patch
  5a6b36cd-4-x86-hvm-permit-direct-access-to-SPEC_CTRL-PRED_CMD.patch
  5a6b36cd-5-x86-use-SPEC_CTRL-on-entry.patch
  5a6b36cd-6-x86-clobber-RSB-RAS-on-entry.patch
  5a6b36cd-7-x86-no-alternatives-in-NMI-MC-paths.patch
  5a6b36cd-8-x86-boot-calculate-best-BTI-mitigation.patch
  5a6b36cd-9-x86-issue-speculation-barrier.patch
  5a6b36cd-A-x86-offer-Indirect-Branch-Controls-to-guests.patch
  5a6b36cd-B-x86-clear-SPEC_CTRL-while-idle.patch
  5a7b1bdd-x86-reduce-Meltdown-band-aid-IPI-overhead.patch
  5a843807-x86-spec_ctrl-fix-bugs-in-SPEC_CTRL_ENTRY_FROM_INTR_IST.patch
  5a856a2b-x86-emul-fix-64bit-decoding-of-segment-overrides.patch
  5a856a2b-x86-use-32bit-xors-for-clearing-GPRs.patch
  5a856a2b-x86-xpti-hide-almost-all-of-Xen-image-mappings.patch
  5a8be788-x86-nmi-start-NMI-watchdog-on-CPU0-after-SMP.patch
  5a95373b-x86-PV-avoid-leaking-other-guests-MSR_TSC_AUX.patch
  5a95571f-memory-dont-implicitly-unpin-in-decrease-res.patch
  5a95576c-gnttab-ARM-dont-corrupt-shared-GFN-array.patch
  5a955800-gnttab-dont-free-status-pages-on-ver-change.patch
  5a955854-x86-disallow-HVM-creation-without-LAPIC-emul.patch
  5a956747-x86-HVM-dont-give-wrong-impression-of-WRMSR-success.patch
  5a9eb7f1-x86-xpti-dont-map-stack-guard-pages.patch
  5a9eb85c-x86-slightly-reduce-XPTI-overhead.patch
  5a9eb890-x86-remove-CR-reads-from-exit-to-guest-path.patch
  5aa2b6b9-cpufreq-ondemand-CPU-offlining-race.patch
  5aaa9878-x86-vlapic-clear-TMR-bit-for-edge-triggered-intr.patch
  xsa258.patch
  xsa259.patch</changelog>
  <changelog author="carnold@suse.com" date="1526040000">- Fixes related to Page Table Isolation (XPTI). bsc#1074562 XSA-254
  5a6703cb-x86-move-invocations-of-hvm_flush_guest_tlbs.patch
  5a9985bd-x86-invpcid-support.patch
  5adde9ed-xpti-fix-double-fault-handling.patch
  5aec7393-1-x86-xpti-avoid-copy.patch
  5aec7393-2-x86-xpti-write-cr3.patch
  5aec744a-3-x86-xpti-per-domain-flag.patch
  5aec744a-4-x86-xpti-use-invpcid.patch
  5aec744a-5-x86-xpti-no-global-pages.patch
  5aec744a-6-x86-xpti-cr3-valid-flag.patch
  5aec744a-7-x86-xpti-pv_guest_cr4_to_real_cr4.patch
  5aec744b-8-x86-xpti-cr3-helpers.patch
  5aec74a8-9-x86-xpti-use-pcid.patch</changelog>
  <changelog author="carnold@suse.com" date="1526472000">- bsc#1087289 - L3: Xen BUG at sched_credit.c:1663
  5aeaeae4-introduce-vcpu_sleep_nosync_locked.patch
  5aeaeaf0-sched-fix-races-in-vcpu-migration.patch
- Upstream patches from Jan (bsc#1027519)
  5ad600d4-x86-pv-introduce-x86emul_read_dr.patch
  5ad600d4-x86-pv-introduce-x86emul_write_dr.patch
  5ad8c3a7-x86-spec_ctrl-update-retpoline-decision-making.patch
  5adda097-x86-HPET-fix-race-triggering-ASSERT.patch
  5adda0d5-x86-HVM-never-retain-emulated-insn-cache.patch
  5ae06fad-SVM-fix-intercepts-for-SYS-CALL-ENTER-MSRs.patch
  5ae31917-x86-cpuidle-init-stats-lock-once.patch
  5aeb2c57-x86-retval-checks-of-set-guest-trapbounce.patch
  5af1daa9-1-x86-traps-fix-dr6-handing-in-DB-handler.patch (Replaces xsa260-1.patch)
  5af1daa9-2-x86-pv-move-exception-injection-into-test_all_events.patch (Replaces xsa260-2.patch)
  5af1daa9-3-x86-traps-use-IST-for-DB.patch (Replaces xsa260-3.patch)
  5af1daa9-4-x86-traps-fix-handling-of-DB-in-hypervisor-context.patch (Replaces xsa260-4.patch)
  5af1daa9-x86-HVM-guard-against-bogus-emulator-ioreq-state.patch (Replaces xsa262.patch)
  5af1daa9-x86-vpt-support-IO-APIC-routed-intr.patch (Replaces xsa261.patch)
  5af97999-viridian-cpuid-leaf-40000003.patch</changelog>
  <changelog author="ohering@suse.de" date="1526558400">- Always call qemus xen-save-devices-state in suspend/resume to
  fix migration with qcow2 images (bsc#1079730)
  libxl.Add-a-version-check-of-QEMU-for-QMP-commands.patch
  libxl.qmp-Tell-QEMU-about-live-migration-or-snapshot.patch
  xen.bug1079730.patch</changelog>
  <changelog author="carnold@suse.com" date="1526644800">- bsc#1092631 - VUL-0: CVE-2018-3639: xen: V4 ? Speculative Store
  Bypass aka "Memory Disambiguation" (XSA-263)
  5ad4923e-x86-correct-S3-resume-ordering.patch
  5ad49293-x86-suppress-BTI-mitigations-around-S3.patch
  5afc13ae-1-x86-read-MSR_ARCH_CAPABILITIES-once.patch
  5afc13ae-2-x86-express-Xen-SPEC_CTRL-choice-as-variable.patch
  5afc13ae-3-x86-merge-bti_ist_info-use_shadow_spec_ctrl.patch
  5afc13ae-4-x86-fold-XEN_IBRS-ALTERNATIVES.patch
  5afc13ae-5-x86-rename-bits-of-spec_ctrl-infrastructure.patch
  5afc13ae-6-x86-elide-MSR_SPEC_CTRL-handling-in-idle.patch
  5afc13ae-7-x86-split-X86_FEATURE_SC_MSR.patch
  5afc13ae-8-x86-explicitly-set-Xen-default-SPEC_CTRL.patch
  5afc13ae-9-x86-cpuid-improve-guest-policies-for-speculative.patch
  5afc13ae-A-x86-introduce-spec-ctrl-cmdline-opt.patch
  Spectre-v4-1.patch
  Spectre-v4-2.patch
  Spectre-v4-3.patch</changelog>
  <changelog author="carnold@suse.com" date="1528891200">- bsc#1095242 - VUL-0: CVE-2018-3665: xen: Lazy FP Save/Restore
  (XSA-267)
  xsa267-1.patch
  xsa267-2.patch</changelog>
  <changelog author="carnold@suse.com" date="1529323200">- bsc#1097521 - VUL-0: CVE-2018-12891: xen: preemption checks
  bypassed in x86 PV MM handling (XSA-264)
  xsa264.patch
- bsc#1097522 - VUL-0: CVE-2018-12893: xen: x86: #DB exception
  safety check can be triggered by a guest (XSA-265)
  xsa265.patch
- bsc#1097523 - VUL-0: CVE-2018-12892: xen: libxl fails to honour
  readonly flag on HVM emulated SCSI disks (XSA-266)
  xsa266-1-libxl-qemu_disk_scsi_drive_string-Break-out-common-p.patch
  xsa266-2-libxl-restore-passing-readonly-to-qemu-for-SCSI-disk.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928000">- bsc#1098403 - fix regression introduced by changes for bsc#1079730
  a PV domU without qcow2 and/or vfb has no qemu attached.
  Ignore QMP errors for PV domUs to handle PV domUs with and without
  an attached qemu-xen.
  xen.bug1079730.patch</changelog>
  <changelog author="ohering@suse.de" date="1529928001">- Fix more build gcc8 related failures with xen.fuzz-_FORTIFY_SOURCE.patch</changelog>
  <changelog author="carnold@suse.com" date="1530273600">- Upstream patches from Jan (bsc#1027519)
  5b02c786-x86-AMD-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-1.patch)
  5b02c786-x86-Intel-mitigations-for-GPZ-SP4.patch (Replaces Spectre-v4-2.patch)
  5b02c786-x86-msr-virtualise-SPEC_CTRL-SSBD.patch (Replaces Spectre-v4-3.patch)
  5b0bc9da-x86-XPTI-fix-S3-resume.patch
  5b0d2286-libxc-x86-PV-dont-hand-through-CPUID-leaf-0x80000008.patch
  5b0d2d91-x86-suppress-sync-when-XPTI-off.patch
  5b0d2dbc-x86-correct-default_xen_spec_ctrl.patch
  5b0d2ddc-x86-CPUID-dont-override-tool-stack-hidden-STIBP.patch
  5b150ef9-x86-fix-error-handling-of-pv-dr7-shadow.patch
  5b21825d-1-x86-support-fully-eager-FPU-context-switching.patch (Replaces xsa267-1.patch)
  5b21825d-2-x86-spec-ctrl-mitigations-for-LazyFPU.patch (Replaces xsa267-2.patch)
  5b238b92-x86-HVM-account-for-fully-eager-FPU.patch
  5b2b7172-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b31e004-x86-HVM-emul-attempts-FPU-set-fpu_initialised.patch
  5b323e3c-x86-EFI-fix-FPU-state-handling-around-runtime-calls.patch
  5b34882d-x86-mm-dont-bypass-preemption-checks.patch (Replaces xsa264.patch)
  5b348874-x86-refine-checks-in-DB-handler.patch (Replaces xsa265.patch)
  5b348897-libxl-qemu_disk_scsi_drive_string-break-out-common.patch (Replaces xsa266-1-&lt;&gt;.patch)
  5b3488a2-libxl-restore-passing-ro-to-qemu-for-SCSI-disks.patch (Replaces xsa266-2-&lt;&gt;.patch)
  5b34891a-x86-HVM-dont-cause-NM-to-be-raised.patch
  5b348954-x86-guard-against-NM.patch</changelog>
  <changelog author="carnold@suse.com" date="1532606400">- Upstream patches from Jan (bsc#1027519)
  5af03009-x86-pv-hide-more-EFER-bits-from-PV.patch
  5b3f8fa5-port-array_index_nospec-from-Linux.patch
  5b4488e7-x86-spec-ctrl-cmdline-handling.patch
  5b471517-page_alloc-correct-first_dirty-calc-in-block-merging.patch
  5b4c9a60-allow-cpu_down-to-be-called-earlier.patch
  5b4db308-SVM-fix-cleanup-svm_inject_event.patch
  5b5040c3-cpupools-fix-state-when-downing-a-CPU-failed.patch
  5b5040f2-x86-AMD-distinguish-CU-from-HT.patch
  5b508775-1-x86-distinguish-CPU-offlining-and-removal.patch
  5b508775-2-x86-possibly-bring-up-all-CPUs.patch
  5b508775-3-x86-cmdline-opt-to-avoid-use-of-secondary-HTs.patch
  5b508ce8-VMX-dont-clobber-dr6-while-debug-state-is-lazy.patch
  5b50df16-1-x86-xstate-use-guest-CPUID-policy.patch
  5b50df16-2-x86-make-xstate-calculation-errors-more-obvious.patch
  5b56feb1-x86-hvm-disallow-unknown-EFER-bits.patch
  5b56feb2-x86-XPTI-parsing-on-fixed-Intel-HW.patch</changelog>
  <changelog author="carnold@suse.com" date="1533643200">- bsc#1103276 - VUL-0: xen: x86: Incorrect MSR_DEBUGCTL handling
  lets guests enable BTS (XSA-269)
  xsa269.patch</changelog>
  <changelog author="carnold@suse.com" date="1534161600">- bsc#1091107 - VUL-0: CVE-2018-3646: xen: L1 Terminal Fault -VMM
  (XSA-273)
  xsa273-1.patch
  xsa273-2.patch
  xsa273-3.patch
  xsa273-4.patch
  xsa273-5.patch
  xsa273-6.patch
  xsa273-7.patch
  xsa273-8.patch
- Upstream prereq patches for XSA-273 (bsc#1027519)
  5b34b8fe-VMX-defer-vmx_vmcs_exit-as-long-as-possible.patch
  5b3cab8e-1-VMX-MSR_DEBUGCTL-handling.patch
  5b3cab8e-2-VMX-improve-MSR-load-save-API.patch
  5b3cab8e-3-VMX-cleanup-MSR-load-save-infra.patch
  5b3cab8f-1-VMX-factor-out-locate_msr_entry.patch
  5b3cab8f-2-VMX-remote-access-to-MSR-lists.patch
  5b3cab8f-3-VMX-improve-LBR-MSR-handling.patch
  5b3cab8f-4-VMX-pass-MSR-value-into-vmx_msr_add.patch
  5b3cab8f-5-VMX-load-only-guest-MSR-entries.patch
  5b505fe5-VMX-fix-find-msr-build.patch
  5b62ca93-VMX-avoid-hitting-BUG_ON.patch
  5b6d8ce2-x86-XPTI-parsing.patch</changelog>
</package>
<package pkgid="cf7192152d8919532c06c207600f1cc8a51dd5bbc0bf1520f7bfb904d937f6ee" name="xfce4-branding-openSUSE" arch="src">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="d6c444a122433f26e2e7096b3cf6982f592e13dcd4da1f4d93a6856b77eb59e1" name="xfce4-notifyd-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="2bcadf2147943c754affc7452ef5fe324c87b0989437a568b1f884501aafb467" name="xfce4-panel-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="9e41db6285c6718e28c099a334795ac0476a272cb0892b07e1f7fa492d392cb9" name="xfce4-power-manager-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="96be105c8b40a32aa05701fb62d7feef41e639e0784fdcb26cd9e059d738377e" name="xfce4-session-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="09d46395a7289ed7dade817b2879187f1882fab0a93cc513560ade8db22aa16d" name="xfce4-settings-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="3706b9f1ea0e2dd9ad9eacdf421835a9e58de743ca24f4b267d14169af86b2c4" name="xfdesktop-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="c71968aa8ecd980a99c19768969547b6659bb7bf592cae762219bcc29bcafd7a" name="xfwm4-branding-openSUSE" arch="noarch">
  <version epoch="0" ver="4.12.0" rel="lp150.5.3.1"/>
  <changelog author="gber@opensuse.org" date="1362916800">- support openSUSE 13.1</changelog>
  <changelog author="gber@opensuse.org" date="1367496000">- follow the exo package changes and rename exo-branding-openSUSE
  to libexo-1-0-branding-openSUSE and move helpers.rc in an
  API-versioned subdirectory</changelog>
  <changelog author="gber@opensuse.org" date="1380974400">- add support for 13.2, drop support for &lt; 12.2</changelog>
  <changelog author="gber@opensuse.org" date="1383048000">- improve suse_version overlay system
- add xfce4-power-manager-branding-openSUSE with default actions
  for button press events and critical battery levels</changelog>
  <changelog author="gber@opensuse.org" date="1398600000">- remove support for openSUSE &lt; 12.3
- add custom theme for xfce4-notifyd</changelog>
  <changelog author="gber@opensuse.org" date="1398945600">- adjust to GTK 3 variant of libxfce4ui</changelog>
  <changelog author="gber@opensuse.org" date="1401710400">- adapt xfce4-power-manager branding to version 1.3.0
- fix typo
- rename source tarball removing the meaningless version</changelog>
  <changelog author="gber@opensuse.org" date="1401796800">- fix critical power action and hdd spindown settings</changelog>
  <changelog author="gber@opensuse.org" date="1406635200">- recommend xfce4-panel-plugin-xfce4battery which is in the panel
  branding</changelog>
  <changelog author="gber@opensuse.org" date="1408622400">- xfce4-panel-plugin-xfce4battery was renamed to
  power-manager-plugin</changelog>
  <changelog author="gber@opensuse.org" date="1425211200">- bump version to 4.12
- lock screen on suspen/hibernate</changelog>
  <changelog author="gber@opensuse.org" date="1427544000">- on &gt;= 13.2 package-manager.desktop was renamed to
  yast2-packager.desktop (boo#892936)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480161600">- adapt to changes in exo package (exo-1 subdir patch removed)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1480248000">- fix exo-branding provides / obsoletes</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507464000">- replace application-menu with whiskermenu
- brand whiskermenu suse style
- require whiskermenu from panel-branding-openSUSE
- fix obsoletes of exo-branding-openSUSE</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1507723200">- use plugin-pulseaudio instead of plugin-mixer
- recommend pavucontrol and plugin-pulseaudio instead of xfe4-mixer</changelog>
  <changelog author="florian.koch1981@gmail.com" date="1514462400">- use adwaita-icon-theme instead of gnome-icon-theme
  as fallback icon theme
  The reasons for this change are that Upstream gnome no
  longer uses gnome-icon-theme, and to save space on te Thumbleweed
  rescue CD, requested by DimStar
  https://lists.opensuse.org/opensuse-xfce/2017-05/msg00000.html
- fix /etc/xfce_defaults.conf not declared as %conf</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1514894400">- fix spelling of "Adwaita" in index.theme (boo#1074269)</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1517745600">- fix openSUSE splash screen</changelog>
  <changelog author="seife+obs@b1-systems.com" date="1520424000">- revert last change, branding package has been fixed</changelog>
</package>
<package pkgid="51fdb5c1000bd63714be1182d600d30ad26a93ffd4b720a471d363aa6bb85501" name="xorg-x11-Xvnc" arch="x86_64">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="f24206042faff4726b189eac739ab38358d4bb5989f1dcdfbe74a5f998abdf70" name="xorg-x11-Xvnc-java" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="e24b8e6cdd84212061b76769f17a7d823dc258fe11596ba1ec03adc933474dc1" name="xorg-x11-Xvnc-novnc" arch="noarch">
  <version epoch="0" ver="1.8.0" rel="lp150.10.3.1"/>
  <changelog author="msrb@suse.com" date="1491825600">- U_tigervnc-better-check-for-screen-visibility.patch
  * Crop operations to visible screen. (bnc#1032272)</changelog>
  <changelog author="msrb@suse.com" date="1496232000">- Update to tigervnc 1.8.0
  * Overhaul of the Java client to match the look and behaviour of the native client
  * Initial work for multi-threaded decoding in the Java client
  * vncconfig no longer needed for clipboard with Xvnc/libvnc.so
  * vncserver has system wide config support
  * Full support for alpha cursors in Xvnc/libvnc.so and both viewers
- Removed patches:
  * U_Add-xorg-xserver-1.19-support.patch
  * U_tigervnc-fix-inetd-not-working-with-xserver-1-19.patch
  * U_tigervnc-better-check-for-screen-visibility.patch</changelog>
  <changelog author="meissner@suse.com" date="1496404800">- removed unneeded -fPIC flags for CFLAGS, these made it avoid
  PIE support.</changelog>
  <changelog author="tchvatal@suse.com" date="1497009600">- Require java-deve &gt;= 1.6.0 to avoid bootstrap fail</changelog>
  <changelog author="msrb@suse.com" date="1499428800">- Change with-vnc-key.sh to generate TLS certificate using current
  hostname. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1500552000">- U_allow_multiple_certs_with_same_dn_in_saved_certs_file.patch,
  U_handle_certificate_verification_for_saved_certs_correctly.patch
  * Fix certificate handling in the java client. (bnc#1041847)
- Refresh u_tigervnc-add-autoaccept-parameter.patch and apply it
  last.
- Make sure CN in generated certificate doesn't exceed 64
  characters. (bnc#1041847)</changelog>
  <changelog author="msrb@suse.com" date="1502452800">- Disable MIT-SHM extension when running under vnc user.
  (bnc#1053373)</changelog>
  <changelog author="fstrba@suse.com" date="1505131200">- Specify java source and target level 1.6 in order to be able to
  build with jdk9</changelog>
  <changelog author="msrb@suse.com" date="1506340800">- Add tigervnc-x11vnc wrapper for x0vncserver that replaces x11vnc.
  (fate#323207)
- Replace java applet with novnc as web-based VNC viewer.
  (fate#323880)
- Convert xinetd services to systemd socket activated services.
  (bnc#1058460)</changelog>
  <changelog author="msrb@suse.com" date="1506427200">- u_Unset-pixel-buffer-when-x0vncserver-client-disconnect.patch
  * Fixes crash in x0vncserver after client disconnects.
    (bnc#1058587)</changelog>
  <changelog author="msrb@suse.com" date="1513080000">- Depend on pkgconfig's gl, egl and gbm instead of Mesa-devel.
  * Those dependencies are what the underlying X server really
    needs. Mesa-devel is too general and is a bottleneck in
    distribution build. (bnc#1071297)</changelog>
  <changelog author="fstrba@suse.com" date="1513598400">- Added patch:
  * tigervnc-1.8.0-nowindows.patch
    + Remove Windows code that is removed from jdk10</changelog>
  <changelog author="dimstar@opensuse.org" date="1513598401">- Do not mess with /usr/lib*64)?/debug: this is RPM's playground
  for debuginfo packages.</changelog>
  <changelog author="msrb@suse.com" date="1519819200">- Replace SuSEFirewall2 by firewalld. (bnc#1081952)</changelog>
  <changelog author="msrb@suse.com" date="1521720000">- Enable xvnc.socket if upgraded from previous installation that
  had VNC enabled in xinetd configuration. (bnc#1085974)
- Subpackage xorg-x11-Xvnc must also obsolete tightvnc.</changelog>
  <changelog author="msrb@suse.com" date="1523448000">- Add u_change-button-layout-in-ServerDialog.patch
  * To fit strings in languages with longer words... (bnc#1084865)
- Refresh n_tigervnc-date-time.patch
  * Completely hide the build time (bnc#1082968)</changelog>
  <changelog author="jengelh@inai.de" date="1523448001">- Limit feature description to openSUSE. Ensure neutrality of
  description.</changelog>
  <changelog author="msrb@suse.com" date="1524571200">- Reload firewalld files after installation.</changelog>
  <changelog author="msrb@suse.com" date="1528286400">- U_vncviewer-Fix-fullscreen-scrolling.patch,
  U_vncviewer-Fix-scrollbar-visibility.patch
  * Fix scrolling in vncviewer. (boo#1095664)</changelog>
  <changelog author="msrb@suse.com" date="1533556800">- Add xvnc.target to fix xvnc-novnc.service's dependency.
  (bnc#1103552)</changelog>
</package>
<package pkgid="a4f8e52660ba99001980dd3233f26bf5507e94823e79fe0e029b427f853604f5" name="xtables-addons" arch="src">
  <version epoch="0" ver="2.14" rel="lp150.3.2.1"/>
  <changelog author="sbrabec@suse.cz" date="1354536000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1356091200">- Always ship all source tarballs to make osc validator happy
- Enable version 2.0 for openSUSE:Factory which now has kernel 3.7
- Add 0001-xt_DNETMAP-fix-compile-error-with-Linux-3.7.patch</changelog>
  <changelog author="jengelh@inai.de" date="1356609600">- Update to new upstream release 2.1
  * support for Linux 3.8
- Remove 0001-xt_DNETMAP-fix-compile-error-with-Linux-3.7.patch</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Don't need linux-glibc 3.7, since we copy headers anyway</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="jengelh@inai.de" date="1364731200">- Update to new upstream release 2.2
  * support for Linux 3.9
  * avoid iptaccount being optimized away (bnc#807155)</changelog>
  <changelog author="jengelh@inai.de" date="1371556800">- Update to new upstream release 3.10
  * support for Linux 3.10 and CONFIG_UIDGID_STRICT_TYPE_CHECKS
  * xt_geoip: do not throw a warning when country database is size 0
  * xt_quota2: print "!" at the correct position during iptables-save</changelog>
  <changelog author="jengelh@inai.de" date="1389268800">- Update to new upstream release 2.4
  * Support for Linux 3.13
  * Remove the unmaintained RAWSNAT/RAWDNAT modules</changelog>
  <changelog author="jengelh@inai.de" date="1397822400">- Update to new upstream release 2.5
  * Support for Linux 3.14, 3.15
  * xt_quota2: support distinct network namespaces</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Update to new upstream release 2.6
  * Fixes to the UDP SPA mode
  * Support for Linux 3.17</changelog>
  <changelog author="jengelh@inai.de" date="1436184000">- Update to new upstream release 2.7
  * Support for Linux up to 4.1</changelog>
  <changelog author="jengelh@inai.de" date="1439985600">- Update to new upstream release 2.8
  * Support for Linux 4.2
  * Enable xt_ECHO</changelog>
  <changelog author="jengelh@inai.de" date="1444651200">- Update to new upstream release 2.9
  * Support for Linux 4.3</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 2.10
  * Support for Linux 4.4</changelog>
  <changelog author="jengelh@inai.de" date="1463745600">- Update to new upstream release 2.11
  * Support for Linux 4.5, 4.6</changelog>
  <changelog author="jengelh@inai.de" date="1484136000">- Update to new upstream release 2.12
  * Support for Linux 4.10</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Update to new upstream release 2.13
  * Support for Linux 4.12
  * xt_condition: namespace support
  * xt_geoip: check for allocation overflow
  * xt_DNETMAP: fix a buffer overflow</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Bundle LICENSE file in BRPM</changelog>
  <changelog author="jengelh@inai.de" date="1511352000">- Update to new upstream release 2.14
  * Support for Linux 4.14 [boo#1068098]
  * DNETMAP buffer overflow fix</changelog>
  <changelog author="suse+build@de-korte.org" date="1517832000">- Backport from upstream
  * Support for Linux 4.15 (add init_timer.patch)</changelog>
</package>
<package pkgid="1a12f7d1bbe5f2adc8285be82c8f6b088d06e3b27d671edeb0b5d667f6d4e867" name="xtables-addons" arch="x86_64">
  <version epoch="0" ver="2.14" rel="lp150.3.2.1"/>
  <changelog author="sbrabec@suse.cz" date="1354536000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1356091200">- Always ship all source tarballs to make osc validator happy
- Enable version 2.0 for openSUSE:Factory which now has kernel 3.7
- Add 0001-xt_DNETMAP-fix-compile-error-with-Linux-3.7.patch</changelog>
  <changelog author="jengelh@inai.de" date="1356609600">- Update to new upstream release 2.1
  * support for Linux 3.8
- Remove 0001-xt_DNETMAP-fix-compile-error-with-Linux-3.7.patch</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Don't need linux-glibc 3.7, since we copy headers anyway</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="jengelh@inai.de" date="1364731200">- Update to new upstream release 2.2
  * support for Linux 3.9
  * avoid iptaccount being optimized away (bnc#807155)</changelog>
  <changelog author="jengelh@inai.de" date="1371556800">- Update to new upstream release 3.10
  * support for Linux 3.10 and CONFIG_UIDGID_STRICT_TYPE_CHECKS
  * xt_geoip: do not throw a warning when country database is size 0
  * xt_quota2: print "!" at the correct position during iptables-save</changelog>
  <changelog author="jengelh@inai.de" date="1389268800">- Update to new upstream release 2.4
  * Support for Linux 3.13
  * Remove the unmaintained RAWSNAT/RAWDNAT modules</changelog>
  <changelog author="jengelh@inai.de" date="1397822400">- Update to new upstream release 2.5
  * Support for Linux 3.14, 3.15
  * xt_quota2: support distinct network namespaces</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Update to new upstream release 2.6
  * Fixes to the UDP SPA mode
  * Support for Linux 3.17</changelog>
  <changelog author="jengelh@inai.de" date="1436184000">- Update to new upstream release 2.7
  * Support for Linux up to 4.1</changelog>
  <changelog author="jengelh@inai.de" date="1439985600">- Update to new upstream release 2.8
  * Support for Linux 4.2
  * Enable xt_ECHO</changelog>
  <changelog author="jengelh@inai.de" date="1444651200">- Update to new upstream release 2.9
  * Support for Linux 4.3</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 2.10
  * Support for Linux 4.4</changelog>
  <changelog author="jengelh@inai.de" date="1463745600">- Update to new upstream release 2.11
  * Support for Linux 4.5, 4.6</changelog>
  <changelog author="jengelh@inai.de" date="1484136000">- Update to new upstream release 2.12
  * Support for Linux 4.10</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Update to new upstream release 2.13
  * Support for Linux 4.12
  * xt_condition: namespace support
  * xt_geoip: check for allocation overflow
  * xt_DNETMAP: fix a buffer overflow</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Bundle LICENSE file in BRPM</changelog>
  <changelog author="jengelh@inai.de" date="1511352000">- Update to new upstream release 2.14
  * Support for Linux 4.14 [boo#1068098]
  * DNETMAP buffer overflow fix</changelog>
  <changelog author="suse+build@de-korte.org" date="1517832000">- Backport from upstream
  * Support for Linux 4.15 (add init_timer.patch)</changelog>
</package>
<package pkgid="a1dc5ddb9c111cd605b5aa06f85b8e449e5d362aae643811daf5e8489c7bbb42" name="xtables-addons-kmp-default" arch="x86_64">
  <version epoch="0" ver="2.14_k4.12.14_lp150.12.13" rel="lp150.3.2.1"/>
  <changelog author="sbrabec@suse.cz" date="1354536000">- Verify GPG signature.</changelog>
  <changelog author="jengelh@inai.de" date="1356091200">- Always ship all source tarballs to make osc validator happy
- Enable version 2.0 for openSUSE:Factory which now has kernel 3.7
- Add 0001-xt_DNETMAP-fix-compile-error-with-Linux-3.7.patch</changelog>
  <changelog author="jengelh@inai.de" date="1356609600">- Update to new upstream release 2.1
  * support for Linux 3.8
- Remove 0001-xt_DNETMAP-fix-compile-error-with-Linux-3.7.patch</changelog>
  <changelog author="jengelh@inai.de" date="1357300800">- Don't need linux-glibc 3.7, since we copy headers anyway</changelog>
  <changelog author="coolo@suse.com" date="1362052800">- update license to new format</changelog>
  <changelog author="jengelh@inai.de" date="1364731200">- Update to new upstream release 2.2
  * support for Linux 3.9
  * avoid iptaccount being optimized away (bnc#807155)</changelog>
  <changelog author="jengelh@inai.de" date="1371556800">- Update to new upstream release 3.10
  * support for Linux 3.10 and CONFIG_UIDGID_STRICT_TYPE_CHECKS
  * xt_geoip: do not throw a warning when country database is size 0
  * xt_quota2: print "!" at the correct position during iptables-save</changelog>
  <changelog author="jengelh@inai.de" date="1389268800">- Update to new upstream release 2.4
  * Support for Linux 3.13
  * Remove the unmaintained RAWSNAT/RAWDNAT modules</changelog>
  <changelog author="jengelh@inai.de" date="1397822400">- Update to new upstream release 2.5
  * Support for Linux 3.14, 3.15
  * xt_quota2: support distinct network namespaces</changelog>
  <changelog author="jengelh@inai.de" date="1411992000">- Update to new upstream release 2.6
  * Fixes to the UDP SPA mode
  * Support for Linux 3.17</changelog>
  <changelog author="jengelh@inai.de" date="1436184000">- Update to new upstream release 2.7
  * Support for Linux up to 4.1</changelog>
  <changelog author="jengelh@inai.de" date="1439985600">- Update to new upstream release 2.8
  * Support for Linux 4.2
  * Enable xt_ECHO</changelog>
  <changelog author="jengelh@inai.de" date="1444651200">- Update to new upstream release 2.9
  * Support for Linux 4.3</changelog>
  <changelog author="jengelh@inai.de" date="1448020800">- Update to new upstream release 2.10
  * Support for Linux 4.4</changelog>
  <changelog author="jengelh@inai.de" date="1463745600">- Update to new upstream release 2.11
  * Support for Linux 4.5, 4.6</changelog>
  <changelog author="jengelh@inai.de" date="1484136000">- Update to new upstream release 2.12
  * Support for Linux 4.10</changelog>
  <changelog author="jengelh@inai.de" date="1498737600">- Update to new upstream release 2.13
  * Support for Linux 4.12
  * xt_condition: namespace support
  * xt_geoip: check for allocation overflow
  * xt_DNETMAP: fix a buffer overflow</changelog>
  <changelog author="jengelh@inai.de" date="1503576000">- Bundle LICENSE file in BRPM</changelog>
  <changelog author="jengelh@inai.de" date="1511352000">- Update to new upstream release 2.14
  * Support for Linux 4.14 [boo#1068098]
  * DNETMAP buffer overflow fix</changelog>
  <changelog author="suse+build@de-korte.org" date="1517832000">- Backport from upstream
  * Support for Linux 4.15 (add init_timer.patch)</changelog>
</package>
<package pkgid="5a6cfeef18efbd33736b057abc4fd364b305c3b18f22e4197c1acf2eabef079b" name="yast2" arch="src">
  <version epoch="0" ver="4.0.77" rel="lp150.2.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1520424000">- Use the correct release notes URL during upgrade (bsc#1073488).
- 4.0.58</changelog>
  <changelog author="jreidinger@suse.com" date="1520596800">- Fix extracting kernel parameters from installation when there is
  parameter with '=' in value like
  pci=hpiosize=0,hpmemsize=0,nobar (bsc#1081353)
- 4.0.59</changelog>
  <changelog author="jreidinger@suse.com" date="1521806400">- fix behavior of showing timed error popup (found during
  debugging bsc#1083672)
- 4.0.60</changelog>
  <changelog author="ancor@suse.com" date="1522152000">- Make possible to use the Yast2::Popup class from the Report
  module (part of bsc#1082542).
- 4.0.61</changelog>
  <changelog author="lslezak@suse.cz" date="1522756800">- Added ProductUpgrade class to better evaluate the product for
  upgrading (related to bsc#1086259)
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522929600">- Add a new API to handle product licenses.
- Given a license, remember whether another one with the same
  content was already accepted (fate#325461).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1522929601">- Use SHA2 instead of MD5 when determining whether a license
  was already accepted or not (related to fate#325461).
- 4.0.64</changelog>
  <changelog author="jreidinger@suse.com" date="1523016000">- improve wayland support (bsc#1083907)
- 4.0.65</changelog>
  <changelog author="jreidinger@suse.com" date="1523361600">- Fix early exit of installation when initial install url is
  invalid and later fixed (bsc#1086840)
- 4.0.66</changelog>
  <changelog author="lslezak@suse.cz" date="1523361601">- Do not use the solver for finding the best product upgrade
  candidate, it does not work correctly in the SLES + sle-module-hpc
  =&gt; SLES_HPC case (bsc#1086734)
- 4.0.67</changelog>
  <changelog author="knut.anderssen@suse.com" date="1523534400">- Wizard: Fall back to smaller and/or hicolor icon if the icon for
  the launched module cannot be found (bsc#1087224)
- 4.0.68</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534401">- Handle input/output errors in the DoneProvide package callback
  (bsc#1088682).
- 4.0.69</changelog>
  <changelog author="snwint@suse.de" date="1523880000">- save_y2logs: save kernel messages and udev log (bsc#1089647,
  bsc#1085212)
- 4.0.70</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Do not crash when reading trying to determine available locales
  for some licenses (bsc#1089610).
- 4.0.71</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524484800">- Add a text helper to wrap richtext in directional markers
  (bsc#1089846).
- 4.0.72</changelog>
  <changelog author="jlopez@suse.com" date="1525780800">- CWM: allow to define back handler for CWM#show.
- CWM: define default handlers for back and abort in CWM::Dialog.
- Needed for Expert Partitioner fate#318196.
- 4.0.73</changelog>
  <changelog author="lslezak@suse.cz" date="1526299200">- Support multiple "system-installation()" provides in one
  package (bsc#1092965)
- 4.0.74</changelog>
  <changelog author="schubi@suse.de" date="1527076800">- Calling YAST module: Do not create a post Snapper image if the
  pre Snapper image has already been failed (bnc#1093374)
- 4.0.75</changelog>
  <changelog author="jsrain@suse.cz" date="1527595200">- rename SLES_HPC -&gt; SLE_HPC (bsc#1095053)
- 4.0.76</changelog>
  <changelog author="jsrain@suse.cz" date="1528286400">- display proper release notes for product (bsc#1096138)
- 4.0.77</changelog>
</package>
<package pkgid="d63ed2420fdd63e80b0ad059c409c18021eb4860166369519149d8b2813fa9ce" name="yast2" arch="x86_64">
  <version epoch="0" ver="4.0.77" rel="lp150.2.3.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1520424000">- Use the correct release notes URL during upgrade (bsc#1073488).
- 4.0.58</changelog>
  <changelog author="jreidinger@suse.com" date="1520596800">- Fix extracting kernel parameters from installation when there is
  parameter with '=' in value like
  pci=hpiosize=0,hpmemsize=0,nobar (bsc#1081353)
- 4.0.59</changelog>
  <changelog author="jreidinger@suse.com" date="1521806400">- fix behavior of showing timed error popup (found during
  debugging bsc#1083672)
- 4.0.60</changelog>
  <changelog author="ancor@suse.com" date="1522152000">- Make possible to use the Yast2::Popup class from the Report
  module (part of bsc#1082542).
- 4.0.61</changelog>
  <changelog author="lslezak@suse.cz" date="1522756800">- Added ProductUpgrade class to better evaluate the product for
  upgrading (related to bsc#1086259)
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522929600">- Add a new API to handle product licenses.
- Given a license, remember whether another one with the same
  content was already accepted (fate#325461).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1522929601">- Use SHA2 instead of MD5 when determining whether a license
  was already accepted or not (related to fate#325461).
- 4.0.64</changelog>
  <changelog author="jreidinger@suse.com" date="1523016000">- improve wayland support (bsc#1083907)
- 4.0.65</changelog>
  <changelog author="jreidinger@suse.com" date="1523361600">- Fix early exit of installation when initial install url is
  invalid and later fixed (bsc#1086840)
- 4.0.66</changelog>
  <changelog author="lslezak@suse.cz" date="1523361601">- Do not use the solver for finding the best product upgrade
  candidate, it does not work correctly in the SLES + sle-module-hpc
  =&gt; SLES_HPC case (bsc#1086734)
- 4.0.67</changelog>
  <changelog author="knut.anderssen@suse.com" date="1523534400">- Wizard: Fall back to smaller and/or hicolor icon if the icon for
  the launched module cannot be found (bsc#1087224)
- 4.0.68</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534401">- Handle input/output errors in the DoneProvide package callback
  (bsc#1088682).
- 4.0.69</changelog>
  <changelog author="snwint@suse.de" date="1523880000">- save_y2logs: save kernel messages and udev log (bsc#1089647,
  bsc#1085212)
- 4.0.70</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Do not crash when reading trying to determine available locales
  for some licenses (bsc#1089610).
- 4.0.71</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524484800">- Add a text helper to wrap richtext in directional markers
  (bsc#1089846).
- 4.0.72</changelog>
  <changelog author="jlopez@suse.com" date="1525780800">- CWM: allow to define back handler for CWM#show.
- CWM: define default handlers for back and abort in CWM::Dialog.
- Needed for Expert Partitioner fate#318196.
- 4.0.73</changelog>
  <changelog author="lslezak@suse.cz" date="1526299200">- Support multiple "system-installation()" provides in one
  package (bsc#1092965)
- 4.0.74</changelog>
  <changelog author="schubi@suse.de" date="1527076800">- Calling YAST module: Do not create a post Snapper image if the
  pre Snapper image has already been failed (bnc#1093374)
- 4.0.75</changelog>
  <changelog author="jsrain@suse.cz" date="1527595200">- rename SLES_HPC -&gt; SLE_HPC (bsc#1095053)
- 4.0.76</changelog>
  <changelog author="jsrain@suse.cz" date="1528286400">- display proper release notes for product (bsc#1096138)
- 4.0.77</changelog>
</package>
<package pkgid="d16259c4e24cd967faa1607973361d905d31a824cd6e52e5d8ae5dc5dc14bf92" name="yast2" arch="src">
  <version epoch="0" ver="4.0.79" rel="lp150.2.6.1"/>
  <changelog author="jreidinger@suse.com" date="1521806400">- fix behavior of showing timed error popup (found during
  debugging bsc#1083672)
- 4.0.60</changelog>
  <changelog author="ancor@suse.com" date="1522152000">- Make possible to use the Yast2::Popup class from the Report
  module (part of bsc#1082542).
- 4.0.61</changelog>
  <changelog author="lslezak@suse.cz" date="1522756800">- Added ProductUpgrade class to better evaluate the product for
  upgrading (related to bsc#1086259)
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522929600">- Add a new API to handle product licenses.
- Given a license, remember whether another one with the same
  content was already accepted (fate#325461).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1522929601">- Use SHA2 instead of MD5 when determining whether a license
  was already accepted or not (related to fate#325461).
- 4.0.64</changelog>
  <changelog author="jreidinger@suse.com" date="1523016000">- improve wayland support (bsc#1083907)
- 4.0.65</changelog>
  <changelog author="jreidinger@suse.com" date="1523361600">- Fix early exit of installation when initial install url is
  invalid and later fixed (bsc#1086840)
- 4.0.66</changelog>
  <changelog author="lslezak@suse.cz" date="1523361601">- Do not use the solver for finding the best product upgrade
  candidate, it does not work correctly in the SLES + sle-module-hpc
  =&gt; SLES_HPC case (bsc#1086734)
- 4.0.67</changelog>
  <changelog author="knut.anderssen@suse.com" date="1523534400">- Wizard: Fall back to smaller and/or hicolor icon if the icon for
  the launched module cannot be found (bsc#1087224)
- 4.0.68</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534401">- Handle input/output errors in the DoneProvide package callback
  (bsc#1088682).
- 4.0.69</changelog>
  <changelog author="snwint@suse.de" date="1523880000">- save_y2logs: save kernel messages and udev log (bsc#1089647,
  bsc#1085212)
- 4.0.70</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Do not crash when reading trying to determine available locales
  for some licenses (bsc#1089610).
- 4.0.71</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524484800">- Add a text helper to wrap richtext in directional markers
  (bsc#1089846).
- 4.0.72</changelog>
  <changelog author="jlopez@suse.com" date="1525780800">- CWM: allow to define back handler for CWM#show.
- CWM: define default handlers for back and abort in CWM::Dialog.
- Needed for Expert Partitioner fate#318196.
- 4.0.73</changelog>
  <changelog author="lslezak@suse.cz" date="1526299200">- Support multiple "system-installation()" provides in one
  package (bsc#1092965)
- 4.0.74</changelog>
  <changelog author="schubi@suse.de" date="1527076800">- Calling YAST module: Do not create a post Snapper image if the
  pre Snapper image has already been failed (bnc#1093374)
- 4.0.75</changelog>
  <changelog author="jsrain@suse.cz" date="1527595200">- rename SLES_HPC -&gt; SLE_HPC (bsc#1095053)
- 4.0.76</changelog>
  <changelog author="jsrain@suse.cz" date="1528286400">- display proper release notes for product (bsc#1096138)
- 4.0.77</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.78</changelog>
  <changelog author="knut.anderssen@suse.com" date="1530619200">- Network: Prevent from crashing when trying to delete some ip
  aliases from the original devices (bsc#1098919)
- 4.0.79</changelog>
</package>
<package pkgid="5b6ce2db85ccf453b9d58b0f83ef3566a5e0778d19a3d7ece27b44fd8d62fd3b" name="yast2" arch="x86_64">
  <version epoch="0" ver="4.0.79" rel="lp150.2.6.1"/>
  <changelog author="jreidinger@suse.com" date="1521806400">- fix behavior of showing timed error popup (found during
  debugging bsc#1083672)
- 4.0.60</changelog>
  <changelog author="ancor@suse.com" date="1522152000">- Make possible to use the Yast2::Popup class from the Report
  module (part of bsc#1082542).
- 4.0.61</changelog>
  <changelog author="lslezak@suse.cz" date="1522756800">- Added ProductUpgrade class to better evaluate the product for
  upgrading (related to bsc#1086259)
- 4.0.62</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522929600">- Add a new API to handle product licenses.
- Given a license, remember whether another one with the same
  content was already accepted (fate#325461).
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1522929601">- Use SHA2 instead of MD5 when determining whether a license
  was already accepted or not (related to fate#325461).
- 4.0.64</changelog>
  <changelog author="jreidinger@suse.com" date="1523016000">- improve wayland support (bsc#1083907)
- 4.0.65</changelog>
  <changelog author="jreidinger@suse.com" date="1523361600">- Fix early exit of installation when initial install url is
  invalid and later fixed (bsc#1086840)
- 4.0.66</changelog>
  <changelog author="lslezak@suse.cz" date="1523361601">- Do not use the solver for finding the best product upgrade
  candidate, it does not work correctly in the SLES + sle-module-hpc
  =&gt; SLES_HPC case (bsc#1086734)
- 4.0.67</changelog>
  <changelog author="knut.anderssen@suse.com" date="1523534400">- Wizard: Fall back to smaller and/or hicolor icon if the icon for
  the launched module cannot be found (bsc#1087224)
- 4.0.68</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523534401">- Handle input/output errors in the DoneProvide package callback
  (bsc#1088682).
- 4.0.69</changelog>
  <changelog author="snwint@suse.de" date="1523880000">- save_y2logs: save kernel messages and udev log (bsc#1089647,
  bsc#1085212)
- 4.0.70</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- Do not crash when reading trying to determine available locales
  for some licenses (bsc#1089610).
- 4.0.71</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524484800">- Add a text helper to wrap richtext in directional markers
  (bsc#1089846).
- 4.0.72</changelog>
  <changelog author="jlopez@suse.com" date="1525780800">- CWM: allow to define back handler for CWM#show.
- CWM: define default handlers for back and abort in CWM::Dialog.
- Needed for Expert Partitioner fate#318196.
- 4.0.73</changelog>
  <changelog author="lslezak@suse.cz" date="1526299200">- Support multiple "system-installation()" provides in one
  package (bsc#1092965)
- 4.0.74</changelog>
  <changelog author="schubi@suse.de" date="1527076800">- Calling YAST module: Do not create a post Snapper image if the
  pre Snapper image has already been failed (bnc#1093374)
- 4.0.75</changelog>
  <changelog author="jsrain@suse.cz" date="1527595200">- rename SLES_HPC -&gt; SLE_HPC (bsc#1095053)
- 4.0.76</changelog>
  <changelog author="jsrain@suse.cz" date="1528286400">- display proper release notes for product (bsc#1096138)
- 4.0.77</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.78</changelog>
  <changelog author="knut.anderssen@suse.com" date="1530619200">- Network: Prevent from crashing when trying to delete some ip
  aliases from the original devices (bsc#1098919)
- 4.0.79</changelog>
</package>
<package pkgid="0ed4c0caad0bdee9651d0dd3007b937324fa1deadf024018d67266dfb12d83cf" name="yast2-apparmor" arch="noarch">
  <version epoch="0" ver="4.0.5" rel="lp150.2.3.1"/>
  <changelog author="opensuse@cboltz.de" date="1357819200">- don't create /var/log/apparmor/*/ in %post (no longer needed)</changelog>
  <changelog author="lslezak@suse.cz" date="1372680000">- clean up include files - added missing imports, added missing
  top level {} blocks (Y2R compatibility)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1376913600">- fix broken dialog in edit profiles
- drop reporting and profile generation tools (FATE#308684,308683)
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1379505600">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1399636800">- fix help text to match reality (bnc#876904)
- 3.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1401710400">- add translation for apparmor modes (bnc#878587)
- improvements of rpm spec file
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1491220800">- Use Yast::Service to enable/disable service
- Remove (unused) notify settings
- Reload profiles by calling apparmor_parser directly.</changelog>
  <changelog author="mfilka@suse.com" date="1491393600">- bnc#1026027
  - removed package dependency on insserv
- 3.2.0</changelog>
  <changelog author="jreidinger@suse.com" date="1498824000">- fix name of apparmor systemd service (bsc#1046750)
- 3.2.1</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1500897600">- fix 'Toggle Mode' bug for non-English locale (bsc#1043546)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1502798400">- Use the JSON interface of apparmor to show dialogs (FATE#323380)
  - Added log profiling
  - Added generating a profile
- Removed old perl interface code
- 3.3.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1506427200">- Propose installation of apparmor packages when they are missing
  (bsc#1058981)
- 4.0.0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1506772800">- Add VStretch() and HStretch() to aa-settings (bsc#1056942)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1508328000">- Remove more perl dependencies (boo#1062656)
- Remove ancient subdomain dependencies (boo#1062656)
- Fix yast-apparmor.spec description
- Fix "New" which renders GetString Dialog (boo#1062653)
- 4.0.1</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511352000">- fix textdomain to apparmor (bsc#1065569)
- 4.0.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1512648000">- Fix translation issues (bsc#1071756)
- 4.0.3</changelog>
  <changelog author="jreidinger@suse.com" date="1519732800">- fix more translation issues (bsc#1083015)
- 4.0.4</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.5</changelog>
</package>
<package pkgid="0bdbee4af2495e191c484f652b50426d7d384aca2ec18b2169a0b510687b7c36" name="yast2-apparmor" arch="src">
  <version epoch="0" ver="4.0.5" rel="lp150.2.3.1"/>
  <changelog author="opensuse@cboltz.de" date="1357819200">- don't create /var/log/apparmor/*/ in %post (no longer needed)</changelog>
  <changelog author="lslezak@suse.cz" date="1372680000">- clean up include files - added missing imports, added missing
  top level {} blocks (Y2R compatibility)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1376913600">- fix broken dialog in edit profiles
- drop reporting and profile generation tools (FATE#308684,308683)
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1379505600">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1399636800">- fix help text to match reality (bnc#876904)
- 3.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1401710400">- add translation for apparmor modes (bnc#878587)
- improvements of rpm spec file
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1491220800">- Use Yast::Service to enable/disable service
- Remove (unused) notify settings
- Reload profiles by calling apparmor_parser directly.</changelog>
  <changelog author="mfilka@suse.com" date="1491393600">- bnc#1026027
  - removed package dependency on insserv
- 3.2.0</changelog>
  <changelog author="jreidinger@suse.com" date="1498824000">- fix name of apparmor systemd service (bsc#1046750)
- 3.2.1</changelog>
  <changelog author="belphegor@belbel.or.jp" date="1500897600">- fix 'Toggle Mode' bug for non-English locale (bsc#1043546)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1502798400">- Use the JSON interface of apparmor to show dialogs (FATE#323380)
  - Added log profiling
  - Added generating a profile
- Removed old perl interface code
- 3.3.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1506427200">- Propose installation of apparmor packages when they are missing
  (bsc#1058981)
- 4.0.0</changelog>
  <changelog author="rgoldwyn@suse.com" date="1506772800">- Add VStretch() and HStretch() to aa-settings (bsc#1056942)</changelog>
  <changelog author="rgoldwyn@suse.com" date="1508328000">- Remove more perl dependencies (boo#1062656)
- Remove ancient subdomain dependencies (boo#1062656)
- Fix yast-apparmor.spec description
- Fix "New" which renders GetString Dialog (boo#1062653)
- 4.0.1</changelog>
  <changelog author="rgoldwyn@suse.com" date="1511352000">- fix textdomain to apparmor (bsc#1065569)
- 4.0.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1512648000">- Fix translation issues (bsc#1071756)
- 4.0.3</changelog>
  <changelog author="jreidinger@suse.com" date="1519732800">- fix more translation issues (bsc#1083015)
- 4.0.4</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.5</changelog>
</package>
<package pkgid="fc2d36bb0081beff8d7b97402ed9a1d3f4f52677748c2f38b8c1bee463659dfc" name="yast2-bootloader" arch="src">
  <version epoch="0" ver="4.0.35" rel="lp150.2.5.1"/>
  <changelog author="jlopez@suse.com" date="1518177600">- Adapt to new MountPoint API (part of fate#318196).
- 4.0.16</changelog>
  <changelog author="jreidinger@suse.com" date="1518436800">- Detect properly that unknown device is used in bootloader
  configuration (bsc#1078713)
- 4.0.17</changelog>
  <changelog author="jreidinger@suse.com" date="1518696000">- fix nil exception for device with filesystem that is not mounted
  (bsc#1081018)
- 4.0.18</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1519387200">- Remove calls to the old yast2-storage layer (bsc#1071978)
- 4.0.19</changelog>
  <changelog author="jreidinger@suse.com" date="1520424000">- do not repropose configuration in autoyast confirm mode
  (bsc#1081967)
- fix setting pmbr flag in autoyast (bsc#1081967)
- 4.0.20</changelog>
  <changelog author="jreidinger@suse.com" date="1520856000">- Respect if custom boot is logical volume and display it
  correctly (bsc#1084815)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1521028800">- fix detection of kernel name for alternative raid names (it
  ensures that fix for bsc#944041 works)
- 4.0.22</changelog>
  <changelog author="jlopez@suse.com" date="1521547200">- Fix tests to not create zero size partitions
  (part of bsc#1083887).
- 4.0.23</changelog>
  <changelog author="mfilka@suse.com" date="1521633600">- bnc#1083938
  - missing translation
- 4.0.24</changelog>
  <changelog author="jreidinger@suse.com" date="1524571200">- Show understandable popup when grub2 terminal option contain
  complex string that is not yet supported (bsc#1053559)
- 4.0.25</changelog>
  <changelog author="jreidinger@suse.com" date="1524571201">- Propose net.ifnames boot parameter if it is used for installation
  on s390 (bsc#1086665)
- 4.0.26</changelog>
  <changelog author="jreidinger@suse.com" date="1524571202">- Do not crash when clicking on booting during upgrade
  (bsc#1070233)
- 4.0.27</changelog>
  <changelog author="jreidinger@suse.com" date="1525262400">- Fix test failure on s390 (no functionality change)(bsc#1091631)
- 4.0.28</changelog>
  <changelog author="jreidinger@suse.com" date="1525435200">- Inform user when an unsupported bootloader is defined in the
  AutoYaST profile, display the valid values (bsc#1091284)
- 4.0.29</changelog>
  <changelog author="jreidinger@suse.com" date="1525780800">- Make unit tests architecture agnostic (related to bsc#1091284).
- 4.0.30</changelog>
  <changelog author="knut.anderssen@suse.com" date="1525780801">- Use "none" bootloader when the boot filesystem is nfs
  (bsc#1090752).
- 4.0.31</changelog>
  <changelog author="jreidinger@suse.com" date="1525953600">- Fix installation on BIOS Raid like Intel RSTe (bsc#1091283)
- 4.0.32</changelog>
  <changelog author="jreidinger@suse.com" date="1526299200">- Propose fips boot parameter if it is used for installation
  on s390 (bsc#1043029)
- 4.0.33</changelog>
  <changelog author="jreidinger@suse.com" date="1526558400">- Extend fix for BIOS RAIDs to work with more complex setup when
  system contain also physical partitions (bsc#1092417)
- 4.0.34</changelog>
  <changelog author="jreidinger@suse.com" date="1527681600">- Fix detection of GPT disk to properly set pmbr flag (bsc#1093887)
- 4.0.35</changelog>
</package>
<package pkgid="628dbc4da984e3f64a46e7f7858536fb8a8c7dea875757978825351fef6b4ca9" name="yast2-bootloader" arch="x86_64">
  <version epoch="0" ver="4.0.35" rel="lp150.2.5.1"/>
  <changelog author="jlopez@suse.com" date="1518177600">- Adapt to new MountPoint API (part of fate#318196).
- 4.0.16</changelog>
  <changelog author="jreidinger@suse.com" date="1518436800">- Detect properly that unknown device is used in bootloader
  configuration (bsc#1078713)
- 4.0.17</changelog>
  <changelog author="jreidinger@suse.com" date="1518696000">- fix nil exception for device with filesystem that is not mounted
  (bsc#1081018)
- 4.0.18</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1519387200">- Remove calls to the old yast2-storage layer (bsc#1071978)
- 4.0.19</changelog>
  <changelog author="jreidinger@suse.com" date="1520424000">- do not repropose configuration in autoyast confirm mode
  (bsc#1081967)
- fix setting pmbr flag in autoyast (bsc#1081967)
- 4.0.20</changelog>
  <changelog author="jreidinger@suse.com" date="1520856000">- Respect if custom boot is logical volume and display it
  correctly (bsc#1084815)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1521028800">- fix detection of kernel name for alternative raid names (it
  ensures that fix for bsc#944041 works)
- 4.0.22</changelog>
  <changelog author="jlopez@suse.com" date="1521547200">- Fix tests to not create zero size partitions
  (part of bsc#1083887).
- 4.0.23</changelog>
  <changelog author="mfilka@suse.com" date="1521633600">- bnc#1083938
  - missing translation
- 4.0.24</changelog>
  <changelog author="jreidinger@suse.com" date="1524571200">- Show understandable popup when grub2 terminal option contain
  complex string that is not yet supported (bsc#1053559)
- 4.0.25</changelog>
  <changelog author="jreidinger@suse.com" date="1524571201">- Propose net.ifnames boot parameter if it is used for installation
  on s390 (bsc#1086665)
- 4.0.26</changelog>
  <changelog author="jreidinger@suse.com" date="1524571202">- Do not crash when clicking on booting during upgrade
  (bsc#1070233)
- 4.0.27</changelog>
  <changelog author="jreidinger@suse.com" date="1525262400">- Fix test failure on s390 (no functionality change)(bsc#1091631)
- 4.0.28</changelog>
  <changelog author="jreidinger@suse.com" date="1525435200">- Inform user when an unsupported bootloader is defined in the
  AutoYaST profile, display the valid values (bsc#1091284)
- 4.0.29</changelog>
  <changelog author="jreidinger@suse.com" date="1525780800">- Make unit tests architecture agnostic (related to bsc#1091284).
- 4.0.30</changelog>
  <changelog author="knut.anderssen@suse.com" date="1525780801">- Use "none" bootloader when the boot filesystem is nfs
  (bsc#1090752).
- 4.0.31</changelog>
  <changelog author="jreidinger@suse.com" date="1525953600">- Fix installation on BIOS Raid like Intel RSTe (bsc#1091283)
- 4.0.32</changelog>
  <changelog author="jreidinger@suse.com" date="1526299200">- Propose fips boot parameter if it is used for installation
  on s390 (bsc#1043029)
- 4.0.33</changelog>
  <changelog author="jreidinger@suse.com" date="1526558400">- Extend fix for BIOS RAIDs to work with more complex setup when
  system contain also physical partitions (bsc#1092417)
- 4.0.34</changelog>
  <changelog author="jreidinger@suse.com" date="1527681600">- Fix detection of GPT disk to properly set pmbr flag (bsc#1093887)
- 4.0.35</changelog>
</package>
<package pkgid="1636b8ec5931f3d4ae936e7330a2a041ba4d7ccc20cb366efa0cc63a56089876" name="yast2-control-center" arch="src">
  <version epoch="0" ver="4.0.4" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1364644800">- Add X-GNOME-SystemSettings as category to YaST.desktop: allows
  YaST to be seen by gnome-control-center and to be added
  transparently.</changelog>
  <changelog author="tgoettlicher@suse.de" date="1369224000">- Adapted requirement for libyui-qt5
- Version: 2.22.5</changelog>
  <changelog author="tgoettlicher@suse.de" date="1373025600">- fixed inconsistency, double vs single click (bnc#780349)
- Version: 2.22.6</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375185600">- version 3.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1381752000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="mvidner@suse.com" date="1384430400">- ported to Qt5
- 3.1.1</changelog>
  <changelog author="mvidner@suse.com" date="1393502400">- Fixed save_y2logs invocation (bnc#866056).
- 3.1.2</changelog>
  <changelog author="mvidner@suse.com" date="1396612800">- CMakeFile: QT5_USE_MODULES is deprecated in Qt5.3 (H Senjan)
- Use pkgconfig BuildRequires to reduce build deps.
- 3.1.3</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1414670400">- ignore desktop files whose Hidden attribute is set to "true"
- 3.1.4</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1414670401">- Install YaST-systemsettings.desktop also to KF5 services directory,
  so it is also shown in Plasma5 session
- 3.1.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Install appdata.xml file in order to show up in AppStream based
  software centers (currently only GNOME Software).</changelog>
  <changelog author="shundhammer@suse.de" date="1446638400">- Recommend latest libyui-qt7, not obsolete libyui-qt5 in .spec
  file (bsc#952249)</changelog>
  <changelog author="lslezak@suse.cz" date="1449748800">- Change the yast2-control-center-qt dependency on libyui-qt7
  from Recommensd to Requires (bnc#958650)
- Added support for KDE5 (added Supplements plasma5-session dependency)
- 3.1.6</changelog>
  <changelog author="i@xuzhao.net" date="1493726400">- Added support for 128x128 sized X11 window icon
- 3.2.0</changelog>
  <changelog author="mvidner@suse.com" date="1502280000">- Adjusted to increased so version of the libyui library;
  an unversioned dependency is OK (bsc#1052217)
- 3.3.0</changelog>
  <changelog author="kukuk@suse.com" date="1510574400">- Do not included unused RPC headers (boo#1081118).
- 4.0.0</changelog>
  <changelog author="letcp@protonmail.com" date="1519214400">- Fixes to way icons are displayed (boo#1081517)
- 4.0.1</changelog>
  <changelog author="jreidinger@suse.com" date="1519992000">- Use yast2-control-center as replacement for dropped
  yast2-control-center-gnome (bsc#1081788)
- 4.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1526299200">- Fixed crash when reading an invalid or incomplete .desktop file
  (bsc#1090843)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1530014400">- Searching for translated keywords (fate#321043).
- 4.0.4</changelog>
</package>
<package pkgid="d55caa4344d4cb8f97fdeed7208114ef20a08233f25cd29075bbd5b019aac3a9" name="yast2-control-center" arch="x86_64">
  <version epoch="0" ver="4.0.4" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1364644800">- Add X-GNOME-SystemSettings as category to YaST.desktop: allows
  YaST to be seen by gnome-control-center and to be added
  transparently.</changelog>
  <changelog author="tgoettlicher@suse.de" date="1369224000">- Adapted requirement for libyui-qt5
- Version: 2.22.5</changelog>
  <changelog author="tgoettlicher@suse.de" date="1373025600">- fixed inconsistency, double vs single click (bnc#780349)
- Version: 2.22.6</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375185600">- version 3.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1381752000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="mvidner@suse.com" date="1384430400">- ported to Qt5
- 3.1.1</changelog>
  <changelog author="mvidner@suse.com" date="1393502400">- Fixed save_y2logs invocation (bnc#866056).
- 3.1.2</changelog>
  <changelog author="mvidner@suse.com" date="1396612800">- CMakeFile: QT5_USE_MODULES is deprecated in Qt5.3 (H Senjan)
- Use pkgconfig BuildRequires to reduce build deps.
- 3.1.3</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1414670400">- ignore desktop files whose Hidden attribute is set to "true"
- 3.1.4</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1414670401">- Install YaST-systemsettings.desktop also to KF5 services directory,
  so it is also shown in Plasma5 session
- 3.1.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Install appdata.xml file in order to show up in AppStream based
  software centers (currently only GNOME Software).</changelog>
  <changelog author="shundhammer@suse.de" date="1446638400">- Recommend latest libyui-qt7, not obsolete libyui-qt5 in .spec
  file (bsc#952249)</changelog>
  <changelog author="lslezak@suse.cz" date="1449748800">- Change the yast2-control-center-qt dependency on libyui-qt7
  from Recommensd to Requires (bnc#958650)
- Added support for KDE5 (added Supplements plasma5-session dependency)
- 3.1.6</changelog>
  <changelog author="i@xuzhao.net" date="1493726400">- Added support for 128x128 sized X11 window icon
- 3.2.0</changelog>
  <changelog author="mvidner@suse.com" date="1502280000">- Adjusted to increased so version of the libyui library;
  an unversioned dependency is OK (bsc#1052217)
- 3.3.0</changelog>
  <changelog author="kukuk@suse.com" date="1510574400">- Do not included unused RPC headers (boo#1081118).
- 4.0.0</changelog>
  <changelog author="letcp@protonmail.com" date="1519214400">- Fixes to way icons are displayed (boo#1081517)
- 4.0.1</changelog>
  <changelog author="jreidinger@suse.com" date="1519992000">- Use yast2-control-center as replacement for dropped
  yast2-control-center-gnome (bsc#1081788)
- 4.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1526299200">- Fixed crash when reading an invalid or incomplete .desktop file
  (bsc#1090843)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1530014400">- Searching for translated keywords (fate#321043).
- 4.0.4</changelog>
</package>
<package pkgid="8a382992d43369b4200c9f214dd4632b0cf004fa4e3e65e09571039d7d56dd72" name="yast2-control-center-qt" arch="x86_64">
  <version epoch="0" ver="4.0.4" rel="lp150.2.3.1"/>
  <changelog author="dimstar@opensuse.org" date="1364644800">- Add X-GNOME-SystemSettings as category to YaST.desktop: allows
  YaST to be seen by gnome-control-center and to be added
  transparently.</changelog>
  <changelog author="tgoettlicher@suse.de" date="1369224000">- Adapted requirement for libyui-qt5
- Version: 2.22.5</changelog>
  <changelog author="tgoettlicher@suse.de" date="1373025600">- fixed inconsistency, double vs single click (bnc#780349)
- Version: 2.22.6</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375185600">- version 3.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1381752000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="mvidner@suse.com" date="1384430400">- ported to Qt5
- 3.1.1</changelog>
  <changelog author="mvidner@suse.com" date="1393502400">- Fixed save_y2logs invocation (bnc#866056).
- 3.1.2</changelog>
  <changelog author="mvidner@suse.com" date="1396612800">- CMakeFile: QT5_USE_MODULES is deprecated in Qt5.3 (H Senjan)
- Use pkgconfig BuildRequires to reduce build deps.
- 3.1.3</changelog>
  <changelog author="antoine.belvire@laposte.net" date="1414670400">- ignore desktop files whose Hidden attribute is set to "true"
- 3.1.4</changelog>
  <changelog author="hrvoje.senjan@gmail.com" date="1414670401">- Install YaST-systemsettings.desktop also to KF5 services directory,
  so it is also shown in Plasma5 session
- 3.1.5</changelog>
  <changelog author="dimstar@opensuse.org" date="1428494400">- Install appdata.xml file in order to show up in AppStream based
  software centers (currently only GNOME Software).</changelog>
  <changelog author="shundhammer@suse.de" date="1446638400">- Recommend latest libyui-qt7, not obsolete libyui-qt5 in .spec
  file (bsc#952249)</changelog>
  <changelog author="lslezak@suse.cz" date="1449748800">- Change the yast2-control-center-qt dependency on libyui-qt7
  from Recommensd to Requires (bnc#958650)
- Added support for KDE5 (added Supplements plasma5-session dependency)
- 3.1.6</changelog>
  <changelog author="i@xuzhao.net" date="1493726400">- Added support for 128x128 sized X11 window icon
- 3.2.0</changelog>
  <changelog author="mvidner@suse.com" date="1502280000">- Adjusted to increased so version of the libyui library;
  an unversioned dependency is OK (bsc#1052217)
- 3.3.0</changelog>
  <changelog author="kukuk@suse.com" date="1510574400">- Do not included unused RPC headers (boo#1081118).
- 4.0.0</changelog>
  <changelog author="letcp@protonmail.com" date="1519214400">- Fixes to way icons are displayed (boo#1081517)
- 4.0.1</changelog>
  <changelog author="jreidinger@suse.com" date="1519992000">- Use yast2-control-center as replacement for dropped
  yast2-control-center-gnome (bsc#1081788)
- 4.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1526299200">- Fixed crash when reading an invalid or incomplete .desktop file
  (bsc#1090843)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1530014400">- Searching for translated keywords (fate#321043).
- 4.0.4</changelog>
</package>
<package pkgid="32ab5985eb9de31ebf8dfe2063ddbe4eba25271c770eb63683e92ec1bc61c212" name="yast2-core" arch="src">
  <version epoch="0" ver="4.0.3" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1416916800">- ag_any: respect target root also when the file
  does not exist in the original root (boo#903747).
  If applied at installation time as a DUD, it fixes
  "Internal error... in SaveModulesToLoad" during
  an upgrade to oS 13.2.
- 3.1.14</changelog>
  <changelog author="lslezak@suse.cz" date="1421928000">- skip empty environment variables when activating the locale
  settings, fixes inconsistent locale setting when started
  via "kdesu" with unchecked "Remember password" option
  (boo#914081)
- 3.1.15</changelog>
  <changelog author="mvidner@suse.com" date="1425384000">- Fixed compilation (but not tests) with GCC 5 (boo#914255).
- 3.1.16</changelog>
  <changelog author="jreidinger@suse.com" date="1427716800">- Fix YCP symbol comparison with GCC 5 (thanks schubi for
  performance measurement and mvidner for review) (boo#914255)
- 3.1.17</changelog>
  <changelog author="mvidner@suse.com" date="1431345600">- Fixed compilation warnings.</changelog>
  <changelog author="besser82@fedoraproject.org" date="1431518400">- Fix more compilation warnings.</changelog>
  <changelog author="mvidner@suse.com" date="1444132800">- In the signal handler, log the sender PID, and if present,
  run /usr/lib/YaST2/bin/signal-postmortem (bsc#935686).
- 3.1.18</changelog>
  <changelog author="jreidinger@suse.com" date="1453204800">- ag_ini: when multifile list contain glob, evaluate it in correct
  root. (bnc#962566)
- 3.1.19</changelog>
  <changelog author="mvidner@suse.com" date="1454414400">- Treat C/C++ warnings as errors.
- 3.1.20</changelog>
  <changelog author="mvidner@suse.com" date="1454414401">- Treat C/C++ warnings as errors but only via bcond_with werror.
- 3.1.21</changelog>
  <changelog author="gs@suse.de" date="1457006400">- Add missing newline to error messages (bsc#969236)
- 3.1.22</changelog>
  <changelog author="mvidner@suse.com" date="1464868800">- Optionally build with Clang instead of GCC (via bcond_with clang)
- Fixed most of Clang warnings (bsc#982942)
- 3.1.23</changelog>
  <changelog author="jreidinger@suse.com" date="1474372800">- disable doc generation (FATE#320356)
- remove unnecessary build dependency to speed up build
  (bsc#999203)
- 3.1.24</changelog>
  <changelog author="jreidinger@suse.com" date="1478520000">- ag_anyangent: Do not fail the parse when an Optional syntax meets
  EOF, e.g. for a fstab without a trailing newline (bsc#429326#c11)
- 3.2.0</changelog>
  <changelog author="jreidinger@suse.com" date="1483444800">- Allow more detailed error specification when loading namespace
  to component system failed (bsc#932331)
- 3.2.1</changelog>
  <changelog author="jreidinger@suse.com" date="1483531200">- Dropped the YCP debugger in yast2-core-debugger not to confuse
  people who want to use the Byebug based Ruby debugger
  (bsc#1018038)
- 3.2.2</changelog>
  <changelog author="mvidner@suse.com" date="1507636800">- Fixed newly uncovered warnings: Wterminate, Wint-in-bool-context,
  sys/sysmacros (bsc#982942, bsc#434048).
- 4.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1511870400">- add jemalloc dependency for y2base which is used only in old
  testsuite and that workarounds problem with dynamic dlopening
  of jemalloc in ruby (bsc#1068883)
- 4.0.1</changelog>
  <changelog author="mvidner@suse.com" date="1517918400">- glibc-2.27 compatibility: Removed an overly specific test case
  for certain localized numbers (bsc#1079630)
- 4.0.2</changelog>
  <changelog author="aschnell@suse.com" date="1532001600">- fixed detection of aarch64 during update by recognizing aarch64
  in elf-arch (bsc#1099325)
- recognise RISC-V in elf-arch
- 4.0.3</changelog>
</package>
<package pkgid="5e0445ebe7c2c56bf8a6dab613442a3d8eccbd0e86e3daa37f2eee21598911de" name="yast2-core" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1416916800">- ag_any: respect target root also when the file
  does not exist in the original root (boo#903747).
  If applied at installation time as a DUD, it fixes
  "Internal error... in SaveModulesToLoad" during
  an upgrade to oS 13.2.
- 3.1.14</changelog>
  <changelog author="lslezak@suse.cz" date="1421928000">- skip empty environment variables when activating the locale
  settings, fixes inconsistent locale setting when started
  via "kdesu" with unchecked "Remember password" option
  (boo#914081)
- 3.1.15</changelog>
  <changelog author="mvidner@suse.com" date="1425384000">- Fixed compilation (but not tests) with GCC 5 (boo#914255).
- 3.1.16</changelog>
  <changelog author="jreidinger@suse.com" date="1427716800">- Fix YCP symbol comparison with GCC 5 (thanks schubi for
  performance measurement and mvidner for review) (boo#914255)
- 3.1.17</changelog>
  <changelog author="mvidner@suse.com" date="1431345600">- Fixed compilation warnings.</changelog>
  <changelog author="besser82@fedoraproject.org" date="1431518400">- Fix more compilation warnings.</changelog>
  <changelog author="mvidner@suse.com" date="1444132800">- In the signal handler, log the sender PID, and if present,
  run /usr/lib/YaST2/bin/signal-postmortem (bsc#935686).
- 3.1.18</changelog>
  <changelog author="jreidinger@suse.com" date="1453204800">- ag_ini: when multifile list contain glob, evaluate it in correct
  root. (bnc#962566)
- 3.1.19</changelog>
  <changelog author="mvidner@suse.com" date="1454414400">- Treat C/C++ warnings as errors.
- 3.1.20</changelog>
  <changelog author="mvidner@suse.com" date="1454414401">- Treat C/C++ warnings as errors but only via bcond_with werror.
- 3.1.21</changelog>
  <changelog author="gs@suse.de" date="1457006400">- Add missing newline to error messages (bsc#969236)
- 3.1.22</changelog>
  <changelog author="mvidner@suse.com" date="1464868800">- Optionally build with Clang instead of GCC (via bcond_with clang)
- Fixed most of Clang warnings (bsc#982942)
- 3.1.23</changelog>
  <changelog author="jreidinger@suse.com" date="1474372800">- disable doc generation (FATE#320356)
- remove unnecessary build dependency to speed up build
  (bsc#999203)
- 3.1.24</changelog>
  <changelog author="jreidinger@suse.com" date="1478520000">- ag_anyangent: Do not fail the parse when an Optional syntax meets
  EOF, e.g. for a fstab without a trailing newline (bsc#429326#c11)
- 3.2.0</changelog>
  <changelog author="jreidinger@suse.com" date="1483444800">- Allow more detailed error specification when loading namespace
  to component system failed (bsc#932331)
- 3.2.1</changelog>
  <changelog author="jreidinger@suse.com" date="1483531200">- Dropped the YCP debugger in yast2-core-debugger not to confuse
  people who want to use the Byebug based Ruby debugger
  (bsc#1018038)
- 3.2.2</changelog>
  <changelog author="mvidner@suse.com" date="1507636800">- Fixed newly uncovered warnings: Wterminate, Wint-in-bool-context,
  sys/sysmacros (bsc#982942, bsc#434048).
- 4.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1511870400">- add jemalloc dependency for y2base which is used only in old
  testsuite and that workarounds problem with dynamic dlopening
  of jemalloc in ruby (bsc#1068883)
- 4.0.1</changelog>
  <changelog author="mvidner@suse.com" date="1517918400">- glibc-2.27 compatibility: Removed an overly specific test case
  for certain localized numbers (bsc#1079630)
- 4.0.2</changelog>
  <changelog author="aschnell@suse.com" date="1532001600">- fixed detection of aarch64 during update by recognizing aarch64
  in elf-arch (bsc#1099325)
- recognise RISC-V in elf-arch
- 4.0.3</changelog>
</package>
<package pkgid="e7c7b21014c422c8a1e4f091f775506bef7b3113d766e2d441f18c92ac960196" name="yast2-core-devel" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1416916800">- ag_any: respect target root also when the file
  does not exist in the original root (boo#903747).
  If applied at installation time as a DUD, it fixes
  "Internal error... in SaveModulesToLoad" during
  an upgrade to oS 13.2.
- 3.1.14</changelog>
  <changelog author="lslezak@suse.cz" date="1421928000">- skip empty environment variables when activating the locale
  settings, fixes inconsistent locale setting when started
  via "kdesu" with unchecked "Remember password" option
  (boo#914081)
- 3.1.15</changelog>
  <changelog author="mvidner@suse.com" date="1425384000">- Fixed compilation (but not tests) with GCC 5 (boo#914255).
- 3.1.16</changelog>
  <changelog author="jreidinger@suse.com" date="1427716800">- Fix YCP symbol comparison with GCC 5 (thanks schubi for
  performance measurement and mvidner for review) (boo#914255)
- 3.1.17</changelog>
  <changelog author="mvidner@suse.com" date="1431345600">- Fixed compilation warnings.</changelog>
  <changelog author="besser82@fedoraproject.org" date="1431518400">- Fix more compilation warnings.</changelog>
  <changelog author="mvidner@suse.com" date="1444132800">- In the signal handler, log the sender PID, and if present,
  run /usr/lib/YaST2/bin/signal-postmortem (bsc#935686).
- 3.1.18</changelog>
  <changelog author="jreidinger@suse.com" date="1453204800">- ag_ini: when multifile list contain glob, evaluate it in correct
  root. (bnc#962566)
- 3.1.19</changelog>
  <changelog author="mvidner@suse.com" date="1454414400">- Treat C/C++ warnings as errors.
- 3.1.20</changelog>
  <changelog author="mvidner@suse.com" date="1454414401">- Treat C/C++ warnings as errors but only via bcond_with werror.
- 3.1.21</changelog>
  <changelog author="gs@suse.de" date="1457006400">- Add missing newline to error messages (bsc#969236)
- 3.1.22</changelog>
  <changelog author="mvidner@suse.com" date="1464868800">- Optionally build with Clang instead of GCC (via bcond_with clang)
- Fixed most of Clang warnings (bsc#982942)
- 3.1.23</changelog>
  <changelog author="jreidinger@suse.com" date="1474372800">- disable doc generation (FATE#320356)
- remove unnecessary build dependency to speed up build
  (bsc#999203)
- 3.1.24</changelog>
  <changelog author="jreidinger@suse.com" date="1478520000">- ag_anyangent: Do not fail the parse when an Optional syntax meets
  EOF, e.g. for a fstab without a trailing newline (bsc#429326#c11)
- 3.2.0</changelog>
  <changelog author="jreidinger@suse.com" date="1483444800">- Allow more detailed error specification when loading namespace
  to component system failed (bsc#932331)
- 3.2.1</changelog>
  <changelog author="jreidinger@suse.com" date="1483531200">- Dropped the YCP debugger in yast2-core-debugger not to confuse
  people who want to use the Byebug based Ruby debugger
  (bsc#1018038)
- 3.2.2</changelog>
  <changelog author="mvidner@suse.com" date="1507636800">- Fixed newly uncovered warnings: Wterminate, Wint-in-bool-context,
  sys/sysmacros (bsc#982942, bsc#434048).
- 4.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1511870400">- add jemalloc dependency for y2base which is used only in old
  testsuite and that workarounds problem with dynamic dlopening
  of jemalloc in ruby (bsc#1068883)
- 4.0.1</changelog>
  <changelog author="mvidner@suse.com" date="1517918400">- glibc-2.27 compatibility: Removed an overly specific test case
  for certain localized numbers (bsc#1079630)
- 4.0.2</changelog>
  <changelog author="aschnell@suse.com" date="1532001600">- fixed detection of aarch64 during update by recognizing aarch64
  in elf-arch (bsc#1099325)
- recognise RISC-V in elf-arch
- 4.0.3</changelog>
</package>
<package pkgid="cc0e8d77d648326f9e25ecaa95ed4ee4c0bae6d54dbe5e136a84181d546c7e94" name="yast2-country" arch="src">
  <version epoch="0" ver="4.0.22" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1508500800">- Use `systemd-firstboot` call for setting the keyboard in the
  first stage (bsc#1046436)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1508760000">- Do not use `--root` option for the `systemd-firstboot` call,
  SCR already runs it in the target chroot (bsc#1046436)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1508932800">- Display an error popup when saving the keyboard config fails
  (related to bsc#1046436)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1509451200">- Let the "localectl" tool to create the X11 keyboard configuration
  (bsc#1065264)
- 4.0.6</changelog>
  <changelog author="jsrain@suse.cz" date="1510056000">- adapted the locale handling (fate#319454)
- removed root-specific locale setting
- 4.0.7</changelog>
  <changelog author="jreidinger@suse.com" date="1510142400">- fix building depending packages after adaptation of locale
  handling (fix for previous change for fate#319454)
- 4.0.8</changelog>
  <changelog author="schubi@suse.de" date="1510920000">- Fixed testcase dependencies. (Fix for previous change
  for fate#319454).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1511524800">- Move the y2country/language_dbus.rb file to the
  yast2-country-data subpackage where it is needed by Language.rb
  (bsc#1069119)
- 4.0.10</changelog>
  <changelog author="jsrain@suse.cz" date="1512388800">- do not touch variables in sysconfig/language, which are used for
  default console settings (not system locale) (fate#319454)
- 4.0.11</changelog>
  <changelog author="jreidinger@suse.com" date="1513080000">- install chrony instead of ntp when ntp is enabled (fate#323432)
- 4.0.12</changelog>
  <changelog author="schubi@suse.de" date="1513166400">- AutoYaST upgrade fix: Writing keyboard settings defined in the
  AutoYaST configuration file (bnc1070305).
- 4.0.13</changelog>
  <changelog author="jsrain@suse.cz" date="1513252800">- adapt handling of console and time zone settings (fate#319454)
- 4.0.14</changelog>
  <changelog author="jsrain@suse.cz" date="1515412800">- adjust calling systemd-firstboot for keyboard setting
  (bsc#1074481)
- 4.0.15</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- drop writting and reading keys KEYTABLE and COMPOSETABLE in
  /etc/sysconfig/keyboard (bsc#1075828, fate#319454)
- 4.0.16</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1516795200">- Unify openSUSE and SLE console fonts maps (bsc#1068814).
- 4.0.17</changelog>
  <changelog author="lslezak@suse.cz" date="1517227200">- Reimplemented package reset to require less memory
  (related to bsc#1076768)
- 4.0.18</changelog>
  <changelog author="jreidinger@suse.com" date="1517313600">- Lnaguage: nicer handling of dbus timeout (bsc#1076804)
- 4.0.19</changelog>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
</package>
<package pkgid="d05fa73c2dd167d5cc17c65dbb6440568e86dcd4c8812867e2d63ac464c75fe4" name="yast2-country" arch="x86_64">
  <version epoch="0" ver="4.0.22" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1508500800">- Use `systemd-firstboot` call for setting the keyboard in the
  first stage (bsc#1046436)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1508760000">- Do not use `--root` option for the `systemd-firstboot` call,
  SCR already runs it in the target chroot (bsc#1046436)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1508932800">- Display an error popup when saving the keyboard config fails
  (related to bsc#1046436)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1509451200">- Let the "localectl" tool to create the X11 keyboard configuration
  (bsc#1065264)
- 4.0.6</changelog>
  <changelog author="jsrain@suse.cz" date="1510056000">- adapted the locale handling (fate#319454)
- removed root-specific locale setting
- 4.0.7</changelog>
  <changelog author="jreidinger@suse.com" date="1510142400">- fix building depending packages after adaptation of locale
  handling (fix for previous change for fate#319454)
- 4.0.8</changelog>
  <changelog author="schubi@suse.de" date="1510920000">- Fixed testcase dependencies. (Fix for previous change
  for fate#319454).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1511524800">- Move the y2country/language_dbus.rb file to the
  yast2-country-data subpackage where it is needed by Language.rb
  (bsc#1069119)
- 4.0.10</changelog>
  <changelog author="jsrain@suse.cz" date="1512388800">- do not touch variables in sysconfig/language, which are used for
  default console settings (not system locale) (fate#319454)
- 4.0.11</changelog>
  <changelog author="jreidinger@suse.com" date="1513080000">- install chrony instead of ntp when ntp is enabled (fate#323432)
- 4.0.12</changelog>
  <changelog author="schubi@suse.de" date="1513166400">- AutoYaST upgrade fix: Writing keyboard settings defined in the
  AutoYaST configuration file (bnc1070305).
- 4.0.13</changelog>
  <changelog author="jsrain@suse.cz" date="1513252800">- adapt handling of console and time zone settings (fate#319454)
- 4.0.14</changelog>
  <changelog author="jsrain@suse.cz" date="1515412800">- adjust calling systemd-firstboot for keyboard setting
  (bsc#1074481)
- 4.0.15</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- drop writting and reading keys KEYTABLE and COMPOSETABLE in
  /etc/sysconfig/keyboard (bsc#1075828, fate#319454)
- 4.0.16</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1516795200">- Unify openSUSE and SLE console fonts maps (bsc#1068814).
- 4.0.17</changelog>
  <changelog author="lslezak@suse.cz" date="1517227200">- Reimplemented package reset to require less memory
  (related to bsc#1076768)
- 4.0.18</changelog>
  <changelog author="jreidinger@suse.com" date="1517313600">- Lnaguage: nicer handling of dbus timeout (bsc#1076804)
- 4.0.19</changelog>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
</package>
<package pkgid="d6c8419601af2866f9ca92f92c4f3d6cefd9f3edf15be82ad3a009cee7992463" name="yast2-country" arch="src">
  <version epoch="0" ver="4.0.23" rel="lp150.2.6.1"/>
  <changelog author="lslezak@suse.cz" date="1508760000">- Do not use `--root` option for the `systemd-firstboot` call,
  SCR already runs it in the target chroot (bsc#1046436)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1508932800">- Display an error popup when saving the keyboard config fails
  (related to bsc#1046436)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1509451200">- Let the "localectl" tool to create the X11 keyboard configuration
  (bsc#1065264)
- 4.0.6</changelog>
  <changelog author="jsrain@suse.cz" date="1510056000">- adapted the locale handling (fate#319454)
- removed root-specific locale setting
- 4.0.7</changelog>
  <changelog author="jreidinger@suse.com" date="1510142400">- fix building depending packages after adaptation of locale
  handling (fix for previous change for fate#319454)
- 4.0.8</changelog>
  <changelog author="schubi@suse.de" date="1510920000">- Fixed testcase dependencies. (Fix for previous change
  for fate#319454).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1511524800">- Move the y2country/language_dbus.rb file to the
  yast2-country-data subpackage where it is needed by Language.rb
  (bsc#1069119)
- 4.0.10</changelog>
  <changelog author="jsrain@suse.cz" date="1512388800">- do not touch variables in sysconfig/language, which are used for
  default console settings (not system locale) (fate#319454)
- 4.0.11</changelog>
  <changelog author="jreidinger@suse.com" date="1513080000">- install chrony instead of ntp when ntp is enabled (fate#323432)
- 4.0.12</changelog>
  <changelog author="schubi@suse.de" date="1513166400">- AutoYaST upgrade fix: Writing keyboard settings defined in the
  AutoYaST configuration file (bnc1070305).
- 4.0.13</changelog>
  <changelog author="jsrain@suse.cz" date="1513252800">- adapt handling of console and time zone settings (fate#319454)
- 4.0.14</changelog>
  <changelog author="jsrain@suse.cz" date="1515412800">- adjust calling systemd-firstboot for keyboard setting
  (bsc#1074481)
- 4.0.15</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- drop writting and reading keys KEYTABLE and COMPOSETABLE in
  /etc/sysconfig/keyboard (bsc#1075828, fate#319454)
- 4.0.16</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1516795200">- Unify openSUSE and SLE console fonts maps (bsc#1068814).
- 4.0.17</changelog>
  <changelog author="lslezak@suse.cz" date="1517227200">- Reimplemented package reset to require less memory
  (related to bsc#1076768)
- 4.0.18</changelog>
  <changelog author="jreidinger@suse.com" date="1517313600">- Lnaguage: nicer handling of dbus timeout (bsc#1076804)
- 4.0.19</changelog>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.23</changelog>
</package>
<package pkgid="c1ad981c32e5521e759da27417b1d879d183485a6fcad29fed1b165091a62813" name="yast2-country" arch="x86_64">
  <version epoch="0" ver="4.0.23" rel="lp150.2.6.1"/>
  <changelog author="lslezak@suse.cz" date="1508760000">- Do not use `--root` option for the `systemd-firstboot` call,
  SCR already runs it in the target chroot (bsc#1046436)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1508932800">- Display an error popup when saving the keyboard config fails
  (related to bsc#1046436)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1509451200">- Let the "localectl" tool to create the X11 keyboard configuration
  (bsc#1065264)
- 4.0.6</changelog>
  <changelog author="jsrain@suse.cz" date="1510056000">- adapted the locale handling (fate#319454)
- removed root-specific locale setting
- 4.0.7</changelog>
  <changelog author="jreidinger@suse.com" date="1510142400">- fix building depending packages after adaptation of locale
  handling (fix for previous change for fate#319454)
- 4.0.8</changelog>
  <changelog author="schubi@suse.de" date="1510920000">- Fixed testcase dependencies. (Fix for previous change
  for fate#319454).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1511524800">- Move the y2country/language_dbus.rb file to the
  yast2-country-data subpackage where it is needed by Language.rb
  (bsc#1069119)
- 4.0.10</changelog>
  <changelog author="jsrain@suse.cz" date="1512388800">- do not touch variables in sysconfig/language, which are used for
  default console settings (not system locale) (fate#319454)
- 4.0.11</changelog>
  <changelog author="jreidinger@suse.com" date="1513080000">- install chrony instead of ntp when ntp is enabled (fate#323432)
- 4.0.12</changelog>
  <changelog author="schubi@suse.de" date="1513166400">- AutoYaST upgrade fix: Writing keyboard settings defined in the
  AutoYaST configuration file (bnc1070305).
- 4.0.13</changelog>
  <changelog author="jsrain@suse.cz" date="1513252800">- adapt handling of console and time zone settings (fate#319454)
- 4.0.14</changelog>
  <changelog author="jsrain@suse.cz" date="1515412800">- adjust calling systemd-firstboot for keyboard setting
  (bsc#1074481)
- 4.0.15</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- drop writting and reading keys KEYTABLE and COMPOSETABLE in
  /etc/sysconfig/keyboard (bsc#1075828, fate#319454)
- 4.0.16</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1516795200">- Unify openSUSE and SLE console fonts maps (bsc#1068814).
- 4.0.17</changelog>
  <changelog author="lslezak@suse.cz" date="1517227200">- Reimplemented package reset to require less memory
  (related to bsc#1076768)
- 4.0.18</changelog>
  <changelog author="jreidinger@suse.com" date="1517313600">- Lnaguage: nicer handling of dbus timeout (bsc#1076804)
- 4.0.19</changelog>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.23</changelog>
</package>
<package pkgid="591bfeda8c911f4f1447be34a49363fb3097efe217c0de734fc8eea4ab7a550f" name="yast2-country-data" arch="x86_64">
  <version epoch="0" ver="4.0.22" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1508500800">- Use `systemd-firstboot` call for setting the keyboard in the
  first stage (bsc#1046436)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1508760000">- Do not use `--root` option for the `systemd-firstboot` call,
  SCR already runs it in the target chroot (bsc#1046436)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1508932800">- Display an error popup when saving the keyboard config fails
  (related to bsc#1046436)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1509451200">- Let the "localectl" tool to create the X11 keyboard configuration
  (bsc#1065264)
- 4.0.6</changelog>
  <changelog author="jsrain@suse.cz" date="1510056000">- adapted the locale handling (fate#319454)
- removed root-specific locale setting
- 4.0.7</changelog>
  <changelog author="jreidinger@suse.com" date="1510142400">- fix building depending packages after adaptation of locale
  handling (fix for previous change for fate#319454)
- 4.0.8</changelog>
  <changelog author="schubi@suse.de" date="1510920000">- Fixed testcase dependencies. (Fix for previous change
  for fate#319454).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1511524800">- Move the y2country/language_dbus.rb file to the
  yast2-country-data subpackage where it is needed by Language.rb
  (bsc#1069119)
- 4.0.10</changelog>
  <changelog author="jsrain@suse.cz" date="1512388800">- do not touch variables in sysconfig/language, which are used for
  default console settings (not system locale) (fate#319454)
- 4.0.11</changelog>
  <changelog author="jreidinger@suse.com" date="1513080000">- install chrony instead of ntp when ntp is enabled (fate#323432)
- 4.0.12</changelog>
  <changelog author="schubi@suse.de" date="1513166400">- AutoYaST upgrade fix: Writing keyboard settings defined in the
  AutoYaST configuration file (bnc1070305).
- 4.0.13</changelog>
  <changelog author="jsrain@suse.cz" date="1513252800">- adapt handling of console and time zone settings (fate#319454)
- 4.0.14</changelog>
  <changelog author="jsrain@suse.cz" date="1515412800">- adjust calling systemd-firstboot for keyboard setting
  (bsc#1074481)
- 4.0.15</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- drop writting and reading keys KEYTABLE and COMPOSETABLE in
  /etc/sysconfig/keyboard (bsc#1075828, fate#319454)
- 4.0.16</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1516795200">- Unify openSUSE and SLE console fonts maps (bsc#1068814).
- 4.0.17</changelog>
  <changelog author="lslezak@suse.cz" date="1517227200">- Reimplemented package reset to require less memory
  (related to bsc#1076768)
- 4.0.18</changelog>
  <changelog author="jreidinger@suse.com" date="1517313600">- Lnaguage: nicer handling of dbus timeout (bsc#1076804)
- 4.0.19</changelog>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
</package>
<package pkgid="e9b631eb49e5dd41febb4c7695d806fb6ddb069ec425e2e94cff40578651e2c9" name="yast2-country-data" arch="x86_64">
  <version epoch="0" ver="4.0.23" rel="lp150.2.6.1"/>
  <changelog author="lslezak@suse.cz" date="1508760000">- Do not use `--root` option for the `systemd-firstboot` call,
  SCR already runs it in the target chroot (bsc#1046436)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1508932800">- Display an error popup when saving the keyboard config fails
  (related to bsc#1046436)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1509451200">- Let the "localectl" tool to create the X11 keyboard configuration
  (bsc#1065264)
- 4.0.6</changelog>
  <changelog author="jsrain@suse.cz" date="1510056000">- adapted the locale handling (fate#319454)
- removed root-specific locale setting
- 4.0.7</changelog>
  <changelog author="jreidinger@suse.com" date="1510142400">- fix building depending packages after adaptation of locale
  handling (fix for previous change for fate#319454)
- 4.0.8</changelog>
  <changelog author="schubi@suse.de" date="1510920000">- Fixed testcase dependencies. (Fix for previous change
  for fate#319454).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1511524800">- Move the y2country/language_dbus.rb file to the
  yast2-country-data subpackage where it is needed by Language.rb
  (bsc#1069119)
- 4.0.10</changelog>
  <changelog author="jsrain@suse.cz" date="1512388800">- do not touch variables in sysconfig/language, which are used for
  default console settings (not system locale) (fate#319454)
- 4.0.11</changelog>
  <changelog author="jreidinger@suse.com" date="1513080000">- install chrony instead of ntp when ntp is enabled (fate#323432)
- 4.0.12</changelog>
  <changelog author="schubi@suse.de" date="1513166400">- AutoYaST upgrade fix: Writing keyboard settings defined in the
  AutoYaST configuration file (bnc1070305).
- 4.0.13</changelog>
  <changelog author="jsrain@suse.cz" date="1513252800">- adapt handling of console and time zone settings (fate#319454)
- 4.0.14</changelog>
  <changelog author="jsrain@suse.cz" date="1515412800">- adjust calling systemd-firstboot for keyboard setting
  (bsc#1074481)
- 4.0.15</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- drop writting and reading keys KEYTABLE and COMPOSETABLE in
  /etc/sysconfig/keyboard (bsc#1075828, fate#319454)
- 4.0.16</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1516795200">- Unify openSUSE and SLE console fonts maps (bsc#1068814).
- 4.0.17</changelog>
  <changelog author="lslezak@suse.cz" date="1517227200">- Reimplemented package reset to require less memory
  (related to bsc#1076768)
- 4.0.18</changelog>
  <changelog author="jreidinger@suse.com" date="1517313600">- Lnaguage: nicer handling of dbus timeout (bsc#1076804)
- 4.0.19</changelog>
  <changelog author="ancor@suse.com" date="1518177600">- Keyboard: don't try to set the keyboard map for AMBA devices,
  e.g. /dev/ttyAMA0 (bsc#1080222).
- 4.0.20</changelog>
  <changelog author="jsrain@suse.cz" date="1526299200">- handle setting locale in firstboot (bsc#1092979)
- 4.0.21</changelog>
  <changelog author="jreidinger@suse.com" date="1526385600">- Do not use opensuse ntp pool servers for SLE (bsc#1090168)
- 4.0.22</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.23</changelog>
</package>
<package pkgid="8c59da2a72dbecd34248a54c2a718879acb1efb70e7117bcedf31cb088e73587" name="yast2-dhcp-server" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merged proofed texts
- confirmed license
- 2.22.0</changelog>
  <changelog author="jsrain@suse.cz" date="1334836800">- use the ButtonBox widget (bnc#684863)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379505600">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="locilka@suse.com" date="1396267200">- Fixed testsuite (adapted to new systemd service)
- 3.1.2</changelog>
  <changelog author="mfilka@suse.com" date="1407412800">- bnc#887139
  - selected device has to have an ip assigned.
- 3.1.3</changelog>
  <changelog author="ancor@suse.com" date="1411128000">- Adapted to use systemd to manage the dhcpd service (bnc#892342)
- 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.5</changelog>
  <changelog author="ancor@suse.com" date="1448539200">- Several UI improvements and fixes, including the usage of the
  new generic widget to handle the service status (fate#318771).
- 3.1.6</changelog>
  <changelog author="ancor@suse.com" date="1448625600">- Adapted to latest changes in UI::ServiceStatus API (fate#318771)
- 3.1.7</changelog>
  <changelog author="ancor@suse.com" date="1452168000">- Fixed crash when dhcp-server is not installed (bsc#959730)
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1452772800">- Fix validation of AutoYaST profiles (bsc#954412)
- 3.1.9</changelog>
  <changelog author="mvidner@suse.com" date="1453809600">- Fix "One or more selected network interfaces is not configured"
  when ifconfig is not installed (boo#958525).
- 3.1.10</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465214400">- Stop generating autodocs (fate#320356)
- 3.1.11</changelog>
  <changelog author="jreidinger@suse.com" date="1475755200">- prevent adding "pool" to global scope as it is allowed only in
  network scope (bsc#737492)
- 3.2.0</changelog>
  <changelog author="jreidinger@suse.com" date="1476964800">- allow empty string in primary name server field for dynamic DNS
  option to allow what is suggested in documentation for local DNS
  servers (bsc#736496)
- 3.2.1</changelog>
  <changelog author="lslezak@suse.cz" date="1484740800">- Fixed a crash at start when the "dhcp-server" package was not
  installed in the system. The crash happens with the latest
  yast2-core and yast2-ruby-bindings packages (it is related to the
  bsc#932331 fix).
- 3.2.2</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="e622d62925aed150e3a70a06b91851a6783f974e69a2b8e5a9737d950b59605a" name="yast2-dhcp-server" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merged proofed texts
- confirmed license
- 2.22.0</changelog>
  <changelog author="jsrain@suse.cz" date="1334836800">- use the ButtonBox widget (bnc#684863)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379505600">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="locilka@suse.com" date="1396267200">- Fixed testsuite (adapted to new systemd service)
- 3.1.2</changelog>
  <changelog author="mfilka@suse.com" date="1407412800">- bnc#887139
  - selected device has to have an ip assigned.
- 3.1.3</changelog>
  <changelog author="ancor@suse.com" date="1411128000">- Adapted to use systemd to manage the dhcpd service (bnc#892342)
- 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.5</changelog>
  <changelog author="ancor@suse.com" date="1448539200">- Several UI improvements and fixes, including the usage of the
  new generic widget to handle the service status (fate#318771).
- 3.1.6</changelog>
  <changelog author="ancor@suse.com" date="1448625600">- Adapted to latest changes in UI::ServiceStatus API (fate#318771)
- 3.1.7</changelog>
  <changelog author="ancor@suse.com" date="1452168000">- Fixed crash when dhcp-server is not installed (bsc#959730)
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1452772800">- Fix validation of AutoYaST profiles (bsc#954412)
- 3.1.9</changelog>
  <changelog author="mvidner@suse.com" date="1453809600">- Fix "One or more selected network interfaces is not configured"
  when ifconfig is not installed (boo#958525).
- 3.1.10</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465214400">- Stop generating autodocs (fate#320356)
- 3.1.11</changelog>
  <changelog author="jreidinger@suse.com" date="1475755200">- prevent adding "pool" to global scope as it is allowed only in
  network scope (bsc#737492)
- 3.2.0</changelog>
  <changelog author="jreidinger@suse.com" date="1476964800">- allow empty string in primary name server field for dynamic DNS
  option to allow what is suggested in documentation for local DNS
  servers (bsc#736496)
- 3.2.1</changelog>
  <changelog author="lslezak@suse.cz" date="1484740800">- Fixed a crash at start when the "dhcp-server" package was not
  installed in the system. The crash happens with the latest
  yast2-core and yast2-ruby-bindings packages (it is related to the
  bsc#932331 fix).
- 3.2.2</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="df7a96d20d0a65e0b4252a7e831caa18c628b968e3cb601b65af837e3f9c8ba7" name="yast2-dns-server" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="locilka@suse.com" date="1418126400">- Fixed handling of zones (bnc#898659)
  - Checking for system zones was moved to separate function
  - Extended list of zones marked as system (internal) ones with
    (0\.)+ip6.arpa
  - Not allowing to edit system zones (belong to bind package)
  - Added check for 'bind' package to be installed before writing
    the configuration
  - Marking all imported zones as 'modified' to be written later
  - Marking all imported non-system zones as 'is_new' to create
    a zone file for them
  - Flushing /etc/named.conf cache 'after' writing zones (instead
    of 'before')
  - Using "" as the default NETCONFIG_DNS_POLICY (instead of 0)
  - Do not write system zones to LDAP (bnc#746401)
  - If systems zones are marked as modified, they are written to
    named configuration (if LDAP is not in use)
- 3.1.10</changelog>
  <changelog author="ancor@suse.com" date="1423828800">- The unit tests are now compatible with RSpec 3
- 3.1.11</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1434628800">- Avoid duplicated lines on /etc/named.conf file
  (bsc#935129)
- 3.1.12</changelog>
  <changelog author="cwh@suse.com" date="1434974400">- bnc#922765
  - changed default TLD from .site to .suse
- 3.1.13</changelog>
  <changelog author="mfilka@suse.com" date="1435665600">- bnc#923990
  - fixed TLD proposing
- 3.1.14</changelog>
  <changelog author="ancor@suse.com" date="1438603200">- Remove duplicated code causing the CLI commands to be executed
  twice (bnc#940466)</changelog>
  <changelog author="ancor@suse.com" date="1438689600">- Added automated tests for some CLI commands (bnc#940466)
- 3.1.15</changelog>
  <changelog author="mvidner@suse.com" date="1441368000">- Fix "Unescaped left brace in regex is deprecated" (boo#944490).
- 3.1.16</changelog>
  <changelog author="ancor@suse.com" date="1443787200">- UI component for services handling moved from yast2-dns-server
  to yast2 (fate#318771)
- 3.1.17</changelog>
  <changelog author="ancor@suse.com" date="1448539200">- Use new version of the UI component for services handling
  (fate#318771)
- 3.1.18</changelog>
  <changelog author="ancor@suse.com" date="1448625600">- Adapted to latest changes in UI::ServiceStatus API (fate#318771)
- 3.1.19</changelog>
  <changelog author="cwh@suse.com" date="1462363200">- Fix handling of trailing spaces in named.conf (bsc#976643)
- 3.1.20</changelog>
  <changelog author="mvidner@suse.com" date="1464177600">- Keep non-ACL items in allow-transfer AKA Enable Zone Transport
  (bsc#976643#c23)
- Fix parsing 'keyword{value;};' (no spaces) in named.conf
  (bsc#976643#c16).
- 3.1.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.22</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1470312000">- Fix an Internal Error 'undefined method DnsSequence' in case
  bind.rpm is not installed (bsc#990453)
- 3.1.23</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1470398400">- Prevent failures with dejagnu-1.6 (bsc#992333).
- 3.1.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1479988800">- Remove dead code regarding help messages (bsc#1012048)
- 3.2.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1509969600">- Fix teststuite once SuSEFirewall2 is being replaced by Firewalld
  (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1516881600">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1527681600">- Reload named.service only if it is running, otherwise restart it.
  (bnc#1093029)
- 4.0.2</changelog>
</package>
<package pkgid="314f6ed11d88818966bfc3f9ccd2cfe79792137bc32cc1bf86be091159245c4e" name="yast2-dns-server" arch="src">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="locilka@suse.com" date="1418126400">- Fixed handling of zones (bnc#898659)
  - Checking for system zones was moved to separate function
  - Extended list of zones marked as system (internal) ones with
    (0\.)+ip6.arpa
  - Not allowing to edit system zones (belong to bind package)
  - Added check for 'bind' package to be installed before writing
    the configuration
  - Marking all imported zones as 'modified' to be written later
  - Marking all imported non-system zones as 'is_new' to create
    a zone file for them
  - Flushing /etc/named.conf cache 'after' writing zones (instead
    of 'before')
  - Using "" as the default NETCONFIG_DNS_POLICY (instead of 0)
  - Do not write system zones to LDAP (bnc#746401)
  - If systems zones are marked as modified, they are written to
    named configuration (if LDAP is not in use)
- 3.1.10</changelog>
  <changelog author="ancor@suse.com" date="1423828800">- The unit tests are now compatible with RSpec 3
- 3.1.11</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1434628800">- Avoid duplicated lines on /etc/named.conf file
  (bsc#935129)
- 3.1.12</changelog>
  <changelog author="cwh@suse.com" date="1434974400">- bnc#922765
  - changed default TLD from .site to .suse
- 3.1.13</changelog>
  <changelog author="mfilka@suse.com" date="1435665600">- bnc#923990
  - fixed TLD proposing
- 3.1.14</changelog>
  <changelog author="ancor@suse.com" date="1438603200">- Remove duplicated code causing the CLI commands to be executed
  twice (bnc#940466)</changelog>
  <changelog author="ancor@suse.com" date="1438689600">- Added automated tests for some CLI commands (bnc#940466)
- 3.1.15</changelog>
  <changelog author="mvidner@suse.com" date="1441368000">- Fix "Unescaped left brace in regex is deprecated" (boo#944490).
- 3.1.16</changelog>
  <changelog author="ancor@suse.com" date="1443787200">- UI component for services handling moved from yast2-dns-server
  to yast2 (fate#318771)
- 3.1.17</changelog>
  <changelog author="ancor@suse.com" date="1448539200">- Use new version of the UI component for services handling
  (fate#318771)
- 3.1.18</changelog>
  <changelog author="ancor@suse.com" date="1448625600">- Adapted to latest changes in UI::ServiceStatus API (fate#318771)
- 3.1.19</changelog>
  <changelog author="cwh@suse.com" date="1462363200">- Fix handling of trailing spaces in named.conf (bsc#976643)
- 3.1.20</changelog>
  <changelog author="mvidner@suse.com" date="1464177600">- Keep non-ACL items in allow-transfer AKA Enable Zone Transport
  (bsc#976643#c23)
- Fix parsing 'keyword{value;};' (no spaces) in named.conf
  (bsc#976643#c16).
- 3.1.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.22</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1470312000">- Fix an Internal Error 'undefined method DnsSequence' in case
  bind.rpm is not installed (bsc#990453)
- 3.1.23</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1470398400">- Prevent failures with dejagnu-1.6 (bsc#992333).
- 3.1.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1479988800">- Remove dead code regarding help messages (bsc#1012048)
- 3.2.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1509969600">- Fix teststuite once SuSEFirewall2 is being replaced by Firewalld
  (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1516881600">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1527681600">- Reload named.service only if it is running, otherwise restart it.
  (bnc#1093029)
- 4.0.2</changelog>
</package>
<package pkgid="40ac139923ef1c7690cdd2a150dc9e5274ecfe166a93fac493f9fcf019868e8e" name="yast2-dns-server" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="lp150.2.6.1"/>
  <changelog author="ancor@suse.com" date="1423828800">- The unit tests are now compatible with RSpec 3
- 3.1.11</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1434628800">- Avoid duplicated lines on /etc/named.conf file
  (bsc#935129)
- 3.1.12</changelog>
  <changelog author="cwh@suse.com" date="1434974400">- bnc#922765
  - changed default TLD from .site to .suse
- 3.1.13</changelog>
  <changelog author="mfilka@suse.com" date="1435665600">- bnc#923990
  - fixed TLD proposing
- 3.1.14</changelog>
  <changelog author="ancor@suse.com" date="1438603200">- Remove duplicated code causing the CLI commands to be executed
  twice (bnc#940466)</changelog>
  <changelog author="ancor@suse.com" date="1438689600">- Added automated tests for some CLI commands (bnc#940466)
- 3.1.15</changelog>
  <changelog author="mvidner@suse.com" date="1441368000">- Fix "Unescaped left brace in regex is deprecated" (boo#944490).
- 3.1.16</changelog>
  <changelog author="ancor@suse.com" date="1443787200">- UI component for services handling moved from yast2-dns-server
  to yast2 (fate#318771)
- 3.1.17</changelog>
  <changelog author="ancor@suse.com" date="1448539200">- Use new version of the UI component for services handling
  (fate#318771)
- 3.1.18</changelog>
  <changelog author="ancor@suse.com" date="1448625600">- Adapted to latest changes in UI::ServiceStatus API (fate#318771)
- 3.1.19</changelog>
  <changelog author="cwh@suse.com" date="1462363200">- Fix handling of trailing spaces in named.conf (bsc#976643)
- 3.1.20</changelog>
  <changelog author="mvidner@suse.com" date="1464177600">- Keep non-ACL items in allow-transfer AKA Enable Zone Transport
  (bsc#976643#c23)
- Fix parsing 'keyword{value;};' (no spaces) in named.conf
  (bsc#976643#c16).
- 3.1.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.22</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1470312000">- Fix an Internal Error 'undefined method DnsSequence' in case
  bind.rpm is not installed (bsc#990453)
- 3.1.23</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1470398400">- Prevent failures with dejagnu-1.6 (bsc#992333).
- 3.1.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1479988800">- Remove dead code regarding help messages (bsc#1012048)
- 3.2.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1509969600">- Fix teststuite once SuSEFirewall2 is being replaced by Firewalld
  (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1516881600">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1527681600">- Reload named.service only if it is running, otherwise restart it.
  (bnc#1093029)
- 4.0.2</changelog>
  <changelog author="schubi@suse.de" date="1530014400">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.3</changelog>
</package>
<package pkgid="b500a08b881cd1bf3d7a1354cbac6d31fabb69b269ae554aacb3adea3d5abe94" name="yast2-dns-server" arch="src">
  <version epoch="0" ver="4.0.3" rel="lp150.2.6.1"/>
  <changelog author="ancor@suse.com" date="1423828800">- The unit tests are now compatible with RSpec 3
- 3.1.11</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1434628800">- Avoid duplicated lines on /etc/named.conf file
  (bsc#935129)
- 3.1.12</changelog>
  <changelog author="cwh@suse.com" date="1434974400">- bnc#922765
  - changed default TLD from .site to .suse
- 3.1.13</changelog>
  <changelog author="mfilka@suse.com" date="1435665600">- bnc#923990
  - fixed TLD proposing
- 3.1.14</changelog>
  <changelog author="ancor@suse.com" date="1438603200">- Remove duplicated code causing the CLI commands to be executed
  twice (bnc#940466)</changelog>
  <changelog author="ancor@suse.com" date="1438689600">- Added automated tests for some CLI commands (bnc#940466)
- 3.1.15</changelog>
  <changelog author="mvidner@suse.com" date="1441368000">- Fix "Unescaped left brace in regex is deprecated" (boo#944490).
- 3.1.16</changelog>
  <changelog author="ancor@suse.com" date="1443787200">- UI component for services handling moved from yast2-dns-server
  to yast2 (fate#318771)
- 3.1.17</changelog>
  <changelog author="ancor@suse.com" date="1448539200">- Use new version of the UI component for services handling
  (fate#318771)
- 3.1.18</changelog>
  <changelog author="ancor@suse.com" date="1448625600">- Adapted to latest changes in UI::ServiceStatus API (fate#318771)
- 3.1.19</changelog>
  <changelog author="cwh@suse.com" date="1462363200">- Fix handling of trailing spaces in named.conf (bsc#976643)
- 3.1.20</changelog>
  <changelog author="mvidner@suse.com" date="1464177600">- Keep non-ACL items in allow-transfer AKA Enable Zone Transport
  (bsc#976643#c23)
- Fix parsing 'keyword{value;};' (no spaces) in named.conf
  (bsc#976643#c16).
- 3.1.21</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.22</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1470312000">- Fix an Internal Error 'undefined method DnsSequence' in case
  bind.rpm is not installed (bsc#990453)
- 3.1.23</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1470398400">- Prevent failures with dejagnu-1.6 (bsc#992333).
- 3.1.24</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1479988800">- Remove dead code regarding help messages (bsc#1012048)
- 3.2.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1509969600">- Fix teststuite once SuSEFirewall2 is being replaced by Firewalld
  (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1516881600">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1527681600">- Reload named.service only if it is running, otherwise restart it.
  (bnc#1093029)
- 4.0.2</changelog>
  <changelog author="schubi@suse.de" date="1530014400">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.3</changelog>
</package>
<package pkgid="e4e5be3b17ee797af1bc0f9ac0f66f97c178bf66d50d41fe00052fae3b0c59a8" name="yast2-fcoe-client" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1380196800">- Improve ruby code
- version 3.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1380196801">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="gs@suse.de" date="1384948800">- Use new name 'fcoe-utils' when checking for installed package
- 3.1.1</changelog>
  <changelog author="gs@suse.de" date="1385467200">- Add 'Requires: fcoe-utils' to spec-file
- 3.1.2</changelog>
  <changelog author="gs@suse.de" date="1385985600">- Enhance help text, improve ruby code
- 3.1.3</changelog>
  <changelog author="gs@suse.de" date="1396008000">- Adapt start of services (resp. sockets) to systemd
- 3.1.4</changelog>
  <changelog author="gs@suse.de" date="1397044800">- Don't show interfaces not available for network
- 3.1.5</changelog>
  <changelog author="gs@suse.de" date="1399291200">- Add columns for driver and private flags to table of interfaces
  (bnc #841170)
- 3.1.6</changelog>
  <changelog author="gs@suse.de" date="1400068800">- Improve layout of services, configuration and edit dialog,
  use latest Wizard methods,
  enable 'lldpad' and 'fcoe' service in finish script (bnc #877352)
- 3.1.7</changelog>
  <changelog author="gs@suse.de" date="1400673600">- Start/enable services 'lldpad' and 'fcoe' in installed system
- 3.1.8</changelog>
  <changelog author="gs@suse.de" date="1401192000">- Show driver and private flags for all interfaces (improve patch
  for bnc #841170)
- 3.1.9</changelog>
  <changelog author="gs@suse.de" date="1401796800">- Mark configuration values for translation (bnc #877911)
- 3.1.10</changelog>
  <changelog author="mvidner@suse.com" date="1409832000">- Use a more flexible rubygem requirement syntax (bnc#895069)
- 3.1.11</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.13</changelog>
  <changelog author="gs@suse.de" date="1469534400">- handle duplicate vlan ids correctly (bsc#988050)
- 3.1.14</changelog>
  <changelog author="mvidner@suse.com" date="1505476800">- Fix wrong interface name with auto_vlan=yes (bsc#1043419)
- 3.1.15</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520424000">- Fix wrong interface name with auto_vlan=yes also during an
  auto-installation (bsc#1078991)
- 3.1.16</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="3f2d333f14612b3f93ee33ae7e2e471d343e85542e7e949012b9b5bc88dc118e" name="yast2-fcoe-client" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1380196800">- Improve ruby code
- version 3.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1380196801">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="gs@suse.de" date="1384948800">- Use new name 'fcoe-utils' when checking for installed package
- 3.1.1</changelog>
  <changelog author="gs@suse.de" date="1385467200">- Add 'Requires: fcoe-utils' to spec-file
- 3.1.2</changelog>
  <changelog author="gs@suse.de" date="1385985600">- Enhance help text, improve ruby code
- 3.1.3</changelog>
  <changelog author="gs@suse.de" date="1396008000">- Adapt start of services (resp. sockets) to systemd
- 3.1.4</changelog>
  <changelog author="gs@suse.de" date="1397044800">- Don't show interfaces not available for network
- 3.1.5</changelog>
  <changelog author="gs@suse.de" date="1399291200">- Add columns for driver and private flags to table of interfaces
  (bnc #841170)
- 3.1.6</changelog>
  <changelog author="gs@suse.de" date="1400068800">- Improve layout of services, configuration and edit dialog,
  use latest Wizard methods,
  enable 'lldpad' and 'fcoe' service in finish script (bnc #877352)
- 3.1.7</changelog>
  <changelog author="gs@suse.de" date="1400673600">- Start/enable services 'lldpad' and 'fcoe' in installed system
- 3.1.8</changelog>
  <changelog author="gs@suse.de" date="1401192000">- Show driver and private flags for all interfaces (improve patch
  for bnc #841170)
- 3.1.9</changelog>
  <changelog author="gs@suse.de" date="1401796800">- Mark configuration values for translation (bnc #877911)
- 3.1.10</changelog>
  <changelog author="mvidner@suse.com" date="1409832000">- Use a more flexible rubygem requirement syntax (bnc#895069)
- 3.1.11</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.13</changelog>
  <changelog author="gs@suse.de" date="1469534400">- handle duplicate vlan ids correctly (bsc#988050)
- 3.1.14</changelog>
  <changelog author="mvidner@suse.com" date="1505476800">- Fix wrong interface name with auto_vlan=yes (bsc#1043419)
- 3.1.15</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520424000">- Fix wrong interface name with auto_vlan=yes also during an
  auto-installation (bsc#1078991)
- 3.1.16</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="8c44a793941e051cc8f0ba082b27729fe07e434f41dde8946226caab18d48377" name="yast2-firewall" arch="noarch">
  <version epoch="0" ver="4.0.26" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1515067200">- AutoYaST: Reading settings only if the firewalld is installed.
  (fate#323460)
- 4.0.7</changelog>
  <changelog author="knut.anderssen@suse.com" date="1515499200">- AutoYaST: Added support to set the default zone and export the
  configuration. (fate#323460)
- 4.0.8</changelog>
  <changelog author="knut.anderssen@suse.com" date="1516363200">- AutoYaST: fixed default valur for log denied packets when using
  SuSEFIrewall2 profiles (fate#323460)
- 4.0.9</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517400000">- AutoYaST: (fate#323460)
  * Try to import again during writing in case it was not completed
  previously (ex: firewalld was not installed).
  * Enable or disable firewalld depending on the profile
- 4.0.10</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517832000">- AutoYaST: When a profile using the SuSEFirewall2 schema is used,
  the user is reported with an error if some property is not
  supported or with a warning in other case. (fate#323460)
- 4.0.11</changelog>
  <changelog author="gsouza@suse.com" date="1517918400">- When firewall is called on ncurses or command line, an error
  message is presented to the user, informing him to use firewalld
  (fate#323460).
- 4.0.12</changelog>
  <changelog author="knut.anderssen@suse.com" date="1518609600">- AutoYaST: added 'enable_firewall', 'start_firewall' and
  'FW_LOG_DROP_CRIT' to the list of supported properties for
  SuSEFirewall2 profiles and fixed a typo with 'FW_LOG_DROP_ALL'
  (fate#323460).
- 4.0.13</changelog>
  <changelog author="mfilka@suse.com" date="1518696000">- fate#323460
  - updated summary in autoyast client to work with new firewalld
    api
- 4.0.14</changelog>
  <changelog author="schubi@suse.de" date="1519041600">- Fixed "default_zone" in rnc file. (bnc#1013047)
- 4.0.15</changelog>
  <changelog author="schubi@suse.de" date="1519387200">- Added textdomain for translation (bnc#1081458)
- 4.0.16</changelog>
  <changelog author="jreidinger@suse.com" date="1519732800">- Added textdomain for translation (bnc#1083015)
- 4.0.17</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520337600">- SuSEFirewall2 importer changes (fate#323460)
  - Use internal zone instead of trusted when the protection from
    the INT zone is enabled which fits better with the definition.
  - Removed the mapping of apache2 and apache2-ssl services to
    firewalld services since the apache package will provide the
    services definition and we will not use firewall defaults.
- 4.0.18</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520942400">- Some fixes to the firewall AY schema (bsc#1013047)
  - Use "name" in zones
  - "default_zone" is a firewall attribute
- 4.0.19</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- More fixes to the firewall AY schema (bsc#1013047)
  - Added zone 'sources' element to the AutoYaST schema file.
  - Permitted the use of 'listentry' element in list entries.
- 4.0.20</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521806400">- AutoYaST SuSEFirewall2 Importer: Removed FW_LOG_ACCEPT_CRIT tag
  from the list of supported options as firewalld only log dropped
  packages and for accepted ones rich rules should be used instead
  (bsc#1086655)
- 4.0.21</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522152000">- Translate the installation finish client title (bsc#1084136)
- 4.0.22</changelog>
  <changelog author="snwint@suse.de" date="1523966400">- consistent wording (open/block) also for VNC ports (bsc#1089789)
- 4.0.23</changelog>
  <changelog author="knut.anderssen@suse.com" date="1524312000">- During installation, open services defined by (Tigervnc) instead
  of the 'vnc-server' service that is shipped with (firewalld)
  (bsc#1081952).
- 4.0.24</changelog>
  <changelog author="schubi@suse.de" date="1524830400">- AutoYaST: Report whether an interface has been defined
  in more than one zone (bnc#1089855).
- 4.0.25</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.26</changelog>
</package>
<package pkgid="b2c09e0354807b053ab304f5ec8a9b617419d0b2e0746fdad52e5862473d6735" name="yast2-firewall" arch="src">
  <version epoch="0" ver="4.0.26" rel="lp150.2.3.1"/>
  <changelog author="schubi@suse.de" date="1515067200">- AutoYaST: Reading settings only if the firewalld is installed.
  (fate#323460)
- 4.0.7</changelog>
  <changelog author="knut.anderssen@suse.com" date="1515499200">- AutoYaST: Added support to set the default zone and export the
  configuration. (fate#323460)
- 4.0.8</changelog>
  <changelog author="knut.anderssen@suse.com" date="1516363200">- AutoYaST: fixed default valur for log denied packets when using
  SuSEFIrewall2 profiles (fate#323460)
- 4.0.9</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517400000">- AutoYaST: (fate#323460)
  * Try to import again during writing in case it was not completed
  previously (ex: firewalld was not installed).
  * Enable or disable firewalld depending on the profile
- 4.0.10</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517832000">- AutoYaST: When a profile using the SuSEFirewall2 schema is used,
  the user is reported with an error if some property is not
  supported or with a warning in other case. (fate#323460)
- 4.0.11</changelog>
  <changelog author="gsouza@suse.com" date="1517918400">- When firewall is called on ncurses or command line, an error
  message is presented to the user, informing him to use firewalld
  (fate#323460).
- 4.0.12</changelog>
  <changelog author="knut.anderssen@suse.com" date="1518609600">- AutoYaST: added 'enable_firewall', 'start_firewall' and
  'FW_LOG_DROP_CRIT' to the list of supported properties for
  SuSEFirewall2 profiles and fixed a typo with 'FW_LOG_DROP_ALL'
  (fate#323460).
- 4.0.13</changelog>
  <changelog author="mfilka@suse.com" date="1518696000">- fate#323460
  - updated summary in autoyast client to work with new firewalld
    api
- 4.0.14</changelog>
  <changelog author="schubi@suse.de" date="1519041600">- Fixed "default_zone" in rnc file. (bnc#1013047)
- 4.0.15</changelog>
  <changelog author="schubi@suse.de" date="1519387200">- Added textdomain for translation (bnc#1081458)
- 4.0.16</changelog>
  <changelog author="jreidinger@suse.com" date="1519732800">- Added textdomain for translation (bnc#1083015)
- 4.0.17</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520337600">- SuSEFirewall2 importer changes (fate#323460)
  - Use internal zone instead of trusted when the protection from
    the INT zone is enabled which fits better with the definition.
  - Removed the mapping of apache2 and apache2-ssl services to
    firewalld services since the apache package will provide the
    services definition and we will not use firewall defaults.
- 4.0.18</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520942400">- Some fixes to the firewall AY schema (bsc#1013047)
  - Use "name" in zones
  - "default_zone" is a firewall attribute
- 4.0.19</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521720000">- More fixes to the firewall AY schema (bsc#1013047)
  - Added zone 'sources' element to the AutoYaST schema file.
  - Permitted the use of 'listentry' element in list entries.
- 4.0.20</changelog>
  <changelog author="knut.anderssen@suse.com" date="1521806400">- AutoYaST SuSEFirewall2 Importer: Removed FW_LOG_ACCEPT_CRIT tag
  from the list of supported options as firewalld only log dropped
  packages and for accepted ones rich rules should be used instead
  (bsc#1086655)
- 4.0.21</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522152000">- Translate the installation finish client title (bsc#1084136)
- 4.0.22</changelog>
  <changelog author="snwint@suse.de" date="1523966400">- consistent wording (open/block) also for VNC ports (bsc#1089789)
- 4.0.23</changelog>
  <changelog author="knut.anderssen@suse.com" date="1524312000">- During installation, open services defined by (Tigervnc) instead
  of the 'vnc-server' service that is shipped with (firewalld)
  (bsc#1081952).
- 4.0.24</changelog>
  <changelog author="schubi@suse.de" date="1524830400">- AutoYaST: Report whether an interface has been defined
  in more than one zone (bnc#1089855).
- 4.0.25</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.26</changelog>
</package>
<package pkgid="8a4761267163a1ce8a7b9755ec773dfd552ad253279a2e4fb56868357efe605f" name="yast2-firstboot" arch="noarch">
  <version epoch="0" ver="4.0.5" rel="lp150.2.3.1"/>
  <changelog author="mfilka@suse.com" date="1410955200">- bnc#895359
  - added client for nic cards autoconfiguration
- 3.1.4</changelog>
  <changelog author="ancor@suse.com" date="1416312000">- Added missing module for DHCP (bnc#895359, bnc#904527).
- Fixed errors in keyboard and language configuration (bnc#904527).
- 3.1.5</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="lslezak@suse.cz" date="1418904000">- fixed bashisms in "S09-cleanup" script (authored by "Ledest")
- 3.1.7</changelog>
  <changelog author="ancor@suse.com" date="1423137600">- Fixed the step for host name configuration
  (bnc#911952, bnc#802822)
- 3.1.8</changelog>
  <changelog author="locilka@suse.com" date="1429185600">- Forcing mode "installation" for firstboot to always use the
  correct workflow (bsc#924278)
- 3.1.9</changelog>
  <changelog author="ancor@suse.com" date="1444996800">- Fixed to always use the configured keyboard layout (bsc#950335)
- 3.1.10</changelog>
  <changelog author="ancor@suse.com" date="1451908800">- Fixed firstboot.xml to call the correct client for LAN
  configuration (bsc#960081)
- 3.1.11</changelog>
  <changelog author="jreidinger@suse.com" date="1460548800">- Do not overwrite bootloader configuration in first boot
  (related to FATE#317701)
- 3.1.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1463054400">- Remove kbd service restart because it does not exist anymore
  (bsc#974489)
- Fixed firstboot.xml to call the correct client for registration
  (bsc#970572) (lslezak@suse.cz)
- 3.1.13</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.14</changelog>
  <changelog author="ancor@suse.com" date="1470916800">- Reimplemented "create user" and "root password" steps to reuse
  the new installation dialogs instead of the obsolete ones.
- More sensible order for the mentioned steps in the default
  configuration file.
- Removed from the default configuration file the obsolete step
  for configuring authentication.
- bsc#992245, bsc#991863
- 3.1.15</changelog>
  <changelog author="ancor@suse.com" date="1471003200">- Faster response when the user skips the creation of a new user
  (bsc#992245).
- 3.1.16</changelog>
  <changelog author="jreidinger@suse.com" date="1472040000">- fix not showing errors as popup in firstboot (bnc#994892)
- 3.1.17</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468).
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1512043201">- Bring back HostnameDialog adding it into firstboot_hostname once
  it was removed from yast2-network (bsc#1028371, bsc#1070388).
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1516104000">- Do not initialize firstboot in AutoYaST upgrade mode.
  (Additial fix for bnc#1075744)
- 4.0.2</changelog>
  <changelog author="jsrain@suse.cz" date="1518091200">- adapted to changes in the Language module (bsc#1079852)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1521547200">- Added firstboot.glade symlink to include also the firstboot.xml
  texts in the generated POT file, removed the old Makefile hack
  (bsc#1085888)
- 4.0.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1528718400">- Allow going back from finish step and unified halt (bsc#1095253)
- 4.0.5</changelog>
</package>
<package pkgid="031a8afc3fa3e99da431949fae0c51e51cde28df657cda3af468dc4cbeaf8e30" name="yast2-firstboot" arch="src">
  <version epoch="0" ver="4.0.5" rel="lp150.2.3.1"/>
  <changelog author="mfilka@suse.com" date="1410955200">- bnc#895359
  - added client for nic cards autoconfiguration
- 3.1.4</changelog>
  <changelog author="ancor@suse.com" date="1416312000">- Added missing module for DHCP (bnc#895359, bnc#904527).
- Fixed errors in keyboard and language configuration (bnc#904527).
- 3.1.5</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="lslezak@suse.cz" date="1418904000">- fixed bashisms in "S09-cleanup" script (authored by "Ledest")
- 3.1.7</changelog>
  <changelog author="ancor@suse.com" date="1423137600">- Fixed the step for host name configuration
  (bnc#911952, bnc#802822)
- 3.1.8</changelog>
  <changelog author="locilka@suse.com" date="1429185600">- Forcing mode "installation" for firstboot to always use the
  correct workflow (bsc#924278)
- 3.1.9</changelog>
  <changelog author="ancor@suse.com" date="1444996800">- Fixed to always use the configured keyboard layout (bsc#950335)
- 3.1.10</changelog>
  <changelog author="ancor@suse.com" date="1451908800">- Fixed firstboot.xml to call the correct client for LAN
  configuration (bsc#960081)
- 3.1.11</changelog>
  <changelog author="jreidinger@suse.com" date="1460548800">- Do not overwrite bootloader configuration in first boot
  (related to FATE#317701)
- 3.1.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1463054400">- Remove kbd service restart because it does not exist anymore
  (bsc#974489)
- Fixed firstboot.xml to call the correct client for registration
  (bsc#970572) (lslezak@suse.cz)
- 3.1.13</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.14</changelog>
  <changelog author="ancor@suse.com" date="1470916800">- Reimplemented "create user" and "root password" steps to reuse
  the new installation dialogs instead of the obsolete ones.
- More sensible order for the mentioned steps in the default
  configuration file.
- Removed from the default configuration file the obsolete step
  for configuring authentication.
- bsc#992245, bsc#991863
- 3.1.15</changelog>
  <changelog author="ancor@suse.com" date="1471003200">- Faster response when the user skips the creation of a new user
  (bsc#992245).
- 3.1.16</changelog>
  <changelog author="jreidinger@suse.com" date="1472040000">- fix not showing errors as popup in firstboot (bnc#994892)
- 3.1.17</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468).
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1512043201">- Bring back HostnameDialog adding it into firstboot_hostname once
  it was removed from yast2-network (bsc#1028371, bsc#1070388).
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1516104000">- Do not initialize firstboot in AutoYaST upgrade mode.
  (Additial fix for bnc#1075744)
- 4.0.2</changelog>
  <changelog author="jsrain@suse.cz" date="1518091200">- adapted to changes in the Language module (bsc#1079852)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1521547200">- Added firstboot.glade symlink to include also the firstboot.xml
  texts in the generated POT file, removed the old Makefile hack
  (bsc#1085888)
- 4.0.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1528718400">- Allow going back from finish step and unified halt (bsc#1095253)
- 4.0.5</changelog>
</package>
<package pkgid="5d59bbfe4f06a5278acd7962e48578bc161c12f60ec7ce116accd30ef4ca8399" name="yast2-ftp-server" arch="noarch">
  <version epoch="0" ver="4.0.7" rel="lp150.2.3.1"/>
  <changelog author="cwh@suse.com" date="1408536000">- Using different defaults about logging for vsftpd/pure-ftpd (bnc#888287)
- Setting xferlog_enable = YES instead of syslog_enable
- 3.1.3</changelog>
  <changelog author="schubi@suse.de" date="1409054400">- Autoyast configuration mode: Set installation mode to "normal"
  before writing the settings. So the target system has to be
  set at first. (bnc#888212)
- 3.1.4</changelog>
  <changelog author="schubi@suse.de" date="1411041600">- Autoyast Import:Evaluate the kind of ftpserver at first.
  (bnc#892701)
- 3.1.5</changelog>
  <changelog author="ancor@suse.com" date="1412337600">- Fixed a configuration problem preventing xinetd to handle vsftp,
  since it was always configured as standalone (bnc#897470).
- 3.1.6</changelog>
  <changelog author="schubi@suse.de" date="1417176000">- AutoYaST import: Initialize the correct ftpserver which will
  be used for configuration. (bnc#907354)
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.9</changelog>
  <changelog author="jreidinger@suse.com" date="1474372800">- reduce rpm build time (bsc#999203)
- 3.1.10</changelog>
  <changelog author="cwh@suse.com" date="1477483200">- Switch to RSA certificates to match yast2-ca-management (bsc#694167)
- 3.2.0</changelog>
  <changelog author="mvidner@suse.com" date="1483531200">- Stub out yast2-inetd in our tests (bsc#932331)
- 3.2.1</changelog>
  <changelog author="schubi@suse.de" date="1499688000">- Added missing StartDaemon flag to internal data structure in
  order to read it from the AY configuration file. (bnc#1047232)
- 3.3.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- SuSEFirewall2 replaced by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1518091200">- convert starting on demand from Xinetd to systemd sockets due
  to drop of Xinetd (fate#323373)
- Drop pure-ftp as it does not provide systemd socket and we want
  to support only one backend to reduce the maintenance cost
- 4.0.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1518091201">- Replace CWMServiceStart xinetd methods or parameters by socket
  ones (fate#323373)
- 4.0.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520251200">- Remove an unnecessary Frame which was still referencing
  SuSEfirewall (bsc#1083707)
- 4.0.3</changelog>
  <changelog author="mfilka@suse.com" date="1521633600">- bnc#1084434
  - use dash in port range definition
- 4.0.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1524225600">- bsc#1090387
  - Do not cache widgets description until the ftp dialog is really
    run to avoid showing an out of date firewall description (the
    vsftpd package provides the firewalld service definition)
- 4.0.5</changelog>
  <changelog author="jreidinger@suse.com" date="1528372800">- Drop SSLv2 and SSLv3 as it is dropped for security reason for
  vsftpd (bsc#921303)</changelog>
  <changelog author="jreidinger@suse.com" date="1528718400">- Do not modify value when Browse dialog is canceled (bsc#1041829)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.7</changelog>
</package>
<package pkgid="c88f9cc4c53ac824c67f18a888e8170162251cce40c984bf4c967ad3cb34ff73" name="yast2-ftp-server" arch="src">
  <version epoch="0" ver="4.0.7" rel="lp150.2.3.1"/>
  <changelog author="cwh@suse.com" date="1408536000">- Using different defaults about logging for vsftpd/pure-ftpd (bnc#888287)
- Setting xferlog_enable = YES instead of syslog_enable
- 3.1.3</changelog>
  <changelog author="schubi@suse.de" date="1409054400">- Autoyast configuration mode: Set installation mode to "normal"
  before writing the settings. So the target system has to be
  set at first. (bnc#888212)
- 3.1.4</changelog>
  <changelog author="schubi@suse.de" date="1411041600">- Autoyast Import:Evaluate the kind of ftpserver at first.
  (bnc#892701)
- 3.1.5</changelog>
  <changelog author="ancor@suse.com" date="1412337600">- Fixed a configuration problem preventing xinetd to handle vsftp,
  since it was always configured as standalone (bnc#897470).
- 3.1.6</changelog>
  <changelog author="schubi@suse.de" date="1417176000">- AutoYaST import: Initialize the correct ftpserver which will
  be used for configuration. (bnc#907354)
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.9</changelog>
  <changelog author="jreidinger@suse.com" date="1474372800">- reduce rpm build time (bsc#999203)
- 3.1.10</changelog>
  <changelog author="cwh@suse.com" date="1477483200">- Switch to RSA certificates to match yast2-ca-management (bsc#694167)
- 3.2.0</changelog>
  <changelog author="mvidner@suse.com" date="1483531200">- Stub out yast2-inetd in our tests (bsc#932331)
- 3.2.1</changelog>
  <changelog author="schubi@suse.de" date="1499688000">- Added missing StartDaemon flag to internal data structure in
  order to read it from the AY configuration file. (bnc#1047232)
- 3.3.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- SuSEFirewall2 replaced by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="jreidinger@suse.com" date="1518091200">- convert starting on demand from Xinetd to systemd sockets due
  to drop of Xinetd (fate#323373)
- Drop pure-ftp as it does not provide systemd socket and we want
  to support only one backend to reduce the maintenance cost
- 4.0.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1518091201">- Replace CWMServiceStart xinetd methods or parameters by socket
  ones (fate#323373)
- 4.0.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520251200">- Remove an unnecessary Frame which was still referencing
  SuSEfirewall (bsc#1083707)
- 4.0.3</changelog>
  <changelog author="mfilka@suse.com" date="1521633600">- bnc#1084434
  - use dash in port range definition
- 4.0.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1524225600">- bsc#1090387
  - Do not cache widgets description until the ftp dialog is really
    run to avoid showing an out of date firewall description (the
    vsftpd package provides the firewalld service definition)
- 4.0.5</changelog>
  <changelog author="jreidinger@suse.com" date="1528372800">- Drop SSLv2 and SSLv3 as it is dropped for security reason for
  vsftpd (bsc#921303)</changelog>
  <changelog author="jreidinger@suse.com" date="1528718400">- Do not modify value when Browse dialog is canceled (bsc#1041829)
- 4.0.6</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.7</changelog>
</package>
<package pkgid="369802089d3c7978ab82c2cab930b9edaa8a180a635a30594a7809f7f7c4ef59" name="yast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.60" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1521547200">- Make many system roles fit in the dialog (using a RichText
  widget, bsc#1084674)
- 4.0.41</changelog>
  <changelog author="mvidner@suse.com" date="1521806400">- System roles: make the radio buttons match other dialogs,
  using images (bsc#1084674)
- 4.0.42</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.43</changelog>
  <changelog author="mvidner@suse.com" date="1523016000">- Start web VNC for the installation process (bsc#1078785)
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1523016001">- Use AbortException when user aborts (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="schubi@suse.de" date="1523361600">- Set Add-On products for installation again after the base
  product has been selected (bnc#1086846).
- 4.0.46</changelog>
  <changelog author="jreidinger@suse.com" date="1523880000">- Ensure proper patterns are selected when going back to system
  role and switch to different role (bsc#1088883)
- 4.0.47</changelog>
  <changelog author="mvidner@suse.com" date="1523880001">- Don't hard-code the role text color (bsc#1087399).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523966400">- Installer Updates does not overwrite Driver Updates
  (bsc#1088685).
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1524139200">- Log more details when unmounting the target partition fails
  (to debug bsc#1090018)
- 4.0.50</changelog>
  <changelog author="mvidner@suse.com" date="1524571200">- Fixed "vnc.sh: /root/.profile: No such file or directory"
  (bsc#1089623).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524657600">- Fix text direction for RTL languages in the installer settings
  screen (bsc#1089846).
- 4.0.52</changelog>
  <changelog author="jreidinger@suse.com" date="1524657601">- fix regression to show again iscsi configuration for disk-less
  setup  (bsc#1090753)
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Better handle the restore scripts when YaST is aborted or
  crashes (bsc#1089643)
- Delete the .repo files accidentally saved into inst-sys
  (fixes problems when restarting YaST after abort or crash)
- 4.0.54</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830401">- Do not warn too soon about missing disks during autoinstallation
  (bsc#1091033)
- 4.0.55</changelog>
  <changelog author="shundhammer@suse.com" date="1525262400">- Copy new /var/log/YaST2/storage-inst/ subdir to target at the
  end of the installation (part of fate #318196)
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Keep the selected product in the desktop selection dialog
  (bsc#1088660)
- 4.0.57</changelog>
  <changelog author="aschnell@suse.com" date="1525780800">- disable mdadm auto assembly for installation (bsc#1090690)
- 4.0.58</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525953600">- Log a warning when umounting a filesystem fails after
  installation/upgrade (related to bsc#1090018).
- 4.0.59</changelog>
  <changelog author="jlopez@suse.com" date="1526472000">- Do not try to set read-only property to default BTRFS subvolume
  if the filesystem already existed on disk (needed for
  bsc#1091047).
- 4.0.60</changelog>
</package>
<package pkgid="4fb1672a7ccd48780a466e23fc2ecdcb21116ad83b811b04e335e4dd430a9eed" name="yast2-installation" arch="src">
  <version epoch="0" ver="4.0.60" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1521547200">- Make many system roles fit in the dialog (using a RichText
  widget, bsc#1084674)
- 4.0.41</changelog>
  <changelog author="mvidner@suse.com" date="1521806400">- System roles: make the radio buttons match other dialogs,
  using images (bsc#1084674)
- 4.0.42</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.43</changelog>
  <changelog author="mvidner@suse.com" date="1523016000">- Start web VNC for the installation process (bsc#1078785)
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1523016001">- Use AbortException when user aborts (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="schubi@suse.de" date="1523361600">- Set Add-On products for installation again after the base
  product has been selected (bnc#1086846).
- 4.0.46</changelog>
  <changelog author="jreidinger@suse.com" date="1523880000">- Ensure proper patterns are selected when going back to system
  role and switch to different role (bsc#1088883)
- 4.0.47</changelog>
  <changelog author="mvidner@suse.com" date="1523880001">- Don't hard-code the role text color (bsc#1087399).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523966400">- Installer Updates does not overwrite Driver Updates
  (bsc#1088685).
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1524139200">- Log more details when unmounting the target partition fails
  (to debug bsc#1090018)
- 4.0.50</changelog>
  <changelog author="mvidner@suse.com" date="1524571200">- Fixed "vnc.sh: /root/.profile: No such file or directory"
  (bsc#1089623).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524657600">- Fix text direction for RTL languages in the installer settings
  screen (bsc#1089846).
- 4.0.52</changelog>
  <changelog author="jreidinger@suse.com" date="1524657601">- fix regression to show again iscsi configuration for disk-less
  setup  (bsc#1090753)
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Better handle the restore scripts when YaST is aborted or
  crashes (bsc#1089643)
- Delete the .repo files accidentally saved into inst-sys
  (fixes problems when restarting YaST after abort or crash)
- 4.0.54</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830401">- Do not warn too soon about missing disks during autoinstallation
  (bsc#1091033)
- 4.0.55</changelog>
  <changelog author="shundhammer@suse.com" date="1525262400">- Copy new /var/log/YaST2/storage-inst/ subdir to target at the
  end of the installation (part of fate #318196)
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Keep the selected product in the desktop selection dialog
  (bsc#1088660)
- 4.0.57</changelog>
  <changelog author="aschnell@suse.com" date="1525780800">- disable mdadm auto assembly for installation (bsc#1090690)
- 4.0.58</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525953600">- Log a warning when umounting a filesystem fails after
  installation/upgrade (related to bsc#1090018).
- 4.0.59</changelog>
  <changelog author="jlopez@suse.com" date="1526472000">- Do not try to set read-only property to default BTRFS subvolume
  if the filesystem already existed on disk (needed for
  bsc#1091047).
- 4.0.60</changelog>
</package>
<package pkgid="5ca1ffdf9035ed7a082b2db93877dfd6da8bcad87ad9f9a69faab920511ee000" name="yast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.63" rel="lp150.2.6.1"/>
  <changelog author="mvidner@suse.com" date="1523016000">- Start web VNC for the installation process (bsc#1078785)
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1523016001">- Use AbortException when user aborts (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="schubi@suse.de" date="1523361600">- Set Add-On products for installation again after the base
  product has been selected (bnc#1086846).
- 4.0.46</changelog>
  <changelog author="jreidinger@suse.com" date="1523880000">- Ensure proper patterns are selected when going back to system
  role and switch to different role (bsc#1088883)
- 4.0.47</changelog>
  <changelog author="mvidner@suse.com" date="1523880001">- Don't hard-code the role text color (bsc#1087399).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523966400">- Installer Updates does not overwrite Driver Updates
  (bsc#1088685).
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1524139200">- Log more details when unmounting the target partition fails
  (to debug bsc#1090018)
- 4.0.50</changelog>
  <changelog author="mvidner@suse.com" date="1524571200">- Fixed "vnc.sh: /root/.profile: No such file or directory"
  (bsc#1089623).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524657600">- Fix text direction for RTL languages in the installer settings
  screen (bsc#1089846).
- 4.0.52</changelog>
  <changelog author="jreidinger@suse.com" date="1524657601">- fix regression to show again iscsi configuration for disk-less
  setup  (bsc#1090753)
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Better handle the restore scripts when YaST is aborted or
  crashes (bsc#1089643)
- Delete the .repo files accidentally saved into inst-sys
  (fixes problems when restarting YaST after abort or crash)
- 4.0.54</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830401">- Do not warn too soon about missing disks during autoinstallation
  (bsc#1091033)
- 4.0.55</changelog>
  <changelog author="shundhammer@suse.com" date="1525262400">- Copy new /var/log/YaST2/storage-inst/ subdir to target at the
  end of the installation (part of fate #318196)
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Keep the selected product in the desktop selection dialog
  (bsc#1088660)
- 4.0.57</changelog>
  <changelog author="aschnell@suse.com" date="1525780800">- disable mdadm auto assembly for installation (bsc#1090690)
- 4.0.58</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525953600">- Log a warning when umounting a filesystem fails after
  installation/upgrade (related to bsc#1090018).
- 4.0.59</changelog>
  <changelog author="jlopez@suse.com" date="1526472000">- Do not try to set read-only property to default BTRFS subvolume
  if the filesystem already existed on disk (needed for
  bsc#1091047).
- 4.0.60</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526644800">- Fix installation mode detection (related to bsc#1089547).
- 4.0.61</changelog>
  <changelog author="jreidinger@suse.com" date="1527681600">- Copy active_devices.txt for s390 to prevent blocking of
  important devices when cio_ignore is active (bsc#1095033)
- 4.0.62</changelog>
  <changelog author="jreidinger@suse.com" date="1527768000">- Fix crash caused by previous fix when multipath is not available
  (bsc#1095323)
- 4.0.63</changelog>
</package>
<package pkgid="04abc1842785fe3b7f9281deae5814fed699ec2f987a177eeee4ace159617f00" name="yast2-installation" arch="src">
  <version epoch="0" ver="4.0.63" rel="lp150.2.6.1"/>
  <changelog author="mvidner@suse.com" date="1523016000">- Start web VNC for the installation process (bsc#1078785)
- 4.0.44</changelog>
  <changelog author="jlopez@suse.com" date="1523016001">- Use AbortException when user aborts (part of fate#318196).
- 4.0.45</changelog>
  <changelog author="schubi@suse.de" date="1523361600">- Set Add-On products for installation again after the base
  product has been selected (bnc#1086846).
- 4.0.46</changelog>
  <changelog author="jreidinger@suse.com" date="1523880000">- Ensure proper patterns are selected when going back to system
  role and switch to different role (bsc#1088883)
- 4.0.47</changelog>
  <changelog author="mvidner@suse.com" date="1523880001">- Don't hard-code the role text color (bsc#1087399).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523966400">- Installer Updates does not overwrite Driver Updates
  (bsc#1088685).
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1524139200">- Log more details when unmounting the target partition fails
  (to debug bsc#1090018)
- 4.0.50</changelog>
  <changelog author="mvidner@suse.com" date="1524571200">- Fixed "vnc.sh: /root/.profile: No such file or directory"
  (bsc#1089623).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524657600">- Fix text direction for RTL languages in the installer settings
  screen (bsc#1089846).
- 4.0.52</changelog>
  <changelog author="jreidinger@suse.com" date="1524657601">- fix regression to show again iscsi configuration for disk-less
  setup  (bsc#1090753)
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Better handle the restore scripts when YaST is aborted or
  crashes (bsc#1089643)
- Delete the .repo files accidentally saved into inst-sys
  (fixes problems when restarting YaST after abort or crash)
- 4.0.54</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830401">- Do not warn too soon about missing disks during autoinstallation
  (bsc#1091033)
- 4.0.55</changelog>
  <changelog author="shundhammer@suse.com" date="1525262400">- Copy new /var/log/YaST2/storage-inst/ subdir to target at the
  end of the installation (part of fate #318196)
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Keep the selected product in the desktop selection dialog
  (bsc#1088660)
- 4.0.57</changelog>
  <changelog author="aschnell@suse.com" date="1525780800">- disable mdadm auto assembly for installation (bsc#1090690)
- 4.0.58</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525953600">- Log a warning when umounting a filesystem fails after
  installation/upgrade (related to bsc#1090018).
- 4.0.59</changelog>
  <changelog author="jlopez@suse.com" date="1526472000">- Do not try to set read-only property to default BTRFS subvolume
  if the filesystem already existed on disk (needed for
  bsc#1091047).
- 4.0.60</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526644800">- Fix installation mode detection (related to bsc#1089547).
- 4.0.61</changelog>
  <changelog author="jreidinger@suse.com" date="1527681600">- Copy active_devices.txt for s390 to prevent blocking of
  important devices when cio_ignore is active (bsc#1095033)
- 4.0.62</changelog>
  <changelog author="jreidinger@suse.com" date="1527768000">- Fix crash caused by previous fix when multipath is not available
  (bsc#1095323)
- 4.0.63</changelog>
</package>
<package pkgid="b171d0c830de58daaeab0d49b1d8f562b44d1e6e7ebb9bfd6aad0ac6c0b56667" name="yast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.67" rel="lp150.2.9.1"/>
  <changelog author="mvidner@suse.com" date="1523880000">- Don't hard-code the role text color (bsc#1087399).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523966400">- Installer Updates does not overwrite Driver Updates
  (bsc#1088685).
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1524139200">- Log more details when unmounting the target partition fails
  (to debug bsc#1090018)
- 4.0.50</changelog>
  <changelog author="mvidner@suse.com" date="1524571200">- Fixed "vnc.sh: /root/.profile: No such file or directory"
  (bsc#1089623).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524657600">- Fix text direction for RTL languages in the installer settings
  screen (bsc#1089846).
- 4.0.52</changelog>
  <changelog author="jreidinger@suse.com" date="1524657601">- fix regression to show again iscsi configuration for disk-less
  setup  (bsc#1090753)
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Better handle the restore scripts when YaST is aborted or
  crashes (bsc#1089643)
- Delete the .repo files accidentally saved into inst-sys
  (fixes problems when restarting YaST after abort or crash)
- 4.0.54</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830401">- Do not warn too soon about missing disks during autoinstallation
  (bsc#1091033)
- 4.0.55</changelog>
  <changelog author="shundhammer@suse.com" date="1525262400">- Copy new /var/log/YaST2/storage-inst/ subdir to target at the
  end of the installation (part of fate #318196)
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Keep the selected product in the desktop selection dialog
  (bsc#1088660)
- 4.0.57</changelog>
  <changelog author="aschnell@suse.com" date="1525780800">- disable mdadm auto assembly for installation (bsc#1090690)
- 4.0.58</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525953600">- Log a warning when umounting a filesystem fails after
  installation/upgrade (related to bsc#1090018).
- 4.0.59</changelog>
  <changelog author="jlopez@suse.com" date="1526472000">- Do not try to set read-only property to default BTRFS subvolume
  if the filesystem already existed on disk (needed for
  bsc#1091047).
- 4.0.60</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526644800">- Fix installation mode detection (related to bsc#1089547).
- 4.0.61</changelog>
  <changelog author="jreidinger@suse.com" date="1527681600">- Copy active_devices.txt for s390 to prevent blocking of
  important devices when cio_ignore is active (bsc#1095033)
- 4.0.62</changelog>
  <changelog author="jreidinger@suse.com" date="1527768000">- Fix crash caused by previous fix when multipath is not available
  (bsc#1095323)
- 4.0.63</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Fixed possibly broken system after aborting upgrade running
  over SSH (caused by a partially finished rollback) (bsc#1089643)
- 4.0.64</changelog>
  <changelog author="knut.anderssen@suse.com" date="1528718400">- Firstboot.service: Shutdown on failure preventing the service to
  hang because of a systemd dependency when trying to call halt
  directly from the firsboot clients (bsc#1095253)
- 4.0.65</changelog>
  <changelog author="aschnell@suse.com" date="1530100800">- adapted testsuite to change in yast2-storage-ng (bsc#1073633)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.67</changelog>
</package>
<package pkgid="94a1ec267117fe4ba9e89124aa7f14842228198814f6ad9d9f329ea43fd04a79" name="yast2-installation" arch="src">
  <version epoch="0" ver="4.0.67" rel="lp150.2.9.1"/>
  <changelog author="mvidner@suse.com" date="1523880000">- Don't hard-code the role text color (bsc#1087399).
- 4.0.48</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523966400">- Installer Updates does not overwrite Driver Updates
  (bsc#1088685).
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1524139200">- Log more details when unmounting the target partition fails
  (to debug bsc#1090018)
- 4.0.50</changelog>
  <changelog author="mvidner@suse.com" date="1524571200">- Fixed "vnc.sh: /root/.profile: No such file or directory"
  (bsc#1089623).
- 4.0.51</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524657600">- Fix text direction for RTL languages in the installer settings
  screen (bsc#1089846).
- 4.0.52</changelog>
  <changelog author="jreidinger@suse.com" date="1524657601">- fix regression to show again iscsi configuration for disk-less
  setup  (bsc#1090753)
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Better handle the restore scripts when YaST is aborted or
  crashes (bsc#1089643)
- Delete the .repo files accidentally saved into inst-sys
  (fixes problems when restarting YaST after abort or crash)
- 4.0.54</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830401">- Do not warn too soon about missing disks during autoinstallation
  (bsc#1091033)
- 4.0.55</changelog>
  <changelog author="shundhammer@suse.com" date="1525262400">- Copy new /var/log/YaST2/storage-inst/ subdir to target at the
  end of the installation (part of fate #318196)
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Keep the selected product in the desktop selection dialog
  (bsc#1088660)
- 4.0.57</changelog>
  <changelog author="aschnell@suse.com" date="1525780800">- disable mdadm auto assembly for installation (bsc#1090690)
- 4.0.58</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525953600">- Log a warning when umounting a filesystem fails after
  installation/upgrade (related to bsc#1090018).
- 4.0.59</changelog>
  <changelog author="jlopez@suse.com" date="1526472000">- Do not try to set read-only property to default BTRFS subvolume
  if the filesystem already existed on disk (needed for
  bsc#1091047).
- 4.0.60</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526644800">- Fix installation mode detection (related to bsc#1089547).
- 4.0.61</changelog>
  <changelog author="jreidinger@suse.com" date="1527681600">- Copy active_devices.txt for s390 to prevent blocking of
  important devices when cio_ignore is active (bsc#1095033)
- 4.0.62</changelog>
  <changelog author="jreidinger@suse.com" date="1527768000">- Fix crash caused by previous fix when multipath is not available
  (bsc#1095323)
- 4.0.63</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Fixed possibly broken system after aborting upgrade running
  over SSH (caused by a partially finished rollback) (bsc#1089643)
- 4.0.64</changelog>
  <changelog author="knut.anderssen@suse.com" date="1528718400">- Firstboot.service: Shutdown on failure preventing the service to
  hang because of a systemd dependency when trying to call halt
  directly from the firsboot clients (bsc#1095253)
- 4.0.65</changelog>
  <changelog author="aschnell@suse.com" date="1530100800">- adapted testsuite to change in yast2-storage-ng (bsc#1073633)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.67</changelog>
</package>
<package pkgid="afd19c1f025d231b5e66ee280fd3130f463b6ef07e1c452195667a0a93392728" name="yast2-installation" arch="noarch">
  <version epoch="0" ver="4.0.70" rel="lp150.2.12.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1524657600">- Fix text direction for RTL languages in the installer settings
  screen (bsc#1089846).
- 4.0.52</changelog>
  <changelog author="jreidinger@suse.com" date="1524657601">- fix regression to show again iscsi configuration for disk-less
  setup  (bsc#1090753)
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Better handle the restore scripts when YaST is aborted or
  crashes (bsc#1089643)
- Delete the .repo files accidentally saved into inst-sys
  (fixes problems when restarting YaST after abort or crash)
- 4.0.54</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830401">- Do not warn too soon about missing disks during autoinstallation
  (bsc#1091033)
- 4.0.55</changelog>
  <changelog author="shundhammer@suse.com" date="1525262400">- Copy new /var/log/YaST2/storage-inst/ subdir to target at the
  end of the installation (part of fate #318196)
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Keep the selected product in the desktop selection dialog
  (bsc#1088660)
- 4.0.57</changelog>
  <changelog author="aschnell@suse.com" date="1525780800">- disable mdadm auto assembly for installation (bsc#1090690)
- 4.0.58</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525953600">- Log a warning when umounting a filesystem fails after
  installation/upgrade (related to bsc#1090018).
- 4.0.59</changelog>
  <changelog author="jlopez@suse.com" date="1526472000">- Do not try to set read-only property to default BTRFS subvolume
  if the filesystem already existed on disk (needed for
  bsc#1091047).
- 4.0.60</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526644800">- Fix installation mode detection (related to bsc#1089547).
- 4.0.61</changelog>
  <changelog author="jreidinger@suse.com" date="1527681600">- Copy active_devices.txt for s390 to prevent blocking of
  important devices when cio_ignore is active (bsc#1095033)
- 4.0.62</changelog>
  <changelog author="jreidinger@suse.com" date="1527768000">- Fix crash caused by previous fix when multipath is not available
  (bsc#1095323)
- 4.0.63</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Fixed possibly broken system after aborting upgrade running
  over SSH (caused by a partially finished rollback) (bsc#1089643)
- 4.0.64</changelog>
  <changelog author="knut.anderssen@suse.com" date="1528718400">- Firstboot.service: Shutdown on failure preventing the service to
  hang because of a systemd dependency when trying to call halt
  directly from the firsboot clients (bsc#1095253)
- 4.0.65</changelog>
  <changelog author="aschnell@suse.com" date="1530100800">- adapted testsuite to change in yast2-storage-ng (bsc#1073633)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.67</changelog>
  <changelog author="schubi@suse.de" date="1532606400">- Delete unneeded content of /mnt/run after installation/update.
  (bsc#1071745)
- 4.0.68</changelog>
  <changelog author="knut.anderssen@suse.com" date="1532606401">- Do not crash if /etc/os-release is a directory (bsc#1097661)
- 4.0.69</changelog>
  <changelog author="knut.anderssen@suse.com" date="1533211200">- Don not print errors if plymouth is not installed (bsc#1101879)</changelog>
  <changelog author="schubi@suse.de" date="1533211201">- Disable display of status messages on the console (bsc#1099505).
- 4.0.70</changelog>
</package>
<package pkgid="c314b19ff1010a272a30e086ca54b5263e5e3e7012bee3385fa513765d91a64a" name="yast2-installation" arch="src">
  <version epoch="0" ver="4.0.70" rel="lp150.2.12.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1524657600">- Fix text direction for RTL languages in the installer settings
  screen (bsc#1089846).
- 4.0.52</changelog>
  <changelog author="jreidinger@suse.com" date="1524657601">- fix regression to show again iscsi configuration for disk-less
  setup  (bsc#1090753)
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Better handle the restore scripts when YaST is aborted or
  crashes (bsc#1089643)
- Delete the .repo files accidentally saved into inst-sys
  (fixes problems when restarting YaST after abort or crash)
- 4.0.54</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524830401">- Do not warn too soon about missing disks during autoinstallation
  (bsc#1091033)
- 4.0.55</changelog>
  <changelog author="shundhammer@suse.com" date="1525262400">- Copy new /var/log/YaST2/storage-inst/ subdir to target at the
  end of the installation (part of fate #318196)
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Keep the selected product in the desktop selection dialog
  (bsc#1088660)
- 4.0.57</changelog>
  <changelog author="aschnell@suse.com" date="1525780800">- disable mdadm auto assembly for installation (bsc#1090690)
- 4.0.58</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525953600">- Log a warning when umounting a filesystem fails after
  installation/upgrade (related to bsc#1090018).
- 4.0.59</changelog>
  <changelog author="jlopez@suse.com" date="1526472000">- Do not try to set read-only property to default BTRFS subvolume
  if the filesystem already existed on disk (needed for
  bsc#1091047).
- 4.0.60</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526644800">- Fix installation mode detection (related to bsc#1089547).
- 4.0.61</changelog>
  <changelog author="jreidinger@suse.com" date="1527681600">- Copy active_devices.txt for s390 to prevent blocking of
  important devices when cio_ignore is active (bsc#1095033)
- 4.0.62</changelog>
  <changelog author="jreidinger@suse.com" date="1527768000">- Fix crash caused by previous fix when multipath is not available
  (bsc#1095323)
- 4.0.63</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Fixed possibly broken system after aborting upgrade running
  over SSH (caused by a partially finished rollback) (bsc#1089643)
- 4.0.64</changelog>
  <changelog author="knut.anderssen@suse.com" date="1528718400">- Firstboot.service: Shutdown on failure preventing the service to
  hang because of a systemd dependency when trying to call halt
  directly from the firsboot clients (bsc#1095253)
- 4.0.65</changelog>
  <changelog author="aschnell@suse.com" date="1530100800">- adapted testsuite to change in yast2-storage-ng (bsc#1073633)
- 4.0.66</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.67</changelog>
  <changelog author="schubi@suse.de" date="1532606400">- Delete unneeded content of /mnt/run after installation/update.
  (bsc#1071745)
- 4.0.68</changelog>
  <changelog author="knut.anderssen@suse.com" date="1532606401">- Do not crash if /etc/os-release is a directory (bsc#1097661)
- 4.0.69</changelog>
  <changelog author="knut.anderssen@suse.com" date="1533211200">- Don not print errors if plymouth is not installed (bsc#1101879)</changelog>
  <changelog author="schubi@suse.de" date="1533211201">- Disable display of status messages on the console (bsc#1099505).
- 4.0.70</changelog>
</package>
<package pkgid="dd9a956ec63524e78045c4a59d6eec95ee5db7dc3fcab815083fcd5e86f1d796" name="yast2-iscsi-lio-server" arch="noarch">
  <version epoch="0" ver="4.0.11" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1425470400">- use 'ip addr show', don't show deprecated IPs
- 3.1.14</changelog>
  <changelog author="lszhu@suse.de" date="1432728000">- remove ":" in target name when identifier is empty (bnc#932170)
- 3.1.15</changelog>
  <changelog author="gs@suse.de" date="1436961600">- add info about the tpg status to targets overview
  (partial bug-fix for bnc#920380)
- 3.1.16</changelog>
  <changelog author="gs@suse.de" date="1462363200">- replace iSCSI "client" by "initiator" in labels, popups and
  help text (fate#319293)
- add hint to use different passwords for incoming and outgoing
  authentication (bsc#977173)
- 3.1.17</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.18</changelog>
  <changelog author="gs@suse.de" date="1467806400">- allow to remove global authentication values
  (bnc#919474, bnc#977342)
- 3.1.19</changelog>
  <changelog author="lszhu@suse.com" date="1487764800">- fate#318832, redesign authentication UI
- changed online help
- a bug fix for discovery session without authentication.
-3.2.0</changelog>
  <changelog author="lszhu@suse.com" date="1494936000">- fix bsc#1037819, add translation markers in adding LUN page
  Removed trailing ":" from labels.
- 3.2.1</changelog>
  <changelog author="lszhu@suse.com" date="1513166400">- fate#319238 [yas2-iscsi-lio-server] refactor code to use
  targetcli-fb instead of lio-utils.
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1516968000">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="lszhu@suse.com" date="1517313600">- fate#323460, fate#319238
- Add firewalld read / write
- Rename required backend package to python3-targetcli-fb
- Add message when failed to install python3-targetcli-fb
- Remove message which shown when user set userid = mutual_userid
  Not leak this message since kernel keep slience.
-4.0.2</changelog>
  <changelog author="lszhu@suse.com" date="1517486400">- fate#319238
  Replace targetcli-fb python2 requirements with python3 packages.
- 4.0.3</changelog>
  <changelog author="lszhu@suse.com" date="1518436800">- fate#319238
  Add code to handle targetcli.service enable / disable.</changelog>
  <changelog author="lszhu@suse.com" date="1521720000">- bsc#1085421
  Handle the case that the storage of a LUN get disconnected
  accidentally.</changelog>
  <changelog author="lszhu@suse.com" date="1521806400">- bsc#1086029
  Handle the case that users want to delete a LUNs which
  are not created yet(LUNs have data structure in memory but
  not execute command to create them).</changelog>
  <changelog author="cwh@suse.com" date="1522065600">- Added missing textdomain that breaks generating POT file
- 4.0.7</changelog>
  <changelog author="lszhu@suse.com" date="1523361600">- bsc#1088677
  A better UI layout for IP selection combox and port input field
  in AddTarget Page.
- 4.0.8</changelog>
  <changelog author="lszhu@suse.com" date="1524916800">- bsc#1091194
  Change Adding LUN dialog UI, place "Browse" button under LUN
  path input field, avoid unaligned UI.
- 4.0.9</changelog>
  <changelog author="lszhu@suse.com" date="1525262400">- bsc#1091626
  Change regular expression for matching a LUN path, in order
  to pick file names include special characters.
- 4.0.10</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- Changed UI layout.
- 4.0.11</changelog>
</package>
<package pkgid="30bf76466fe3b6efea240d8a2f4083a738c439ecf0fee723ce6abfe5ffc20d2c" name="yast2-iscsi-lio-server" arch="src">
  <version epoch="0" ver="4.0.11" rel="lp150.2.3.1"/>
  <changelog author="gs@suse.de" date="1425470400">- use 'ip addr show', don't show deprecated IPs
- 3.1.14</changelog>
  <changelog author="lszhu@suse.de" date="1432728000">- remove ":" in target name when identifier is empty (bnc#932170)
- 3.1.15</changelog>
  <changelog author="gs@suse.de" date="1436961600">- add info about the tpg status to targets overview
  (partial bug-fix for bnc#920380)
- 3.1.16</changelog>
  <changelog author="gs@suse.de" date="1462363200">- replace iSCSI "client" by "initiator" in labels, popups and
  help text (fate#319293)
- add hint to use different passwords for incoming and outgoing
  authentication (bsc#977173)
- 3.1.17</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.18</changelog>
  <changelog author="gs@suse.de" date="1467806400">- allow to remove global authentication values
  (bnc#919474, bnc#977342)
- 3.1.19</changelog>
  <changelog author="lszhu@suse.com" date="1487764800">- fate#318832, redesign authentication UI
- changed online help
- a bug fix for discovery session without authentication.
-3.2.0</changelog>
  <changelog author="lszhu@suse.com" date="1494936000">- fix bsc#1037819, add translation markers in adding LUN page
  Removed trailing ":" from labels.
- 3.2.1</changelog>
  <changelog author="lszhu@suse.com" date="1513166400">- fate#319238 [yas2-iscsi-lio-server] refactor code to use
  targetcli-fb instead of lio-utils.
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1516968000">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="lszhu@suse.com" date="1517313600">- fate#323460, fate#319238
- Add firewalld read / write
- Rename required backend package to python3-targetcli-fb
- Add message when failed to install python3-targetcli-fb
- Remove message which shown when user set userid = mutual_userid
  Not leak this message since kernel keep slience.
-4.0.2</changelog>
  <changelog author="lszhu@suse.com" date="1517486400">- fate#319238
  Replace targetcli-fb python2 requirements with python3 packages.
- 4.0.3</changelog>
  <changelog author="lszhu@suse.com" date="1518436800">- fate#319238
  Add code to handle targetcli.service enable / disable.</changelog>
  <changelog author="lszhu@suse.com" date="1521720000">- bsc#1085421
  Handle the case that the storage of a LUN get disconnected
  accidentally.</changelog>
  <changelog author="lszhu@suse.com" date="1521806400">- bsc#1086029
  Handle the case that users want to delete a LUNs which
  are not created yet(LUNs have data structure in memory but
  not execute command to create them).</changelog>
  <changelog author="cwh@suse.com" date="1522065600">- Added missing textdomain that breaks generating POT file
- 4.0.7</changelog>
  <changelog author="lszhu@suse.com" date="1523361600">- bsc#1088677
  A better UI layout for IP selection combox and port input field
  in AddTarget Page.
- 4.0.8</changelog>
  <changelog author="lszhu@suse.com" date="1524916800">- bsc#1091194
  Change Adding LUN dialog UI, place "Browse" button under LUN
  path input field, avoid unaligned UI.
- 4.0.9</changelog>
  <changelog author="lszhu@suse.com" date="1525262400">- bsc#1091626
  Change regular expression for matching a LUN path, in order
  to pick file names include special characters.
- 4.0.10</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- Changed UI layout.
- 4.0.11</changelog>
</package>
<package pkgid="c29c185ce68f1a06bb22a0af7ef0110d0fb41c8f3d1dde4e7943691c31e30616" name="yast2-kdump" arch="src">
  <version epoch="0" ver="4.0.4" rel="lp150.2.3.1"/>
  <changelog author="jreidinger@suse.com" date="1467028800">- Skip writing bootloader configuration in installation, as it
  will be written later by yast2-bootloader. This will speed up
  installation. (bnc#984649)
- 3.1.38</changelog>
  <changelog author="locilka@suse.com" date="1469016000">- Proposing kdump to be disabled by default on ARM64 (bsc#989321)
- 3.1.39</changelog>
  <changelog author="schubi@suse.de" date="1471003200">- Reading kernel_param: Filtering out empty entries. (bnc#991140)
- 3.1.40</changelog>
  <changelog author="schubi@suse.de" date="1472731200">- AutoYaST: Write &lt;general&gt; and &lt;crash_kernel&gt; sections correctly.
  Imported settings will not be overwritten by proposal.
  (bnc#995750)
- 3.1.41</changelog>
  <changelog author="schubi@suse.de" date="1474545600">- AutoYaST: Taking proposed values if &lt;crash_kernel&gt; has not been
  defined in AutoYaST configuration file. (bnc#997448)
- 3.1.42</changelog>
  <changelog author="jreidinger@suse.com" date="1477569600">- fix typos in kdump help (bsc#703145)
- 3.2.0</changelog>
  <changelog author="mvidner@suse.com" date="1485345600">- Implement simple_mode -&gt; label_proposal (FATE#322328)
- 3.2.1</changelog>
  <changelog author="mvidner@suse.com" date="1487073600">- Explicitly create the kdump initrd (bsc#1022496).
- 3.2.2</changelog>
  <changelog author="jreidinger@suse.com" date="1490788800">- fix dumping kernel with Xen hypervisor (bsc#1014136)
- 3.2.3</changelog>
  <changelog author="gsouza@suse.com" date="1496404800">- Added allocate memory high in commandline (FATE#320016)
- 3.2.4</changelog>
  <changelog author="gsouza@suse.com" date="1497960000">- The alloc_mem parameter is verified to be in accordance with
  documentation (bsc#1045098).
- Pop-up is suppressed from command line when the user enables or
  disables kdump (bsc#1045103).
- 3.2.5</changelog>
  <changelog author="gsouza@suse.com" date="1498046400">- Fixed regular expression that verifies alloc_mem parameter
  (bsc#1045098).
- 3.2.6</changelog>
  <changelog author="schubi@suse.de" date="1498478400">- Crash in AutoYaST clone: Fix for "dup" while getting
  crash_xen_kernel_values and crash_kernel_values values.
  (bnc#1045965)
- 3.3.0</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Switching X-SuSE-YaST-AutoInst flag to "all" because it has an
  own UI in the installed system and it can write settings in an
  already installed system. (bnc#1047809)
- 3.3.1</changelog>
  <changelog author="ancor@suse.com" date="1502366400">- Removed leftover dependency on yast2-storage
  (part of fate#318196).
- 3.3.2</changelog>
  <changelog author="jreidinger@suse.com" date="1513339200">- Show kdump as disabled in an installation proposal if the product
  disables it (bsc#1071242)
- 4.0.0</changelog>
  <changelog author="aschnell@suse.com" date="1517832000">- added supplements for yast2 and kdump (bsc#1070423)
- 4.0.1</changelog>
  <changelog author="snwint@suse.de" date="1524139200">- log to /var/log/YaST2, not /var/lib/YaST2 (bsc#1090202)
- 4.0.2</changelog>
  <changelog author="jreidinger@suse.com" date="1524225600">- do not write crashkernel to XEN dom0 (bsc#1085626)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.4</changelog>
</package>
<package pkgid="47ca9696142e47169baa1a635055897a1b630bfa0c4f97e0fa3a64c8d1c9a87b" name="yast2-kdump" arch="x86_64">
  <version epoch="0" ver="4.0.4" rel="lp150.2.3.1"/>
  <changelog author="jreidinger@suse.com" date="1467028800">- Skip writing bootloader configuration in installation, as it
  will be written later by yast2-bootloader. This will speed up
  installation. (bnc#984649)
- 3.1.38</changelog>
  <changelog author="locilka@suse.com" date="1469016000">- Proposing kdump to be disabled by default on ARM64 (bsc#989321)
- 3.1.39</changelog>
  <changelog author="schubi@suse.de" date="1471003200">- Reading kernel_param: Filtering out empty entries. (bnc#991140)
- 3.1.40</changelog>
  <changelog author="schubi@suse.de" date="1472731200">- AutoYaST: Write &lt;general&gt; and &lt;crash_kernel&gt; sections correctly.
  Imported settings will not be overwritten by proposal.
  (bnc#995750)
- 3.1.41</changelog>
  <changelog author="schubi@suse.de" date="1474545600">- AutoYaST: Taking proposed values if &lt;crash_kernel&gt; has not been
  defined in AutoYaST configuration file. (bnc#997448)
- 3.1.42</changelog>
  <changelog author="jreidinger@suse.com" date="1477569600">- fix typos in kdump help (bsc#703145)
- 3.2.0</changelog>
  <changelog author="mvidner@suse.com" date="1485345600">- Implement simple_mode -&gt; label_proposal (FATE#322328)
- 3.2.1</changelog>
  <changelog author="mvidner@suse.com" date="1487073600">- Explicitly create the kdump initrd (bsc#1022496).
- 3.2.2</changelog>
  <changelog author="jreidinger@suse.com" date="1490788800">- fix dumping kernel with Xen hypervisor (bsc#1014136)
- 3.2.3</changelog>
  <changelog author="gsouza@suse.com" date="1496404800">- Added allocate memory high in commandline (FATE#320016)
- 3.2.4</changelog>
  <changelog author="gsouza@suse.com" date="1497960000">- The alloc_mem parameter is verified to be in accordance with
  documentation (bsc#1045098).
- Pop-up is suppressed from command line when the user enables or
  disables kdump (bsc#1045103).
- 3.2.5</changelog>
  <changelog author="gsouza@suse.com" date="1498046400">- Fixed regular expression that verifies alloc_mem parameter
  (bsc#1045098).
- 3.2.6</changelog>
  <changelog author="schubi@suse.de" date="1498478400">- Crash in AutoYaST clone: Fix for "dup" while getting
  crash_xen_kernel_values and crash_kernel_values values.
  (bnc#1045965)
- 3.3.0</changelog>
  <changelog author="schubi@suse.de" date="1499947200">- Switching X-SuSE-YaST-AutoInst flag to "all" because it has an
  own UI in the installed system and it can write settings in an
  already installed system. (bnc#1047809)
- 3.3.1</changelog>
  <changelog author="ancor@suse.com" date="1502366400">- Removed leftover dependency on yast2-storage
  (part of fate#318196).
- 3.3.2</changelog>
  <changelog author="jreidinger@suse.com" date="1513339200">- Show kdump as disabled in an installation proposal if the product
  disables it (bsc#1071242)
- 4.0.0</changelog>
  <changelog author="aschnell@suse.com" date="1517832000">- added supplements for yast2 and kdump (bsc#1070423)
- 4.0.1</changelog>
  <changelog author="snwint@suse.de" date="1524139200">- log to /var/log/YaST2, not /var/lib/YaST2 (bsc#1090202)
- 4.0.2</changelog>
  <changelog author="jreidinger@suse.com" date="1524225600">- do not write crashkernel to XEN dom0 (bsc#1085626)
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.4</changelog>
</package>
<package pkgid="c3d5c0be1ae7305555bd9898c20a658a52ff32b07e3500ae1a7479cbc907aff2" name="yast2-mail" arch="noarch">
  <version epoch="0" ver="4.0.4" rel="lp150.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1366545600">- bnc#800788 - ag_postfix_mastercf process hangs the system,
  after which it is killed by kernel, when saving
  mail server settings with Yast "Mail Server" module
- Mark permissions files as %config
- The ldap tables was not proper. All functions for forwarding
  and delivery must be placed in alias_maps and not in
  virtual_alias_map. Forwarding or delivering actions in virtual_alias_map
  may cause mail loops.</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="varkoly@suse.com" date="1391169600">- Use dovecot instead of cyrus for imap.</changelog>
  <changelog author="varkoly@suse.com" date="1392292800">- Remove advanced mode. The new LDA dovecot provides a more
  complex ldap and sql backend than postfix. Therefore we
  do not provide the yast2-mail advanced mode any more.</changelog>
  <changelog author="varkoly@suse.com" date="1409486400">- bnc#889189 - [yast2-users] crashes on "Invalid version format
  (non-numeric data) at .../perl5/5.20.0/Symbol.pm"
- 3.1.3</changelog>
  <changelog author="varkoly@suse.com" date="1410868800">- bnc#878514 - SLED12_LOC : ALL_LANGS:Untranslated text in Mail Server dialog in YaST
- 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.5</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1447761600">- Fix validation of AutoYaST profiles (bsc#954412)
- 3.1.6</changelog>
  <changelog author="knut.anderssen@suse.com" date="1458129600">- Moved cfg_mail.scr to yast2 due to circular dependencies with
  yast2-security and yast2-users. (FATE#319711)
- 3.1.7</changelog>
  <changelog author="varkoly@suse.com" date="1464091200">- bnc#981103 - yast2 mail uses always brackets for relayhost
- bnc#981101 - yast2 mail adds POSTFIX_NODAEMON to /etc/sysconfig/postfix
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.9</changelog>
  <changelog author="jreidinger@suse.com" date="1474372800">- Reduce build dependencies to speed up build (bsc#999203)
- 3.1.10</changelog>
  <changelog author="varkoly@suse.com" date="1485950400">- bnc#1022360 Crash during E-Mail-Server setup, when outgoing mailserver is empty
- bnc#994317 yast2 mailserver does not preserve startup setting
- 3.1.11</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468).
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517572800">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520856000">- SuSEFirewall2 defined the ports to be opened in a single service
  which is not the case with firewalld. Adapted the module to open
  'smtp', 'smtps' and 'smtp-submission' (bsc#1084869)
- 4.0.2</changelog>
  <changelog author="varkoly@suse.com" date="1520942400">- bsc#1071932 YaST2 Mail Server Configuration - throws Error for
  starting service amavis
  Install spamassassasin and call sa-update before starting amavisd
  Enable clamd and freshclam.
  Do not install clamav-db.
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.4</changelog>
</package>
<package pkgid="73943f02777b109d9c02055a10a1878391e7de069665588f4e567e01f6f503c9" name="yast2-mail" arch="src">
  <version epoch="0" ver="4.0.4" rel="lp150.2.3.1"/>
  <changelog author="varkoly@suse.com" date="1366545600">- bnc#800788 - ag_postfix_mastercf process hangs the system,
  after which it is killed by kernel, when saving
  mail server settings with Yast "Mail Server" module
- Mark permissions files as %config
- The ldap tables was not proper. All functions for forwarding
  and delivery must be placed in alias_maps and not in
  virtual_alias_map. Forwarding or delivering actions in virtual_alias_map
  may cause mail loops.</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="varkoly@suse.com" date="1391169600">- Use dovecot instead of cyrus for imap.</changelog>
  <changelog author="varkoly@suse.com" date="1392292800">- Remove advanced mode. The new LDA dovecot provides a more
  complex ldap and sql backend than postfix. Therefore we
  do not provide the yast2-mail advanced mode any more.</changelog>
  <changelog author="varkoly@suse.com" date="1409486400">- bnc#889189 - [yast2-users] crashes on "Invalid version format
  (non-numeric data) at .../perl5/5.20.0/Symbol.pm"
- 3.1.3</changelog>
  <changelog author="varkoly@suse.com" date="1410868800">- bnc#878514 - SLED12_LOC : ALL_LANGS:Untranslated text in Mail Server dialog in YaST
- 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.5</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1447761600">- Fix validation of AutoYaST profiles (bsc#954412)
- 3.1.6</changelog>
  <changelog author="knut.anderssen@suse.com" date="1458129600">- Moved cfg_mail.scr to yast2 due to circular dependencies with
  yast2-security and yast2-users. (FATE#319711)
- 3.1.7</changelog>
  <changelog author="varkoly@suse.com" date="1464091200">- bnc#981103 - yast2 mail uses always brackets for relayhost
- bnc#981101 - yast2 mail adds POSTFIX_NODAEMON to /etc/sysconfig/postfix
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.9</changelog>
  <changelog author="jreidinger@suse.com" date="1474372800">- Reduce build dependencies to speed up build (bsc#999203)
- 3.1.10</changelog>
  <changelog author="varkoly@suse.com" date="1485950400">- bnc#1022360 Crash during E-Mail-Server setup, when outgoing mailserver is empty
- bnc#994317 yast2 mailserver does not preserve startup setting
- 3.1.11</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468).
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517572800">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520856000">- SuSEFirewall2 defined the ports to be opened in a single service
  which is not the case with firewalld. Adapted the module to open
  'smtp', 'smtps' and 'smtp-submission' (bsc#1084869)
- 4.0.2</changelog>
  <changelog author="varkoly@suse.com" date="1520942400">- bsc#1071932 YaST2 Mail Server Configuration - throws Error for
  starting service amavis
  Install spamassassasin and call sa-update before starting amavisd
  Enable clamd and freshclam.
  Do not install clamav-db.
- 4.0.3</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.4</changelog>
</package>
<package pkgid="a21dfa020a4087e36ffbcbf64d941466bfd4f3f3aaa12eb7beb30d11a085e39d" name="yast2-multipath" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="mzugec@suse.cz" date="1282132800">- fixed typo (bnc#631743)
- 2.19.0</changelog>
  <changelog author="snwint@suse.de" date="1309780800">- fixed typos (bnc #703181)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="dmajda@suse.cz" date="1376049600">- fixed empty include files produced because of a YCP Killer bug
  (gh#yast/ycp-killer#619)
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="dmzhang@suse.com" date="1394539200">- remove yast2-python-binding dependence</changelog>
  <changelog author="nwang@suse.com" date="1399636800">- BNC#875677. Modify desktop file. Change category from Misc to HA.</changelog>
  <changelog author="nwang@suse.com" date="1401192000">- Using same spec file of ibs and obs.
- Version 3.1.2</changelog>
  <changelog author="nwang@suse.com" date="1405512000">- BNC#887467. Fix fail to delete multipath without an "alias".
- Version 3.1.3</changelog>
  <changelog author="nwang@suse.com" date="1414670400">- BNC#900822. Remove start/stop "boot.multipath" due to
  it is obsoleted.Fix in SLE12 Maintenance Update.
- Version 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="jreidinger@suse.com" date="1422273600">- fixed \r character lost during conversion to Ruby</changelog>
  <changelog author="lszhu@suse.com" date="1430740800">- BNC#925864, fix a bug on that path selector not working, add
  service-time 0 and queue-length 0.
  Version 3.1.6</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465214400">- Stop generating autodocs (fate#320356)
- 3.1.7</changelog>
  <changelog author="mfilka@suse.com" date="1490356800">- bnc#1026027
  - removed calls to /sbin/insserv
- 3.2.1</changelog>
  <changelog author="ancor@suse.com" date="1502884800">- Use yast2-storage-ng instead of yast2-storage (part of
  fate#318196)
- 3.3.0</changelog>
  <changelog author="nwang@suse.com" date="1512129600">- fate#323526, support python3 and change indentation to 8 spaces.
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="2c16728e4dea77ac7cb3c1e2bb178f610db96e217bc7703165b159df9c182e41" name="yast2-multipath" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="mzugec@suse.cz" date="1282132800">- fixed typo (bnc#631743)
- 2.19.0</changelog>
  <changelog author="snwint@suse.de" date="1309780800">- fixed typos (bnc #703181)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="dmajda@suse.cz" date="1376049600">- fixed empty include files produced because of a YCP Killer bug
  (gh#yast/ycp-killer#619)
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="dmzhang@suse.com" date="1394539200">- remove yast2-python-binding dependence</changelog>
  <changelog author="nwang@suse.com" date="1399636800">- BNC#875677. Modify desktop file. Change category from Misc to HA.</changelog>
  <changelog author="nwang@suse.com" date="1401192000">- Using same spec file of ibs and obs.
- Version 3.1.2</changelog>
  <changelog author="nwang@suse.com" date="1405512000">- BNC#887467. Fix fail to delete multipath without an "alias".
- Version 3.1.3</changelog>
  <changelog author="nwang@suse.com" date="1414670400">- BNC#900822. Remove start/stop "boot.multipath" due to
  it is obsoleted.Fix in SLE12 Maintenance Update.
- Version 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="jreidinger@suse.com" date="1422273600">- fixed \r character lost during conversion to Ruby</changelog>
  <changelog author="lszhu@suse.com" date="1430740800">- BNC#925864, fix a bug on that path selector not working, add
  service-time 0 and queue-length 0.
  Version 3.1.6</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465214400">- Stop generating autodocs (fate#320356)
- 3.1.7</changelog>
  <changelog author="mfilka@suse.com" date="1490356800">- bnc#1026027
  - removed calls to /sbin/insserv
- 3.2.1</changelog>
  <changelog author="ancor@suse.com" date="1502884800">- Use yast2-storage-ng instead of yast2-storage (part of
  fate#318196)
- 3.3.0</changelog>
  <changelog author="nwang@suse.com" date="1512129600">- fate#323526, support python3 and change indentation to 8 spaces.
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="2a84ef312f5aa7490581fa85fb446fcbbe517cd797db7765a1399832bb562119" name="yast2-nfs-client" arch="noarch">
  <version epoch="0" ver="4.0.6" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1400673600">- Fix building with nfs-utils-1.3.0 (bnc#878875).
- 3.1.5</changelog>
  <changelog author="aschnell@suse.de" date="1405512000">- allow mount option bsize (bnc#887369)
- 3.1.6</changelog>
  <changelog author="cwh@suse.com" date="1406808000">- Added 'fsc' to the list of valid negatable options (bnc#873142)
- 3.1.7</changelog>
  <changelog author="ancor@suse.com" date="1407326400">- Don't display 'NFS Settings' tab when called from partitioner
  (bnc#890410)
- 3.1.8</changelog>
  <changelog author="mvidner@suse.com" date="1409832000">- Use a more flexible rubygem requirement syntax (bnc#895069)
- 3.1.9</changelog>
  <changelog author="locilka@suse.com" date="1415361600">- Removed obsolete service (nfsboot) handling (bnc#867766)
- 3.1.10</changelog>
  <changelog author="lslezak@suse.cz" date="1416312000">- fixed string substitution in a translated message</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="mvidner@suse.com" date="1420718400">- Used Rubocop to enforce a consistent coding style.
- 3.1.13</changelog>
  <changelog author="kmroz@suse.com" date="1424779200">- Fix crash when accessing certain variables outside their block
  local scope. (bnc#919061)</changelog>
  <changelog author="ancor@suse.com" date="1428321600">- Consider path dependencies between mount points, allowing eg.
  a local mount on top of an NFS mount point (bsc#922307).
- 3.1.15</changelog>
  <changelog author="mvidner@suse.com" date="1437393600">- Do not block an update of nfs-utils (boo#911986)
- 3.1.16</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465214400">- Stop generating autodocs (fate#320356)
- Add a conditional BuildRequires to allow using Jenkins for
  continuous integration (lslezak@suse.cz)
- 3.1.17</changelog>
  <changelog author="knut.anderssen@suse.com" date="1509710400">- Fix teststuite once SuSEFirewall2 is being replaced by firewalld
  (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517486400">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1519387200">- During installation do not check whether the portmapper package
  is installed, fixed error handling when scanning the NFS exports
  fails (bsc#1079624)
- 4.0.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1519732800">- Fix a missing definition of firewalld method (bsc#1082919)
- 4.0.3</changelog>
  <changelog author="ancor@suse.com" date="1522756800">- Command line interface: display correct content in the 'Options'
  column (bsc#1087826) when listing.
- Command line interface: updated help about the 'type' option.
- 4.0.4</changelog>
  <changelog author="ancor@suse.com" date="1523016000">- Use only nfsvers (or its alias) to specify the version of the
  NFS protocol, instead of the legacy nfs4 (vfstype) and
  minorversion (bsc#1088426).
- Detect legacy entries and warn the user.
- 4.0.5</changelog>
  <changelog author="ancor@suse.com" date="1526644800">- Fixed a bug preventing some strings (introduced while fixing
  bsc#1088426) to be translated.
- Do not crash when 'edit' button is pressed in the partitioner
  if there are no NFS entries (affects installation, part of
  fate#318196).
- When executed standalone (not embedded in the Partitioner),
  use storage-ng to read and write /etc/fstab, instead of the old
  buggy parser (bsc#429326, bsc#1064437).
- 4.0.6</changelog>
</package>
<package pkgid="f6bb34f084aef3e294262a0df9fe61356dc612297c55e27a9e64a066d520b89a" name="yast2-nfs-client" arch="src">
  <version epoch="0" ver="4.0.6" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.com" date="1400673600">- Fix building with nfs-utils-1.3.0 (bnc#878875).
- 3.1.5</changelog>
  <changelog author="aschnell@suse.de" date="1405512000">- allow mount option bsize (bnc#887369)
- 3.1.6</changelog>
  <changelog author="cwh@suse.com" date="1406808000">- Added 'fsc' to the list of valid negatable options (bnc#873142)
- 3.1.7</changelog>
  <changelog author="ancor@suse.com" date="1407326400">- Don't display 'NFS Settings' tab when called from partitioner
  (bnc#890410)
- 3.1.8</changelog>
  <changelog author="mvidner@suse.com" date="1409832000">- Use a more flexible rubygem requirement syntax (bnc#895069)
- 3.1.9</changelog>
  <changelog author="locilka@suse.com" date="1415361600">- Removed obsolete service (nfsboot) handling (bnc#867766)
- 3.1.10</changelog>
  <changelog author="lslezak@suse.cz" date="1416312000">- fixed string substitution in a translated message</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="mvidner@suse.com" date="1420718400">- Used Rubocop to enforce a consistent coding style.
- 3.1.13</changelog>
  <changelog author="kmroz@suse.com" date="1424779200">- Fix crash when accessing certain variables outside their block
  local scope. (bnc#919061)</changelog>
  <changelog author="ancor@suse.com" date="1428321600">- Consider path dependencies between mount points, allowing eg.
  a local mount on top of an NFS mount point (bsc#922307).
- 3.1.15</changelog>
  <changelog author="mvidner@suse.com" date="1437393600">- Do not block an update of nfs-utils (boo#911986)
- 3.1.16</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465214400">- Stop generating autodocs (fate#320356)
- Add a conditional BuildRequires to allow using Jenkins for
  continuous integration (lslezak@suse.cz)
- 3.1.17</changelog>
  <changelog author="knut.anderssen@suse.com" date="1509710400">- Fix teststuite once SuSEFirewall2 is being replaced by firewalld
  (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517486400">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1519387200">- During installation do not check whether the portmapper package
  is installed, fixed error handling when scanning the NFS exports
  fails (bsc#1079624)
- 4.0.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1519732800">- Fix a missing definition of firewalld method (bsc#1082919)
- 4.0.3</changelog>
  <changelog author="ancor@suse.com" date="1522756800">- Command line interface: display correct content in the 'Options'
  column (bsc#1087826) when listing.
- Command line interface: updated help about the 'type' option.
- 4.0.4</changelog>
  <changelog author="ancor@suse.com" date="1523016000">- Use only nfsvers (or its alias) to specify the version of the
  NFS protocol, instead of the legacy nfs4 (vfstype) and
  minorversion (bsc#1088426).
- Detect legacy entries and warn the user.
- 4.0.5</changelog>
  <changelog author="ancor@suse.com" date="1526644800">- Fixed a bug preventing some strings (introduced while fixing
  bsc#1088426) to be translated.
- Do not crash when 'edit' button is pressed in the partitioner
  if there are no NFS entries (affects installation, part of
  fate#318196).
- When executed standalone (not embedded in the Partitioner),
  use storage-ng to read and write /etc/fstab, instead of the old
  buggy parser (bsc#429326, bsc#1064437).
- 4.0.6</changelog>
</package>
<package pkgid="b4dfc5a30eb99ed01c4de60395a7251b65d9b4aa942d3b52749871a3f2b442db" name="yast2-nfs-common" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="mfilka@suse.com" date="1331899200">- Fixed testsuites
- 2.21.3</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merged proofread texts</changelog>
  <changelog author="mfilka@suse.com" date="1345118400">- allow colon in export options, see man 5 exports (sec= option)
- bnc#775814
- 2.21.4</changelog>
  <changelog author="locilka@suse.com" date="1357214400">- Testsuites adapted to switching Service module to systemd
  (yast2-2.23.15)
- 2.21.5</changelog>
  <changelog author="locilka@suse.com" date="1357560000">- Testsuite adapted to merging SuSEfirewall2 services into one
  (yast2-2.23.17)
- 2.21.6</changelog>
  <changelog author="locilka@suse.com" date="1368705600">- Adapted testsuites testing if service is enabled, implementation
  has been changed in yast2 package (bnc#807507).
- 2.21.7</changelog>
  <changelog author="lslezak@suse.cz" date="1372248000">- use ini-agent instead of Limal for reading /etc/idmapd.conf file,
  Limal has been dropped in Factory (FATE#313242).
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="mfilka@suse.com" date="1390824000">- fate#315589
  - deprecated bind mount configuration with NFSv4 export
- 3.1.2</changelog>
  <changelog author="vmoravec@suse.com" date="1394107200">- Fix testsuite due to changes in yast2
- 3.1.3</changelog>
  <changelog author="vmoravec@suse.com" date="1394625600">- Fix testuite due to changes in yast2
- 3.1.4</changelog>
  <changelog author="vmoravec@suse.com" date="1396008000">- Fix testsuite again
- 3.1.5</changelog>
  <changelog author="locilka@suse.com" date="1399291200">- Obsolete Service.Status calls replaced with Service.active?
- Finally dropped obsolete 'portmap' support (using only rpcbind)
- Adapted testsuite
- 3.1.6</changelog>
  <changelog author="mvidner@suse.com" date="1400673600">- Avoid "Unable to start idmapd" (bnc#878878).
- Removed dead code dealing with the user space nfs-server.rpm.
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.9</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517572800">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="c2f281f648c6b4529a63965a94c9eb0d909bc37f67b23f4461166b153b8e680e" name="yast2-nfs-server" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="mfilka@suse.com" date="1331899200">- Fixed testsuites
- 2.21.3</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merged proofread texts</changelog>
  <changelog author="mfilka@suse.com" date="1345118400">- allow colon in export options, see man 5 exports (sec= option)
- bnc#775814
- 2.21.4</changelog>
  <changelog author="locilka@suse.com" date="1357214400">- Testsuites adapted to switching Service module to systemd
  (yast2-2.23.15)
- 2.21.5</changelog>
  <changelog author="locilka@suse.com" date="1357560000">- Testsuite adapted to merging SuSEfirewall2 services into one
  (yast2-2.23.17)
- 2.21.6</changelog>
  <changelog author="locilka@suse.com" date="1368705600">- Adapted testsuites testing if service is enabled, implementation
  has been changed in yast2 package (bnc#807507).
- 2.21.7</changelog>
  <changelog author="lslezak@suse.cz" date="1372248000">- use ini-agent instead of Limal for reading /etc/idmapd.conf file,
  Limal has been dropped in Factory (FATE#313242).
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="mfilka@suse.com" date="1390824000">- fate#315589
  - deprecated bind mount configuration with NFSv4 export
- 3.1.2</changelog>
  <changelog author="vmoravec@suse.com" date="1394107200">- Fix testsuite due to changes in yast2
- 3.1.3</changelog>
  <changelog author="vmoravec@suse.com" date="1394625600">- Fix testuite due to changes in yast2
- 3.1.4</changelog>
  <changelog author="vmoravec@suse.com" date="1396008000">- Fix testsuite again
- 3.1.5</changelog>
  <changelog author="locilka@suse.com" date="1399291200">- Obsolete Service.Status calls replaced with Service.active?
- Finally dropped obsolete 'portmap' support (using only rpcbind)
- Adapted testsuite
- 3.1.6</changelog>
  <changelog author="mvidner@suse.com" date="1400673600">- Avoid "Unable to start idmapd" (bnc#878878).
- Removed dead code dealing with the user space nfs-server.rpm.
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.9</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517572800">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="b00899e6ceb36dc733c804a493c825065f9d3491ddb418bbc78263db82d58549" name="yast2-nfs-server" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="mfilka@suse.com" date="1331899200">- Fixed testsuites
- 2.21.3</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merged proofread texts</changelog>
  <changelog author="mfilka@suse.com" date="1345118400">- allow colon in export options, see man 5 exports (sec= option)
- bnc#775814
- 2.21.4</changelog>
  <changelog author="locilka@suse.com" date="1357214400">- Testsuites adapted to switching Service module to systemd
  (yast2-2.23.15)
- 2.21.5</changelog>
  <changelog author="locilka@suse.com" date="1357560000">- Testsuite adapted to merging SuSEfirewall2 services into one
  (yast2-2.23.17)
- 2.21.6</changelog>
  <changelog author="locilka@suse.com" date="1368705600">- Adapted testsuites testing if service is enabled, implementation
  has been changed in yast2 package (bnc#807507).
- 2.21.7</changelog>
  <changelog author="lslezak@suse.cz" date="1372248000">- use ini-agent instead of Limal for reading /etc/idmapd.conf file,
  Limal has been dropped in Factory (FATE#313242).
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="mfilka@suse.com" date="1390824000">- fate#315589
  - deprecated bind mount configuration with NFSv4 export
- 3.1.2</changelog>
  <changelog author="vmoravec@suse.com" date="1394107200">- Fix testsuite due to changes in yast2
- 3.1.3</changelog>
  <changelog author="vmoravec@suse.com" date="1394625600">- Fix testuite due to changes in yast2
- 3.1.4</changelog>
  <changelog author="vmoravec@suse.com" date="1396008000">- Fix testsuite again
- 3.1.5</changelog>
  <changelog author="locilka@suse.com" date="1399291200">- Obsolete Service.Status calls replaced with Service.active?
- Finally dropped obsolete 'portmap' support (using only rpcbind)
- Adapted testsuite
- 3.1.6</changelog>
  <changelog author="mvidner@suse.com" date="1400673600">- Avoid "Unable to start idmapd" (bnc#878878).
- Removed dead code dealing with the user space nfs-server.rpm.
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.9</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517572800">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="0cef50ae4dcb6fe0d02aa273c0ed188145b4cbc6dd8a05ee397ae8c2415b4145" name="yast2-nis-client" arch="src">
  <version epoch="0" ver="4.0.3" rel="lp150.2.3.1"/>
  <changelog author="jsuchome@suse.cz" date="1383652800">- add/remove unix-nis PAM module option if needed (bnc#848963)
- 3.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="mfilka@suse.com" date="1387281600">- contains .etc.defaultdomain agent
- 3.1.3</changelog>
  <changelog author="jsuchome@suse.cz" date="1389614400">- updated for current NetworkService API (bnc#856376)</changelog>
  <changelog author="jsuchome@suse.cz" date="1394107200">- use Service API for starting ypbind (bnc#866923)
- 3.1.5</changelog>
  <changelog author="vmoravec@suse.com" date="1394625600">- Fix failing testsuite due to changes in yast2
- 3.1.6</changelog>
  <changelog author="vmoravec@suse.com" date="1396008000">- Fix failing testsuite
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1396267200">- one more fix for failing old testsuite as we cannot mock new
  systemd there
- 3.1.8</changelog>
  <changelog author="jsuchome@suse.cz" date="1406721600">- yast2-network required for writing network settings (bnc#888664)
- 3.1.9</changelog>
  <changelog author="cwh@suse.com" date="1407412800">- Made a more compact layout to better fit 800x600 (bnc#847291)
- 3.1.10</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="ancor@suse.com" date="1423051200">- Use correct location for ypdomainname (bnc#916031)
- 3.1.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464782400">- Drop yast2-nis-client-devel-doc package (fate#320356)
- 3.1.13</changelog>
  <changelog author="mfilka@suse.com" date="1468929600">- bnc#988928
  - updated translation
- 3.1.14</changelog>
  <changelog author="jreidinger@suse.com" date="1476878400">- report error if ypdomainname failed instead of silent ignoring
  (bsc#994530)
- 3.2.0</changelog>
  <changelog author="schubi@suse.de" date="1495627200">- Added yp-tools to the requirements in order to call ypdomainname
  (Additional fix for bnc#916031 and bsc#994530)
- 3.2.1</changelog>
  <changelog author="jsrain@suse.cz" date="1505131200">- added libnsl-devel to BuildRequires for upstream changes
- 4.0.0</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- Link ypserv agent against libtirpc, sunrpc is deprecated and does
  not support IPv6 (bsc#1076566)
- 4.0.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517832000">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.2</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.3</changelog>
</package>
<package pkgid="93620b89d0ea480c44d23df14dca5eb8d8abfbe1afd1379a6ab2974a18c8a999" name="yast2-nis-client" arch="x86_64">
  <version epoch="0" ver="4.0.3" rel="lp150.2.3.1"/>
  <changelog author="jsuchome@suse.cz" date="1383652800">- add/remove unix-nis PAM module option if needed (bnc#848963)
- 3.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="mfilka@suse.com" date="1387281600">- contains .etc.defaultdomain agent
- 3.1.3</changelog>
  <changelog author="jsuchome@suse.cz" date="1389614400">- updated for current NetworkService API (bnc#856376)</changelog>
  <changelog author="jsuchome@suse.cz" date="1394107200">- use Service API for starting ypbind (bnc#866923)
- 3.1.5</changelog>
  <changelog author="vmoravec@suse.com" date="1394625600">- Fix failing testsuite due to changes in yast2
- 3.1.6</changelog>
  <changelog author="vmoravec@suse.com" date="1396008000">- Fix failing testsuite
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1396267200">- one more fix for failing old testsuite as we cannot mock new
  systemd there
- 3.1.8</changelog>
  <changelog author="jsuchome@suse.cz" date="1406721600">- yast2-network required for writing network settings (bnc#888664)
- 3.1.9</changelog>
  <changelog author="cwh@suse.com" date="1407412800">- Made a more compact layout to better fit 800x600 (bnc#847291)
- 3.1.10</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="ancor@suse.com" date="1423051200">- Use correct location for ypdomainname (bnc#916031)
- 3.1.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464782400">- Drop yast2-nis-client-devel-doc package (fate#320356)
- 3.1.13</changelog>
  <changelog author="mfilka@suse.com" date="1468929600">- bnc#988928
  - updated translation
- 3.1.14</changelog>
  <changelog author="jreidinger@suse.com" date="1476878400">- report error if ypdomainname failed instead of silent ignoring
  (bsc#994530)
- 3.2.0</changelog>
  <changelog author="schubi@suse.de" date="1495627200">- Added yp-tools to the requirements in order to call ypdomainname
  (Additional fix for bnc#916031 and bsc#994530)
- 3.2.1</changelog>
  <changelog author="jsrain@suse.cz" date="1505131200">- added libnsl-devel to BuildRequires for upstream changes
- 4.0.0</changelog>
  <changelog author="kukuk@suse.de" date="1510660800">- Link ypserv agent against libtirpc, sunrpc is deprecated and does
  not support IPv6 (bsc#1076566)
- 4.0.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517832000">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.2</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.3</changelog>
</package>
<package pkgid="1465da6546aaa3ebd44f981deea7115e5429704dad6d529193b2200634f516eb" name="yast2-nis-server" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.cz" date="1245153600">- Using autodocs-ycp.ami, which contains a fix for automake 1.11.</changelog>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="jsuchome@suse.cz" date="1312804800">- remember the settings after clicking Details (bnc#710882)
- 2.21.0</changelog>
  <changelog author="visnov@suse.cz" date="1317211200">- set dialog title
- 2.21.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1327406400">- confirmed licence
- 2.22.0</changelog>
  <changelog author="ug@suse.de" date="1335268800">- small rnc file fix</changelog>
  <changelog author="jsuchome@suse.cz" date="1354104000">- save local NIS client with static netconfig policy (bnc#786799)
- 2.23.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jsuchome@suse.cz" date="1401451200">- use correct name of service for firewall (bnc#880383)
- 3.1.1</changelog>
  <changelog author="locilka@suse.com" date="1401710400">- Marked text for translation (bnc#880306)
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464782400">- Drop yast2-nis-server-devel-doc package (fate#320356)
- 3.1.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1519128000">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="73ef0735def8780226846ce379bf6127e30afb3f3338591a70cf20586e10f25f" name="yast2-nis-server" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="jsuchome@suse.cz" date="1219924800">- adapted to recent changes in nis-client (no check for DHCP)
- DHCLIENT_SET_DOMAINNAME replaced with NETCONFIG_NIS_SETDOMAINNAME
- 2.17.0</changelog>
  <changelog author="jsuchome@suse.cz" date="1220356800">- fixed button alignment (bnc#421043)
- 2.17.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1220529600">- use rpcbind instead of portmap if available (bnc#423026)
- 2.17.2</changelog>
  <changelog author="jsuchome@suse.cz" date="1232625600">- NisServer::modified used to indicate if changes were done
- ask for abort if changes were done (bnc#460168)
- code cleanup
- 2.18.0</changelog>
  <changelog author="mvidner@suse.cz" date="1245153600">- Using autodocs-ycp.ami, which contains a fix for automake 1.11.</changelog>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="jsuchome@suse.cz" date="1312804800">- remember the settings after clicking Details (bnc#710882)
- 2.21.0</changelog>
  <changelog author="visnov@suse.cz" date="1317211200">- set dialog title
- 2.21.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1327406400">- confirmed licence
- 2.22.0</changelog>
  <changelog author="ug@suse.de" date="1335268800">- small rnc file fix</changelog>
  <changelog author="jsuchome@suse.cz" date="1354104000">- save local NIS client with static netconfig policy (bnc#786799)
- 2.23.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jsuchome@suse.cz" date="1401451200">- use correct name of service for firewall (bnc#880383)
- 3.1.1</changelog>
  <changelog author="locilka@suse.com" date="1401710400">- Marked text for translation (bnc#880306)
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464782400">- Drop yast2-nis-server-devel-doc package (fate#320356)
- 3.1.4</changelog>
  <changelog author="knut.anderssen@suse.com" date="1519128000">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="a706ba69a286702358ec1555d58a66d72fd2be1c5c7ba16a949cf7f4a5f138c3" name="yast2-online-update" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="jsuchome@suse.cz" date="1333022400">- corectly handle the output of installation's ContinueCancel popup
- 2.22.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022401">- merged proofread texts
- 2.22.2</changelog>
  <changelog author="jsuchome@suse.cz" date="1351166400">- remove the call of obsolete inst_suseconfig
- 2.23.0</changelog>
  <changelog author="jsuchome@suse.cz" date="1354881600">- if release notes package was updated, show release notes at the
  end (fate#314072)
- 2.23.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1373889600">- call PkgCommit to save changes even when nothing was selected
  for (un)installation (bnc#811237)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="locilka@suse.com" date="1392033600">- Added functionality which informs user that some of the selected
  patches (listed) will need rebooting. User can then continue,
  skip all those patches, or tune the selection of patches manually
  (FATE#312509).
- 3.1.2</changelog>
  <changelog author="locilka@suse.com" date="1394193600">- Reporting products that have reached their end of support when
  Online Update module is started (FATE#316172)
- 3.1.3</changelog>
  <changelog author="jsuchome@suse.cz" date="1395748800">- fixed a typo (bnc#870049)
- 3.1.4</changelog>
  <changelog author="lslezak@suse.cz" date="1401278400">- fixed starting registration module (bnc#868211)
- 3.1.5</changelog>
  <changelog author="aschnell@suse.de" date="1406635200">- fixed spelling in spec file (bnc#889021)
- 3.1.6</changelog>
  <changelog author="mvidner@suse.com" date="1409832000">- Use a more flexible rubygem requirement syntax (bnc#895069)
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="jreidinger@suse.com" date="1422532800">- remove obsolete legacy patch callbacks
- 3.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1423224000">- updated restart popup message, make clear that only YaST will be
  restarted (not the system) (bnc#913437)
- 3.1.10</changelog>
  <changelog author="ancor@suse.com" date="1423224001">- The unit tests are now compatible with RSpec 3 (bnc#916364)
- 3.1.11</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="7fe0de25ab51a7244433b3322709339c5906f6d531503146d1dfe1a75a2c012d" name="yast2-online-update" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="jsuchome@suse.cz" date="1333022400">- corectly handle the output of installation's ContinueCancel popup
- 2.22.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022401">- merged proofread texts
- 2.22.2</changelog>
  <changelog author="jsuchome@suse.cz" date="1351166400">- remove the call of obsolete inst_suseconfig
- 2.23.0</changelog>
  <changelog author="jsuchome@suse.cz" date="1354881600">- if release notes package was updated, show release notes at the
  end (fate#314072)
- 2.23.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1373889600">- call PkgCommit to save changes even when nothing was selected
  for (un)installation (bnc#811237)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="locilka@suse.com" date="1392033600">- Added functionality which informs user that some of the selected
  patches (listed) will need rebooting. User can then continue,
  skip all those patches, or tune the selection of patches manually
  (FATE#312509).
- 3.1.2</changelog>
  <changelog author="locilka@suse.com" date="1394193600">- Reporting products that have reached their end of support when
  Online Update module is started (FATE#316172)
- 3.1.3</changelog>
  <changelog author="jsuchome@suse.cz" date="1395748800">- fixed a typo (bnc#870049)
- 3.1.4</changelog>
  <changelog author="lslezak@suse.cz" date="1401278400">- fixed starting registration module (bnc#868211)
- 3.1.5</changelog>
  <changelog author="aschnell@suse.de" date="1406635200">- fixed spelling in spec file (bnc#889021)
- 3.1.6</changelog>
  <changelog author="mvidner@suse.com" date="1409832000">- Use a more flexible rubygem requirement syntax (bnc#895069)
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="jreidinger@suse.com" date="1422532800">- remove obsolete legacy patch callbacks
- 3.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1423224000">- updated restart popup message, make clear that only YaST will be
  restarted (not the system) (bnc#913437)
- 3.1.10</changelog>
  <changelog author="ancor@suse.com" date="1423224001">- The unit tests are now compatible with RSpec 3 (bnc#916364)
- 3.1.11</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="5fd113e55d868230236d6ce31e5e6e14fea9181bab6072ac87d96040ed7d47b0" name="yast2-online-update-configuration" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="jdsn@suse.de" date="1272283200">- initial version, split off from yast2-registration (fate#308494)
- adapting code to work separately from registration
- 2.19.0</changelog>
  <changelog author="jdsn@suse.de" date="1302264000">- fix proxy settings in automatic online update script, bnc#(678888)
- make online-update script more robust</changelog>
  <changelog author="jdsn@suse.de" date="1306756800">- add split-provides to keep this module in zypper dup (bnc#695449)
- 2.21.0</changelog>
  <changelog author="visnov@suse.cz" date="1317124800">- set dialog title
- 2.21.1</changelog>
  <changelog author="jdsn@suse.de" date="1350648000">- feature: filter patches by category in automatic update cronjob
  (fate#313278)
- 2.22.1</changelog>
  <changelog author="jdsn@suse.de" date="1363176000">- translate cron intervals and update categories (bnc#807773)</changelog>
  <changelog author="jdsn@suse.de" date="1373284800">- fix the call of the repositories module (bnc#828139)
- 2.24.0</changelog>
  <changelog author="jdsn@suse.de" date="1373371200">- do not finish sources if called from other module (bnc#828132)
- 2.24.1</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="vmoravec@suse.com" date="1387281600">- Add option for using deltarpms during update - FATE#314867
- 3.1.2</changelog>
  <changelog author="vmoravec@suse.com" date="1387368000">- Fix missing lib dir in makefile and specfile
- 3.1.3</changelog>
  <changelog author="robin.roth@kit.edu" date="1395835200">- Rerun zypper if it returns 103 which indicates that an update to
  zypper itself was installed
- 3.1.4</changelog>
  <changelog author="lslezak@suse.cz" date="1397649600">- registration client has been renamed to "scc" (bnc#870869)
- zypp_config.rb: fixed a typo in the constant name
- 3.1.5</changelog>
  <changelog author="lslezak@suse.cz" date="1498824000">- Install the patches for all selected categories (not just the
  first one) (bsc#1044018)
- Properly handle the exist status for multiple categories
- 3.1.6</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468).
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="57fefb463ae8604751b457c488f6d4d0975737644a3f16be08de865fe8e5e8c0" name="yast2-online-update-configuration" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="jdsn@suse.de" date="1272283200">- initial version, split off from yast2-registration (fate#308494)
- adapting code to work separately from registration
- 2.19.0</changelog>
  <changelog author="jdsn@suse.de" date="1302264000">- fix proxy settings in automatic online update script, bnc#(678888)
- make online-update script more robust</changelog>
  <changelog author="jdsn@suse.de" date="1306756800">- add split-provides to keep this module in zypper dup (bnc#695449)
- 2.21.0</changelog>
  <changelog author="visnov@suse.cz" date="1317124800">- set dialog title
- 2.21.1</changelog>
  <changelog author="jdsn@suse.de" date="1350648000">- feature: filter patches by category in automatic update cronjob
  (fate#313278)
- 2.22.1</changelog>
  <changelog author="jdsn@suse.de" date="1363176000">- translate cron intervals and update categories (bnc#807773)</changelog>
  <changelog author="jdsn@suse.de" date="1373284800">- fix the call of the repositories module (bnc#828139)
- 2.24.0</changelog>
  <changelog author="jdsn@suse.de" date="1373371200">- do not finish sources if called from other module (bnc#828132)
- 2.24.1</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="vmoravec@suse.com" date="1387281600">- Add option for using deltarpms during update - FATE#314867
- 3.1.2</changelog>
  <changelog author="vmoravec@suse.com" date="1387368000">- Fix missing lib dir in makefile and specfile
- 3.1.3</changelog>
  <changelog author="robin.roth@kit.edu" date="1395835200">- Rerun zypper if it returns 103 which indicates that an update to
  zypper itself was installed
- 3.1.4</changelog>
  <changelog author="lslezak@suse.cz" date="1397649600">- registration client has been renamed to "scc" (bnc#870869)
- zypp_config.rb: fixed a typo in the constant name
- 3.1.5</changelog>
  <changelog author="lslezak@suse.cz" date="1498824000">- Install the patches for all selected categories (not just the
  first one) (bsc#1044018)
- Properly handle the exist status for multiple categories
- 3.1.6</changelog>
  <changelog author="rbrown@suse.com" date="1512043200">- Replace references to /var/adm/fillup-templates with new
  %_fillupdir macro (boo#1069468).
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="9964b6aef0f8cdeae56b68fccf8ede14441fd55a7aba15d2c13e6466b0fdb185" name="yast2-online-update-frontend" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="jsuchome@suse.cz" date="1333022400">- corectly handle the output of installation's ContinueCancel popup
- 2.22.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022401">- merged proofread texts
- 2.22.2</changelog>
  <changelog author="jsuchome@suse.cz" date="1351166400">- remove the call of obsolete inst_suseconfig
- 2.23.0</changelog>
  <changelog author="jsuchome@suse.cz" date="1354881600">- if release notes package was updated, show release notes at the
  end (fate#314072)
- 2.23.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1373889600">- call PkgCommit to save changes even when nothing was selected
  for (un)installation (bnc#811237)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="locilka@suse.com" date="1392033600">- Added functionality which informs user that some of the selected
  patches (listed) will need rebooting. User can then continue,
  skip all those patches, or tune the selection of patches manually
  (FATE#312509).
- 3.1.2</changelog>
  <changelog author="locilka@suse.com" date="1394193600">- Reporting products that have reached their end of support when
  Online Update module is started (FATE#316172)
- 3.1.3</changelog>
  <changelog author="jsuchome@suse.cz" date="1395748800">- fixed a typo (bnc#870049)
- 3.1.4</changelog>
  <changelog author="lslezak@suse.cz" date="1401278400">- fixed starting registration module (bnc#868211)
- 3.1.5</changelog>
  <changelog author="aschnell@suse.de" date="1406635200">- fixed spelling in spec file (bnc#889021)
- 3.1.6</changelog>
  <changelog author="mvidner@suse.com" date="1409832000">- Use a more flexible rubygem requirement syntax (bnc#895069)
- 3.1.7</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="jreidinger@suse.com" date="1422532800">- remove obsolete legacy patch callbacks
- 3.1.9</changelog>
  <changelog author="lslezak@suse.cz" date="1423224000">- updated restart popup message, make clear that only YaST will be
  restarted (not the system) (bnc#913437)
- 3.1.10</changelog>
  <changelog author="ancor@suse.com" date="1423224001">- The unit tests are now compatible with RSpec 3 (bnc#916364)
- 3.1.11</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="5440eae9373c9e33525a44a020123acf1c93be211d10f73cfadc0398af665109" name="yast2-packager" arch="src">
  <version epoch="0" ver="4.0.62" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1519732800">- Added Live Patching product rename (bsc#1074154)
- 4.0.43</changelog>
  <changelog author="lslezak@suse.cz" date="1519732801">- Added product merge: SLE11/12 HA GEO has been merged to SLE15 HA
  (bsc#1069705)
- Added a missing textdomain in a file (bsc#1083015)
- Unified text domains to "packager"
- 4.0.44</changelog>
  <changelog author="lslezak@suse.cz" date="1519992000">- Updated repository selection label to be more understandable
  (bsc#1081508)
- 4.0.45</changelog>
  <changelog author="schubi@suse.de" date="1520251200">- Confirm base license: parameter for disabling back button.
  Needed for showing base product license while AutoYaST
  installation (bnc#1073324).
- 4.0.46</changelog>
  <changelog author="jreidinger@suse.com" date="1520596800">- Always allow next/back for adding new addon (bsc#1082286)
- 4.0.47</changelog>
  <changelog author="lslezak@suse.cz" date="1520856000">- Fixed crash when displaying license agreement in the registration
  module (a private method called) (bsc#1084847)
- 4.0.48</changelog>
  <changelog author="lslezak@suse.cz" date="1521115200">- Cleanup, do not use the obsolete scripts which have been dropped
  (part of bsc#1080979)
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1522065600">- SLES-12 + HPC module can be upgraded to SLES_HPC-15, display
  correctly this product change in the migration selection and the
  upgrade summary dialog (bsc#1086734)
- 4.0.50</changelog>
  <changelog author="lslezak@suse.cz" date="1522152000">- Added a known upgrade from SLE-HPC to SLES_HPC (bsc#1086734)
- 4.0.51</changelog>
  <changelog author="jlopez@suse.com" date="1522152001">- Adapt to API changes in storage-ng (part of bsc#1082542).
- 4.0.52</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1522843200">- Better evaluate the product to upgrade, do not use the package
  solver if there is only one base product to install, use some
  fallbacks when the solver fails (bsc#1086259)
- 4.0.54</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522929600">- Given a license, remember whether another one with the same
  content was already accepted (fate#325461).
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1523361600">- Error: Add-On products has been reset during the installation
  workflow (bnc#1086846). Set it again while setting the base
  product.
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- The Advanced Systems Management Module has been moved to the
  Basesystem module, added the product change into the list
  (related to bsc#1089477)
- 4.0.57</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- In AutoYaST, skip base product license dialog when the same
  license was already accepted (fate#325461).
- 4.0.58</changelog>
  <changelog author="gsouza@suse.com" date="1524139200">- Added warning to inform the user that changes in a repository
  managed by a service will be lost in the next refresh of the
  service (bsc#1078323).
- 4.0.59</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524571200">- Fix text direction for RTL languages in software patterns list
  (bsc#1089846).
- 4.0.60</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Adapted /dev cleanup at upgrade to work properly with the
  registration rollback (bsc#1089643)
- 4.0.61</changelog>
  <changelog author="lslezak@suse.cz" date="1526472000">- Fixed argument handling in the .desktop file for the
  "Install/Remove Software" item (bsc#1087352)
- Properly process paths containing spaces or special shell
  characters
- 4.0.62</changelog>
</package>
<package pkgid="88b14ddfbd133b6c7c82cfc0499ee50aa6c552453c015af972b557ca7e3daefd" name="yast2-packager" arch="x86_64">
  <version epoch="0" ver="4.0.62" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1519732800">- Added Live Patching product rename (bsc#1074154)
- 4.0.43</changelog>
  <changelog author="lslezak@suse.cz" date="1519732801">- Added product merge: SLE11/12 HA GEO has been merged to SLE15 HA
  (bsc#1069705)
- Added a missing textdomain in a file (bsc#1083015)
- Unified text domains to "packager"
- 4.0.44</changelog>
  <changelog author="lslezak@suse.cz" date="1519992000">- Updated repository selection label to be more understandable
  (bsc#1081508)
- 4.0.45</changelog>
  <changelog author="schubi@suse.de" date="1520251200">- Confirm base license: parameter for disabling back button.
  Needed for showing base product license while AutoYaST
  installation (bnc#1073324).
- 4.0.46</changelog>
  <changelog author="jreidinger@suse.com" date="1520596800">- Always allow next/back for adding new addon (bsc#1082286)
- 4.0.47</changelog>
  <changelog author="lslezak@suse.cz" date="1520856000">- Fixed crash when displaying license agreement in the registration
  module (a private method called) (bsc#1084847)
- 4.0.48</changelog>
  <changelog author="lslezak@suse.cz" date="1521115200">- Cleanup, do not use the obsolete scripts which have been dropped
  (part of bsc#1080979)
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1522065600">- SLES-12 + HPC module can be upgraded to SLES_HPC-15, display
  correctly this product change in the migration selection and the
  upgrade summary dialog (bsc#1086734)
- 4.0.50</changelog>
  <changelog author="lslezak@suse.cz" date="1522152000">- Added a known upgrade from SLE-HPC to SLES_HPC (bsc#1086734)
- 4.0.51</changelog>
  <changelog author="jlopez@suse.com" date="1522152001">- Adapt to API changes in storage-ng (part of bsc#1082542).
- 4.0.52</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1522843200">- Better evaluate the product to upgrade, do not use the package
  solver if there is only one base product to install, use some
  fallbacks when the solver fails (bsc#1086259)
- 4.0.54</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522929600">- Given a license, remember whether another one with the same
  content was already accepted (fate#325461).
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1523361600">- Error: Add-On products has been reset during the installation
  workflow (bnc#1086846). Set it again while setting the base
  product.
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- The Advanced Systems Management Module has been moved to the
  Basesystem module, added the product change into the list
  (related to bsc#1089477)
- 4.0.57</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- In AutoYaST, skip base product license dialog when the same
  license was already accepted (fate#325461).
- 4.0.58</changelog>
  <changelog author="gsouza@suse.com" date="1524139200">- Added warning to inform the user that changes in a repository
  managed by a service will be lost in the next refresh of the
  service (bsc#1078323).
- 4.0.59</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524571200">- Fix text direction for RTL languages in software patterns list
  (bsc#1089846).
- 4.0.60</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Adapted /dev cleanup at upgrade to work properly with the
  registration rollback (bsc#1089643)
- 4.0.61</changelog>
  <changelog author="lslezak@suse.cz" date="1526472000">- Fixed argument handling in the .desktop file for the
  "Install/Remove Software" item (bsc#1087352)
- Properly process paths containing spaces or special shell
  characters
- 4.0.62</changelog>
</package>
<package pkgid="0391cffe66c992abf8c5a515a037c74be48efc940987586bba7d30393463fee8" name="yast2-packager" arch="src">
  <version epoch="0" ver="4.0.67" rel="lp150.2.6.2"/>
  <changelog author="lslezak@suse.cz" date="1520856000">- Fixed crash when displaying license agreement in the registration
  module (a private method called) (bsc#1084847)
- 4.0.48</changelog>
  <changelog author="lslezak@suse.cz" date="1521115200">- Cleanup, do not use the obsolete scripts which have been dropped
  (part of bsc#1080979)
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1522065600">- SLES-12 + HPC module can be upgraded to SLES_HPC-15, display
  correctly this product change in the migration selection and the
  upgrade summary dialog (bsc#1086734)
- 4.0.50</changelog>
  <changelog author="lslezak@suse.cz" date="1522152000">- Added a known upgrade from SLE-HPC to SLES_HPC (bsc#1086734)
- 4.0.51</changelog>
  <changelog author="jlopez@suse.com" date="1522152001">- Adapt to API changes in storage-ng (part of bsc#1082542).
- 4.0.52</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1522843200">- Better evaluate the product to upgrade, do not use the package
  solver if there is only one base product to install, use some
  fallbacks when the solver fails (bsc#1086259)
- 4.0.54</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522929600">- Given a license, remember whether another one with the same
  content was already accepted (fate#325461).
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1523361600">- Error: Add-On products has been reset during the installation
  workflow (bnc#1086846). Set it again while setting the base
  product.
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- The Advanced Systems Management Module has been moved to the
  Basesystem module, added the product change into the list
  (related to bsc#1089477)
- 4.0.57</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- In AutoYaST, skip base product license dialog when the same
  license was already accepted (fate#325461).
- 4.0.58</changelog>
  <changelog author="gsouza@suse.com" date="1524139200">- Added warning to inform the user that changes in a repository
  managed by a service will be lost in the next refresh of the
  service (bsc#1078323).
- 4.0.59</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524571200">- Fix text direction for RTL languages in software patterns list
  (bsc#1089846).
- 4.0.60</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Adapted /dev cleanup at upgrade to work properly with the
  registration rollback (bsc#1089643)
- 4.0.61</changelog>
  <changelog author="lslezak@suse.cz" date="1526472000">- Fixed argument handling in the .desktop file for the
  "Install/Remove Software" item (bsc#1087352)
- Properly process paths containing spaces or special shell
  characters
- 4.0.62</changelog>
  <changelog author="lslezak@suse.cz" date="1526558400">- Display an error popup when the FIPS compliant mode is active
  and the "fips" pattern is not available (installing an
  unregistered system or without the Packages DVD) (bsc#1093060)
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1527595200">- When running the installation in textmode, consider only the
  preselected language when showing the license (bsc#1094793).
- 4.0.64</changelog>
  <changelog author="jsrain@suse.cz" date="1527595201">- rename SLES_HPC =&gt; SLE_HPC (bsc#1095053)
- 4.0.65</changelog>
  <changelog author="knut.anderssen@suse.com" date="1527595202">- During an upgrade, skip the base produce license dialog when the
  same license was already accepted (bsc#1080450)
- 4.0.66</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1527595203">- When running the installation in textmode, consider only the
  preselected language when showing the license for extensions,
  modules or add-ons (related to bsc#1094793).
- 4.0.67</changelog>
</package>
<package pkgid="d0b582ba58cb53b23c8ec9f3b219f74f4ef06d72ec69c3412872438531b7f94f" name="yast2-packager" arch="x86_64">
  <version epoch="0" ver="4.0.67" rel="lp150.2.6.2"/>
  <changelog author="lslezak@suse.cz" date="1520856000">- Fixed crash when displaying license agreement in the registration
  module (a private method called) (bsc#1084847)
- 4.0.48</changelog>
  <changelog author="lslezak@suse.cz" date="1521115200">- Cleanup, do not use the obsolete scripts which have been dropped
  (part of bsc#1080979)
- 4.0.49</changelog>
  <changelog author="lslezak@suse.cz" date="1522065600">- SLES-12 + HPC module can be upgraded to SLES_HPC-15, display
  correctly this product change in the migration selection and the
  upgrade summary dialog (bsc#1086734)
- 4.0.50</changelog>
  <changelog author="lslezak@suse.cz" date="1522152000">- Added a known upgrade from SLE-HPC to SLES_HPC (bsc#1086734)
- 4.0.51</changelog>
  <changelog author="jlopez@suse.com" date="1522152001">- Adapt to API changes in storage-ng (part of bsc#1082542).
- 4.0.52</changelog>
  <changelog author="jlopez@suse.com" date="1522756800">- Fix tests to use correct storage instance (part of fate#318196).
- 4.0.53</changelog>
  <changelog author="lslezak@suse.cz" date="1522843200">- Better evaluate the product to upgrade, do not use the package
  solver if there is only one base product to install, use some
  fallbacks when the solver fails (bsc#1086259)
- 4.0.54</changelog>
  <changelog author="knut.anderssen@suse.com" date="1522929600">- Given a license, remember whether another one with the same
  content was already accepted (fate#325461).
- 4.0.55</changelog>
  <changelog author="schubi@suse.de" date="1523361600">- Error: Add-On products has been reset during the installation
  workflow (bnc#1086846). Set it again while setting the base
  product.
- 4.0.56</changelog>
  <changelog author="lslezak@suse.cz" date="1523880000">- The Advanced Systems Management Module has been moved to the
  Basesystem module, added the product change into the list
  (related to bsc#1089477)
- 4.0.57</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1523880001">- In AutoYaST, skip base product license dialog when the same
  license was already accepted (fate#325461).
- 4.0.58</changelog>
  <changelog author="gsouza@suse.com" date="1524139200">- Added warning to inform the user that changes in a repository
  managed by a service will be lost in the next refresh of the
  service (bsc#1078323).
- 4.0.59</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524571200">- Fix text direction for RTL languages in software patterns list
  (bsc#1089846).
- 4.0.60</changelog>
  <changelog author="lslezak@suse.cz" date="1525348800">- Adapted /dev cleanup at upgrade to work properly with the
  registration rollback (bsc#1089643)
- 4.0.61</changelog>
  <changelog author="lslezak@suse.cz" date="1526472000">- Fixed argument handling in the .desktop file for the
  "Install/Remove Software" item (bsc#1087352)
- Properly process paths containing spaces or special shell
  characters
- 4.0.62</changelog>
  <changelog author="lslezak@suse.cz" date="1526558400">- Display an error popup when the FIPS compliant mode is active
  and the "fips" pattern is not available (installing an
  unregistered system or without the Packages DVD) (bsc#1093060)
- 4.0.63</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1527595200">- When running the installation in textmode, consider only the
  preselected language when showing the license (bsc#1094793).
- 4.0.64</changelog>
  <changelog author="jsrain@suse.cz" date="1527595201">- rename SLES_HPC =&gt; SLE_HPC (bsc#1095053)
- 4.0.65</changelog>
  <changelog author="knut.anderssen@suse.com" date="1527595202">- During an upgrade, skip the base produce license dialog when the
  same license was already accepted (bsc#1080450)
- 4.0.66</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1527595203">- When running the installation in textmode, consider only the
  preselected language when showing the license for extensions,
  modules or add-ons (related to bsc#1094793).
- 4.0.67</changelog>
</package>
<package pkgid="6726f621a3e18ccd520dcc7670a119a9156ba488e12501098f2525c0bf906d4f" name="yast2-pkg-bindings" arch="src">
  <version epoch="0" ver="4.0.10" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1475841600">- Added Pkg.UrlSchemeIs*() methods for classifying the URL scheme
  to avoid duplication of the libzypp code in YaST (bsc#948982)
- 3.2.0</changelog>
  <changelog author="lslezak@suse.cz" date="1476273600">- Added Pkg.SourceSetPriority() to allow changing the priority
  also for the already loaded packages (bsc#498266)
- 3.2.1</changelog>
  <changelog author="lslezak@suse.cz" date="1490788800">- Return the repository signature flag status in the
  Pkg.SourceGeneralData call (might be used for bsc#1009127)</changelog>
  <changelog author="lslezak@suse.cz" date="1490788801">- Fixed failure when trying to save a plugin service (bsc#1021117)
- 3.2.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1496404800">- Fix pkgGpgCheck callback crashing when reporting SrcPackages
  (bsc#1037210) (by mlandres)
- 3.2.3</changelog>
  <changelog author="lslezak@suse.cz" date="1498046400">- Do not crash when the repository URL is not defined (bsc#1043218)
- 3.2.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1502884800">- Add functions to handle product licenses (FATE#322276)
- 3.3.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503316800">- Add a Pkg.PrdHasLicenseConfirmed and
  Pkg.PrdMarkLicenseUnconfirmed (FATE#322276)
- Pkg.PrdGetLicenseToConfirm always returns the license, no matter
  whether is confirmed or not
- Add a second argument to Pkg.PrdGetLicenseToConfirm in order
  get the license translated to the given language
- 3.3.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Rename PrdMarkLicenseUnconfirmed to PrdMarkLicenseNotConfirmed
  (FATE#322276)
- 3.3.2</changelog>
  <changelog author="lslezak@suse.cz" date="1506081600">- Keep enabled recommended packages for the next solver runs
  when doing distribution upgrade (bsc#1059065)
- 4.0.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1506340800">- Add a CompareVersions function (related to fate#323273)
- 4.0.1</changelog>
  <changelog author="mvidner@suse.com" date="1508760000">- Do not crash after a callback is set, unset, then called
  (bsc#1063459)
- 4.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1508846400">- Report error when repository refresh fails during a service
  refresh (bsc#1064210)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1509105600">- Pkg.ResolvableProperties: return the "register_flavor" product
  property (related to bsc#896224)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1512648000">- Fixed Pkg.ExpandedUrl to return also the password part
  of the URL (bsc#1067007)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1516795200">- Log more details in PkgQueryProvides call
  (related to bsc#1072634)
- 4.0.6</changelog>
  <changelog author="lslezak@suse.cz" date="1517400000">- Added "transact_by" key to the PkgPropertiesAll call
  (improvement for bsc#1077882)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1518436800">- Add a PrdLicenseLocales function to get the list of available
  license translations for a given product (related to
  FATE#322276).
- 4.0.8</changelog>
  <changelog author="jsrain@suse.cz" date="1518782400">- always scan media for products to allow media identification
  (bsc#1080983)
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1526472000">- Ignore notification exception for failed plugin services,
  avoid errors when refreshing the zypp-plugin-spacewalk service
  on a system not managed by spacewalk (SUSE Manager)
  (bsc#1086768)
- 4.0.10</changelog>
</package>
<package pkgid="a89df641f9dac58cee20bb5d38fb34d6c85f87674405e6e81d8a2751e1ee2e57" name="yast2-pkg-bindings" arch="x86_64">
  <version epoch="0" ver="4.0.10" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1475841600">- Added Pkg.UrlSchemeIs*() methods for classifying the URL scheme
  to avoid duplication of the libzypp code in YaST (bsc#948982)
- 3.2.0</changelog>
  <changelog author="lslezak@suse.cz" date="1476273600">- Added Pkg.SourceSetPriority() to allow changing the priority
  also for the already loaded packages (bsc#498266)
- 3.2.1</changelog>
  <changelog author="lslezak@suse.cz" date="1490788800">- Return the repository signature flag status in the
  Pkg.SourceGeneralData call (might be used for bsc#1009127)</changelog>
  <changelog author="lslezak@suse.cz" date="1490788801">- Fixed failure when trying to save a plugin service (bsc#1021117)
- 3.2.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1496404800">- Fix pkgGpgCheck callback crashing when reporting SrcPackages
  (bsc#1037210) (by mlandres)
- 3.2.3</changelog>
  <changelog author="lslezak@suse.cz" date="1498046400">- Do not crash when the repository URL is not defined (bsc#1043218)
- 3.2.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1502884800">- Add functions to handle product licenses (FATE#322276)
- 3.3.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503316800">- Add a Pkg.PrdHasLicenseConfirmed and
  Pkg.PrdMarkLicenseUnconfirmed (FATE#322276)
- Pkg.PrdGetLicenseToConfirm always returns the license, no matter
  whether is confirmed or not
- Add a second argument to Pkg.PrdGetLicenseToConfirm in order
  get the license translated to the given language
- 3.3.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Rename PrdMarkLicenseUnconfirmed to PrdMarkLicenseNotConfirmed
  (FATE#322276)
- 3.3.2</changelog>
  <changelog author="lslezak@suse.cz" date="1506081600">- Keep enabled recommended packages for the next solver runs
  when doing distribution upgrade (bsc#1059065)
- 4.0.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1506340800">- Add a CompareVersions function (related to fate#323273)
- 4.0.1</changelog>
  <changelog author="mvidner@suse.com" date="1508760000">- Do not crash after a callback is set, unset, then called
  (bsc#1063459)
- 4.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1508846400">- Report error when repository refresh fails during a service
  refresh (bsc#1064210)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1509105600">- Pkg.ResolvableProperties: return the "register_flavor" product
  property (related to bsc#896224)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1512648000">- Fixed Pkg.ExpandedUrl to return also the password part
  of the URL (bsc#1067007)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1516795200">- Log more details in PkgQueryProvides call
  (related to bsc#1072634)
- 4.0.6</changelog>
  <changelog author="lslezak@suse.cz" date="1517400000">- Added "transact_by" key to the PkgPropertiesAll call
  (improvement for bsc#1077882)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1518436800">- Add a PrdLicenseLocales function to get the list of available
  license translations for a given product (related to
  FATE#322276).
- 4.0.8</changelog>
  <changelog author="jsrain@suse.cz" date="1518782400">- always scan media for products to allow media identification
  (bsc#1080983)
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1526472000">- Ignore notification exception for failed plugin services,
  avoid errors when refreshing the zypp-plugin-spacewalk service
  on a system not managed by spacewalk (SUSE Manager)
  (bsc#1086768)
- 4.0.10</changelog>
</package>
<package pkgid="0f61131ceabcc34e3436f61da268fe6971afad555f6df9244f1b14b672c09055" name="yast2-pkg-bindings" arch="src">
  <version epoch="0" ver="4.0.11" rel="lp150.2.6.1"/>
  <changelog author="lslezak@suse.cz" date="1476273600">- Added Pkg.SourceSetPriority() to allow changing the priority
  also for the already loaded packages (bsc#498266)
- 3.2.1</changelog>
  <changelog author="lslezak@suse.cz" date="1490788800">- Return the repository signature flag status in the
  Pkg.SourceGeneralData call (might be used for bsc#1009127)</changelog>
  <changelog author="lslezak@suse.cz" date="1490788801">- Fixed failure when trying to save a plugin service (bsc#1021117)
- 3.2.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1496404800">- Fix pkgGpgCheck callback crashing when reporting SrcPackages
  (bsc#1037210) (by mlandres)
- 3.2.3</changelog>
  <changelog author="lslezak@suse.cz" date="1498046400">- Do not crash when the repository URL is not defined (bsc#1043218)
- 3.2.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1502884800">- Add functions to handle product licenses (FATE#322276)
- 3.3.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503316800">- Add a Pkg.PrdHasLicenseConfirmed and
  Pkg.PrdMarkLicenseUnconfirmed (FATE#322276)
- Pkg.PrdGetLicenseToConfirm always returns the license, no matter
  whether is confirmed or not
- Add a second argument to Pkg.PrdGetLicenseToConfirm in order
  get the license translated to the given language
- 3.3.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Rename PrdMarkLicenseUnconfirmed to PrdMarkLicenseNotConfirmed
  (FATE#322276)
- 3.3.2</changelog>
  <changelog author="lslezak@suse.cz" date="1506081600">- Keep enabled recommended packages for the next solver runs
  when doing distribution upgrade (bsc#1059065)
- 4.0.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1506340800">- Add a CompareVersions function (related to fate#323273)
- 4.0.1</changelog>
  <changelog author="mvidner@suse.com" date="1508760000">- Do not crash after a callback is set, unset, then called
  (bsc#1063459)
- 4.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1508846400">- Report error when repository refresh fails during a service
  refresh (bsc#1064210)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1509105600">- Pkg.ResolvableProperties: return the "register_flavor" product
  property (related to bsc#896224)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1512648000">- Fixed Pkg.ExpandedUrl to return also the password part
  of the URL (bsc#1067007)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1516795200">- Log more details in PkgQueryProvides call
  (related to bsc#1072634)
- 4.0.6</changelog>
  <changelog author="lslezak@suse.cz" date="1517400000">- Added "transact_by" key to the PkgPropertiesAll call
  (improvement for bsc#1077882)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1518436800">- Add a PrdLicenseLocales function to get the list of available
  license translations for a given product (related to
  FATE#322276).
- 4.0.8</changelog>
  <changelog author="jsrain@suse.cz" date="1518782400">- always scan media for products to allow media identification
  (bsc#1080983)
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1526472000">- Ignore notification exception for failed plugin services,
  avoid errors when refreshing the zypp-plugin-spacewalk service
  on a system not managed by spacewalk (SUSE Manager)
  (bsc#1086768)
- 4.0.10</changelog>
  <changelog author="lslezak@suse.cz" date="1528113600">- Fixed Pkg.TargetInitializeOptions() to not reset the source
  manager if also the options are the same as used previously
  (bsc#1095702)
- 4.0.11</changelog>
</package>
<package pkgid="e9e8d614e070d418e76104ecbc63aec3068a9582edf18788f8e645f23bde5180" name="yast2-pkg-bindings" arch="x86_64">
  <version epoch="0" ver="4.0.11" rel="lp150.2.6.1"/>
  <changelog author="lslezak@suse.cz" date="1476273600">- Added Pkg.SourceSetPriority() to allow changing the priority
  also for the already loaded packages (bsc#498266)
- 3.2.1</changelog>
  <changelog author="lslezak@suse.cz" date="1490788800">- Return the repository signature flag status in the
  Pkg.SourceGeneralData call (might be used for bsc#1009127)</changelog>
  <changelog author="lslezak@suse.cz" date="1490788801">- Fixed failure when trying to save a plugin service (bsc#1021117)
- 3.2.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1496404800">- Fix pkgGpgCheck callback crashing when reporting SrcPackages
  (bsc#1037210) (by mlandres)
- 3.2.3</changelog>
  <changelog author="lslezak@suse.cz" date="1498046400">- Do not crash when the repository URL is not defined (bsc#1043218)
- 3.2.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1502884800">- Add functions to handle product licenses (FATE#322276)
- 3.3.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503316800">- Add a Pkg.PrdHasLicenseConfirmed and
  Pkg.PrdMarkLicenseUnconfirmed (FATE#322276)
- Pkg.PrdGetLicenseToConfirm always returns the license, no matter
  whether is confirmed or not
- Add a second argument to Pkg.PrdGetLicenseToConfirm in order
  get the license translated to the given language
- 3.3.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1503489600">- Rename PrdMarkLicenseUnconfirmed to PrdMarkLicenseNotConfirmed
  (FATE#322276)
- 3.3.2</changelog>
  <changelog author="lslezak@suse.cz" date="1506081600">- Keep enabled recommended packages for the next solver runs
  when doing distribution upgrade (bsc#1059065)
- 4.0.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1506340800">- Add a CompareVersions function (related to fate#323273)
- 4.0.1</changelog>
  <changelog author="mvidner@suse.com" date="1508760000">- Do not crash after a callback is set, unset, then called
  (bsc#1063459)
- 4.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1508846400">- Report error when repository refresh fails during a service
  refresh (bsc#1064210)
- 4.0.3</changelog>
  <changelog author="lslezak@suse.cz" date="1509105600">- Pkg.ResolvableProperties: return the "register_flavor" product
  property (related to bsc#896224)
- 4.0.4</changelog>
  <changelog author="lslezak@suse.cz" date="1512648000">- Fixed Pkg.ExpandedUrl to return also the password part
  of the URL (bsc#1067007)
- 4.0.5</changelog>
  <changelog author="lslezak@suse.cz" date="1516795200">- Log more details in PkgQueryProvides call
  (related to bsc#1072634)
- 4.0.6</changelog>
  <changelog author="lslezak@suse.cz" date="1517400000">- Added "transact_by" key to the PkgPropertiesAll call
  (improvement for bsc#1077882)
- 4.0.7</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1518436800">- Add a PrdLicenseLocales function to get the list of available
  license translations for a given product (related to
  FATE#322276).
- 4.0.8</changelog>
  <changelog author="jsrain@suse.cz" date="1518782400">- always scan media for products to allow media identification
  (bsc#1080983)
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1526472000">- Ignore notification exception for failed plugin services,
  avoid errors when refreshing the zypp-plugin-spacewalk service
  on a system not managed by spacewalk (SUSE Manager)
  (bsc#1086768)
- 4.0.10</changelog>
  <changelog author="lslezak@suse.cz" date="1528113600">- Fixed Pkg.TargetInitializeOptions() to not reset the source
  manager if also the options are the same as used previously
  (bsc#1095702)
- 4.0.11</changelog>
</package>
<package pkgid="8b90a840c6063fc0a25379677582c17afaf7941d735dcf2a0936dd36dcc8e404" name="yast2-pkg-bindings-devel-doc" arch="noarch">
  <version epoch="0" ver="4.0.10" rel="lp150.2.3.1"/>
  <changelog author="coolo@suse.de" date="1204718400">- fixing spec file syntax</changelog>
  <changelog author="coolo@suse.de" date="1205236800">- devtools requires redudant prefix definition</changelog>
  <changelog author="ma@suse.de" date="1207224000">- use repo name as mediaset label.</changelog>
  <changelog author="lslezak@suse.cz" date="1210939200">- documented lock API
- 2.16.35</changelog>
  <changelog author="coolo@suse.com" date="1322222400">- avoid duplicated index.html in installed docs</changelog>
  <changelog author="lslezak@suse.cz" date="1359374400">- fixed documentation build (bnc#800692)
- 2.23.1</changelog>
  <changelog author="lslezak@suse.cz" date="1371211200">- removed obsolete BuildRequires (blocxx, libgcrypt, doxygen,
  perl-XML-Writer)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375185600">- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1382011200">- remove usage of dropped y2doc generator
- 3.1.1</changelog>
</package>
<package pkgid="39959227f2943879e1e2424804e20b57f57a546dff962f6d3932cdff8a9a5631" name="yast2-pkg-bindings-devel-doc" arch="src">
  <version epoch="0" ver="4.0.10" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1185451200">- Initial version</changelog>
  <changelog author="mvidner@suse.cz" date="1191412800">- Do not try to package COPYRIGHT.english, it is gone from
  devtools (#299144).
- 2.16.0</changelog>
  <changelog author="lslezak@suse.cz" date="1197979200">- updated generating of the documentation to the new source file
  layout
- 2.16.7</changelog>
  <changelog author="coolo@suse.de" date="1204718400">- fixing spec file syntax</changelog>
  <changelog author="coolo@suse.de" date="1205236800">- devtools requires redudant prefix definition</changelog>
  <changelog author="ma@suse.de" date="1207224000">- use repo name as mediaset label.</changelog>
  <changelog author="lslezak@suse.cz" date="1210939200">- documented lock API
- 2.16.35</changelog>
  <changelog author="coolo@suse.com" date="1322222400">- avoid duplicated index.html in installed docs</changelog>
  <changelog author="lslezak@suse.cz" date="1359374400">- fixed documentation build (bnc#800692)
- 2.23.1</changelog>
  <changelog author="lslezak@suse.cz" date="1371211200">- removed obsolete BuildRequires (blocxx, libgcrypt, doxygen,
  perl-XML-Writer)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375185600">- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1382011200">- remove usage of dropped y2doc generator
- 3.1.1</changelog>
</package>
<package pkgid="cf413dcd3896a3920aa14d763343ce76d2beaaa6d1f401931a91f7b14469182d" name="yast2-pkg-bindings-devel-doc" arch="noarch">
  <version epoch="0" ver="4.0.11" rel="lp150.2.6.1"/>
  <changelog author="coolo@suse.de" date="1204718400">- fixing spec file syntax</changelog>
  <changelog author="coolo@suse.de" date="1205236800">- devtools requires redudant prefix definition</changelog>
  <changelog author="ma@suse.de" date="1207224000">- use repo name as mediaset label.</changelog>
  <changelog author="lslezak@suse.cz" date="1210939200">- documented lock API
- 2.16.35</changelog>
  <changelog author="coolo@suse.com" date="1322222400">- avoid duplicated index.html in installed docs</changelog>
  <changelog author="lslezak@suse.cz" date="1359374400">- fixed documentation build (bnc#800692)
- 2.23.1</changelog>
  <changelog author="lslezak@suse.cz" date="1371211200">- removed obsolete BuildRequires (blocxx, libgcrypt, doxygen,
  perl-XML-Writer)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375185600">- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1382011200">- remove usage of dropped y2doc generator
- 3.1.1</changelog>
</package>
<package pkgid="ba530071fa005a9e031e91af16be28b5c84bfd14878e3db189eac211a5f296c9" name="yast2-pkg-bindings-devel-doc" arch="src">
  <version epoch="0" ver="4.0.11" rel="lp150.2.6.1"/>
  <changelog author="lslezak@suse.cz" date="1185451200">- Initial version</changelog>
  <changelog author="mvidner@suse.cz" date="1191412800">- Do not try to package COPYRIGHT.english, it is gone from
  devtools (#299144).
- 2.16.0</changelog>
  <changelog author="lslezak@suse.cz" date="1197979200">- updated generating of the documentation to the new source file
  layout
- 2.16.7</changelog>
  <changelog author="coolo@suse.de" date="1204718400">- fixing spec file syntax</changelog>
  <changelog author="coolo@suse.de" date="1205236800">- devtools requires redudant prefix definition</changelog>
  <changelog author="ma@suse.de" date="1207224000">- use repo name as mediaset label.</changelog>
  <changelog author="lslezak@suse.cz" date="1210939200">- documented lock API
- 2.16.35</changelog>
  <changelog author="coolo@suse.com" date="1322222400">- avoid duplicated index.html in installed docs</changelog>
  <changelog author="lslezak@suse.cz" date="1359374400">- fixed documentation build (bnc#800692)
- 2.23.1</changelog>
  <changelog author="lslezak@suse.cz" date="1371211200">- removed obsolete BuildRequires (blocxx, libgcrypt, doxygen,
  perl-XML-Writer)</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375185600">- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1382011200">- remove usage of dropped y2doc generator
- 3.1.1</changelog>
</package>
<package pkgid="68e7321ccfec9079bf40be7f30187330b7a32fd70db927291ed21048f6c90180" name="yast2-printer" arch="src">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="jsmeix@suse.de" date="1421668800">- replace_network_test_with_echo.diff implements
  IPv6 support for YaST printer module (fate#312491).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668801">- modify_cupsd_conf.for_cups-browsed is an enhancement
  for /usr/lib/YaST2/bin/modify_cupsd_conf that provides
  additional support for cups-browsed (bnc#868241).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668802">- Enhanced modify_cupsd_conf.for_cups-browsed which now has
  some basic support for what was BrowseAddress up to CUPS 1.5.4
  via BrowseLocalProtocols settings for cups-browsed (bnc#868241).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668803">- cups_client_only.for_cups_since_version_1.6 is an enhancement
  for /usr/lib/YaST2/bin/cups_client_only that provides additional
  support when on a CUPS &gt;= 1.6 client system a CUPS &lt;= 1.5 server
  should be used via "ServerName &lt;name&gt;/version=1.1" (bnc#868241).
- Enhanced modify_cupsd_conf.for_cups-browsed which now has
  support when cups-browsed should poll CUPS &lt;= 1.5 servers
  via "BrowsePoll &lt;name&gt;/version=1.1" (bnc#868241).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668804">- test_remote_ipp.without_ping, test_remote_lpd.without_ping,
  test_remote_novell.without_ping, test_remote_smb.without_ping,
  and test_remote_socket.without_ping are replacements for
  test_remote_ipp, test_remote_lpd, test_remote_novell,
  test_remote_smb and test_remote_socket in /usr/lib/YaST2/bin/
  that do no longer use 'ping' so that there is no need to
  distinguish between IPv4 and IPv6 and there is no longer
  a requirement for 'netcat' (fate#312491).
- Adapted cups_client_only.for_cups_since_version_1.6 so that
  it also does no longer use 'ping' or 'netcat' (fate#312491).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668805">- use_fast_append_instead_of_slow_add.diff replaces
  slow Builtins.add() with fast '&lt;&lt;' append operator
  where needed to avoid "hang up impression" (bnc#877516).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668806">- Added timeouts to cups_client_only.for_cups_since_version_1.6,
  replace_network_test_with_echo.diff, test_remote_ipp.without_ping,
  test_remote_lpd.without_ping, and test_remote_socket.without_ping
  (i.e. all test that run "echo -n '' &gt;/dev/tcp/$SERVER/$PORT")
  so that those tests exit in any case after 2 seconds and do no
  longer hang in possibly annoying long default system timeouts
  in "unfriendly" network environments e.g. when a firewall
  drops packages without any response (fate#312491).
- Added "/version=1.1" support to test_remote_ipp.without_ping
  see the entry dated "Tue Apr 29 15:00:04 CEST 2014" below
  (bnc#868241).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668807">- In replace_network_test_with_echo.diff replace the therein new
  string "Server name must not be empty" by the elsewhere existing
  string "Servername could not be empty." that exists already
  in the list of translated strings so that its translation
  is shown in non-English locales (bnc#887562).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668808">- restart_cupsd_when_driver_RPMs_changed.diff shows the
  "Restart locally running CUPS daemon" user confirmation popup
  because usually a change in printer driver RPMs (installation
  or removal) changes print job processing which requires
  a restart of cupsd (bnc#888782).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668809">- disable_legacy_items_and_add_beh_requirement.diff
  disables legacy stuff for SLE12 (see comment#18 in bnc#871548
  and for other legacy stuff see bnc#892395 and bnc#877520) and
  furthermore it adds the cups-backends RPM as needed package
  when using beh (beh = Backend Error Handler).</changelog>
  <changelog author="jreidinger@suse.com" date="1443700800">- clean up patches and integrate it in git repositories
- 3.1.2</changelog>
  <changelog author="lslezak@suse.cz" date="1450699200">- Use the correct RPM Group (System/YaST) (bsc#951817)
- 3.1.3</changelog>
  <changelog author="schubi@suse.de" date="1459771200">- Using "uptime" from package yast2 instead of Builtins.time.
  Cleanup for bnc#956730.
- 3.1.4</changelog>
  <changelog author="mchandras@suse.de" date="1463572800">- Remove /bin/ping dependency. All references to 'ping' have been
  removed in 3.1.2. This allows us to not depend to iputils anymore.
- 3.1.5</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464782400">- Drop yast2-printer-devel-doc package (fate#320356)
- 3.1.6</changelog>
  <changelog author="lslezak@suse.cz" date="1485172800">- Dropped yast2-core-devel build dependency, it is not needed
  anymore, fix up for the documentation removal (fate#320356)
- 3.2.0</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524139200">- Fix help texts so they can be properly translated (bsc#1082257).
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1527249600">- Fixed alignment of input fields in "Connection Wizard".
  (bnc#1091290)
- 4.0.2</changelog>
</package>
<package pkgid="9062f42ab1ce6ca21c4866415fb5a92fdb25365a0922f84e02c2e782297482dc" name="yast2-printer" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="jsmeix@suse.de" date="1421668800">- replace_network_test_with_echo.diff implements
  IPv6 support for YaST printer module (fate#312491).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668801">- modify_cupsd_conf.for_cups-browsed is an enhancement
  for /usr/lib/YaST2/bin/modify_cupsd_conf that provides
  additional support for cups-browsed (bnc#868241).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668802">- Enhanced modify_cupsd_conf.for_cups-browsed which now has
  some basic support for what was BrowseAddress up to CUPS 1.5.4
  via BrowseLocalProtocols settings for cups-browsed (bnc#868241).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668803">- cups_client_only.for_cups_since_version_1.6 is an enhancement
  for /usr/lib/YaST2/bin/cups_client_only that provides additional
  support when on a CUPS &gt;= 1.6 client system a CUPS &lt;= 1.5 server
  should be used via "ServerName &lt;name&gt;/version=1.1" (bnc#868241).
- Enhanced modify_cupsd_conf.for_cups-browsed which now has
  support when cups-browsed should poll CUPS &lt;= 1.5 servers
  via "BrowsePoll &lt;name&gt;/version=1.1" (bnc#868241).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668804">- test_remote_ipp.without_ping, test_remote_lpd.without_ping,
  test_remote_novell.without_ping, test_remote_smb.without_ping,
  and test_remote_socket.without_ping are replacements for
  test_remote_ipp, test_remote_lpd, test_remote_novell,
  test_remote_smb and test_remote_socket in /usr/lib/YaST2/bin/
  that do no longer use 'ping' so that there is no need to
  distinguish between IPv4 and IPv6 and there is no longer
  a requirement for 'netcat' (fate#312491).
- Adapted cups_client_only.for_cups_since_version_1.6 so that
  it also does no longer use 'ping' or 'netcat' (fate#312491).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668805">- use_fast_append_instead_of_slow_add.diff replaces
  slow Builtins.add() with fast '&lt;&lt;' append operator
  where needed to avoid "hang up impression" (bnc#877516).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668806">- Added timeouts to cups_client_only.for_cups_since_version_1.6,
  replace_network_test_with_echo.diff, test_remote_ipp.without_ping,
  test_remote_lpd.without_ping, and test_remote_socket.without_ping
  (i.e. all test that run "echo -n '' &gt;/dev/tcp/$SERVER/$PORT")
  so that those tests exit in any case after 2 seconds and do no
  longer hang in possibly annoying long default system timeouts
  in "unfriendly" network environments e.g. when a firewall
  drops packages without any response (fate#312491).
- Added "/version=1.1" support to test_remote_ipp.without_ping
  see the entry dated "Tue Apr 29 15:00:04 CEST 2014" below
  (bnc#868241).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668807">- In replace_network_test_with_echo.diff replace the therein new
  string "Server name must not be empty" by the elsewhere existing
  string "Servername could not be empty." that exists already
  in the list of translated strings so that its translation
  is shown in non-English locales (bnc#887562).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668808">- restart_cupsd_when_driver_RPMs_changed.diff shows the
  "Restart locally running CUPS daemon" user confirmation popup
  because usually a change in printer driver RPMs (installation
  or removal) changes print job processing which requires
  a restart of cupsd (bnc#888782).</changelog>
  <changelog author="jsmeix@suse.de" date="1421668809">- disable_legacy_items_and_add_beh_requirement.diff
  disables legacy stuff for SLE12 (see comment#18 in bnc#871548
  and for other legacy stuff see bnc#892395 and bnc#877520) and
  furthermore it adds the cups-backends RPM as needed package
  when using beh (beh = Backend Error Handler).</changelog>
  <changelog author="jreidinger@suse.com" date="1443700800">- clean up patches and integrate it in git repositories
- 3.1.2</changelog>
  <changelog author="lslezak@suse.cz" date="1450699200">- Use the correct RPM Group (System/YaST) (bsc#951817)
- 3.1.3</changelog>
  <changelog author="schubi@suse.de" date="1459771200">- Using "uptime" from package yast2 instead of Builtins.time.
  Cleanup for bnc#956730.
- 3.1.4</changelog>
  <changelog author="mchandras@suse.de" date="1463572800">- Remove /bin/ping dependency. All references to 'ping' have been
  removed in 3.1.2. This allows us to not depend to iputils anymore.
- 3.1.5</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464782400">- Drop yast2-printer-devel-doc package (fate#320356)
- 3.1.6</changelog>
  <changelog author="lslezak@suse.cz" date="1485172800">- Dropped yast2-core-devel build dependency, it is not needed
  anymore, fix up for the documentation removal (fate#320356)
- 3.2.0</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1524139200">- Fix help texts so they can be properly translated (bsc#1082257).
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1527249600">- Fixed alignment of input fields in "Connection Wizard".
  (bnc#1091290)
- 4.0.2</changelog>
</package>
<package pkgid="96249aa6eb5bc3c135e27f839f46264ca8513808f603ec638c19744e71f2882b" name="yast2-proxy" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.cz" date="1334059200">- Split off yast2-network
- 2.22.0</changelog>
  <changelog author="mvidner@suse.cz" date="1334145600">- Moved over one forgotten file.
- 2.22.1</changelog>
  <changelog author="lslezak@suse.cz" date="1373976000">- move an include statement to the top level (needed for Ruby
  translation)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="mvidner@suse.com" date="1412769600">- Fixed Test Proxy Settings always reporting failure (bnc#853725,
  bnc#871945).
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="mvidner@suse.com" date="1428580800">- Write also --noproxy to .curlrc otherwise it is ignored even if
  set in the environment (bsc#923788).
- 3.1.4</changelog>
  <changelog author="mvidner@suse.com" date="1434024000">- Fixed the last change not to crash with "internal error in
  WriteCurlrc" when installing with a proxy (boo#929868).
- 3.1.5</changelog>
  <changelog author="mvidner@suse.com" date="1434110400">- If PROXY_ENABLED is not set, interpret it as disabled,
  like the rest of the system does (boo#934925).
- Internal cleanups:
  - Got rid of autotools.
  - Converted legacy testsuite to RSpec.
  - Moved code out of clients for better testability.
- 3.1.6</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="mvidner@suse.com" date="1525953600">- Clean up the no_proxy value: not all clients ignore spaces
  (bsc#1089796)
- 4.0.1</changelog>
</package>
<package pkgid="d868b21d1aa3d4051f62b1734627e45255775eea29911d57a58a3bf1725cfe17" name="yast2-proxy" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.cz" date="1334059200">- Split off yast2-network
- 2.22.0</changelog>
  <changelog author="mvidner@suse.cz" date="1334145600">- Moved over one forgotten file.
- 2.22.1</changelog>
  <changelog author="lslezak@suse.cz" date="1373976000">- move an include statement to the top level (needed for Ruby
  translation)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="mvidner@suse.com" date="1412769600">- Fixed Test Proxy Settings always reporting failure (bnc#853725,
  bnc#871945).
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="mvidner@suse.com" date="1428580800">- Write also --noproxy to .curlrc otherwise it is ignored even if
  set in the environment (bsc#923788).
- 3.1.4</changelog>
  <changelog author="mvidner@suse.com" date="1434024000">- Fixed the last change not to crash with "internal error in
  WriteCurlrc" when installing with a proxy (boo#929868).
- 3.1.5</changelog>
  <changelog author="mvidner@suse.com" date="1434110400">- If PROXY_ENABLED is not set, interpret it as disabled,
  like the rest of the system does (boo#934925).
- Internal cleanups:
  - Got rid of autotools.
  - Converted legacy testsuite to RSpec.
  - Moved code out of clients for better testability.
- 3.1.6</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="mvidner@suse.com" date="1525953600">- Clean up the no_proxy value: not all clients ignore spaces
  (bsc#1089796)
- 4.0.1</changelog>
</package>
<package pkgid="cf3140efec468fe1681c0f3ea0f77ea73fbf9d14915d79d213a474d9fe2c9c78" name="yast2-proxy" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="lp150.2.6.1"/>
  <changelog author="mvidner@suse.cz" date="1334059200">- Split off yast2-network
- 2.22.0</changelog>
  <changelog author="mvidner@suse.cz" date="1334145600">- Moved over one forgotten file.
- 2.22.1</changelog>
  <changelog author="lslezak@suse.cz" date="1373976000">- move an include statement to the top level (needed for Ruby
  translation)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="mvidner@suse.com" date="1412769600">- Fixed Test Proxy Settings always reporting failure (bnc#853725,
  bnc#871945).
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="mvidner@suse.com" date="1428580800">- Write also --noproxy to .curlrc otherwise it is ignored even if
  set in the environment (bsc#923788).
- 3.1.4</changelog>
  <changelog author="mvidner@suse.com" date="1434024000">- Fixed the last change not to crash with "internal error in
  WriteCurlrc" when installing with a proxy (boo#929868).
- 3.1.5</changelog>
  <changelog author="mvidner@suse.com" date="1434110400">- If PROXY_ENABLED is not set, interpret it as disabled,
  like the rest of the system does (boo#934925).
- Internal cleanups:
  - Got rid of autotools.
  - Converted legacy testsuite to RSpec.
  - Moved code out of clients for better testability.
- 3.1.6</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="mvidner@suse.com" date="1525953600">- Clean up the no_proxy value: not all clients ignore spaces
  (bsc#1089796)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="82141895309802f3aa9169a9dab98fffa1e5068183c942ad20f914f3089bc2ce" name="yast2-proxy" arch="src">
  <version epoch="0" ver="4.0.2" rel="lp150.2.6.1"/>
  <changelog author="mvidner@suse.cz" date="1334059200">- Split off yast2-network
- 2.22.0</changelog>
  <changelog author="mvidner@suse.cz" date="1334145600">- Moved over one forgotten file.
- 2.22.1</changelog>
  <changelog author="lslezak@suse.cz" date="1373976000">- move an include statement to the top level (needed for Ruby
  translation)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="mvidner@suse.com" date="1412769600">- Fixed Test Proxy Settings always reporting failure (bnc#853725,
  bnc#871945).
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="mvidner@suse.com" date="1428580800">- Write also --noproxy to .curlrc otherwise it is ignored even if
  set in the environment (bsc#923788).
- 3.1.4</changelog>
  <changelog author="mvidner@suse.com" date="1434024000">- Fixed the last change not to crash with "internal error in
  WriteCurlrc" when installing with a proxy (boo#929868).
- 3.1.5</changelog>
  <changelog author="mvidner@suse.com" date="1434110400">- If PROXY_ENABLED is not set, interpret it as disabled,
  like the rest of the system does (boo#934925).
- Internal cleanups:
  - Got rid of autotools.
  - Converted legacy testsuite to RSpec.
  - Moved code out of clients for better testability.
- 3.1.6</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="mvidner@suse.com" date="1525953600">- Clean up the no_proxy value: not all clients ignore spaces
  (bsc#1089796)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="cb4048f0367fa458cfe3c0bb271d1d0d97a75dfd1a01a38333c5e295fcb4eb65" name="yast2-rdp" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="mzugec@suse.cz" date="1263816000">- fixed rdp.desktop file (Categories)
- 2.17.1</changelog>
  <changelog author="tiwai@suse.com" date="1331208000">- Fixed module behavior when installation of requested packages
  fails (bnc #744100)
- 2.17.2</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="varkoly@suse.com" date="1466510400">- FATE#320363 Install and enable xrdp by default</changelog>
  <changelog author="varkoly@suse.com" date="1468411200">- FATE#320363 Install and enable xrdp by default
  When using the rdp proposal activate is the default.</changelog>
  <changelog author="hguo@suse.com" date="1470312000">- Remove unnecessary files from source archive and fix build errors.
- Fix firewall setup and rdp service activation for an installed
  system. (bsc#988353 bsc#991238 bsc#988200)
- Other tidy-ups around spec file and source code.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517832000">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520856000">- Use firewalld terminal server service definition (bsc#1079133).
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530014400">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="97967071305f8a1250ba0310c930dcce1225c8ad7c41a371c1b4ac8c69a17395" name="yast2-rdp" arch="src">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="dreveman@novell.com" date="1232971200">- initial version</changelog>
  <changelog author="mzugec@suse.cz" date="1263816000">- fixed rdp.desktop file (Categories)
- 2.17.1</changelog>
  <changelog author="tiwai@suse.com" date="1331208000">- Fixed module behavior when installation of requested packages
  fails (bnc #744100)
- 2.17.2</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="varkoly@suse.com" date="1466510400">- FATE#320363 Install and enable xrdp by default</changelog>
  <changelog author="varkoly@suse.com" date="1468411200">- FATE#320363 Install and enable xrdp by default
  When using the rdp proposal activate is the default.</changelog>
  <changelog author="hguo@suse.com" date="1470312000">- Remove unnecessary files from source archive and fix build errors.
- Fix firewall setup and rdp service activation for an installed
  system. (bsc#988353 bsc#991238 bsc#988200)
- Other tidy-ups around spec file and source code.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517832000">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1520856000">- Use firewalld terminal server service definition (bsc#1079133).
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530014400">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="068d043f8bb0451cd1aed7577e7641f25bfec5161f69fb5f6cb6c318953f3610" name="yast2-rmt" arch="noarch">
  <version epoch="0" ver="1.0.0" rel="lp150.2.3.2"/>
  <changelog author="thutterer@suse.com" date="1517313600">- create new YaST module for RMT configuration
- only a WIP message is displayed so far</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1520251200">- version 0.0.2
- Add setup steps for SCC and DB (fate#325115)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1522756800">- version 0.0.3
- Add setup steps for SSL certificate generation (fate#325115)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1524052800">- version 0.0.4
- Allow a preexisting SSL CA:
  https://github.com/SUSE/yast2-rmt/pull/11</changelog>
  <changelog author="fschueller@suse.com" date="1526644800">- version 1.0.0
- Release for SLES15 (bsc#1093879)
- UI cleanups
- Enable timers with rmt service start
- Add final configuration summary</changelog>
</package>
<package pkgid="faaf6bc4737a4ddc0c9ff3bcc3b2e4e6229521f935df7e37cc17a3507bcf6291" name="yast2-rmt" arch="src">
  <version epoch="0" ver="1.0.0" rel="lp150.2.3.2"/>
  <changelog author="thutterer@suse.com" date="1517313600">- create new YaST module for RMT configuration
- only a WIP message is displayed so far</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1520251200">- version 0.0.2
- Add setup steps for SCC and DB (fate#325115)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1522756800">- version 0.0.3
- Add setup steps for SSL certificate generation (fate#325115)</changelog>
  <changelog author="ikapelyukhin@suse.com" date="1524052800">- version 0.0.4
- Allow a preexisting SSL CA:
  https://github.com/SUSE/yast2-rmt/pull/11</changelog>
  <changelog author="fschueller@suse.com" date="1526644800">- version 1.0.0
- Release for SLES15 (bsc#1093879)
- UI cleanups
- Enable timers with rmt service start
- Add final configuration summary</changelog>
</package>
<package pkgid="6352ec4b7a216e4e0b1d1db1b4dd3e85fd75bde6d0f696a24fc39487d1038e56" name="yast2-samba-server" arch="noarch">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="vmoravec@suse.com" date="1394107200">- Fix tests and add url to spec
- 3.1.4</changelog>
  <changelog author="ddiss@suse.com" date="1395921600">- Refer to vfs_snapper and vfs_btrfs man pages in help text; (bnc#870570).
- Default to a standalone server instead of a PDC; (bnc#870669).
- 3.1.5</changelog>
  <changelog author="vmoravec@suse.com" date="1396008000">- Fix failing testsuite
- 3.1.6</changelog>
  <changelog author="locilka@suse.com" date="1398168000">- Deprecated Service method calls replaced with new ones
- 3.1.7</changelog>
  <changelog author="mfilka@suse.com" date="1399377600">- Adapted testsuite to last changes in Service module.
- 3.1.8</changelog>
  <changelog author="noel.power@suse.com" date="1404648000">- Fix duplicated 'Firewall Settings' string on Startup tab; (bnc#884058)
- 3.1.9</changelog>
  <changelog author="ddiss@suse.com" date="1406289600">- Ensure CUPS is installed if printer sharing is configured; (bnc#873703).
- 3.1.10</changelog>
  <changelog author="nopower@suse.com" date="1415793600">- Squash "Possible precedence issue with control flow operator
  warning; (bnc#901597)
- 3.1.11</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="nopower@suse.com" date="1421150400">- When joining domain provide osName &amp; osVer arguments to "net ads join"
  (bnc#873922).
- 3.1.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1447675200">- Fix validation of AutoYaST profiles (bsc#954412)
- 3.1.13</changelog>
  <changelog author="lmuelle@suse.com" date="1458734400">- Don't require libsmbclient as it's pulled in by libsmbclient-devel;
  (bsc#972197).
- 3.1.14</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1461672000">- Fix outdated message regarding smb and nmb services restart
  (bsc#975880).
- 3.1.15</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.16</changelog>
  <changelog author="kanderssen@suse.com" date="1489665600">- Fix string comparisons in SambaBackendLDAP.pm and YaPI/Samba.pm
  (bsc#1029528)
- 3.2.0</changelog>
  <changelog author="nopower@suse.com" date="1491220800">- fix duplicated key warnings (bsc#1031613).
- Don't require install of cups for yast samba-server
  (bsc#1024670).
- 3.2.1</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Drop NT style PDC/BDC configuration wizard (fate#323806)
- 3.2.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517832000">- SuSEFirewall2 replaced by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1519905600">- Use firewalld samba service definition (bsc#1083456)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="e914f3658f13e6a48ff52f954016de24ce7d9ae038e2a88b0efcf13ef18ad8dd" name="yast2-samba-server" arch="src">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="vmoravec@suse.com" date="1394107200">- Fix tests and add url to spec
- 3.1.4</changelog>
  <changelog author="ddiss@suse.com" date="1395921600">- Refer to vfs_snapper and vfs_btrfs man pages in help text; (bnc#870570).
- Default to a standalone server instead of a PDC; (bnc#870669).
- 3.1.5</changelog>
  <changelog author="vmoravec@suse.com" date="1396008000">- Fix failing testsuite
- 3.1.6</changelog>
  <changelog author="locilka@suse.com" date="1398168000">- Deprecated Service method calls replaced with new ones
- 3.1.7</changelog>
  <changelog author="mfilka@suse.com" date="1399377600">- Adapted testsuite to last changes in Service module.
- 3.1.8</changelog>
  <changelog author="noel.power@suse.com" date="1404648000">- Fix duplicated 'Firewall Settings' string on Startup tab; (bnc#884058)
- 3.1.9</changelog>
  <changelog author="ddiss@suse.com" date="1406289600">- Ensure CUPS is installed if printer sharing is configured; (bnc#873703).
- 3.1.10</changelog>
  <changelog author="nopower@suse.com" date="1415793600">- Squash "Possible precedence issue with control flow operator
  warning; (bnc#901597)
- 3.1.11</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="nopower@suse.com" date="1421150400">- When joining domain provide osName &amp; osVer arguments to "net ads join"
  (bnc#873922).
- 3.1.12</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1447675200">- Fix validation of AutoYaST profiles (bsc#954412)
- 3.1.13</changelog>
  <changelog author="lmuelle@suse.com" date="1458734400">- Don't require libsmbclient as it's pulled in by libsmbclient-devel;
  (bsc#972197).
- 3.1.14</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1461672000">- Fix outdated message regarding smb and nmb services restart
  (bsc#975880).
- 3.1.15</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.16</changelog>
  <changelog author="kanderssen@suse.com" date="1489665600">- Fix string comparisons in SambaBackendLDAP.pm and YaPI/Samba.pm
  (bsc#1029528)
- 3.2.0</changelog>
  <changelog author="nopower@suse.com" date="1491220800">- fix duplicated key warnings (bsc#1031613).
- Don't require install of cups for yast samba-server
  (bsc#1024670).
- 3.2.1</changelog>
  <changelog author="scabrero@suse.com" date="1501070400">- Drop NT style PDC/BDC configuration wizard (fate#323806)
- 3.2.2</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517832000">- SuSEFirewall2 replaced by firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1519905600">- Use firewalld samba service definition (bsc#1083456)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="8a70af323cf49106d9ab0a5ec2e2fad077deb648f4444a0fdaf6c10543485361" name="yast2-sound" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1374753600">- documentation update
- move development documentation to devel-doc subpackage
- resolved gcc and doxygen warnings
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1375876800">- generate the sound card database in YAML format (instead of
  obsolete YCP), use YAML data files
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1378209600">- added AudioScience cards to the manual card selection
  (bnc#832097, fate#310119)
- 3.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1382011200">- do not crash during sound card removal (bnc#845928)
  (workaround for Ops.is() not working properly with typed maps
  and arrays)</changelog>
  <changelog author="lslezak@suse.cz" date="1383739200">- display only 3 columns in the volume dialog to make the window
  narrower (bnc#848706)
- 3.1.1</changelog>
  <changelog author="locilka@suse.com" date="1383912000">- Using unified API for handling Kernel modules to be loaded
  on boot (bnc#838185)
- 3.1.2</changelog>
  <changelog author="lslezak@suse.cz" date="1384948800">- removed automatic 2nd stage support (the 2nd stage has been
  dropped completely) (FATE#314695)
- 3.1.3</changelog>
  <changelog author="ro@suse.de" date="1390996800">- set excludearch for i586 and s390 as SLE-12 does not build a
  runnable kernel there</changelog>
  <changelog author="jreidinger@suse.com" date="1393588800">- Drop joystick for sound card ports as it is dropped also in
  alsa (BNC#865350)
- improve excludearch to be only for SLE-12 as opensuse stil builds
  working x86
- 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="lslezak@suse.cz" date="1418904000">- fixed bashism in "alsadrivers" script (authored by "Ledest")
- 3.1.6</changelog>
  <changelog author="lslezak@suse.cz" date="1422446400">- do not set any icon in Confirm.Detection() call
- 3.1.7</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Enable build for Leap 42.1 (boo#945037).</changelog>
  <changelog author="lslezak@suse.cz" date="1444219200">- do not check for %suse_version == 1315, the existing check for
  %is_opensuse is sufficient (bsc#949046)
- 3.1.8</changelog>
  <changelog author="cwh@suse.com" date="1458734400">- Fixed dependency on yast2 version that contains .proc.modules
  agent (bsc#972310)
- Fixed regexp to respect changed output of modprobe (bsc#972315)
- 3.1.9</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464782400">- Drop yast2-sound-devel-doc package (fate#320356)
- 3.1.10</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="229badfc7cb49afe36070d8b7f27dcfcdf8187cd3bdbb472d5d76615b51e9afc" name="yast2-sound" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="lslezak@suse.cz" date="1374753600">- documentation update
- move development documentation to devel-doc subpackage
- resolved gcc and doxygen warnings
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1375876800">- generate the sound card database in YAML format (instead of
  obsolete YCP), use YAML data files
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1378209600">- added AudioScience cards to the manual card selection
  (bnc#832097, fate#310119)
- 3.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1382011200">- do not crash during sound card removal (bnc#845928)
  (workaround for Ops.is() not working properly with typed maps
  and arrays)</changelog>
  <changelog author="lslezak@suse.cz" date="1383739200">- display only 3 columns in the volume dialog to make the window
  narrower (bnc#848706)
- 3.1.1</changelog>
  <changelog author="locilka@suse.com" date="1383912000">- Using unified API for handling Kernel modules to be loaded
  on boot (bnc#838185)
- 3.1.2</changelog>
  <changelog author="lslezak@suse.cz" date="1384948800">- removed automatic 2nd stage support (the 2nd stage has been
  dropped completely) (FATE#314695)
- 3.1.3</changelog>
  <changelog author="ro@suse.de" date="1390996800">- set excludearch for i586 and s390 as SLE-12 does not build a
  runnable kernel there</changelog>
  <changelog author="jreidinger@suse.com" date="1393588800">- Drop joystick for sound card ports as it is dropped also in
  alsa (BNC#865350)
- improve excludearch to be only for SLE-12 as opensuse stil builds
  working x86
- 3.1.4</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="lslezak@suse.cz" date="1418904000">- fixed bashism in "alsadrivers" script (authored by "Ledest")
- 3.1.6</changelog>
  <changelog author="lslezak@suse.cz" date="1422446400">- do not set any icon in Confirm.Detection() call
- 3.1.7</changelog>
  <changelog author="dimstar@opensuse.org" date="1442577600">- Enable build for Leap 42.1 (boo#945037).</changelog>
  <changelog author="lslezak@suse.cz" date="1444219200">- do not check for %suse_version == 1315, the existing check for
  %is_opensuse is sufficient (bsc#949046)
- 3.1.8</changelog>
  <changelog author="cwh@suse.com" date="1458734400">- Fixed dependency on yast2 version that contains .proc.modules
  agent (bsc#972310)
- Fixed regexp to respect changed output of modprobe (bsc#972315)
- 3.1.9</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464782400">- Drop yast2-sound-devel-doc package (fate#320356)
- 3.1.10</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="3023dff910a33280635dcbc5a6224437e2a1e3e102fb213210d937839fca6218" name="yast2-squid" arch="src">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="jsrain@suse.cz" date="1267185600">- fixed translations of language names (bnc#580494)</changelog>
  <changelog author="jsrain@suse.cz" date="1304510400">- fixed typos (bnc#690239)</changelog>
  <changelog author="jreidinger@novell.com" date="1309176000">- use ButtonBox instead of HBox for OK/Cancel buttons (bnc#701271)
- 2.21.0</changelog>
  <changelog author="jsrain@suse.cz" date="1310126400">- fixed typo (bnc#703240)
- 2.21.1</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="visnov@suse.cz" date="1317211200">- set dialog title
- 2.21.2</changelog>
  <changelog author="coolo@suse.com" date="1322222400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts</changelog>
  <changelog author="locilka@suse.com" date="1366286400">- Do not block squid configuration if SuSEfirewall can't be read
  (bnc#808722)
- 2.21.3</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="locilka@suse.com" date="1396267200">- Old testsuites adapted to the new Service/Systemd
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1396612800">- Adapt to new paths to error pages messages (bnc#871873)
- 3.1.3</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="jreidinger@suse.com" date="1435838400">- remove obsolete emulate_http_log config option (bnc#928896)
- 3.1.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.5</changelog>
  <changelog author="lslezak@suse.cz" date="1507896000">- Replace the generic "boost-devel" build dependency with more
  specific "libboost_regex-devel" (bsc#1062805)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="25773a0cc292afacc4e2827a7b540d1eca30af7a968cfab3c1a484677be07a21" name="yast2-squid" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="jsrain@suse.cz" date="1267185600">- fixed translations of language names (bnc#580494)</changelog>
  <changelog author="jsrain@suse.cz" date="1304510400">- fixed typos (bnc#690239)</changelog>
  <changelog author="jreidinger@novell.com" date="1309176000">- use ButtonBox instead of HBox for OK/Cancel buttons (bnc#701271)
- 2.21.0</changelog>
  <changelog author="jsrain@suse.cz" date="1310126400">- fixed typo (bnc#703240)
- 2.21.1</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="visnov@suse.cz" date="1317211200">- set dialog title
- 2.21.2</changelog>
  <changelog author="coolo@suse.com" date="1322222400">- add libtool as buildrequire to avoid implicit dependency</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts</changelog>
  <changelog author="locilka@suse.com" date="1366286400">- Do not block squid configuration if SuSEfirewall can't be read
  (bnc#808722)
- 2.21.3</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="locilka@suse.com" date="1396267200">- Old testsuites adapted to the new Service/Systemd
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1396612800">- Adapt to new paths to error pages messages (bnc#871873)
- 3.1.3</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="jreidinger@suse.com" date="1435838400">- remove obsolete emulate_http_log config option (bnc#928896)
- 3.1.4</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465300800">- Stop generating autodocs (fate#320356)
- 3.1.5</changelog>
  <changelog author="lslezak@suse.cz" date="1507896000">- Replace the generic "boost-devel" build dependency with more
  specific "libboost_regex-devel" (bsc#1062805)
- 4.0.0</changelog>
  <changelog author="knut.anderssen@suse.com" date="1517227200">- Replace SuSEFirewall2 by firewalld (fate#323460)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="4915ed846350c8eddfcd2048a8397317bda41ee7e85aef34f60e4045cc23e710" name="yast2-storage-ng" arch="src">
  <version epoch="0" ver="4.0.183" rel="lp150.2.3.1"/>
  <changelog author="shundhammer@suse.com" date="1525262400">- Dump devicegraph and actions to separate human readable files
  (part of fate#318196)
- 4.0.170</changelog>
  <changelog author="shundhammer@suse.com" date="1525348800">- Don't require rspec/mocks (not present in inst-sys)
  (part of fate#318196)
- 4.0.171</changelog>
  <changelog author="ancor@suse.com" date="1525348801">- Set fs_passno to 2 for ext2/3/4 filesystems assigned to non-root
  mount points (bsc#1078703).
- 4.0.172</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- AutoYaST: handle &lt;subvolumes_prefix/&gt; and &lt;subvolumes&gt; empty
  values properly (bsc#1076337, bsc#1090095 and bsc#1091669).
- 4.0.173</changelog>
  <changelog author="jlopez@suse.com" date="1525435201">- Partitioner: added option to import mount points (part of
  fate#318196 and bsc#1083851).
- 4.0.174</changelog>
  <changelog author="aschnell@suse.com" date="1525435202">- provide function to disable MD auto assembly (bsc#1090690)
- provide function to inhibit udisks from doing mounts
- use these two functions when running expert partitioner
- 4.0.175</changelog>
  <changelog author="shundhammer@suse.com" date="1525694400">- Dump devicegraphs and actions in better strategic places
  (part of fate#318196)
- Make sure not to write LUKS passwords to YAML dump files
- 4.0.176</changelog>
  <changelog author="shundhammer@suse.com" date="1525780800">- Add note to YAML files for devices not supported in YAML
  (part of fate#318196)
- 4.0.177</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525867200">- AutoYaST: do not crash when size is set to 'auto' for a partition
  without a mount point (bsc#1092414).
- 4.0.178</changelog>
  <changelog author="ancor@suse.com" date="1526040000">- Partitioner: "Configure..." button allowing to execute the
  YaST clients for iSCI, FCoE, DASD, zFCP and XPRAM (bsc#1090753).</changelog>
  <changelog author="jlopez@suse.com" date="1526040001">- Partitioner: allow to select only valid parity algorithms when
  creating a new MD RAID (bsc#1090182).</changelog>
  <changelog author="jlopez@suse.com" date="1526040002">- Partitioner: fix buttons to abort and to go back
  (part of fate#318196 and related to bsc#1075443).
- Partitioner: fixed detection of reprobed system to avoid
  unnecessary proposal re-calculation.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040003">- Partitioner: check whether required packages are installed
  before committing changes to disk (bsc#1089508).
- 4.0.179</changelog>
  <changelog author="ancor@suse.com" date="1526299200">- Expose the active flag of the MountPoint class (needed for the
  definitive fix for bsc#1064437 in modern distributions).
- 4.0.180</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526472000">- Partitioner: fix several translation issues (bsc#1081837 and
  bsc#1081601).</changelog>
  <changelog author="snwint@suse.com" date="1526472001">- don't reuse prep partitions larger than 8 MiB (bsc#1090019)
- 4.0.181</changelog>
  <changelog author="jlopez@suse.com" date="1526472002">- Fixed detection of candidate disks for installation
  (bsc#1091047).
- 4.0.182</changelog>
  <changelog author="jlopez@suse.com" date="1526558400">- Fixed tests to avoid to require files provided by
  yast-installation package (needed for bsc#1091047).</changelog>
  <changelog author="jlopez@suse.com" date="1526558401">- Allow to consider MD RAIDs as BIOS RAIDs by using the env
  variable LIBSTORAGE_MDPART (bsc#1092417).</changelog>
  <changelog author="ancor@suse.com" date="1526558402">- Added to the installer a detailed description about the origin of
  the partitioning layout, as discussed in bsc#1089274.
- 4.0.183</changelog>
</package>
<package pkgid="0a365d53c16dcf1b1478e6bb8542baa432c18b077cde31be941cba365f9cf8fe" name="yast2-storage-ng" arch="x86_64">
  <version epoch="0" ver="4.0.183" rel="lp150.2.3.1"/>
  <changelog author="shundhammer@suse.com" date="1525262400">- Dump devicegraph and actions to separate human readable files
  (part of fate#318196)
- 4.0.170</changelog>
  <changelog author="shundhammer@suse.com" date="1525348800">- Don't require rspec/mocks (not present in inst-sys)
  (part of fate#318196)
- 4.0.171</changelog>
  <changelog author="ancor@suse.com" date="1525348801">- Set fs_passno to 2 for ext2/3/4 filesystems assigned to non-root
  mount points (bsc#1078703).
- 4.0.172</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- AutoYaST: handle &lt;subvolumes_prefix/&gt; and &lt;subvolumes&gt; empty
  values properly (bsc#1076337, bsc#1090095 and bsc#1091669).
- 4.0.173</changelog>
  <changelog author="jlopez@suse.com" date="1525435201">- Partitioner: added option to import mount points (part of
  fate#318196 and bsc#1083851).
- 4.0.174</changelog>
  <changelog author="aschnell@suse.com" date="1525435202">- provide function to disable MD auto assembly (bsc#1090690)
- provide function to inhibit udisks from doing mounts
- use these two functions when running expert partitioner
- 4.0.175</changelog>
  <changelog author="shundhammer@suse.com" date="1525694400">- Dump devicegraphs and actions in better strategic places
  (part of fate#318196)
- Make sure not to write LUKS passwords to YAML dump files
- 4.0.176</changelog>
  <changelog author="shundhammer@suse.com" date="1525780800">- Add note to YAML files for devices not supported in YAML
  (part of fate#318196)
- 4.0.177</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525867200">- AutoYaST: do not crash when size is set to 'auto' for a partition
  without a mount point (bsc#1092414).
- 4.0.178</changelog>
  <changelog author="ancor@suse.com" date="1526040000">- Partitioner: "Configure..." button allowing to execute the
  YaST clients for iSCI, FCoE, DASD, zFCP and XPRAM (bsc#1090753).</changelog>
  <changelog author="jlopez@suse.com" date="1526040001">- Partitioner: allow to select only valid parity algorithms when
  creating a new MD RAID (bsc#1090182).</changelog>
  <changelog author="jlopez@suse.com" date="1526040002">- Partitioner: fix buttons to abort and to go back
  (part of fate#318196 and related to bsc#1075443).
- Partitioner: fixed detection of reprobed system to avoid
  unnecessary proposal re-calculation.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040003">- Partitioner: check whether required packages are installed
  before committing changes to disk (bsc#1089508).
- 4.0.179</changelog>
  <changelog author="ancor@suse.com" date="1526299200">- Expose the active flag of the MountPoint class (needed for the
  definitive fix for bsc#1064437 in modern distributions).
- 4.0.180</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526472000">- Partitioner: fix several translation issues (bsc#1081837 and
  bsc#1081601).</changelog>
  <changelog author="snwint@suse.com" date="1526472001">- don't reuse prep partitions larger than 8 MiB (bsc#1090019)
- 4.0.181</changelog>
  <changelog author="jlopez@suse.com" date="1526472002">- Fixed detection of candidate disks for installation
  (bsc#1091047).
- 4.0.182</changelog>
  <changelog author="jlopez@suse.com" date="1526558400">- Fixed tests to avoid to require files provided by
  yast-installation package (needed for bsc#1091047).</changelog>
  <changelog author="jlopez@suse.com" date="1526558401">- Allow to consider MD RAIDs as BIOS RAIDs by using the env
  variable LIBSTORAGE_MDPART (bsc#1092417).</changelog>
  <changelog author="ancor@suse.com" date="1526558402">- Added to the installer a detailed description about the origin of
  the partitioning layout, as discussed in bsc#1089274.
- 4.0.183</changelog>
</package>
<package pkgid="5e7b7e026705f306d2abd46b7514bc9f9e7858c485514716b420945d98c5a5a5" name="yast2-storage-ng" arch="src">
  <version epoch="0" ver="4.0.186" rel="lp150.2.6.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- AutoYaST: handle &lt;subvolumes_prefix/&gt; and &lt;subvolumes&gt; empty
  values properly (bsc#1076337, bsc#1090095 and bsc#1091669).
- 4.0.173</changelog>
  <changelog author="jlopez@suse.com" date="1525435201">- Partitioner: added option to import mount points (part of
  fate#318196 and bsc#1083851).
- 4.0.174</changelog>
  <changelog author="aschnell@suse.com" date="1525435202">- provide function to disable MD auto assembly (bsc#1090690)
- provide function to inhibit udisks from doing mounts
- use these two functions when running expert partitioner
- 4.0.175</changelog>
  <changelog author="shundhammer@suse.com" date="1525694400">- Dump devicegraphs and actions in better strategic places
  (part of fate#318196)
- Make sure not to write LUKS passwords to YAML dump files
- 4.0.176</changelog>
  <changelog author="shundhammer@suse.com" date="1525780800">- Add note to YAML files for devices not supported in YAML
  (part of fate#318196)
- 4.0.177</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525867200">- AutoYaST: do not crash when size is set to 'auto' for a partition
  without a mount point (bsc#1092414).
- 4.0.178</changelog>
  <changelog author="ancor@suse.com" date="1526040000">- Partitioner: "Configure..." button allowing to execute the
  YaST clients for iSCI, FCoE, DASD, zFCP and XPRAM (bsc#1090753).</changelog>
  <changelog author="jlopez@suse.com" date="1526040001">- Partitioner: allow to select only valid parity algorithms when
  creating a new MD RAID (bsc#1090182).</changelog>
  <changelog author="jlopez@suse.com" date="1526040002">- Partitioner: fix buttons to abort and to go back
  (part of fate#318196 and related to bsc#1075443).
- Partitioner: fixed detection of reprobed system to avoid
  unnecessary proposal re-calculation.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040003">- Partitioner: check whether required packages are installed
  before committing changes to disk (bsc#1089508).
- 4.0.179</changelog>
  <changelog author="ancor@suse.com" date="1526299200">- Expose the active flag of the MountPoint class (needed for the
  definitive fix for bsc#1064437 in modern distributions).
- 4.0.180</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526472000">- Partitioner: fix several translation issues (bsc#1081837 and
  bsc#1081601).</changelog>
  <changelog author="snwint@suse.com" date="1526472001">- don't reuse prep partitions larger than 8 MiB (bsc#1090019)
- 4.0.181</changelog>
  <changelog author="jlopez@suse.com" date="1526472002">- Fixed detection of candidate disks for installation
  (bsc#1091047).
- 4.0.182</changelog>
  <changelog author="jlopez@suse.com" date="1526558400">- Fixed tests to avoid to require files provided by
  yast-installation package (needed for bsc#1091047).</changelog>
  <changelog author="jlopez@suse.com" date="1526558401">- Allow to consider MD RAIDs as BIOS RAIDs by using the env
  variable LIBSTORAGE_MDPART (bsc#1092417).</changelog>
  <changelog author="ancor@suse.com" date="1526558402">- Added to the installer a detailed description about the origin of
  the partitioning layout, as discussed in bsc#1089274.
- 4.0.183</changelog>
  <changelog author="jlopez@suse.com" date="1528113600">- Partitioner: allow to move partitions (part of fate#318196).
- 4.0.184</changelog>
  <changelog author="shundhammer@suse.com" date="1528200000">- Partitioner: Handle limitations for volume labels (bsc#1084867)
- 4.0.185</changelog>
  <changelog author="jlopez@suse.com" date="1528200001">- Partitioner: fixed error when creating new BTRFS subvolumes in
  an installed system (bsc#1067510).
- 4.0.186</changelog>
</package>
<package pkgid="e26ca28cae6491b695347b1084fd916a918c76a6ba0dca982fce8e3599546c53" name="yast2-storage-ng" arch="x86_64">
  <version epoch="0" ver="4.0.186" rel="lp150.2.6.1"/>
  <changelog author="igonzalezsosa@suse.com" date="1525435200">- AutoYaST: handle &lt;subvolumes_prefix/&gt; and &lt;subvolumes&gt; empty
  values properly (bsc#1076337, bsc#1090095 and bsc#1091669).
- 4.0.173</changelog>
  <changelog author="jlopez@suse.com" date="1525435201">- Partitioner: added option to import mount points (part of
  fate#318196 and bsc#1083851).
- 4.0.174</changelog>
  <changelog author="aschnell@suse.com" date="1525435202">- provide function to disable MD auto assembly (bsc#1090690)
- provide function to inhibit udisks from doing mounts
- use these two functions when running expert partitioner
- 4.0.175</changelog>
  <changelog author="shundhammer@suse.com" date="1525694400">- Dump devicegraphs and actions in better strategic places
  (part of fate#318196)
- Make sure not to write LUKS passwords to YAML dump files
- 4.0.176</changelog>
  <changelog author="shundhammer@suse.com" date="1525780800">- Add note to YAML files for devices not supported in YAML
  (part of fate#318196)
- 4.0.177</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1525867200">- AutoYaST: do not crash when size is set to 'auto' for a partition
  without a mount point (bsc#1092414).
- 4.0.178</changelog>
  <changelog author="ancor@suse.com" date="1526040000">- Partitioner: "Configure..." button allowing to execute the
  YaST clients for iSCI, FCoE, DASD, zFCP and XPRAM (bsc#1090753).</changelog>
  <changelog author="jlopez@suse.com" date="1526040001">- Partitioner: allow to select only valid parity algorithms when
  creating a new MD RAID (bsc#1090182).</changelog>
  <changelog author="jlopez@suse.com" date="1526040002">- Partitioner: fix buttons to abort and to go back
  (part of fate#318196 and related to bsc#1075443).
- Partitioner: fixed detection of reprobed system to avoid
  unnecessary proposal re-calculation.</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526040003">- Partitioner: check whether required packages are installed
  before committing changes to disk (bsc#1089508).
- 4.0.179</changelog>
  <changelog author="ancor@suse.com" date="1526299200">- Expose the active flag of the MountPoint class (needed for the
  definitive fix for bsc#1064437 in modern distributions).
- 4.0.180</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1526472000">- Partitioner: fix several translation issues (bsc#1081837 and
  bsc#1081601).</changelog>
  <changelog author="snwint@suse.com" date="1526472001">- don't reuse prep partitions larger than 8 MiB (bsc#1090019)
- 4.0.181</changelog>
  <changelog author="jlopez@suse.com" date="1526472002">- Fixed detection of candidate disks for installation
  (bsc#1091047).
- 4.0.182</changelog>
  <changelog author="jlopez@suse.com" date="1526558400">- Fixed tests to avoid to require files provided by
  yast-installation package (needed for bsc#1091047).</changelog>
  <changelog author="jlopez@suse.com" date="1526558401">- Allow to consider MD RAIDs as BIOS RAIDs by using the env
  variable LIBSTORAGE_MDPART (bsc#1092417).</changelog>
  <changelog author="ancor@suse.com" date="1526558402">- Added to the installer a detailed description about the origin of
  the partitioning layout, as discussed in bsc#1089274.
- 4.0.183</changelog>
  <changelog author="jlopez@suse.com" date="1528113600">- Partitioner: allow to move partitions (part of fate#318196).
- 4.0.184</changelog>
  <changelog author="shundhammer@suse.com" date="1528200000">- Partitioner: Handle limitations for volume labels (bsc#1084867)
- 4.0.185</changelog>
  <changelog author="jlopez@suse.com" date="1528200001">- Partitioner: fixed error when creating new BTRFS subvolumes in
  an installed system (bsc#1067510).
- 4.0.186</changelog>
</package>
<package pkgid="612e3b06e8b05a01e0ecb7cd990a0b592f5f4cfc9028eafd69062126d1e6c1a7" name="yast2-storage-ng" arch="src">
  <version epoch="0" ver="4.0.200" rel="lp150.2.9.1"/>
  <changelog author="ancor@suse.com" date="1526558400">- Added to the installer a detailed description about the origin of
  the partitioning layout, as discussed in bsc#1089274.
- 4.0.183</changelog>
  <changelog author="jlopez@suse.com" date="1528113600">- Partitioner: allow to move partitions (part of fate#318196).
- 4.0.184</changelog>
  <changelog author="shundhammer@suse.com" date="1528200000">- Partitioner: Handle limitations for volume labels (bsc#1084867)
- 4.0.185</changelog>
  <changelog author="jlopez@suse.com" date="1528200001">- Partitioner: fixed error when creating new BTRFS subvolumes in
  an installed system (bsc#1067510).
- 4.0.186</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Added method to update encryption names according to a crypttab
  file (needed for bsc#1094963).
- 4.0.187</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1528718400">- AutoYaST: fix handling of empty Btrfs subvolume prefixes
  (bsc#1096240).
- 4.0.188</changelog>
  <changelog author="ancor@suse.com" date="1528804800">- Better auto-generated names for encryption devices:
  * Based on the udev id of the encrypted devices instead of its
    kernel name (bsc#760213).
  * Adapted when partition numbers change, if doable (bsc#1094157).
  * Prevent collision with other DeviceMapper names (bsc#1094157).
- Do not write LUKS password of the proposal into YaST logs.
- Do not crash when registering a zero-sized device into the logs.
- 4.0.189</changelog>
  <changelog author="lslezak@suse.cz" date="1528804801">- Use parallel_tests to speed up running the unit tests
  (bsc#1094875), active only in SLE15-SP1/Leap-15.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1528804802">- Fix 'Arbitrary Option Value' translation (bsc#1081605).
- 4.0.190</changelog>
  <changelog author="snwint@suse.com" date="1528891200">- allow for numbers &gt; 32 bit in region dialog (bsc#1065258)
- 4.0.191</changelog>
  <changelog author="lslezak@suse.cz" date="1528977600">- Fixed crash in the error callback when the text contained
  non-ASCII characters in the translated message (bsc#1096758)
- 4.0.192</changelog>
  <changelog author="ancor@suse.com" date="1529064000">- Partitioner: honor default subvolumes when importing the root
  mount point (related to bsc#1078359, bsc#1083851 and fate#318196)
- Partitioner: honor default snapshots configuration when importing
  the root mount point (bsc#966637)</changelog>
  <changelog author="jlopez@suse.com" date="1529409600">- Partitioner: add checkbox to format system volumes when importing
  mount points (bsc#1078359 and bsc#1094924).
- 4.0.193</changelog>
  <changelog author="aschnell@suse.com" date="1529668800">- mask systemd mount and swap units while expert partitioner is
  running (bsc#1073633)
- 4.0.194</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.195</changelog>
  <changelog author="ancor@suse.com" date="1531742400">- AutoYaST: do not crash when reusing partitions on non-disk
  devices like DASD or BIOS RAID (bsc#1098594).
- 4.0.196</changelog>
  <changelog author="ancor@suse.com" date="1531915200">- AutoYaST: export BIOS RAID devices correctly (bsc#1098594).
- 4.0.197</changelog>
  <changelog author="ancor@suse.com" date="1531915201">- Partitioner: when creating a partition, use only regions of
  the selected type: primary, logical or extended (bsc#1097634).
- 4.0.198</changelog>
  <changelog author="snwint@suse.com" date="1532347200">- document XEN guest setup for testing (bsc#1085134)
- 4.0.199</changelog>
  <changelog author="snwint@suse.com" date="1532606400">- make bsc#1098594 regression test work on s390
- 4.0.200</changelog>
</package>
<package pkgid="6d411065e4a46bec85c2135dab84fdab235dd76cc02b04d2fa16cac624e068f9" name="yast2-storage-ng" arch="x86_64">
  <version epoch="0" ver="4.0.200" rel="lp150.2.9.1"/>
  <changelog author="ancor@suse.com" date="1526558400">- Added to the installer a detailed description about the origin of
  the partitioning layout, as discussed in bsc#1089274.
- 4.0.183</changelog>
  <changelog author="jlopez@suse.com" date="1528113600">- Partitioner: allow to move partitions (part of fate#318196).
- 4.0.184</changelog>
  <changelog author="shundhammer@suse.com" date="1528200000">- Partitioner: Handle limitations for volume labels (bsc#1084867)
- 4.0.185</changelog>
  <changelog author="jlopez@suse.com" date="1528200001">- Partitioner: fixed error when creating new BTRFS subvolumes in
  an installed system (bsc#1067510).
- 4.0.186</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Added method to update encryption names according to a crypttab
  file (needed for bsc#1094963).
- 4.0.187</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1528718400">- AutoYaST: fix handling of empty Btrfs subvolume prefixes
  (bsc#1096240).
- 4.0.188</changelog>
  <changelog author="ancor@suse.com" date="1528804800">- Better auto-generated names for encryption devices:
  * Based on the udev id of the encrypted devices instead of its
    kernel name (bsc#760213).
  * Adapted when partition numbers change, if doable (bsc#1094157).
  * Prevent collision with other DeviceMapper names (bsc#1094157).
- Do not write LUKS password of the proposal into YaST logs.
- Do not crash when registering a zero-sized device into the logs.
- 4.0.189</changelog>
  <changelog author="lslezak@suse.cz" date="1528804801">- Use parallel_tests to speed up running the unit tests
  (bsc#1094875), active only in SLE15-SP1/Leap-15.1</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1528804802">- Fix 'Arbitrary Option Value' translation (bsc#1081605).
- 4.0.190</changelog>
  <changelog author="snwint@suse.com" date="1528891200">- allow for numbers &gt; 32 bit in region dialog (bsc#1065258)
- 4.0.191</changelog>
  <changelog author="lslezak@suse.cz" date="1528977600">- Fixed crash in the error callback when the text contained
  non-ASCII characters in the translated message (bsc#1096758)
- 4.0.192</changelog>
  <changelog author="ancor@suse.com" date="1529064000">- Partitioner: honor default subvolumes when importing the root
  mount point (related to bsc#1078359, bsc#1083851 and fate#318196)
- Partitioner: honor default snapshots configuration when importing
  the root mount point (bsc#966637)</changelog>
  <changelog author="jlopez@suse.com" date="1529409600">- Partitioner: add checkbox to format system volumes when importing
  mount points (bsc#1078359 and bsc#1094924).
- 4.0.193</changelog>
  <changelog author="aschnell@suse.com" date="1529668800">- mask systemd mount and swap units while expert partitioner is
  running (bsc#1073633)
- 4.0.194</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.195</changelog>
  <changelog author="ancor@suse.com" date="1531742400">- AutoYaST: do not crash when reusing partitions on non-disk
  devices like DASD or BIOS RAID (bsc#1098594).
- 4.0.196</changelog>
  <changelog author="ancor@suse.com" date="1531915200">- AutoYaST: export BIOS RAID devices correctly (bsc#1098594).
- 4.0.197</changelog>
  <changelog author="ancor@suse.com" date="1531915201">- Partitioner: when creating a partition, use only regions of
  the selected type: primary, logical or extended (bsc#1097634).
- 4.0.198</changelog>
  <changelog author="snwint@suse.com" date="1532347200">- document XEN guest setup for testing (bsc#1085134)
- 4.0.199</changelog>
  <changelog author="snwint@suse.com" date="1532606400">- make bsc#1098594 regression test work on s390
- 4.0.200</changelog>
</package>
<package pkgid="d6daffa837356ab1ee09d70185becd95c14efe4b2788996f90437ea92a7f40e2" name="yast2-sudo" arch="noarch">
  <version epoch="0" ver="4.0.0" rel="lp150.2.3.1"/>
  <changelog author="kmachalkova@suse.cz" date="1240228800">- Fixed renaming of command aliases (bnc#494384)
- 2.18.2</changelog>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="jsrain@suse.cz" date="1312286400">- fixed typos
- 2.21.0</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="visnov@suse.cz" date="1316692800">- set dialog title
- 2.21.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts
- confirmed license
- 2.22.0</changelog>
  <changelog author="jsuchome@suse.cz" date="1369396800">- suppress visudo output, so agent exits correctly (bnc#808292)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.0</changelog>
</package>
<package pkgid="5eefd532d550402b9b9450eef74426450a8a307b08a61fc340554d323532a41a" name="yast2-sudo" arch="src">
  <version epoch="0" ver="4.0.0" rel="lp150.2.3.1"/>
  <changelog author="jsrain@suse.cz" date="1210939200">- added categories Settings and System into desktop file
  (bnc #382778)</changelog>
  <changelog author="kmachalkova@suse.cz" date="1225108800">- Comply to style guide: Add/Edit/Delete button trio aligned to the
  left, 'Remove' renamed to 'Delete' (bnc#438227)
- Hint for user to type alias name in capital letters (bnc#395779)
- Disable Edit/Delete buttons if the table is empty and avoid evil
  red error pop-up (bnc#395779)
- 2.17.0</changelog>
  <changelog author="kmachalkova@suse.cz" date="1227009600">- Rewrite of Perl agent to store sudoers data in non-associative
  data structure + adapting business logic to use lists, not maps
  (bnc#439164, bnc#365178)
- Added up/down buttons to help setting sudo rules priorities
- 2.17.1</changelog>
  <changelog author="kmachalkova@suse.cz" date="1227787200">- Not so strict requirements on return value from SCR::Read
  ( list &lt;any&gt; instead of list &lt;string&gt; )(bnc#448159)
- Button re-labelling to comply to style-guide(bnc#448159)</changelog>
  <changelog author="kmachalkova@suse.cz" date="1228132800">- Focusing correct item when changing priority of rules (bnc#449754)
- Fixed parsing of multi-line rules/aliases (patch by jreidinger)
  (bnc#449768)
- 2.17.2</changelog>
  <changelog author="kmachalkova@suse.cz" date="1229428800">- Missing strings marked for translation (bnc#448693, bnc#459376)
- Consider all possible command tags (NOPASSWD, NOEXEC, SETENV) when
  parsing a line from sudoers in order not to delete those tags that
  can't be set in UI</changelog>
  <changelog author="kmachalkova@suse.cz" date="1231934400">- Show "Really abort?" message only if there is something to save
  (bnc#458328)
- Removed write progress dialog (bnc#447586)
- Speeding up gathering users/groups data
- 2.18.0</changelog>
  <changelog author="kmachalkova@suse.cz" date="1235736000">- Do not add extra space to command parameters (bnc#473683)
- Move user selection into pop-up dialog in user/run-as alias config
  (bnc#421053)
- Some compatibility fixes (ButtonBoxes, InputFields usage)
- 2.18.1</changelog>
  <changelog author="kmachalkova@suse.cz" date="1240228800">- Fixed renaming of command aliases (bnc#494384)
- 2.18.2</changelog>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="jsrain@suse.cz" date="1312286400">- fixed typos
- 2.21.0</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="visnov@suse.cz" date="1316692800">- set dialog title
- 2.21.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts
- confirmed license
- 2.22.0</changelog>
  <changelog author="jsuchome@suse.cz" date="1369396800">- suppress visudo output, so agent exits correctly (bnc#808292)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.0</changelog>
</package>
<package pkgid="62eede16b1af3a95753fcb3e7de56122d4b1ee56de43b6378663de53aea59389" name="yast2-sysconfig" arch="noarch">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.cz" date="1245153600">- Using autodocs-ycp.ami, which contains a fix for automake 1.11.</changelog>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="lslezak@suse.cz" date="1311768000">- command line help text - added description and example for full
  file name specification (bnc#689844)
- 2.21.0</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="lslezak@suse.cz" date="1312804800">- use ButtonBox for push button widgets (bnc#701273)
- removed unnecessary text from summary dialog
- 2.21.1</changelog>
  <changelog author="visnov@suse.cz" date="1317124800">- set dialog title
- 2.21.2</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts</changelog>
  <changelog author="lslezak@suse.cz" date="1333108800">- fixed displaying UTF-8 values (bnc#728588), fixed handling values
  containing single quotes
- 2.22.0</changelog>
  <changelog author="lslezak@suse.cz" date="1373976000">- do not call /sbin/SuSEconfig, it has been dropped (bnc#828254)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1375358400">- move the development documentation to devel-doc subpackage
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="locilka@suse.com" date="1396008000">- Removed any mention about SuSEconfig, that has been already
  dropped a while ago (bnc#869408)
- 3.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="ancor@suse.com" date="1436184000">- Improved restarting/reloading of services for better
  maintainability and full systemd compatibility (bnc#926485)
- New automated test suite (unit tests with RSpec)
- 3.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464868800">- Drop yast2-sysconfig-devel-doc package (fate#320356)
- 3.1.4</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="953ca2104698d95a7ef45446867190ec3b3660b1d1b290a1d9ba65a3fcef799f" name="yast2-sysconfig" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="jsrain@suse.cz" date="1210939200">- added categories Settings and System into desktop file
  (bnc #382778)</changelog>
  <changelog author="lslezak@suse.cz" date="1213617600">- OK/Cancel button in the main dialog (bnc#398491)
- 2.17.0</changelog>
  <changelog author="mvidner@suse.cz" date="1245153600">- Using autodocs-ycp.ami, which contains a fix for automake 1.11.</changelog>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="lslezak@suse.cz" date="1311768000">- command line help text - added description and example for full
  file name specification (bnc#689844)
- 2.21.0</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="lslezak@suse.cz" date="1312804800">- use ButtonBox for push button widgets (bnc#701273)
- removed unnecessary text from summary dialog
- 2.21.1</changelog>
  <changelog author="visnov@suse.cz" date="1317124800">- set dialog title
- 2.21.2</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts</changelog>
  <changelog author="lslezak@suse.cz" date="1333108800">- fixed displaying UTF-8 values (bnc#728588), fixed handling values
  containing single quotes
- 2.22.0</changelog>
  <changelog author="lslezak@suse.cz" date="1373976000">- do not call /sbin/SuSEconfig, it has been dropped (bnc#828254)
- 2.24.0</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1375358400">- move the development documentation to devel-doc subpackage
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="locilka@suse.com" date="1396008000">- Removed any mention about SuSEconfig, that has been already
  dropped a while ago (bnc#869408)
- 3.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="ancor@suse.com" date="1436184000">- Improved restarting/reloading of services for better
  maintainability and full systemd compatibility (bnc#926485)
- New automated test suite (unit tests with RSpec)
- 3.1.3</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1464868800">- Drop yast2-sysconfig-devel-doc package (fate#320356)
- 3.1.4</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="7e771f231c2ea7bfe3674700e0e704fb83a731da65d8f0a8e7cef1c6c33bc6cb" name="yast2-tftp-server" arch="noarch">
  <version epoch="0" ver="4.0.3" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.cz" date="1252152000">- Added X-SuSE-YaST-Keywords for the Qt4 control center.
- 2.18.0</changelog>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="lslezak@suse.cz" date="1315828800">- updated testsuite (systemd support) (bnc#664548)
- 2.21.0</changelog>
  <changelog author="visnov@suse.cz" date="1317038400">- set dialog title
- 2.21.1</changelog>
  <changelog author="locilka@suse.cz" date="1320321600">- Fixed testsuite
- 2.21.2</changelog>
  <changelog author="locilka@suse.cz" date="1322222400">- Fixed firewall service name (bnc#729793)
- Adapted RPM build requirements
- 2.22.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts</changelog>
  <changelog author="locilka@suse.com" date="1357560000">- Testsuite adapted to switching Service module to systemd
  (yast2-2.23.15)
- Testsuite adapted to merging SuSEfirewall2_* scripts into one
  (yast2-2.23.17)
- 2.22.2</changelog>
  <changelog author="mvidner@suse.com" date="1368446400">- adjust tests to changes in yast2-2.23.23 (for bnc#807507)
- 2.22.3</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="locilka@suse.com" date="1396353600">- Testsuite adjusted to the new Systemd/Service library
- 3.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465473600">- Stop generating autodocs (fate#320356)
- 3.1.3</changelog>
  <changelog author="jreidinger@suse.com" date="1517572800">- switch from xinetd to systemd socket activation (fate#323373)
- switch from SuSEFirewall to firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1518523200">- Merging changed settings with already existing configuration.
  (bnc#1080557)
- 4.0.1</changelog>
  <changelog author="jreidinger@suse.com" date="1522929600">- do not report error when cloning without tftp installed
  (bsc#1081688)
- 4.0.2</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.3</changelog>
</package>
<package pkgid="47541ca12503be78117a7ee6134830826b7433762ecefd25f944cec2dd7fe758" name="yast2-tftp-server" arch="src">
  <version epoch="0" ver="4.0.3" rel="lp150.2.3.1"/>
  <changelog author="mvidner@suse.cz" date="1226059200">- Adjusted dialog buttons according to YaST Style Guide
  (bnc#440541).
- 2.17.1</changelog>
  <changelog author="mvidner@suse.cz" date="1252152000">- Added X-SuSE-YaST-Keywords for the Qt4 control center.
- 2.18.0</changelog>
  <changelog author="kmachalkova@suse.cz" date="1263384000">- Adjusted .desktop file(s) to wrap /sbin/yast2/ calls in xdg-su
  where root privileges are needed, removed X-KDE-SubstituteUID key
  (bnc#540627)</changelog>
  <changelog author="tgoettlicher@suse.de" date="1312545600">- fixed .desktop file (bnc #681249)</changelog>
  <changelog author="lslezak@suse.cz" date="1315828800">- updated testsuite (systemd support) (bnc#664548)
- 2.21.0</changelog>
  <changelog author="visnov@suse.cz" date="1317038400">- set dialog title
- 2.21.1</changelog>
  <changelog author="locilka@suse.cz" date="1320321600">- Fixed testsuite
- 2.21.2</changelog>
  <changelog author="locilka@suse.cz" date="1322222400">- Fixed firewall service name (bnc#729793)
- Adapted RPM build requirements
- 2.22.1</changelog>
  <changelog author="jsuchome@suse.cz" date="1333022400">- merge proofread texts</changelog>
  <changelog author="locilka@suse.com" date="1357560000">- Testsuite adapted to switching Service module to systemd
  (yast2-2.23.15)
- Testsuite adapted to merging SuSEfirewall2_* scripts into one
  (yast2-2.23.17)
- 2.22.2</changelog>
  <changelog author="mvidner@suse.com" date="1368446400">- adjust tests to changes in yast2-2.23.23 (for bnc#807507)
- 2.22.3</changelog>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1379592000">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.1.0</changelog>
  <changelog author="locilka@suse.com" date="1396353600">- Testsuite adjusted to the new Systemd/Service library
- 3.1.1</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)
- 3.1.2</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465473600">- Stop generating autodocs (fate#320356)
- 3.1.3</changelog>
  <changelog author="jreidinger@suse.com" date="1517572800">- switch from xinetd to systemd socket activation (fate#323373)
- switch from SuSEFirewall to firewalld (fate#323460)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1518523200">- Merging changed settings with already existing configuration.
  (bnc#1080557)
- 4.0.1</changelog>
  <changelog author="jreidinger@suse.com" date="1522929600">- do not report error when cloning without tftp installed
  (bsc#1081688)
- 4.0.2</changelog>
  <changelog author="schubi@suse.de" date="1530100800">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.3</changelog>
</package>
<package pkgid="19a4cfe02cd9c822dc9a7c00978c746d0bd481dd42be90288748efc06b12bf5c" name="yast2-tune" arch="src">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1375358400">- move the development documentation to devel-doc subpackage
- removed obsolete BuildRequires, not needed anymore:
  perl-XML-Writer yast2-testsuite yast2-bootloader
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1378382400">- installation summary - remove beginning/trailing spaces from CPU
  name (bnc#803000)
- 3.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1379419200">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.0.3</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="jreidinger@suse.com" date="1390392000">- Improve usability of proposal in installer
- 3.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1390392001">- removed "Save to Floppy" option (nobody uses floppies anymore...)
- 3.1.1</changelog>
  <changelog author="locilka@suse.com" date="1393329600">- Fixed "Kernel Settings" tab layout (bnc#865366)
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1400068800">- adapt to new bootloader kernel param API (bnc#869608)
- 3.1.3</changelog>
  <changelog author="lslezak@suse.cz" date="1406721600">- filter out empty "unknown" SMBIOS entries (bnc#880643)
- fixed running X.org detection
- 3.1.4</changelog>
  <changelog author="lslezak@suse.cz" date="1407153600">- mark the summary header text for translation (bnc#889683)
- 3.1.5</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="lslezak@suse.cz" date="1421236800">- activate the global IO scheduler settings (bnc#779146)
- removed "boot.sysctl" service activation (it has been renamed to
  "systemd-sysctl" service and it cannot be disabled anyway)
- 3.1.6</changelog>
  <changelog author="jreidinger@suse.com" date="1436443200">- use proper desktop file name to show proper icon (bnc#937549)
- 3.1.7</changelog>
  <changelog author="cwh@suse.com" date="1464782400">- Removed devel-doc package (fate#320356)
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1468238400">- Prevent scheduler settings to be removed during installation
  (bsc#968192)
- 3.1.9</changelog>
  <changelog author="mvidner@suse.com" date="1484913600">- Added Tune::Widgets::SystemInformation (FATE#322328).
- 3.2.0</changelog>
  <changelog author="lslezak@suse.cz" date="1502712000">- Fixed scheduler activation: do not activate the new scheduler
  for devices which do not support it (bsc#1052770)
- 3.3.0</changelog>
  <changelog author="lslezak@suse.cz" date="1504612800">- Removed duplicate keys (bsc#1054898)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530014400">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="018b36ed1fc7ef88ab7f0a5fe87a7a5cb13ae4e5c5842ba89c1664adb7ae49c6" name="yast2-tune" arch="x86_64">
  <version epoch="0" ver="4.0.1" rel="lp150.2.3.1"/>
  <changelog author="yast-devel@opensuse.org" date="1375272000">- converted from YCP to Ruby by YCP Killer
  (https://github.com/yast/ycp-killer)
- version 3.0.0</changelog>
  <changelog author="lslezak@suse.cz" date="1375358400">- move the development documentation to devel-doc subpackage
- removed obsolete BuildRequires, not needed anymore:
  perl-XML-Writer yast2-testsuite yast2-bootloader
- 3.0.1</changelog>
  <changelog author="lslezak@suse.cz" date="1378382400">- installation summary - remove beginning/trailing spaces from CPU
  name (bnc#803000)
- 3.0.2</changelog>
  <changelog author="lslezak@suse.cz" date="1379419200">- do not use *.spec.in template, use *.spec file with RPM macros
  instead
- 3.0.3</changelog>
  <changelog author="jreidinger@suse.com" date="1384344000">- Add explicit COPYING file</changelog>
  <changelog author="jreidinger@suse.com" date="1390392000">- Improve usability of proposal in installer
- 3.1.0</changelog>
  <changelog author="lslezak@suse.cz" date="1390392001">- removed "Save to Floppy" option (nobody uses floppies anymore...)
- 3.1.1</changelog>
  <changelog author="locilka@suse.com" date="1393329600">- Fixed "Kernel Settings" tab layout (bnc#865366)
- 3.1.2</changelog>
  <changelog author="jreidinger@suse.com" date="1400068800">- adapt to new bootloader kernel param API (bnc#869608)
- 3.1.3</changelog>
  <changelog author="lslezak@suse.cz" date="1406721600">- filter out empty "unknown" SMBIOS entries (bnc#880643)
- fixed running X.org detection
- 3.1.4</changelog>
  <changelog author="lslezak@suse.cz" date="1407153600">- mark the summary header text for translation (bnc#889683)
- 3.1.5</changelog>
  <changelog author="jreidinger@suse.com" date="1417694400">- remove X-KDE-Library from desktop file (bnc#899104)</changelog>
  <changelog author="lslezak@suse.cz" date="1421236800">- activate the global IO scheduler settings (bnc#779146)
- removed "boot.sysctl" service activation (it has been renamed to
  "systemd-sysctl" service and it cannot be disabled anyway)
- 3.1.6</changelog>
  <changelog author="jreidinger@suse.com" date="1436443200">- use proper desktop file name to show proper icon (bnc#937549)
- 3.1.7</changelog>
  <changelog author="cwh@suse.com" date="1464782400">- Removed devel-doc package (fate#320356)
- 3.1.8</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1468238400">- Prevent scheduler settings to be removed during installation
  (bsc#968192)
- 3.1.9</changelog>
  <changelog author="mvidner@suse.com" date="1484913600">- Added Tune::Widgets::SystemInformation (FATE#322328).
- 3.2.0</changelog>
  <changelog author="lslezak@suse.cz" date="1502712000">- Fixed scheduler activation: do not activate the new scheduler
  for devices which do not support it (bsc#1052770)
- 3.3.0</changelog>
  <changelog author="lslezak@suse.cz" date="1504612800">- Removed duplicate keys (bsc#1054898)
- 4.0.0</changelog>
  <changelog author="schubi@suse.de" date="1530014400">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.1</changelog>
</package>
<package pkgid="9e3651050887cb0cfc7d562ec88b8a59b6c692d32ca74cf8953718a282dacce2" name="yast2-update" arch="src">
  <version epoch="0" ver="4.0.17" rel="lp150.2.3.1"/>
  <changelog author="knut.anderssen@suse.com" date="1502884800">- Do not allow to upgrade if the target system uses reiserfs
  (fate#323394).
- 3.3.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1502971200">- Fixed a typo calling a Logger method (bsc#1054236).
- 3.3.2</changelog>
  <changelog author="ancor@suse.com" date="1503316800">- Use translatable and human-friendly format to display the
  partition id during a system upgrade (part of fate#318196).
- 3.3.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1503403200">- Show legacy root filesystems in the list of systems to upgrade
  from (fate#323394).
- 3.3.4</changelog>
  <changelog author="mvidner@suse.com" date="1509451200">- Filter upgradable products in the partition selector already
  (FATE#323163).
- 4.0.0</changelog>
  <changelog author="jsrain@suse.cz" date="1511524800">- Display warning if system uses cryptconfig encrypted home
  directories (fate#323541)
- 4.0.1</changelog>
  <changelog author="ancor@suse.com" date="1513598400">- Use udev names, in addition to kernel device names, to match
  partitions (part of the fix for bsc#1073254).
- 4.0.2</changelog>
  <changelog author="ancor@suse.com" date="1513684800">- When matching partitions, also use udev names that have been
  discarded by libstorage-ng (bsc#1073254).
- 4.0.3</changelog>
  <changelog author="jsrain@suse.cz" date="1515153600">- upgrade the system always via equivalent of 'zypper dup'
  (bsc#1071708)
- 4.0.4</changelog>
  <changelog author="ancor@suse.com" date="1515499200">- When matching partitions, rely on the new
  Y2Storage::Devicegraph#find_by_any_name (bsc#1073254).
- 4.0.5</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- remove obsolete rootpart_check_keyboard client that allows having
  different keyboard in update env and on target disk (related to
  bsc#1075828)
- 4.0.6</changelog>
  <changelog author="jlopez@suse.com" date="1518177600">- Adapt to new MountPoint API (part of fate#318196).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1520510400">- Automatically save a solver test case when the product summary
  contains a warning for easier debugging (related to bsc#1084248)
- 4.0.10</changelog>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
</package>
<package pkgid="aa6ac44adcb0e32c4cca2aa96afb227d4ab8021f69b34d760e05296817354af4" name="yast2-update" arch="x86_64">
  <version epoch="0" ver="4.0.17" rel="lp150.2.3.1"/>
  <changelog author="knut.anderssen@suse.com" date="1502884800">- Do not allow to upgrade if the target system uses reiserfs
  (fate#323394).
- 3.3.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1502971200">- Fixed a typo calling a Logger method (bsc#1054236).
- 3.3.2</changelog>
  <changelog author="ancor@suse.com" date="1503316800">- Use translatable and human-friendly format to display the
  partition id during a system upgrade (part of fate#318196).
- 3.3.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1503403200">- Show legacy root filesystems in the list of systems to upgrade
  from (fate#323394).
- 3.3.4</changelog>
  <changelog author="mvidner@suse.com" date="1509451200">- Filter upgradable products in the partition selector already
  (FATE#323163).
- 4.0.0</changelog>
  <changelog author="jsrain@suse.cz" date="1511524800">- Display warning if system uses cryptconfig encrypted home
  directories (fate#323541)
- 4.0.1</changelog>
  <changelog author="ancor@suse.com" date="1513598400">- Use udev names, in addition to kernel device names, to match
  partitions (part of the fix for bsc#1073254).
- 4.0.2</changelog>
  <changelog author="ancor@suse.com" date="1513684800">- When matching partitions, also use udev names that have been
  discarded by libstorage-ng (bsc#1073254).
- 4.0.3</changelog>
  <changelog author="jsrain@suse.cz" date="1515153600">- upgrade the system always via equivalent of 'zypper dup'
  (bsc#1071708)
- 4.0.4</changelog>
  <changelog author="ancor@suse.com" date="1515499200">- When matching partitions, rely on the new
  Y2Storage::Devicegraph#find_by_any_name (bsc#1073254).
- 4.0.5</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- remove obsolete rootpart_check_keyboard client that allows having
  different keyboard in update env and on target disk (related to
  bsc#1075828)
- 4.0.6</changelog>
  <changelog author="jlopez@suse.com" date="1518177600">- Adapt to new MountPoint API (part of fate#318196).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1520510400">- Automatically save a solver test case when the product summary
  contains a warning for easier debugging (related to bsc#1084248)
- 4.0.10</changelog>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
</package>
<package pkgid="4f3388a211b7e02bda04884262833a4d81df2639db52500d20a2500a8d32b5b5" name="yast2-update" arch="src">
  <version epoch="0" ver="4.0.18" rel="lp150.2.6.1"/>
  <changelog author="knut.anderssen@suse.com" date="1502971200">- Fixed a typo calling a Logger method (bsc#1054236).
- 3.3.2</changelog>
  <changelog author="ancor@suse.com" date="1503316800">- Use translatable and human-friendly format to display the
  partition id during a system upgrade (part of fate#318196).
- 3.3.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1503403200">- Show legacy root filesystems in the list of systems to upgrade
  from (fate#323394).
- 3.3.4</changelog>
  <changelog author="mvidner@suse.com" date="1509451200">- Filter upgradable products in the partition selector already
  (FATE#323163).
- 4.0.0</changelog>
  <changelog author="jsrain@suse.cz" date="1511524800">- Display warning if system uses cryptconfig encrypted home
  directories (fate#323541)
- 4.0.1</changelog>
  <changelog author="ancor@suse.com" date="1513598400">- Use udev names, in addition to kernel device names, to match
  partitions (part of the fix for bsc#1073254).
- 4.0.2</changelog>
  <changelog author="ancor@suse.com" date="1513684800">- When matching partitions, also use udev names that have been
  discarded by libstorage-ng (bsc#1073254).
- 4.0.3</changelog>
  <changelog author="jsrain@suse.cz" date="1515153600">- upgrade the system always via equivalent of 'zypper dup'
  (bsc#1071708)
- 4.0.4</changelog>
  <changelog author="ancor@suse.com" date="1515499200">- When matching partitions, rely on the new
  Y2Storage::Devicegraph#find_by_any_name (bsc#1073254).
- 4.0.5</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- remove obsolete rootpart_check_keyboard client that allows having
  different keyboard in update env and on target disk (related to
  bsc#1075828)
- 4.0.6</changelog>
  <changelog author="jlopez@suse.com" date="1518177600">- Adapt to new MountPoint API (part of fate#318196).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1520510400">- Automatically save a solver test case when the product summary
  contains a warning for easier debugging (related to bsc#1084248)
- 4.0.10</changelog>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
  <changelog author="schubi@suse.de" date="1532520000">- Wrong fstype "Windows Data Partition" will not be shown anymore
  for partition which are suggested for upgrade. (bsc#1079034)
- 4.0.18</changelog>
</package>
<package pkgid="4c42f16cd19d3cea573bd91e13b667724a075dbf1cd5467da5f6f1915a882f4b" name="yast2-update" arch="x86_64">
  <version epoch="0" ver="4.0.18" rel="lp150.2.6.1"/>
  <changelog author="knut.anderssen@suse.com" date="1502971200">- Fixed a typo calling a Logger method (bsc#1054236).
- 3.3.2</changelog>
  <changelog author="ancor@suse.com" date="1503316800">- Use translatable and human-friendly format to display the
  partition id during a system upgrade (part of fate#318196).
- 3.3.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1503403200">- Show legacy root filesystems in the list of systems to upgrade
  from (fate#323394).
- 3.3.4</changelog>
  <changelog author="mvidner@suse.com" date="1509451200">- Filter upgradable products in the partition selector already
  (FATE#323163).
- 4.0.0</changelog>
  <changelog author="jsrain@suse.cz" date="1511524800">- Display warning if system uses cryptconfig encrypted home
  directories (fate#323541)
- 4.0.1</changelog>
  <changelog author="ancor@suse.com" date="1513598400">- Use udev names, in addition to kernel device names, to match
  partitions (part of the fix for bsc#1073254).
- 4.0.2</changelog>
  <changelog author="ancor@suse.com" date="1513684800">- When matching partitions, also use udev names that have been
  discarded by libstorage-ng (bsc#1073254).
- 4.0.3</changelog>
  <changelog author="jsrain@suse.cz" date="1515153600">- upgrade the system always via equivalent of 'zypper dup'
  (bsc#1071708)
- 4.0.4</changelog>
  <changelog author="ancor@suse.com" date="1515499200">- When matching partitions, rely on the new
  Y2Storage::Devicegraph#find_by_any_name (bsc#1073254).
- 4.0.5</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- remove obsolete rootpart_check_keyboard client that allows having
  different keyboard in update env and on target disk (related to
  bsc#1075828)
- 4.0.6</changelog>
  <changelog author="jlopez@suse.com" date="1518177600">- Adapt to new MountPoint API (part of fate#318196).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1520510400">- Automatically save a solver test case when the product summary
  contains a warning for easier debugging (related to bsc#1084248)
- 4.0.10</changelog>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
  <changelog author="schubi@suse.de" date="1532520000">- Wrong fstype "Windows Data Partition" will not be shown anymore
  for partition which are suggested for upgrade. (bsc#1079034)
- 4.0.18</changelog>
</package>
<package pkgid="d58ac73c0f75f8fff4a59dc3bc1953efff1ad7af31d10feb9eadcbaffc10cb8d" name="yast2-update-FACTORY" arch="x86_64">
  <version epoch="0" ver="4.0.17" rel="lp150.2.3.1"/>
  <changelog author="knut.anderssen@suse.com" date="1502884800">- Do not allow to upgrade if the target system uses reiserfs
  (fate#323394).
- 3.3.1</changelog>
  <changelog author="knut.anderssen@suse.com" date="1502971200">- Fixed a typo calling a Logger method (bsc#1054236).
- 3.3.2</changelog>
  <changelog author="ancor@suse.com" date="1503316800">- Use translatable and human-friendly format to display the
  partition id during a system upgrade (part of fate#318196).
- 3.3.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1503403200">- Show legacy root filesystems in the list of systems to upgrade
  from (fate#323394).
- 3.3.4</changelog>
  <changelog author="mvidner@suse.com" date="1509451200">- Filter upgradable products in the partition selector already
  (FATE#323163).
- 4.0.0</changelog>
  <changelog author="jsrain@suse.cz" date="1511524800">- Display warning if system uses cryptconfig encrypted home
  directories (fate#323541)
- 4.0.1</changelog>
  <changelog author="ancor@suse.com" date="1513598400">- Use udev names, in addition to kernel device names, to match
  partitions (part of the fix for bsc#1073254).
- 4.0.2</changelog>
  <changelog author="ancor@suse.com" date="1513684800">- When matching partitions, also use udev names that have been
  discarded by libstorage-ng (bsc#1073254).
- 4.0.3</changelog>
  <changelog author="jsrain@suse.cz" date="1515153600">- upgrade the system always via equivalent of 'zypper dup'
  (bsc#1071708)
- 4.0.4</changelog>
  <changelog author="ancor@suse.com" date="1515499200">- When matching partitions, rely on the new
  Y2Storage::Devicegraph#find_by_any_name (bsc#1073254).
- 4.0.5</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- remove obsolete rootpart_check_keyboard client that allows having
  different keyboard in update env and on target disk (related to
  bsc#1075828)
- 4.0.6</changelog>
  <changelog author="jlopez@suse.com" date="1518177600">- Adapt to new MountPoint API (part of fate#318196).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1520510400">- Automatically save a solver test case when the product summary
  contains a warning for easier debugging (related to bsc#1084248)
- 4.0.10</changelog>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
</package>
<package pkgid="b852233457208117f8c60992303a0f49f93a1fe5260155d0ae7ded4e5f92fe8e" name="yast2-update-FACTORY" arch="x86_64">
  <version epoch="0" ver="4.0.18" rel="lp150.2.6.1"/>
  <changelog author="knut.anderssen@suse.com" date="1502971200">- Fixed a typo calling a Logger method (bsc#1054236).
- 3.3.2</changelog>
  <changelog author="ancor@suse.com" date="1503316800">- Use translatable and human-friendly format to display the
  partition id during a system upgrade (part of fate#318196).
- 3.3.3</changelog>
  <changelog author="knut.anderssen@suse.com" date="1503403200">- Show legacy root filesystems in the list of systems to upgrade
  from (fate#323394).
- 3.3.4</changelog>
  <changelog author="mvidner@suse.com" date="1509451200">- Filter upgradable products in the partition selector already
  (FATE#323163).
- 4.0.0</changelog>
  <changelog author="jsrain@suse.cz" date="1511524800">- Display warning if system uses cryptconfig encrypted home
  directories (fate#323541)
- 4.0.1</changelog>
  <changelog author="ancor@suse.com" date="1513598400">- Use udev names, in addition to kernel device names, to match
  partitions (part of the fix for bsc#1073254).
- 4.0.2</changelog>
  <changelog author="ancor@suse.com" date="1513684800">- When matching partitions, also use udev names that have been
  discarded by libstorage-ng (bsc#1073254).
- 4.0.3</changelog>
  <changelog author="jsrain@suse.cz" date="1515153600">- upgrade the system always via equivalent of 'zypper dup'
  (bsc#1071708)
- 4.0.4</changelog>
  <changelog author="ancor@suse.com" date="1515499200">- When matching partitions, rely on the new
  Y2Storage::Devicegraph#find_by_any_name (bsc#1073254).
- 4.0.5</changelog>
  <changelog author="jreidinger@suse.com" date="1516017600">- remove obsolete rootpart_check_keyboard client that allows having
  different keyboard in update env and on target disk (related to
  bsc#1075828)
- 4.0.6</changelog>
  <changelog author="jlopez@suse.com" date="1518177600">- Adapt to new MountPoint API (part of fate#318196).
- 4.0.9</changelog>
  <changelog author="lslezak@suse.cz" date="1520510400">- Automatically save a solver test case when the product summary
  contains a warning for easier debugging (related to bsc#1084248)
- 4.0.10</changelog>
  <changelog author="lslezak@suse.cz" date="1521028800">- Properly restore the original installation repositories when
  going back to the partition selection dialog (related to
  bsc#1080979)
- Remove the very old and unused stuff (dead code, unsupported
  file systems, ...)
- 4.0.11</changelog>
  <changelog author="ancor@suse.com" date="1521460800">- Fixed a crash when upgrading systems with a separate /var
  (bsc#1071454).
- Better support for upgrading systems with a /var subvolume.
- 4.0.12</changelog>
  <changelog author="lslezak@suse.cz" date="1524830400">- Copy the resolv.conf and bind mount /dev directory to the target
  root, sort the restore scripts to run them in the expected
  order (bsc#1089643)
- The bind mount also fixes the libzypp plugin service refresh
  (bsc#1080693)
- 4.0.13</changelog>
  <changelog author="lslezak@suse.cz" date="1525867200">- Fixed unmounting /mnt/dev when going back to the partition
  selection dialog (fix up for the bsc#1089643)
- 4.0.14</changelog>
  <changelog author="lslezak@suse.cz" date="1528286400">- Flush the disk cache after restoring the backup to mitigate
  risk of data loss after unexpected reboot/poweroff after aborting
  upgrade (bsc#1089643)
- 4.0.15</changelog>
  <changelog author="jlopez@suse.com" date="1528372800">- Update encryption device names according to the values in the
  crypttab file (bsc#1094963).
- 4.0.16</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.17</changelog>
  <changelog author="schubi@suse.de" date="1532520000">- Wrong fstype "Windows Data Partition" will not be shown anymore
  for partition which are suggested for upgrade. (bsc#1079034)
- 4.0.18</changelog>
</package>
<package pkgid="00cd5cceb8bd5ae30ef9e0eb2faa024bf5f4eec6d0d9582cb1f853ce0c52988a" name="yast2-vm" arch="src">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="carnold@suse.com" date="1436270400">- bnc#936091 - installation of kvm and kvm-tools on s390 finishes
  with "Missing parameters to modify [:common, "switch_amode"]"
- 3.1.22</changelog>
  <changelog author="jreidinger@suse.com" date="1437480000">- fix crash when installing kvm virtualization pattern (bnc#938530)
- 3.1.23</changelog>
  <changelog author="carnold@suse.com" date="1439294400">- bsc#941125 - yast2-vm: uses /etc/inittab
- 3.1.24</changelog>
  <changelog author="carnold@suse.com" date="1457956800">- bsc#971054 - virtlogd is now required by libvirt and must be
  started automatically
- 3.1.25</changelog>
  <changelog author="jreidinger@suse.com" date="1460548800">- Remove workarounds not needed for new bootloader
  (related to FATE#317701)
- 3.1.26</changelog>
  <changelog author="carnold@suse.com" date="1462968000">- fate#319328 - Add virsh console conf to KVM Guests
- 3.1.27</changelog>
  <changelog author="carnold@suse.com" date="1463054400">- fate#319328 rejected. Revert the last commit
- 3.1.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465214400">- Stop generating autodocs (fate#320356)
- 3.1.29</changelog>
  <changelog author="dmueller@suse.com" date="1469448000">- Enable for AArch64 (bsc#989900)
- 3.1.30</changelog>
  <changelog author="carnold@suse.com" date="1485864000">- bsc#978225 - yast virtualization menu not updated after install
  KVM and KVM tools
- 3.2.0</changelog>
  <changelog author="mfilka@suse.com" date="1490788800">- bnc#1026027
  - dropped calls to insserv
- 3.2.1</changelog>
  <changelog author="jreidinger@suse.com" date="1500465600">- add proper dependency on yast2-bootloader (bsc#1048759)
- 3.2.2</changelog>
  <changelog author="zgock999@gmail.com" date="1500465601">- Fix package Install problem on Tumbleweed (bsc#1040042)</changelog>
  <changelog author="aginies@suse.com" date="1507723200">- use new pattern name for SLES (same as TW)
- Remove SLED as this is no more needed
- BSC#1055459
- 3.2.3</changelog>
  <changelog author="carnold@suse.com" date="1509624000">- bsc#1007599 - yast virtualization module does not work well with
  NM
- bsc#1066160 - yast2-vm lacks dependencies
- bsc#1008719 - Installing hypervisor (KVM) should also install
  network config
- Cleanup some whitespace issues in VirtConfig.rb and changelog
- 3.2.4</changelog>
  <changelog author="carnold@suse.com" date="1518177600">- The check for TextMode was in the wrong place and
  useless. Move it and update package list if user
  doesn't want GUI components installed. (bsc#1077694)
- 3.2.5</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="carnold@suse.com" date="1523534400">- bsc#1086487 - YaST2 segfault when virt-manager is installed but
  not yast2-vm
- bsc#1083455 - Internal error in yast configuration part
  "Relocation Server Configuration" - "Service with name
  'libvirtd-relocation-server' does not exist"
- bsc#1089255 - yast install hypervisor and tools not working
  correctly
- bsc#1088338 - yast2 vm tries to install
  patterns-openSUSE-kvm_server
- Remove all xend code from Relocation Server. It is no longer
  supported.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1523620800">- Use the new firewalld API (bsc#1083455)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="75694c0a13ad3812d4f3f05526adb22489a0aeb07c78378b7b652bf8d3d86441" name="yast2-vm" arch="x86_64">
  <version epoch="0" ver="4.0.2" rel="lp150.2.3.1"/>
  <changelog author="carnold@suse.com" date="1436270400">- bnc#936091 - installation of kvm and kvm-tools on s390 finishes
  with "Missing parameters to modify [:common, "switch_amode"]"
- 3.1.22</changelog>
  <changelog author="jreidinger@suse.com" date="1437480000">- fix crash when installing kvm virtualization pattern (bnc#938530)
- 3.1.23</changelog>
  <changelog author="carnold@suse.com" date="1439294400">- bsc#941125 - yast2-vm: uses /etc/inittab
- 3.1.24</changelog>
  <changelog author="carnold@suse.com" date="1457956800">- bsc#971054 - virtlogd is now required by libvirt and must be
  started automatically
- 3.1.25</changelog>
  <changelog author="jreidinger@suse.com" date="1460548800">- Remove workarounds not needed for new bootloader
  (related to FATE#317701)
- 3.1.26</changelog>
  <changelog author="carnold@suse.com" date="1462968000">- fate#319328 - Add virsh console conf to KVM Guests
- 3.1.27</changelog>
  <changelog author="carnold@suse.com" date="1463054400">- fate#319328 rejected. Revert the last commit
- 3.1.28</changelog>
  <changelog author="igonzalezsosa@suse.com" date="1465214400">- Stop generating autodocs (fate#320356)
- 3.1.29</changelog>
  <changelog author="dmueller@suse.com" date="1469448000">- Enable for AArch64 (bsc#989900)
- 3.1.30</changelog>
  <changelog author="carnold@suse.com" date="1485864000">- bsc#978225 - yast virtualization menu not updated after install
  KVM and KVM tools
- 3.2.0</changelog>
  <changelog author="mfilka@suse.com" date="1490788800">- bnc#1026027
  - dropped calls to insserv
- 3.2.1</changelog>
  <changelog author="jreidinger@suse.com" date="1500465600">- add proper dependency on yast2-bootloader (bsc#1048759)
- 3.2.2</changelog>
  <changelog author="zgock999@gmail.com" date="1500465601">- Fix package Install problem on Tumbleweed (bsc#1040042)</changelog>
  <changelog author="aginies@suse.com" date="1507723200">- use new pattern name for SLES (same as TW)
- Remove SLED as this is no more needed
- BSC#1055459
- 3.2.3</changelog>
  <changelog author="carnold@suse.com" date="1509624000">- bsc#1007599 - yast virtualization module does not work well with
  NM
- bsc#1066160 - yast2-vm lacks dependencies
- bsc#1008719 - Installing hypervisor (KVM) should also install
  network config
- Cleanup some whitespace issues in VirtConfig.rb and changelog
- 3.2.4</changelog>
  <changelog author="carnold@suse.com" date="1518177600">- The check for TextMode was in the wrong place and
  useless. Move it and update package list if user
  doesn't want GUI components installed. (bsc#1077694)
- 3.2.5</changelog>
  <changelog author="mfilka@suse.com" date="1523016000">- bnc#1087957 - version bump
- 4.0.0</changelog>
  <changelog author="carnold@suse.com" date="1523534400">- bsc#1086487 - YaST2 segfault when virt-manager is installed but
  not yast2-vm
- bsc#1083455 - Internal error in yast configuration part
  "Relocation Server Configuration" - "Service with name
  'libvirtd-relocation-server' does not exist"
- bsc#1089255 - yast install hypervisor and tools not working
  correctly
- bsc#1088338 - yast2 vm tries to install
  patterns-openSUSE-kvm_server
- Remove all xend code from Relocation Server. It is no longer
  supported.</changelog>
  <changelog author="knut.anderssen@suse.com" date="1523620800">- Use the new firewalld API (bsc#1083455)
- 4.0.1</changelog>
  <changelog author="schubi@suse.de" date="1530187200">- Added additional searchkeys to desktop file (fate#321043).
- 4.0.2</changelog>
</package>
<package pkgid="4c96c74e1b9b104b87ab444a6853a6ed50b938d2f4c2aa8f462f87aae387a00d" name="youtube-dl" arch="noarch">
  <version epoch="0" ver="2018.09.08" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 2017.08.06
  * amcnetworks: Make rating optional
  * yandexdisk: Add extractor
  * ard: Add support for liveS
  * pbs: Add support for new URL schema
  * vidme: Extract DASH and HLS formats</changelog>
  <changelog author="jengelh@inai.de" date="1502971200">- Update to new upstream release 2017.08.18
  * Sanitize byte string format URLs
  * Make sure format id is not empty</changelog>
  <changelog author="jengelh@inai.de" date="1506340800">- Update to new upstream release 2017.09.24
  * YoutubeDL: write raw subtitle files
  * laola1tv: Add support for tv.ittf.com
  * liveleak: Support multi-video pages
  * googledrive: Add support for subtitles
  * googledrive: Add support for source format
  * bbccouk: Add support for w-prefixed ids
  * charlierose: Add support for episodes
  * manyvids: Add support for preview videos
  * animeondemand: Add support for flash videos
  * downloader/fragment: Restart inconsistent incomplete fragment downloads
  * orf: Add new extractor for f4m stories
  * twitch: Add support for go.twitch.tv URLs
  * heise: Add support for YouTube embeds
  * lynda: Add support for educourse.ga
  * options: Accept lrc as a subtitle conversion target format
  * twitter: Add support for user_id-less URLs</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- update to 2017.11.15:
  * many update to various downloaders and extractors</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Update to new upstream release 2018.01.27
  * JWPlatform: Support iframes
  * openload: Add support for openload.link
  * utils: add hvc1 codec code to parse_codecs
  * downloader/fragment: Commit part file after each fragment In
    order to obtain correct resume_len on next iteration
  * mailru: Add support for embed URLs
  * downloader/fragment: Encode filename of fragment being
    removed
  * extractor/common: Introduce uploader, uploader_id and
    uploader_url meta fields for playlists
  * openload: Add support for oload.stream
  * extractor/common: Improve DASH formats extraction for jwplayer</changelog>
  <changelog author="jengelh@inai.de" date="1517832000">- Update to new upstream release 2018.02.04
  * Randomize HTTP chunk size
  * Fix HTTP/302 infinite loops by not reusing requests
  * brightcove: Pass embed page URL as referrer
  * youtube: enforce using chunked HTTP downloading for DASH formats</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Update to new upstream release 2018.02.26
  * veoh: Add support for embed URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523707200">- Update to new upstream release 2018.04.09
  * Do not save/restore console title while simulate
  * Relax JSON-LD context check
  * Add support for tube8 embeds
  * Add support for share-videos.se embeds
  * Extend URL regular expression
  * Bypass mature content check
  * Extract more metadata
  * Fix extraction
  * Fix extraction
  * Fix title extraction
  * Extend URL regular expression
  * Add support for oload.xyz
  * Relax stream URL regular expression
  * Fix extraction
  * Add support for season URLs
  * Add support for series</changelog>
  <changelog author="jengelh@inai.de" date="1523880000">- Update to new upstream release 2018.04.16
  * Add support for picarto.tv
  * Add support for mobile URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1524657600">- Update to new upstream release 2018.04.25
  * Fix match_str for boolean meta fields
  * Add support for pandoc 2 and disable smart extension (#16251)
  * Fix typo in media extension compatibility checker (#16215)
  * Recognize IPv6 stream URLs (#16136, #16137, #16205, #16246,
  [#16250])
  * Extract is_live according to status (#16259)
  * Relax URL regular expression (#16258)
  * Remove extractor (#16256)
  * Fix extraction (#16254)
  * Add ability to authenticate with cookies
  * Implement lazy playlist extraction (#10184)
  * Add support for TV channel live streams (#15279, #15809)
  * Fix video extraction (#15931)
  * Fix extraction (#15227)
  * Add support for nickjr.nl (#16230)
  * Fix metadata extraction
  * Add support for generic embeds (#16134, #16154)
  * Extract new azure URLs (#16223)
  * Fix extraction (#16217)
  * Improve embeds detection (#16201)
  * Fix extraction (#16119)
  * Skip DRM asset types (#16104)</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 2018.05.01
  * Restart download if .ytdl file is corrupt
  * Add support for old.reddit.com URLs</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Update to new upstream release 2018.05.18
  * youtube: fix extraction for embed restricted live streams
  * youtube: Make uploader extraction non fatal
  * youtube: Improve format filesize extraction
  * youtube: fix hd720 format position</changelog>
  <changelog author="jengelh@inai.de" date="1527595200">- Update to new upstream release 2018.05.26
  * imgur: Fix extraction
  * hidive: add support for authentication
  * nbc: add support for stream.nbcsports.com</changelog>
  <changelog author="jengelh@inai.de" date="1528286400">- Update to new upstream release 2018.06.04
  * tumblr: add support for authentication
  * soundcloud: detect format extension
  * rtmp: gracefully handle live streams interrupted by user
  * openload: add support for oload.win and oload.download
  * facebook: add support for tahoe player videos
  * youtube: extract track and artist</changelog>
  <changelog author="jengelh@inai.de" date="1532606400">- Update to new upstream releases 2018.07.21
  * pbs: Add another cove id pattern
  * dailymotion: add support for password protected videos
  * vidzi: Fix extraction
  * Prefer ffmpeg over avconv by default
  * dctptv: Restore extraction based on REST API
  * nrktv: Add support for new episode URL schema
  * nrktv: Add support for new season and serie URL schema</changelog>
  <changelog author="jengelh@inai.de" date="1532952000">- Update to new upstream release 2018.07.29
  * crunchyroll/playlist: restrict URL regular expression
  * ted: fix extraction for videos without nativeDownloads
  * vk: Fix extraction for inline-only videos</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 2018.08.04
  * viqeo: add extractor</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 2018.08.22
  * raywenderlich: Adapt to site redesign
  * imdb: Fix extension extraction</changelog>
  <changelog author="jengelh@inai.de" date="1535457600">- Update to new upstream release 2018.08.28
  * nova:embed: Add extractor (closes #17282)
  * Add support for vidzi.nu, vidto.se
  * youtube:playlist: Add support for music album playlists
    (OLAK5uy_ prefix)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Update to new upstream release 2018.09.08
  * ard: Add support for Beta ARD Mediathek
  * crunchyroll: parse vilos media data</changelog>
</package>
<package pkgid="0142fc02a2620422a793490e3204e8dfc547050c254f7701b88beacbde28c356" name="youtube-dl" arch="src">
  <version epoch="0" ver="2018.09.08" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1502107200">- Update to new upstream release 2017.08.06
  * amcnetworks: Make rating optional
  * yandexdisk: Add extractor
  * ard: Add support for liveS
  * pbs: Add support for new URL schema
  * vidme: Extract DASH and HLS formats</changelog>
  <changelog author="jengelh@inai.de" date="1502971200">- Update to new upstream release 2017.08.18
  * Sanitize byte string format URLs
  * Make sure format id is not empty</changelog>
  <changelog author="jengelh@inai.de" date="1506340800">- Update to new upstream release 2017.09.24
  * YoutubeDL: write raw subtitle files
  * laola1tv: Add support for tv.ittf.com
  * liveleak: Support multi-video pages
  * googledrive: Add support for subtitles
  * googledrive: Add support for source format
  * bbccouk: Add support for w-prefixed ids
  * charlierose: Add support for episodes
  * manyvids: Add support for preview videos
  * animeondemand: Add support for flash videos
  * downloader/fragment: Restart inconsistent incomplete fragment downloads
  * orf: Add new extractor for f4m stories
  * twitch: Add support for go.twitch.tv URLs
  * heise: Add support for YouTube embeds
  * lynda: Add support for educourse.ga
  * options: Accept lrc as a subtitle conversion target format
  * twitter: Add support for user_id-less URLs</changelog>
  <changelog author="astieger@suse.com" date="1510660800">- update to 2017.11.15:
  * many update to various downloaders and extractors</changelog>
  <changelog author="jengelh@inai.de" date="1517313600">- Update to new upstream release 2018.01.27
  * JWPlatform: Support iframes
  * openload: Add support for openload.link
  * utils: add hvc1 codec code to parse_codecs
  * downloader/fragment: Commit part file after each fragment In
    order to obtain correct resume_len on next iteration
  * mailru: Add support for embed URLs
  * downloader/fragment: Encode filename of fragment being
    removed
  * extractor/common: Introduce uploader, uploader_id and
    uploader_url meta fields for playlists
  * openload: Add support for oload.stream
  * extractor/common: Improve DASH formats extraction for jwplayer</changelog>
  <changelog author="jengelh@inai.de" date="1517832000">- Update to new upstream release 2018.02.04
  * Randomize HTTP chunk size
  * Fix HTTP/302 infinite loops by not reusing requests
  * brightcove: Pass embed page URL as referrer
  * youtube: enforce using chunked HTTP downloading for DASH formats</changelog>
  <changelog author="jengelh@inai.de" date="1519646400">- Update to new upstream release 2018.02.26
  * veoh: Add support for embed URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1523707200">- Update to new upstream release 2018.04.09
  * Do not save/restore console title while simulate
  * Relax JSON-LD context check
  * Add support for tube8 embeds
  * Add support for share-videos.se embeds
  * Extend URL regular expression
  * Bypass mature content check
  * Extract more metadata
  * Fix extraction
  * Fix extraction
  * Fix title extraction
  * Extend URL regular expression
  * Add support for oload.xyz
  * Relax stream URL regular expression
  * Fix extraction
  * Add support for season URLs
  * Add support for series</changelog>
  <changelog author="jengelh@inai.de" date="1523880000">- Update to new upstream release 2018.04.16
  * Add support for picarto.tv
  * Add support for mobile URLs</changelog>
  <changelog author="seb95.scou@gmail.com" date="1524657600">- Update to new upstream release 2018.04.25
  * Fix match_str for boolean meta fields
  * Add support for pandoc 2 and disable smart extension (#16251)
  * Fix typo in media extension compatibility checker (#16215)
  * Recognize IPv6 stream URLs (#16136, #16137, #16205, #16246,
  [#16250])
  * Extract is_live according to status (#16259)
  * Relax URL regular expression (#16258)
  * Remove extractor (#16256)
  * Fix extraction (#16254)
  * Add ability to authenticate with cookies
  * Implement lazy playlist extraction (#10184)
  * Add support for TV channel live streams (#15279, #15809)
  * Fix video extraction (#15931)
  * Fix extraction (#15227)
  * Add support for nickjr.nl (#16230)
  * Fix metadata extraction
  * Add support for generic embeds (#16134, #16154)
  * Extract new azure URLs (#16223)
  * Fix extraction (#16217)
  * Improve embeds detection (#16201)
  * Fix extraction (#16119)
  * Skip DRM asset types (#16104)</changelog>
  <changelog author="jengelh@inai.de" date="1525262400">- Update to new upstream release 2018.05.01
  * Restart download if .ytdl file is corrupt
  * Add support for old.reddit.com URLs</changelog>
  <changelog author="jengelh@inai.de" date="1526644800">- Update to new upstream release 2018.05.18
  * youtube: fix extraction for embed restricted live streams
  * youtube: Make uploader extraction non fatal
  * youtube: Improve format filesize extraction
  * youtube: fix hd720 format position</changelog>
  <changelog author="jengelh@inai.de" date="1527595200">- Update to new upstream release 2018.05.26
  * imgur: Fix extraction
  * hidive: add support for authentication
  * nbc: add support for stream.nbcsports.com</changelog>
  <changelog author="jengelh@inai.de" date="1528286400">- Update to new upstream release 2018.06.04
  * tumblr: add support for authentication
  * soundcloud: detect format extension
  * rtmp: gracefully handle live streams interrupted by user
  * openload: add support for oload.win and oload.download
  * facebook: add support for tahoe player videos
  * youtube: extract track and artist</changelog>
  <changelog author="jengelh@inai.de" date="1532606400">- Update to new upstream releases 2018.07.21
  * pbs: Add another cove id pattern
  * dailymotion: add support for password protected videos
  * vidzi: Fix extraction
  * Prefer ffmpeg over avconv by default
  * dctptv: Restore extraction based on REST API
  * nrktv: Add support for new episode URL schema
  * nrktv: Add support for new season and serie URL schema</changelog>
  <changelog author="jengelh@inai.de" date="1532952000">- Update to new upstream release 2018.07.29
  * crunchyroll/playlist: restrict URL regular expression
  * ted: fix extraction for videos without nativeDownloads
  * vk: Fix extraction for inline-only videos</changelog>
  <changelog author="jengelh@inai.de" date="1533470400">- Update to new upstream release 2018.08.04
  * viqeo: add extractor</changelog>
  <changelog author="jengelh@inai.de" date="1535198400">- Update to new upstream release 2018.08.22
  * raywenderlich: Adapt to site redesign
  * imdb: Fix extension extraction</changelog>
  <changelog author="jengelh@inai.de" date="1535457600">- Update to new upstream release 2018.08.28
  * nova:embed: Add extractor (closes #17282)
  * Add support for vidzi.nu, vidto.se
  * youtube:playlist: Add support for music album playlists
    (OLAK5uy_ prefix)</changelog>
  <changelog author="Jan Engelhardt &lt;jengelh@inai.de&gt;" date="1536580800">- Update to new upstream release 2018.09.08
  * ard: Add support for Beta ARD Mediathek
  * crunchyroll: parse vilos media data</changelog>
</package>
<package pkgid="57dd2bd6efbe9f11562df0ed04e88186a701890b626bc0df55d6d4d81cfeb4e2" name="zeromq" arch="src">
  <version epoch="0" ver="4.2.3" rel="lp150.2.5.2"/>
  <changelog author="mvyskocil@opensuse.org" date="1434456000">- Add pkgconfig(libsodium) as mandatory build dependency
- Change libuuid-devel to pkgconfig style</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 4.1.2 bnc#937912:
  * Added explicit reference to static link exception in every source file.
  * Bumped ABI version to 5:0:0 since 4.1.x changed the ABI.
  * Fixed STDINT event interface macros to work with CZMQ 3.0.
  * Fixed installation of man pages when BUILD_DOC is not set.
  * Fixed #1428 - regression on single-socket proxies.</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923200">- Conditionally use the pkgconfig style, to support SLE11</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923201">- Fix the conditionals on the previous commit</changelog>
  <changelog author="stephan.barth@suse.com" date="1443441600">- update to version 4.1.3.
  Changes from upstream:
  * Fixed #1532 - getsockopt ZMQ_RCVMORE now resets all bits instead of only
    32
  * Fixed #1445 - zmq::socket_base_t::connect fails on tcp ipv6 address</changelog>
  <changelog author="idonmez@suse.com" date="1444132800">- Re-enable %check</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Add libsodium-init.patch to handle sodium_init() error.</changelog>
  <changelog author="adam.majer@suse.de" date="1464609600">- Update to 4.1.4
  * fixed build failure with latest libsodium
  * handle IPv6 link local addresses
  * fixed assertion failure in msg.cpp:390 on STREAM sockets
  * fixed assertion failure in tcp.cpp after network reconnect
  * fixed socket monitor hang
- Remove libsodium-init.patch - upstreamed
- Run %check rule sequentially to prevent assert failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609601">- Append test_log in build output if there are failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609602">- Added patch 3ad076.patch
  * based on https://github.com/zeromq/zeromq4-1/commit/3ad076.patch
  * refreshed and removed NEWS section
  * fixes unbinding when IPv6 is available
- Add '--disable-dependency-tracking' since we are not rebuilding
- Re-enable concurrent check target, but fall back to sequential on
  failure. This allows quick test building, while allows
  sequential unit test run. Run tests 3x before 'official' failure as
  some are a little flaky (upstream acknowledges this)</changelog>
  <changelog author="adam.majer@suse.de" date="1466164800">- New upstream version 4.1.5
  * Fixed #1806 - uninitialised read in curve getsockopt.
  * Fixed #1807 - build broken with GCC 6.
  * Fixed #1831 - potential assertion failure with latest libsodium.
  * Fixed #1850 - detection issues with tweetnacl/libsodium.
  * Fixed #1877 - Avoid terminating connections prematurely
  * fixes some IPv6 related issues
- Removed 3ad076.patch, upstreamed</changelog>
  <changelog author="dmueller@suse.com" date="1467115200">- skip testsuite on qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Remove useless --with-pic, it's only for (non-built) static libs</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1478347200">- New upstream version 4.2.0
  * For Pieter. Thanks for making all of this possible.
  * This release introduces new APIs, but it is ABI compatible with
    libzmq 4.1.2 and up.
  * Fixed alignment problem on arm and sparc, need to rebuild
    against 4.2.0
  * New Context option ZMQ_MAX_MSGSZ
  * New Socket options:
  - ZMQ_HANDSHAKE_IVL
  - ZMQ_SOCKS_PROXY
  - ZMQ_XPUB_NODROP
  - ZMQ_BLOCKY
  - ZMQ_XPUB_MANUAL
  - ZMQ_XPUB_WELCOME_MSG
  - ZMQ_STREAM_NOTIFY
  - ZMQ_INVERT_MATCHING
  - ZMQ_HEARTBEAT_IVL
  - ZMQ_HEARTBEAT_TTL
  - ZMQ_HEARTBEAT_TIMEOUT
    ....
  * see NEWS for all changes
- Packaging
  * add --with-libsodium to link against libsodium and not internal
    tweetnacl
  * remove disable-silent-rules
  * add --enable-curve to build curve_keygen tool
    https://github.com/zeromq/libzmq/pull/2195
  * add libunwind to build dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1483185600">- New upstream version 4.2.1
  * Bugfix release. For complete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.1</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
</package>
<package pkgid="998baa7084af6794128563d0dfff6630e66f13eabb55127984556965992b7a1a" name="zeromq-devel" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="lp150.2.5.2"/>
  <changelog author="mvyskocil@opensuse.org" date="1434456000">- Add pkgconfig(libsodium) as mandatory build dependency
- Change libuuid-devel to pkgconfig style</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 4.1.2 bnc#937912:
  * Added explicit reference to static link exception in every source file.
  * Bumped ABI version to 5:0:0 since 4.1.x changed the ABI.
  * Fixed STDINT event interface macros to work with CZMQ 3.0.
  * Fixed installation of man pages when BUILD_DOC is not set.
  * Fixed #1428 - regression on single-socket proxies.</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923200">- Conditionally use the pkgconfig style, to support SLE11</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923201">- Fix the conditionals on the previous commit</changelog>
  <changelog author="stephan.barth@suse.com" date="1443441600">- update to version 4.1.3.
  Changes from upstream:
  * Fixed #1532 - getsockopt ZMQ_RCVMORE now resets all bits instead of only
    32
  * Fixed #1445 - zmq::socket_base_t::connect fails on tcp ipv6 address</changelog>
  <changelog author="idonmez@suse.com" date="1444132800">- Re-enable %check</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Add libsodium-init.patch to handle sodium_init() error.</changelog>
  <changelog author="adam.majer@suse.de" date="1464609600">- Update to 4.1.4
  * fixed build failure with latest libsodium
  * handle IPv6 link local addresses
  * fixed assertion failure in msg.cpp:390 on STREAM sockets
  * fixed assertion failure in tcp.cpp after network reconnect
  * fixed socket monitor hang
- Remove libsodium-init.patch - upstreamed
- Run %check rule sequentially to prevent assert failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609601">- Append test_log in build output if there are failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609602">- Added patch 3ad076.patch
  * based on https://github.com/zeromq/zeromq4-1/commit/3ad076.patch
  * refreshed and removed NEWS section
  * fixes unbinding when IPv6 is available
- Add '--disable-dependency-tracking' since we are not rebuilding
- Re-enable concurrent check target, but fall back to sequential on
  failure. This allows quick test building, while allows
  sequential unit test run. Run tests 3x before 'official' failure as
  some are a little flaky (upstream acknowledges this)</changelog>
  <changelog author="adam.majer@suse.de" date="1466164800">- New upstream version 4.1.5
  * Fixed #1806 - uninitialised read in curve getsockopt.
  * Fixed #1807 - build broken with GCC 6.
  * Fixed #1831 - potential assertion failure with latest libsodium.
  * Fixed #1850 - detection issues with tweetnacl/libsodium.
  * Fixed #1877 - Avoid terminating connections prematurely
  * fixes some IPv6 related issues
- Removed 3ad076.patch, upstreamed</changelog>
  <changelog author="dmueller@suse.com" date="1467115200">- skip testsuite on qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Remove useless --with-pic, it's only for (non-built) static libs</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1478347200">- New upstream version 4.2.0
  * For Pieter. Thanks for making all of this possible.
  * This release introduces new APIs, but it is ABI compatible with
    libzmq 4.1.2 and up.
  * Fixed alignment problem on arm and sparc, need to rebuild
    against 4.2.0
  * New Context option ZMQ_MAX_MSGSZ
  * New Socket options:
  - ZMQ_HANDSHAKE_IVL
  - ZMQ_SOCKS_PROXY
  - ZMQ_XPUB_NODROP
  - ZMQ_BLOCKY
  - ZMQ_XPUB_MANUAL
  - ZMQ_XPUB_WELCOME_MSG
  - ZMQ_STREAM_NOTIFY
  - ZMQ_INVERT_MATCHING
  - ZMQ_HEARTBEAT_IVL
  - ZMQ_HEARTBEAT_TTL
  - ZMQ_HEARTBEAT_TIMEOUT
    ....
  * see NEWS for all changes
- Packaging
  * add --with-libsodium to link against libsodium and not internal
    tweetnacl
  * remove disable-silent-rules
  * add --enable-curve to build curve_keygen tool
    https://github.com/zeromq/libzmq/pull/2195
  * add libunwind to build dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1483185600">- New upstream version 4.2.1
  * Bugfix release. For complete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.1</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
</package>
<package pkgid="7026919e00618f19e4406b7ea4c6a3de106f29929003797c778cce281f02fa3e" name="zeromq-tools" arch="x86_64">
  <version epoch="0" ver="4.2.3" rel="lp150.2.5.2"/>
  <changelog author="mvyskocil@opensuse.org" date="1434456000">- Add pkgconfig(libsodium) as mandatory build dependency
- Change libuuid-devel to pkgconfig style</changelog>
  <changelog author="tchvatal@suse.com" date="1436875200">- Version bump to 4.1.2 bnc#937912:
  * Added explicit reference to static link exception in every source file.
  * Bumped ABI version to 5:0:0 since 4.1.x changed the ABI.
  * Fixed STDINT event interface macros to work with CZMQ 3.0.
  * Fixed installation of man pages when BUILD_DOC is not set.
  * Fixed #1428 - regression on single-socket proxies.</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923200">- Conditionally use the pkgconfig style, to support SLE11</changelog>
  <changelog author="tampakrap@opensuse.org" date="1442923201">- Fix the conditionals on the previous commit</changelog>
  <changelog author="stephan.barth@suse.com" date="1443441600">- update to version 4.1.3.
  Changes from upstream:
  * Fixed #1532 - getsockopt ZMQ_RCVMORE now resets all bits instead of only
    32
  * Fixed #1445 - zmq::socket_base_t::connect fails on tcp ipv6 address</changelog>
  <changelog author="idonmez@suse.com" date="1444132800">- Re-enable %check</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Add libsodium-init.patch to handle sodium_init() error.</changelog>
  <changelog author="adam.majer@suse.de" date="1464609600">- Update to 4.1.4
  * fixed build failure with latest libsodium
  * handle IPv6 link local addresses
  * fixed assertion failure in msg.cpp:390 on STREAM sockets
  * fixed assertion failure in tcp.cpp after network reconnect
  * fixed socket monitor hang
- Remove libsodium-init.patch - upstreamed
- Run %check rule sequentially to prevent assert failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609601">- Append test_log in build output if there are failures</changelog>
  <changelog author="adam.majer@suse.de" date="1464609602">- Added patch 3ad076.patch
  * based on https://github.com/zeromq/zeromq4-1/commit/3ad076.patch
  * refreshed and removed NEWS section
  * fixes unbinding when IPv6 is available
- Add '--disable-dependency-tracking' since we are not rebuilding
- Re-enable concurrent check target, but fall back to sequential on
  failure. This allows quick test building, while allows
  sequential unit test run. Run tests 3x before 'official' failure as
  some are a little flaky (upstream acknowledges this)</changelog>
  <changelog author="adam.majer@suse.de" date="1466164800">- New upstream version 4.1.5
  * Fixed #1806 - uninitialised read in curve getsockopt.
  * Fixed #1807 - build broken with GCC 6.
  * Fixed #1831 - potential assertion failure with latest libsodium.
  * Fixed #1850 - detection issues with tweetnacl/libsodium.
  * Fixed #1877 - Avoid terminating connections prematurely
  * fixes some IPv6 related issues
- Removed 3ad076.patch, upstreamed</changelog>
  <changelog author="dmueller@suse.com" date="1467115200">- skip testsuite on qemu-linux-user</changelog>
  <changelog author="jengelh@inai.de" date="1467201600">- Remove useless --with-pic, it's only for (non-built) static libs</changelog>
  <changelog author="mvyskocil@opensuse.org" date="1478347200">- New upstream version 4.2.0
  * For Pieter. Thanks for making all of this possible.
  * This release introduces new APIs, but it is ABI compatible with
    libzmq 4.1.2 and up.
  * Fixed alignment problem on arm and sparc, need to rebuild
    against 4.2.0
  * New Context option ZMQ_MAX_MSGSZ
  * New Socket options:
  - ZMQ_HANDSHAKE_IVL
  - ZMQ_SOCKS_PROXY
  - ZMQ_XPUB_NODROP
  - ZMQ_BLOCKY
  - ZMQ_XPUB_MANUAL
  - ZMQ_XPUB_WELCOME_MSG
  - ZMQ_STREAM_NOTIFY
  - ZMQ_INVERT_MATCHING
  - ZMQ_HEARTBEAT_IVL
  - ZMQ_HEARTBEAT_TTL
  - ZMQ_HEARTBEAT_TIMEOUT
    ....
  * see NEWS for all changes
- Packaging
  * add --with-libsodium to link against libsodium and not internal
    tweetnacl
  * remove disable-silent-rules
  * add --enable-curve to build curve_keygen tool
    https://github.com/zeromq/libzmq/pull/2195
  * add libunwind to build dependencies</changelog>
  <changelog author="adam.majer@suse.de" date="1483185600">- New upstream version 4.2.1
  * Bugfix release. For complete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.1</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Compact the descriptions.</changelog>
  <changelog author="adam.majer@suse.de" date="1490097600">- New upstream version 4.2.2
  * fix SO_NOSIGPIPE and connection closing by peer race condition
  * fix IPv4-in-IPv6 mapped addresses parsing error
  * zmq_z85_decode did validate its input. The function has been
  fixed to correctly follow RFC32 and return NULL if the input is
  invalid.
  * for complete changelog see
  https://github.com/zeromq/libzmq/releases/tag/v4.2.2</changelog>
  <changelog author="adam.majer@suse.de" date="1496318400">- remove_werror.patch: don't use -Werror in compiler flags
- disable silent compilation flags</changelog>
  <changelog author="adam.majer@suse.de" date="1513252800">- New upstream version 4.2.3
  * API change: previously ZMQ_POLLOUT on a ZMQ_ROUTER socket
    returned always true due to how the type works. When
    ZMQ_ROUTER_MANDATORY is set, sending fails when the peer is
    not available, but ZMQ_POLLOUT always returns true anyway,
    which does not make sense. Now when ZMQ_ROUTER_MANDATORY is
    set, ZMQ_POLLOUT on a ZMQ_ROUTER will return true only if
    at least one peer is available.
    Given ZMQ_POLLOUT with ZMQ_ROUTER was not usable at all
    previously, we do not consider this a breakage warranting a
    major or minor version increase.
  * ZMQ_IDENTITY has been renamed to ZMQ_ROUTING_ID and
    ZMQ_CONNECT_RID has been renamed to ZMQ_CONNTECT_ROUTING_ID
    to disambiguate. ZMQ_IDENTITY and ZMQ_CONNECT_RID are still
    available to keep backward compatibility, and will be
    removed in a future release after further advance notice.
  * DRAFT API change: zmq_poller_wait, zmq_poller_wait_all and
    zmq_poller_poll have been changed to be inline with other
    existing APIs that have a timeout to return EAGAIN instead
    of ETIMEDOUT as the errno value.
  * Existing non-DRAFT socket types ZMQ_REP/REQ, ZMQ_ROUTER/DEALER
    and ZMQPUB/SUB, that were previously declared deprecated, have
    been reinstated as stable and supported
  * Curve: all remaining traces of debug output to console are now
    removed, and new DRAFT events are available to properly debug
    CURVE, PLAIN, GSSAPI and ZAP events and failures.
  * for compelete changelog see
    https://github.com/zeromq/libzmq/releases/tag/v4.2.3
- drop remove_werror.patch: can now be disabled at configure time,
  if needed.</changelog>
  <changelog author="dimstar@opensuse.org" date="1531224000">- Add baselibs.conf: build libzmq5-32bit, as it is a required
  dependency to libavfilter7-32bit (i.e ffmpeg 4).</changelog>
</package>
<package pkgid="b8c98a7da7fe77c76f5acdac6eceda077034f635723d5a1b21f3aae0be36dc40" name="zlib" arch="src">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="ce9c752929cb2c5d23dd56660f6715ba11d4feb04481072eca975476a6d7482f" name="zlib-devel" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="64ec3dd8d196886cf3419830555a43ccf0b0acb3f6fe077d09c828616cb30634" name="zlib-devel-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="63074dbbfead483514d2bb6601e3197f9c7c868038131728a99ff2d6e2e48855" name="zlib-devel-static" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="e700fe9816960875d35c75dedeae1704cab4f5f1468a656961adad77a4f8513e" name="zlib-devel-static-32bit" arch="x86_64">
  <version epoch="0" ver="1.2.11" rel="lp150.2.3.1"/>
  <changelog author="jengelh@inai.de" date="1353585600">- Replace %make_install by normal make install;
  the former is a constant source of agony in older or non-SUSE.</changelog>
  <changelog author="schwab@linux-m68k.org" date="1355572800">- Add zlib-devel-static to baselibs.conf, needed for binutils testsuite
- Migrate zlib-&lt;targettype&gt; to libz1-&lt;targettype&gt;</changelog>
  <changelog author="mvyskocil@suse.com" date="1362484800">- libz1-32bit obsoletes zlib-32bit &lt;= 1.2.7 (fixes bnc#806310)</changelog>
  <changelog author="idonmez@suse.com" date="1368273600">- Update to version 1.2.8
  * Add new inflateGetDictionary() function
  * Fix bug where gzopen() immediately followed by gzclose()
    would write an empty file instead of an empty gzip stream.
  * Fix bug in gzclose() when gzwrite() runs out of memory</changelog>
  <changelog author="mvyskocil@suse.com" date="1375099200">- zlib-format.patch, backport missing sle11 feature back to openSUSE
  bnc#831880</changelog>
  <changelog author="tchvatal@suse.com" date="1411646400">- Install examples to cover another angle from bnc#890228
- Cleanup with spec-cleaner</changelog>
  <changelog author="tchvatal@suse.com" date="1435147200">- Remove zlib-devel-static, nothing should use libz.a anyway.
- Package minizip library, everything using it should now pull
  minizip-devel and unbundle it bnc#935864</changelog>
  <changelog author="tchvatal@suse.com" date="1435665600">- Bring back zlib-devel-static. Needed by binutils</changelog>
  <changelog author="tchvatal@suse.com" date="1436788800">- Require zlib-devel in zlib-devel-static to fix previous change</changelog>
  <changelog author="jengelh@inai.de" date="1443096000">- Trim descriptions to fit target audience. Update RPM group
  classification.</changelog>
  <changelog author="tchvatal@suse.com" date="1480852800">- Include fixes for bnc#1003580 bnc#1003579 bnc#1003577 bnc#1013882:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch refreshed
  * zlib-bnc1013882.patch CVE-2016-9843</changelog>
  <changelog author="mpluskal@suse.com" date="1483358400">- Update to version 1.2.9:
  * Improve compress() and uncompress() to support large lengths
  * Allow building zlib outside of the source directory
  * Fix bug when level 0 used with Z_HUFFMAN or Z_RLE
  * Fix bugs in creating a very large gzip header
  * Add uncompress2() function, which returns the input size used
  * Dramatically speed up deflation for level 0 (storing)
  * Add gzfread() and gzfwrite(), duplicating the interfaces of fread() and fwrite()
  * Add crc32_z() and adler32_z() functions with size_t lengths
  * Many portability improvements
- Drop patches included in upstream:
  * zlib-bnc1003577.patch
  * zlib-bnc1003579-part2.patch
  * zlib-bnc1003579.patch
  * zlib-bnc1003580.patch
  * zlib-bnc1013882.patch
- Drop zlib-1.2.7-improve-longest_match-performance.patch
  * not accepted by upstream for two releases
  * rebasing no longer possible</changelog>
  <changelog author="mpluskal@suse.com" date="1483444800">- Update to version 1.2.10:
  * Avoid warnings on snprintf() return value
  * Fix bug in deflate_stored() for zero-length input
  * Fix bug in gzwrite.c that produced corrupt gzip files
  * Remove files to be installed before copying them in Makefile.in
  * Add warnings when compiling with assembler code</changelog>
  <changelog author="mpluskal@suse.com" date="1484568000">- Update to version 1.2.11:
  * Fix deflate stored bug when pulling last block from window
  * Permit immediate deflateParams changes before any deflate input</changelog>
  <changelog author="schwab@suse.de" date="1491307200">- baselibs.conf: add missing dependencies</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Add s390 performance patch (fate#314093):
  * zlib-1.2.11-optimized-s390.patch</changelog>
  <changelog author="mpluskal@suse.com" date="1496318400">- Add gpg signature
- Re-enable profiling</changelog>
  <changelog author="kah0922@gmail.com" date="1497268800">- Added 32bit minizip support</changelog>
  <changelog author="tchvatal@suse.com" date="1526385600">- Add patch to safeguard against negative values in uInt bsc#1071321:
  * 0001-Do-not-try-to-store-negative-values-in-unsigned-int.patch</changelog>
  <changelog author="tchvatal@suse.com" date="1529496000">- Add patch for fate#325307 zlib speedup on power8:
  * zlib-power8-fate325307.patch</changelog>
</package>
<package pkgid="d443b78ba010c1fa683f9c3df42c3fcf110cc041c42dd0e1d0287f95865d4210" name="znc" arch="src">
  <version epoch="0" ver="1.7.0" rel="lp150.2.3.1"/>
  <changelog author="suse@ammler.ch" date="1347883200">- update to 0.206 (bugfix release)
  - Identfile: don't crash when ZNC is shutting down.
  - CTCPReplies setting with empty value now blocks those CTCP
    requests to the client.
  - Show more sane error messages instead of "Error: Success".
  - Imapauth: Follow RFC more closely.
  - "No" is a false value too.</changelog>
  <changelog author="joey.yuzheng@gmail.com" date="1357387200">- add cap_sasl to support sasl which is needed for cloak usage.
  http://wiki.znc.in/Cap_sasl</changelog>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
</package>
<package pkgid="1f00a6a7d5a4bcb1079d3b5c99d1208bc168c9da90dda723896942a3de316456" name="znc" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="lp150.2.3.1"/>
  <changelog author="suse@ammler.ch" date="1347883200">- update to 0.206 (bugfix release)
  - Identfile: don't crash when ZNC is shutting down.
  - CTCPReplies setting with empty value now blocks those CTCP
    requests to the client.
  - Show more sane error messages instead of "Error: Success".
  - Imapauth: Follow RFC more closely.
  - "No" is a false value too.</changelog>
  <changelog author="joey.yuzheng@gmail.com" date="1357387200">- add cap_sasl to support sasl which is needed for cloak usage.
  http://wiki.znc.in/Cap_sasl</changelog>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
</package>
<package pkgid="272c97b912f31506661641023180d69bc06ef9f8a2c2c45b558bfd8753cb1fa9" name="znc" arch="src">
  <version epoch="0" ver="1.7.1" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
</package>
<package pkgid="4f11ecf579a7fc437b60a9f12865e5d03b4463d0cecf6dccff04a6a57cfd7d58" name="znc" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
</package>
<package pkgid="5017b10d83cd27488ab8f885c2d1a6f1a128e0fbf0655e8c3c69b3e5ebe83353" name="znc-devel" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="lp150.2.3.1"/>
  <changelog author="suse@ammler.ch" date="1347883200">- update to 0.206 (bugfix release)
  - Identfile: don't crash when ZNC is shutting down.
  - CTCPReplies setting with empty value now blocks those CTCP
    requests to the client.
  - Show more sane error messages instead of "Error: Success".
  - Imapauth: Follow RFC more closely.
  - "No" is a false value too.</changelog>
  <changelog author="joey.yuzheng@gmail.com" date="1357387200">- add cap_sasl to support sasl which is needed for cloak usage.
  http://wiki.znc.in/Cap_sasl</changelog>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
</package>
<package pkgid="1ec438dd4af4653e874450e3cbc893ee20822b4af2f460025970a9a41670fe83" name="znc-devel" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
</package>
<package pkgid="5ebbc382408cea677231bd30da3c9e4834510a9e3666a1661523ae901e2916e2" name="znc-lang" arch="noarch">
  <version epoch="0" ver="1.7.0" rel="lp150.2.3.1"/>
  <changelog author="suse@ammler.ch" date="1347883200">- update to 0.206 (bugfix release)
  - Identfile: don't crash when ZNC is shutting down.
  - CTCPReplies setting with empty value now blocks those CTCP
    requests to the client.
  - Show more sane error messages instead of "Error: Success".
  - Imapauth: Follow RFC more closely.
  - "No" is a false value too.</changelog>
  <changelog author="joey.yuzheng@gmail.com" date="1357387200">- add cap_sasl to support sasl which is needed for cloak usage.
  http://wiki.znc.in/Cap_sasl</changelog>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
</package>
<package pkgid="1f82edb181dbac9834bb17619684f6e996db6fabb450b33973183f960be7a840" name="znc-lang" arch="noarch">
  <version epoch="0" ver="1.7.1" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
</package>
<package pkgid="b8e4f747e472ef08c6da4484da36f428b7573107c3c576fa25801bdabfddfda3" name="znc-perl" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="lp150.2.3.1"/>
  <changelog author="suse@ammler.ch" date="1347883200">- update to 0.206 (bugfix release)
  - Identfile: don't crash when ZNC is shutting down.
  - CTCPReplies setting with empty value now blocks those CTCP
    requests to the client.
  - Show more sane error messages instead of "Error: Success".
  - Imapauth: Follow RFC more closely.
  - "No" is a false value too.</changelog>
  <changelog author="joey.yuzheng@gmail.com" date="1357387200">- add cap_sasl to support sasl which is needed for cloak usage.
  http://wiki.znc.in/Cap_sasl</changelog>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
</package>
<package pkgid="4b6646d1082138b2f80d3476b4a34ba0a30f611b7f74f53b033e708e55c1e019" name="znc-perl" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
</package>
<package pkgid="7299fe0b80c175fa02cfa055f77cf2b75b78506c8db9c7a081e25227d9d5881b" name="znc-python3" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="lp150.2.3.1"/>
  <changelog author="suse@ammler.ch" date="1347883200">- update to 0.206 (bugfix release)
  - Identfile: don't crash when ZNC is shutting down.
  - CTCPReplies setting with empty value now blocks those CTCP
    requests to the client.
  - Show more sane error messages instead of "Error: Success".
  - Imapauth: Follow RFC more closely.
  - "No" is a false value too.</changelog>
  <changelog author="joey.yuzheng@gmail.com" date="1357387200">- add cap_sasl to support sasl which is needed for cloak usage.
  http://wiki.znc.in/Cap_sasl</changelog>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
</package>
<package pkgid="99ee399b558ce04c9d30a9acb2aa4d1fd5f2895b332de856ba6890895bde71f5" name="znc-python3" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
</package>
<package pkgid="fe5812c48146ac18dbd2f59d4e1aa74ecd624ca570dbcc02972ce095301577ec" name="znc-tcl" arch="x86_64">
  <version epoch="0" ver="1.7.0" rel="lp150.2.3.1"/>
  <changelog author="suse@ammler.ch" date="1347883200">- update to 0.206 (bugfix release)
  - Identfile: don't crash when ZNC is shutting down.
  - CTCPReplies setting with empty value now blocks those CTCP
    requests to the client.
  - Show more sane error messages instead of "Error: Success".
  - Imapauth: Follow RFC more closely.
  - "No" is a false value too.</changelog>
  <changelog author="joey.yuzheng@gmail.com" date="1357387200">- add cap_sasl to support sasl which is needed for cloak usage.
  http://wiki.znc.in/Cap_sasl</changelog>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
</package>
<package pkgid="983c92298a364458e53c23c6d2e0651ac0d2b34dfb66e90e4aaec2c02c7c3271" name="znc-tcl" arch="x86_64">
  <version epoch="0" ver="1.7.1" rel="lp150.2.6.1"/>
  <changelog author="mpluskal@suse.com" date="1411992000">- Update to new version (1.4)
- Split to more packages
- Enable perl, python and tcl modules
- Remove obsolete modules
- Spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1411992001">- Tighter dependency for perl
- Cleanup specfile</changelog>
  <changelog author="mpluskal@suse.com" date="1412078400">- Use proper licence
- Some tiny spec file cleanups</changelog>
  <changelog author="mpluskal@suse.com" date="1423483200">- Rename znc-python to znc-python3
- Add signature and znc.keyring
- Reorder source names
- Correct (pre) dependencies for older releases of openSUSE</changelog>
  <changelog author="mpluskal@suse.com" date="1424001600">- Update to 1.6.0:
  * Switch versioning scheme to &lt;major&gt;.&lt;minor&gt;.&lt;patch&gt;.  Add settings
  * for which SSL/TLS protocols to use (SSLProtocols),
  which ciphers to enable (SSLCiphers). By default TLSv1+ are enabled,
  SSLv2/3 are disabled. Default ciphers are what Mozilla advices:
  https://wiki.mozilla.org/Security/Server_Side_TLS#Intermediate_compatibility_.28default.29
  * Validate SSL certificates.  Allow clients to specify an ID as part of
  * username
  (user[@identifier][/network]). Currently not used, but modules can
  use it.
  * Add alias module for ZNC-side command interception and processing.
  * Support character encodings with separate settings for networks,
  and for clients. It replaces older charset module, which didn't work
  well with webadmin, log and other modules.
  * Support X-Forwarded-For HTTP header, used with new TrustedProxy
  * setting.  Add URIPrefix option for HTTP listeners, used with reverse
  * proxy.  Store query buffers per query the same way it's done for
  * channels,
  add new option AutoClearQueryBuffer.
  * Add DisableChan command to *status, it was available only in
  webadmin before.
  * Allow wildcards in arguments of Help commands of *status and
  various modules.
  * Support IRCv3.2 batches, used for buffer playbacks.  Support IRCv3.2
  * self-message.  Remove awaynick module. It's considered bad etiquette.
  * Add JoinDelay setting, which allows a delay between
  connection to server, and joining first channel. By default it joins
  immediately after connect.
  * Make Detach, EnableChan and DisableChan commands of *status
  accept multiple channels.
  * znc-buildmod: Build output to the current working directory.  Wrap
  * long lines in tables (e.g. in Help or
  ListAvailMods commands).
  * Support ECDHE if available in OpenSSL.  Report ZNC version more
  * consistently, add HideVersion
  setting, which hides ZNC version from public.
  * Bump compiler requirements to support C++11. This means
  GCC 4.7+, Clang 3.2+, SWIG 3.0.0+.
- Drop support for old distributions since they lack support for
  C++11
- Drop package extra, all modules are now in znc
- Disable colloquy plugin since it fails to build
- Drop init script</changelog>
  <changelog author="mimi.vx@gmail.com" date="1438776000">- Update to 1.6.1:
  * Fixed the problem that channels were no longer removed from the config despite
  of chansaver being loaded.
  * Fixed query buffer size for users who have the default channel buffer size set to 0.
  * Fixed a startup failure when simple_away was loaded after awaynick.
  * Fixed channel matching commands, such as DETACH, to be case insensitive.
  * Specified the required compiler versions in the configure script.
  * Fixed a rare conflict of HTTP-Basic auth and cookies.
  * Hid local IP address from the 404 page.
  * Fixed a build failure for users who have -Werror=missing-declarations in their CXXFLAGS.
  * Fixed CXXFLAGS=-DVERSION_EXTRA="foo" which is used by some distros to package ZNC.
  * Fixed znc-buildmod on Cygwin.
  * Fixed CThreadPool destructor to handle spurious wakeups.
  * Fixed make distclean to remove zncconfig.h.
  * Improved the error message about --datadir.
  * Fixed a compilation warning when HAVE_LIBSSL is not defined.
  * Fixed 'comparision' typos in CString documentation.
  * Added a non-minified version of the jQuery source code to make Linux distributions
  (Debian) happy, even though the jQuery license does not require this.
  * chansaver:
  * Fixed random loading behavior due to an uninitialized member variable.
  * modpython:
  * Fixed access to CUser::GetUserClients() and CUser::GetAllClients().
  * sasl:
  * Improved help texts for the SET and REQUIREAUTH commands. (#875)
  * savebuff:
  * Fixed periodical writes on the disk when the module is loaded after startup. (#868)
  * webadmin:
  * Fixed module checkboxes not to claim that all networks/users have loaded
    a module when there are no networks/users. (#872)
  * Added an explanation that ZNC was built without ICU support, when encoding
    settings are disabled for that reason.
  * Improved the breadcrumbs.
  * Mentioned ExpandString in CTCP replies.
  * Added an explanation how to delete port which is used to access webadmin.</changelog>
  <changelog author="mpluskal@suse.com" date="1447761600">- Update to 1.6.2
  * fixes
  + Fixed a use-after-delete in webadmin. It was already
  partially fixed in ZNC 1.4; since 1.4 it has been still
  possible to trigger, but much harder.
  + Fixed a startup failure when awaynick and simple_away were
  both loaded, and simple_away had arguments.
  + Fixed a build failure when using an ancient OpenSSL version.
  + Fixed a build failure when using OpenSSL which was built
  without SSLv3 support.
  + Bindhost was sometimes used as ident.
  + CAP :END wasn't parsed correctly, causing timeout during
  login for some clients.
  + Fixed channel keys if client joined several channels in
  single command.
  + Fixed memory leak when reading an invalid config.
  * autovoice
  + Check for autovoices when we are opped.
  * controlpanel
  + Fixed DelCTCPReply case-insensitivity.
  * dcc
  + Add missing return statement. It was harmless.
  * modpython
  + Fixed a memory leak.
  * modules_online
  + Wrong ident was used before.
  * stickychan
  + Fixed to unstick inaccessible channels to avoid infinite
  join loops.
  * internal changes
  + Fixed the nick passed to CModule::OnChanMsg() so it has
  channel permissions set.
  + Fixed noisy -Winconsistent-missing-override compilation
  warnings.
  + Initialized some fields in constructors of modules before
  OnLoad().
- Make building more verbose
- Partially fixes bsc#956254 - CVE-2014-9043</changelog>
  <changelog author="mpluskal@suse.com" date="1456315200">- Update to 1.6.3
  * New character encoding is now applied immediately, without
    reconnect.
  * Fixed build with LibreSSL. (#594)
  * Fixed error 404 when accessing the web UI with the configured
    URI prefix, but without the / in the end.
  * znc-buildmod now exits with non-zero exit code when the .cpp
    file is not found. (#1226)
  * Fixed znc-buildmod on Cygwin.
  * ExpandString got expanded.
  * Default quit message is switche
- Small spec file cleanup</changelog>
  <changelog author="mpluskal@suse.com" date="1459252800">- Update changelog with missed issue boo#973088 (update to 1.6.3)</changelog>
  <changelog author="mpluskal@suse.com" date="1481716800">- Update to version 1.6.4 (boo#1017182):
  * Fixed build with OpenSSL 1.1. (#1310)
  * Fixed build on Cygwin.
  * Fixed a segfault after cloning a user. The bug was introduced in ZNC 1.6.0. (#1340)
  * Fixed a segfault when deleting a user or network which is waiting for DNS during connection. The bug was introduced in ZNC 1.0. (#1342)
  * Fixed a segfault which could be triggered using alias module. (#1347)
  * Fixed an error in controlpanel module when setting the bindhost of another user.
  * Fixed route_replies to not cause client to disconnect by timeout. (#1299)
  * Fixed compatibility with the Gitter IRC bridge. (#1321)
  * Fixed OnInvite for modpython and modperl. (#1283)
  * Fixed external location of GoogleTest for make test.</changelog>
  <changelog author="jengelh@inai.de" date="1486123200">- Slightly trim descriptions.</changelog>
  <changelog author="mpluskal@suse.com" date="1486123201">- Drop extra hardening flags</changelog>
  <changelog author="mpluskal@suse.com" date="1489579200">- Update to version 1.6.5:
  * Fixed a regression of 1.6.4 which caused a crash in modperl/modpython. (#1283)
  * Fixed the behavior of verbose command in the sasl module. (#1291)</changelog>
  <changelog author="mpluskal@suse.com" date="1494417600">- Update project url</changelog>
  <changelog author="jzelazkova@suse.com" date="1510228800">- Cleanup of spec file with spec-cleaner</changelog>
  <changelog author="mpluskal@suse.com" date="1520424000">- Update to version 1.6.6:
  * Fix use-after-free in znc --makepem. It was broken for a long
    time, but started segfaulting only now. This is a useability
    fix, not a security fix, because self-signed (or signed by a
    CA) certificates can be created without using --makepem, and
    then combined into znc.pem.</changelog>
  <changelog author="mpluskal@suse.com" date="1527854400">- Update to version 1.7.0:
  * Add CMake build. Minimum supported CMake version is 3.1. For now ZNC can be built with either CMake or autoconf. In future autoconf is going to be removed.
  * Currently znc-buildmod requires python if CMake was used; if that's a concern for you, please open a bug.
  * Increase minimum GCC version from 4.7 to 4.8. Minimum Clang version stays at 3.2.
  * Make ZNC UI translateable to different languages (only with CMake), add partial Russian and German translations. (#1237) (#1354) (#1462)
  * If you want to translate ZNC to your language, please join https://crowdin.com/project/znc-bouncer
  * Configs written before ZNC 0.206 can't be read anymore (#929)
  * Implement IRCv3.2 capabilities away-notify, account-notify, extended-join (#315) (#316)
  * Implement IRCv3.2 capabilities echo-message, cap-notify on the "client side" (#950)
  * Update capability names as they are named in IRCv3.2: znc.in/server-time-iso?server-time, znc.in/batch?batch. Old names will continue working for a while, then will be removed in some future version.
  * Make ZNC request server-time from server when available (#839)
  * Increase accepted line length from 1024 to 2048 to give some space to message tags
  * Separate buffer size settings for channels and queries (#967)
  * Support separate SSLKeyFile and SSLDHParamFile configuration in addition to existing SSLCertFile (#1192)
  * Add "AuthOnlyViaModule" global/user setting (#331)
  * Added pyeval module
  * Added stripcontrols module (#387)
  * Add new substitutions to ExpandString: %empty% and %network%. (#1049) (#1139)
  * Stop defaulting real name to "Got ZNC?" (#818)
  * Make the user aware that debug mode is enabled. (#1446)
  * Added ClearAllBuffers command (#852)
  * Don't require CSRF token for POSTs if the request uses HTTP Basic auth. (#946)
  * Set HttpOnly and SameSite=strict for session cookies (#1077) (#1450)
  * Add SNI SSL client support (#1200)
  * Add support for CIDR notation in allowed hosts list and in trusted proxy list (#207) (#1219)
  * Add network-specific config for cert validation in addition to user-supplied fingerprints: TrustAllCerts, defaults to false, and TrustPKI, defaults to true. (#866)
  * Add /attach command for symmetry with /detach. Unlike /join it allows wildcards.
  * Timestamp format now supports sub-second precision with %f. Used in awaystore, listsockets, log modules and buffer playback when client doesn't support server-time (#1455)
  * Build on macOS using ICU, Python, and OpenSSL from Homebrew, if available (#894)
  * Remove --with-openssl=/path option from ./configure. SSL is still supported and is still configurable
- Update dependencies
- Run spec-cleaner
- Use cmake for building</changelog>
  <changelog author="tchvatal@suse.com" date="1528113600">- Define systemd unitdir for cmake</changelog>
  <changelog author="mpluskal@suse.com" date="1531742400">- Fix boo#1101280 CVE-2018-14056
  * znc-traversal.patch
- Fix boo#1101281 CVE-2018-14055
  * znc-inject.patch
  * znc-inject2.patch
- Fix building on Leap-42* by using less strict linker flags</changelog>
  <changelog author="mpluskal@suse.com" date="1531915200">- Update to version 1.7.1:
  * Security critical fixes[edit]
    + CVE-2018-14055: non-admin user could gain admin privileges and shell access by injecting values into znc.conf.
    + CVE-2018-14056: path traversal in HTTP handler via ../ in a web skin name.
  * Core
    + Fix znc-buildmod to not hardcode the compiler used to build ZNC anymore in CMake build (#1536)
    + Fix language selector. Russian and German were both not selectable.
    + Fix build without SSL support (#1554)
    + Fix several broken strings
    + Stop spamming users about debug mode. This feature was added in 1.7.0, now reverted. (#1541)
  * New
    + Add partial Spanish, Indonesian, and Dutch translations
  * Modules
    + adminlog: Log the error message again (regression of 1.7.0) (#1557)
    + admindebug: New module, which allows admins to turn on/off --debug in runtime (#1556)
    + flooddetach: Fix description of commands (#1548)
    + modperl: Fix memory leak in NV handling
    + modperl: Fix functions which return VCString (#1543)
    + modpython: Fix functions which return VCString (#1543)
    + webadmin: Fix fancy CTCP replies editor for Firefox. It was showing the plain version even when JS is enabled
  * Internal
    + Deprecate one of the overloads of CMessage::GetParams(), rename it to CMessage::GetParamsColon()
    + Don't throw from destructor in the integration test
    + Fix a warning with integration test / gmake / znc-buildmod interaction.
- Drop upstream patches:
  * znc-inject2.patch
  * znc-inject.patch
  * znc-traversal.patch</changelog>
</package>
<package pkgid="0c352578a9d9e0e727a55c34d186e2edafeb87373cb9fb3813803f57205abb3e" name="zsh" arch="src">
  <version epoch="0" ver="5.5" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1430308800">- Add gcc5-fix.patch to fix signames.c generation with gcc5</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1430654400">- Fix openSUSE versions in osc completion
  * zsh-osc-completion.patch</changelog>
  <changelog author="idonmez@suse.com" date="1433073600">- Update to version 5.0.8
  * Global aliases can be created for syntactic tokens such as command
    separators (";", "&amp;", "|", "&amp;&amp;", "||"), redirection operators, etc.
  * There have been various further improvements to builtin handling
    with the POSIX_BUILTINS option (off by default) for compatibility with
    the POSIX standard.
  * 'whence -v' is now more informative, and 'whence -S' shows you
    how a full chain of symbolic links resolves to a command.
  * The 'p' parameter flag now allows an argument to be specified
    as a reference to a variable, e.g. ${(ps.$sep.)foo} to split $foo
    on a string given by $sep.
  * The option FORCE_FLOAT now forces variables, not just constants,
    to floating point in arithmetic expressions.
  * The type of an assignment in arithmetic expressions, e.g. the
    type seen by the variable res in $(( res = a = b )), is now
    more logical and C-like.
  * The default binding of 'u' in vi command mode has changed to undo
    multiple changes when invoked repeatedly. '^R' is now bound to redo
    changes. To revert to toggling of the last edit use:
    bindkey -a u vi-undo-change
  * Compatibility with Vim has been improved for vi editing mode. Most
    notably, Vim style text objects are supported and the region can be
    manipulated with vi commands in the same manner as Vim's visual mode.
  * Elements of the watch variable may now be patterns.
  * The logic for retrying history locking has been improved.
- Remove gcc5-fix.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1434283200">- Add printf-regress.patch to fix a printf regression boo#934175</changelog>
  <changelog author="idonmez@suse.com" date="1441108800">- Update to version 5.1
  * The print builtin has new options -x and -X to expand tabs.
  * Several new command completions and numerous updates to others.
  * Options to "fc" to segregate internal and shared history.
  * All emulations including "sh" use multibyte by default; several
    repairs to multibyte handling.
  * ZLE supports "bracketed paste" mode to avoid interpreting pasted
    newlines as accept-line.  Pastes can be highlighted for visibility
    and to make it more obvious whether accept-line has occurred.
  * Improved (though still not perfect) POSIX compatibility for getopts
    builtin when POSIX_BUILTINS is set.
  * New setopt APPEND_CREATE for POSIX-compatible NO_CLOBBER behavior.
  * Completion of date values now displays in a calendar format when
    the complist module is available.  Controllable by zstyle.
  * New parameter UNDO_LIMIT_NO for more control over ZLE undo repeat.
  * Several repairs/improvements to the contributed narrow-to-region
    ZLE function.
  * Many changes to child-process and signal handling to eliminate race
    conditions and avoid deadlocks on descriptor and memory management.
  * New builtin sysopen in zsh/system module for detailed control of
    file descriptor modes.
- Remove printf-regress.patch, upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1441108801">- Add read1char_signals.patch to fix workers/36373</changelog>
  <changelog author="idonmez@suse.com" date="1442059200">- Update to version 5.1.1
  * Bug fixes for regressions in 5.1 release
- Remove read1char_signals.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Remove -Wl,-z,now it breaks module loading rh#1277996</changelog>
  <changelog author="idonmez@suse.com" date="1449144000">- Update to version 5.2
  * The new module zsh/param/private can be loaded to allow the shell
    to define parameters that are private to a function scope (i.e. are
    not propagated to nested functions called within this function).
  * The GLOB_STAR_SHORT option allows the pattern **/* to be shortened to
    just ** if no / follows. so **.c searches recursively for a file whose
    name has the suffix ".c".
  * The effect of the WARN_CREATE_GLOBAL option has been significantly
    extended, so expect it to cause additional warning messages about
    parameters created globally within function scope.</changelog>
  <changelog author="mpluskal@suse.com" date="1449748800">- Add gpg signature</changelog>
  <changelog author="llua@gmx.com" date="1464177600">- Add CentOS [67] support</changelog>
  <changelog author="mmanno@suse.com" date="1472558400">- Remove custom zshrc and zshenv as they might interfere with the users config
- Remove unused zshprompt.pl
- Move install outside loop in spec file, was executed too often</changelog>
  <changelog author="idonmez@suse.com" date="1473336000">- Read /etc/profile as zsh again.</changelog>
  <changelog author="idonmez@suse.com" date="1481716800">- Update to zsh 5.3
  * Unicode9 support, this needs support from your terminal to
    work correctly.
  * The new word modifier ':P' computes the physical path of the
    argument.
  * The output of "typeset -p" uses "export" commands or the "-g"
    option for parameters that are not local to the current scope.
  * vi-repeat-change can repeat user-defined widgets if the widget
    calls zle -f vichange.
  * The parameter $registers now makes the contents of vi register
    buffers available to user-defined widgets.
  * New vi-up-case and vi-down-case builtin widgets bound to gU/gu
    (or U/u in visual mode) for doing case conversion.
  * A new select-word-match function provides vim-style text objects
    with configurable word boundaries using the existing
    match-words-by-style mechanism.
  * Support for the conditional expression [[ -v var ]] to test if a
    variable is set for compatibility with other shells.
  * The print and printf builtins have a new option -v to assign the
    output to a variable.
  * New x: syntax in completion match specifications make it possible
    to disable match specifications hardcoded in completion functions.
- Re-add custom zshrc and zshenv to unbreak compatibility with old
  usage (boo#998858).
- Add fix-printf.patch to fix a regression in printf.</changelog>
  <changelog author="jmatejek@suse.com" date="1484049600">- fix broken completion for filterdiff: fix-patchutils-completion.patch
  (boo#1019130)</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Update to 5.3.1
  * Fix typo in chflags completion
  * Fixed invalid git commands completion
  * VCS info system: vcs_info git: Avoid a fork.
  * Fix handling of "printf -" and "printf --"
- Removed upstream merged fix-printf.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1519732800">- Updated to 5.4.2
  * The 'exec' and 'command' precommand modifiers, and options to
    them, are now parsed after parameter expansion.
  * Functions executed by ZLE widgets no longer have their standard
    input closed, but redirected from /dev/null instead.
  * There is an option WARN_NESTED_VAR, a companion to the existing
    WARN_CREATE_GLOBAL that causes a warning if a function updates a
    variable from an enclosing scope without using typeset -g.
  * zmodload now has an option -s to be silent on a failure to find
    a module but still print other errors.
- Dropped patch merged upstream:
  * fix-patchutils-completion.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1522152000">- Added zsh-CVE-2018-1071.patch: Fixed a stack-based buffer overflow
  in exec.c:hashcmd() (CVE-2018-1071 bnc#1084656)
- Added zsh-CVE-2018-1083.patch: Fixed a stack-based buffer overflow
  in gen_matches_files() at compctl.c (CVE-2018-1083 bnc#1087026)
- Cleaned up spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1523448000">- Update to 5.5
  * The effect of the NO_INTERACTIVE_COMMENTS option extends into $(...)
    and `...` command substitutions when used on the command line.
  * Dropped patches, which are included upstream now:
  - zsh-CVE-2018-1071.patch
  - zsh-CVE-2018-1083.patch
  * Fixes a buffer overflow in utils.c:checkmailpath() that can lead to
    local arbitrary code execution (CVE-2018-1100 bnc#1089030)</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Update RPM groups.</changelog>
</package>
<package pkgid="78b9731e83527d4b93bca2a0b2fca88ea4d29ca5a9b9302e67bfdb146d85922c" name="zsh" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1430308800">- Add gcc5-fix.patch to fix signames.c generation with gcc5</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1430654400">- Fix openSUSE versions in osc completion
  * zsh-osc-completion.patch</changelog>
  <changelog author="idonmez@suse.com" date="1433073600">- Update to version 5.0.8
  * Global aliases can be created for syntactic tokens such as command
    separators (";", "&amp;", "|", "&amp;&amp;", "||"), redirection operators, etc.
  * There have been various further improvements to builtin handling
    with the POSIX_BUILTINS option (off by default) for compatibility with
    the POSIX standard.
  * 'whence -v' is now more informative, and 'whence -S' shows you
    how a full chain of symbolic links resolves to a command.
  * The 'p' parameter flag now allows an argument to be specified
    as a reference to a variable, e.g. ${(ps.$sep.)foo} to split $foo
    on a string given by $sep.
  * The option FORCE_FLOAT now forces variables, not just constants,
    to floating point in arithmetic expressions.
  * The type of an assignment in arithmetic expressions, e.g. the
    type seen by the variable res in $(( res = a = b )), is now
    more logical and C-like.
  * The default binding of 'u' in vi command mode has changed to undo
    multiple changes when invoked repeatedly. '^R' is now bound to redo
    changes. To revert to toggling of the last edit use:
    bindkey -a u vi-undo-change
  * Compatibility with Vim has been improved for vi editing mode. Most
    notably, Vim style text objects are supported and the region can be
    manipulated with vi commands in the same manner as Vim's visual mode.
  * Elements of the watch variable may now be patterns.
  * The logic for retrying history locking has been improved.
- Remove gcc5-fix.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1434283200">- Add printf-regress.patch to fix a printf regression boo#934175</changelog>
  <changelog author="idonmez@suse.com" date="1441108800">- Update to version 5.1
  * The print builtin has new options -x and -X to expand tabs.
  * Several new command completions and numerous updates to others.
  * Options to "fc" to segregate internal and shared history.
  * All emulations including "sh" use multibyte by default; several
    repairs to multibyte handling.
  * ZLE supports "bracketed paste" mode to avoid interpreting pasted
    newlines as accept-line.  Pastes can be highlighted for visibility
    and to make it more obvious whether accept-line has occurred.
  * Improved (though still not perfect) POSIX compatibility for getopts
    builtin when POSIX_BUILTINS is set.
  * New setopt APPEND_CREATE for POSIX-compatible NO_CLOBBER behavior.
  * Completion of date values now displays in a calendar format when
    the complist module is available.  Controllable by zstyle.
  * New parameter UNDO_LIMIT_NO for more control over ZLE undo repeat.
  * Several repairs/improvements to the contributed narrow-to-region
    ZLE function.
  * Many changes to child-process and signal handling to eliminate race
    conditions and avoid deadlocks on descriptor and memory management.
  * New builtin sysopen in zsh/system module for detailed control of
    file descriptor modes.
- Remove printf-regress.patch, upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1441108801">- Add read1char_signals.patch to fix workers/36373</changelog>
  <changelog author="idonmez@suse.com" date="1442059200">- Update to version 5.1.1
  * Bug fixes for regressions in 5.1 release
- Remove read1char_signals.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Remove -Wl,-z,now it breaks module loading rh#1277996</changelog>
  <changelog author="idonmez@suse.com" date="1449144000">- Update to version 5.2
  * The new module zsh/param/private can be loaded to allow the shell
    to define parameters that are private to a function scope (i.e. are
    not propagated to nested functions called within this function).
  * The GLOB_STAR_SHORT option allows the pattern **/* to be shortened to
    just ** if no / follows. so **.c searches recursively for a file whose
    name has the suffix ".c".
  * The effect of the WARN_CREATE_GLOBAL option has been significantly
    extended, so expect it to cause additional warning messages about
    parameters created globally within function scope.</changelog>
  <changelog author="mpluskal@suse.com" date="1449748800">- Add gpg signature</changelog>
  <changelog author="llua@gmx.com" date="1464177600">- Add CentOS [67] support</changelog>
  <changelog author="mmanno@suse.com" date="1472558400">- Remove custom zshrc and zshenv as they might interfere with the users config
- Remove unused zshprompt.pl
- Move install outside loop in spec file, was executed too often</changelog>
  <changelog author="idonmez@suse.com" date="1473336000">- Read /etc/profile as zsh again.</changelog>
  <changelog author="idonmez@suse.com" date="1481716800">- Update to zsh 5.3
  * Unicode9 support, this needs support from your terminal to
    work correctly.
  * The new word modifier ':P' computes the physical path of the
    argument.
  * The output of "typeset -p" uses "export" commands or the "-g"
    option for parameters that are not local to the current scope.
  * vi-repeat-change can repeat user-defined widgets if the widget
    calls zle -f vichange.
  * The parameter $registers now makes the contents of vi register
    buffers available to user-defined widgets.
  * New vi-up-case and vi-down-case builtin widgets bound to gU/gu
    (or U/u in visual mode) for doing case conversion.
  * A new select-word-match function provides vim-style text objects
    with configurable word boundaries using the existing
    match-words-by-style mechanism.
  * Support for the conditional expression [[ -v var ]] to test if a
    variable is set for compatibility with other shells.
  * The print and printf builtins have a new option -v to assign the
    output to a variable.
  * New x: syntax in completion match specifications make it possible
    to disable match specifications hardcoded in completion functions.
- Re-add custom zshrc and zshenv to unbreak compatibility with old
  usage (boo#998858).
- Add fix-printf.patch to fix a regression in printf.</changelog>
  <changelog author="jmatejek@suse.com" date="1484049600">- fix broken completion for filterdiff: fix-patchutils-completion.patch
  (boo#1019130)</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Update to 5.3.1
  * Fix typo in chflags completion
  * Fixed invalid git commands completion
  * VCS info system: vcs_info git: Avoid a fork.
  * Fix handling of "printf -" and "printf --"
- Removed upstream merged fix-printf.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1519732800">- Updated to 5.4.2
  * The 'exec' and 'command' precommand modifiers, and options to
    them, are now parsed after parameter expansion.
  * Functions executed by ZLE widgets no longer have their standard
    input closed, but redirected from /dev/null instead.
  * There is an option WARN_NESTED_VAR, a companion to the existing
    WARN_CREATE_GLOBAL that causes a warning if a function updates a
    variable from an enclosing scope without using typeset -g.
  * zmodload now has an option -s to be silent on a failure to find
    a module but still print other errors.
- Dropped patch merged upstream:
  * fix-patchutils-completion.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1522152000">- Added zsh-CVE-2018-1071.patch: Fixed a stack-based buffer overflow
  in exec.c:hashcmd() (CVE-2018-1071 bnc#1084656)
- Added zsh-CVE-2018-1083.patch: Fixed a stack-based buffer overflow
  in gen_matches_files() at compctl.c (CVE-2018-1083 bnc#1087026)
- Cleaned up spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1523448000">- Update to 5.5
  * The effect of the NO_INTERACTIVE_COMMENTS option extends into $(...)
    and `...` command substitutions when used on the command line.
  * Dropped patches, which are included upstream now:
  - zsh-CVE-2018-1071.patch
  - zsh-CVE-2018-1083.patch
  * Fixes a buffer overflow in utils.c:checkmailpath() that can lead to
    local arbitrary code execution (CVE-2018-1100 bnc#1089030)</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Update RPM groups.</changelog>
</package>
<package pkgid="46384f4b88cf548892510c71d5d968a972edaa744bfeab0048feb1faa932b567" name="zsh" arch="src">
  <version epoch="0" ver="5.6" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1433073600">- Update to version 5.0.8
  * Global aliases can be created for syntactic tokens such as command
    separators (";", "&amp;", "|", "&amp;&amp;", "||"), redirection operators, etc.
  * There have been various further improvements to builtin handling
    with the POSIX_BUILTINS option (off by default) for compatibility with
    the POSIX standard.
  * 'whence -v' is now more informative, and 'whence -S' shows you
    how a full chain of symbolic links resolves to a command.
  * The 'p' parameter flag now allows an argument to be specified
    as a reference to a variable, e.g. ${(ps.$sep.)foo} to split $foo
    on a string given by $sep.
  * The option FORCE_FLOAT now forces variables, not just constants,
    to floating point in arithmetic expressions.
  * The type of an assignment in arithmetic expressions, e.g. the
    type seen by the variable res in $(( res = a = b )), is now
    more logical and C-like.
  * The default binding of 'u' in vi command mode has changed to undo
    multiple changes when invoked repeatedly. '^R' is now bound to redo
    changes. To revert to toggling of the last edit use:
    bindkey -a u vi-undo-change
  * Compatibility with Vim has been improved for vi editing mode. Most
    notably, Vim style text objects are supported and the region can be
    manipulated with vi commands in the same manner as Vim's visual mode.
  * Elements of the watch variable may now be patterns.
  * The logic for retrying history locking has been improved.
- Remove gcc5-fix.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1434283200">- Add printf-regress.patch to fix a printf regression boo#934175</changelog>
  <changelog author="idonmez@suse.com" date="1441108800">- Update to version 5.1
  * The print builtin has new options -x and -X to expand tabs.
  * Several new command completions and numerous updates to others.
  * Options to "fc" to segregate internal and shared history.
  * All emulations including "sh" use multibyte by default; several
    repairs to multibyte handling.
  * ZLE supports "bracketed paste" mode to avoid interpreting pasted
    newlines as accept-line.  Pastes can be highlighted for visibility
    and to make it more obvious whether accept-line has occurred.
  * Improved (though still not perfect) POSIX compatibility for getopts
    builtin when POSIX_BUILTINS is set.
  * New setopt APPEND_CREATE for POSIX-compatible NO_CLOBBER behavior.
  * Completion of date values now displays in a calendar format when
    the complist module is available.  Controllable by zstyle.
  * New parameter UNDO_LIMIT_NO for more control over ZLE undo repeat.
  * Several repairs/improvements to the contributed narrow-to-region
    ZLE function.
  * Many changes to child-process and signal handling to eliminate race
    conditions and avoid deadlocks on descriptor and memory management.
  * New builtin sysopen in zsh/system module for detailed control of
    file descriptor modes.
- Remove printf-regress.patch, upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1441108801">- Add read1char_signals.patch to fix workers/36373</changelog>
  <changelog author="idonmez@suse.com" date="1442059200">- Update to version 5.1.1
  * Bug fixes for regressions in 5.1 release
- Remove read1char_signals.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Remove -Wl,-z,now it breaks module loading rh#1277996</changelog>
  <changelog author="idonmez@suse.com" date="1449144000">- Update to version 5.2
  * The new module zsh/param/private can be loaded to allow the shell
    to define parameters that are private to a function scope (i.e. are
    not propagated to nested functions called within this function).
  * The GLOB_STAR_SHORT option allows the pattern **/* to be shortened to
    just ** if no / follows. so **.c searches recursively for a file whose
    name has the suffix ".c".
  * The effect of the WARN_CREATE_GLOBAL option has been significantly
    extended, so expect it to cause additional warning messages about
    parameters created globally within function scope.</changelog>
  <changelog author="mpluskal@suse.com" date="1449748800">- Add gpg signature</changelog>
  <changelog author="llua@gmx.com" date="1464177600">- Add CentOS [67] support</changelog>
  <changelog author="mmanno@suse.com" date="1472558400">- Remove custom zshrc and zshenv as they might interfere with the users config
- Remove unused zshprompt.pl
- Move install outside loop in spec file, was executed too often</changelog>
  <changelog author="idonmez@suse.com" date="1473336000">- Read /etc/profile as zsh again.</changelog>
  <changelog author="idonmez@suse.com" date="1481716800">- Update to zsh 5.3
  * Unicode9 support, this needs support from your terminal to
    work correctly.
  * The new word modifier ':P' computes the physical path of the
    argument.
  * The output of "typeset -p" uses "export" commands or the "-g"
    option for parameters that are not local to the current scope.
  * vi-repeat-change can repeat user-defined widgets if the widget
    calls zle -f vichange.
  * The parameter $registers now makes the contents of vi register
    buffers available to user-defined widgets.
  * New vi-up-case and vi-down-case builtin widgets bound to gU/gu
    (or U/u in visual mode) for doing case conversion.
  * A new select-word-match function provides vim-style text objects
    with configurable word boundaries using the existing
    match-words-by-style mechanism.
  * Support for the conditional expression [[ -v var ]] to test if a
    variable is set for compatibility with other shells.
  * The print and printf builtins have a new option -v to assign the
    output to a variable.
  * New x: syntax in completion match specifications make it possible
    to disable match specifications hardcoded in completion functions.
- Re-add custom zshrc and zshenv to unbreak compatibility with old
  usage (boo#998858).
- Add fix-printf.patch to fix a regression in printf.</changelog>
  <changelog author="jmatejek@suse.com" date="1484049600">- fix broken completion for filterdiff: fix-patchutils-completion.patch
  (boo#1019130)</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Update to 5.3.1
  * Fix typo in chflags completion
  * Fixed invalid git commands completion
  * VCS info system: vcs_info git: Avoid a fork.
  * Fix handling of "printf -" and "printf --"
- Removed upstream merged fix-printf.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1519732800">- Updated to 5.4.2
  * The 'exec' and 'command' precommand modifiers, and options to
    them, are now parsed after parameter expansion.
  * Functions executed by ZLE widgets no longer have their standard
    input closed, but redirected from /dev/null instead.
  * There is an option WARN_NESTED_VAR, a companion to the existing
    WARN_CREATE_GLOBAL that causes a warning if a function updates a
    variable from an enclosing scope without using typeset -g.
  * zmodload now has an option -s to be silent on a failure to find
    a module but still print other errors.
- Dropped patch merged upstream:
  * fix-patchutils-completion.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1522152000">- Added zsh-CVE-2018-1071.patch: Fixed a stack-based buffer overflow
  in exec.c:hashcmd() (CVE-2018-1071 bnc#1084656)
- Added zsh-CVE-2018-1083.patch: Fixed a stack-based buffer overflow
  in gen_matches_files() at compctl.c (CVE-2018-1083 bnc#1087026)
- Cleaned up spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1523448000">- Update to 5.5
  * The effect of the NO_INTERACTIVE_COMMENTS option extends into $(...)
    and `...` command substitutions when used on the command line.
  * Dropped patches, which are included upstream now:
  - zsh-CVE-2018-1071.patch
  - zsh-CVE-2018-1083.patch
  * Fixes a buffer overflow in utils.c:checkmailpath() that can lead to
    local arbitrary code execution (CVE-2018-1100 bnc#1089030)</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Update RPM groups.</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 5.5.1
  * fix for a configuration problem finding signal names from (some) recent
    versions of glibc
  * minor changes</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1536062400">- Update to version 5.6
  * Fixes CVE-2018-0502 (bsc#1107296) and
    CVE-2018-13259 (bsc#1107294)
  * Switch to -fstack-protector-strong
  * See included NEWS file for complete changes.
- No longer manually install help files, make install handles it.
- Workaround a regression upstream with help file generation by
  removing Doc/help.txt before build.</changelog>
</package>
<package pkgid="7a4548fa54ca9189afb34bc08924cdcaec76fb39c87e4e0eb4c1f125edb57b8b" name="zsh" arch="x86_64">
  <version epoch="0" ver="5.6" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1433073600">- Update to version 5.0.8
  * Global aliases can be created for syntactic tokens such as command
    separators (";", "&amp;", "|", "&amp;&amp;", "||"), redirection operators, etc.
  * There have been various further improvements to builtin handling
    with the POSIX_BUILTINS option (off by default) for compatibility with
    the POSIX standard.
  * 'whence -v' is now more informative, and 'whence -S' shows you
    how a full chain of symbolic links resolves to a command.
  * The 'p' parameter flag now allows an argument to be specified
    as a reference to a variable, e.g. ${(ps.$sep.)foo} to split $foo
    on a string given by $sep.
  * The option FORCE_FLOAT now forces variables, not just constants,
    to floating point in arithmetic expressions.
  * The type of an assignment in arithmetic expressions, e.g. the
    type seen by the variable res in $(( res = a = b )), is now
    more logical and C-like.
  * The default binding of 'u' in vi command mode has changed to undo
    multiple changes when invoked repeatedly. '^R' is now bound to redo
    changes. To revert to toggling of the last edit use:
    bindkey -a u vi-undo-change
  * Compatibility with Vim has been improved for vi editing mode. Most
    notably, Vim style text objects are supported and the region can be
    manipulated with vi commands in the same manner as Vim's visual mode.
  * Elements of the watch variable may now be patterns.
  * The logic for retrying history locking has been improved.
- Remove gcc5-fix.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1434283200">- Add printf-regress.patch to fix a printf regression boo#934175</changelog>
  <changelog author="idonmez@suse.com" date="1441108800">- Update to version 5.1
  * The print builtin has new options -x and -X to expand tabs.
  * Several new command completions and numerous updates to others.
  * Options to "fc" to segregate internal and shared history.
  * All emulations including "sh" use multibyte by default; several
    repairs to multibyte handling.
  * ZLE supports "bracketed paste" mode to avoid interpreting pasted
    newlines as accept-line.  Pastes can be highlighted for visibility
    and to make it more obvious whether accept-line has occurred.
  * Improved (though still not perfect) POSIX compatibility for getopts
    builtin when POSIX_BUILTINS is set.
  * New setopt APPEND_CREATE for POSIX-compatible NO_CLOBBER behavior.
  * Completion of date values now displays in a calendar format when
    the complist module is available.  Controllable by zstyle.
  * New parameter UNDO_LIMIT_NO for more control over ZLE undo repeat.
  * Several repairs/improvements to the contributed narrow-to-region
    ZLE function.
  * Many changes to child-process and signal handling to eliminate race
    conditions and avoid deadlocks on descriptor and memory management.
  * New builtin sysopen in zsh/system module for detailed control of
    file descriptor modes.
- Remove printf-regress.patch, upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1441108801">- Add read1char_signals.patch to fix workers/36373</changelog>
  <changelog author="idonmez@suse.com" date="1442059200">- Update to version 5.1.1
  * Bug fixes for regressions in 5.1 release
- Remove read1char_signals.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Remove -Wl,-z,now it breaks module loading rh#1277996</changelog>
  <changelog author="idonmez@suse.com" date="1449144000">- Update to version 5.2
  * The new module zsh/param/private can be loaded to allow the shell
    to define parameters that are private to a function scope (i.e. are
    not propagated to nested functions called within this function).
  * The GLOB_STAR_SHORT option allows the pattern **/* to be shortened to
    just ** if no / follows. so **.c searches recursively for a file whose
    name has the suffix ".c".
  * The effect of the WARN_CREATE_GLOBAL option has been significantly
    extended, so expect it to cause additional warning messages about
    parameters created globally within function scope.</changelog>
  <changelog author="mpluskal@suse.com" date="1449748800">- Add gpg signature</changelog>
  <changelog author="llua@gmx.com" date="1464177600">- Add CentOS [67] support</changelog>
  <changelog author="mmanno@suse.com" date="1472558400">- Remove custom zshrc and zshenv as they might interfere with the users config
- Remove unused zshprompt.pl
- Move install outside loop in spec file, was executed too often</changelog>
  <changelog author="idonmez@suse.com" date="1473336000">- Read /etc/profile as zsh again.</changelog>
  <changelog author="idonmez@suse.com" date="1481716800">- Update to zsh 5.3
  * Unicode9 support, this needs support from your terminal to
    work correctly.
  * The new word modifier ':P' computes the physical path of the
    argument.
  * The output of "typeset -p" uses "export" commands or the "-g"
    option for parameters that are not local to the current scope.
  * vi-repeat-change can repeat user-defined widgets if the widget
    calls zle -f vichange.
  * The parameter $registers now makes the contents of vi register
    buffers available to user-defined widgets.
  * New vi-up-case and vi-down-case builtin widgets bound to gU/gu
    (or U/u in visual mode) for doing case conversion.
  * A new select-word-match function provides vim-style text objects
    with configurable word boundaries using the existing
    match-words-by-style mechanism.
  * Support for the conditional expression [[ -v var ]] to test if a
    variable is set for compatibility with other shells.
  * The print and printf builtins have a new option -v to assign the
    output to a variable.
  * New x: syntax in completion match specifications make it possible
    to disable match specifications hardcoded in completion functions.
- Re-add custom zshrc and zshenv to unbreak compatibility with old
  usage (boo#998858).
- Add fix-printf.patch to fix a regression in printf.</changelog>
  <changelog author="jmatejek@suse.com" date="1484049600">- fix broken completion for filterdiff: fix-patchutils-completion.patch
  (boo#1019130)</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Update to 5.3.1
  * Fix typo in chflags completion
  * Fixed invalid git commands completion
  * VCS info system: vcs_info git: Avoid a fork.
  * Fix handling of "printf -" and "printf --"
- Removed upstream merged fix-printf.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1519732800">- Updated to 5.4.2
  * The 'exec' and 'command' precommand modifiers, and options to
    them, are now parsed after parameter expansion.
  * Functions executed by ZLE widgets no longer have their standard
    input closed, but redirected from /dev/null instead.
  * There is an option WARN_NESTED_VAR, a companion to the existing
    WARN_CREATE_GLOBAL that causes a warning if a function updates a
    variable from an enclosing scope without using typeset -g.
  * zmodload now has an option -s to be silent on a failure to find
    a module but still print other errors.
- Dropped patch merged upstream:
  * fix-patchutils-completion.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1522152000">- Added zsh-CVE-2018-1071.patch: Fixed a stack-based buffer overflow
  in exec.c:hashcmd() (CVE-2018-1071 bnc#1084656)
- Added zsh-CVE-2018-1083.patch: Fixed a stack-based buffer overflow
  in gen_matches_files() at compctl.c (CVE-2018-1083 bnc#1087026)
- Cleaned up spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1523448000">- Update to 5.5
  * The effect of the NO_INTERACTIVE_COMMENTS option extends into $(...)
    and `...` command substitutions when used on the command line.
  * Dropped patches, which are included upstream now:
  - zsh-CVE-2018-1071.patch
  - zsh-CVE-2018-1083.patch
  * Fixes a buffer overflow in utils.c:checkmailpath() that can lead to
    local arbitrary code execution (CVE-2018-1100 bnc#1089030)</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Update RPM groups.</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 5.5.1
  * fix for a configuration problem finding signal names from (some) recent
    versions of glibc
  * minor changes</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1536062400">- Update to version 5.6
  * Fixes CVE-2018-0502 (bsc#1107296) and
    CVE-2018-13259 (bsc#1107294)
  * Switch to -fstack-protector-strong
  * See included NEWS file for complete changes.
- No longer manually install help files, make install handles it.
- Workaround a regression upstream with help file generation by
  removing Doc/help.txt before build.</changelog>
</package>
<package pkgid="26ca6d9a2edf4774e3a68f5ba1aeb51cb3273df98c1501fe9a215c54657f5864" name="zsh-htmldoc" arch="x86_64">
  <version epoch="0" ver="5.5" rel="lp150.2.3.1"/>
  <changelog author="idonmez@suse.com" date="1430308800">- Add gcc5-fix.patch to fix signames.c generation with gcc5</changelog>
  <changelog author="dmitry_r@opensuse.org" date="1430654400">- Fix openSUSE versions in osc completion
  * zsh-osc-completion.patch</changelog>
  <changelog author="idonmez@suse.com" date="1433073600">- Update to version 5.0.8
  * Global aliases can be created for syntactic tokens such as command
    separators (";", "&amp;", "|", "&amp;&amp;", "||"), redirection operators, etc.
  * There have been various further improvements to builtin handling
    with the POSIX_BUILTINS option (off by default) for compatibility with
    the POSIX standard.
  * 'whence -v' is now more informative, and 'whence -S' shows you
    how a full chain of symbolic links resolves to a command.
  * The 'p' parameter flag now allows an argument to be specified
    as a reference to a variable, e.g. ${(ps.$sep.)foo} to split $foo
    on a string given by $sep.
  * The option FORCE_FLOAT now forces variables, not just constants,
    to floating point in arithmetic expressions.
  * The type of an assignment in arithmetic expressions, e.g. the
    type seen by the variable res in $(( res = a = b )), is now
    more logical and C-like.
  * The default binding of 'u' in vi command mode has changed to undo
    multiple changes when invoked repeatedly. '^R' is now bound to redo
    changes. To revert to toggling of the last edit use:
    bindkey -a u vi-undo-change
  * Compatibility with Vim has been improved for vi editing mode. Most
    notably, Vim style text objects are supported and the region can be
    manipulated with vi commands in the same manner as Vim's visual mode.
  * Elements of the watch variable may now be patterns.
  * The logic for retrying history locking has been improved.
- Remove gcc5-fix.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1434283200">- Add printf-regress.patch to fix a printf regression boo#934175</changelog>
  <changelog author="idonmez@suse.com" date="1441108800">- Update to version 5.1
  * The print builtin has new options -x and -X to expand tabs.
  * Several new command completions and numerous updates to others.
  * Options to "fc" to segregate internal and shared history.
  * All emulations including "sh" use multibyte by default; several
    repairs to multibyte handling.
  * ZLE supports "bracketed paste" mode to avoid interpreting pasted
    newlines as accept-line.  Pastes can be highlighted for visibility
    and to make it more obvious whether accept-line has occurred.
  * Improved (though still not perfect) POSIX compatibility for getopts
    builtin when POSIX_BUILTINS is set.
  * New setopt APPEND_CREATE for POSIX-compatible NO_CLOBBER behavior.
  * Completion of date values now displays in a calendar format when
    the complist module is available.  Controllable by zstyle.
  * New parameter UNDO_LIMIT_NO for more control over ZLE undo repeat.
  * Several repairs/improvements to the contributed narrow-to-region
    ZLE function.
  * Many changes to child-process and signal handling to eliminate race
    conditions and avoid deadlocks on descriptor and memory management.
  * New builtin sysopen in zsh/system module for detailed control of
    file descriptor modes.
- Remove printf-regress.patch, upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1441108801">- Add read1char_signals.patch to fix workers/36373</changelog>
  <changelog author="idonmez@suse.com" date="1442059200">- Update to version 5.1.1
  * Bug fixes for regressions in 5.1 release
- Remove read1char_signals.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Remove -Wl,-z,now it breaks module loading rh#1277996</changelog>
  <changelog author="idonmez@suse.com" date="1449144000">- Update to version 5.2
  * The new module zsh/param/private can be loaded to allow the shell
    to define parameters that are private to a function scope (i.e. are
    not propagated to nested functions called within this function).
  * The GLOB_STAR_SHORT option allows the pattern **/* to be shortened to
    just ** if no / follows. so **.c searches recursively for a file whose
    name has the suffix ".c".
  * The effect of the WARN_CREATE_GLOBAL option has been significantly
    extended, so expect it to cause additional warning messages about
    parameters created globally within function scope.</changelog>
  <changelog author="mpluskal@suse.com" date="1449748800">- Add gpg signature</changelog>
  <changelog author="llua@gmx.com" date="1464177600">- Add CentOS [67] support</changelog>
  <changelog author="mmanno@suse.com" date="1472558400">- Remove custom zshrc and zshenv as they might interfere with the users config
- Remove unused zshprompt.pl
- Move install outside loop in spec file, was executed too often</changelog>
  <changelog author="idonmez@suse.com" date="1473336000">- Read /etc/profile as zsh again.</changelog>
  <changelog author="idonmez@suse.com" date="1481716800">- Update to zsh 5.3
  * Unicode9 support, this needs support from your terminal to
    work correctly.
  * The new word modifier ':P' computes the physical path of the
    argument.
  * The output of "typeset -p" uses "export" commands or the "-g"
    option for parameters that are not local to the current scope.
  * vi-repeat-change can repeat user-defined widgets if the widget
    calls zle -f vichange.
  * The parameter $registers now makes the contents of vi register
    buffers available to user-defined widgets.
  * New vi-up-case and vi-down-case builtin widgets bound to gU/gu
    (or U/u in visual mode) for doing case conversion.
  * A new select-word-match function provides vim-style text objects
    with configurable word boundaries using the existing
    match-words-by-style mechanism.
  * Support for the conditional expression [[ -v var ]] to test if a
    variable is set for compatibility with other shells.
  * The print and printf builtins have a new option -v to assign the
    output to a variable.
  * New x: syntax in completion match specifications make it possible
    to disable match specifications hardcoded in completion functions.
- Re-add custom zshrc and zshenv to unbreak compatibility with old
  usage (boo#998858).
- Add fix-printf.patch to fix a regression in printf.</changelog>
  <changelog author="jmatejek@suse.com" date="1484049600">- fix broken completion for filterdiff: fix-patchutils-completion.patch
  (boo#1019130)</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Update to 5.3.1
  * Fix typo in chflags completion
  * Fixed invalid git commands completion
  * VCS info system: vcs_info git: Avoid a fork.
  * Fix handling of "printf -" and "printf --"
- Removed upstream merged fix-printf.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1519732800">- Updated to 5.4.2
  * The 'exec' and 'command' precommand modifiers, and options to
    them, are now parsed after parameter expansion.
  * Functions executed by ZLE widgets no longer have their standard
    input closed, but redirected from /dev/null instead.
  * There is an option WARN_NESTED_VAR, a companion to the existing
    WARN_CREATE_GLOBAL that causes a warning if a function updates a
    variable from an enclosing scope without using typeset -g.
  * zmodload now has an option -s to be silent on a failure to find
    a module but still print other errors.
- Dropped patch merged upstream:
  * fix-patchutils-completion.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1522152000">- Added zsh-CVE-2018-1071.patch: Fixed a stack-based buffer overflow
  in exec.c:hashcmd() (CVE-2018-1071 bnc#1084656)
- Added zsh-CVE-2018-1083.patch: Fixed a stack-based buffer overflow
  in gen_matches_files() at compctl.c (CVE-2018-1083 bnc#1087026)
- Cleaned up spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1523448000">- Update to 5.5
  * The effect of the NO_INTERACTIVE_COMMENTS option extends into $(...)
    and `...` command substitutions when used on the command line.
  * Dropped patches, which are included upstream now:
  - zsh-CVE-2018-1071.patch
  - zsh-CVE-2018-1083.patch
  * Fixes a buffer overflow in utils.c:checkmailpath() that can lead to
    local arbitrary code execution (CVE-2018-1100 bnc#1089030)</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Update RPM groups.</changelog>
</package>
<package pkgid="0abac55785e671db8c7e1412246457d8cffaebc1d05b2b4395b9b96e098d8ecb" name="zsh-htmldoc" arch="x86_64">
  <version epoch="0" ver="5.6" rel="lp150.2.6.1"/>
  <changelog author="idonmez@suse.com" date="1433073600">- Update to version 5.0.8
  * Global aliases can be created for syntactic tokens such as command
    separators (";", "&amp;", "|", "&amp;&amp;", "||"), redirection operators, etc.
  * There have been various further improvements to builtin handling
    with the POSIX_BUILTINS option (off by default) for compatibility with
    the POSIX standard.
  * 'whence -v' is now more informative, and 'whence -S' shows you
    how a full chain of symbolic links resolves to a command.
  * The 'p' parameter flag now allows an argument to be specified
    as a reference to a variable, e.g. ${(ps.$sep.)foo} to split $foo
    on a string given by $sep.
  * The option FORCE_FLOAT now forces variables, not just constants,
    to floating point in arithmetic expressions.
  * The type of an assignment in arithmetic expressions, e.g. the
    type seen by the variable res in $(( res = a = b )), is now
    more logical and C-like.
  * The default binding of 'u' in vi command mode has changed to undo
    multiple changes when invoked repeatedly. '^R' is now bound to redo
    changes. To revert to toggling of the last edit use:
    bindkey -a u vi-undo-change
  * Compatibility with Vim has been improved for vi editing mode. Most
    notably, Vim style text objects are supported and the region can be
    manipulated with vi commands in the same manner as Vim's visual mode.
  * Elements of the watch variable may now be patterns.
  * The logic for retrying history locking has been improved.
- Remove gcc5-fix.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1434283200">- Add printf-regress.patch to fix a printf regression boo#934175</changelog>
  <changelog author="idonmez@suse.com" date="1441108800">- Update to version 5.1
  * The print builtin has new options -x and -X to expand tabs.
  * Several new command completions and numerous updates to others.
  * Options to "fc" to segregate internal and shared history.
  * All emulations including "sh" use multibyte by default; several
    repairs to multibyte handling.
  * ZLE supports "bracketed paste" mode to avoid interpreting pasted
    newlines as accept-line.  Pastes can be highlighted for visibility
    and to make it more obvious whether accept-line has occurred.
  * Improved (though still not perfect) POSIX compatibility for getopts
    builtin when POSIX_BUILTINS is set.
  * New setopt APPEND_CREATE for POSIX-compatible NO_CLOBBER behavior.
  * Completion of date values now displays in a calendar format when
    the complist module is available.  Controllable by zstyle.
  * New parameter UNDO_LIMIT_NO for more control over ZLE undo repeat.
  * Several repairs/improvements to the contributed narrow-to-region
    ZLE function.
  * Many changes to child-process and signal handling to eliminate race
    conditions and avoid deadlocks on descriptor and memory management.
  * New builtin sysopen in zsh/system module for detailed control of
    file descriptor modes.
- Remove printf-regress.patch, upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1441108801">- Add read1char_signals.patch to fix workers/36373</changelog>
  <changelog author="idonmez@suse.com" date="1442059200">- Update to version 5.1.1
  * Bug fixes for regressions in 5.1 release
- Remove read1char_signals.patch, fixed upstream.</changelog>
  <changelog author="idonmez@suse.com" date="1446724800">- Remove -Wl,-z,now it breaks module loading rh#1277996</changelog>
  <changelog author="idonmez@suse.com" date="1449144000">- Update to version 5.2
  * The new module zsh/param/private can be loaded to allow the shell
    to define parameters that are private to a function scope (i.e. are
    not propagated to nested functions called within this function).
  * The GLOB_STAR_SHORT option allows the pattern **/* to be shortened to
    just ** if no / follows. so **.c searches recursively for a file whose
    name has the suffix ".c".
  * The effect of the WARN_CREATE_GLOBAL option has been significantly
    extended, so expect it to cause additional warning messages about
    parameters created globally within function scope.</changelog>
  <changelog author="mpluskal@suse.com" date="1449748800">- Add gpg signature</changelog>
  <changelog author="llua@gmx.com" date="1464177600">- Add CentOS [67] support</changelog>
  <changelog author="mmanno@suse.com" date="1472558400">- Remove custom zshrc and zshenv as they might interfere with the users config
- Remove unused zshprompt.pl
- Move install outside loop in spec file, was executed too often</changelog>
  <changelog author="idonmez@suse.com" date="1473336000">- Read /etc/profile as zsh again.</changelog>
  <changelog author="idonmez@suse.com" date="1481716800">- Update to zsh 5.3
  * Unicode9 support, this needs support from your terminal to
    work correctly.
  * The new word modifier ':P' computes the physical path of the
    argument.
  * The output of "typeset -p" uses "export" commands or the "-g"
    option for parameters that are not local to the current scope.
  * vi-repeat-change can repeat user-defined widgets if the widget
    calls zle -f vichange.
  * The parameter $registers now makes the contents of vi register
    buffers available to user-defined widgets.
  * New vi-up-case and vi-down-case builtin widgets bound to gU/gu
    (or U/u in visual mode) for doing case conversion.
  * A new select-word-match function provides vim-style text objects
    with configurable word boundaries using the existing
    match-words-by-style mechanism.
  * Support for the conditional expression [[ -v var ]] to test if a
    variable is set for compatibility with other shells.
  * The print and printf builtins have a new option -v to assign the
    output to a variable.
  * New x: syntax in completion match specifications make it possible
    to disable match specifications hardcoded in completion functions.
- Re-add custom zshrc and zshenv to unbreak compatibility with old
  usage (boo#998858).
- Add fix-printf.patch to fix a regression in printf.</changelog>
  <changelog author="jmatejek@suse.com" date="1484049600">- fix broken completion for filterdiff: fix-patchutils-completion.patch
  (boo#1019130)</changelog>
  <changelog author="rpm@fthiessen.de" date="1488715200">- Update to 5.3.1
  * Fix typo in chflags completion
  * Fixed invalid git commands completion
  * VCS info system: vcs_info git: Avoid a fork.
  * Fix handling of "printf -" and "printf --"
- Removed upstream merged fix-printf.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1519732800">- Updated to 5.4.2
  * The 'exec' and 'command' precommand modifiers, and options to
    them, are now parsed after parameter expansion.
  * Functions executed by ZLE widgets no longer have their standard
    input closed, but redirected from /dev/null instead.
  * There is an option WARN_NESTED_VAR, a companion to the existing
    WARN_CREATE_GLOBAL that causes a warning if a function updates a
    variable from an enclosing scope without using typeset -g.
  * zmodload now has an option -s to be silent on a failure to find
    a module but still print other errors.
- Dropped patch merged upstream:
  * fix-patchutils-completion.patch</changelog>
  <changelog author="kbabioch@suse.com" date="1522152000">- Added zsh-CVE-2018-1071.patch: Fixed a stack-based buffer overflow
  in exec.c:hashcmd() (CVE-2018-1071 bnc#1084656)
- Added zsh-CVE-2018-1083.patch: Fixed a stack-based buffer overflow
  in gen_matches_files() at compctl.c (CVE-2018-1083 bnc#1087026)
- Cleaned up spec file with spec-cleaner</changelog>
  <changelog author="kbabioch@suse.com" date="1523448000">- Update to 5.5
  * The effect of the NO_INTERACTIVE_COMMENTS option extends into $(...)
    and `...` command substitutions when used on the command line.
  * Dropped patches, which are included upstream now:
  - zsh-CVE-2018-1071.patch
  - zsh-CVE-2018-1083.patch
  * Fixes a buffer overflow in utils.c:checkmailpath() that can lead to
    local arbitrary code execution (CVE-2018-1100 bnc#1089030)</changelog>
  <changelog author="jengelh@inai.de" date="1523534400">- Update RPM groups.</changelog>
  <changelog author="kbabioch@suse.com" date="1526040000">- Update to 5.5.1
  * fix for a configuration problem finding signal names from (some) recent
    versions of glibc
  * minor changes</changelog>
  <changelog author="Ismail D&#xF6;nmez &lt;idonmez@suse.com&gt;" date="1536062400">- Update to version 5.6
  * Fixes CVE-2018-0502 (bsc#1107296) and
    CVE-2018-13259 (bsc#1107294)
  * Switch to -fstack-protector-strong
  * See included NEWS file for complete changes.
- No longer manually install help files, make install handles it.
- Workaround a regression upstream with help file generation by
  removing Doc/help.txt before build.</changelog>
</package>
<package pkgid="b5b810c34afd0baedf5d77b12b73a93a91a89189f843c8c6d0afb74fb4b41bdf" name="zutils" arch="src">
  <version epoch="0" ver="1.7" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1429358400">- Initial package for version 1.3</changelog>
  <changelog author="mpluskal@suse.com" date="1429358401">- Conflict with gzip</changelog>
  <changelog author="p.drouand@gmail.com" date="1451822400">- Update to version 1.4
  * Option '--format' has been renamed to '-O, --force-format'.
  * Added new option '-M, --format=&lt;list&gt;' to all utilities.</changelog>
  <changelog author="aloisio@gmx.com" date="1519041600">- Update to version 1.6
  * zcmp.cc: Accept 'B' suffix in '--ignore-initial=1kB:1234B'.
  * zutils.cc (feed_data): Show input filename in error messages.
  Version 1.5
  * zupdate.cc (zupdate_file): Pass '-q' to zcmp if verbosity &lt; 0.
  * zcat.cc zgrep.cc ztest.cc (main): Don't use stdin more than
    once.
  * zdiff.cc (set_fifonames): Use '_' if both names are different.
  * configure: Avoid warning on some shells when testing for g++.
  * Makefile.in: Detect the existence of install-info.
  * testsuite/check.sh: A POSIX shell is required to run the
    tests.</changelog>
  <changelog author="aloisio@gmx.com" date="1534852800">- Update to version 1.7:
  * zgrep.cc (main): Pass '--color' option to grep.
  * check.sh: Added new tests for zgrep.
- Added zutils-1.7-zcat-buffer-overrun.patch (fixes boo#1103878)</changelog>
</package>
<package pkgid="b6d7f9d90c8596b7a053a0df40e035c8297d8f1f33b6b7231914f732a8313b3a" name="zutils" arch="x86_64">
  <version epoch="0" ver="1.7" rel="lp150.2.3.1"/>
  <changelog author="mpluskal@suse.com" date="1429358400">- Initial package for version 1.3</changelog>
  <changelog author="mpluskal@suse.com" date="1429358401">- Conflict with gzip</changelog>
  <changelog author="p.drouand@gmail.com" date="1451822400">- Update to version 1.4
  * Option '--format' has been renamed to '-O, --force-format'.
  * Added new option '-M, --format=&lt;list&gt;' to all utilities.</changelog>
  <changelog author="aloisio@gmx.com" date="1519041600">- Update to version 1.6
  * zcmp.cc: Accept 'B' suffix in '--ignore-initial=1kB:1234B'.
  * zutils.cc (feed_data): Show input filename in error messages.
  Version 1.5
  * zupdate.cc (zupdate_file): Pass '-q' to zcmp if verbosity &lt; 0.
  * zcat.cc zgrep.cc ztest.cc (main): Don't use stdin more than
    once.
  * zdiff.cc (set_fifonames): Use '_' if both names are different.
  * configure: Avoid warning on some shells when testing for g++.
  * Makefile.in: Detect the existence of install-info.
  * testsuite/check.sh: A POSIX shell is required to run the
    tests.</changelog>
  <changelog author="aloisio@gmx.com" date="1534852800">- Update to version 1.7:
  * zgrep.cc (main): Pass '--color' option to grep.
  * check.sh: Added new tests for zgrep.
- Added zutils-1.7-zcat-buffer-overrun.patch (fixes boo#1103878)</changelog>
</package>
<package pkgid="a3d139a9ea47ca307da1fdcf572ebbe8395143936131f41fe39e581718be564a" name="zypper" arch="src">
  <version epoch="0" ver="1.14.10" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1500292800">- Adapt download callback to report and handle unsigned packages
  (bsc#1038984, CVE-2017-7436)
- BuildRequires:  libzypp-devel &gt;= 16.15.0
- version 1.13.30</changelog>
  <changelog author="ma@suse.de" date="1502452800">- Improve signature check callback messages
  (bsc#1045735, CVE-2017-9269)
- man: Explain new gpgcheck options
- add/modify repo: Add options to tune the GPG check settings
  (bsc#1045735, CVE-2017-9269)
- BuildRequires:  libzypp-devel &gt;= 16.15.3
- version 1.13.31</changelog>
  <changelog author="ma@suse.de" date="1503662400">- GPG key: Also show a gpg keys subkeys (bsc#1008325)
- libzypp-devel &gt;= 16.15.4
- version 1.13.32</changelog>
  <changelog author="ma@suse.de" date="1504785600">- Return '107' if some rpm %post configuration script failed
  (bsc#1047233)
- version 1.13.33</changelog>
  <changelog author="ma@suse.de" date="1505131200">- Summary: Differ between unsupported and packages with unknown
  support status  (bsc#1057634)
- Use HTTPS by default for repository URLs derived from obs://
- version 1.13.34</changelog>
  <changelog author="ma@suse.de" date="1505390400">- Fix missing package names in installation report (bsc#1058695,
  fixes #134)
- version 1.13.35</changelog>
  <changelog author="ma@suse.de" date="1506081600">- Unify '(add|modify)(repo|service)' property related arguments.
  Fixed 'add' commands supporting to set only a subset of properties.
  Introduced '-f/-F' as preferred short option for --[no-]refresh
  in all four commands. (bsc#661410, bsc#1053671)
- version 1.13.36</changelog>
  <changelog author="ma@suse.de" date="1507204800">- Add summary hint if product is better updated by a different
  command. This is mainly used by rolling distributions like Tumbleweed
  to remind their users to use 'zypper dup' to update (not zypper up or
  patch). (bsc#1061384)
- version 1.13.37</changelog>
  <changelog author="bwiedemann@suse.com" date="1510920000">- Add apt alias for compat with new debian package management</changelog>
  <changelog author="ma@suse.de" date="1511438400">- Update manpage regarding custom repository variable fixes
  (bsc#1057640, bsc#1067605)
- Version 1.14.x for CODE-15, 1.13.x. is continued on SuSE-SLE-12-SP2-Branch
- version 1.14.0</changelog>
  <changelog author="ma@suse.de" date="1512043200">- Avoid writing ANSI Escape sequences on a dumb terminal (bsc#1055315)
- version 1.14.1</changelog>
  <changelog author="ma@suse.de" date="1517832000">- do not recommend cron (bsc#1079334)
- version 1.14.2</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Auto complete available repositories with the --from switch
- Fix: zypper bash completion expands non-existing options (bsc#1049825)
- Fix template to compile (fixes #146)
- version 1.14.3</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Fix translated format strings (bsc#1082711)
- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- BuildRequires:  libzypp-devel &gt;= 17.2.2
- Deprecate the use of asciidoc for new releases
- Introduce --allow-unsigned-rpm switch to install (bsc#1055533)
- version 1.14.4</changelog>
  <changelog author="ma@suse.de" date="1524744000">- search: Hint the user to the 'search-packages' subcommand, if the
  distribution provides it (bsc#1089994)
- clean: Don't report an error, if no repo is to be cleaned
  (bsc#1089504)
- Add --installroot flag (fixes #157)
- version 1.14.5</changelog>
  <changelog author="ma@suse.de" date="1527508800">- Fix broken display of detailed query results
- Fix broken search for items with a dash (bsc#907538, bsc#1043166,
  bsc#1070770)
- fix translation error (fixes #178)
- Disable repository operations when searching installed packages
  (bsc#1084525)
- Prevent nested calls to exit() if aborted by a signal (bsc#1092413)
- ansi.h: Prevent ESC sequence strings from going out of scope
  (bsc#1092413)
- version 1.14.6</changelog>
  <changelog author="ma@suse.de" date="1531137600">- Set error status if repositories passed to lr and ref are not
  known (BSC #1093103)
- Do not override table style in search (fixes #171)
- Fix out of bound read in MbsIterator (fixes #167)
- Add --supplements switch to search and info (fixes #184)
- Add setter functions for zypp cache related config values to
  ZConfig (fixes #180)
- BuildRequires: libzypp-devel &gt;= 17.3.2
- version 1.14.7</changelog>
  <changelog author="ma@suse.de" date="1533297600">- Support listing gpgkey URLs in repo files (bsc#1088037)
- Check for root privileges in zypper verify and si (bsc#1058515)
- XML &lt;install-summary&gt; attribute `packages-to-change` added
  (bsc#1102429)
- Add expert (allow-*) options to all installer commands
  (bsc#428822)
- Sort search results by multiple columns (bsc#1066215)
- man: Strengthen that `--config FILE' affects zypper.conf,
  not zypp.conf (bsc#1100028)
- BuildRequires:  libzypp-devel &gt;= 17.6.0
- version 1.14.8</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Notify user about unsupported rpm V3 keys in an old rpm database
  (bsc#1096217)
- man: Remove links to missing metadata section (fixes #140)
- Detect read only filesystem on system modifying operations
  (fixes #199)
- Use %license (bsc#1082318)
- Handle repo aliases containing multiple ':' in the PackageArgs
  parser (bsc #1041178)
- BuildRequires:  libzypp-devel &gt;= 17.6.3
- version 1.14.9</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Always set error status if any nr of unknown repositories are
  passed to lr and ref (bsc#1093103)
- version 1.14.10</changelog>
</package>
<package pkgid="dbdfe992df4a96a7f34082e446da4dfa45f3a7f698866b4884342d25e6ebe463" name="zypper" arch="x86_64">
  <version epoch="0" ver="1.14.10" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1500292800">- Adapt download callback to report and handle unsigned packages
  (bsc#1038984, CVE-2017-7436)
- BuildRequires:  libzypp-devel &gt;= 16.15.0
- version 1.13.30</changelog>
  <changelog author="ma@suse.de" date="1502452800">- Improve signature check callback messages
  (bsc#1045735, CVE-2017-9269)
- man: Explain new gpgcheck options
- add/modify repo: Add options to tune the GPG check settings
  (bsc#1045735, CVE-2017-9269)
- BuildRequires:  libzypp-devel &gt;= 16.15.3
- version 1.13.31</changelog>
  <changelog author="ma@suse.de" date="1503662400">- GPG key: Also show a gpg keys subkeys (bsc#1008325)
- libzypp-devel &gt;= 16.15.4
- version 1.13.32</changelog>
  <changelog author="ma@suse.de" date="1504785600">- Return '107' if some rpm %post configuration script failed
  (bsc#1047233)
- version 1.13.33</changelog>
  <changelog author="ma@suse.de" date="1505131200">- Summary: Differ between unsupported and packages with unknown
  support status  (bsc#1057634)
- Use HTTPS by default for repository URLs derived from obs://
- version 1.13.34</changelog>
  <changelog author="ma@suse.de" date="1505390400">- Fix missing package names in installation report (bsc#1058695,
  fixes #134)
- version 1.13.35</changelog>
  <changelog author="ma@suse.de" date="1506081600">- Unify '(add|modify)(repo|service)' property related arguments.
  Fixed 'add' commands supporting to set only a subset of properties.
  Introduced '-f/-F' as preferred short option for --[no-]refresh
  in all four commands. (bsc#661410, bsc#1053671)
- version 1.13.36</changelog>
  <changelog author="ma@suse.de" date="1507204800">- Add summary hint if product is better updated by a different
  command. This is mainly used by rolling distributions like Tumbleweed
  to remind their users to use 'zypper dup' to update (not zypper up or
  patch). (bsc#1061384)
- version 1.13.37</changelog>
  <changelog author="bwiedemann@suse.com" date="1510920000">- Add apt alias for compat with new debian package management</changelog>
  <changelog author="ma@suse.de" date="1511438400">- Update manpage regarding custom repository variable fixes
  (bsc#1057640, bsc#1067605)
- Version 1.14.x for CODE-15, 1.13.x. is continued on SuSE-SLE-12-SP2-Branch
- version 1.14.0</changelog>
  <changelog author="ma@suse.de" date="1512043200">- Avoid writing ANSI Escape sequences on a dumb terminal (bsc#1055315)
- version 1.14.1</changelog>
  <changelog author="ma@suse.de" date="1517832000">- do not recommend cron (bsc#1079334)
- version 1.14.2</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Auto complete available repositories with the --from switch
- Fix: zypper bash completion expands non-existing options (bsc#1049825)
- Fix template to compile (fixes #146)
- version 1.14.3</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Fix translated format strings (bsc#1082711)
- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- BuildRequires:  libzypp-devel &gt;= 17.2.2
- Deprecate the use of asciidoc for new releases
- Introduce --allow-unsigned-rpm switch to install (bsc#1055533)
- version 1.14.4</changelog>
  <changelog author="ma@suse.de" date="1524744000">- search: Hint the user to the 'search-packages' subcommand, if the
  distribution provides it (bsc#1089994)
- clean: Don't report an error, if no repo is to be cleaned
  (bsc#1089504)
- Add --installroot flag (fixes #157)
- version 1.14.5</changelog>
  <changelog author="ma@suse.de" date="1527508800">- Fix broken display of detailed query results
- Fix broken search for items with a dash (bsc#907538, bsc#1043166,
  bsc#1070770)
- fix translation error (fixes #178)
- Disable repository operations when searching installed packages
  (bsc#1084525)
- Prevent nested calls to exit() if aborted by a signal (bsc#1092413)
- ansi.h: Prevent ESC sequence strings from going out of scope
  (bsc#1092413)
- version 1.14.6</changelog>
  <changelog author="ma@suse.de" date="1531137600">- Set error status if repositories passed to lr and ref are not
  known (BSC #1093103)
- Do not override table style in search (fixes #171)
- Fix out of bound read in MbsIterator (fixes #167)
- Add --supplements switch to search and info (fixes #184)
- Add setter functions for zypp cache related config values to
  ZConfig (fixes #180)
- BuildRequires: libzypp-devel &gt;= 17.3.2
- version 1.14.7</changelog>
  <changelog author="ma@suse.de" date="1533297600">- Support listing gpgkey URLs in repo files (bsc#1088037)
- Check for root privileges in zypper verify and si (bsc#1058515)
- XML &lt;install-summary&gt; attribute `packages-to-change` added
  (bsc#1102429)
- Add expert (allow-*) options to all installer commands
  (bsc#428822)
- Sort search results by multiple columns (bsc#1066215)
- man: Strengthen that `--config FILE' affects zypper.conf,
  not zypp.conf (bsc#1100028)
- BuildRequires:  libzypp-devel &gt;= 17.6.0
- version 1.14.8</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Notify user about unsupported rpm V3 keys in an old rpm database
  (bsc#1096217)
- man: Remove links to missing metadata section (fixes #140)
- Detect read only filesystem on system modifying operations
  (fixes #199)
- Use %license (bsc#1082318)
- Handle repo aliases containing multiple ':' in the PackageArgs
  parser (bsc #1041178)
- BuildRequires:  libzypp-devel &gt;= 17.6.3
- version 1.14.9</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Always set error status if any nr of unknown repositories are
  passed to lr and ref (bsc#1093103)
- version 1.14.10</changelog>
</package>
<package pkgid="7b13ba399c82fb40d92e989076ee179c0d459d58bc7d2dc5569be83961b3ac43" name="zypper" arch="src">
  <version epoch="0" ver="1.14.11" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1502452800">- Improve signature check callback messages
  (bsc#1045735, CVE-2017-9269)
- man: Explain new gpgcheck options
- add/modify repo: Add options to tune the GPG check settings
  (bsc#1045735, CVE-2017-9269)
- BuildRequires:  libzypp-devel &gt;= 16.15.3
- version 1.13.31</changelog>
  <changelog author="ma@suse.de" date="1503662400">- GPG key: Also show a gpg keys subkeys (bsc#1008325)
- libzypp-devel &gt;= 16.15.4
- version 1.13.32</changelog>
  <changelog author="ma@suse.de" date="1504785600">- Return '107' if some rpm %post configuration script failed
  (bsc#1047233)
- version 1.13.33</changelog>
  <changelog author="ma@suse.de" date="1505131200">- Summary: Differ between unsupported and packages with unknown
  support status  (bsc#1057634)
- Use HTTPS by default for repository URLs derived from obs://
- version 1.13.34</changelog>
  <changelog author="ma@suse.de" date="1505390400">- Fix missing package names in installation report (bsc#1058695,
  fixes #134)
- version 1.13.35</changelog>
  <changelog author="ma@suse.de" date="1506081600">- Unify '(add|modify)(repo|service)' property related arguments.
  Fixed 'add' commands supporting to set only a subset of properties.
  Introduced '-f/-F' as preferred short option for --[no-]refresh
  in all four commands. (bsc#661410, bsc#1053671)
- version 1.13.36</changelog>
  <changelog author="ma@suse.de" date="1507204800">- Add summary hint if product is better updated by a different
  command. This is mainly used by rolling distributions like Tumbleweed
  to remind their users to use 'zypper dup' to update (not zypper up or
  patch). (bsc#1061384)
- version 1.13.37</changelog>
  <changelog author="bwiedemann@suse.com" date="1510920000">- Add apt alias for compat with new debian package management</changelog>
  <changelog author="ma@suse.de" date="1511438400">- Update manpage regarding custom repository variable fixes
  (bsc#1057640, bsc#1067605)
- Version 1.14.x for CODE-15, 1.13.x. is continued on SuSE-SLE-12-SP2-Branch
- version 1.14.0</changelog>
  <changelog author="ma@suse.de" date="1512043200">- Avoid writing ANSI Escape sequences on a dumb terminal (bsc#1055315)
- version 1.14.1</changelog>
  <changelog author="ma@suse.de" date="1517832000">- do not recommend cron (bsc#1079334)
- version 1.14.2</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Auto complete available repositories with the --from switch
- Fix: zypper bash completion expands non-existing options (bsc#1049825)
- Fix template to compile (fixes #146)
- version 1.14.3</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Fix translated format strings (bsc#1082711)
- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- BuildRequires:  libzypp-devel &gt;= 17.2.2
- Deprecate the use of asciidoc for new releases
- Introduce --allow-unsigned-rpm switch to install (bsc#1055533)
- version 1.14.4</changelog>
  <changelog author="ma@suse.de" date="1524744000">- search: Hint the user to the 'search-packages' subcommand, if the
  distribution provides it (bsc#1089994)
- clean: Don't report an error, if no repo is to be cleaned
  (bsc#1089504)
- Add --installroot flag (fixes #157)
- version 1.14.5</changelog>
  <changelog author="ma@suse.de" date="1527508800">- Fix broken display of detailed query results
- Fix broken search for items with a dash (bsc#907538, bsc#1043166,
  bsc#1070770)
- fix translation error (fixes #178)
- Disable repository operations when searching installed packages
  (bsc#1084525)
- Prevent nested calls to exit() if aborted by a signal (bsc#1092413)
- ansi.h: Prevent ESC sequence strings from going out of scope
  (bsc#1092413)
- version 1.14.6</changelog>
  <changelog author="ma@suse.de" date="1531137600">- Set error status if repositories passed to lr and ref are not
  known (BSC #1093103)
- Do not override table style in search (fixes #171)
- Fix out of bound read in MbsIterator (fixes #167)
- Add --supplements switch to search and info (fixes #184)
- Add setter functions for zypp cache related config values to
  ZConfig (fixes #180)
- BuildRequires: libzypp-devel &gt;= 17.3.2
- version 1.14.7</changelog>
  <changelog author="ma@suse.de" date="1533297600">- Support listing gpgkey URLs in repo files (bsc#1088037)
- Check for root privileges in zypper verify and si (bsc#1058515)
- XML &lt;install-summary&gt; attribute `packages-to-change` added
  (bsc#1102429)
- Add expert (allow-*) options to all installer commands
  (bsc#428822)
- Sort search results by multiple columns (bsc#1066215)
- man: Strengthen that `--config FILE' affects zypper.conf,
  not zypp.conf (bsc#1100028)
- BuildRequires:  libzypp-devel &gt;= 17.6.0
- version 1.14.8</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Notify user about unsupported rpm V3 keys in an old rpm database
  (bsc#1096217)
- man: Remove links to missing metadata section (fixes #140)
- Detect read only filesystem on system modifying operations
  (fixes #199)
- Use %license (bsc#1082318)
- Handle repo aliases containing multiple ':' in the PackageArgs
  parser (bsc #1041178)
- BuildRequires:  libzypp-devel &gt;= 17.6.3
- version 1.14.9</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Always set error status if any nr of unknown repositories are
  passed to lr and ref (bsc#1093103)
- version 1.14.10</changelog>
  <changelog author="ma@suse.de" date="1537358400">- Allow repo commands on transactional-server (bsc#1108999)
- BuildRequires:  libzypp-devel &gt;= 17.7.0 (dropped type application)
- Unite askUserToAccept*Key report callback (fixes #196)
- version 1.14.11</changelog>
</package>
<package pkgid="f823836a8214ac63e6061ba380c996f191637dc376315a71d12de76cb95dcc72" name="zypper" arch="x86_64">
  <version epoch="0" ver="1.14.11" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1502452800">- Improve signature check callback messages
  (bsc#1045735, CVE-2017-9269)
- man: Explain new gpgcheck options
- add/modify repo: Add options to tune the GPG check settings
  (bsc#1045735, CVE-2017-9269)
- BuildRequires:  libzypp-devel &gt;= 16.15.3
- version 1.13.31</changelog>
  <changelog author="ma@suse.de" date="1503662400">- GPG key: Also show a gpg keys subkeys (bsc#1008325)
- libzypp-devel &gt;= 16.15.4
- version 1.13.32</changelog>
  <changelog author="ma@suse.de" date="1504785600">- Return '107' if some rpm %post configuration script failed
  (bsc#1047233)
- version 1.13.33</changelog>
  <changelog author="ma@suse.de" date="1505131200">- Summary: Differ between unsupported and packages with unknown
  support status  (bsc#1057634)
- Use HTTPS by default for repository URLs derived from obs://
- version 1.13.34</changelog>
  <changelog author="ma@suse.de" date="1505390400">- Fix missing package names in installation report (bsc#1058695,
  fixes #134)
- version 1.13.35</changelog>
  <changelog author="ma@suse.de" date="1506081600">- Unify '(add|modify)(repo|service)' property related arguments.
  Fixed 'add' commands supporting to set only a subset of properties.
  Introduced '-f/-F' as preferred short option for --[no-]refresh
  in all four commands. (bsc#661410, bsc#1053671)
- version 1.13.36</changelog>
  <changelog author="ma@suse.de" date="1507204800">- Add summary hint if product is better updated by a different
  command. This is mainly used by rolling distributions like Tumbleweed
  to remind their users to use 'zypper dup' to update (not zypper up or
  patch). (bsc#1061384)
- version 1.13.37</changelog>
  <changelog author="bwiedemann@suse.com" date="1510920000">- Add apt alias for compat with new debian package management</changelog>
  <changelog author="ma@suse.de" date="1511438400">- Update manpage regarding custom repository variable fixes
  (bsc#1057640, bsc#1067605)
- Version 1.14.x for CODE-15, 1.13.x. is continued on SuSE-SLE-12-SP2-Branch
- version 1.14.0</changelog>
  <changelog author="ma@suse.de" date="1512043200">- Avoid writing ANSI Escape sequences on a dumb terminal (bsc#1055315)
- version 1.14.1</changelog>
  <changelog author="ma@suse.de" date="1517832000">- do not recommend cron (bsc#1079334)
- version 1.14.2</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Auto complete available repositories with the --from switch
- Fix: zypper bash completion expands non-existing options (bsc#1049825)
- Fix template to compile (fixes #146)
- version 1.14.3</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Fix translated format strings (bsc#1082711)
- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- BuildRequires:  libzypp-devel &gt;= 17.2.2
- Deprecate the use of asciidoc for new releases
- Introduce --allow-unsigned-rpm switch to install (bsc#1055533)
- version 1.14.4</changelog>
  <changelog author="ma@suse.de" date="1524744000">- search: Hint the user to the 'search-packages' subcommand, if the
  distribution provides it (bsc#1089994)
- clean: Don't report an error, if no repo is to be cleaned
  (bsc#1089504)
- Add --installroot flag (fixes #157)
- version 1.14.5</changelog>
  <changelog author="ma@suse.de" date="1527508800">- Fix broken display of detailed query results
- Fix broken search for items with a dash (bsc#907538, bsc#1043166,
  bsc#1070770)
- fix translation error (fixes #178)
- Disable repository operations when searching installed packages
  (bsc#1084525)
- Prevent nested calls to exit() if aborted by a signal (bsc#1092413)
- ansi.h: Prevent ESC sequence strings from going out of scope
  (bsc#1092413)
- version 1.14.6</changelog>
  <changelog author="ma@suse.de" date="1531137600">- Set error status if repositories passed to lr and ref are not
  known (BSC #1093103)
- Do not override table style in search (fixes #171)
- Fix out of bound read in MbsIterator (fixes #167)
- Add --supplements switch to search and info (fixes #184)
- Add setter functions for zypp cache related config values to
  ZConfig (fixes #180)
- BuildRequires: libzypp-devel &gt;= 17.3.2
- version 1.14.7</changelog>
  <changelog author="ma@suse.de" date="1533297600">- Support listing gpgkey URLs in repo files (bsc#1088037)
- Check for root privileges in zypper verify and si (bsc#1058515)
- XML &lt;install-summary&gt; attribute `packages-to-change` added
  (bsc#1102429)
- Add expert (allow-*) options to all installer commands
  (bsc#428822)
- Sort search results by multiple columns (bsc#1066215)
- man: Strengthen that `--config FILE' affects zypper.conf,
  not zypp.conf (bsc#1100028)
- BuildRequires:  libzypp-devel &gt;= 17.6.0
- version 1.14.8</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Notify user about unsupported rpm V3 keys in an old rpm database
  (bsc#1096217)
- man: Remove links to missing metadata section (fixes #140)
- Detect read only filesystem on system modifying operations
  (fixes #199)
- Use %license (bsc#1082318)
- Handle repo aliases containing multiple ':' in the PackageArgs
  parser (bsc #1041178)
- BuildRequires:  libzypp-devel &gt;= 17.6.3
- version 1.14.9</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Always set error status if any nr of unknown repositories are
  passed to lr and ref (bsc#1093103)
- version 1.14.10</changelog>
  <changelog author="ma@suse.de" date="1537358400">- Allow repo commands on transactional-server (bsc#1108999)
- BuildRequires:  libzypp-devel &gt;= 17.7.0 (dropped type application)
- Unite askUserToAccept*Key report callback (fixes #196)
- version 1.14.11</changelog>
</package>
<package pkgid="5cd06f73058e3f03e5edf692ec54434e5df27b9316719542139db8c20bdb60dc" name="zypper-aptitude" arch="noarch">
  <version epoch="0" ver="1.14.10" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1500292800">- Adapt download callback to report and handle unsigned packages
  (bsc#1038984, CVE-2017-7436)
- BuildRequires:  libzypp-devel &gt;= 16.15.0
- version 1.13.30</changelog>
  <changelog author="ma@suse.de" date="1502452800">- Improve signature check callback messages
  (bsc#1045735, CVE-2017-9269)
- man: Explain new gpgcheck options
- add/modify repo: Add options to tune the GPG check settings
  (bsc#1045735, CVE-2017-9269)
- BuildRequires:  libzypp-devel &gt;= 16.15.3
- version 1.13.31</changelog>
  <changelog author="ma@suse.de" date="1503662400">- GPG key: Also show a gpg keys subkeys (bsc#1008325)
- libzypp-devel &gt;= 16.15.4
- version 1.13.32</changelog>
  <changelog author="ma@suse.de" date="1504785600">- Return '107' if some rpm %post configuration script failed
  (bsc#1047233)
- version 1.13.33</changelog>
  <changelog author="ma@suse.de" date="1505131200">- Summary: Differ between unsupported and packages with unknown
  support status  (bsc#1057634)
- Use HTTPS by default for repository URLs derived from obs://
- version 1.13.34</changelog>
  <changelog author="ma@suse.de" date="1505390400">- Fix missing package names in installation report (bsc#1058695,
  fixes #134)
- version 1.13.35</changelog>
  <changelog author="ma@suse.de" date="1506081600">- Unify '(add|modify)(repo|service)' property related arguments.
  Fixed 'add' commands supporting to set only a subset of properties.
  Introduced '-f/-F' as preferred short option for --[no-]refresh
  in all four commands. (bsc#661410, bsc#1053671)
- version 1.13.36</changelog>
  <changelog author="ma@suse.de" date="1507204800">- Add summary hint if product is better updated by a different
  command. This is mainly used by rolling distributions like Tumbleweed
  to remind their users to use 'zypper dup' to update (not zypper up or
  patch). (bsc#1061384)
- version 1.13.37</changelog>
  <changelog author="bwiedemann@suse.com" date="1510920000">- Add apt alias for compat with new debian package management</changelog>
  <changelog author="ma@suse.de" date="1511438400">- Update manpage regarding custom repository variable fixes
  (bsc#1057640, bsc#1067605)
- Version 1.14.x for CODE-15, 1.13.x. is continued on SuSE-SLE-12-SP2-Branch
- version 1.14.0</changelog>
  <changelog author="ma@suse.de" date="1512043200">- Avoid writing ANSI Escape sequences on a dumb terminal (bsc#1055315)
- version 1.14.1</changelog>
  <changelog author="ma@suse.de" date="1517832000">- do not recommend cron (bsc#1079334)
- version 1.14.2</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Auto complete available repositories with the --from switch
- Fix: zypper bash completion expands non-existing options (bsc#1049825)
- Fix template to compile (fixes #146)
- version 1.14.3</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Fix translated format strings (bsc#1082711)
- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- BuildRequires:  libzypp-devel &gt;= 17.2.2
- Deprecate the use of asciidoc for new releases
- Introduce --allow-unsigned-rpm switch to install (bsc#1055533)
- version 1.14.4</changelog>
  <changelog author="ma@suse.de" date="1524744000">- search: Hint the user to the 'search-packages' subcommand, if the
  distribution provides it (bsc#1089994)
- clean: Don't report an error, if no repo is to be cleaned
  (bsc#1089504)
- Add --installroot flag (fixes #157)
- version 1.14.5</changelog>
  <changelog author="ma@suse.de" date="1527508800">- Fix broken display of detailed query results
- Fix broken search for items with a dash (bsc#907538, bsc#1043166,
  bsc#1070770)
- fix translation error (fixes #178)
- Disable repository operations when searching installed packages
  (bsc#1084525)
- Prevent nested calls to exit() if aborted by a signal (bsc#1092413)
- ansi.h: Prevent ESC sequence strings from going out of scope
  (bsc#1092413)
- version 1.14.6</changelog>
  <changelog author="ma@suse.de" date="1531137600">- Set error status if repositories passed to lr and ref are not
  known (BSC #1093103)
- Do not override table style in search (fixes #171)
- Fix out of bound read in MbsIterator (fixes #167)
- Add --supplements switch to search and info (fixes #184)
- Add setter functions for zypp cache related config values to
  ZConfig (fixes #180)
- BuildRequires: libzypp-devel &gt;= 17.3.2
- version 1.14.7</changelog>
  <changelog author="ma@suse.de" date="1533297600">- Support listing gpgkey URLs in repo files (bsc#1088037)
- Check for root privileges in zypper verify and si (bsc#1058515)
- XML &lt;install-summary&gt; attribute `packages-to-change` added
  (bsc#1102429)
- Add expert (allow-*) options to all installer commands
  (bsc#428822)
- Sort search results by multiple columns (bsc#1066215)
- man: Strengthen that `--config FILE' affects zypper.conf,
  not zypp.conf (bsc#1100028)
- BuildRequires:  libzypp-devel &gt;= 17.6.0
- version 1.14.8</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Notify user about unsupported rpm V3 keys in an old rpm database
  (bsc#1096217)
- man: Remove links to missing metadata section (fixes #140)
- Detect read only filesystem on system modifying operations
  (fixes #199)
- Use %license (bsc#1082318)
- Handle repo aliases containing multiple ':' in the PackageArgs
  parser (bsc #1041178)
- BuildRequires:  libzypp-devel &gt;= 17.6.3
- version 1.14.9</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Always set error status if any nr of unknown repositories are
  passed to lr and ref (bsc#1093103)
- version 1.14.10</changelog>
</package>
<package pkgid="f43c388d1c1319160a7f3dbce68be8ca959e0c0a884ddc29af6c4b5e4b0845c9" name="zypper-aptitude" arch="noarch">
  <version epoch="0" ver="1.14.11" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1502452800">- Improve signature check callback messages
  (bsc#1045735, CVE-2017-9269)
- man: Explain new gpgcheck options
- add/modify repo: Add options to tune the GPG check settings
  (bsc#1045735, CVE-2017-9269)
- BuildRequires:  libzypp-devel &gt;= 16.15.3
- version 1.13.31</changelog>
  <changelog author="ma@suse.de" date="1503662400">- GPG key: Also show a gpg keys subkeys (bsc#1008325)
- libzypp-devel &gt;= 16.15.4
- version 1.13.32</changelog>
  <changelog author="ma@suse.de" date="1504785600">- Return '107' if some rpm %post configuration script failed
  (bsc#1047233)
- version 1.13.33</changelog>
  <changelog author="ma@suse.de" date="1505131200">- Summary: Differ between unsupported and packages with unknown
  support status  (bsc#1057634)
- Use HTTPS by default for repository URLs derived from obs://
- version 1.13.34</changelog>
  <changelog author="ma@suse.de" date="1505390400">- Fix missing package names in installation report (bsc#1058695,
  fixes #134)
- version 1.13.35</changelog>
  <changelog author="ma@suse.de" date="1506081600">- Unify '(add|modify)(repo|service)' property related arguments.
  Fixed 'add' commands supporting to set only a subset of properties.
  Introduced '-f/-F' as preferred short option for --[no-]refresh
  in all four commands. (bsc#661410, bsc#1053671)
- version 1.13.36</changelog>
  <changelog author="ma@suse.de" date="1507204800">- Add summary hint if product is better updated by a different
  command. This is mainly used by rolling distributions like Tumbleweed
  to remind their users to use 'zypper dup' to update (not zypper up or
  patch). (bsc#1061384)
- version 1.13.37</changelog>
  <changelog author="bwiedemann@suse.com" date="1510920000">- Add apt alias for compat with new debian package management</changelog>
  <changelog author="ma@suse.de" date="1511438400">- Update manpage regarding custom repository variable fixes
  (bsc#1057640, bsc#1067605)
- Version 1.14.x for CODE-15, 1.13.x. is continued on SuSE-SLE-12-SP2-Branch
- version 1.14.0</changelog>
  <changelog author="ma@suse.de" date="1512043200">- Avoid writing ANSI Escape sequences on a dumb terminal (bsc#1055315)
- version 1.14.1</changelog>
  <changelog author="ma@suse.de" date="1517832000">- do not recommend cron (bsc#1079334)
- version 1.14.2</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Auto complete available repositories with the --from switch
- Fix: zypper bash completion expands non-existing options (bsc#1049825)
- Fix template to compile (fixes #146)
- version 1.14.3</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Fix translated format strings (bsc#1082711)
- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- BuildRequires:  libzypp-devel &gt;= 17.2.2
- Deprecate the use of asciidoc for new releases
- Introduce --allow-unsigned-rpm switch to install (bsc#1055533)
- version 1.14.4</changelog>
  <changelog author="ma@suse.de" date="1524744000">- search: Hint the user to the 'search-packages' subcommand, if the
  distribution provides it (bsc#1089994)
- clean: Don't report an error, if no repo is to be cleaned
  (bsc#1089504)
- Add --installroot flag (fixes #157)
- version 1.14.5</changelog>
  <changelog author="ma@suse.de" date="1527508800">- Fix broken display of detailed query results
- Fix broken search for items with a dash (bsc#907538, bsc#1043166,
  bsc#1070770)
- fix translation error (fixes #178)
- Disable repository operations when searching installed packages
  (bsc#1084525)
- Prevent nested calls to exit() if aborted by a signal (bsc#1092413)
- ansi.h: Prevent ESC sequence strings from going out of scope
  (bsc#1092413)
- version 1.14.6</changelog>
  <changelog author="ma@suse.de" date="1531137600">- Set error status if repositories passed to lr and ref are not
  known (BSC #1093103)
- Do not override table style in search (fixes #171)
- Fix out of bound read in MbsIterator (fixes #167)
- Add --supplements switch to search and info (fixes #184)
- Add setter functions for zypp cache related config values to
  ZConfig (fixes #180)
- BuildRequires: libzypp-devel &gt;= 17.3.2
- version 1.14.7</changelog>
  <changelog author="ma@suse.de" date="1533297600">- Support listing gpgkey URLs in repo files (bsc#1088037)
- Check for root privileges in zypper verify and si (bsc#1058515)
- XML &lt;install-summary&gt; attribute `packages-to-change` added
  (bsc#1102429)
- Add expert (allow-*) options to all installer commands
  (bsc#428822)
- Sort search results by multiple columns (bsc#1066215)
- man: Strengthen that `--config FILE' affects zypper.conf,
  not zypp.conf (bsc#1100028)
- BuildRequires:  libzypp-devel &gt;= 17.6.0
- version 1.14.8</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Notify user about unsupported rpm V3 keys in an old rpm database
  (bsc#1096217)
- man: Remove links to missing metadata section (fixes #140)
- Detect read only filesystem on system modifying operations
  (fixes #199)
- Use %license (bsc#1082318)
- Handle repo aliases containing multiple ':' in the PackageArgs
  parser (bsc #1041178)
- BuildRequires:  libzypp-devel &gt;= 17.6.3
- version 1.14.9</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Always set error status if any nr of unknown repositories are
  passed to lr and ref (bsc#1093103)
- version 1.14.10</changelog>
  <changelog author="ma@suse.de" date="1537358400">- Allow repo commands on transactional-server (bsc#1108999)
- BuildRequires:  libzypp-devel &gt;= 17.7.0 (dropped type application)
- Unite askUserToAccept*Key report callback (fixes #196)
- version 1.14.11</changelog>
</package>
<package pkgid="39f701b850ab5a59beff1b17b6b905bfb49d21bec61b1b35645afd2517d9c2b7" name="zypper-log" arch="noarch">
  <version epoch="0" ver="1.14.10" rel="lp150.2.3.1"/>
  <changelog author="ma@suse.de" date="1500292800">- Adapt download callback to report and handle unsigned packages
  (bsc#1038984, CVE-2017-7436)
- BuildRequires:  libzypp-devel &gt;= 16.15.0
- version 1.13.30</changelog>
  <changelog author="ma@suse.de" date="1502452800">- Improve signature check callback messages
  (bsc#1045735, CVE-2017-9269)
- man: Explain new gpgcheck options
- add/modify repo: Add options to tune the GPG check settings
  (bsc#1045735, CVE-2017-9269)
- BuildRequires:  libzypp-devel &gt;= 16.15.3
- version 1.13.31</changelog>
  <changelog author="ma@suse.de" date="1503662400">- GPG key: Also show a gpg keys subkeys (bsc#1008325)
- libzypp-devel &gt;= 16.15.4
- version 1.13.32</changelog>
  <changelog author="ma@suse.de" date="1504785600">- Return '107' if some rpm %post configuration script failed
  (bsc#1047233)
- version 1.13.33</changelog>
  <changelog author="ma@suse.de" date="1505131200">- Summary: Differ between unsupported and packages with unknown
  support status  (bsc#1057634)
- Use HTTPS by default for repository URLs derived from obs://
- version 1.13.34</changelog>
  <changelog author="ma@suse.de" date="1505390400">- Fix missing package names in installation report (bsc#1058695,
  fixes #134)
- version 1.13.35</changelog>
  <changelog author="ma@suse.de" date="1506081600">- Unify '(add|modify)(repo|service)' property related arguments.
  Fixed 'add' commands supporting to set only a subset of properties.
  Introduced '-f/-F' as preferred short option for --[no-]refresh
  in all four commands. (bsc#661410, bsc#1053671)
- version 1.13.36</changelog>
  <changelog author="ma@suse.de" date="1507204800">- Add summary hint if product is better updated by a different
  command. This is mainly used by rolling distributions like Tumbleweed
  to remind their users to use 'zypper dup' to update (not zypper up or
  patch). (bsc#1061384)
- version 1.13.37</changelog>
  <changelog author="bwiedemann@suse.com" date="1510920000">- Add apt alias for compat with new debian package management</changelog>
  <changelog author="ma@suse.de" date="1511438400">- Update manpage regarding custom repository variable fixes
  (bsc#1057640, bsc#1067605)
- Version 1.14.x for CODE-15, 1.13.x. is continued on SuSE-SLE-12-SP2-Branch
- version 1.14.0</changelog>
  <changelog author="ma@suse.de" date="1512043200">- Avoid writing ANSI Escape sequences on a dumb terminal (bsc#1055315)
- version 1.14.1</changelog>
  <changelog author="ma@suse.de" date="1517832000">- do not recommend cron (bsc#1079334)
- version 1.14.2</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Auto complete available repositories with the --from switch
- Fix: zypper bash completion expands non-existing options (bsc#1049825)
- Fix template to compile (fixes #146)
- version 1.14.3</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Fix translated format strings (bsc#1082711)
- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- BuildRequires:  libzypp-devel &gt;= 17.2.2
- Deprecate the use of asciidoc for new releases
- Introduce --allow-unsigned-rpm switch to install (bsc#1055533)
- version 1.14.4</changelog>
  <changelog author="ma@suse.de" date="1524744000">- search: Hint the user to the 'search-packages' subcommand, if the
  distribution provides it (bsc#1089994)
- clean: Don't report an error, if no repo is to be cleaned
  (bsc#1089504)
- Add --installroot flag (fixes #157)
- version 1.14.5</changelog>
  <changelog author="ma@suse.de" date="1527508800">- Fix broken display of detailed query results
- Fix broken search for items with a dash (bsc#907538, bsc#1043166,
  bsc#1070770)
- fix translation error (fixes #178)
- Disable repository operations when searching installed packages
  (bsc#1084525)
- Prevent nested calls to exit() if aborted by a signal (bsc#1092413)
- ansi.h: Prevent ESC sequence strings from going out of scope
  (bsc#1092413)
- version 1.14.6</changelog>
  <changelog author="ma@suse.de" date="1531137600">- Set error status if repositories passed to lr and ref are not
  known (BSC #1093103)
- Do not override table style in search (fixes #171)
- Fix out of bound read in MbsIterator (fixes #167)
- Add --supplements switch to search and info (fixes #184)
- Add setter functions for zypp cache related config values to
  ZConfig (fixes #180)
- BuildRequires: libzypp-devel &gt;= 17.3.2
- version 1.14.7</changelog>
  <changelog author="ma@suse.de" date="1533297600">- Support listing gpgkey URLs in repo files (bsc#1088037)
- Check for root privileges in zypper verify and si (bsc#1058515)
- XML &lt;install-summary&gt; attribute `packages-to-change` added
  (bsc#1102429)
- Add expert (allow-*) options to all installer commands
  (bsc#428822)
- Sort search results by multiple columns (bsc#1066215)
- man: Strengthen that `--config FILE' affects zypper.conf,
  not zypp.conf (bsc#1100028)
- BuildRequires:  libzypp-devel &gt;= 17.6.0
- version 1.14.8</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Notify user about unsupported rpm V3 keys in an old rpm database
  (bsc#1096217)
- man: Remove links to missing metadata section (fixes #140)
- Detect read only filesystem on system modifying operations
  (fixes #199)
- Use %license (bsc#1082318)
- Handle repo aliases containing multiple ':' in the PackageArgs
  parser (bsc #1041178)
- BuildRequires:  libzypp-devel &gt;= 17.6.3
- version 1.14.9</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Always set error status if any nr of unknown repositories are
  passed to lr and ref (bsc#1093103)
- version 1.14.10</changelog>
</package>
<package pkgid="146f3045ea771090ffc54ab28cb5364109c7881932f464d2e36d6316db2839a4" name="zypper-log" arch="noarch">
  <version epoch="0" ver="1.14.11" rel="lp150.2.6.1"/>
  <changelog author="ma@suse.de" date="1502452800">- Improve signature check callback messages
  (bsc#1045735, CVE-2017-9269)
- man: Explain new gpgcheck options
- add/modify repo: Add options to tune the GPG check settings
  (bsc#1045735, CVE-2017-9269)
- BuildRequires:  libzypp-devel &gt;= 16.15.3
- version 1.13.31</changelog>
  <changelog author="ma@suse.de" date="1503662400">- GPG key: Also show a gpg keys subkeys (bsc#1008325)
- libzypp-devel &gt;= 16.15.4
- version 1.13.32</changelog>
  <changelog author="ma@suse.de" date="1504785600">- Return '107' if some rpm %post configuration script failed
  (bsc#1047233)
- version 1.13.33</changelog>
  <changelog author="ma@suse.de" date="1505131200">- Summary: Differ between unsupported and packages with unknown
  support status  (bsc#1057634)
- Use HTTPS by default for repository URLs derived from obs://
- version 1.13.34</changelog>
  <changelog author="ma@suse.de" date="1505390400">- Fix missing package names in installation report (bsc#1058695,
  fixes #134)
- version 1.13.35</changelog>
  <changelog author="ma@suse.de" date="1506081600">- Unify '(add|modify)(repo|service)' property related arguments.
  Fixed 'add' commands supporting to set only a subset of properties.
  Introduced '-f/-F' as preferred short option for --[no-]refresh
  in all four commands. (bsc#661410, bsc#1053671)
- version 1.13.36</changelog>
  <changelog author="ma@suse.de" date="1507204800">- Add summary hint if product is better updated by a different
  command. This is mainly used by rolling distributions like Tumbleweed
  to remind their users to use 'zypper dup' to update (not zypper up or
  patch). (bsc#1061384)
- version 1.13.37</changelog>
  <changelog author="bwiedemann@suse.com" date="1510920000">- Add apt alias for compat with new debian package management</changelog>
  <changelog author="ma@suse.de" date="1511438400">- Update manpage regarding custom repository variable fixes
  (bsc#1057640, bsc#1067605)
- Version 1.14.x for CODE-15, 1.13.x. is continued on SuSE-SLE-12-SP2-Branch
- version 1.14.0</changelog>
  <changelog author="ma@suse.de" date="1512043200">- Avoid writing ANSI Escape sequences on a dumb terminal (bsc#1055315)
- version 1.14.1</changelog>
  <changelog author="ma@suse.de" date="1517832000">- do not recommend cron (bsc#1079334)
- version 1.14.2</changelog>
  <changelog author="bzeller@suse.de" date="1519905600">- Auto complete available repositories with the --from switch
- Fix: zypper bash completion expands non-existing options (bsc#1049825)
- Fix template to compile (fixes #146)
- version 1.14.3</changelog>
  <changelog author="ma@suse.de" date="1520942400">- Fix translated format strings (bsc#1082711)
- Protect code against broken translations (bsc#1082711)
- Fix broken translated format strings
- BuildRequires:  libzypp-devel &gt;= 17.2.2
- Deprecate the use of asciidoc for new releases
- Introduce --allow-unsigned-rpm switch to install (bsc#1055533)
- version 1.14.4</changelog>
  <changelog author="ma@suse.de" date="1524744000">- search: Hint the user to the 'search-packages' subcommand, if the
  distribution provides it (bsc#1089994)
- clean: Don't report an error, if no repo is to be cleaned
  (bsc#1089504)
- Add --installroot flag (fixes #157)
- version 1.14.5</changelog>
  <changelog author="ma@suse.de" date="1527508800">- Fix broken display of detailed query results
- Fix broken search for items with a dash (bsc#907538, bsc#1043166,
  bsc#1070770)
- fix translation error (fixes #178)
- Disable repository operations when searching installed packages
  (bsc#1084525)
- Prevent nested calls to exit() if aborted by a signal (bsc#1092413)
- ansi.h: Prevent ESC sequence strings from going out of scope
  (bsc#1092413)
- version 1.14.6</changelog>
  <changelog author="ma@suse.de" date="1531137600">- Set error status if repositories passed to lr and ref are not
  known (BSC #1093103)
- Do not override table style in search (fixes #171)
- Fix out of bound read in MbsIterator (fixes #167)
- Add --supplements switch to search and info (fixes #184)
- Add setter functions for zypp cache related config values to
  ZConfig (fixes #180)
- BuildRequires: libzypp-devel &gt;= 17.3.2
- version 1.14.7</changelog>
  <changelog author="ma@suse.de" date="1533297600">- Support listing gpgkey URLs in repo files (bsc#1088037)
- Check for root privileges in zypper verify and si (bsc#1058515)
- XML &lt;install-summary&gt; attribute `packages-to-change` added
  (bsc#1102429)
- Add expert (allow-*) options to all installer commands
  (bsc#428822)
- Sort search results by multiple columns (bsc#1066215)
- man: Strengthen that `--config FILE' affects zypper.conf,
  not zypp.conf (bsc#1100028)
- BuildRequires:  libzypp-devel &gt;= 17.6.0
- version 1.14.8</changelog>
  <changelog author="ma@suse.de" date="1535630400">- Notify user about unsupported rpm V3 keys in an old rpm database
  (bsc#1096217)
- man: Remove links to missing metadata section (fixes #140)
- Detect read only filesystem on system modifying operations
  (fixes #199)
- Use %license (bsc#1082318)
- Handle repo aliases containing multiple ':' in the PackageArgs
  parser (bsc #1041178)
- BuildRequires:  libzypp-devel &gt;= 17.6.3
- version 1.14.9</changelog>
  <changelog author="ma@suse.de" date="1536235200">- Always set error status if any nr of unknown repositories are
  passed to lr and ref (bsc#1093103)
- version 1.14.10</changelog>
  <changelog author="ma@suse.de" date="1537358400">- Allow repo commands on transactional-server (bsc#1108999)
- BuildRequires:  libzypp-devel &gt;= 17.7.0 (dropped type application)
- Unite askUserToAccept*Key report callback (fixes #196)
- version 1.14.11</changelog>
</package>
</otherdata>